Function at 0x69cd618c
Capabilities:
Contain obfuscated stackstrings
Create thread
Resume thread
Suspend thread
Terminate process
Terminate thread

Disassembly:
push ebp
mov ebp, esp
push esi
push ebx
sub esp, 0x60
mov dword [ebp - 0x3c], ecx
mov word [ebp - 0x30], 0x45
mov word [ebp - 0x2e], 0x52
mov word [ebp - 0x2c], 0x52
mov word [ebp - 0x2a], 0x4f
mov word [ebp - 0x28], 0x52
mov word [ebp - 0x26], 0x3a
mov word [ebp - 0x24], 0x20
mov word [ebp - 0x22], 0x30
mov word [ebp - 0x20], 0x78
mov word [ebp - 0x1e], 0x30
mov word [ebp - 0x1c], 0x30
mov word [ebp - 0x1a], 0x30
mov word [ebp - 0x18], 0x30
mov word [ebp - 0x16], 0x30
mov word [ebp - 0x14], 0x30
mov word [ebp - 0x12], 0x30
mov word [ebp - 0x10], 0x30
mov word [ebp - 0xe], 0
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x51cc], 0x6484
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
add eax, 0x10
mov edx, dword [eax]
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x14234], edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x14234]
test eax, eax
jns 0x69cd6283
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x146cc], 0x4fa0
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x146c4], 0x4ae2
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x146c8], 0x4ea0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x146cc]
mov edx, dword [ebp - 0x3c]
add edx, 0x146d0
mov dword [esp + 8], eax
mov dword [esp + 4], 0x69cdf7e0
mov dword [esp], edx
call fcn.69cc1c61
jmp 0x69cd62e2
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x14234]
and eax, 0x40000000
test eax, eax
je 0x69cd62e2
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x146cc], 0x4730
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x146c4], 0x426c
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x146c8], 0x462a
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x146cc]
mov edx, dword [ebp - 0x3c]
add edx, 0x146d0
mov dword [esp + 8], eax
mov dword [esp + 4], 0x69cdb080
mov dword [esp], edx
call fcn.69cc1c61
mov eax, dword [ebp - 0x3c]
lea ebx, [eax + 0x146cc]
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax + 0x28fb74]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x146cc]
mov ecx, dword [ebp - 0x3c]
add ecx, 0x146d0
mov dword [esp + 0xc], ebx
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.69cc2fd5
test eax, eax
setne al
test al, al
je 0x69cd632d
mov eax, 0xffffffea
jmp 0x69cd6e90
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
mov dword [eax], 0xffffffff
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
mov edx, dword [ebp - 0x3c]
mov edx, dword [edx + 0x28fb74]
add edx, 4
mov eax, dword [eax]
mov dword [edx], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea ecx, [eax + 4]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea edx, [eax + 8]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea ecx, [eax + 8]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea edx, [eax + 0xc]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea ecx, [eax + 0xc]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea edx, [eax + 0x10]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea ecx, [eax + 0x10]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea edx, [eax + 0x14]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea ecx, [eax + 0x14]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea edx, [eax + 0x18]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea ecx, [eax + 0x18]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea edx, [eax + 0x1c]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ebp - 0x3c]
lea edx, [eax + 0x28fad0]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x146cc]
mov ecx, eax
mov eax, dword [ebp - 0x3c]
add eax, 0x146d0
mov dword [esp + 8], edx
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.69cc163f
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x14234]
test eax, eax
jns 0x69cd6488
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fad0]
mov edx, 0xc43b4136
cmp eax, edx
jne 0x69cd647e
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fad4]
mov edx, 0x2f806a68
cmp eax, edx
jne 0x69cd647e
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fad8]
mov edx, 0xbb0e8152
cmp eax, edx
jne 0x69cd647e
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fadc]
mov edx, 0x39f60d0e
cmp eax, edx
je 0x69cd64ec
mov eax, 0xffffffed
jmp 0x69cd6e90
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x14234]
and eax, 0x40000000
test eax, eax
je 0x69cd64ec
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fad0]
mov edx, 0x302635d7
cmp eax, edx
jne 0x69cd64e2
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fad4]
mov edx, 0xc58425ec
cmp eax, edx
jne 0x69cd64e2
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fad8]
mov edx, 0x265c999
cmp eax, edx
jne 0x69cd64e2
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fadc]
mov edx, 0xe5032ed8
cmp eax, edx
je 0x69cd64ec
mov eax, 0xffffffed
jmp 0x69cd6e90
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
mov dword [eax], 0xffffffff
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
mov edx, dword [ebp - 0x3c]
mov edx, dword [edx + 0x28fb74]
add edx, 4
mov eax, dword [eax]
mov dword [edx], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea ecx, [eax + 4]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea edx, [eax + 8]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea ecx, [eax + 8]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea edx, [eax + 0xc]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea ecx, [eax + 0xc]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea edx, [eax + 0x10]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea ecx, [eax + 0x10]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea edx, [eax + 0x14]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea ecx, [eax + 0x14]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea edx, [eax + 0x18]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea ecx, [eax + 0x18]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x28fb74]
lea edx, [eax + 0x1c]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ebp - 0x3c]
lea edx, [eax + 0x28fb74]
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x28fb74], edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x146cc]
lea edx, [eax + 0x146c0]
mov eax, dword [ebp - 0x3c]
add eax, edx
add eax, 0x10
mov dword [eax], 0
mov eax, dword [ebp - 0x3c]
lea edx, [eax + 0x28fb60]
mov eax, dword [ebp - 0x3c]
add eax, 0x28fb7c
mov dword [esp + 8], edx
mov dword [esp + 4], 0x10
mov dword [esp], eax
call fcn.69cc163f
mov eax, dword [ebp - 0x3c]
mov ecx, eax
call fcn.69cd49f2
test eax, eax
setne al
test al, al
je 0x69cd6656
mov eax, dword [ebp - 0x3c]
lea edx, [eax + 0x51d4]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4e84]
mov dword [esp + 0xc], 0x40010
mov dword [esp + 8], edx
mov dword [esp + 4], str.Sucedi
mov dword [esp], eax
mov eax, dword [sym.imp.USER32.dll_MessageBoxW]
call eax
sub esp, 0x10
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0xa544], 0
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], 0
mov dword [esp], 0x69ce6408
mov ecx, eax
call fcn.69cd5360
sub esp, 8
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x4ea8], 0xffffffff
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x4eac], 0
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0xa548], 0
mov eax, dword [ebp - 0x3c]
lea edx, [eax + 0x2b24]
mov eax, dword [ebp - 0x3c]
add eax, 0x50e4
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.69cc28ed
mov edx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x5184], edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x5184]
test eax, eax
je 0x69cd66a6
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax + 0x3d6c]
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x5184], edx
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x4ea8], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4ea8]
cmp eax, 7
ja 0x69cd6795
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0xa548]
not eax
mov edx, eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4ea8]
mov ecx, eax
shr edx, cl
mov eax, edx
and eax, 1
test eax, eax
je 0x69cd677b
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x51b4]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_ResumeThread]
call eax
sub esp, 4
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax + 0xa548]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4ea8]
mov ebx, 1
mov ecx, eax
shl ebx, cl
mov eax, ebx
or edx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0xa548], edx
jmp 0x69cd6795
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4ea8]
lea edx, [eax + 1]
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x4ea8], edx
jmp 0x69cd670a
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4ea8]
cmp eax, 8
je 0x69cd6e64
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x5184]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0x1fffff
mov eax, dword [sym.imp.KERNEL32.dll_OpenProcess]
call eax
sub esp, 0xc
mov edx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x51a4], edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x51a4]
test eax, eax
je 0x69cd6d7b
mov eax, dword [ebp - 0x3c]
lea ecx, [eax + 0x4d6c]
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax + 0x51cc]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x51a4]
mov dword [esp + 0xc], 0
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.69cc2bc3
mov edx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x51c8], edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x51c8]
test eax, eax
jle 0x69cd6d21
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4ea8]
mov edx, dword [ebp - 0x3c]
imul eax, eax, 0xa58
add eax, edx
add eax, 0x58d0
mov word [eax], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4ea8]
mov edx, dword [ebp - 0x3c]
imul eax, eax, 0xa58
add eax, edx
add eax, 0x54cc
mov word [eax], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4ea8]
imul eax, eax, 0xa58
lea edx, [eax + 0x58c0]
mov eax, dword [ebp - 0x3c]
add eax, edx
add eax, 0x10
mov edx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x13fd8], edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4ea8]
imul eax, eax, 0xa58
lea edx, [eax + 0x54c0]
mov eax, dword [ebp - 0x3c]
add eax, edx
add eax, 0xc
mov edx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x13fdc], edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4ea8]
imul eax, eax, 0xa58
lea edx, [eax + 0x5490]
mov eax, dword [ebp - 0x3c]
add eax, edx
lea edx, [eax + 0x18]
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x13fe0], edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4ea8]
mov edx, dword [ebp - 0x3c]
imul eax, eax, 0xa58
add eax, edx
add eax, 0x54a8
mov dword [eax], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4ea8]
mov edx, dword [ebp - 0x3c]
imul eax, eax, 0xa58
add eax, edx
add eax, 0x54ac
mov dword [eax], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4ea8]
mov edx, dword [ebp - 0x3c]
imul eax, eax, 0xa58
add eax, edx
add eax, 0x54b0
mov dword [eax], 0
mov eax, dword [ebp - 0x3c]
lea esi, [eax + 0x5190]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax + 0x51cc]
mov eax, dword [ebp - 0x3c]
lea ebx, [eax + 0x1364c]
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax + 0x51c8]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x51a4]
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 8], ebx
mov dword [esp + 4], edx
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call eax
sub esp, 0x14
mov edx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x51c4], edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x51c4]
test eax, eax
je 0x69cd6cfe
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax + 0x5190]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x51cc]
cmp edx, eax
jne 0x69cd6cfe
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x51c8]
lea edx, [eax + 0x1084]
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x5278], edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4ea8]
imul eax, eax, 0xa58
lea edx, [eax + 0x54b0]
mov eax, dword [ebp - 0x3c]
add eax, edx
lea esi, [eax + 0x10]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax + 0x51c8]
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax + 0x5278]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x51a4]
mov ebx, dword [ebp - 0x3c]
mov ebx, dword [ebx + 0x4ea8]
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], 4
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
call eax
sub esp, 0x1c
mov ecx, eax
mov edx, dword [ebp - 0x3c]
imul eax, ebx, 0xa58
add eax, edx
add eax, 0x54bc
mov dword [eax], ecx
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4ea8]
mov edx, dword [ebp - 0x3c]
imul eax, eax, 0xa58
add eax, edx
add eax, 0x54bc
mov eax, dword [eax]
test eax, eax
je 0x69cd6cdb
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4ea8]
mov edx, dword [ebp - 0x3c]
imul eax, eax, 0xa58
add eax, edx
add eax, 0x54bc
mov eax, dword [eax]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_ResumeThread]
call eax
sub esp, 4
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax + 0x4ea8]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x5184]
mov ecx, dword [ebp - 0x3c]
imul edx, edx, 0xa58
add edx, ecx
add edx, 0x54c4
mov dword [edx], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4ea8]
mov edx, dword [ebp - 0x3c]
imul eax, eax, 0xa58
add eax, edx
add eax, 0x54a4
mov dword [eax], 0
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax + 0x4ea8]
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x4eac], edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4eac]
imul eax, eax, 0xa58
lea edx, [eax + 0x54b0]
mov eax, dword [ebp - 0x3c]
add eax, edx
lea edx, [eax + 0x10]
mov eax, dword [ebp - 0x3c]
mov ebx, dword [eax + 0x4eac]
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], 4
mov eax, dword [ebp - 0x3c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x69cd6179
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
mov ecx, eax
mov edx, dword [ebp - 0x3c]
imul eax, ebx, 0xa58
add eax, edx
add eax, 0x54b4
mov dword [eax], ecx
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4eac]
mov edx, dword [ebp - 0x3c]
imul eax, eax, 0xa58
add eax, edx
add eax, 0x54b4
mov eax, dword [eax]
test eax, eax
je 0x69cd6c60
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4ea8]
mov edx, dword [ebp - 0x3c]
imul eax, eax, 0xa58
add eax, edx
add eax, 0x54bc
mov eax, dword [eax]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x51a4]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0xa53c]
mov ecx, eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4eac]
mov edx, dword [ebp - 0x3c]
imul eax, eax, 0xa58
add eax, edx
add eax, 0x540c
mov eax, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [sym.imp.USER32.dll_ShowWindow]
call eax
sub esp, 8
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4eac]
mov edx, dword [ebp - 0x3c]
imul eax, eax, 0xa58
add eax, edx
add eax, 0x54b4
mov eax, dword [eax]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_ResumeThread]
call eax
sub esp, 4
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x14234]
test eax, eax
jne 0x69cd6e8a
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x51b8]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_SuspendThread]
call eax
sub esp, 4
jmp 0x69cd6e8a
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4ea8]
mov edx, dword [ebp - 0x3c]
imul eax, eax, 0xa58
add eax, edx
add eax, 0x54bc
mov eax, dword [eax]
mov dword [esp + 4], 1
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_TerminateThread]
call eax
sub esp, 8
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4ea8]
mov edx, dword [ebp - 0x3c]
imul eax, eax, 0xa58
add eax, edx
add eax, 0x54bc
mov eax, dword [eax]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov word [ebp - 0x10], 0x36
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], 1
lea edx, [ebp - 0x30]
mov dword [esp], edx
mov ecx, eax
call fcn.69cd5360
sub esp, 8
jmp 0x69cd6d42
mov word [ebp - 0x10], 0x35
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], 1
lea edx, [ebp - 0x30]
mov dword [esp], edx
mov ecx, eax
call fcn.69cd5360
sub esp, 8
jmp 0x69cd6d42
mov word [ebp - 0x10], 0x34
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], 1
lea edx, [ebp - 0x30]
mov dword [esp], edx
mov ecx, eax
call fcn.69cd5360
sub esp, 8
jmp 0x69cd6d42
mov word [ebp - 0x10], 0x33
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], 1
lea edx, [ebp - 0x30]
mov dword [esp], edx
mov ecx, eax
call fcn.69cd5360
sub esp, 8
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x51a4]
mov dword [esp + 4], 0
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_TerminateProcess]
call eax
sub esp, 8
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x51a4]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
jmp 0x69cd6e0e
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x5184]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 1
mov eax, dword [sym.imp.KERNEL32.dll_OpenProcess]
call eax
sub esp, 0xc
mov edx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x51a4], edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x51a4]
test eax, eax
je 0x69cd6ded
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x51a4]
mov dword [esp + 4], 0
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_TerminateProcess]
call eax
sub esp, 8
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x51a4]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov word [ebp - 0x10], 0x32
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], 1
lea edx, [ebp - 0x30]
mov dword [esp], edx
mov ecx, eax
call fcn.69cd5360
sub esp, 8
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax + 0xa548]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x4eac]
mov ebx, 1
mov ecx, eax
shl ebx, cl
mov eax, ebx
not eax
and edx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0xa548], edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0xa548]
test eax, eax
jne 0x69cd66a6
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x51b4]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_SuspendThread]
call eax
sub esp, 4
jmp 0x69cd66a6
mov word [ebp - 0x10], 0x31
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], 1
lea edx, [ebp - 0x30]
mov dword [esp], edx
mov ecx, eax
call fcn.69cd5360
sub esp, 8
jmp 0x69cd66a6
nop
jmp 0x69cd66a6
lea esp, [ebp - 8]
pop ebx
pop esi
pop ebp
ret