Function at 0x411bf6
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov dword [ebp - 4], 0
push 8
call fcn.0044359d
add esp, 4
mov dword [ebp - 8], eax
mov edi, eax
mov esi, 0x472784
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov eax, 0x49a3e2
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 0x49d86b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + pe_nt_image_headers32]
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x411c87
push ebx
call fcn.004435a3
add esp, 4
mov ebx, dword [0x49d863]
add ebx, 0x28
mov dword [ebp - 0x2c], ebx
push dword [ebp - 0x2c]
push 0x49d96b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
push 0x49d96b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jle 0x411ff1
mov eax, 0x49a3fc
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 0x49d86b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + pe_nt_image_headers32]
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x411cef
push ebx
call fcn.004435a3
add esp, 4
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
push 0x49d96b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x10]
test eax, eax
je 0x411fe5
mov eax, dword [ebp - 4]
xor ecx, ecx
push eax
lea eax, [ebp - 0xc]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x411fd6
mov ebx, dword [0x49d7ff]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 8]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0xc]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x30]
push dword [ebx]
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov ecx, 2
call fcn.0040106b
add esp, 8
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x411d79
push ebx
call fcn.004435a3
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push 0x80000301
push 0
push 0x20
push OleUIBusyA
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x411d9c
mov eax, 0x4722d5
push eax
push 2
mov ebx, 0x260
call fcn.004462f0
add esp, 0x1c
push OleUIBusyA
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x411dc2
mov eax, 0x4722d5
push eax
push 1
mov ebx, 0x268
call fcn.00446c30
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x411dec
push ebx
call fcn.004435a3
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push htons
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x411e03
mov eax, 0x472784
push eax
push 1
mov ebx, 0x194
call fcn.00446ca0
add esp, 0x10
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x411e2f
mov dword [ebp - 0x1c], 0
jmp 0x411e4f
lea eax, [ebp - 0x14]
push eax
call fcn.00402f16
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x18]
push dword [ebp - 0x2c]
push dword [0x49d813]
call fcn.0041243e
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 8]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0xc]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
cmp dword [ebp - 0x1c], eax
je 0x411fce
mov ebx, dword [0x49d93f]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
inc dword [ebx]
mov ebx, dword [ebp - 8]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0xc]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x2c], ebx
push 0x49d93b
push 4
mov eax, 2
call fcn.00445c30
add esp, 8
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
mov dword [ebp - 0x30], eax
mov ebx, dword [0x49d93b]
mov dword [ebp - 0x34], ebx
call fcn.0040fdde
mov dword [ebp - 0x38], ecx
mov edi, dword [ebp - 0x34]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x411eeb
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x38]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x34]
call fcn.004435af
add esp, 8
mov dword [0x49d93b], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x38]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x30]
push edi
push eax
push 0x14
call fcn.0044359d
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x411f45
push eax
mov ebx, eax
call fcn.00401000
inc eax
push eax
call fcn.0044359d
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
pop eax
pop edi
mov dword [edi], eax
lea eax, [ebp - 0x10]
push eax
call fcn.004024cf
test eax, eax
je 0x411f8a
push OleUIBusyA
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x411f77
mov eax, 0x4722d5
push eax
push 1
mov ebx, 0x238
call fcn.00447550
add esp, 0x10
lea eax, [ebp - 0x10]
push eax
call fcn.00412473
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x411faa
push ebx
call fcn.004435a3
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
call fcn.004024cf
and eax, 1
xor eax, 1
test eax, eax
je 0x411fce
lea eax, [ebp - 0x20]
push eax
call fcn.00402501
pop eax
pop ebx
pop ecx
jmp 0x411d19
add esp, 0xc
mov dword [ebp - 0x24], 1
jmp 0x411fec
mov dword [ebp - 0x24], 0
jmp 0x411ff8
mov dword [ebp - 0x24], 0
cmp dword [ebp - 0x24], 0
je 0x4122eb
mov ebx, dword [0x49d93f]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], 0
jle 0x4121f0
mov ebx, dword [0x49d93f]
mov dword [ebp - 0x2c], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
push 1
mov ebx, 0x168
call fcn.004465e0
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0x49a416
push dword [ebp - 0x30]
push 0x49a419
mov ecx, 3
call fcn.0040106b
add esp, 0xc
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41206e
push ebx
call fcn.004435a3
add esp, 4
push 1
lea eax, [ebp - 0x34]
push eax
push 0x49d95b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1a0]
mov ebx, eax
test ebx, ebx
je 0x412095
push ebx
call fcn.004435a3
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4120a5
push ebx
call fcn.004435a3
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
push 0xff0000
push 0x49d95b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x188]
mov ebx, dword [0x49d93f]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
push 0
push 0x49d963
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x194]
push 1
push 0
push 0x49d963
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x190]
mov eax, 0x49a41c
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 0x49d86b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + pe_nt_image_headers32]
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x412136
push ebx
call fcn.004435a3
add esp, 4
push 0
push 0
push 0
push 0x412e3d
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jle 0x412189
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
mov dword [ebp - 0x28], 0
jmp 0x4123b8
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 0x10
push 1
mov eax, 0x49a3b1
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, 0x49a43c
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push 1
push dword [0x49d943]
push 0x49d83b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4121db
push ebx
call fcn.004435a3
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4121eb
push ebx
call fcn.004435a3
add esp, 4
jmp 0x4122e6
mov eax, 0x49a45f
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 0x49d86b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + pe_nt_image_headers32]
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41221e
push ebx
call fcn.004435a3
add esp, 4
push 1
mov eax, 0x49a48a
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 0x49d94b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1a0]
mov ebx, eax
test ebx, ebx
je 0x41224d
push ebx
call fcn.004435a3
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41225d
push ebx
call fcn.004435a3
add esp, 4
mov ebx, dword [0x49d93f]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], 0
jne 0x4122e6
push 1
push 0
push 0x49d963
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x194]
push 1
push 1
push 0x49d963
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x190]
push 1
mov eax, str.100_
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 0x49d95b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1a0]
mov ebx, eax
test ebx, ebx
je 0x4122d6
push ebx
call fcn.004435a3
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4122e6
push ebx
call fcn.004435a3
add esp, 4
jmp 0x412392
mov eax, 0x49a49b
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 0x49d86b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + pe_nt_image_headers32]
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x412319
push ebx
call fcn.004435a3
add esp, 4
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 0x10
push 1
mov eax, 0x49a3b1
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, 0x49a4ac
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push 1
push dword [0x49d943]
push 0x49d83b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x41236b
push ebx
call fcn.004435a3
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41237b
push ebx
call fcn.004435a3
add esp, 4
push 0x49d86b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x90]
jmp 0x4123b8
push 0xbb8
push 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
nop
nop
nop
nop
push 0x49d86b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x90]
mov ebx, dword [ebp - 8]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4123d6
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4123d2
imul eax, dword [ebx]
jmp 0x4123c7
mov ecx, eax
test ecx, ecx
je 0x412402
push ecx
push ebx
mov ebx, dword [ebx]
push ebx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4123f1
push ebx
call fcn.004435a3
add esp, 4
pop ebx
call fcn.004435a3
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4123dc
call fcn.004435a3
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41241a
push ebx
call fcn.004435a3
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41242a
push ebx
call fcn.004435a3
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41243a
push ebx
call fcn.004435a3
add esp, 4
mov esp, ebp
pop ebp
ret