Function at 0x40eb7f
Capabilities:
Create thread

Disassembly:
push 0x74
mov eax, 0x4ada63
call fcn.0048f48f
mov eax, dword [0x507340]
imul eax, eax
push 0xf
cdq
pop ecx
idiv ecx
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x54], edi
cmp edx, 7
jne 0x40ebc1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x50
xor edx, edx
pop ecx
div ecx
inc edx
mov dword [0x507340], edx
xor ebx, ebx
push ebx
lea ecx, [ebp - 0x80]
call fcn.0042f326
mov dword [ebp - 4], ebx
call fcn.00411501
test al, al
jne 0x40ebef
push 0xeb
push 0xea
push str._d__d_n
call fcn.0049172d
add esp, 0xc
push str.success
lea ecx, [ebp - 0x68]
call fcn.0042f2f7
lea eax, [ebp - 0x68]
push eax
push 0x4c0c00
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 1
call fcn.0042f5f2
mov ecx, eax
call fcn.0042f4ab
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], bl
call fcn.0042f451
mov byte [ebp - 4], 2
call fcn.00411272
test al, al
jne 0x40ec3a
call fcn.0048f9e0
mov dword [0x507340], eax
push str.callbackId
mov ecx, esi
call fcn.00430238
test al, al
jne 0x40ecba
push str.execFile_callbackId_not_exist
lea ecx, [ebp - 0x50]
call fcn.00401b1e
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 3
call fcn.00438012
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 4
call fcn.0042f275
push 0x4c0c00
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 5
call fcn.0042f5f2
lea ecx, [ebp - 0x68]
push ecx
mov ecx, eax
call fcn.0042f4ab
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x68]
call fcn.0042f451
lea ecx, [ebp - 0x2c]
call fcn.00401056
mov ecx, dword [ebp - 0x50]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov byte [ebp - 4], bl
jmp 0x40ee63
push 0x10
call fcn.0048e498
mov esi, eax
pop ecx
mov dword [ebp - 0x50], esi
mov byte [ebp - 4], 6
test esi, esi
je 0x40ecd9
push ebx
mov ecx, esi
call fcn.0042f326
jmp 0x40ecdb
mov esi, ebx
mov ecx, dword [0x507340]
mov dword [ebp - 0x50], 0x16
lea eax, [ecx + 1]
imul eax, ecx
cdq
idiv dword [ebp - 0x50]
mov byte [ebp - 4], 2
cmp edx, 0xe
jne 0x40ed30
mov edi, ebx
mov dword [ebp - 0x50], 0x37
jmp 0x40ed19
mov eax, ecx
or eax, 0xffffff71
add ecx, eax
mov eax, ecx
imul eax, ecx
inc edi
cmp edi, eax
jg 0x40ed27
mov eax, ecx
cdq
idiv dword [ebp - 0x50]
cmp edx, 0x81
jne 0x40ed06
mov dword [0x507340], edi
mov edi, dword [ebp - 0x70]
push dword [ebp - 0x58]
mov ecx, esi
call fcn.0042f4ab
lea eax, [ebp - 0x6c]
push eax
push ebx
push esi
push 0x4127f3
push ebx
push ebx
mov dword [ebp - 0x6c], ebx
call fcn.004920f6
add esp, 0x18
test eax, eax
jne 0x40ede4
test esi, esi
je 0x40ed6c
mov ecx, esi
call fcn.0042f451
push esi
call fcn.0048e469
pop ecx
call fcn.00491902
push dword [eax]
lea eax, [ebp - 0x58]
push eax
call fcn.0042c341
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x50]
push str.execFile_beginthreadex_
push eax
mov byte [ebp - 4], 7
call fcn.00409288
add esp, 0xc
mov ecx, dword [ebp - 0x58]
mov byte [ebp - 4], 9
lea ecx, [ecx - 0x10]
call fcn.00407864
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00438012
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0xa
call fcn.0042f275
push 0x4c0c00
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xb
call fcn.0042f5f2
lea ecx, [ebp - 0x68]
push ecx
mov ecx, eax
call fcn.0042f4ab
mov byte [ebp - 4], 0xa
jmp 0x40ec97
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x40ee60
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x4c]
call fcn.00430a82
push 0x505ab0
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x10
call fcn.00408fd9
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x11
call fcn.00432bf9
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x12
jb 0x40ee9c
mov eax, dword [eax]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401027
lea eax, [ebp - 0x54]
push eax
call fcn.00437fc7
add esp, 0x1c
push eax
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x13
call fcn.00402394
mov ecx, dword [ebp - 0x54]
lea ecx, [ecx - 0x10]
call fcn.00407864
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
call fcn.00401056
push 8
pop eax
mov word [edi], ax
mov eax, dword [0x507340]
lea ecx, [eax + 1]
imul ecx, eax
and ecx, 0x8000000f
jns 0x40eef5
dec ecx
or ecx, 0xfffffff0
inc ecx
cmp ecx, 5
jne 0x40ef04
call fcn.0048f9e0
mov dword [0x507340], eax
mov esi, dword [ebp - 0x50]
push dword [esi - 0xc]
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
test eax, eax
jne 0x40ef1a
call fcn.00409bd9
lea ecx, [esi - 0x10]
mov dword [edi + 8], eax
call fcn.00407864
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], bl
call fcn.004090f2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80]
call fcn.0042f451
call fcn.0048f3e1
ret