Function at 0x415c20
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5a27d0
mov eax, dword fs:[0]
push eax
sub esp, 0x3c
mov eax, dword [0x62c144]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x48], ebx
cmp byte [0x631049], 0
jne 0x416028
mov byte [0x631049], 1
call fcn.0043d792
test al, al
je 0x415c80
loopne 0x415c5d
pushal
mov dh, 0xb
inc ebp
in al, 0xd5
cmp dword [eax - 0x87591d7], eax
mov ebx, dword [ebp - 0x48]
cmp dword [ebx + 0x38], 0
jne 0x415cce
lea ecx, [ebp - 0x41]
call fcn.0041d280
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x41]
call fcn.0043f887
push eax
lea ecx, [ebx + 0x28]
call fcn.00409450
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x415cbf
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.004021c0
lea ecx, [ebp - 0x41]
mov dword [ebp - 4], 0xffffffff
call fcn.00401620
cmp dword [ebx + 0x80], 0
jne 0x415d47
push 0x5a6d2c
lea ecx, [ebp - 0x40]
call fcn.00403820
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 1
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.004289fb
add esp, 8
lea ecx, [ebx + 0x70]
push eax
call fcn.00409450
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x415d19
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004021c0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov dword [ebp - 4], 0xffffffff
cmp eax, 8
jb 0x415d47
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00402210
call fcn.0043d6c3
test al, al
je 0x415d65
shr byte [eax], 1
add eax, 0xf3691cd4
shr dl, 1
xchg edx, eax
call 0x10b22e6a
sbb bh, dh
aad 0x8b
pop ebp
mov eax, 0x98bb83
add byte [eax], al
add byte [ebp + 0x73], dh
cmp dword [ebx + 0x98], 0
jne 0x415de1
push str.10.2.1.8
lea ecx, [ebp - 0x40]
call fcn.00403820
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 2
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.004289fb
add esp, 8
lea ecx, [ebx + 0x88]
push eax
call fcn.00409450
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x415db3
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004021c0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov dword [ebp - 4], 0xffffffff
cmp eax, 8
jb 0x415de1
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00402210
call fcn.0043d5f4
test al, al
je 0x415e05
shl dword [edx - 0x7aedf2c6], 0x44
adc dword [ecx + 0x69], esp
mov ch, byte [esi - 0x3d05fa52]
or dword [edi], esi
xlatb
ljmp 0xfd82
call fcn.0043d456
test al, al
je 0x415e23
stc
invalid
call fcn.0043d5af
test al, al
je 0x415e3e
call 0x8eff9c04
adc al, 0xe1
cmpsd dword gs:[esi], dword es:[edi]
pop ds
stosd dword es:[edi], eax
je 0x415e40
add dword [edx + 0x60], eax
popal
stc
cmp dword [ebx + 0xc8], 0
jne 0x415e92
enter 0, 0
add byte [ebp + 0x4b], dh
lea ecx, [ebp - 0x1c]
call fcn.0040c890
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 3
push eax
lea ecx, [ebp - 0x1c]
call fcn.004129b0
push eax
lea ecx, [ebx + 0xb8]
call fcn.00409450
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x415e83
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.004021c0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0xffffffff
call fcn.00401620
cmp dword [ebx + 0x50], 0
jne 0x415f08
lea eax, [ebp - 0x40]
push eax
call fcn.00401910
mov ecx, eax
call fcn.0043b326
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 4
push eax
call fcn.004289fb
add esp, 8
lea ecx, [ebx + 0x40]
push eax
call fcn.00409450
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x415eda
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004021c0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov dword [ebp - 4], 0xffffffff
cmp eax, 8
jb 0x415f08
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00402210
cmp dword [ebx + 0x68], 0
jne 0x415f7e
lea eax, [ebp - 0x40]
push eax
call fcn.00401910
mov ecx, eax
call fcn.0043b346
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 5
push eax
call fcn.004289fb
add esp, 8
lea ecx, [ebx + 0x58]
push eax
call fcn.00409450
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x415f50
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004021c0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov dword [ebp - 4], 0xffffffff
cmp eax, 8
jb 0x415f7e
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00402210
call fcn.0043d4e0
test al, al
je 0x415f9b
sbb al, 0x45
daa
xor dword [eax - 0x31], edi
cld
outsd dx, dword [esi]
inc ebp
push 0x9baecdf7
mov dh, 0xc3
adc edx, dword [0x5de86050]
jae 0x415fa1
call fcn.0043d2fd
test al, al
je 0x415fc2
add byte [eax + eax*8 + 0x25c91e74], al
sal byte [esi + ebx - 0x37], 0x25
leave
and eax, 0x2256469f
mov ecx, 0xc8f87c82
lahf
inc esi
push esi
and bh, byte [ecx - 0x3707837e]
clc
enter 0xffffffffffffd6bc, 0x30
inc ecx
int1
mov esp, 0xf14130d6
invalid
call fcn.0043d3cc
test al, al
je 0x415fea
lodsb al, byte [esi]
xchg byte [0x18d1d9bb], bl
push esp
ja 0x415fad
mov ebx, 0x40274fc3
add cl, byte [ebp - 0x544eed76]
jbe 0x415f8d
push esi
and dl, ch
daa
push 0xffffffffffffff9c
outsd dx, dword [esi]
cmp dword [ebp + 8], 0
je 0x41600f
mov esi, dword [ebp - 0x48]
lea eax, [ebp - 0x48]
push eax
push 0
push esi
push 0x415880
push 0
push 0
mov byte [esi], 1
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 8], eax
call fcn.0043d15f
test al, al
je 0x416028
adc dword [ecx + 0x18e21f97], ebp
xchg byte ss:[edi - 0x4cc5e1c], al
cmp cl, ch
imul ecx, dword [ebx - 0x769b0bb3], 0xd
add byte [ecx + 0x5f], bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00439cb7
mov esp, ebp
pop ebp
ret 4