Function at 0x41b11fa0
Capabilities:
Create thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xe5c
mov eax, dword [0x41b28d84]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
push ebx
xor ebx, ebx
push edi
xor edi, edi
mov dword [ebp - 0xb30], edx
mov dword [ebp - 0xb34], ebx
mov dword [ebp - 0xb28], ebx
mov dword [ebp - 0xb38], ebx
cmp eax, 0x10
jb 0x41b11fe8
mov edi, 0x80004005
jmp 0x41b1299c
lea eax, [eax*4 + 0x41b29980]
push esi
mov esi, dword [eax]
mov dword [ebp - 0xb3c], eax
cmp esi, ebx
jne 0x41b12986
cmp dword [0x41b29ce8], ebx
jne 0x41b120bc
push 0x41b129e4
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x41b29ce8], eax
cmp eax, ebx
je 0x41b1207a
push 0x41b129d0
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41b2a214], eax
cmp eax, ebx
jne 0x41b120bc
mov eax, dword [0x41b28b68]
cmp eax, 0x41b28b68
je 0x41b12066
test dword [eax + 0x1c], 0x400000
je 0x41b12066
cmp byte [eax + 0x19], 1
jb 0x41b12066
push 0x41b11074
push 0x11
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.41b02941
push dword [0x41b29ce8]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [0x41b29ce8], ebx
jmp 0x41b120a7
mov eax, dword [0x41b28b68]
cmp eax, 0x41b28b68
je 0x41b120a7
test dword [eax + 0x1c], 0x400000
je 0x41b120a7
cmp byte [eax + 0x19], 1
jb 0x41b120a7
push 0x41b11074
push 0x12
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.41b02941
mov dword [ebp - 0xb20], 0x80004005
mov edi, dword [ebp - 0xb20]
jmp 0x41b1299b
cmp dword [0x41b29438], ebx
jne 0x41b120e5
push ebx
push 0x41b29438
push 0x50a
push dword [0x41b28b64]
call dword [0x41b2a214]
mov edi, eax
cmp edi, ebx
jl 0x41b1294e
cmp dword [0x41b2a158], ebx
jne 0x41b12133
push 0x41b2a154
push ebx
push ebx
push 0x41b11eba
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x41b2a150], eax
cmp eax, ebx
je 0x41b12133
push 0xfffffffffffffffe
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov eax, dword [0x41b2a150]
mov dword [0x41b2a158], 1
cmp eax, ebx
je 0x41b12133
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x41b2a150], ebx
mov eax, dword [0x41b2943c]
cmp eax, ebx
jne 0x41b12157
mov eax, dword [0x41b29438]
mov ecx, dword [eax]
push 0x41b2943c
push 0x41b129c0
push eax
call dword [ecx]
mov edi, eax
mov eax, dword [0x41b2943c]
cmp edi, ebx
jl 0x41b12929
mov dword [ebp - 0x6cc], 0x488
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
mov eax, dword [0x41b2943c]
mov ecx, dword [eax]
push 7
lea edx, [ebp - 0x6cc]
push edx
push dword [ebp + 8]
push eax
call dword [ecx + 0x2c]
mov edi, eax
cmp edi, ebx
jl 0x41b12904
mov eax, dword [0x41b29438]
mov ecx, dword [eax]
push ebx
lea edx, [ebp - 0xb2c]
push edx
lea edx, [ebp - 0x6c8]
push edx
push eax
call dword [ecx + 0xc]
mov edi, eax
cmp edi, ebx
jl 0x41b128d3
mov eax, dword [ebp - 0xb2c]
mov ecx, dword [eax]
lea edx, [ebp - 0xb1c]
push edx
push 0x41b129b0
push eax
call dword [ecx]
mov edi, eax
mov eax, dword [ebp - 0xb2c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp edi, ebx
mov dword [ebp - 0xb2c], ebx
jl 0x41b12885
push 0x2e
lea eax, [ebp - 0xe58]
pop ecx
mov dword [eax + 8], ebx
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax - 4], ebx
add eax, 0x10
dec ecx
jne 0x41b121f0
mov eax, dword [ebp - 0xb1c]
mov ecx, dword [eax]
push ebx
lea edx, [ebp - 0xe5c]
push edx
push 0x41b11939
push eax
call dword [ecx + 0x10]
mov edi, eax
mov eax, 0x80000000
mov dword [0x41b29a70], eax
mov dword [0x41b29a80], eax
mov dword [0x41b29a90], eax
mov dword [0x41b29aa0], eax
mov dword [0x41b29ab0], eax
mov dword [0x41b29ac0], eax
mov dword [0x41b29ad0], eax
mov dword [0x41b29ae0], eax
mov eax, 0x80ffff0c
mov dword [0x41b29a68], ebx
mov dword [0x41b29a74], ebx
mov dword [0x41b29a78], ebx
mov dword [0x41b29a84], ebx
mov dword [0x41b29a88], ebx
mov dword [0x41b29a94], ebx
mov dword [0x41b29a98], ebx
mov dword [0x41b29aa4], ebx
mov dword [0x41b29aa8], ebx
mov dword [0x41b29ab4], ebx
mov dword [0x41b29ab8], ebx
mov dword [0x41b29ac4], ebx
mov dword [0x41b29ac8], ebx
mov dword [0x41b29ad4], ebx
mov dword [0x41b29ad8], ebx
mov dword [0x41b29ae4], ebx
mov dword [0x41b29ae8], ebx
mov dword [0x41b29af0], eax
mov dword [0x41b29af4], ebx
mov dword [0x41b29af8], ebx
mov dword [0x41b29b00], eax
mov dword [0x41b29b04], ebx
mov dword [0x41b29b08], ebx
mov dword [0x41b29b10], eax
mov dword [0x41b29b14], ebx
mov dword [0x41b29b18], ebx
mov dword [0x41b29b20], eax
mov dword [0x41b29b24], ebx
mov dword [0x41b29b28], ebx
mov dword [0x41b29b30], eax
mov dword [0x41b29b34], ebx
mov dword [0x41b29b38], ebx
mov dword [0x41b29b40], eax
mov dword [0x41b29b44], ebx
mov dword [0x41b29b48], ebx
mov dword [0x41b29b50], eax
mov dword [0x41b29b54], ebx
mov dword [0x41b29b58], ebx
mov dword [0x41b29b60], eax
mov dword [0x41b29b64], ebx
mov dword [0x41b29b68], ebx
mov dword [0x41b29b70], eax
mov dword [0x41b29b74], ebx
mov dword [0x41b29b78], ebx
mov dword [0x41b29b80], eax
mov dword [0x41b29b84], ebx
mov dword [0x41b29b88], ebx
mov dword [0x41b29b90], eax
mov dword [0x41b29b94], ebx
mov dword [0x41b29b98], ebx
mov dword [0x41b29ba0], eax
mov dword [0x41b29ba4], ebx
mov dword [0x41b29ba8], ebx
mov dword [0x41b29bb0], eax
mov dword [0x41b29bb4], ebx
mov dword [0x41b29bb8], ebx
mov dword [0x41b29bc0], eax
mov dword [0x41b29bc4], ebx
mov dword [0x41b29bc8], ebx
mov dword [0x41b29bd0], eax
mov dword [0x41b29bd4], ebx
mov dword [0x41b29bd8], ebx
mov dword [0x41b29be0], eax
mov dword [0x41b29bf0], eax
mov dword [0x41b29c00], eax
mov dword [0x41b29c10], eax
mov dword [0x41b29c20], eax
mov dword [0x41b29c30], eax
mov dword [0x41b29c40], eax
mov dword [0x41b29c50], eax
mov dword [0x41b29c60], eax
mov dword [0x41b29c70], eax
mov dword [0x41b29c80], eax
mov dword [0x41b29c90], eax
mov dword [0x41b29ca0], eax
mov dword [0x41b29cb0], eax
mov dword [0x41b29cc0], eax
mov dword [0x41b29cd0], eax
lea eax, [ebp - 0xb38]
push eax
lea eax, [ebp - 0xb34]
push eax
lea eax, [ebp - 0xb28]
push eax
lea eax, [ebp - 0xe5c]
push eax
mov dword [0x41b29be4], ebx
mov dword [0x41b29be8], ebx
mov dword [0x41b29bf4], ebx
mov dword [0x41b29bf8], ebx
mov dword [0x41b29c04], ebx
mov dword [0x41b29c08], ebx
mov dword [0x41b29c14], ebx
mov dword [0x41b29c18], ebx
mov dword [0x41b29c24], ebx
mov dword [0x41b29c28], ebx
mov dword [0x41b29c34], ebx
mov dword [0x41b29c38], ebx
mov dword [0x41b29c44], ebx
mov dword [0x41b29c48], ebx
mov dword [0x41b29c54], ebx
mov dword [0x41b29c58], ebx
mov dword [0x41b29c64], ebx
mov dword [0x41b29c68], ebx
mov dword [0x41b29c74], ebx
mov dword [0x41b29c78], ebx
mov dword [0x41b29c84], ebx
mov dword [0x41b29c88], ebx
mov dword [0x41b29c94], ebx
mov dword [0x41b29c98], ebx
mov dword [0x41b29ca4], ebx
mov dword [0x41b29ca8], ebx
mov dword [0x41b29cb4], ebx
mov dword [0x41b29cb8], ebx
mov dword [0x41b29cc4], ebx
mov dword [0x41b29cc8], ebx
mov dword [0x41b29cd4], ebx
call fcn.41b11b55
cmp edi, ebx
jl 0x41b12860
mov eax, dword [ebp - 0xb1c]
lea edx, [ebp - 0xb7c]
push edx
mov dword [ebp - 0xb7c], 0x18
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
mov edi, eax
cmp edi, ebx
jl 0x41b1283b
mov eax, dword [ebp - 0xb1c]
mov ecx, dword [eax]
push 0xa
push ebx
push eax
call dword [ecx + 0x34]
mov edi, eax
cmp edi, ebx
jl 0x41b1280a
mov eax, dword [ebp - 0xb1c]
mov ecx, dword [eax]
push 0x41b28b48
push eax
call dword [ecx + 0x2c]
mov edi, eax
cmp edi, ebx
jl 0x41b127d6
mov edi, 0x300
push edi
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov esi, eax
mov dword [ebp - 0xb24], esi
cmp esi, ebx
je 0x41b12793
push edi
push ebx
push esi
call sub.ntdll.dll_memset
mov eax, dword [ebp - 0xb1c]
mov dword [esi], eax
mov eax, dword [ebp - 0xb6c]
mov dword [esi + 4], eax
mov dword [esi + 8], ebx
mov dword [esi + 0x24], ebx
mov eax, dword [ebp - 0xb1c]
add esp, 0xc
mov dword [ebp - 0xb18], 0x44c
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0xb1c]
mov ecx, dword [eax]
lea edx, [ebp - 0xb18]
push edx
push eax
call dword [ecx + 0x3c]
mov edi, eax
cmp edi, ebx
mov dword [ebp - 0xb20], edi
jl 0x41b12760
xor edi, edi
inc edi
cmp dword [0x41b29410], ebx
je 0x41b12639
mov eax, dword [ebp - 0xb1c]
push edi
push 4
lea edx, [ebp - 0x244]
push edx
mov dword [ebp - 0x244], 0x240
mov ecx, dword [eax]
push eax
call dword [ecx + 0x38]
test eax, eax
jl 0x41b12639
cmp word [ebp - 0x10], 2
jne 0x41b12639
mov eax, 0xc4
cmp word [ebp - 0xe], ax
jne 0x41b12639
test dword [ebp - 0x6b8], 0x80000
je 0x41b12639
mov eax, dword [ebp - 0xb1c]
mov ecx, dword [eax]
push edi
push 0x14
lea edx, [ebp - 0x244]
push edx
push eax
call dword [ecx + 0x38]
test eax, eax
jl 0x41b12639
cmp word [ebp - 0x10], 2
jne 0x41b12639
mov eax, 0xc5
cmp word [ebp - 0xe], ax
jne 0x41b12639
mov dword [0x41b2941c], edi
push 0x2d8
lea eax, [esi + 0x28]
push ebx
push eax
call sub.ntdll.dll_memset
add esp, 0xc
mov dword [ebp - 0xb50], 0x14
mov dword [ebp - 0xb4c], 0x10
mov dword [ebp - 0xb44], edi
cmp dword [0x41b29ad0], ebx
je 0x41b1267a
mov eax, dword [0x41b29acc]
mov dword [ebp - 0xb48], eax
jmp 0x41b12684
mov dword [ebp - 0xb48], 0x20
mov eax, dword [ebp - 0xb1c]
mov ecx, dword [eax]
lea edx, [ebp - 0xb50]
push edx
push 3
push eax
call dword [ecx + 0x14]
mov edi, eax
cmp edi, ebx
mov dword [ebp - 0xb20], eax
jl 0x41b126ae
or dword [ebp - 0xb28], 0x20
jmp 0x41b126b6
xor edi, edi
mov dword [ebp - 0xb20], edi
mov eax, dword [ebp - 0xb04]
mov word [esi + 0x28], ax
shr eax, 0x10
mov word [esi + 0x2a], ax
push 0x20
lea eax, [esi + 0x2c]
push eax
push 0xbd5
push dword [0x41b28b64]
call dword [sym.imp.USER32.dll_LoadStringW]
mov eax, 0xffff
mov dword [esi + 0xa4], eax
mov dword [esi + 0x9c], eax
mov dword [esi + 0x94], eax
mov dword [esi + 0x80], eax
mov dword [esi + 0x78], eax
mov dword [esi + 0x70], eax
mov eax, dword [ebp - 0xb38]
mov dword [esi + 0xb0], eax
mov eax, dword [ebp - 0xb34]
push 0x41b29cf8
mov dword [esi + 0x84], eax
push 0x40
lea eax, [esi + 0xb8]
push eax
mov dword [esi + 0x88], 0xa
mov dword [esi + 0x8c], 0x3e8
mov dword [esi + 0xac], 6
mov dword [esi + 0xb4], 0x20
call fcn.41b029b6
mov eax, dword [ebp - 0xb28]
or dword [esi + 0xa8], eax
cmp dword [ebp - 0xb30], ebx
je 0x41b128b3
mov esi, dword [ebp - 0xb24]
mov edi, dword [ebp - 0xb30]
add esi, 0x28
mov ecx, 0xb6
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0xb24]
mov edi, dword [ebp - 0xb20]
jmp 0x41b128b3
mov edi, 0x8007000e
mov eax, dword [0x41b28b68]
cmp eax, 0x41b28b68
je 0x41b128bb
test dword [eax + 0x1c], 0x400000
je 0x41b128bb
cmp byte [eax + 0x19], 1
jb 0x41b128bb
push 0x41b11074
push 0x13
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.41b02941
jmp 0x41b128b3
mov eax, dword [0x41b28b68]
cmp eax, 0x41b28b68
je 0x41b128b3
test dword [eax + 0x1c], 0x400000
je 0x41b128b3
cmp byte [eax + 0x19], 1
jb 0x41b128b3
push edi
push 0x41b11074
push 0x14
jmp 0x41b128a8
mov eax, dword [0x41b28b68]
cmp eax, 0x41b28b68
je 0x41b128b3
test dword [eax + 0x1c], 0x400000
je 0x41b128b3
cmp byte [eax + 0x19], 1
jb 0x41b128b3
push edi
push 0x41b11074
push 0x15
jmp 0x41b128a8
mov eax, dword [0x41b28b68]
cmp eax, 0x41b28b68
je 0x41b128b3
test dword [eax + 0x1c], 0x400000
je 0x41b128b3
cmp byte [eax + 0x19], 1
jb 0x41b128b3
push edi
push 0x41b11074
push 0x16
jmp 0x41b128a8
mov eax, dword [0x41b28b68]
cmp eax, 0x41b28b68
je 0x41b128b3
test dword [eax + 0x1c], 0x400000
je 0x41b128b3
cmp byte [eax + 0x19], 1
jb 0x41b128b3
push edi
push 0x41b11074
push 0x17
jmp 0x41b128a8
mov eax, dword [0x41b28b68]
cmp eax, 0x41b28b68
je 0x41b128b3
test dword [eax + 0x1c], 0x400000
je 0x41b128b3
cmp byte [eax + 0x19], 1
jb 0x41b128b3
push edi
push 0x41b11074
push 0x18
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.41b0298a
cmp edi, ebx
jge 0x41b1297c
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [ebp - 0xb1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41b1297c
mov eax, dword [0x41b28b68]
cmp eax, 0x41b28b68
je 0x41b1297c
test dword [eax + 0x1c], 0x400000
je 0x41b1297c
cmp byte [eax + 0x19], 1
jb 0x41b1297c
push edi
push 0x41b11074
push 0x19
jmp 0x41b12971
mov eax, dword [0x41b28b68]
cmp eax, 0x41b28b68
je 0x41b1297c
test dword [eax + 0x1c], 0x400000
je 0x41b1297c
cmp byte [eax + 0x19], 1
jb 0x41b1297c
push edi
push 0x41b11074
push 0x1a
jmp 0x41b12971
mov eax, dword [0x41b28b68]
cmp eax, 0x41b28b68
je 0x41b1297c
test dword [eax + 0x1c], 0x400000
je 0x41b1297c
cmp byte [eax + 0x19], 1
jb 0x41b1297c
push edi
push 0x41b11074
push 0x1b
jmp 0x41b12971
mov eax, dword [0x41b28b68]
cmp eax, 0x41b28b68
je 0x41b1297c
test dword [eax + 0x1c], 0x400000
je 0x41b1297c
cmp byte [eax + 0x19], 1
jb 0x41b1297c
push edi
push 0x41b11074
push 0x1c
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.41b0298a
mov eax, dword [ebp - 0xb3c]
mov dword [eax], esi
jmp 0x41b1299b
mov dword [esi + 0x24], ebx
cmp edx, ebx
je 0x41b12999
add esi, 0x28
mov ecx, 0xb6
mov edi, edx
rep movsd dword es:[edi], dword [esi]
xor edi, edi
pop esi
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
xor ecx, ebp
pop ebx
call fcn.41b028d6
leave
ret 8