Function at 0x4e3c68
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x12
push 0
push 0
dec ecx
jne 0x4e3c70
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4e44c8
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 5], 0
xor edx, edx
push ebp
push 0x4e4415
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 0x10]
call fcn.0046bdb0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
add eax, 0x20c
call fcn.004054c8
mov eax, dword [ebp - 4]
call fcn.004da578
mov eax, dword [ebp - 4]
call fcn.004da72c
mov eax, dword [ebp - 4]
call fcn.004dd200
mov dl, 1
mov eax, dword [0x47fe64]
call fcn.00480458
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x230], ebx
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x180]
mov eax, ebx
call fcn.004802f0
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x94]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x230]
call fcn.0048038c
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x230]
xor eax, eax
mov dword [ebx + 0x30], eax
mov dword [ebx + 0x34], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2b0]
lea eax, [ebp - 0x14]
mov ecx, 0x4e44e0
call fcn.00405734
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004805cc
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x6c]
mov dl, 1
mov eax, dword [0x47eb44]
call fcn.0047ebac
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x68], ebx
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2b0]
mov eax, ebx
call fcn.0047ed64
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x68]
mov dl, 1
mov eax, dword [0x4c9d30]
call fcn.004d0e88
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x70], ebx
lea eax, [ebx + 0x21fc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x2b0]
call fcn.004054c8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x70]
mov edx, dword [ebp - 4]
mov dword [eax + 0x221c], edx
mov dword [eax + 0x2218], 0x4dc6d4
mov dword [eax + 0x1e8], 8
mov dword [eax + 0x1ec], 1
mov edx, dword [ebp - 4]
add edx, 0x90
call fcn.004d1b34
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x6c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x70]
call fcn.004d1b24
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x230]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x70]
call fcn.004d1b2c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov ebx, dword [edx + 0x70]
mov dword [ebx + 0x2220], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
mov dword [ebx + 0x2210], eax
mov eax, ebx
call fcn.004cb3fc
test al, al
jne 0x4e3e2e
mov byte [ebp - 5], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4e448c
mov eax, dword [ebp - 4]
call fcn.004dc6f8
mov eax, dword [ebp - 4]
call fcn.004e1fe4
mov eax, dword [ebp - 4]
call fcn.004e1184
mov byte [ebp - 5], al
xor ecx, ecx
mov dl, 1
mov eax, dword [0x4d7534]
call fcn.004d7754
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x294], ebx
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0xec]
mov eax, ebx
call fcn.004d7910
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x294]
mov edx, dword [ebp - 4]
mov dword [eax + 0x9c], edx
mov dword [eax + 0x98], 0x4dce0c
mov edx, dword [ebp - 4]
mov dword [eax + 0x34], edx
mov dword [eax + 0x30], 0x4dcefc
mov dl, 1
call fcn.004d7368
xor ecx, ecx
mov dl, 1
mov eax, dword [0x4358c4]
call fcn.00435fac
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x290], ebx
mov eax, dword [ebp - 4]
push eax
push 0x4da468
mov eax, ebx
call fcn.00436154
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x290]
mov edx, 0x7d0
call fcn.00436144
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x290]
xor edx, edx
call fcn.00436134
xor ecx, ecx
mov dl, 1
mov eax, dword [0x4358c4]
call fcn.00435fac
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x2b8], ebx
mov eax, dword [ebp - 4]
push eax
push 0x4e32a0
mov eax, ebx
call fcn.00436154
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2b8]
mov edx, 0x2710
call fcn.00436144
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2b8]
xor edx, edx
call fcn.00436134
xor ecx, ecx
mov dl, 1
mov eax, dword [0x4358c4]
call fcn.00435fac
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x2b4], ebx
mov eax, dword [ebp - 4]
push eax
push fcn.004e32cc
mov eax, ebx
call fcn.00436154
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2b4]
mov edx, 0x1499700
call fcn.00436144
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2b4]
mov dl, 1
call fcn.00436134
xor ecx, ecx
mov dl, 1
mov eax, dword [0x4358c4]
call fcn.00435fac
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x238], ebx
mov eax, dword [ebp - 4]
push eax
push 0x4e3390
mov eax, ebx
call fcn.00436154
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x238]
xor edx, edx
call fcn.00436134
xor ecx, ecx
mov dl, 1
mov eax, dword [0x4358c4]
call fcn.00435fac
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x21c], ebx
mov eax, dword [ebp - 4]
push eax
push fcn.004e3590
mov eax, ebx
call fcn.00436154
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21c]
mov edx, 0xdbba00
call fcn.00436144
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21c]
mov dl, 1
call fcn.00436134
xor ecx, ecx
mov dl, 1
mov eax, dword [0x4358c4]
call fcn.00435fac
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x220], ebx
mov eax, dword [ebp - 4]
push eax
push 0x4e35f4
mov eax, ebx
call fcn.00436154
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x220]
mov edx, 0x927c0
call fcn.00436144
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x220]
mov dl, 1
call fcn.00436134
xor ecx, ecx
mov dl, 1
mov eax, dword [0x4358c4]
call fcn.00435fac
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x228], ebx
mov eax, dword [ebp - 4]
push eax
push 0x4e3604
mov eax, ebx
call fcn.00436154
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x228]
mov edx, 0x36ee80
call fcn.00436144
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x228]
mov dl, 1
call fcn.00436134
xor ecx, ecx
mov dl, 1
mov eax, dword [0x4358c4]
call fcn.00435fac
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x22c], ebx
mov eax, dword [ebp - 4]
push eax
push 0x4e3624
mov eax, ebx
call fcn.00436154
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x22c]
mov edx, 0x3e8
call fcn.00436144
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x22c]
mov dl, 1
call fcn.00436134
xor ecx, ecx
mov dl, 1
mov eax, dword [0x4358c4]
call fcn.00435fac
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x224], ebx
mov eax, dword [ebp - 4]
push eax
push 0x4e361c
mov eax, ebx
call fcn.00436154
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x224]
mov edx, 0x5265c00
call fcn.00436144
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x224]
mov dl, 1
call fcn.00436134
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov dword [eax + 0x1f4], edx
mov dword [eax + 0x1f0], 0x4e0a24
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1f0]
mov dword [ebp - 0xc], eax
lea edx, [ebp - 0x18]
xor eax, eax
call fcn.0046a8a0
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
call fcn.004da4a8
mov dl, 1
mov eax, dword [0x4d7fa8]
call fcn.004d81fc
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x2bc], ebx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x70]
mov dword [ebx + 8], eax
mov dl, 1
mov eax, dword [0x4d20f0]
call fcn.004d2340
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x2c0], ebx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x70]
mov dword [ebx + 0x18], eax
mov eax, dword [ebp - 4]
add eax, 0x90
mov dword [ebx + 0x1c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x58]
mov dword [ebx + 0x20], eax
mov dl, 1
mov eax, dword [0x4d8790]
call fcn.004d8aa8
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x2c4], ebx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x70]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov dword [ebx + 8], eax
push 6
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [0x4eb468]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x4e44fc
call fcn.00471c44
mov eax, dword [ebp - 0x1c]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x4eb468]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x4e4520
call fcn.00471c44
mov eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xf4]
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x28], 0xf
lea edx, [ebp - 0x2c]
xor ecx, ecx
pop eax
call fcn.0040b900
mov eax, dword [ebp - 0x20]
push eax
push 0
mov ecx, 2
mov edx, 7
mov eax, dword [ebp - 4]
call fcn.004e3628
mov eax, dword [ebp - 4]
call fcn.004e4948
mov eax, dword [ebp - 4]
mov dword [eax + 0x7c], 2
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2c]
push eax
mov eax, dword [ebp - 4]
push eax
push fcn.004da488
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1dc]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x230]
mov dl, 1
mov eax, dword [0x4c378c]
call fcn.004c51a4
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x204], ebx
mov eax, dword [ebp - 4]
mov dword [ebx + 0x904], eax
mov dword [ebx + 0x900], 0x4e30ec
mov dword [ebx + 0x2a98], 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34]
mov dword [ebx + 0x2a94], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
mov dword [ebx + 0x10], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov dword [ebx + 0x2a8c], eax
mov eax, dword [ebp - 4]
lea edx, [eax + 0x90]
mov eax, ebx
call fcn.004c5db0
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x6c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x204]
call fcn.004c6324
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x204]
call fcn.004c5604
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x204]
mov eax, dword [ebp - 4]
mov dword [ebx + 0xc], eax
mov dword [ebx + 8], fcn.004e3628
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe5], 0
jne 0x4e4375
push 1
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x70]
call fcn.004d1b50
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 4]
lea ecx, [eax + 0x90]
mov eax, ebx
call fcn.004c7710
jmp 0x4e437d
mov eax, dword [ebp - 4]
call fcn.004e0e10
mov eax, dword [ebp - 4]
call fcn.004dca54
mov eax, dword [ebp - 4]
call fcn.004dc430
mov eax, dword [ebp - 4]
add eax, 0x208
push eax
push 0x20
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0xc]
push eax
push 0
push 0
call sub.KERNEL32.DLL_CreateThread_1
mov edx, dword [ebp - 4]
mov dword [edx + 0x80], eax
call sub.KERNEL32.DLL_GetCurrentProcessId
push eax
push 0
push 0x1f0fff
call sub.KERNEL32.DLL_OpenProcess
mov ebx, eax
test ebx, ebx
je 0x4e43da
push 0xffffffffffffffff
push 0xffffffffffffffff
push ebx
call sub.KERNEL32.DLL_SetProcessWorkingSetSize
push ebx
call sub.KERNEL32.DLL_CloseHandle_1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x6c]
xor edx, edx
call fcn.00474048
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004e3590
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004e32cc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
push eax
call sub.KERNEL32.DLL_SetEvent
mov byte [ebp - 5], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4e448c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4e44cf
lea eax, [ebp - 0x90]
mov edx, 2
call fcn.004054a4
lea eax, [ebp - 0x88]
mov edx, dword [0x46eed0]
call fcn.00405b68
lea eax, [ebp - 0x24]
mov edx, 6
call fcn.004054a4
ret