Function at 0x1000463d
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18c
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
xor edi, edi
movzx eax, byte [esi + 4]
cmp eax, 0x5d
mov dword [ebp - 4], edi
jg 0x10004d3b
je 0x10004e91
cmp eax, 0x30
jg 0x100048c1
je 0x1000487e
dec eax
je 0x1000476c
dec eax
je 0x1000475d
sub eax, 0xb
je 0x10004738
dec eax
dec eax
je 0x100046d9
sub eax, 0x1c
je 0x100046bc
sub eax, 3
jne 0x100051d7
lea eax, [ebp - 4]
mov dword [ebp - 4], 5
push eax
push esi
call fcn.10008100
pop ecx
test al, al
pop ecx
je 0x100051d7
jmp 0x10004885
lea eax, [ebp - 4]
mov dword [ebp - 4], 6
push eax
push esi
call fcn.10008120
pop ecx
mov dword [0x1007d300], eax
pop ecx
jmp 0x100051d7
lea eax, [ebp - 4]
mov dword [ebp - 4], 5
push eax
push esi
call fcn.10008100
pop ecx
cmp al, 1
pop ecx
jne 0x100051d7
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008120
mov dword [0x1007d244], eax
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008140
mov dword [0x1007cf14], eax
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008120
mov dword [0x1007d23c], eax
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008120
add esp, 0x20
mov dword [0x1007d240], eax
jmp 0x100051d7
push edi
push edi
push edi
push 0x10001293
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp eax, 0xffffffff
je 0x100051d7
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x100051d7
push dword [ebp + 0xc]
push esi
call fcn.10003da4
pop ecx
jmp 0x10005137
lea eax, [ebp - 4]
mov dword [ebp - 4], 5
push eax
push esi
call fcn.10008100
pop ecx
cmp al, 2
pop ecx
je 0x100051d7
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008140
mov dword [ebp + 8], eax
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008100
movzx edi, al
lea eax, [ebp - 4]
push eax
push edi
lea eax, [ebp - 0x8c]
push esi
push eax
call fcn.10008160
and byte [ebp + edi - 0x8c], 0
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008120
mov edi, eax
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008120
mov ebx, eax
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008140
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008140
add esp, 0x40
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008100
lea eax, [ebp - 4]
push eax
push 0xa
lea eax, [ebp - 0x8c]
push esi
push eax
call fcn.10008160
add esp, 0x18
mov dword [ebp + 0xc], 0xa
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008120
dec dword [ebp + 0xc]
pop ecx
pop ecx
jne 0x10004811
mov eax, dword [ebp + 8]
cmp eax, dword [0x1007cf14]
jne 0x100051d7
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008120
mov dword [0x1007d294], eax
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008120
mov dword [0x1007d298], eax
lea eax, [ebp - 4]
push eax
push esi
mov dword [0x1007d23c], edi
mov dword [0x1007d240], ebx
call fcn.10008100
lea eax, [ebp - 4]
push eax
push 8
push esi
push 0x1007cf18
call fcn.10008160
add esp, 0x28
jmp 0x100051d7
mov dword [ebp - 4], 5
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008100
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008100
movzx edi, al
lea eax, [ebp - 4]
push eax
mov eax, edi
imul eax, eax, 0x17
push 0x16
add eax, 0x100837cd
push esi
push eax
call fcn.10008160
push edi
call fcn.10004161
add esp, 0x24
jmp 0x100051d7
sub eax, 0x36
je 0x10004cc7
dec eax
dec eax
je 0x10004c23
dec eax
dec eax
je 0x10004918
sub eax, 0x15
je 0x100048e9
sub eax, 0xc
je 0x10004e91
jmp 0x100051d7
movsx eax, word [esi + 0x17]
mov dword [0x1007d298], eax
mov dword [0x1007d294], eax
movsx eax, word [esi + 0x19]
mov dword [0x1007d2dc], eax
mov dword [0x1007d2d8], eax
movsx eax, word [esi + 0x1b]
mov dword [0x1007d2bc], eax
mov dword [0x1007d2b8], eax
jmp 0x100051d7
lea eax, [ebp - 4]
mov dword [ebp - 4], 7
push eax
push esi
call fcn.10008100
movzx eax, al
pop ecx
cmp eax, 3
pop ecx
je 0x100051d7
cmp eax, 1
jne 0x100051d7
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008120
mov dword [ebp + 8], eax
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008120
mov dword [ebp + 0xc], eax
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008120
mov edi, eax
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008140
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008100
add esp, 0x28
cmp edi, 0x2710
movzx edx, al
je 0x10004be3
cmp dword [0x10086df0], 0
je 0x100051d7
test edx, edx
mov ecx, 0x3c4
mov esi, 0x38b
mov ebx, 0x38c
jne 0x10004b00
cmp dword [0x10086df8], edx
jne 0x10004be3
cmp edi, 0x1e
je 0x10004be3
cmp edi, 0x1f
je 0x10004be3
cmp edi, 0x20
je 0x10004be3
cmp edi, 0x21
je 0x10004be3
cmp edi, 0x3e3
je 0x10004be3
cmp edi, 0x288
je 0x10004be3
cmp edi, 0x2c3
je 0x10004be3
cmp edi, 0x2c4
je 0x10004be3
cmp edi, 0x2c5
je 0x10004be3
cmp edi, 0x2c6
je 0x10004be3
cmp edi, ecx
je 0x10004be3
cmp edi, 0x3c5
je 0x10004be3
cmp edi, 0x2bb
je 0x10004be3
cmp edi, 0x2bc
je 0x10004be3
cmp edi, 0x2bd
je 0x10004be3
cmp edi, 0x34d
je 0x10004be3
cmp edi, 0x34e
je 0x10004be3
cmp edi, 0x34f
je 0x10004be3
cmp edi, 0x350
je 0x10004be3
cmp edi, 0x272
je 0x10004be3
cmp edi, 0x271
je 0x10004be3
cmp edi, esi
je 0x10004be3
cmp edi, ebx
je 0x10004be3
cmp edi, 0x322
je 0x10004be3
cmp edi, 0x3ee
je 0x10004be3
cmp edi, 0x4d4
je 0x10004be3
cmp edi, 0x46c
je 0x10004be3
cmp edi, 0x445
je 0x10004be3
cmp edi, 0x446
jne 0x100051d7
mov eax, dword [0x10086e04]
cmp edx, 3
jne 0x10004bb2
test eax, eax
jne 0x10004be3
cmp edi, 0x474
je 0x100051d7
cmp edi, 0x46e
je 0x100051d7
cmp edi, 0x46f
je 0x100051d7
cmp edi, 0x470
je 0x100051d7
cmp edi, ecx
je 0x100051d7
cmp edi, 0x3db
je 0x100051d7
cmp edi, esi
je 0x100051d7
cmp edi, ebx
je 0x100051d7
cmp edi, 0x3bc
je 0x100051d7
cmp edi, 0x3bf
je 0x100051d7
cmp edi, 0x3c3
je 0x100051d7
cmp edi, 0x46c
je 0x100051d7
cmp edi, 0x445
je 0x100051d7
cmp edi, 0x446
jne 0x100051d7
cmp edx, 1
jne 0x10004bc4
cmp dword [0x10086dfc], 0
je 0x100051d7
cmp edx, 2
jne 0x10004bd6
cmp dword [0x10086e00], 0
je 0x100051d7
cmp edx, 3
jne 0x10004be3
test eax, eax
je 0x100051d7
mov eax, dword [0x1007d23c]
sub eax, dword [ebp + 8]
push eax
call sub.MSVCRT.dll_abs
cmp eax, 0xa
pop ecx
jg 0x100051d7
mov eax, dword [0x1007d240]
sub eax, dword [ebp + 0xc]
push eax
call sub.MSVCRT.dll_abs
cmp eax, 0xa
pop ecx
jg 0x100051d7
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.10005502
jmp 0x10004766
cmp byte [esi + 5], 0
je 0x100051d7
cmp byte [esi + 6], 1
push 7
pop ecx
push 0xf
mov dword [ebp - 4], ecx
pop eax
jne 0x10004c49
movsx edx, word [esi + 7]
mov dword [0x1007d2b8], edx
mov dword [ebp - 4], eax
cmp byte [esi + 6], 2
jne 0x10004c5c
movsx edx, word [esi + 0xb]
mov dword [0x1007d2d8], edx
mov dword [ebp - 4], eax
cmp byte [esi + 6], 4
jne 0x10004c6f
movsx edx, word [esi + 9]
mov dword [0x1007d294], edx
mov dword [ebp - 4], eax
cmp byte [esi + 6], cl
jne 0x10004c95
movsx ecx, word [esi + 7]
mov dword [0x1007d2b8], ecx
mov dword [ebp - 4], eax
movsx ecx, word [esi + 9]
mov dword [0x1007d294], ecx
movsx ecx, word [esi + 0xb]
mov dword [0x1007d2d8], ecx
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008100
movzx edi, al
lea eax, [ebp - 4]
push eax
mov eax, edi
imul eax, eax, 0x17
push 0x16
add eax, 0x100837cd
push esi
push eax
call fcn.10008160
push edi
call fcn.10004161
add esp, 0x1c
jmp 0x100051d7
lea eax, [ebp - 4]
mov dword [ebp - 4], 5
push eax
push esi
call fcn.10008100
pop ecx
test al, al
pop ecx
je 0x100051d7
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008100
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008100
movzx eax, al
add esp, 0x10
cmp eax, edi
jle 0x100051d7
mov ebx, eax
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008100
movzx edi, al
lea eax, [ebp - 4]
push eax
mov eax, edi
imul eax, eax, 0x17
push 0x16
add eax, 0x100837cd
push esi
push eax
call fcn.10008160
push edi
call fcn.10004161
add esp, 0x1c
dec ebx
jne 0x10004d06
jmp 0x100051d7
cmp eax, 0x71
jg 0x10004f5d
je 0x10004f0e
sub eax, 0x61
je 0x10004e91
dec eax
dec eax
je 0x10004e91
sub eax, 3
je 0x10004e79
push 5
pop ecx
sub eax, ecx
je 0x10004e60
dec eax
je 0x10004e47
sub eax, 4
jne 0x100051d7
lea eax, [ebp - 4]
mov dword [ebp - 4], ecx
push eax
push esi
call fcn.10008100
pop ecx
test al, al
pop ecx
je 0x100051d7
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008140
mov edi, eax
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008140
add esp, 0x10
cmp dword [0x10086f44], 1
jne 0x100051d7
cmp dword [0x1007cf14], eax
jne 0x100051d7
cmp dword [0x1007c9d0], 1
je 0x10004e0c
cmp byte [0x1007d2f8], 0
jne 0x100051d7
cmp byte [0x1007d2f9], 0
jne 0x100051d7
mov eax, edi
mov ecx, 0x100
cdq
mov esi, ecx
idiv esi
mov eax, edi
mov byte [0x1007d2f8], dl
cdq
idiv ecx
mov byte [0x1007d2f9], al
jmp 0x100051d7
cmp byte [0x1007d2fa], 0
jne 0x100051d7
cmp byte [0x1007d2fb], 0
jne 0x100051d7
mov eax, edi
mov ecx, 0x100
cdq
mov esi, ecx
idiv esi
mov eax, edi
mov byte [0x1007d2fa], dl
cdq
idiv ecx
mov byte [0x1007d2fb], al
jmp 0x100051d7
lea eax, [ebp - 4]
mov dword [ebp - 4], ecx
push eax
push esi
call fcn.10008120
pop ecx
mov dword [0x1007d2d8], eax
pop ecx
jmp 0x100051d7
lea eax, [ebp - 4]
mov dword [ebp - 4], ecx
push eax
push esi
call fcn.10008120
pop ecx
mov dword [0x1007d294], eax
pop ecx
jmp 0x100051d7
lea eax, [ebp - 4]
mov dword [ebp - 4], 5
push eax
push esi
call fcn.10008120
pop ecx
pop ecx
jmp 0x1000490e
lea eax, [ebp - 4]
mov dword [ebp - 4], 6
push eax
push esi
call fcn.10008140
cmp eax, dword [0x1007cf14]
pop ecx
pop ecx
jne 0x100051d7
mov al, byte [esi + 4]
cmp al, 0x63
je 0x10004ed6
cmp al, 0x61
je 0x10004ed6
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008120
mov edi, eax
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008120
add esp, 0x10
jmp 0x10004f03
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008120
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008120
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008120
mov edi, eax
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008120
add esp, 0x20
mov dword [0x1007d23c], edi
jmp 0x1000472e
mov al, byte [esi + 5]
mov cl, byte [esi + 6]
cmp byte [0x1007d2f8], al
jne 0x10004f32
cmp byte [0x1007d2f9], cl
jne 0x10004f32
and byte [0x1007d2f8], 0
and byte [0x1007d2f9], 0
cmp byte [0x1007d2fa], al
jne 0x100051d7
cmp byte [0x1007d2fb], cl
jne 0x100051d7
and byte [0x1007d2fa], 0
and byte [0x1007d2fb], 0
jmp 0x100051d7
sub eax, 0x75
je 0x1000517c
sub eax, 0x1c
je 0x1000515b
sub eax, 9
je 0x1000505b
sub eax, 0x27
je 0x1000504d
sub eax, 0xe
jne 0x100051d7
lea eax, [ebp - 4]
mov dword [ebp - 4], 5
push eax
push esi
call fcn.10008100
movzx edi, al
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008140
add esp, 0x10
test edi, edi
je 0x100051d7
lea eax, [ebp - 4]
cmp edi, 1
push eax
push esi
jne 0x10005007
call fcn.10008100
lea eax, [ebp - 4]
push eax
push 0x16
lea eax, [ebp - 0x18c]
push esi
push eax
call fcn.10008160
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008100
movzx edi, al
lea eax, [ebp - 4]
push eax
mov eax, edi
imul eax, eax, 0x17
push 0x16
add eax, 0x100837cd
push esi
push eax
call fcn.10008160
push edi
call fcn.10004161
add esp, 0x34
jmp 0x100051d7
call fcn.10008120
pop ecx
test eax, eax
pop ecx
jle 0x100051d7
mov ebx, eax
lea eax, [ebp - 4]
push eax
push esi
call fcn.10008100
movzx edi, al
lea eax, [ebp - 4]
push eax
mov eax, edi
imul eax, eax, 0x17
push 0x16
add eax, 0x100837cd
push esi
push eax
call fcn.10008160
push edi
call fcn.10004161
add esp, 0x1c
dec ebx
jne 0x10005018
jmp 0x100051d7
push dword [ebp + 0xc]
push esi
call fcn.1000448a
jmp 0x10004766
lea eax, [ebp - 8]
mov dword [ebp - 8], 5
push eax
push esi
call fcn.10008100
lea eax, [ebp - 8]
push eax
push esi
call fcn.10008100
lea eax, [ebp - 8]
push eax
push esi
call fcn.10008100
push 0xa
lea eax, [ebp - 8]
pop edi
add dword [ebp - 8], edi
push eax
push esi
call fcn.10008100
mov bl, al
lea eax, [ebp - 8]
push eax
push esi
call fcn.10008100
mov byte [ebp + 0xb], al
lea eax, [ebp - 8]
push eax
push esi
call fcn.10008100
mov byte [ebp - 0xa], al
lea eax, [ebp - 8]
push eax
push esi
call fcn.10008100
mov byte [ebp - 9], al
lea eax, [ebp - 8]
push eax
push esi
call fcn.10008100
add esp, 0x40
lea eax, [ebp - 8]
push eax
push esi
call fcn.10008100
pop ecx
mov byte [ebp + 0xf], al
pop ecx
push 1
pop esi
cmp dword [0x10076060], esi
jne 0x10005108
cmp al, 0xa
jb 0x100050f3
and dword [0x10076060], 0
push esi
push 0x1000a7dc
jmp 0x10005151
push dword [0x10077708]
push dword [0x10077704]
push edi
call fcn.100063dc
add esp, 0xc
cmp dword [0x100761e8], esi
jne 0x100051d7
cmp bl, 0x89
je 0x10005144
cmp byte [ebp + 0xb], 0x89
je 0x10005144
cmp byte [ebp - 0xa], 0x89
je 0x10005144
cmp byte [ebp - 9], 0x89
je 0x10005144
cmp byte [ebp + 0xf], 8
push edi
jb 0x1000513d
call fcn.100064f8
pop ecx
jmp 0x100051d7
call fcn.100064ad
jmp 0x10005137
and dword [0x100761e8], 0
push esi
push 0x1000a7c8
call fcn.10005282
jmp 0x10004766
lea eax, [ebp - 4]
mov dword [ebp - 4], 5
push eax
push esi
call fcn.10008100
pop ecx
test al, al
pop ecx
je 0x100051d7
lea eax, [ebp - 4]
push eax
push esi
jmp 0x10004fbd
lea eax, [ebp + 0xc]
mov dword [ebp + 0xc], 5
push eax
push esi
call fcn.10008140
cmp eax, dword [0x1007cf14]
pop ecx
pop ecx
jne 0x100051d7
mov al, byte [esi + 9]
mov byte [0x1007cf18], al
mov al, byte [esi + 0xa]
mov byte [0x1007cf19], al
mov al, byte [esi + 0xb]
mov byte [0x1007cf1a], al
mov al, byte [esi + 0xc]
mov byte [0x1007cf1b], al
mov al, byte [esi + 0xd]
mov byte [0x1007cf1c], al
mov al, byte [esi + 0xe]
mov byte [0x1007cf1d], al
mov al, byte [esi + 0xf]
mov byte [0x1007cf1e], al
mov al, byte [esi + 0x10]
mov byte [0x1007cf1f], al
pop edi
pop esi
pop ebx
leave
ret