Function at 0x483117
Capabilities:
Create thread

Disassembly:
push 0x3c
mov eax, 0x4ae99a
call fcn.004a95a1
mov ebx, ecx
mov dword [ebp - 0x30], ebx
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov dword [ebp - 0x28], edi
mov eax, dword [0x4b70c8]
cmp eax, 0x4b70c8
je 0x48315d
test byte [eax + 0x1c], 1
je 0x48315d
cmp byte [eax + 0x19], 5
jb 0x48315d
push esi
push dword [eax + 0x14]
mov edx, 0x40fed8
push dword [eax + 0x10]
push 0x12
pop ecx
call fcn.0041610f
lea ecx, [ebx + 0x34]
cmp dword [ecx], esi
je 0x48316b
mov edx, esi
call fcn.00424195
lea eax, [ebx + 0x38]
push eax
mov dword [ebp - 0x2c], eax
call dword [sym.imp.winmde.dll_MFCreateNetVRoot]
mov ebx, eax
mov edx, dword [0x4b70c8]
cmp edx, 0x4b70c8
je 0x4831b8
test byte [edx + 0x1c], 2
je 0x4831b8
movzx ecx, byte [edx + 0x19]
xor eax, eax
test ebx, ebx
sets al
dec eax
and eax, 3
add eax, 2
cmp ecx, eax
jb 0x4831b8
push ebx
push dword [edx + 0x14]
push dword [edx + 0x10]
mov edx, 0x40fed8
push 0x13
pop ecx
call fcn.0041610f
mov esi, 0x405000
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
test ebx, ebx
js 0x483566
and dword [ebp - 0x34], 0
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x34]
and dword [ebp - 4], 0
push ecx
push 0x403d5c
mov eax, dword [eax]
push eax
mov esi, dword [eax]
mov ecx, dword [esi]
call dword [0x4bb544]
call dword [esi]
mov ebx, eax
mov edx, dword [0x4b70c8]
cmp edx, 0x4b70c8
je 0x48322c
test byte [edx + 0x1c], 2
je 0x48322c
movzx ecx, byte [edx + 0x19]
xor eax, eax
test ebx, ebx
sets al
dec eax
and eax, 3
add eax, 2
cmp ecx, eax
jb 0x48322c
push ebx
push dword [edx + 0x14]
push dword [edx + 0x10]
mov edx, 0x40fed8
push 0x14
pop ecx
call fcn.0041610f
mov edi, dword [ebp - 0x28]
mov esi, 0x405000
or ecx, 0xffffffff
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
test ebx, ebx
js 0x4832d0
mov esi, 0x404100
lea edi, [ebp - 0x24]
xor eax, eax
push 0xb
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
and dword [ebp - 0x14], 0
lea edi, [ebp - 0x48]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
pop eax
mov word [ebp - 0x48], ax
mov eax, dword [ebp - 0x34]
mov word [ebp - 0x40], cx
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x24]
mov esi, dword [eax]
push ecx
push eax
mov ecx, dword [esi + 0x18]
call dword [0x4bb544]
call dword [esi + 0x18]
mov ebx, eax
mov edx, dword [0x4b70c8]
cmp edx, 0x4b70c8
je 0x4832c1
test byte [edx + 0x1c], 2
je 0x4832c1
movzx ecx, byte [edx + 0x19]
xor eax, eax
test ebx, ebx
sets al
dec eax
and eax, 3
add eax, 2
cmp ecx, eax
jb 0x4832c1
push ebx
push dword [edx + 0x14]
push dword [edx + 0x10]
mov edx, 0x40fed8
push 0x15
pop ecx
call fcn.0041610f
mov edi, dword [ebp - 0x28]
mov esi, 0x405000
or ecx, 0xffffffff
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 4], ecx
lea ecx, [ebp - 0x34]
call fcn.0041b421
test ebx, ebx
js 0x483566
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x30]
add eax, 0x24
push eax
mov esi, dword [ecx]
push 0x252f
push ecx
mov ecx, dword [esi + 0xc]
call dword [0x4bb544]
call dword [esi + 0xc]
mov ebx, eax
mov edx, dword [0x4b70c8]
cmp edx, 0x4b70c8
je 0x483343
test byte [edx + 0x1c], 2
je 0x483343
movzx ecx, byte [edx + 0x19]
xor eax, eax
test ebx, ebx
sets al
dec eax
and eax, 3
add eax, 2
cmp ecx, eax
jb 0x483343
push ebx
push dword [edx + 0x14]
push dword [edx + 0x10]
mov edx, 0x40fed8
push 0x16
pop ecx
call fcn.0041610f
mov edx, dword [ebp - 0x28]
mov esi, 0x404ff0
mov edi, edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
test ebx, ebx
js 0x483569
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x30]
add eax, 0x28
push eax
mov esi, dword [ecx]
push 0x2531
push ecx
mov ecx, dword [esi + 0xc]
call dword [0x4bb544]
call dword [esi + 0xc]
mov ebx, eax
mov edx, dword [0x4b70c8]
cmp edx, 0x4b70c8
je 0x4833b9
test byte [edx + 0x1c], 2
je 0x4833b9
movzx ecx, byte [edx + 0x19]
xor eax, eax
test ebx, ebx
sets al
dec eax
and eax, 3
add eax, 2
cmp ecx, eax
jb 0x4833b9
push ebx
push dword [edx + 0x14]
push dword [edx + 0x10]
mov edx, 0x40fed8
push 0x17
pop ecx
call fcn.0041610f
mov edx, dword [ebp - 0x28]
mov esi, 0x404ff0
mov edi, edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
test ebx, ebx
js 0x483569
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x30]
add eax, 0x2c
push eax
mov esi, dword [ecx]
push 0x253b
push ecx
mov ecx, dword [esi + 0xc]
call dword [0x4bb544]
call dword [esi + 0xc]
mov ebx, eax
mov edx, dword [0x4b70c8]
cmp edx, 0x4b70c8
je 0x48342f
test byte [edx + 0x1c], 2
je 0x48342f
movzx ecx, byte [edx + 0x19]
xor eax, eax
test ebx, ebx
sets al
dec eax
and eax, 3
add eax, 2
cmp ecx, eax
jb 0x48342f
push ebx
push dword [edx + 0x14]
push dword [edx + 0x10]
mov edx, 0x40fed8
push 0x18
pop ecx
call fcn.0041610f
mov edx, dword [ebp - 0x28]
mov esi, 0x404ff0
mov edi, edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
test ebx, ebx
js 0x483569
mov edi, dword [ebp - 0x30]
push 0x40fbf0
lea esi, [edi + 0x40]
push esi
call fcn.0041a5a1
pop ecx
pop ecx
mov eax, dword [0x4b70c8]
cmp eax, 0x4b70c8
je 0x483485
test byte [eax + 0x1c], 2
je 0x483485
cmp byte [eax + 0x19], 4
jb 0x483485
push dword [esi]
mov edx, 0x40fed8
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x19
pop ecx
call fcn.00416072
mov ecx, edi
call fcn.00485811
mov eax, dword [0x4b70c8]
cmp eax, 0x4b70c8
je 0x4834b7
test byte [eax + 0x1c], 2
je 0x4834b7
cmp byte [eax + 0x19], 4
jb 0x4834b7
push dword [eax + 0x14]
mov edx, 0x40fed8
push dword [eax + 0x10]
push 0x1a
pop ecx
call fcn.00416054
mov eax, dword [edi]
push edi
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4bb544]
call esi
mov eax, dword [0x4b70c8]
mov esi, 0x4b70c8
cmp eax, esi
je 0x4834f4
test byte [eax + 0x1c], 2
je 0x4834f4
cmp byte [eax + 0x19], 4
jb 0x4834f4
push dword [eax + 0x14]
mov edx, 0x40fed8
push dword [eax + 0x10]
push 0x1b
pop ecx
call fcn.00416054
lea eax, [edi + 0x94]
push eax
xor eax, eax
push eax
push edi
push 0x485f10
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [edi + 0x90], eax
test eax, eax
jne 0x483566
mov eax, dword [0x4b70c8]
cmp eax, esi
je 0x483556
test byte [eax + 0x1c], 2
je 0x483556
cmp byte [eax + 0x19], 2
jb 0x483556
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x48353d
movzx eax, ax
or eax, 0x80070000
push eax
mov eax, dword [0x4b70c8]
mov edx, 0x40fed8
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x1c
pop ecx
call fcn.0041610f
mov eax, dword [edi]
push edi
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x4bb544]
call esi
mov edx, dword [ebp - 0x28]
mov esi, dword [0x4b70c8]
cmp esi, 0x4b70c8
je 0x4835a8
test byte [esi + 0x1c], 1
je 0x4835a8
movzx eax, byte [esi + 0x19]
mov ecx, ebx
sar ecx, 0x1f
and ecx, 0xfffffffd
add ecx, 5
cmp eax, ecx
jl 0x4835a8
movzx eax, word [edx]
mov edx, 0x40fed8
push eax
push ebx
push dword [esi + 0x14]
push dword [esi + 0x10]
push 0x1d
pop ecx
call fcn.00417822
mov eax, ebx
call fcn.004a9550
ret 8