Function at 0x40d440
Capabilities:
Create thread

Disassembly:
push 0xffffffffffffffff
push 0x48e2d6
mov eax, dword fs:[0]
push eax
sub esp, 0x48
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4b82d8]
xor eax, esp
push eax
lea eax, [esp + 0x5c]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x14], ebx
lea ecx, [esp + 0x44]
call fcn.004111d0
cmp byte [esp + 0x6c], 0
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [esp + 0x64], 0
jne 0x40d4a2
mov esi, dword [ebx]
test esi, esi
je 0x40d4a2
lea eax, [esp + 0x44]
push eax
call edi
push eax
mov ecx, esi
call fcn.00418e40
jmp 0x40d4ae
lea ecx, [esp + 0x44]
push ecx
mov ecx, ebx
call fcn.0040d2c0
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x54]
mov esi, ecx
cmp ecx, eax
jbe 0x40d4c9
call fcn.0045d981
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
mov ebx, dword [esp + 0x44]
mov ebp, esi
mov dword [esp + 0x18], eax
cmp ecx, eax
jbe 0x40d4dc
call fcn.0045d981
mov edx, dword [esp + 0x44]
mov dword [esp + 0x24], edx
call edi
lea ecx, [esp + 0x2c]
mov dword [esp + 0x1c], eax
call fcn.00411230
mov eax, dword [esp + 0x14]
cmp byte [eax + 4], 0
mov byte [esp + 0x64], 1
je 0x40d510
call fcn.0040c7b0
test al, al
je 0x40d63a
nop
xor edi, edi
cmp ebx, edi
je 0x40d51c
cmp ebx, dword [esp + 0x24]
je 0x40d521
call fcn.0045d981
cmp ebp, dword [esp + 0x18]
je 0x40d63c
cmp ebx, edi
jne 0x40d5b7
call fcn.0045d981
xor eax, eax
cmp ebp, dword [eax + 0x10]
jb 0x40d544
call fcn.0045d981
mov ecx, dword [esp + 0x1c]
cmp dword [ebp], ecx
je 0x40d619
cmp ebx, edi
jne 0x40d5be
call fcn.0045d981
xor eax, eax
cmp ebp, dword [eax + 0x10]
jb 0x40d566
call fcn.0045d981
mov edx, dword [ebp]
mov eax, dword [esp + 0x14]
cmp edx, dword [eax + 0x54]
je 0x40d619
push 0xc
call fcn.00419b96
mov esi, eax
add esp, 4
cmp esi, edi
je 0x40d5c6
cmp ebx, edi
jne 0x40d5c2
call fcn.0045d981
xor eax, eax
cmp ebp, dword [eax + 0x10]
jb 0x40d59b
call fcn.0045d981
mov eax, dword [ebp]
mov ecx, dword [esp + 0x14]
mov dl, byte [esp + 0x6c]
mov dword [esi + 4], eax
mov al, byte [esp + 0x70]
mov dword [esi], ecx
mov byte [esi + 8], dl
mov byte [esi + 9], al
jmp 0x40d5c8
mov eax, dword [ebx]
jmp 0x40d53a
mov eax, dword [ebx]
jmp 0x40d55c
mov eax, dword [ebx]
jmp 0x40d591
xor esi, esi
push edi
push edi
push esi
push 0x40d3d0
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esp + 0x20], eax
cmp eax, edi
je 0x40d619
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x30]
call fcn.00411430
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x38]
sub edx, eax
and edx, 0xfffffffc
cmp edx, 0x100
jne 0x40d619
push 0xffffffffffffffff
push 1
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
lea ecx, [esp + 0x2c]
call fcn.00410290
cmp ebx, edi
jne 0x40d636
call fcn.0045d981
xor eax, eax
cmp ebp, dword [eax + 0x10]
jb 0x40d62e
call fcn.0045d981
add ebp, 4
jmp 0x40d510
mov eax, dword [ebx]
jmp 0x40d624
xor edi, edi
mov eax, dword [esp + 0x3c]
sub eax, dword [esp + 0x38]
sar eax, 2
cmp eax, edi
je 0x40d6ad
ja 0x40d652
call fcn.0045d981
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
push 0xffffffffffffffff
push 1
sub eax, ecx
push ecx
sar eax, 2
push eax
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
mov ebp, eax
cmp ecx, eax
jbe 0x40d686
call fcn.0045d981
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
mov esi, dword [esp + 0x2c]
mov edi, ecx
cmp ecx, eax
jbe 0x40d695
call fcn.0045d981
mov eax, dword [esp + 0x2c]
push ebp
push esi
push edi
push eax
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x40]
call fcn.0040fea0
xor edi, edi
mov eax, dword [esp + 0x38]
cmp eax, edi
je 0x40d6be
push eax
call fcn.00419bc5
add esp, 4
mov edx, dword [esp + 0x2c]
push edx
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], edi
call fcn.00419bc5
mov eax, dword [esp + 0x54]
add esp, 4
cmp eax, edi
je 0x40d6e8
push eax
call fcn.00419bc5
add esp, 4
mov eax, dword [esp + 0x44]
push eax
mov dword [esp + 0x54], edi
mov dword [esp + 0x58], edi
mov dword [esp + 0x5c], edi
call fcn.00419bc5
add esp, 4
mov ecx, dword [esp + 0x5c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x54
ret 8