Function at 0x4195e0
Capabilities:
Create thread
Inject thread
Resume thread

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 8
mov eax, dword [0x47f400]
xor eax, esp
mov dword [esp + 4], eax
xor edi, edi
test edx, edx
je 0x419895
test ecx, ecx
je 0x419895
mov ebx, edx
call fcn.004198b0
mov ebp, eax
cmp byte [0x539572], 1
je 0x419640
mov byte [0x539572], 1
movsd xmm0, qword [str.LoadLibr]
movsd qword [0x539564], xmm0
mov dword [0x53956c], 0x57797261
mov word [0x539570], 0x1500
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0x539564
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x419720
mov esi, eax
push ebx
call fcn.0044fcf1
add esp, 4
lea edi, [eax*2 + 2]
push 4
push 0x3000
push edi
push 0
push ebp
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
test eax, eax
je 0x41975c
mov ecx, ebp
mov ebp, eax
push 0
push edi
push ebx
push eax
mov ebx, ecx
push ecx
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x4197c3
push 0
push 4
push ebp
push esi
push 0
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test eax, eax
je 0x419827
mov esi, eax
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x32
call edi
push esi
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push 0x23
call edi
push 0xc000
push 0
push ebp
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov dword [esp], 0
mov eax, esp
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov esi, dword [esp]
mov ecx, ebx
call fcn.00419930
xor edi, edi
cmp esi, 0x103
jne 0x419895
mov ecx, str.successful.wav
call fcn.00413c70
mov edi, 1
jmp 0x419895
cmp byte [0x539588], 1
je 0x419748
mov byte [0x539588], 1
movaps xmm0, xmmword [0x471510]
movups xmmword [0x539574], xmm0
mov dword [0x539584], 0x828d0000
push 0x539574
push 0
call fcn.00411cb0
add esp, 8
jmp 0x419895
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
mov esi, eax
call edi
cmp byte [0x5395b8], 0
jne 0x4197b7
mov byte [0x5395b8], 1
movaps xmm0, xmmword [0x471500]
movups xmmword [0x53958a], xmm0
movaps xmm0, xmmword [0x4714d0]
movups xmmword [0x53959a], xmm0
movsd xmm0, qword [0x4714e0]
movsd qword [0x5395aa], xmm0
mov dword [0x5395b2], 0xa
mov word [0x5395b6], 0x5989
push esi
push eax
push 0x53958a
jmp 0x419889
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
mov esi, eax
call edi
cmp byte [0x5395e8], 0
jne 0x41981e
mov byte [0x5395e8], 1
movaps xmm0, xmmword [str.error_48error_47error_46error_45]
movups xmmword [0x5395ba], xmm0
movaps xmm0, xmmword [0x4714d0]
movups xmmword [0x5395ca], xmm0
movsd xmm0, qword [0x4714e0]
movsd qword [0x5395da], xmm0
mov dword [0x5395e2], 0xa
mov word [0x5395e6], 0x51f3
push esi
push eax
push 0x5395ba
jmp 0x419889
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
mov esi, eax
call edi
cmp byte [0x539618], 0
jne 0x419882
mov byte [0x539618], 1
movaps xmm0, xmmword [str.error_49__i__0x_X_0_]
movups xmmword [0x5395ea], xmm0
movaps xmm0, xmmword [0x4714d0]
movups xmmword [0x5395fa], xmm0
movsd xmm0, qword [0x4714e0]
movsd qword [0x53960a], xmm0
mov dword [0x539612], 0xa
mov word [0x539616], 0xadca
push esi
push eax
push 0x5395ea
push 0
call fcn.00411cb0
add esp, 0x10
xor edi, edi
mov ecx, dword [esp + 4]
xor ecx, esp
call fcn.0043b6ab
mov eax, edi
add esp, 8
pop esi
pop edi
pop ebx
pop ebp
ret