Function at 0x100453f0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov eax, dword [0x100d9180]
xor eax, ebp
mov dword [ebp - 4], eax
mov ah, 0x12
mov byte [ebp - 7], 0
push ebx
mov al, 0x3d
mov byte [ebp - 0xc], ah
push esi
mov esi, dword [ebp + 8]
xor al, ah
mov cl, 0x7f
mov byte [ebp - 0xb], al
mov dl, 0x73
mov byte [ebp - 7], 0
mov bl, 0x62
xor cl, ah
xor dl, ah
mov byte [ebp - 0xa], cl
xor bl, ah
mov byte [ebp - 9], dl
push 4
lea eax, [ebp - 0xb]
mov byte [ebp - 8], bl
push eax
push esi
call fcn.1008dcd0
add esp, 0xc
test eax, eax
jne 0x10045475
lea eax, [esi + 4]
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x30]
push ecx
mov eax, 0x100061f0
add eax, 0x251
push 0x251
push eax
call fcn.100433d0
add esp, 0xc
mov al, 1
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1006638a
mov esp, ebp
pop ebp
ret
mov ch, 0x32
mov byte [ebp - 6], 0
mov al, 0x1d
mov byte [ebp - 0xc], ch
mov ah, 0x57
mov byte [ebp - 6], 0
xor al, ch
xor ah, ch
mov byte [ebp - 0xb], al
mov cl, 0x5f
mov byte [ebp - 7], ah
mov dl, 0x5d
push 5
lea eax, [ebp - 0xb]
mov bl, 0x44
push eax
xor cl, ch
xor dl, ch
xor bl, ch
mov byte [ebp - 0xa], cl
push esi
mov byte [ebp - 9], dl
mov byte [ebp - 8], bl
call fcn.1008dcd0
add esp, 0xc
test eax, eax
jne 0x1004570b
add esi, 5
call fcn.10011fb0
test al, al
je 0x100456f9
cmp dword [0x34b0e88], 0
je 0x100456f9
mov ah, 0x38
mov byte [ebp - 0x27], 0
mov al, 0x59
mov byte [ebp - 0x2c], ah
mov cl, 0x4d
mov byte [ebp - 0x27], 0
xor cl, ah
mov dl, 0x4c
xor al, ah
mov byte [ebp - 0x2a], cl
xor dl, ah
mov byte [ebp - 0x2b], al
mov bl, 0x57
mov byte [ebp - 0x29], dl
xor bl, ah
lea ecx, [ebp - 0x2b]
mov byte [ebp - 0x28], bl
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10045527
test dl, dl
je 0x10045523
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10045527
add eax, 2
add ecx, 2
test dl, dl
jne 0x10045507
xor eax, eax
jmp 0x1004552c
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1004555f
movzx eax, word [0x100efadc]
push eax
call fcn.10012030
add esp, 4
test al, al
je 0x100456f9
call fcn.10012830
pop esi
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1006638a
mov esp, ebp
pop ebp
ret
mov bl, 0x51
mov byte [ebp - 0x10], 0
mov al, 0x3a
mov byte [ebp - 0x14], bl
mov cl, 0x39
mov byte [ebp - 0x10], 0
xor al, bl
xor cl, bl
mov dl, 0x3e
mov byte [ebp - 0x13], al
xor dl, bl
mov byte [ebp - 0x12], cl
mov byte [ebp - 0x11], dl
lea ecx, [ebp - 0x13]
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100455a6
test dl, dl
je 0x100455a2
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100455a6
add eax, 2
add ecx, 2
test dl, dl
jne 0x10045586
xor eax, eax
jmp 0x100455ab
sbb eax, eax
or eax, 1
test eax, eax
jne 0x100455cb
push 1
call fcn.100134a0
add esp, 4
mov al, 1
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1006638a
mov esp, ebp
pop ebp
ret
mov bl, 0x58
mov byte [ebp - 0x18], 0
mov al, 0x35
mov byte [ebp - 0x1c], bl
mov cl, 0x39
mov byte [ebp - 0x18], 0
xor al, bl
xor cl, bl
mov dl, 0x2d
mov byte [ebp - 0x1b], al
xor dl, bl
mov byte [ebp - 0x1a], cl
mov byte [ebp - 0x19], dl
lea ecx, [ebp - 0x1b]
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10045612
test dl, dl
je 0x1004560e
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10045612
add eax, 2
add ecx, 2
test dl, dl
jne 0x100455f2
xor eax, eax
jmp 0x10045617
sbb eax, eax
or eax, 1
test eax, eax
jne 0x10045637
push 1
call fcn.10013790
add esp, 4
mov al, 1
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1006638a
mov esp, ebp
pop ebp
ret
mov bl, 0x57
mov byte [ebp - 0x20], 0
mov cl, 0x3b
mov byte [ebp - 0x24], bl
mov al, 0x36
mov byte [ebp - 0x20], 0
mov dl, cl
xor al, bl
xor cl, bl
mov byte [ebp - 0x23], al
xor dl, bl
mov byte [ebp - 0x22], cl
mov byte [ebp - 0x21], dl
lea ecx, [ebp - 0x23]
mov eax, esi
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10045680
test dl, dl
je 0x1004567c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10045680
add eax, 2
add ecx, 2
test dl, dl
jne 0x10045660
xor eax, eax
jmp 0x10045685
sbb eax, eax
or eax, 1
test eax, eax
jne 0x100456bc
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0
push 0
push 0x10046230
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop esi
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1006638a
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0xc]
push eax
push esi
call fcn.100452d0
add esp, 0x10
test al, al
je 0x100456f9
lea ecx, [ebp - 0x30]
mov eax, fcn.10016100
push ecx
lea ecx, [ebp - 0x34]
add eax, 0x16b
push ecx
lea ecx, [ebp - 0xc]
push ecx
push 0x16b
push eax
call fcn.10043210
add esp, 0x14
pop esi
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1006638a
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor al, al
pop esi
xor ecx, ebp
pop ebx
call fcn.1006638a
mov esp, ebp
pop ebp
ret