Function at 0x41991f
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov ebx, dword [0x5168b3]
call fcn.004019e2
mov eax, 0
cmp eax, ecx
jl 0x419949
push 1
call fcn.0048254d
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 4], ebx
push dword [ebp - 4]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x68]
cmp dword [ebp + 8], eax
jne 0x419c96
cmp dword [0x5168d3], 1
jne 0x419b05
cmp dword [0x5168eb], 0
jle 0x4199ab
mov dword [ebp - 4], esp
push dword [0x5168eb]
call dword [0x5169e7]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x4199a6
push 6
call fcn.0048254d
add esp, 4
jmp 0x4199d3
mov dword [ebp - 4], esp
push dword [0x5168db]
call dword [0x5169eb]
nop
nop
nop
nop
add esp, 4
cmp dword [ebp - 4], esp
je 0x4199d3
push 6
call fcn.0048254d
add esp, 4
mov dword [0x5168d3], 0
mov dword [0x5168e3], 0
mov ebx, dword [0x5168b3]
call fcn.004019e2
mov eax, 0
cmp eax, ecx
jl 0x419a08
push 1
call fcn.0048254d
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 4], ebx
push 0x10
call fcn.0048253b
add esp, 4
mov dword [ebp - 8], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
push 0
lea eax, [ebp - 8]
push eax
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
lea eax, [ebp - 0x10]
push eax
push 1
mov eax, 0x511450
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
push 1
mov eax, 0x511450
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
push 1
mov eax, 0x512612
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push 1
mov eax, 0x511450
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 4]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1cc]
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x419ab4
push ebx
call fcn.00482541
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x419ac4
push ebx
call fcn.00482541
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x419ad4
push ebx
call fcn.00482541
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x419ae4
push ebx
call fcn.00482541
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x419af4
push ebx
call fcn.00482541
add esp, 4
mov ebx, dword [ebp - 8]
push ebx
call fcn.00482541
add esp, 4
jmp 0x419c91
mov dword [0x5168d3], 1
mov dword [0x5168e3], 1
cmp dword [0x5168eb], 0
jle 0x419b50
mov dword [ebp - 4], esp
push dword [0x5168eb]
call dword [0x5169ef]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x419b4b
push 6
call fcn.0048254d
add esp, 4
jmp 0x419b78
mov dword [ebp - 4], esp
push dword [0x5168db]
call dword [0x5169cf]
nop
nop
nop
nop
add esp, 4
cmp dword [ebp - 4], esp
je 0x419b78
push 6
call fcn.0048254d
add esp, 4
mov ebx, dword [0x5168b3]
call fcn.004019e2
mov eax, 0
cmp eax, ecx
jl 0x419b99
push 1
call fcn.0048254d
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 4], ebx
push 0x10
call fcn.0048253b
add esp, 4
mov dword [ebp - 8], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
push 0
lea eax, [ebp - 8]
push eax
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
lea eax, [ebp - 0x10]
push eax
push 1
mov eax, 0x4d121f
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
push 1
mov eax, 0x4d121f
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
push 1
mov eax, 0x4d21c2
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push 1
mov eax, 0x4d121f
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 4]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1cc]
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x419c45
push ebx
call fcn.00482541
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x419c55
push ebx
call fcn.00482541
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x419c65
push ebx
call fcn.00482541
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x419c75
push ebx
call fcn.00482541
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x419c85
push ebx
call fcn.00482541
add esp, 4
mov ebx, dword [ebp - 8]
push ebx
call fcn.00482541
add esp, 4
jmp 0x41a24a
mov ebx, dword [0x5168b3]
call fcn.004019e2
mov eax, 1
cmp eax, ecx
jl 0x419cb7
push 1
call fcn.0048254d
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 4], ebx
push dword [ebp - 4]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x68]
cmp dword [ebp + 8], eax
jne 0x41a02f
mov ebx, dword [0x516867]
mov dword [ebp - 4], ebx
mov eax, dword [0x51686b]
mov ebx, dword [ebp - 4]
mov dword [ebx], eax
mov dword [0x5168e7], 0
cmp dword [0x5168eb], 0
jle 0x419d4e
mov dword [ebp - 4], esp
push dword [0x5168eb]
call dword [0x5169e7]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x419d24
push 6
call fcn.0048254d
add esp, 4
mov dword [ebp - 4], esp
push dword [0x5168eb]
call dword [0x5169f3]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x419d49
push 6
call fcn.0048254d
add esp, 4
jmp 0x419d9e
mov dword [ebp - 4], esp
push dword [0x5168db]
call dword [0x5169eb]
nop
nop
nop
nop
add esp, 4
cmp dword [ebp - 4], esp
je 0x419d76
push 6
call fcn.0048254d
add esp, 4
mov dword [ebp - 4], esp
push dword [0x5168db]
call dword [0x5169f7]
nop
nop
nop
nop
add esp, 4
cmp dword [ebp - 4], esp
je 0x419d9e
push 6
call fcn.0048254d
add esp, 4
mov dword [0x5168ff], 1
mov ebx, dword [0x5168bb]
call fcn.004019e2
mov eax, 0
cmp eax, ecx
jl 0x419dc9
push 1
call fcn.0048254d
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 4], ebx
mov ebx, dword [0x516853]
call fcn.004019e2
push ebx
push ecx
mov eax, dword [0x51686b]
dec eax
jns 0x419df3
push 4
call fcn.0048254d
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x419e06
push 1
call fcn.0048254d
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 8], ebx
push 1
push dword [ebp - 8]
push dword [ebp - 4]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x178]
mov ebx, eax
test ebx, ebx
je 0x419e32
push ebx
call fcn.00482541
add esp, 4
mov dword [0x5168d3], 0
mov ebx, dword [0x5168bf]
call fcn.004019e2
mov eax, 0
cmp eax, ecx
jl 0x419e5d
push 1
call fcn.0048254d
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 4], ebx
push 1
mov eax, 0x4a42ea
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x230]
mov ebx, eax
test ebx, ebx
je 0x419e92
push ebx
call fcn.00482541
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x419ea2
push ebx
call fcn.00482541
add esp, 4
mov ebx, dword [0x5168bf]
call fcn.004019e2
mov eax, 1
cmp eax, ecx
jl 0x419ec3
push 1
call fcn.0048254d
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 4], ebx
push 1
mov eax, 0x4a42ea
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x230]
mov ebx, eax
test ebx, ebx
je 0x419ef8
push ebx
call fcn.00482541
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x419f08
push ebx
call fcn.00482541
add esp, 4
push 0
call fcn.0041a250
mov ebx, dword [0x5168b3]
call fcn.004019e2
mov eax, 0
cmp eax, ecx
jl 0x419f33
push 1
call fcn.0048254d
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 4], ebx
push 0x10
call fcn.0048253b
add esp, 4
mov dword [ebp - 8], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
push 0
lea eax, [ebp - 8]
push eax
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
push 1
mov eax, 0x4d121f
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
push 1
mov eax, 0x4d21c2
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push 1
mov eax, 0x4d121f
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 4]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1cc]
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x419fde
push ebx
call fcn.00482541
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x419fee
push ebx
call fcn.00482541
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x419ffe
push ebx
call fcn.00482541
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41a00e
push ebx
call fcn.00482541
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41a01e
push ebx
call fcn.00482541
add esp, 4
mov ebx, dword [ebp - 8]
push ebx
call fcn.00482541
add esp, 4
jmp 0x41a24a
mov ebx, dword [0x5168b3]
call fcn.004019e2
mov eax, 2
cmp eax, ecx
jl 0x41a050
push 1
call fcn.0048254d
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x24], ebx
push dword [ebp - 0x24]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x68]
cmp dword [ebp + 8], eax
jne 0x41a0b1
mov dword [ebp - 4], esp
push 0
push 0
push 0x508
push dword [0x516873]
call dword [sym.imp.USER32.dll_PostMessageW]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x41a0a2
push 6
call fcn.0048254d
add esp, 4
push 1
call fcn.0041a250
jmp 0x41a24a
mov ebx, dword [0x5168b3]
call fcn.004019e2
mov eax, 3
cmp eax, ecx
jl 0x41a0d2
push 1
call fcn.0048254d
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 4], ebx
push dword [ebp - 4]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x68]
cmp dword [ebp + 8], eax
jne 0x41a24a
cmp dword [0x5168d7], 1
jne 0x41a1f9
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push 8
call fcn.0048253b
add esp, 4
mov dword [ebp - 0x18], eax
mov edi, eax
mov esi, 0x4a4322
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 0
lea eax, [ebp - 0x18]
push eax
push 1
push 0x80
push 1
mov eax, 0x513812
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push 1
push 0
mov eax, 0x51381b
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
push 1
push dword [0x516873]
call fcn.00413ef4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41a19f
push ebx
call fcn.00482541
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41a1af
push ebx
call fcn.00482541
add esp, 4
mov ebx, dword [ebp - 0x18]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x41a1cd
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x41a1c9
imul eax, dword [ebx]
jmp 0x41a1be
mov ecx, eax
test ecx, ecx
je 0x41a1ec
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x41a1e5
push ebx
push eax
call fcn.00482541
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x41a1d3
call fcn.00482541
add esp, 4
jmp 0x41a24a
mov dword [0x5168e7], 1
mov dword [ebp - 4], esp
push 0
push 0
push 0
push 0x41ae06
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x41a240
push 6
call fcn.0048254d
add esp, 4
push 1
call fcn.0041a250
mov esp, ebp
pop ebp
ret 0x10