Function at 0x40e4b6
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38c
pushal
cmp byte [0x42084d], 0
je 0x40e4d8
push 0
push 0x40ea8d
call fcn.00414acf
popal
leave
ret
mov byte [0x42084d], 1
call fcn.0040e21b
mov dword [0x420ab0], 0
mov dword [0x420ab8], 0
mov dword [0x420ac0], 0
mov byte [0x420848], 0
mov byte [0x42084a], 0
mov byte [0x420849], 0
mov byte [0x42084b], 0
cmp byte [0x42578c], 1
je 0x40e906
cmp byte [0x42578d], 0
je 0x40e54a
movzx eax, word [0x425788]
movzx edx, word [0x42578a]
or eax, edx
jne 0x40e614
cmp byte [0x4203d4], 1
ja 0x40e55f
push 0
push 0x40ea08
call fcn.00414acf
lea esi, [ebp - 0x276]
push esi
push 3
push 0x6da
call fcn.0040ead6
mov cx, 0x6da
mov dx, 3
test eax, eax
jne 0x40e681
push esi
push 5
push 0x6da
call fcn.0040ead6
mov cx, 0x6da
mov dx, 5
test eax, eax
jne 0x40e681
push esi
push 0x5161
push 0x665
call fcn.0040ead6
mov cx, 0x665
mov dx, 0x5161
test eax, eax
jne 0x40e681
push esi
push 0
push 0x5b8
call fcn.0040ead6
mov cx, 0x5b8
mov dx, 0
test eax, eax
jne 0x40e681
push esi
push 1
push 0xf03
call fcn.0040ead6
mov cx, 0xf03
mov dx, 1
test eax, eax
jne 0x40e681
push esi
push 0
push 1
call fcn.0040ead6
mov cx, 1
mov dx, 0
test eax, eax
jne 0x40e681
jmp 0x40e8de
cmp byte [0x4203d4], 1
ja 0x40e64f
movzx ecx, word [0x425788]
movzx edx, word [0x42578a]
lea edi, [ebp - 0x168]
push edx
push ecx
push 0x40e9b4
push 0x168
push edi
call dword [sym.imp.SHLWAPI.DLL_wnsprintfA]
add esp, 0x14
push 0
push edi
call fcn.00414acf
movzx ecx, word [0x425788]
movzx edx, word [0x42578a]
lea esi, [ebp - 0x276]
push esi
push edx
push ecx
call fcn.0040ead6
mov cx, word [0x425788]
mov dx, word [0x42578a]
test eax, eax
je 0x40e8de
mov word [0x425788], cx
mov word [0x42578a], dx
lea eax, [ebp - 0x276]
mov byte [0x41edcc], 1
lea edi, [ebp - 0x168]
push eax
push 0x40ea70
push 0x168
push edi
call dword [sym.imp.SHLWAPI.DLL_wnsprintfA]
add esp, 0x10
push 0
push edi
call fcn.00414acf
mov byte [0x4203d4], 0
mov ax, 1
cmp byte [0x420ad4], 1
je 0x40e6ec
mov ax, 0x100
cmp byte [0x420ad4], 2
je 0x40e6ec
cmp byte [0x420ad4], 3
je 0x40e728
xor ax, ax
mov byte [0x420410], al
mov byte [0x420411], al
mov byte [0x420412], al
mov byte [0x42040c], al
mov byte [0x42040d], al
mov byte [0x42040e], al
mov byte [0x42040f], al
mov byte [0x420413], al
mov byte [0x420414], ah
mov byte [0x420415], ah
mov byte [0x420416], ah
jmp 0x40e775
mov byte [0x420410], 1
mov byte [0x420411], 0
mov byte [0x420412], 0
mov byte [0x42040c], 0
mov byte [0x42040d], 1
mov byte [0x42040e], 0
mov byte [0x42040f], 0
mov byte [0x420413], 1
mov byte [0x420414], 0
mov byte [0x420415], 0
mov byte [0x420416], 0
xor eax, eax
mov byte [0x420417], al
mov byte [0x420418], al
mov byte [0x420419], al
mov byte [0x42041a], al
mov byte [0x42041b], al
mov byte [0x42041c], al
mov byte [0x42041d], al
mov byte [0x42041e], al
mov byte [0x42041f], al
mov byte [0x420420], al
mov byte [0x420421], al
call fcn.0040aa3f
call fcn.00409100
mov byte [0x42040b], 1
mov byte [0x429c28], 0
mov byte [0x4203f5], 1
call fcn.00408c16
cmp byte [0x4262f9], 1
je 0x40e7e6
cmp byte [0x4262f9], 2
je 0x40e7fd
jmp 0x40e812
mov byte [0x4203fe], 0
mov byte [0x4203ff], 1
mov byte [0x420400], 0
jmp 0x40e812
mov byte [0x4203fe], 1
mov byte [0x4203ff], 0
mov byte [0x420400], 0
cmp byte [0x420ad4], 1
je 0x40e826
cmp byte [0x420ad4], 3
je 0x40e826
jmp 0x40e84c
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_CreateEventA]
mov dword [0x420acc], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_CreateEventA]
mov dword [0x420ad0], eax
lea eax, [0x4119eb]
cmp byte [0x420ad4], 1
je 0x40e87b
lea eax, [0x412f54]
cmp byte [0x420ad4], 3
je 0x40e87b
lea eax, [0x413a95]
cmp byte [0x420ad4], 2
je 0x40e87b
jmp 0x40e891
push 0
push 0
push 0
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_CreateThread]
mov dword [0x420ac8], eax
cmp byte [0x425eac], 0
je 0x40e8d4
lea edi, [ebp - 0x168]
push dword [0x420ac8]
push dword [0x420ad0]
push dword [0x420acc]
push dword [0x420ac4]
push 0x40e969
push 0x168
push edi
call dword [sym.imp.SHLWAPI.DLL_wnsprintfA]
add esp, 0x1c
push 0
push edi
call fcn.00414acf
mov byte [0x42084d], 0
popal
leave
ret
cmp byte [0x4203d4], 1
ja 0x40e8fc
jb 0x40e8f0
mov byte [0x4203d4], 2
push 0
push 0x40ea32
call fcn.00414acf
mov byte [0x42084d], 0
popal
leave
ret
lea eax, [ebp - 0x384]
push 0x10e
push eax
push 0x425790
call fcn.00408ca3
cmp byte [0x4203d4], 1
ja 0x40e94e
lea edi, [ebp - 0x168]
lea eax, [ebp - 0x384]
push eax
push 0x40e9e3
push 0x168
push edi
call dword [sym.imp.SHLWAPI.DLL_wnsprintfA]
add esp, 0x10
push 0
push edi
call fcn.00414acf
lea eax, [ebp - 0x384]
push eax
call fcn.0040ec9b
test eax, eax
je 0x40e8de
lea eax, [ebp - 0x384]
jmp 0x40e695