Function at 0x40e550
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5dec70
mov eax, dword fs:[0]
push eax
sub esp, 0x3c
mov eax, dword [0x676314]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x48], ecx
cmp byte [0x67b338], 0
jne 0x40e9d7
mov byte [0x67b338], 1
call fcn.00473925
test al, al
je 0x40e5b6
add al, 0x73
scasb al, byte es:[edi]
insb byte es:[edi], dx
dec ebp
sub eax, 0x96a3d739
jnp 0x40e622
invalid
push 0x638be162
imul esi, ebx, 0xa170edee
push eax
call fcn.004732f2
test al, al
je 0x40e5d7
invalid
call fcn.004739af
test al, al
je 0x40e5f4
mov cl, 0xdf
cmp eax, 0x2c3d8864
int 0xdf
jle 0x40e5a8
aam 0x3b
out dx, al
salc
leave
xchg edx, eax
mov dh, 0x46
mov esi, dword [ebp - 0x48]
cmp dword [esi + 0x38], 0
jne 0x40e645
lea ecx, [ebp - 0x41]
call fcn.00443160
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x41]
call fcn.00477075
push eax
lea ecx, [esi + 0x28]
call fcn.00407f40
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x40e636
inc ebp
aam 0x83
clc
adc byte [edx + 0xd], dh
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00405840
lea ecx, [ebp - 0x41]
mov dword [ebp - 4], 0xffffffff
call fcn.004773a0
cmp dword [esi + 0x80], 0
jne 0x40e6be
push 0x5e8b28
lea ecx, [ebp - 0x40]
call fcn.00403b30
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 1
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00458263
add esp, 8
lea ecx, [esi + 0x70]
push eax
call fcn.00407f40
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x40e690
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00405840
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov dword [ebp - 4], 0xffffffff
cmp eax, 8
jb 0x40e6be
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00402750
call fcn.00473856
test al, al
je 0x40e6e6
test eax, 0x26e91166
push ds
aas
inc edx
invalid
call fcn.00473337
test al, al
je 0x40e70b
outsd dx, dword [esi]
sbb ebx, dword [edi + 0x574e65e8]
sbb al, 0xc1
ret 0xd600
call fcn.004733c1
test al, al
je 0x40e72a
push esp
loop 0x40e75d
pop esi
fsub qword [edx*2 - 0x3845f78]
inc byte [ebp + 0x56]
dec eax
push 0xfffffffffffffff5
pop edx
pop edi
and byte [eax], 0x7a
mov esi, dword [ebp - 0x48]
cmp dword [esi + 0x98], 0
jne 0x40e7a9
push str.1.0.1.5
lea ecx, [ebp - 0x40]
call fcn.00403b30
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 2
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00458263
add esp, 8
lea ecx, [esi + 0x88]
push eax
call fcn.00407f40
mov eax, dword [ebp - 0x14]
add byte [eax], al
add byte [eax - 0x18], dl
ficom dword [edi + 0x458bffff]
in al, dx
cmp eax, 0x10
jb 0x40e77b
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00405840
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov dword [ebp - 4], 0xffffffff
cmp eax, 8
jb 0x40e7a9
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00402750
call fcn.0047337c
test al, al
je 0x40e7cc
mov byte [0x86afba05], ch
sub al, 0xfd
cmp dl, byte [ebx + 0xd727323]
sahf
jns 0x40e7d8
div byte [ebx - 0x20]
push 0xb8758b97
cmp dword [esi + 0xb0], 0
jne 0x40e820
lea ecx, [ebp - 0x1c]
call fcn.00477390
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 3
push eax
lea ecx, [ebp - 0x1c]
call fcn.0047b97a
push eax
lea ecx, [esi + 0xa0]
call fcn.00407f40
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x40e811
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00405840
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0xffffffff
call fcn.004773a0
cmp dword [esi + 0x50], 0
jne 0x40e896
lea eax, [ebp - 0x40]
push eax
call fcn.004022d0
mov ecx, eax
call fcn.0047127b
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 4
push eax
call fcn.00458263
add esp, 8
lea ecx, [esi + 0x40]
push eax
call fcn.00407f40
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x40e868
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00405840
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov dword [ebp - 4], 0xffffffff
cmp eax, 8
jb 0x40e896
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00402750
cmp dword [esi + 0x68], 0
jne 0x40e90c
lea eax, [ebp - 0x40]
push eax
call fcn.004022d0
mov ecx, eax
call fcn.0047129b
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 5
push eax
call fcn.00458263
add esp, 8
lea ecx, [esi + 0x58]
push eax
call fcn.00407f40
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x40e8de
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00405840
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov dword [ebp - 4], 0xffffffff
cmp eax, 8
jb 0x40e90c
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00402750
call fcn.00473925
test al, al
je 0x40e931
push es
jg 0x40e935
cmp al, 0x9b
mov al, byte [0xef1aa179]
lea esp, [ebp + 0x75]
mov ebx, 0x5810a3f2
test dword [ebp - 0x63], ecx
stosb byte es:[edi], al
sbb eax, 0x758bb05f
mov eax, 0x64dc7e8
call fcn.004736fd
test al, al
je 0x40e953
add byte [eax + eax*8 + 0x6d01974], al
rol byte [esi], 1
leave
or bl, byte [eax - 0x47d3fa89]
xchg edi, eax
dec ebp
mov ebp, 0xe0f531b9
mov edx, 0xf6cbb144
daa
je 0x40e96e
mov edx, 0x87d83
cmp dword [ebp + 8], 0
je 0x40e975
lea eax, [ebp - 0x48]
mov byte [esi], 1
push eax
push 0
push esi
push 0x40e0a0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 8], eax
mov ah, 0x81
pop esi
add byte [ecx + 0x33e80846], cl
dec ecx
push es
add byte [eax + eax*8 - 0x2969e68c], al
call fcn.004732ad
test al, al
je 0x40e997
xchg esi, eax
salc
or ecx, dword [esi - 0x183938b3]
pop eax
dec ecx
xor al, 2
xor ch, byte [ebx - 0x79595d65]
push edx
invalid
call fcn.00473742
test al, al
je 0x40e9b7
retf 0x65e1
call fcn.004732ad
test al, al
je 0x40e9d7
and edx, edi
clc
int3
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046ce06
mov esp, ebp
pop ebp
ret 4