Function at 0x4136a0
Capabilities:
Create thread

Disassembly:
push 0xffffffffffffffff
push 0x4e2cdb
mov eax, dword fs:[0]
push eax
sub esp, 0x40
push ebx
push ebp
push esi
push edi
mov eax, dword [0x53fa2c]
xor eax, esp
push eax
lea eax, [esp + 0x54]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [0x103ade4]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
mov ebx, 1
xor ebp, ebp
mov dword [esp + 0x20], ebx
test eax, eax
jle 0x413851
xor ecx, ecx
cmp dword [0x103ae0c], ebp
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], ecx
jle 0x413746
cmp ebp, ecx
jl 0x413894
cmp ebp, eax
jge 0x413894
mov eax, dword [0x103ade0]
lea ecx, [eax + ebp*4]
push 0x5028ec
call dword [sym.imp.mfc90.dll_Ordinal_1603]
test eax, eax
je 0x41373b
cmp ebp, dword [0x103ae0c]
jge 0x413894
mov ecx, dword [0x103ae08]
mov eax, dword [ecx + ebp*4]
mov dword [esp + 0x34], eax
jmp 0x41374e
mov eax, 0x5116d8
mov dword [esp + 0x34], eax
jmp 0x41374e
mov dword [esp + 0x34], 0x5116d8
mov eax, dword [esi + 0x18d88]
lea edx, [esp + 0x20]
push edx
push 0
push 0x1007
push eax
call edi
cmp dword [0x103ae0c], ebp
jle 0x4137cc
test ebp, ebp
jl 0x413894
cmp ebp, dword [0x103ade4]
jge 0x413894
mov ecx, dword [0x103ade0]
lea ecx, [ecx + ebp*4]
push 0x5028ec
call dword [sym.imp.mfc90.dll_Ordinal_1603]
test eax, eax
je 0x4137b2
cmp ebp, dword [0x103ade4]
jge 0x413894
mov edx, dword [0x103ade0]
mov eax, dword [edx + ebp*4]
mov dword [esp + 0x34], eax
jmp 0x4137d4
cmp ebp, dword [0x103ae0c]
jge 0x413894
mov eax, dword [0x103ae08]
mov eax, dword [eax + ebp*4]
mov dword [esp + 0x34], eax
jmp 0x4137d4
mov dword [esp + 0x34], 0x5116d8
mov edx, dword [esi + 0x18d88]
lea ecx, [esp + 0x20]
push ecx
push 0
push 0x1006
push edx
mov dword [esp + 0x38], ebx
call edi
cmp byte [0x103b0fc], 0
jne 0x413842
mov eax, dword [0x103ad8c]
cmp eax, ebp
jle 0x41381d
test ebp, ebp
jl 0x413894
cmp ebp, eax
jge 0x413894
mov eax, dword [0x103ad88]
mov ecx, dword [eax + ebp*4]
mov dword [esp + 0x34], ecx
jmp 0x413825
mov dword [esp + 0x34], 0x5116d8
mov eax, dword [esi + 0x18d88]
lea edx, [esp + 0x20]
push edx
push 0
push 0x1006
push eax
mov dword [esp + 0x38], 2
call edi
mov eax, dword [0x103ade4]
add ebp, ebx
cmp ebp, eax
jl 0x4136e7
mov eax, dword [0x103abd0]
xor ebp, ebp
test eax, eax
jle 0x413963
xor ecx, ecx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], ecx
cmp byte [0x103b0fc], cl
je 0x413899
cmp ebp, ecx
jl 0x413894
cmp ebp, eax
jge 0x413894
mov ecx, dword [0x103abcc]
mov edx, dword [ecx + ebp*4]
lea eax, [esp + 0x20]
push eax
push 0
push 0x1007
jmp 0x413947
call sub.mfc90.dll_Ordinal_1252
mov eax, dword [0x103abbc]
cmp eax, ebp
jle 0x4138b9
cmp ebp, ecx
jl 0x413894
cmp ebp, eax
jge 0x413894
mov edx, dword [0x103abb8]
mov eax, dword [edx + ebp*4]
mov dword [esp + 0x34], eax
jmp 0x4138c1
mov dword [esp + 0x34], 0x5116d8
mov edx, dword [esi + 0x18590]
lea ecx, [esp + 0x20]
push ecx
push 0
push 0x1007
push edx
call edi
mov eax, dword [0x103ad30]
cmp eax, ebp
jle 0x4138f5
test ebp, ebp
jl 0x413894
cmp ebp, eax
jge 0x413894
mov eax, dword [0x103ad2c]
mov ecx, dword [eax + ebp*4]
mov dword [esp + 0x34], ecx
jmp 0x4138fd
mov dword [esp + 0x34], 0x5116d8
mov eax, dword [esi + 0x18590]
lea edx, [esp + 0x20]
push edx
push 0
push 0x1006
push eax
mov dword [esp + 0x38], ebx
call edi
test ebp, ebp
jl 0x413894
cmp ebp, dword [0x103abd0]
jge 0x413894
mov ecx, dword [0x103abcc]
mov edx, dword [ecx + ebp*4]
lea eax, [esp + 0x20]
push eax
push 0
mov dword [esp + 0x30], 2
push 0x1006
mov ecx, dword [esi + 0x18590]
push ecx
mov dword [esp + 0x44], edx
call edi
mov eax, dword [0x103abd0]
add ebp, ebx
cmp ebp, eax
jl 0x413860
cmp dword [0x1043074], 0
push 0x104fa76
setne dl
mov byte [esi + 0x17624], dl
mov eax, dword [0x104304c]
shr eax, 1
not al
and al, bl
mov byte [esi + 0x17698], al
mov al, byte [0x571ae8]
not al
and al, bl
mov byte [esi + 0x177f4], al
mov byte [esi + 0x17284], al
cmp byte [0x571aec], 0
sete cl
mov byte [esi + 0x1770c], cl
mov edx, dword [0x10430f8]
shr edx, 0x1f
not dl
and dl, bl
mov byte [esi + 0x178dc], dl
mov eax, dword [0x571ae8]
shr eax, 3
not al
and al, bl
mov byte [esi + 0x179c4], al
mov eax, dword [0x10430b0]
shr eax, 0xb
and al, bl
mov byte [esi + 0x17d64], al
mov byte [esi + 0x172f8], al
mov ecx, dword [0x10430b0]
shr ecx, 0x16
not cl
and cl, bl
mov byte [esi + 0x17dd8], cl
mov edx, dword [0x10430b0]
shr edx, 0xe
and dl, bl
lea ecx, [esi + 0x17e60]
mov byte [esi + 0x17e4c], dl
call sub.mfc90.dll_Ordinal_6559
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov dword [esp + 0x5c], 0
mov eax, dword [0x53e3dc]
mov ebp, dword [sym.imp.mfc90.dll_Ordinal_2539]
push eax
lea ecx, [esp + 0x20]
push 0x4ff1b8
push ecx
call ebp
mov edx, dword [esp + 0x28]
add esp, 0xc
push edx
lea ecx, [esi + 0x17fa4]
call sub.mfc90.dll_Ordinal_6559
mov eax, dword [0x1043078]
mov ecx, dword [esi + 0x19468]
push 0
push eax
push 0x14e
push ecx
call edi
mov edx, dword [0x10430d8]
mov eax, dword [esi + 0x1954c]
push 0
push edx
push 0x14e
push eax
call edi
mov ecx, dword [0x1043104]
shr ecx, 5
and cl, bl
mov byte [esi + 0x195fc], cl
mov edx, dword [0x10430cc]
shr edx, 6
and dl, bl
mov byte [esi + 0x19670], dl
mov eax, dword [0x10430cc]
push 0
push str.Real_Highest
shr eax, 7
and al, bl
push str.SOFTWARETrojanCutTC_Env_tc_CLIENT
push reloc.OLEAUT32.dll_SysReAllocString
mov byte [esi + 0x19758], al
call fcn.00491d40
add esp, 0x10
push 2
push ebx
mov dword [0x571ae0], eax
mov ecx, dword [esi + 0x1995c]
push 0x405
push ecx
call edi
mov ecx, dword [0x10430cc]
mov eax, ecx
and eax, 0x100
je 0x413afe
test ecx, 0x200
je 0x413afe
push 2
jmp 0x413b2d
test eax, eax
je 0x413b13
mov eax, dword [esi + 0x199b0]
push 3
push ebx
push 0x405
push eax
jmp 0x413b3a
test ecx, 0x200
je 0x413b2b
mov ecx, dword [esi + 0x199b0]
push ebx
push ebx
push 0x405
push ecx
jmp 0x413b3a
push 0
mov edx, dword [esi + 0x199b0]
push ebx
push 0x405
push edx
call edi
mov ecx, dword [0x10430cc]
mov eax, ecx
and eax, 0x400
je 0x413b57
test ecx, 0x800
je 0x413b57
push 2
jmp 0x413b92
test eax, eax
je 0x413b6c
mov ecx, dword [esi + 0x19a04]
push 3
push ebx
push 0x405
push ecx
jmp 0x413b9f
test ecx, 0x800
je 0x413ba1
test dword [0x571ae0], 0x800
je 0x413b91
mov edx, dword [esi + 0x19a04]
push 0
push ebx
push 0x405
push edx
jmp 0x413b9f
push ebx
mov eax, dword [esi + 0x19a04]
push ebx
push 0x405
push eax
call edi
mov ecx, dword [0x10430cc]
mov eax, ecx
and eax, 0x1000
je 0x413bbc
test ecx, 0x2000
je 0x413bbc
push 2
jmp 0x413bf7
test eax, eax
je 0x413bd1
mov edx, dword [esi + 0x19a58]
push 3
push ebx
push 0x405
push edx
jmp 0x413c04
test ecx, 0x2000
je 0x413c06
test dword [0x571ae0], 0x2000
je 0x413bf6
mov eax, dword [esi + 0x19a58]
push 0
push ebx
push 0x405
push eax
jmp 0x413c04
push ebx
mov ecx, dword [esi + 0x19a58]
push ebx
push 0x405
push ecx
call edi
mov ecx, dword [0x10430cc]
mov eax, ecx
and eax, 0x4000
je 0x413c21
test ecx, 0x8000
je 0x413c21
push 2
jmp 0x413c5c
test eax, eax
je 0x413c36
mov eax, dword [esi + 0x19aac]
push 3
push ebx
push 0x405
push eax
jmp 0x413c69
test ecx, 0x8000
je 0x413c6b
test dword [0x571ae0], 0x8000
je 0x413c5b
mov ecx, dword [esi + 0x19aac]
push 0
push ebx
push 0x405
push ecx
jmp 0x413c69
push ebx
mov edx, dword [esi + 0x19aac]
push ebx
push 0x405
push edx
call edi
mov ecx, dword [0x10430cc]
mov eax, ecx
and eax, 0x10000
je 0x413c86
test ecx, 0x20000
je 0x413c86
push 2
jmp 0x413cc1
test eax, eax
je 0x413c9b
mov ecx, dword [esi + 0x19b00]
push 3
push ebx
push 0x405
push ecx
jmp 0x413cce
test ecx, 0x20000
je 0x413cd0
test dword [0x571ae0], 0x20000
je 0x413cc0
mov edx, dword [esi + 0x19b00]
push 0
push ebx
push 0x405
push edx
jmp 0x413cce
push ebx
mov eax, dword [esi + 0x19b00]
push ebx
push 0x405
push eax
call edi
mov eax, dword [0x1043078]
dec eax
cmp eax, 0xb
ja case.0x413ce2.4
movzx ecx, byte [eax + 0x413e8c]
jmp dword [ecx*4 + 0x413e78]
xor eax, eax
jmp 0x413cfd
mov eax, ebx
jmp 0x413cfd
mov eax, 2
jmp 0x413cfd
mov eax, 3
mov edx, dword [esi + 0x19468]
push 0
push eax
push 0x14e
push edx
call edi
jmp 0x413da1
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x5c], bl
mov eax, dword [0x1043078]
push eax
lea ecx, [esp + 0x1c]
push 0x4ff1b8
push ecx
call ebp
add esp, 0xc
push 0x114
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x5c], 2
mov edx, dword [esp + 0x18]
push edx
push 0x5028b4
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_5924]
mov eax, dword [esp + 0x14]
mov ecx, dword [esi + 0x19468]
push eax
push 0
push 0x143
push ecx
call edi
mov edx, dword [esi + 0x19468]
push 0
push eax
push 0x14e
push edx
call edi
mov byte [esp + 0x5c], bl
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x5c], 0
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov eax, dword [0x10430d8]
dec eax
cmp eax, 0x1d
ja case.0x413db3.2
movzx eax, byte [eax + 0x413eb0]
jmp dword [eax*4 + 0x413e98]
xor eax, eax
jmp 0x413dd5
mov eax, 2
jmp 0x413dd5
mov eax, 3
jmp 0x413dd5
mov eax, 4
jmp 0x413dd5
mov eax, ebx
mov ecx, dword [esi + 0x1954c]
push 0
push eax
push 0x14e
push ecx
call edi
cmp byte [0x571ac8], 0
je 0x413e4f
push 0
push 0x5028a8
push str.SOFTWARETrojanCut_tc_Env
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00491d40
add esp, 0x10
test eax, eax
setne al
mov byte [0x571ac9], al
mov byte [esi + 0x19f34], al
cmp byte [0x571ac9], 0
mov ecx, esi
je 0x413e2a
call fcn.0040c940
jmp 0x413e2f
call fcn.0040d0a0
lea edx, [esp + 0x18]
push edx
push 0
push 0xffffffffffffffff
push 0x47b930
push 0
push 0
call dword [sym.imp.MSVCR90.dll__beginthreadex]
add esp, 0x18
mov dword [0x571adc], eax
mov dword [esp + 0x5c], 0xffffffff
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov ecx, dword [esp + 0x54]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret