Function at 0x417fea
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
cmp dword [ebp + 0xc], 0x401
jne 0x4186d8
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
push 0x49d80b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1a0]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jne 0x418052
push 1
push 0
push 0x49d80b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1a0]
cmp dword [ebp + 0x14], 1
jne 0x4180c5
push 1
mov eax, 0x49a7e4
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
push 0x49d82f
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x190]
mov ebx, eax
test ebx, ebx
je 0x41808b
push ebx
call fcn.004435a3
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41809b
push ebx
call fcn.004435a3
add esp, 4
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
push 1
push 0xff0090
push 0x49d82f
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x194]
jmp 0x4186ce
cmp dword [ebp + 0x14], 2
jne 0x41817b
mov eax, 0x49a802
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4180e5
push ebx
call fcn.004435a3
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 1
lea eax, [ebp - 4]
push eax
push 0x49d82f
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x190]
mov ebx, eax
test ebx, ebx
je 0x418110
push ebx
call fcn.004435a3
add esp, 4
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
push 1
push 0xff
push 0x49d82f
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x194]
push 1
push 0
push 0x10
mov dword [ebp - 0xc], 0
push 0
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
push 1
push dword [ebp + 8]
push 0x49d83b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x418176
push ebx
call fcn.004435a3
add esp, 4
jmp 0x4186ce
cmp dword [ebp + 0x14], 3
jne 0x4184cd
push 1
mov eax, 0x49a81d
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
push 0x49d82f
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x190]
mov ebx, eax
test ebx, ebx
je 0x4181b4
push ebx
call fcn.004435a3
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4181c4
push ebx
call fcn.004435a3
add esp, 4
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
push 1
push 0xff00
push 0x49d82f
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x194]
push 0x80000301
push 0
push 0x7d0
push 1
mov ebx, 0x67c
call fcn.00448e60
add esp, 0x10
mov ebx, dword [0x49d7ff]
add ebx, 8
mov dword [ebp - 0xc], ebx
push dword [ebp - 0xc]
call fcn.00418711
test eax, eax
je 0x418421
mov ebx, dword [0x49d7ff]
add ebx, 0x18
mov dword [ebp - 0xc], ebx
mov ebx, dword [0x49d863]
add ebx, 0x38
mov dword [ebp - 0x10], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push OleUIBusyA
push 0
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebx]
test eax, eax
jne 0x41825c
mov eax, 0x4722d5
push eax
push OleUIBusyA
push 0
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x418272
mov eax, 0x4722d5
push eax
push 3
mov ebx, 0x18c
call fcn.00445f80
add esp, 0x28
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x4182b1
mov ebx, dword [0x49d863]
add ebx, 0x30
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp dword [ebx], 0
jle 0x4182b1
mov eax, 1
jmp 0x4182b3
xor eax, eax
test eax, eax
je 0x4183f7
mov ebx, dword [0x49d863]
add ebx, 0x38
mov dword [ebp - 0xc], ebx
push 0x49a839
mov ebx, dword [ebp - 0xc]
push dword [ebx]
push 0x49a870
mov ecx, 3
call fcn.0040106b
add esp, 0xc
mov dword [ebp - 0x10], eax
push 1
push 0
push 1
push 1
mov eax, 0x49a881
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x10]
push eax
push 1
push dword [ebp + 8]
push 0x49d83b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41832b
push ebx
call fcn.004435a3
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41833b
push ebx
call fcn.004435a3
add esp, 4
cmp dword [ebp - 0x18], 1
jne 0x4183f7
push 0
push 0
push 0
push 0x41b449
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4183d9
push 1
push 0
push 0x10
push 1
mov eax, 0x499e7f
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
mov eax, 0x49a88e
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
push 1
push dword [ebp + 8]
push 0x49d83b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4183c4
push ebx
call fcn.004435a3
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4183d4
push ebx
call fcn.004435a3
add esp, 4
jmp 0x4183ed
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
mov dword [ebp - 8], 0
mov eax, 0
jmp 0x4186f9
call fcn.004045d5
mov ebx, dword [0x49d863]
add ebx, 0x50
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
push dword [ebx]
call fcn.0041a807
mov dword [0x49d853], 1
jmp 0x4184c8
mov eax, 0x49a8b9
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x418437
push ebx
call fcn.004435a3
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 1
lea eax, [ebp - 4]
push eax
push 0x49d82f
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x190]
mov ebx, eax
test ebx, ebx
je 0x418462
push ebx
call fcn.004435a3
add esp, 4
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
push 1
push 0xff00
push 0x49d82f
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x194]
push 1
push 0
push 0x10
mov dword [ebp - 0xc], 0
push 0
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
push 1
push dword [ebp + 8]
push 0x49d83b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4184c8
push ebx
call fcn.004435a3
add esp, 4
jmp 0x4186ce
cmp dword [ebp + 0x14], 4
jne 0x418584
mov eax, 0x49a8d8
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4184ed
push ebx
call fcn.004435a3
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 1
lea eax, [ebp - 4]
push eax
push 0x49d82f
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x190]
mov ebx, eax
test ebx, ebx
je 0x418518
push ebx
call fcn.004435a3
add esp, 4
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
push 1
push 0xff
push 0x49d82f
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x194]
push 1
push 0
push 0x10
push 1
mov eax, 0x49a901
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
push 1
push dword [ebp + 8]
push 0x49d83b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41857f
push ebx
call fcn.004435a3
add esp, 4
jmp 0x4186ce
cmp dword [ebp + 0x14], 5
jne 0x4186a3
mov ebx, dword [0x49d7ff]
add ebx, 0x14
mov dword [ebp - 0xc], ebx
push dword [ebp - 0xc]
call fcn.00402f37
test eax, eax
je 0x4185de
mov ebx, dword [0x49d7ff]
add ebx, 0x14
mov dword [ebp - 0xc], ebx
push OleUIBusyA
push 0
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x4185cb
mov eax, 0x4722d5
push eax
push 1
mov ebx, 0x244
call fcn.00445db0
add esp, 0x10
mov eax, 0x49a90c
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4185f4
push ebx
call fcn.004435a3
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 1
lea eax, [ebp - 4]
push eax
push 0x49d82f
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x190]
mov ebx, eax
test ebx, ebx
je 0x41861f
push ebx
call fcn.004435a3
add esp, 4
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
push 1
push 0xff
push 0x49d82f
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x194]
push 1
push 0
push 0x10
push 1
mov eax, 0x49a929
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
mov eax, 0x49a93a
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
push 1
push dword [ebp + 8]
push 0x49d83b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41868e
push ebx
call fcn.004435a3
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41869e
push ebx
call fcn.004435a3
add esp, 4
jmp 0x4186ce
cmp dword [ebp + 0x14], 6
jne 0x4186c4
push 0x49d80b
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x90]
jmp 0x4186ce
cmp dword [ebp + 0x14], 7
jne 0x4186ce
mov eax, 0
jmp 0x4186f9
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
push dword [0x49d847]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
jmp 0x4186f9
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41870a
push ebx
call fcn.004435a3
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x10