Function at 0x408f71
Capabilities:
Create thread
Set current directory

Disassembly:
mov eax, 0x40ba0c
call fcn.0040a890
sub esp, 0x38
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x14]
call fcn.00406271
mov byte [ebp - 4], 1
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ecx
mov eax, esp
mov dword [ebp - 0x28], esp
push eax
call fcn.0040129d
mov byte [ebp - 4], 1
lea eax, [ebp - 0x2c]
push eax
call fcn.0040136b
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x14]
call fcn.0040684f
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
call fcn.00406565
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea ecx, [ebp - 0x14]
call fcn.004062b4
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
nop
nop
nop
nop
nop
call fcn.00409461
test eax, eax
je 0x409099
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov dword [ebp - 0x18], ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebx
push ebx
push ebx
push 0x409500
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x18], eax
call fcn.00409706
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push 0xffffffffffffffff
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
nop
nop
nop
nop
nop
nop
push dword [ebp - 0x18]
call fcn.00404991
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp 0x409238
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea eax, [ebp - 0x20]
push eax
call fcn.00409876
mov byte [ebp - 4], 4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea eax, [ebp - 0x20]
push eax
mov esi, 0x40faa4
push esi
call fcn.00408c60
test al, al
je 0x40919c
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
lea eax, [ebp - 0x20]
push eax
call fcn.0040659c
mov byte [ebp - 4], 4
lea eax, [ebp - 0x34]
push eax
call fcn.00409924
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x20]
call fcn.0040684f
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x34]
call fcn.00406565
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
lea eax, [ebp - 0x20]
push eax
call fcn.0040659c
mov byte [ebp - 4], 4
lea eax, [ebp - 0x24]
push eax
call fcn.00409a7e
mov byte [ebp - 4], 8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
lea eax, [ebp - 0x24]
push eax
call fcn.0040659c
mov byte [ebp - 4], 8
call fcn.004033a6
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x24]
call fcn.00406565
jmp 0x4091b8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea eax, [ebp - 0x1c]
push eax
call fcn.00409b8f
mov byte [ebp - 4], 0xa
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea eax, [ebp - 0x1c]
push eax
push esi
call fcn.00408c60
test al, al
je 0x40921d
push ecx
mov ecx, esp
mov dword [ebp - 0x40], esp
push esi
call fcn.00406638
mov byte [ebp - 4], 0xb
push ecx
mov ecx, esp
mov dword [ebp - 0x44], esp
lea eax, [ebp - 0x1c]
push eax
call fcn.0040659c
mov byte [ebp - 4], 0xa
call fcn.00402b01
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp 0x409220
nop
nop
nop
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1c]
call fcn.00406565
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x20]
call fcn.00406565
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.00406565
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret