Function at 0x43cbe0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c8
mov eax, dword [0x4bc1dc]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [ebp + 0xc], 1
jne 0x43cc09
xor eax, eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0046f8ce
mov esp, ebp
pop ebp
ret
cmp byte [0x4be000], 0
push esi
jne 0x43cc63
push edi
push 0x4a3c40
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
push 0x4a3c5c
push edi
call esi
push 0x4a3c68
push edi
mov dword [0x4bdfe0], eax
call esi
push 0x4a3c78
push edi
mov dword [0x4bdfe4], eax
call esi
push 0x4a3c84
push edi
mov dword [0x4bdfe8], eax
call esi
mov dword [0x4bdfec], eax
mov byte [0x4be000], 1
pop edi
cmp dword [0x4bdfe0], 0
jne 0x43cc80
mov eax, 1
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0046f8ce
mov esp, ebp
pop ebp
ret
push 0x4f4
lea eax, [ebp - 0x5c0]
push 0
push eax
call fcn.00470180
add esp, 0xc
mov dword [ebp - 0x5c4], 0x4f8
mov dword [ebp - 0x598], 0x20000
mov dword [ebp - 0x580], 1
call fcn.004362f0
movzx eax, al
neg eax
mov dword [ebp - 0x59c], 1
sbb eax, eax
and eax, 0x2000000
or eax, 0x100
mov dword [ebp - 0x584], eax
call fcn.004362f0
test al, al
jne 0x43ccf3
movdqu xmm0, xmmword [0x4a3734]
movdqu xmmword [ebp - 0x5ac], xmm0
mov dword [ebp - 0x554], 0x78
mov dword [ebp - 0x558], 0x280
call fcn.004362f0
test al, al
mov edx, 0x4a3bd8
mov ecx, 0x4a3bbc
lea eax, [ebp - 0x54c]
cmove ecx, edx
push ecx
push 0x104
push eax
call fcn.0046f05c
push 0x490c20
lea eax, [ebp - 0x344]
push 0x104
push eax
call fcn.0046f05c
add esp, 0x18
call fcn.0043cab0
test al, al
jne 0x43cd5e
or dword [ebp - 0x57c], 0x10000
jmp 0x43cde3
movdqu xmm0, xmmword [0x4a3c00]
mov dword [ebp - 0x57c], connect
mov eax, 0x488
mov byte [ebp - 0x57a], 0xff
movdqu xmmword [ebp - 0x110], xmm0
mov word [ebp - 0x57c], ax
movdqu xmm0, xmmword [0x4a3c10]
mov dword [ebp - 0x138], 0x10009
mov dword [ebp - 0x134], 0x10000
movdqu xmmword [ebp - 0x100], xmm0
mov dword [ebp - 0x114], 0x30011
movdqu xmm0, xmmword [0x4a3c20]
mov dword [ebp - 0x13c], 0x2001b
movdqu xmmword [ebp - 0xf0], xmm0
movdqu xmm0, xmmword [0x4a3c30]
movdqu xmmword [ebp - 0xe0], xmm0
cmp byte [ebp + 8], 0
je 0x43ce80
lea eax, [ebp - 0x5c4]
push eax
lea eax, [ebp - 0x54c]
push eax
push 0x4bdff8
call dword [0x4bdfe0]
mov esi, eax
test esi, esi
je 0x43ce50
cmp esi, 0xb7
je 0x43ce50
push esi
lea eax, [ebp - 0xcc]
push 0x4a3c98
push eax
call fcn.0043bea0
add esp, 0xc
lea eax, [ebp - 0xcc]
push 0x10
push 0x497944
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, esi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0046f8ce
mov esp, ebp
pop ebp
ret
xor esi, esi
lea eax, [ebp - 0x5c8]
push eax
push esi
push esi
push 0x43bed0
push esi
push esi
call fcn.00472eb0
add esp, 0x18
mov dword [0x4bdfa4], eax
mov eax, esi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0046f8ce
mov esp, ebp
pop ebp
ret
push dword [0x4bdfac]
call dword [sym.imp.KERNEL32.dll_SetEvent]
push 1
lea eax, [ebp - 0x5c4]
push eax
lea eax, [ebp - 0x54c]
push eax
push dword [0x4bdffc]
push dword [0x4bdff8]
call dword [0x4bdfe4]
push 0xffffffffffffffff
push dword [0x4bdfa4]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [0x4bdfa4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [0x4bdfac]
mov dword [0x4bdfa4], 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov ecx, dword [ebp - 4]
mov eax, esi
xor ecx, ebp
pop esi
call fcn.0046f8ce
mov esp, ebp
pop ebp
ret