Function at 0x459fe5
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x70
push ebx
xor eax, eax
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x3c], ebx
lea edi, [ebp - 0x38]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp - 0x2c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp + 0x10]
push eax
mov dword [ebp - 4], ecx
call fcn.00458de0
movsx eax, al
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0x10]
mov dx, word [eax]
cmp dx, 0x2a
pop ecx
pop ecx
je 0x45a033
cmp dx, 0x2d
je 0x45a033
cmp dx, 0x2b
jne 0x45a037
add dword [ebp + 0x10], 2
lea eax, [ebp + 0x10]
push eax
call fcn.0043e7bd
lea eax, [ebp + 8]
push eax
call fcn.0043e7bd
cmp dword [ebp - 0x2c], ebx
mov esi, dword [ebp + 0xc]
pop ecx
pop ecx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x18], ebx
je 0x45a06d
cmp esi, ebx
je 0x45a06d
cmp byte [esi + 0xb5], bl
jne 0x45a06d
mov eax, dword [esi + 0x18]
mov dword [ebp - 8], eax
jmp 0x45a070
mov dword [ebp - 0x2c], ebx
test byte [ebp - 0x2c], 2
je 0x45a07c
mov eax, dword [ebp - 8]
mov dword [ebp - 0x18], eax
cmp dx, 0x2a
mov dword [ebp - 0x10], ebx
jne 0x45a23f
mov dword [ebp - 0x10], ebx
push 0x940
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0xc], ebx
call fcn.004aea68
mov esi, eax
cmp esi, ebx
pop ecx
je 0x45a0bf
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x271b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
mov ecx, esi
call fcn.00450cd2
mov esi, eax
jmp 0x45a0c1
xor esi, esi
push 0x9c
call fcn.004aea68
cmp eax, ebx
pop ecx
je 0x45a0e2
push esi
push dword [ebp - 4]
mov ecx, eax
call fcn.00414f51
mov edi, eax
mov dword [ebp - 0x14], edi
jmp 0x45a0e7
mov dword [ebp - 0x14], ebx
mov edi, ebx
mov eax, dword [ebp + 0x14]
push ebx
push dword [ebp + 0x10]
mov ecx, edi
mov dword [ebp - 0x20], edi
mov byte [edi + 0x91], 3
mov dword [edi + 0x18], eax
call fcn.004515f9
mov eax, dword [ebp - 8]
mov dword [esi + 0xd4], eax
mov eax, dword [ebp + 8]
push 1
mov ecx, esi
mov dword [esi + 0x194], edi
mov dword [esi + 0x19c], eax
call fcn.00458ea9
mov edi, dword [ebp + 0x10]
push edi
lea ecx, [ebp + 0x10]
call fcn.0044e827
lea eax, [ebp + 0x10]
push eax
push edi
call fcn.00451b00
pop ecx
pop ecx
push eax
lea ecx, [esi + 0xb8]
call fcn.0044e88f
lea ecx, [ebp + 0x10]
call fcn.0043e825
cmp edi, ebx
je 0x45a167
cmp byte [esi + 0xb5], bl
je 0x45a167
push edi
lea ecx, [esi + 0xdc]
call fcn.0044e88f
cmp byte [esi + 0xb5], bl
mov edi, 0x271b
jne 0x45a189
cmp byte [esi + 0xda], bl
je 0x45a181
add edi, 2
jmp 0x45a18e
cmp byte [esi + 0xd9], bl
je 0x45a18e
mov edi, 0x271c
push esi
call fcn.00439364
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x10], eax
push dword [ebp - 0x10]
call fcn.0043f050
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], ebx
pop ecx
pop ecx
je 0x45a1c5
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0xb5], bl
je 0x45a1c5
mov ecx, dword [ebp - 4]
push 2
pop eax
cmp dword [ecx + 0x14], eax
jg 0x45a1c5
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x18]
push edi
push esi
call fcn.0044119f
push str.__LastWinID
push dword [esi + 0x18]
push dword [ebp - 4]
call fcn.00410676
add esp, 0x1c
push ebx
mov ecx, esi
call fcn.0049f4d1
mov edi, 0x4ddd50
push edi
mov dword [ebp - 0x10], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x14]
push edi
mov dword [eax + 0x28], ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea ecx, [ebp - 0x20]
call fcn.0044e6ba
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 0xc]
cmp dword [ebp - 0xc], ebx
je 0x45a517
mov eax, dword [ebp - 0x1c]
push ebx
or eax, 1
push eax
push 0x451
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x45a517
cmp dx, 0x2d
jne 0x45a3d5
push 0x940
call fcn.004aea68
mov esi, eax
cmp esi, ebx
pop ecx
je 0x45a276
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x271b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
mov ecx, esi
call fcn.00450cd2
mov esi, eax
jmp 0x45a278
xor esi, esi
push 0x9c
call fcn.004aea68
cmp eax, ebx
pop ecx
je 0x45a296
push esi
push dword [ebp - 4]
mov ecx, eax
call fcn.00414f51
mov edi, eax
jmp 0x45a298
xor edi, edi
mov eax, dword [ebp + 0x14]
push ebx
push dword [ebp + 0x10]
mov ecx, edi
mov byte [edi + 0x91], 3
mov dword [edi + 0x18], eax
call fcn.004515f9
mov eax, dword [ebp - 8]
mov dword [esi + 0xd4], eax
mov eax, dword [ebp + 8]
push 1
mov ecx, esi
mov dword [esi + 0x194], edi
mov dword [esi + 0x19c], eax
call fcn.00458ea9
mov eax, dword [esi + 0x194]
push dword [ebp + 0x10]
lea ecx, [ebp + 8]
mov dword [esi + 0x190], eax
call fcn.0044e827
lea eax, [ebp + 8]
push eax
push dword [ebp + 0x10]
lea edi, [esi + 0xb8]
call fcn.00451b00
pop ecx
pop ecx
push eax
mov ecx, edi
call fcn.0044e88f
lea ecx, [ebp + 8]
call fcn.0043e825
cmp dword [ebp - 0x24], ebx
je 0x45a31b
push dword [ebp - 0x24]
mov ecx, edi
call fcn.0044e8eb
cmp dword [ebp + 0x10], ebx
je 0x45a336
cmp byte [esi + 0xb5], bl
je 0x45a336
push dword [ebp + 0x10]
lea ecx, [esi + 0xdc]
call fcn.0044e88f
cmp byte [esi + 0xb5], bl
mov dword [ebp + 0x10], 0x271b
jne 0x45a35e
cmp byte [esi + 0xd9], bl
jne 0x45a35e
cmp byte [esi + 0xda], bl
je 0x45a365
mov dword [ebp + 0x10], 0x271d
jmp 0x45a365
mov dword [ebp + 0x10], 0x271c
push esi
call fcn.00439364
mov eax, dword [ebp + 0xc]
cmp eax, ebx
pop ecx
mov dword [esi + 0x88], eax
mov byte [esi + 0xb4], 1
je 0x45a3a3
mov edi, 0x4ddd50
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp + 0xc]
inc dword [eax + 0x114]
push edi
mov byte [esi + 0xb4], 9
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x18]
push dword [ebp + 0x10]
push esi
call fcn.0044119f
push str.__LastWinID
push dword [esi + 0x18]
push dword [ebp - 4]
call fcn.00410676
add esp, 0x1c
push ebx
push ebx
push 0x110
push dword [esi + 0x18]
jmp 0x45a234
mov edi, dword [ebp + 0x10]
cmp word [edi - 2], 0x2b
sete byte [ebp + 0x13]
mov al, byte [ebp + 0x13]
neg al
sbb eax, eax
not eax
and eax, esi
mov dword [ebp - 0x1c], eax
mov dword [ebp + 0xc], ebx
push dword [ebp - 0x1c]
call fcn.0043f050
cmp byte [ebp + 0x13], bl
pop ecx
mov dword [ebp + 0xc], eax
jne 0x45a422
cmp esi, ebx
jne 0x45a422
mov esi, dword [ebp - 4]
push ebx
push esi
call fcn.00412b52
cmp dword [esi + 0x28], ebx
pop ecx
pop ecx
jne 0x45a422
mov eax, 0x80070057
jmp 0x45a51a
mov eax, dword [ebp - 4]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x64], 4
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], ebx
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x1c]
mov edi, 0x4dd8f4
mov dword [ebp - 0x44], eax
push edi
mov dword [ebp - 0x40], ebx
mov dword [ebp + 0x14], ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [ebp - 0x54]
push eax
push 0x10000
lea eax, [ebp - 0x70]
push eax
push 0x4599c1
push 0x100000
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp eax, ebx
mov dword [ebp + 8], eax
je 0x45a4c1
mov eax, dword [ebp - 0x54]
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp + 0x14], eax
mov dword [ebp + 0x10], 0x270f
cmp dword [ebp - 0x64], ebx
je 0x45a4c1
push ebx
call esi
dec dword [ebp + 0x10]
jns 0x45a4a9
jmp 0x45a4bc
push 1
call esi
cmp dword [ebp - 0x64], ebx
jne 0x45a4b8
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [ebp + 8], ebx
je 0x45a4d6
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp + 0xc], ebx
je 0x45a4f1
cmp dword [ebp - 0x48], ebx
je 0x45a4f1
push ebx
push 1
push 0x451
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
push str.__LastTID
push dword [ebp + 0x14]
push dword [ebp - 4]
call fcn.00447638
push str.__LastWinID
push dword [ebp - 0x58]
push dword [ebp - 4]
call fcn.00410676
add esp, 0x18
mov dword [ebp - 0x10], ebx
mov eax, dword [ebp - 0x10]
pop edi
pop esi
pop ebx
leave
ret 0x10