Function at 0x407320
Capabilities:
Create thread

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4278ad
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x400
mov eax, dword [0x438018]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
mov dword [ebp - 4], 1
call fcn.00415f8b
add esp, 4
push eax
call fcn.00415e45
add esp, 4
push 0
push 0
push 0
push 0x404960
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 4
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x2c]
push str.SUB
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.00402460
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 2
lea ecx, [ebx + 0x20]
call fcn.00405780
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x407406
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4073fc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407467
push edx
push ecx
call fcn.0040df13
add esp, 8
push 1
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x2c]
push 0x434a18
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.00402460
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 3
lea ecx, [ebx + 8]
call fcn.00405780
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x407476
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40746c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40746c
call fcn.004123b7
push edx
push ecx
call fcn.0040df13
add esp, 8
cmp dword [ebx + 0x1c], 0x10
lea ecx, [ebx + 8]
jb 0x40748b
mov edi, dword [ebx + 8]
mov ecx, edi
mov esi, dword [ebx + 0x18]
add esi, edi
jmp 0x407494
lea esi, [ebx + 8]
add esi, dword [ebx + 0x18]
lea edi, [ebx + 8]
cmp edi, esi
je 0x4074ba
sub ecx, edi
mov dword [ebp - 0x344], ecx
movzx eax, byte [edi]
push eax
call fcn.00415f5b
mov ecx, dword [ebp - 0x344]
add esp, 4
mov byte [ecx + edi], al
inc edi
cmp edi, esi
jne 0x4074a0
call fcn.00404450
cmp dword [ebx + 0x1c], 0x10
lea ecx, [ebx + 8]
mov edx, dword [ebx + 0x18]
mov edi, eax
cmovae ecx, dword [ebx + 8]
push 3
push 0x434a1c
push ecx
mov dword [ebp - 0x344], edi
call fcn.0040c2f0
add esp, 0xc
test eax, eax
jne 0x407817
push 0x148
push eax
lea eax, [ebp - 0x1f8]
push eax
call fcn.0040fac0
add esp, 0xc
mov dword [ebp - 0x1ec], 0x434a00
mov dword [ebp - 0x1f4], 0x7a120
push 0x7a120
call fcn.0040df21
add esp, 4
mov dword [ebp - 0x1f8], eax
push dword [ebp - 0x1f4]
push 0
push eax
call fcn.0040fac0
add esp, 0xc
mov dword [ebp - 0x1d4], 0xfde9
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1b8], 0
mov byte [ebp - 4], 4
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x34], 0x434f4001
mov word [ebp - 0x30], 0x2e4b
mov ecx, dword [eax]
mov eax, dword [0x439d98]
cmp eax, dword [ecx + 4]
jle 0x4075ca
push 0x439d98
call fcn.0040e05f
add esp, 4
cmp dword [0x439d98], 0xffffffff
jne 0x4075ca
mov eax, dword [ebp - 0x34]
mov dword [0x439f20], eax
mov ax, word [ebp - 0x30]
push 0x428380
mov word [0x439f24], ax
call fcn.0040e486
add esp, 4
push 0x439d98
call fcn.0040e015
add esp, 4
mov al, byte [0x439f25]
test al, al
je 0x4075fd
xor byte [0x439f20], 0x2e
xor byte [0x439f21], 0x2e
xor byte [0x439f22], 0x2e
xor byte [0x439f23], 0x2e
xor byte [0x439f24], 0x2e
xor al, 0x2e
mov byte [0x439f25], al
mov ecx, 0x439f20
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0xf
mov byte [ebp - 0x4c], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407620
sub ecx, edx
push ecx
push 0x439f20
lea ecx, [ebp - 0x4c]
call fcn.00402460
mov byte [ebp - 4], 5
mov eax, 0x439bf0
cmp dword [0x439c04], 0x10
push dword [0x439c00]
cmovae eax, dword [0x439bf0]
push eax
push ecx
lea ecx, [ebp - 0x4c]
call fcn.0040c840
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x38]
cmp edx, 0x10
jb 0x4076ce
mov ecx, dword [ebp - 0x4c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4076c4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4076c4
call fcn.004123b7
push edx
push ecx
call fcn.0040df13
add esp, 8
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0xf
mov byte [ebp - 0x4c], 0
nop word [eax + eax]
cmp dword [ebp - 0x18], 0x10
lea esi, [ebp - 0x2c]
mov eax, dword [ebp - 0x1cc]
cmovae esi, dword [ebp - 0x2c]
mov dword [ebp - 0x1c4], 0
test eax, eax
je 0x407722
push eax
call fcn.0040dce1
add esp, 4
mov dword [ebp - 0x1cc], 0
push esi
lea ecx, [ebp - 0x1f8]
call fcn.00401d20
test eax, eax
je 0x4077c5
mov edx, dword [ebp - 0x1d0]
xor eax, eax
cmp dword [ebp - 0x1c4], eax
mov dword [ebp - 0x64], eax
cmove edx, eax
mov dword [ebp - 0x54], eax
mov byte [ebp - 0x64], al
mov eax, edx
mov dword [ebp - 0x50], 0xf
lea esi, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407760
sub eax, esi
lea ecx, [ebp - 0x64]
push eax
push edx
call fcn.00402460
mov byte [ebp - 4], 8
lea eax, [ebp - 0x64]
mov edx, dword [ebp - 0x50]
cmp edx, 0x10
mov ecx, dword [ebp - 0x64]
mov esi, dword [ebp - 0x54]
cmovae eax, ecx
cmp esi, 1
je 0x4077d1
cmp esi, 0x14
jb 0x4077ea
mov byte [ebp - 4], 7
cmp edx, 0x10
jb 0x4077c5
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4077bb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407467
push edx
push ecx
call fcn.0040df13
add esp, 8
push 0xbb8
call edi
jmp 0x4076f0
movzx eax, byte [eax]
cmp al, 0x30
jne 0x4077dc
xor eax, eax
jmp 0x4077e1
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4077ea
call fcn.00404780
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebx + 8]
call fcn.0040b520
lea ecx, [ebp - 0x64]
call fcn.004021f0
lea ecx, [ebp - 0x2c]
call fcn.004021f0
lea ecx, [ebp - 0x1f8]
call fcn.004016d0
mov edi, dword [ebp - 0x344]
lea ecx, [ebp - 0x4c]
call fcn.0040b550
lea ecx, [ebp - 0x7c]
call fcn.0040b550
lea ecx, [ebp - 0x64]
call fcn.0040b550
mov byte [ebp - 4], 0xb
call fcn.004081d0
mov ecx, eax
call fcn.0040b150
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b340
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.004021f0
test esi, esi
jne 0x407931
push ecx
push str.mixone
lea ecx, [ebx + 8]
call fcn.00402170
cmp eax, 0xffffffff
je 0x4078d4
call fcn.00408250
mov ecx, eax
call fcn.0040b1c0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x64]
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
call fcn.004082e0
mov ecx, eax
call fcn.0040b130
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x4c]
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
lea eax, [ebx + 8]
push eax
lea ecx, [ebp - 0x7c]
call fcn.0040b520
jmp 0x407ea9
call fcn.00408360
mov ecx, eax
call fcn.0040b1c0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x64]
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
call fcn.004083f0
mov ecx, eax
call fcn.0040b130
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x4c]
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
lea eax, [ebx + 8]
push eax
lea ecx, [ebp - 0x7c]
call fcn.0040b520
jmp 0x407ea9
call fcn.00408470
mov ecx, eax
call fcn.0040b110
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b340
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.004021f0
test esi, esi
jne 0x407a30
call fcn.004084f0
mov ecx, eax
call fcn.0040b110
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x64]
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
call fcn.00408570
mov ecx, eax
call fcn.0040b130
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x4c]
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
call fcn.004085f0
mov ecx, eax
call fcn.0040b1c0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b340
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.004021f0
test esi, esi
jne 0x4079f8
call fcn.00408680
mov ecx, eax
call fcn.0040b150
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
lea ecx, [ebp - 0x7c]
jmp 0x407e9b
call fcn.00408700
mov ecx, eax
call fcn.0040b1c0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b340
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.004021f0
test esi, esi
jne 0x407ea9
call fcn.00408790
jmp 0x4079e0
call fcn.00408810
mov ecx, eax
call fcn.0040b110
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b340
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.004021f0
test esi, esi
jne 0x407b1f
call fcn.00408890
mov ecx, eax
call fcn.0040b110
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x64]
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
call fcn.00408910
mov ecx, eax
call fcn.0040b130
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x4c]
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
call fcn.00408990
mov ecx, eax
call fcn.0040b1c0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b340
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.004021f0
test esi, esi
jne 0x407ae4
call fcn.00408a20
jmp 0x4079e0
call fcn.00408aa0
mov ecx, eax
call fcn.0040b1c0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b340
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.004021f0
test esi, esi
jne 0x407ea9
call fcn.00408b30
jmp 0x4079e0
call fcn.00408bb0
mov ecx, eax
call fcn.0040b0f0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b340
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.004021f0
test esi, esi
jne 0x407c34
call fcn.00408c30
mov ecx, eax
call fcn.0040b150
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x64]
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
call fcn.00408cb0
mov ecx, eax
call fcn.0040b130
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x4c]
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
call fcn.00408d30
mov ecx, eax
call fcn.0040b0f0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x7c]
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
call fcn.00408db0
mov ecx, eax
call fcn.0040b1f0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b340
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.004021f0
test esi, esi
jne 0x407bf9
call fcn.00408e40
jmp 0x4079e0
call fcn.00408ec0
mov ecx, eax
call fcn.0040b1f0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b340
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.004021f0
test esi, esi
jne 0x407ea9
call fcn.00408f50
jmp 0x4079e0
call fcn.00408fd0
mov ecx, eax
call fcn.0040b0c0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b340
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.004021f0
test esi, esi
jne 0x407cdf
call fcn.00409060
mov ecx, eax
call fcn.0040b130
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x4c]
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
call fcn.004090e0
mov ecx, eax
call fcn.0040b1c0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x7c]
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
call fcn.00409170
mov ecx, eax
call fcn.0040b0f0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x64]
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
mov byte [0x439bd4], 1
jmp 0x407ea9
call fcn.004091f0
mov ecx, eax
call fcn.0040b1c0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b340
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.004021f0
test esi, esi
jne 0x407d8a
call fcn.00409280
mov ecx, eax
call fcn.0040b130
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x4c]
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
call fcn.00409300
mov ecx, eax
call fcn.0040b150
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x7c]
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
call fcn.00409380
mov ecx, eax
call fcn.0040b0f0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x64]
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
mov byte [0x439bd4], 1
jmp 0x407ea9
call fcn.00409400
mov ecx, eax
call fcn.0040b190
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b340
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.004021f0
test esi, esi
jne 0x407e0a
call fcn.00409490
mov ecx, eax
call fcn.0040b130
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x4c]
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
call fcn.00409510
mov ecx, eax
call fcn.0040b0f0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x7c]
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
call fcn.00409590
jmp 0x407e88
call fcn.00409610
mov ecx, eax
call fcn.0040b0f0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b340
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.004021f0
test esi, esi
jne 0x407ea9
call fcn.00409690
mov ecx, eax
call fcn.0040b130
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x4c]
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
call fcn.00409710
mov ecx, eax
call fcn.0040b150
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x7c]
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
call fcn.00409790
mov ecx, eax
call fcn.0040b0f0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
lea ecx, [ebp - 0x64]
push eax
call fcn.00402240
lea ecx, [ebp - 0x2c]
call fcn.004021f0
test edi, edi
je 0x407eba
push 0x434a2c
lea ecx, [ebp - 0x7c]
call fcn.004021c0
sub esp, 0x10
lea ecx, [ebp - 0x340]
push 0x434a00
call fcn.00401670
mov byte [ebp - 4], 0xc
call fcn.00409930
mov ecx, eax
call fcn.0040b1c0
push eax
lea ecx, [ebp - 0x40c]
call fcn.004022c0
mov edi, eax
mov byte [ebp - 4], 0xd
call fcn.004098b0
mov ecx, eax
call fcn.0040b150
push eax
lea ecx, [ebp - 0x3f4]
call fcn.004022c0
mov esi, eax
mov byte [ebp - 4], 0xe
call fcn.00409810
mov ecx, eax
call fcn.0040b170
push eax
lea ecx, [ebp - 0x3dc]
call fcn.004022c0
push eax
mov edx, 0x439bf0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x3c4]
call fcn.0040bb40
add esp, 4
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x10
push ecx
mov edx, eax
lea ecx, [ebp - 0x3ac]
call fcn.0040bba0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x394]
call fcn.0040bc50
add esp, 4
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x12
push ecx
mov edx, eax
lea ecx, [ebp - 0x37c]
call fcn.0040bba0
add esp, 4
push edi
mov edx, eax
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x364]
call fcn.0040bc50
add esp, 4
lea ecx, [ebx + 0x20]
mov byte [ebp - 4], 0x14
push ecx
mov edx, eax
lea ecx, [ebp - 0x94]
call fcn.0040bba0
add esp, 4
lea ecx, [ebp - 0x364]
call fcn.004021f0
lea ecx, [ebp - 0x37c]
call fcn.004021f0
lea ecx, [ebp - 0x394]
call fcn.004021f0
lea ecx, [ebp - 0x3ac]
call fcn.004021f0
lea ecx, [ebp - 0x3c4]
call fcn.004021f0
lea ecx, [ebp - 0x3dc]
call fcn.004021f0
lea ecx, [ebp - 0x3f4]
call fcn.004021f0
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 0x1d
call fcn.004021f0
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x94]
call fcn.004021b0
push eax
lea ecx, [ebp - 0x340]
call fcn.00402030
test eax, eax
je 0x40806a
lea ecx, [ebp - 0x340]
call fcn.00402070
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
mov edx, 0x434a20
lea ecx, [ebp - 0x2c]
call fcn.004025b0
test al, al
jne 0x408073
mov edx, 0x434a00
lea ecx, [ebp - 0x2c]
call fcn.004025b0
test al, al
jne 0x408073
lea ecx, [ebp - 0x2c]
call fcn.004021f0
push 0xbb8
call edi
jmp 0x408011
lea ecx, [ebp - 0x2c]
call fcn.004021f0
sub esp, 0x18
lea eax, [ebp - 0x4c]
mov ecx, esp
mov dword [ebp - 0x348], esp
push eax
call fcn.0040b570
sub esp, 0x18
mov byte [ebp - 4], 0x1e
mov ecx, esp
mov dword [ebp - 0x34c], esp
push 0x439c08
call fcn.0040b570
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, esp
push 0x439c20
call fcn.0040b570
cmp dword [ebp - 0x344], 0
mov byte [ebp - 4], 0x1d
setne dl
xor cl, cl
call fcn.00406980
add esp, 0x48
cmp byte [0x439bd4], 0
jne 0x4080f3
sub esp, 0x18
mov ecx, esp
push 0x439bd8
call fcn.0040b570
call fcn.00405800
add esp, 0x18
call fcn.004099c0
mov ecx, eax
call fcn.0040b190
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b340
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.004021f0
test esi, esi
jne 0x4081c0
sub esp, 0x10
lea ecx, [ebp - 0x1f8]
push 0x434a00
call fcn.00401670
mov byte [ebp - 4], 0x20
call fcn.00409a50
mov ecx, eax
call fcn.0040b070
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022c0
mov byte [ebp - 4], 0x21
mov esi, 1
nop dword [eax]
lea ecx, [ebp - 0x2c]
call fcn.004021b0
push eax
lea ecx, [ebp - 0x1f8]
call fcn.00402030
test eax, eax
jne 0x408187
push 0xbb8
call edi
inc esi
cmp esi, 0x14
jle 0x408160
jmp 0x4081a9
lea ecx, [ebp - 0x1f8]
call fcn.00402070
push eax
lea ecx, [ebp - 0xac]
call fcn.004022c0
lea ecx, [ebp - 0xac]
call fcn.004021f0
lea ecx, [ebp - 0x2c]
call fcn.004021f0
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x1d
call fcn.004016d0
call fcn.00404780
int3