Function at 0x403062
Capabilities:
Create thread

Disassembly:
push ecx
push ebx
push ebp
push esi
push edi
push 0x974
mov esi, ecx
push dword [esp + 0x1c]
mov dword [0x41dfa8], 1
push esi
call sub.MSVCRT.dll_memcpy
movzx eax, word [esi + 0x196]
lea ebx, [esi + 0x196]
add esp, 0xc
mov dword [0x41dfac], eax
mov ax, word [esi + 0x192]
push 0x64
pop ecx
cmp ax, cx
je 0x4030cc
cmp ax, 0x65
je 0x4030cc
cmp ax, 2
je 0x4030cc
lea eax, [esi + 0x198]
mov dword [esi + 0x970], ecx
push eax
call sub.MSVCRT.dll_strlen
pop ecx
mov word [esi + 0x968], ax
xor edi, edi
push edi
push edi
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x402efe
push edi
push edi
call ebx
mov ebp, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
call ebp
movzx eax, word [esi + 0x192]
cmp eax, 5
jg 0x403311
je 0x403286
sub eax, edi
je 0x403250
dec eax
je 0x40321a
dec eax
je 0x4031e4
dec eax
je 0x4031ae
dec eax
jne 0x4034a9
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x4034a9
push 0x7d0
lea eax, [esi + 0x198]
push edi
push eax
mov word [esi + 0x968], 0xa
call sub.MSVCRT.dll_memset
add esp, 0xc
cmp word [esi + 0x968], di
mov dword [esp + 0x10], edi
jbe 0x403189
push 0xc8
push 1
call fcn.00402e8b
pop ecx
pop ecx
mov ecx, dword [esp + 0x10]
inc dword [esp + 0x10]
mov byte [esi + ecx + 0x198], al
movzx eax, word [esi + 0x968]
cmp dword [esp + 0x10], eax
jl 0x40315f
push edi
push edi
push esi
push 0x4038fe
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x403134
jmp 0x4034a9
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x4034a9
push edi
push edi
push esi
push 0x403ad4
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x4031bf
jmp 0x4034a9
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x4034a9
push edi
push edi
push esi
push 0x4035f4
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x4031f5
jmp 0x4034a9
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x4034a9
push edi
push edi
push esi
push 0x403817
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x40322b
jmp 0x4034a9
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x4034a9
push edi
push edi
push esi
push 0x4034be
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x403261
jmp 0x4034a9
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x4034a9
push 0x7d0
lea eax, [esi + 0x198]
push edi
push eax
mov word [esi + 0x968], 0x14
call sub.MSVCRT.dll_memset
add esp, 0xc
cmp word [esi + 0x968], di
mov dword [esp + 0x10], edi
jbe 0x4032ec
push 0xc8
push 1
call fcn.00402e8b
pop ecx
pop ecx
mov ecx, dword [esp + 0x10]
inc dword [esp + 0x10]
mov byte [esi + ecx + 0x198], al
movzx eax, word [esi + 0x968]
cmp dword [esp + 0x10], eax
jl 0x4032c2
push edi
push edi
push esi
push 0x4034be
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x403297
jmp 0x4034a9
sub eax, 6
je 0x40347c
dec eax
je 0x403395
sub eax, 0x5d
je 0x40335f
dec eax
jne 0x4034a9
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x4034a9
push edi
push edi
push esi
push 0x4038fe
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x40333a
jmp 0x4034a9
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x4034a9
push edi
push edi
push esi
push 0x4034be
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x403370
jmp 0x4034a9
call fcn.00402f4a
test eax, eax
mov dword [esp + 0x18], edi
je 0x4033e4
cmp word [esi + 0x194], di
jbe 0x4034a9
push edi
push edi
push esi
push 0x403ad4
push edi
push edi
call ebx
push eax
call ebp
push edi
push edi
push esi
push 0x403c53
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
add dword [esp + 0x18], 2
cmp dword [esp + 0x18], eax
jl 0x4033af
jmp 0x4034a9
cmp word [esi + 0x194], di
jbe 0x4034a9
push 0x7d0
lea eax, [esi + 0x198]
push edi
push eax
mov word [esi + 0x968], 0x14
call sub.MSVCRT.dll_memset
add esp, 0xc
cmp word [esi + 0x968], di
mov dword [esp + 0x10], edi
jbe 0x403446
push 0xc8
push 1
call fcn.00402e8b
pop ecx
pop ecx
mov ecx, dword [esp + 0x10]
inc dword [esp + 0x10]
mov byte [esi + ecx + 0x198], al
movzx eax, word [esi + 0x968]
cmp dword [esp + 0x10], eax
jl 0x40341c
push edi
push edi
push esi
push 0x4034be
push edi
push edi
call ebx
push eax
call ebp
push edi
push edi
push esi
push 0x4038fe
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
add dword [esp + 0x18], 2
cmp dword [esp + 0x18], eax
jl 0x4033f1
jmp 0x4034a9
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x4034a9
push edi
push edi
push esi
push 0x403c53
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x403489
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret 4