Function at 0x403290
Capabilities:
Create thread

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x45c9a7
push eax
mov eax, dword [0x478270]
mov dword fs:[0], esp
sub esp, 0x18
push ebx
push esi
lea esi, [eax + 4]
mov ebx, ecx
mov dword [0x4852c0], esi
mov eax, dword [eax]
mov dword [0x4852bc], eax
lea eax, [ebx + 0x3f69cc]
push edi
mov ecx, 7
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 0x3f69d4]
mov edx, dword [ebx + 0x3f69d8]
mov dword [ebx + 0x2118], ecx
mov ecx, dword [ebx + 0x3f69e4]
cmp ecx, 0x4d2
mov dword [ebx + 0x211c], edx
jne 0x403469
mov byte [ebx + 0x415e14], 1
mov esi, dword [0x4852c0]
mov ecx, 0x7d07
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov edi, dword [0x4852c0]
mov eax, 0x1f41c
add edi, eax
push 0x24
mov dword [0x4852c0], edi
mov dword [0x4852b8], eax
call fcn.00431d7b
add esp, 4
mov dword [esp + 0x20], eax
test eax, eax
mov dword [esp + 0x2c], 0
je 0x403356
push 0x438
push 0x780
mov ecx, eax
call fcn.004013a0
jmp 0x403358
xor eax, eax
mov dword [ebx + 0x21b4], eax
mov edx, dword [eax]
or esi, 0xffffffff
mov ecx, eax
mov dword [esp + 0x2c], esi
call dword [edx]
push 0x24
call fcn.00431d7b
add esp, 4
mov dword [esp + 0x20], eax
test eax, eax
mov dword [esp + 0x2c], 1
je 0x403398
push 0x2d0
push 0x500
mov ecx, eax
call fcn.004013a0
jmp 0x40339a
xor eax, eax
mov dword [ebx + 0x21b8], eax
mov edx, dword [eax]
mov ecx, eax
mov dword [esp + 0x2c], esi
call dword [edx]
push 0x24
call fcn.00431d7b
add esp, 4
mov dword [esp + 0x20], eax
test eax, eax
mov dword [esp + 0x2c], 2
je 0x4033d7
push 0x2d0
push 0x3c0
mov ecx, eax
call fcn.004013a0
jmp 0x4033d9
xor eax, eax
mov dword [ebx + 0x21bc], eax
mov edx, dword [eax]
mov ecx, eax
mov dword [esp + 0x2c], esi
call dword [edx]
push 0x50
call fcn.00431d7b
add esp, 4
mov dword [esp + 0x20], eax
test eax, eax
mov dword [esp + 0x2c], 3
je 0x403416
push 0x2d0
push 0x500
mov ecx, eax
call fcn.00401550
jmp 0x403418
xor eax, eax
mov dword [ebx + 0x21c0], eax
mov edx, dword [eax]
mov ecx, eax
mov dword [esp + 0x2c], esi
call dword [edx]
push 0x50
call fcn.00431d7b
add esp, 4
mov dword [esp + 0x20], eax
test eax, eax
mov dword [esp + 0x2c], 4
je 0x403455
push 0x2d0
push 0x3c0
mov ecx, eax
call fcn.00401550
jmp 0x403457
xor eax, eax
mov dword [ebx + 0x21c4], eax
mov edx, dword [eax]
mov ecx, eax
mov dword [esp + 0x2c], esi
call dword [edx]
jmp 0x403497
mov byte [ebx + 0x415e14], 0
mov esi, dword [0x4852c0]
mov ecx, 0x7d7
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x4852c0]
mov eax, 0x1f5c
add ecx, eax
mov dword [0x4852b8], eax
mov dword [0x4852c0], ecx
mov eax, dword [ebx + 0x211c]
mov ecx, dword [ebx + 0x2118]
push ebp
push eax
push ecx
mov ecx, dword [ebx + 0x21c8]
call fcn.00401130
mov edx, dword [ebx + 0x3f69d8]
mov ebp, dword [ebx + 0x3f69d4]
xor eax, eax
sub edx, 0xc
lea esi, [ebx + 0x140]
mov byte [ebx + 0x20f4], 0
mov dword [esp + 0x14], ebp
mov dword [esp + 0x24], edx
lea ecx, [ebp + ebp]
mov dword [esp + 0x10], eax
mov edi, 0x463898
mov dword [esp + 0x20], esi
jmp 0x4034ee
mov edx, dword [esp + 0x24]
mov esi, ecx
mov dword [esp + 0x18], edi
imul esi, edx
mov dword [esp + 0x1c], 0xa
xor ecx, ecx
lea edx, [ebp + ebp - 0xf8]
cmp byte [edi + ecx], 1
jne 0x403523
mov ebp, dword [esp + 0x10]
lea edi, [esi + edx]
add ebp, eax
inc eax
mov dword [ebx + ebp*4], edi
mov edi, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
inc ecx
add edx, 2
cmp ecx, 8
jl 0x403508
mov edx, dword [esp + 0x1c]
lea ecx, [ebp + ebp]
add edi, 8
add esi, ecx
dec edx
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], edx
jne 0x4034ff
mov edx, dword [esp + 0x20]
mov esi, dword [esp + 0x10]
add esi, 0x51
mov dword [edx], eax
xor eax, eax
add edx, 0x144
cmp edi, 0x463bb8
mov dword [esp + 0x10], esi
mov dword [esp + 0x20], edx
jl 0x4034ea
imul ecx, dword [esp + 0x24]
mov dword [esp + 0x18], ecx
mov edi, ecx
mov dword [esp + 0x10], 0x463c58
xor esi, esi
lea edx, [ebp + ebp - 0xf8]
lea ecx, [ebx + eax*4 + 0x1bd8]
mov ebp, dword [0x4851b0]
test ebp, ebp
mov ebp, dword [esp + 0x10]
jne 0x4035a6
cmp byte [esi + ebp - 0xa0], 0
je 0x4035b6
jmp 0x4035ac
cmp byte [esi + ebp], 0
je 0x4035b6
lea ebp, [edi + edx + 0x1c]
inc eax
mov dword [ecx], ebp
add ecx, 4
inc esi
add edx, 2
cmp esi, 8
jl 0x40358c
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
add edx, 8
lea ecx, [ebp + ebp]
mov dword [esp + 0x10], edx
add edi, ecx
cmp edx, 0x463ca8
jl 0x40357c
mov edi, dword [esp + 0x18]
mov dword [ebx + 0x1d18], eax
xor edx, edx
mov dword [esp + 0x10], 0x463c58
xor esi, esi
lea ecx, [ebp + ebp - 0xf8]
lea eax, [ebx + edx*4 + 0x1d1c]
mov ebp, dword [0x4851b0]
test ebp, ebp
mov ebp, dword [esp + 0x10]
jne 0x40361a
cmp byte [esi + ebp - 0xa0], 0
je 0x40362a
jmp 0x403620
cmp byte [esi + ebp], 0
je 0x40362a
lea ebp, [edi + ecx + 0x44]
inc edx
mov dword [eax], ebp
add eax, 4
inc esi
add ecx, 2
cmp esi, 8
jl 0x403600
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
add ecx, 8
lea eax, [ebp + ebp]
mov dword [esp + 0x10], ecx
add edi, eax
cmp ecx, 0x463ca8
jl 0x4035f0
mov dword [ebx + 0x1e5c], edx
mov edx, dword [esp + 0x18]
mov edi, 0x463c08
xor esi, esi
mov dword [esp + 0x14], edx
mov dword [esp + 0x24], edi
xor eax, eax
lea ecx, [ebp + ebp - 0xf8]
lea edx, [ebx + esi*4 + 0x1e60]
cmp byte [edi + eax], 0
je 0x403695
mov edi, dword [esp + 0x14]
inc esi
add edx, 4
lea edi, [edi + ecx + 0x94]
mov dword [edx - 4], edi
mov edi, dword [esp + 0x24]
inc eax
add ecx, 2
cmp eax, 8
jl 0x403679
mov ecx, dword [esp + 0x14]
lea eax, [ebp + ebp]
add edi, 8
add ecx, eax
cmp edi, 0x463c58
mov dword [esp + 0x24], edi
mov dword [esp + 0x14], ecx
jl 0x403669
mov eax, dword [esp + 0x18]
mov edi, 0x463c08
mov dword [ebx + 0x1fa0], esi
xor esi, esi
mov dword [esp + 0x18], eax
mov dword [esp + 0x24], edi
xor eax, eax
lea ecx, [ebp + ebp - 0xf8]
lea edx, [ebx + esi*4 + 0x1fa4]
cmp byte [edi + eax], 0
je 0x403700
mov edi, dword [esp + 0x18]
inc esi
add edx, 4
lea edi, [edi + ecx + 0xbc]
mov dword [edx - 4], edi
mov edi, dword [esp + 0x24]
inc eax
add ecx, 2
cmp eax, 8
jl 0x4036e4
mov ecx, dword [esp + 0x18]
lea eax, [ebp + ebp]
add edi, 8
add ecx, eax
cmp edi, 0x463c58
mov dword [esp + 0x24], edi
mov dword [esp + 0x18], ecx
jl 0x4036d4
lea ecx, [ebx + 0x20f5]
mov dword [ebx + 0x20e4], esi
push 0
mov dword [ecx], 0
mov ecx, ebx
call fcn.00403860
push 0
mov ecx, ebx
call fcn.00403960
push 0
mov ecx, ebx
call fcn.00403a60
mov al, byte [ebx + 0x415e14]
pop ebp
push 0
push 0
test al, al
push ebx
je 0x40376a
push 0x406de0
jmp 0x40376f
push 0x406540
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x24]
pop edi
pop esi
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x24
ret