Function at 0x10001bf6
Capabilities:
Create thread

Disassembly:
push ecx
push ebx
push ebp
push esi
push edi
push 0x974
mov esi, ecx
push dword [esp + 0x1c]
mov dword [0x1000a560], 1
push esi
call sub.MSVCRT.dll_memcpy
movzx eax, word [esi + 0x196]
lea ebx, [esi + 0x196]
add esp, 0xc
mov dword [0x1000a564], eax
mov ax, word [esi + 0x192]
push 0x64
pop ecx
cmp ax, cx
je 0x10001c60
cmp ax, 0x65
je 0x10001c60
cmp ax, 0x84
je 0x10001c60
lea eax, [esi + 0x198]
mov dword [esi + 0x970], ecx
push eax
call sub.MSVCRT.dll_strlen
pop ecx
mov word [esi + 0x968], ax
xor edi, edi
push edi
push edi
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x10001ac4
push edi
push edi
call ebx
mov ebp, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
call ebp
movzx eax, word [esi + 0x192]
mov ecx, 0x85
cmp eax, ecx
jg 0x10001dfa
je 0x10001dc4
sub eax, 0x64
je 0x10001d8e
dec eax
je 0x10001d58
sub eax, 0x1d
je 0x10001d22
dec eax
je 0x10001cec
dec eax
jne 0x10002047
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x10002047
push edi
push edi
push esi
push 0x10002127
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x10001cc7
jmp 0x10002047
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x10002047
push edi
push edi
push esi
push 0x100022e5
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x10001cfd
jmp 0x10002047
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x10002047
push edi
push edi
push esi
push 0x1000205c
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x10001d33
jmp 0x10002047
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x10002047
push edi
push edi
push esi
push 0x1000238d
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x10001d69
jmp 0x10002047
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x10002047
push edi
push edi
push esi
push 0x1000205c
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x10001d9f
jmp 0x10002047
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x10002047
push edi
push edi
push esi
push 0x10002528
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x10001dd5
jmp 0x10002047
sub eax, 0x86
je 0x10001fc5
dec eax
je 0x10001f3a
dec eax
je 0x10001f04
dec eax
jne 0x10002047
call fcn.10001b14
test eax, eax
mov dword [esp + 0x18], edi
je 0x10001e69
cmp word [esi + 0x194], di
jbe 0x10002047
push edi
push edi
push esi
push 0x10002528
push edi
push edi
call ebx
push eax
call ebp
push edi
push edi
push esi
push 0x1000263f
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
add dword [esp + 0x18], 2
cmp dword [esp + 0x18], eax
jl 0x10001e34
jmp 0x10002047
cmp word [esi + 0x194], di
jbe 0x10002047
push 0x7d0
lea eax, [esi + 0x198]
push edi
push eax
mov word [esi + 0x968], 0x14
call sub.MSVCRT.dll_memset
add esp, 0xc
cmp word [esi + 0x968], di
mov dword [esp + 0x10], edi
jbe 0x10001ecb
push 0xc8
push 1
call fcn.10001a51
pop ecx
pop ecx
mov ecx, dword [esp + 0x10]
inc dword [esp + 0x10]
mov byte [esi + ecx + 0x198], al
movzx eax, word [esi + 0x968]
cmp dword [esp + 0x10], eax
jl 0x10001ea1
push edi
push edi
push esi
push 0x1000205c
push edi
push edi
call ebx
push eax
call ebp
push edi
push edi
push esi
push 0x1000238d
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
add dword [esp + 0x18], 2
cmp dword [esp + 0x18], eax
jl 0x10001e76
jmp 0x10002047
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x10002047
push edi
push edi
push esi
push 0x1000263f
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x10001f15
jmp 0x10002047
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x10002047
push 0x7d0
lea eax, [esi + 0x198]
push edi
push eax
mov word [esi + 0x968], 0x14
call sub.MSVCRT.dll_memset
add esp, 0xc
cmp word [esi + 0x968], di
mov dword [esp + 0x10], edi
jbe 0x10001fa0
push 0xc8
push 1
call fcn.10001a51
pop ecx
pop ecx
mov ecx, dword [esp + 0x10]
inc dword [esp + 0x10]
mov byte [esi + ecx + 0x198], al
movzx eax, word [esi + 0x968]
cmp dword [esp + 0x10], eax
jl 0x10001f76
push edi
push edi
push esi
push 0x1000205c
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x10001f4b
jmp 0x10002047
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x10002047
push 0x7d0
lea eax, [esi + 0x198]
push edi
push eax
mov word [esi + 0x968], 0xa
call sub.MSVCRT.dll_memset
add esp, 0xc
cmp word [esi + 0x968], di
mov dword [esp + 0x10], edi
jbe 0x10002027
push 0xc8
push 1
call fcn.10001a51
pop ecx
pop ecx
mov ecx, dword [esp + 0x10]
inc dword [esp + 0x10]
mov byte [esi + ecx + 0x198], al
movzx eax, word [esi + 0x968]
cmp dword [esp + 0x10], eax
jl 0x10001ffd
push edi
push edi
push esi
push 0x1000238d
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x10001fd2
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret 4