Function at 0x4370e0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x2b
push 0
push 0
dec ecx
jne 0x4370e8
push ecx
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x437551
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 9], 0
call fcn.004338e4
xor eax, eax
mov dword [0x4450cc], eax
call fcn.00402a28
mov edi, 3
mov eax, edi
call fcn.00403134
mov edi, eax
sub edi, 1
jb 0x437133
je 0x43714d
dec edi
je 0x437167
dec edi
je 0x437181
jmp 0x437199
lea eax, [ebp - 0x20]
mov edx, 0x442d89
call fcn.00404d9c
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 8]
call fcn.00433864
jmp 0x437199
lea eax, [ebp - 0x24]
mov edx, 0x442dde
call fcn.00404d9c
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 8]
call fcn.00433864
jmp 0x437199
lea eax, [ebp - 0x28]
mov edx, 0x442e33
call fcn.00404d9c
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 8]
call fcn.00433864
jmp 0x437199
lea eax, [ebp - 0x2c]
mov edx, 0x442d89
call fcn.00404d9c
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 8]
call fcn.00433864
xor ebx, ebx
mov esi, 4
mov edi, 3
mov eax, edi
call fcn.00403134
push 2
call sub.kernel32.dll_Sleep
mov edi, 3
mov eax, edi
call fcn.00403134
mov edi, eax
mov eax, edi
sub eax, 1
jb 0x4371e1
je 0x43726c
dec eax
je 0x4372a2
dec eax
je 0x4372fc
jmp 0x43732d
test bl, bl
jne 0x43720f
mov bl, 1
lea eax, [ebp - 0x12c]
mov edx, dword [ebp - 8]
mov ecx, 0xff
call fcn.00404dd4
lea edx, [ebp - 0x12c]
lea eax, [ebp - 0x1a]
mov cl, 0x10
call fcn.00402f98
jmp 0x43732d
mov eax, edi
call fcn.00403134
mov edi, eax
lea eax, [ebp - 0x134]
mov edx, edi
shl edx, 4
add edx, edi
add edx, 0x442d34
call fcn.00404d9c
mov eax, dword [ebp - 0x134]
lea edx, [ebp - 0x130]
call fcn.00433864
mov edx, dword [ebp - 0x130]
lea eax, [ebp - 0x12c]
mov ecx, 0xff
call fcn.00404dd4
lea edx, [ebp - 0x12c]
lea eax, [ebp - 0x1a]
mov cl, 0x10
call fcn.00402f98
jmp 0x43732d
lea eax, [ebp - 0x138]
call fcn.00436fb4
mov edx, dword [ebp - 0x138]
lea eax, [ebp - 0x12c]
mov ecx, 0xff
call fcn.00404dd4
lea edx, [ebp - 0x12c]
lea eax, [ebp - 0x1a]
mov cl, 0x10
call fcn.00402f98
jmp 0x43732d
mov eax, edi
call fcn.00403134
mov edi, eax
lea eax, [ebp - 0x140]
mov edx, edi
shl edx, 4
add edx, edi
add edx, 0x442d34
call fcn.00404d9c
mov eax, dword [ebp - 0x140]
lea edx, [ebp - 0x13c]
call fcn.00433864
mov edx, dword [ebp - 0x13c]
lea eax, [ebp - 0x12c]
mov ecx, 0xff
call fcn.00404dd4
lea edx, [ebp - 0x12c]
lea eax, [ebp - 0x1a]
mov cl, 0x10
call fcn.00402f98
jmp 0x43732d
lea eax, [ebp - 0x144]
call fcn.00436fb4
mov edx, dword [ebp - 0x144]
lea eax, [ebp - 0x12c]
mov ecx, 0xff
call fcn.00404dd4
lea edx, [ebp - 0x12c]
lea eax, [ebp - 0x1a]
mov cl, 0x10
call fcn.00402f98
push 0x541
call sub.kernel32.dll_Sleep
mov eax, 0x4450d0
lea edx, [ebp - 0x1a]
call fcn.00404d9c
lea eax, [ebp - 4]
push eax
push 0
push 0
push 0x4354b4
push 0
push 0
call sub.kernel32.dll_CreateThread_1
push 0xfa
call sub.kernel32.dll_Sleep
dec esi
test esi, esi
jne 0x4371a0
test bl, bl
jne 0x437396
lea eax, [ebp - 0x12c]
mov edx, dword [ebp - 8]
mov ecx, 0xff
call fcn.00404dd4
lea edx, [ebp - 0x12c]
lea eax, [ebp - 0x1a]
mov cl, 0x10
call fcn.00402f98
jmp 0x4373c7
lea eax, [ebp - 0x148]
call fcn.00436fb4
mov edx, dword [ebp - 0x148]
lea eax, [ebp - 0x12c]
mov ecx, 0xff
call fcn.00404dd4
lea edx, [ebp - 0x12c]
lea eax, [ebp - 0x1a]
mov cl, 0x10
call fcn.00402f98
mov eax, 0x4450d0
lea edx, [ebp - 0x1a]
call fcn.00404d9c
lea eax, [ebp - 4]
push eax
push 0
push 0
push 0x4354b4
push 0
push 0
call sub.kernel32.dll_CreateThread_1
push 0x251c
call sub.kernel32.dll_Sleep
cmp byte [ebp - 9], 0
je 0x43746d
lea eax, [ebp - 0x14c]
mov edx, 0x442eff
call fcn.00404d9c
mov eax, dword [ebp - 0x14c]
lea edx, [ebp - 8]
call fcn.00433864
lea eax, [ebp - 0x12c]
mov edx, dword [ebp - 8]
mov ecx, 0xff
call fcn.00404dd4
lea edx, [ebp - 0x12c]
lea eax, [ebp - 0x1a]
mov cl, 0x10
call fcn.00402f98
mov eax, 0x4450d0
lea edx, [ebp - 0x1a]
call fcn.00404d9c
lea eax, [ebp - 4]
push eax
push 0
push 0
push 0x4354b4
push 0
push 0
call sub.kernel32.dll_CreateThread_1
push 0x3e8
call sub.kernel32.dll_Sleep
jmp 0x43751e
cmp dword [0x4450cc], 0
jne 0x43751e
mov edi, 3
mov eax, edi
call fcn.00403134
mov edi, eax
sub edi, 1
jb 0x437497
je 0x4374b7
dec edi
je 0x4374d7
dec edi
je 0x4374f7
jmp 0x437515
lea eax, [ebp - 0x150]
mov edx, 0x442edd
call fcn.00404d9c
mov eax, dword [ebp - 0x150]
lea edx, [ebp - 8]
call fcn.00433864
jmp 0x437515
lea eax, [ebp - 0x154]
mov edx, 0x442edd
call fcn.00404d9c
mov eax, dword [ebp - 0x154]
lea edx, [ebp - 8]
call fcn.00433864
jmp 0x437515
lea eax, [ebp - 0x158]
mov edx, 0x442eee
call fcn.00404d9c
mov eax, dword [ebp - 0x158]
lea edx, [ebp - 8]
call fcn.00433864
jmp 0x437515
lea eax, [ebp - 0x15c]
mov edx, 0x442eee
call fcn.00404d9c
mov eax, dword [ebp - 0x15c]
lea edx, [ebp - 8]
call fcn.00433864
mov byte [ebp - 9], 1
jmp 0x437199
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x437558
lea eax, [ebp - 0x15c]
mov edx, 0xc
call fcn.00404b64
lea eax, [ebp - 0x2c]
mov edx, 4
call fcn.00404b64
lea eax, [ebp - 8]
call fcn.00404b40
ret