Function at 0x401120
Capabilities:
Accept command line arguments
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x7c
mov eax, dword [0x40e3e0]
xor eax, esp
mov dword [esp + 0x78], eax
push ebx
push esi
push edi
mov dword [esp + 0xc], 0xfffffffd
call fcn.00401110
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x401050
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edi, eax
mov dword [esp + 0x18], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x40f070]
mov esi, eax
test ecx, ecx
jne 0x40148a
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpynA]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00403060
call fcn.00401110
mov edx, dword [0x40f06c]
test edx, edx
je 0x4011c7
push str.WZT
call fcn.00403630
add esp, 4
test eax, eax
je 0x4011c7
mov dword [0x40f070], 1
mov dword [0x40f06c], 0
jmp 0x401478
mov eax, dword [0x40f068]
push eax
call fcn.004030c0
add esp, 4
cmp eax, 0x927c0
jl 0x401478
push esi
call fcn.004030c0
add esp, 4
cmp eax, 0x2bf20
jl 0x401478
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x60
lea ecx, [esp + 0x24]
push 0
push ecx
mov dword [esp + 0x28], eax
call fcn.00404c50
mov eax, dword [esp + 0x18]
dec eax
add esp, 0xc
cmp eax, 5
ja case.default.0x40121d
jmp dword [eax*4 + 0x4014ac]
cmp byte [0x40e0b4], 0x91
jne 0x401241
push 0x2e
push 0x40e0b4
push 0x40e0b4
call fcn.00403350
add esp, 0xc
push 0x60
push 0x40e0b4
lea edx, [esp + 0x28]
push edx
call ebx
jmp 0x401402
cmp byte [0x40e08c], 0x89
jne 0x401271
push 0x26
push 0x40e08c
push 0x40e08c
call fcn.00403350
add esp, 0xc
push 0x60
push 0x40e08c
lea eax, [esp + 0x28]
push eax
call ebx
jmp 0x401402
cmp byte [0x40e064], 0x88
jne 0x4012a1
push 0x26
push 0x40e064
push 0x40e064
call fcn.00403350
add esp, 0xc
push 0x60
push 0x40e064
lea ecx, [esp + 0x28]
push ecx
call ebx
jmp 0x401402
cmp byte [0x40e03c], 0x89
jne 0x4012d1
push 0x28
push 0x40e03c
push 0x40e03c
call fcn.00403350
add esp, 0xc
push 0x60
push 0x40e03c
lea edx, [esp + 0x28]
push edx
call ebx
jmp 0x401402
cmp byte [0x40e014], 0x8a
jne 0x401301
push 0x28
push 0x40e014
push 0x40e014
call fcn.00403350
add esp, 0xc
push 0x60
push 0x40e014
lea eax, [esp + 0x28]
push eax
call ebx
jmp 0x401402
mov dword [esp + 0xc], 0xfffffffe
jmp 0x401402
push 0x40b270
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push eax
call fcn.004030d0
add esp, 8
test eax, eax
je 0x40135f
push 0x60
add eax, 3
push eax
lea ecx, [esp + 0x28]
push ecx
call ebx
lea edx, [esp + 0x20]
push 0x40b26c
push edx
call fcn.004030d0
add esp, 8
test eax, eax
je 0x40135f
mov byte [eax], 0
push 0x200
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov esi, eax
test esi, esi
je 0x401402
cmp byte [section..data], 0xab
jne 0x401393
push 0x12
push section..data
push section..data
call fcn.00403350
add esp, 0xc
mov edi, dword [str.Network_Services]
push 0x1fe
push esi
push 0x40b268
push 0
mov dword [str.Network_Services], 0x40e000
call fcn.00402f00
add esp, 0x10
cmp eax, 1
jne 0x4013f5
cmp byte [esi], 0
je 0x4013f5
xor ecx, ecx
mov al, byte [ecx + esi]
test al, al
je 0x4013d9
dec al
mov byte [ecx + esi], al
inc ecx
cmp ecx, 0x1fe
jl 0x4013c4
push 0x40b264
push esi
call fcn.004030d0
add esp, 8
test eax, eax
je 0x4013f5
push 0x60
push esi
lea eax, [esp + 0x28]
push eax
call ebx
push esi
mov dword [str.Network_Services], edi
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp byte [esp + 0x20], 0
je 0x401470
lea ecx, [esp + 0x10]
push ecx
call fcn.004038d0
test eax, eax
je 0x401470
lea edx, [esp + 0x20]
push 0x40b260
push edx
mov esi, 0xc38a
call fcn.004030d0
add esp, 8
test eax, eax
je 0x401441
mov byte [eax], 0
inc eax
push eax
call fcn.00404c32
add esp, 4
mov esi, eax
push esi
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x18]
push ecx
call fcn.00403980
test eax, eax
je 0x401466
lea edx, [esp + 0x10]
push edx
call fcn.004027e0
add esp, 4
dec dword [esp + 0xc]
lea eax, [esp + 0x10]
push eax
call fcn.00403950
inc dword [esp + 0xc]
mov esi, dword [esp + 0x1c]
mov ecx, dword [0x40f070]
test ecx, ecx
je 0x40117e
mov edi, dword [esp + 0x18]
test edi, edi
je 0x401497
push 0xffffffffffffffff
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [esp + 0x84]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00404c23
mov esp, ebp
pop ebp
ret