Function at 0x408c8b
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7e8
mov dword [ebp - 0x7e4], ecx
mov dword [0x4288cc], 1
push 0x974
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x7e4]
push ecx
call sub.MSVCRT.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x7e4]
xor eax, eax
mov ax, word [edx + 0x196]
mov dword [0x4288d0], eax
mov ecx, dword [ebp - 0x7e4]
xor edx, edx
mov dx, word [ecx + 0x192]
cmp edx, 0x64
je 0x408d3e
mov eax, dword [ebp - 0x7e4]
xor ecx, ecx
mov cx, word [eax + 0x192]
cmp ecx, 0x65
je 0x408d3e
mov edx, dword [ebp - 0x7e4]
xor eax, eax
mov ax, word [edx + 0x192]
cmp eax, 0x4f
je 0x408d3e
mov ecx, dword [ebp - 0x7e4]
mov dword [ecx + 0x970], 0x64
mov edx, dword [ebp - 0x7e4]
add edx, 0x198
push edx
call sub.MSVCRT.dll_strlen
add esp, 4
mov ecx, dword [ebp - 0x7e4]
mov word [ecx + 0x968], ax
push 0
push 0
mov edx, dword [ebp - 0x7e4]
add edx, 0x196
push edx
push 0x408b14
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x7d4], 0
mov eax, dword [ebp - 0x7e4]
xor ecx, ecx
mov cx, word [eax + 0x192]
mov dword [ebp - 0x7e8], ecx
mov edx, dword [ebp - 0x7e8]
sub edx, 0x4d
mov dword [ebp - 0x7e8], edx
cmp dword [ebp - 0x7e8], 0x18
ja case.0x408dae.10
mov ecx, dword [ebp - 0x7e8]
xor eax, eax
mov al, byte [ecx + 0x4093d0]
jmp dword [eax*4 + 0x4093a4]
mov dword [ebp - 0x7d4], 0
jmp 0x408dd0
mov edx, dword [ebp - 0x7d4]
add edx, 1
mov dword [ebp - 0x7d4], edx
mov eax, dword [ebp - 0x7e4]
xor ecx, ecx
mov cx, word [eax + 0x194]
cmp dword [ebp - 0x7d4], ecx
jge 0x408e0a
push 0
push 0
mov edx, dword [ebp - 0x7e4]
push edx
push 0x4093e9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x408dc1
jmp case.0x408dae.10
mov dword [ebp - 0x7d4], 0
jmp 0x408e2a
mov eax, dword [ebp - 0x7d4]
add eax, 1
mov dword [ebp - 0x7d4], eax
mov ecx, dword [ebp - 0x7e4]
xor edx, edx
mov dx, word [ecx + 0x194]
cmp dword [ebp - 0x7d4], edx
jge 0x408e64
push 0
push 0
mov eax, dword [ebp - 0x7e4]
push eax
push 0x4097ff
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x408e1b
jmp case.0x408dae.10
mov dword [ebp - 0x7d4], 0
jmp 0x408e84
mov ecx, dword [ebp - 0x7d4]
add ecx, 1
mov dword [ebp - 0x7d4], ecx
mov edx, dword [ebp - 0x7e4]
xor eax, eax
mov ax, word [edx + 0x194]
cmp dword [ebp - 0x7d4], eax
jge 0x408ebe
push 0
push 0
mov ecx, dword [ebp - 0x7e4]
push ecx
push 0x409545
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x408e75
jmp case.0x408dae.10
mov dword [ebp - 0x7d4], 0
jmp 0x408ede
mov edx, dword [ebp - 0x7d4]
add edx, 1
mov dword [ebp - 0x7d4], edx
mov eax, dword [ebp - 0x7e4]
xor ecx, ecx
mov cx, word [eax + 0x194]
cmp dword [ebp - 0x7d4], ecx
jge 0x408f18
push 0
push 0
mov edx, dword [ebp - 0x7e4]
push edx
push 0x409b61
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x408ecf
jmp case.0x408dae.10
mov dword [ebp - 0x7d4], 0
jmp 0x408f38
mov eax, dword [ebp - 0x7d4]
add eax, 1
mov dword [ebp - 0x7d4], eax
mov ecx, dword [ebp - 0x7e4]
xor edx, edx
mov dx, word [ecx + 0x194]
cmp dword [ebp - 0x7d4], edx
jge 0x408ff9
mov eax, dword [ebp - 0x7e4]
mov word [eax + 0x968], 0xa
push 0x7d0
push 0
mov ecx, dword [ebp - 0x7e4]
add ecx, 0x198
push ecx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x7d8], 0
jmp 0x408f99
mov edx, dword [ebp - 0x7d8]
add edx, 1
mov dword [ebp - 0x7d8], edx
mov eax, dword [ebp - 0x7e4]
xor ecx, ecx
mov cx, word [eax + 0x968]
cmp dword [ebp - 0x7d8], ecx
jge 0x408fd3
push 0xc8
push 1
call fcn.00408a6e
add esp, 8
mov edx, dword [ebp - 0x7e4]
add edx, dword [ebp - 0x7d8]
mov byte [edx + 0x198], al
jmp 0x408f8a
push 0
push 0
mov eax, dword [ebp - 0x7e4]
push eax
push 0x4098d9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x408f29
jmp case.0x408dae.10
mov dword [ebp - 0x7d4], 0
jmp 0x409019
mov ecx, dword [ebp - 0x7d4]
add ecx, 1
mov dword [ebp - 0x7d4], ecx
mov edx, dword [ebp - 0x7e4]
xor eax, eax
mov ax, word [edx + 0x194]
cmp dword [ebp - 0x7d4], eax
jge 0x4090da
mov ecx, dword [ebp - 0x7e4]
mov word [ecx + 0x968], 0x14
push 0x7d0
push 0
mov edx, dword [ebp - 0x7e4]
add edx, 0x198
push edx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x7dc], 0
jmp 0x40907a
mov eax, dword [ebp - 0x7dc]
add eax, 1
mov dword [ebp - 0x7dc], eax
mov ecx, dword [ebp - 0x7e4]
xor edx, edx
mov dx, word [ecx + 0x968]
cmp dword [ebp - 0x7dc], edx
jge 0x4090b4
push 0xc8
push 1
call fcn.00408a6e
add esp, 8
mov ecx, dword [ebp - 0x7e4]
add ecx, dword [ebp - 0x7dc]
mov byte [ecx + 0x198], al
jmp 0x40906b
push 0
push 0
mov edx, dword [ebp - 0x7e4]
push edx
push 0x4093e9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x40900a
jmp case.0x408dae.10
mov dword [ebp - 0x7d4], 0
jmp 0x4090fa
mov eax, dword [ebp - 0x7d4]
add eax, 1
mov dword [ebp - 0x7d4], eax
mov ecx, dword [ebp - 0x7e4]
xor edx, edx
mov dx, word [ecx + 0x194]
cmp dword [ebp - 0x7d4], edx
jge 0x409134
push 0
push 0
mov eax, dword [ebp - 0x7e4]
push eax
push 0x409d0a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4090eb
jmp case.0x408dae.10
mov dword [ebp - 0x7d4], 0
jmp 0x409154
mov ecx, dword [ebp - 0x7d4]
add ecx, 1
mov dword [ebp - 0x7d4], ecx
mov edx, dword [ebp - 0x7e4]
xor eax, eax
mov ax, word [edx + 0x194]
cmp dword [ebp - 0x7d4], eax
jge 0x40918e
push 0
push 0
mov ecx, dword [ebp - 0x7e4]
push ecx
push 0x4093e9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x409145
jmp case.0x408dae.10
mov dword [ebp - 0x7d4], 0
jmp 0x4091ae
mov edx, dword [ebp - 0x7d4]
add edx, 1
mov dword [ebp - 0x7d4], edx
mov eax, dword [ebp - 0x7e4]
xor ecx, ecx
mov cx, word [eax + 0x194]
cmp dword [ebp - 0x7d4], ecx
jge 0x4091e8
push 0
push 0
mov edx, dword [ebp - 0x7e4]
push edx
push 0x4098d9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x40919f
jmp case.0x408dae.10
call fcn.00408b84
test eax, eax
je 0x409284
mov dword [ebp - 0x7d4], 0
jmp 0x409215
mov eax, dword [ebp - 0x7d4]
add eax, 1
mov dword [ebp - 0x7d4], eax
mov ecx, dword [ebp - 0x7e4]
xor edx, edx
mov dx, word [ecx + 0x194]
cmp dword [ebp - 0x7d4], edx
jge 0x40927f
push 0
push 0
mov eax, dword [ebp - 0x7e4]
push eax
push 0x409b61
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 0
mov ecx, dword [ebp - 0x7e4]
push ecx
push 0x409d0a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x7d4]
add edx, 1
mov dword [ebp - 0x7d4], edx
jmp 0x409206
jmp case.0x408dae.10
mov dword [ebp - 0x7d4], 0
jmp 0x40929f
mov eax, dword [ebp - 0x7d4]
add eax, 1
mov dword [ebp - 0x7d4], eax
mov ecx, dword [ebp - 0x7e4]
xor edx, edx
mov dx, word [ecx + 0x194]
cmp dword [ebp - 0x7d4], edx
jge case.0x408dae.10
mov eax, dword [ebp - 0x7e4]
mov word [eax + 0x968], 0x14
push 0x7d0
push 0
mov ecx, dword [ebp - 0x7e4]
add ecx, 0x198
push ecx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x7e0], 0
jmp 0x409300
mov edx, dword [ebp - 0x7e0]
add edx, 1
mov dword [ebp - 0x7e0], edx
mov eax, dword [ebp - 0x7e4]
xor ecx, ecx
mov cx, word [eax + 0x968]
cmp dword [ebp - 0x7e0], ecx
jge 0x40933a
push 0xc8
push 1
call fcn.00408a6e
add esp, 8
mov edx, dword [ebp - 0x7e4]
add edx, dword [ebp - 0x7e0]
mov byte [edx + 0x198], al
jmp 0x4092f1
push 0
push 0
mov eax, dword [ebp - 0x7e4]
push eax
push 0x4093e9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 0
mov ecx, dword [ebp - 0x7e4]
push ecx
push 0x4098d9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x7d4]
add edx, 1
mov dword [ebp - 0x7d4], edx
jmp 0x409290
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x7e4]
mov esp, ebp
pop ebp
ret 4