Function at 0x4032ee
Capabilities:
Create thread

Disassembly:
push ecx
push ebx
push ebp
push esi
push edi
push 0x974
mov esi, ecx
push dword [esp + 0x1c]
mov dword [0x420340], 1
push esi
call sub.MSVCRT.dll_memcpy
movzx eax, word [esi + 0x196]
lea ebx, [esi + 0x196]
add esp, 0xc
mov dword [0x420344], eax
mov ax, word [esi + 0x192]
push 0x64
pop ecx
cmp ax, cx
je 0x403358
cmp ax, 0x65
je 0x403358
cmp ax, 2
je 0x403358
lea eax, [esi + 0x198]
mov dword [esi + 0x970], ecx
push eax
call sub.MSVCRT.dll_strlen
pop ecx
mov word [esi + 0x968], ax
xor edi, edi
push edi
push edi
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x40318a
push edi
push edi
call ebx
mov ebp, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
call ebp
movzx eax, word [esi + 0x192]
cmp eax, 5
jg 0x40359d
je 0x403512
sub eax, edi
je 0x4034dc
dec eax
je 0x4034a6
dec eax
je 0x403470
dec eax
je 0x40343a
dec eax
jne 0x403735
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x403735
push 0x7d0
lea eax, [esi + 0x198]
push edi
push eax
mov word [esi + 0x968], 0xa
call sub.MSVCRT.dll_memset
add esp, 0xc
cmp word [esi + 0x968], di
mov dword [esp + 0x10], edi
jbe 0x403415
push 0xc8
push 1
call fcn.00403117
pop ecx
pop ecx
mov ecx, dword [esp + 0x10]
inc dword [esp + 0x10]
mov byte [esi + ecx + 0x198], al
movzx eax, word [esi + 0x968]
cmp dword [esp + 0x10], eax
jl 0x4033eb
push edi
push edi
push esi
push 0x403b8a
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x4033c0
jmp 0x403735
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x403735
push edi
push edi
push esi
push 0x403d60
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x40344b
jmp 0x403735
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x403735
push edi
push edi
push esi
push 0x403880
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x403481
jmp 0x403735
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x403735
push edi
push edi
push esi
push 0x403aa3
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x4034b7
jmp 0x403735
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x403735
push edi
push edi
push esi
push 0x40374a
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x4034ed
jmp 0x403735
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x403735
push 0x7d0
lea eax, [esi + 0x198]
push edi
push eax
mov word [esi + 0x968], 0x14
call sub.MSVCRT.dll_memset
add esp, 0xc
cmp word [esi + 0x968], di
mov dword [esp + 0x10], edi
jbe 0x403578
push 0xc8
push 1
call fcn.00403117
pop ecx
pop ecx
mov ecx, dword [esp + 0x10]
inc dword [esp + 0x10]
mov byte [esi + ecx + 0x198], al
movzx eax, word [esi + 0x968]
cmp dword [esp + 0x10], eax
jl 0x40354e
push edi
push edi
push esi
push 0x40374a
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x403523
jmp 0x403735
sub eax, 6
je 0x403708
dec eax
je 0x403621
sub eax, 0x5d
je 0x4035eb
dec eax
jne 0x403735
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x403735
push edi
push edi
push esi
push 0x403b8a
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x4035c6
jmp 0x403735
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x403735
push edi
push edi
push esi
push 0x40374a
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x4035fc
jmp 0x403735
call fcn.004031d6
test eax, eax
mov dword [esp + 0x18], edi
je 0x403670
cmp word [esi + 0x194], di
jbe 0x403735
push edi
push edi
push esi
push 0x403d60
push edi
push edi
call ebx
push eax
call ebp
push edi
push edi
push esi
push 0x403edf
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
add dword [esp + 0x18], 2
cmp dword [esp + 0x18], eax
jl 0x40363b
jmp 0x403735
cmp word [esi + 0x194], di
jbe 0x403735
push 0x7d0
lea eax, [esi + 0x198]
push edi
push eax
mov word [esi + 0x968], 0x14
call sub.MSVCRT.dll_memset
add esp, 0xc
cmp word [esi + 0x968], di
mov dword [esp + 0x10], edi
jbe 0x4036d2
push 0xc8
push 1
call fcn.00403117
pop ecx
pop ecx
mov ecx, dword [esp + 0x10]
inc dword [esp + 0x10]
mov byte [esi + ecx + 0x198], al
movzx eax, word [esi + 0x968]
cmp dword [esp + 0x10], eax
jl 0x4036a8
push edi
push edi
push esi
push 0x40374a
push edi
push edi
call ebx
push eax
call ebp
push edi
push edi
push esi
push 0x403b8a
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
add dword [esp + 0x18], 2
cmp dword [esp + 0x18], eax
jl 0x40367d
jmp 0x403735
cmp word [esi + 0x194], di
mov dword [esp + 0x18], edi
jbe 0x403735
push edi
push edi
push esi
push 0x403edf
push edi
push edi
call ebx
push eax
call ebp
movzx eax, word [esi + 0x194]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jl 0x403715
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret 4