Function at 0x40c100
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x622e54
mov eax, dword fs:[0]
push eax
sub esp, 0x48
mov eax, dword [0x6cd400]
xor eax, esp
mov dword [esp + 0x40], eax
push ebx
push esi
push edi
mov eax, dword [0x6cd400]
xor eax, esp
push eax
lea eax, [esp + 0x58]
mov dword fs:[0], eax
mov edi, ecx
mov ebx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
cmp dword [ebx + 0x10], 0
mov dword [esp + 0x14], esi
je 0x40c469
cmp dword [ebx + 0x40], 0
je 0x40c469
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x4c], esp
xor eax, eax
push 0xffffffffffffffff
push eax
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push ebx
mov word [ecx], ax
call fcn.00403b10
mov dword [esp + 0x78], 4
call fcn.00401520
mov dword [esp + 0x78], 0xffffffff
mov ecx, eax
call fcn.00436430
test al, al
jne 0x40c3b0
call fcn.00401520
cmp dword [ebx + 0x14], 8
lea ecx, [eax + 0xf8]
jb 0x40c1b5
mov edx, dword [ebx]
jmp 0x40c1b7
mov edx, ebx
mov eax, dword [ecx]
push edx
push 0x67882c
push 0x6779a0
push ecx
call dword [eax + 0x24]
add esp, 0x10
cmp dword [ebx + 0x14], 8
jb 0x40c1d5
mov eax, dword [ebx]
jmp 0x40c1d7
mov eax, ebx
push eax
lea ecx, [esp + 0x3c]
call fcn.004035b0
mov dword [esp + 0x60], 5
mov edi, dword [esp + 0x4c]
mov esi, dword [esp + 0x38]
cmp edi, 8
lea eax, [esp + 0x38]
cmovae eax, esi
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x48]
lea ecx, [esp + 0x38]
cmovae ecx, esi
lea edx, [esp + 0x38]
lea eax, [ecx + eax*2]
cmovae edx, esi
cmp edx, eax
je 0x40c22e
push fcn.005ea453
push dword [esp + 0x38]
lea ecx, [esp + 0x3c]
push eax
call fcn.0040db40
add esp, 0xc
push 0x677fc4
push 7
push ecx
lea ecx, [esp + 0x44]
call fcn.0040caf0
test eax, eax
jne 0x40c262
mov eax, dword [esp + 0x48]
add eax, 0xfffffff9
push eax
push 7
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x44]
call fcn.0040ca70
mov byte [esp + 0x60], 6
jmp 0x40c294
push 0x677fb0
push 8
push ecx
lea ecx, [esp + 0x44]
call fcn.0040caf0
test eax, eax
jne 0x40c2ac
mov eax, dword [esp + 0x48]
add eax, 0xfffffff8
push eax
push 8
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x44]
call fcn.0040ca70
mov byte [esp + 0x60], 7
push eax
lea ecx, [esp + 0x3c]
call fcn.00403640
mov byte [esp + 0x60], 5
lea ecx, [esp + 0x1c]
call fcn.00403680
push 1
push 0
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x44]
mov dword [esp + 0x40], 0x2f
call fcn.0040cd50
push eax
push 0
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x44]
call fcn.0040ca70
mov byte [esp + 0x60], 8
push eax
lea ecx, [esp + 0x3c]
call fcn.00403640
mov byte [esp + 0x60], 5
cmp dword [esp + 0x30], 8
jb 0x40c2fe
push dword [esp + 0x1c]
call fcn.004c56c2
add esp, 4
sub esp, 0x18
xor eax, eax
mov ecx, esp
mov dword [esp + 0x4c], esp
push 0x678898
mov dword [esp + 0x4c], 7
mov dword [esp + 0x48], 0
mov word [esp + 0x38], ax
call fcn.004035b0
mov byte [esp + 0x78], 9
sub esp, 0x18
mov eax, esp
mov dword [esp + 0x48], esp
lea ecx, [esp + 0x68]
push ecx
push 0x6788c8
push eax
call fcn.0040d7c0
add esp, 0xc
mov byte [esp + 0x90], 0xa
call fcn.00401520
mov byte [esp + 0x90], 5
mov ecx, eax
call fcn.004365e0
mov esi, dword [esp + 0x14]
mov dword [esi], 0xfffffffc
mov dword [esi + 4], 0
mov dword [esi + 8], ebx
mov dword [esp + 0x60], 0xffffffff
cmp dword [esp + 0x4c], 8
jb 0x40c394
push dword [esp + 0x38]
call fcn.004c56c2
add esp, 4
xor eax, eax
mov dword [esp + 0x4c], 7
mov dword [esp + 0x48], 0
mov word [esp + 0x38], ax
jmp 0x40c577
push ebx
mov ecx, edi
call fcn.0040c5a0
mov eax, dword [ebp + 0x10]
push 0
push 0
push edi
push 0x40bbf0
mov dword [edi + 0xb0], eax
mov eax, dword [ebp + 0x14]
push 0
push 0
mov dword [edi + 0xb4], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
jne 0x40c458
call fcn.00401520
mov ecx, dword [eax + 0xf8]
add eax, 0xf8
push 0x678900
push 0x6779a0
push eax
call dword [ecx + 0x24]
sub esp, 0xc
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x678968
call fcn.004035b0
mov dword [esp + 0x78], 0xb
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x44], esp
push 0x678990
call fcn.004035b0
mov byte [esp + 0x90], 0xc
call fcn.00401520
mov dword [esp + 0x90], 0xffffffff
mov ecx, eax
call fcn.004365e0
mov dword [esi], 0xffffff38
jmp 0x40c56d
mov dword [edi + 0xb8], eax
mov dword [esi], 0
jmp 0x40c56d
mov eax, dword [case.0x79a990.0]
test al, 1
jne 0x40c4a2
or eax, 1
mov dword [case.0x79a990.0], eax
mov dword [esp + 0x60], 0
push ecx
call fcn.004015a0
call fcn.0042d900
push 0x639710
call fcn.005e9ef6
add esp, 4
mov dword [esp + 0x60], 0xffffffff
mov eax, dword [0x6d66e8]
push 0x6787e0
push 0x6779a0
push 0x6d66e8
call dword [eax + 0x24]
sub esp, 0xc
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x16
xor eax, eax
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push 0x677fd4
mov word [ecx], ax
call fcn.00403c30
mov dword [esp + 0x78], 1
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x44], esp
push 0x17
xor eax, eax
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push 0x678868
mov word [ecx], ax
call fcn.00403c30
mov byte [esp + 0x90], 2
mov eax, dword [case.0x79a990.0]
test al, 1
jne 0x40c552
or eax, 1
mov dword [case.0x79a990.0], eax
mov byte [esp + 0x90], 3
push ecx
call fcn.004015a0
call fcn.0042d900
push 0x639710
call fcn.005e9ef6
add esp, 4
mov byte [esp + 0x90], 2
mov dword [esp + 0x90], 0xffffffff
mov ecx, 0x6d65f0
call fcn.004365e0
mov dword [esi], 0xffffff4c
mov dword [esi + 4], 0
mov dword [esi + 8], ebx
mov eax, esi
mov ecx, dword [esp + 0x58]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x40]
xor ecx, esp
call fcn.005e96ad
mov esp, ebp
pop ebp
ret 0x10