Function at 0x405b96
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push ecx
mov eax, ecx
xor edx, edx
push esi
push edi
mov dword [ebp - 4], eax
cmp dword [eax + 0x218], edx
je 0x405b1b
mov ecx, 0x104
mov esi, 0x433858
mov edi, 0x432818
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x104
mov esi, 0x433c68
mov edi, 0x432c28
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x430bbc]
mov dword [0x430bb4], ecx
mov ecx, dword [0x430bc8]
jmp 0x405b5b
cmp dword [0x434078], edx
jne 0x405f39
mov ecx, 0x104
mov esi, 0x433038
mov edi, 0x432818
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x104
mov esi, 0x433448
mov edi, 0x432c28
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x430bb8]
mov dword [0x430bb4], ecx
mov ecx, dword [0x430bc4]
push ebx
mov ebx, dword [ebp + 8]
mov dword [0x430bc0], ecx
movzx ecx, byte [ebx]
cmp ecx, 0x65
ja case.0x405b78.3
movzx ecx, byte [ecx + 0x405f78]
jmp dword [ecx*4 + 0x405f44]
push 1
add eax, 0x21c
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
cmp dword [ebp + 0xc], 0xc41
jne case.0x405b78.3
push 0xc40
call fcn.004123d7
push 0xc40
mov edi, eax
push 0
push edi
mov dword [ebp + 0xc], edi
call fcn.00413c40
lea esi, [ebx + 1]
mov ecx, 0x310
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x434d50]
mov edi, dword [ebp + 0xc]
add esp, 0x10
mov esi, eax
cmp eax, dword [0x434d54]
je 0x405c2a
mov edi, edi
mov edx, dword [esi]
mov eax, dword [edx]
lea ecx, [edi + 4]
add eax, 4
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405c16
test dx, dx
je 0x405c12
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405c16
add eax, 4
add ecx, 4
test dx, dx
jne 0x405bf0
xor eax, eax
jmp 0x405c1b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x405c80
add esi, 4
cmp esi, dword [0x434d54]
jne 0x405be0
push 0xc41
call fcn.004125bb
mov esi, eax
push 0xc40
lea ecx, [esi + 1]
push edi
mov byte [esi], 5
push ecx
mov dword [edi + 0x400], 0
call fcn.00413f40
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 8]
add esp, 0x10
push 0xc41
push esi
call edx
push edi
call fcn.00411f7d
push esi
call fcn.00411f7d
add esp, 8
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [esi]
mov edx, dword [ecx]
lea eax, [edi + 0x202]
push eax
add edx, 0x202
push 0xff
push edx
call fcn.00412693
mov eax, dword [esi]
push 0
push 0
push eax
push 0x4055c0
push 0
push 0
call fcn.00412ba2
add esp, 0x24
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call fcn.00411f7d
add esp, 4
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
push 0xc40
call fcn.004123d7
push 0xc40
mov edi, eax
push 0
push edi
mov dword [ebp + 8], edi
call fcn.00413c40
lea esi, [ebx + 1]
mov ecx, 0x310
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebx + 0xc41]
push esi
call fcn.004125bb
push esi
add ebx, 0xc45
mov edi, eax
push ebx
push edi
call fcn.00413f40
push 8
call fcn.004123d7
mov ecx, dword [ebp + 8]
mov dword [eax], ecx
mov dword [eax + 4], edi
mov edx, dword [eax]
mov dword [ebp + 0xc], eax
add esp, 0x24
lea eax, [ebp + 0xc]
mov dword [edx + 0x404], esi
call fcn.00406fb0
mov eax, dword [ebp + 0xc]
push 0
push 0
push eax
push 0x4055c0
push 0
push 0
call fcn.00412ba2
add esp, 0x18
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
call fcn.00405fe0
mov edi, dword [0x431fbc]
push 0x200
call fcn.004123d7
push 0x200
mov esi, eax
push 0
push esi
call fcn.00413c40
push 0x427ef0
push 0x428650
jmp 0x405eab
push 0xc40
call fcn.004123d7
push 0xc40
mov esi, eax
push 0
push esi
call fcn.00413c40
mov edi, dword [ebp + 0xc]
dec edi
push edi
call fcn.004125bb
push edi
inc ebx
push ebx
push eax
mov dword [ebp + 8], eax
call fcn.00413f40
push 8
call fcn.004123d7
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
push 0
push 0
push eax
mov dword [eax], esi
mov dword [eax + 4], ecx
dec edx
push 0x4055c0
mov dword [esi + 0x404], edx
mov ecx, dword [eax]
push 0
push 0
mov dword [ecx], 2
call fcn.00412ba2
add esp, 0x3c
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
push eax
call fcn.004060e0
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
mov edx, dword [ebp + 0xc]
push edx
push eax
mov ecx, ebx
call fcn.004062c0
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
lea eax, [ebp + 0xc]
push eax
push edx
inc ebx
push ebx
push 0x406cc0
push edx
push edx
mov dword [ebp + 0xc], edx
call fcn.00412ba2
add esp, 0x18
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
mov ebx, dword [ebx + 1]
push ebx
mov esi, eax
call fcn.00406950
mov edi, dword [0x431fbc]
push 0x200
test eax, eax
je 0x405e8d
call fcn.004123d7
push 0x200
mov esi, eax
push 0
push esi
call fcn.00413c40
push 0x427ef0
push 0x428660
jmp 0x405eab
call fcn.004123d7
push 0x200
mov esi, eax
push 0
push esi
call fcn.00413c40
push 0x427ef0
push 0x42866c
push 0x4287cc
lea ecx, [esi + 2]
push 0xff
push ecx
mov byte [esi], 1
call fcn.00412457
mov ecx, dword [edi + 4]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
add esp, 0x24
push 0x200
push esi
call eax
push esi
call fcn.00411f7d
add esp, 4
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
movzx ecx, byte [ebx + 1]
sub ecx, edx
je 0x405f08
dec ecx
jne case.0x405b78.3
add ebx, 2
push ebx
mov edi, str.BEIZHU
call fcn.00406c10
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
add ebx, 2
push ebx
mov edi, str.FENZU
call fcn.00406c10
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
pop ebx
pop edi
mov dword [0x434078], 1
pop esi
mov esp, ebp
pop ebp
ret 8
mov dword [0x434078], edx
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8