Function at 0x401f94
Capabilities:
Create thread
Terminate thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
cmp dword [0x405018], 0
je 0x401fe4
mov dword [ebp - 0x10], 0x65d7ee
mov dword [ebp - 0x14], 0x65d7e8
mov dword [ebp - 0x18], 0x656328
jmp 0x401ff9
mov dword [ebp - 0x10], 0x585fae
mov dword [ebp - 0x14], 0x585fa8
mov dword [ebp - 0x18], 0x58010c
mov dword [esp + 4], 0
mov dword [esp], str.C32Wnd_Class
call sub.USER32.dll_FindWindowA
sub esp, 8
mov dword [0x405014], eax
cmp dword [0x405014], 0
je 0x402409
cmp dword [0x40501c], 0
je 0x40207c
mov dword [esp + 0xc], 0x3b0001
mov dword [esp + 8], 0x70
mov dword [esp + 4], 0x100
mov eax, dword [0x405014]
mov dword [esp], eax
call sub.USER32.dll_SendMessageA
sub esp, 0x10
mov eax, 0xc03b0001
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x70
mov dword [esp + 4], 0x101
mov eax, dword [0x405014]
mov dword [esp], eax
call sub.USER32.dll_SendMessageA
sub esp, 0x10
mov dword [ebp - 8], 0
lea eax, [ebp - 8]
mov dword [esp + 4], eax
mov eax, dword [0x405014]
mov dword [esp], eax
call sub.USER32.dll_GetWindowThreadProcessId
sub esp, 8
cmp dword [ebp - 8], 0
je 0x402409
mov dword [ebp - 4], 0
mov eax, dword [ebp - 8]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0x1f0fff
call sub.KERNEL32.dll_OpenProcess
sub esp, 0xc
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x402409
mov dword [ebp - 0xc], 0
lea eax, [ebp - 0xc]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 4
lea eax, [ebp - 0x20]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
mov dword [esp], eax
call sub.KERNEL32.dll_ReadProcessMemory
sub esp, 0x14
cmp dword [ebp - 0xc], 0
jne 0x402113
jmp 0x401fc4
mov dword [ebp - 0xc], 0
lea eax, [ebp - 0xc]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 4
lea eax, [ebp - 0x24]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
mov dword [esp], eax
call sub.KERNEL32.dll_ReadProcessMemory
sub esp, 0x14
cmp dword [ebp - 0xc], 0
jne 0x402150
jmp 0x401fc4
cmp dword [0x405020], 0
je 0x4021de
mov eax, dword [ebp - 0x24]
movzx eax, ax
push eax
fild dword [esp]
lea esp, [esp + 4]
mov eax, dword [ebp - 0x20]
mov edx, 0
push edx
push eax
fild qword [esp]
lea esp, [esp + 8]
fucompp
fnstsw ax
sahf
ja 0x402185
jmp 0x4021de
mov eax, dword [ebp - 0x24]
test ax, ax
je 0x4021de
mov dword [esp + 0xc], 0x3b0001
mov dword [esp + 8], 0x70
mov dword [esp + 4], 0x100
mov eax, dword [0x405014]
mov dword [esp], eax
call sub.USER32.dll_SendMessageA
sub esp, 0x10
mov eax, 0xc03b0001
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x70
mov dword [esp + 4], 0x101
mov eax, dword [0x405014]
mov dword [esp], eax
call sub.USER32.dll_SendMessageA
sub esp, 0x10
cmp dword [0x405028], 0
je 0x402274
mov eax, dword [ebp - 0x24]
movzx eax, ax
push eax
fild dword [esp]
lea esp, [esp + 4]
mov eax, dword [ebp - 0x20]
mov edx, 0
push edx
push eax
fild qword [esp]
lea esp, [esp + 8]
fld qword [0x4040f0]
fmulp st(1)
fucompp
fnstsw ax
sahf
ja 0x40221b
jmp 0x402274
mov eax, dword [ebp - 0x24]
test ax, ax
je 0x402274
mov dword [esp + 0xc], 0x3b0001
mov dword [esp + 8], 0x71
mov dword [esp + 4], 0x100
mov eax, dword [0x405014]
mov dword [esp], eax
call sub.USER32.dll_SendMessageA
sub esp, 0x10
mov eax, 0xc03b0001
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x71
mov dword [esp + 4], 0x101
mov eax, dword [0x405014]
mov dword [esp], eax
call sub.USER32.dll_SendMessageA
sub esp, 0x10
cmp dword [0x405024], 0
je 0x402371
mov eax, dword [ebp - 0x24]
movzx eax, ax
push eax
fild dword [esp]
lea esp, [esp + 4]
mov eax, dword [ebp - 0x20]
mov edx, 0
push edx
push eax
fild qword [esp]
lea esp, [esp + 8]
fucompp
fnstsw ax
sahf
ja 0x4022a9
jmp 0x40230a
mov eax, dword [ebp - 0x24]
test ax, ax
je 0x40230a
mov dword [esp + 4], 4
mov eax, dword [0x40502c]
mov dword [esp], eax
call sub.KERNEL32.dll_TerminateThread
sub esp, 8
mov dword [0x40502c], 0
cmp dword [0x40501c], 0
jne 0x402371
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x1390
mov dword [esp + 4], 0x111
mov eax, dword [0x405010]
mov dword [esp], eax
call sub.USER32.dll_SendMessageA
sub esp, 0x10
jmp 0x402371
cmp dword [0x40501c], 0
je 0x402371
cmp dword [0x40502c], 0
jne 0x402371
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], sym.__Z10MX3secondsPv_4
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
mov dword [0x40502c], eax
cmp dword [0x40502c], 0
je 0x402371
mov eax, dword [0x40502c]
mov dword [esp], eax
call sub.KERNEL32.dll_CloseHandle
sub esp, 4
mov dword [ebp - 0xc], 0
lea eax, [ebp - 0xc]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 4
lea eax, [ebp - 0x1c]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x18]
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
mov dword [esp], eax
call sub.KERNEL32.dll_ReadProcessMemory
sub esp, 0x14
cmp dword [ebp - 0xc], 0
jne 0x4023ae
jmp 0x401fc4
cmp dword [0x405018], 0
je 0x4023c2
lea eax, [ebp - 0x1c]
add dword [eax], 0x28c
jmp 0x4023cb
lea eax, [ebp - 0x1c]
add dword [eax], 0x278
mov dword [ebp - 0xc], 0
lea eax, [ebp - 0xc]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 4
mov dword [esp + 8], 0x40300c
mov eax, dword [ebp - 0x1c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 4]
mov dword [esp], eax
call sub.KERNEL32.dll_WriteProcessMemory
sub esp, 0x14
cmp dword [ebp - 0xc], 0
jne 0x402409
jmp 0x401fc4
mov dword [esp], 0xa
call sub.KERNEL32.dll_Sleep
sub esp, 4
jmp 0x401fc4