Function at 0x405d27
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
mov edx, ecx
xor ebx, ebx
push esi
push edi
mov dword [esp + 0x10], edx
cmp dword [edx + 0x218], ebx
je 0x405b7a
mov eax, dword [0x43bbac]
mov ecx, 0x104
mov esi, 0x43e838
mov edi, 0x43d7f8
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x104
mov esi, 0x43ec48
mov edi, 0x43dc08
rep movsd dword es:[edi], dword [esi]
mov dword [0x43bba4], eax
jmp 0x405bb4
cmp dword [0x43f058], ebx
jne case.0x405bca.3
mov ecx, 0x104
mov esi, 0x43e018
mov edi, 0x43d7f8
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x104
mov esi, 0x43e428
mov edi, 0x43dc08
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x43bba8]
mov dword [0x43bba4], ecx
mov esi, dword [ebp + 8]
movzx eax, byte [esi]
cmp eax, 0x65
ja case.0x405bca.3
movzx eax, byte [eax + 0x406020]
jmp dword [eax*4 + 0x405fec]
push 1
add edx, 0x21c
push edx
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
call fcn.00406090
mov ecx, dword [esp + 0x10]
push ecx
call fcn.00406190
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push 0x20470
call fcn.004186e7
add esp, 4
push 0x20470
mov edi, eax
push ebx
push edi
call fcn.00419e30
add esp, 0xc
push 0x20470
inc esi
push esi
push edi
call fcn.00419ac0
mov eax, dword [0x43fd2c]
add esp, 0xc
mov esi, eax
cmp eax, dword [0x43fd30]
je 0x405c7a
mov edx, dword [esi]
mov eax, dword [edx]
lea ecx, [edi + 4]
add eax, 4
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405c66
cmp dx, bx
je 0x405c62
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405c66
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x405c40
xor eax, eax
jmp 0x405c6b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x405cd3
add esi, 4
cmp esi, dword [0x43fd30]
jne 0x405c35
push 0x20471
call fcn.004188cb
add esp, 4
mov esi, eax
push 0x20470
lea ecx, [esi + 1]
push edi
mov byte [esi], 5
push ecx
mov dword [edi + 0x400], ebx
call fcn.00419ac0
mov edx, dword [esp + 0x1c]
mov ecx, dword [edx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 8]
add esp, 0xc
push 0x20471
push esi
call edx
push edi
call fcn.0041828d
add esp, 4
push esi
call fcn.0041828d
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [esi]
mov edx, dword [ecx]
lea eax, [edi + 0x202]
push eax
add edx, 0x202
push 0xff
push edx
call fcn.004189a3
mov eax, dword [esi]
add esp, 0xc
push ebx
push ebx
push eax
push 0x405620
push ebx
push ebx
call fcn.00418eb2
add esp, 0x18
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp edi, ebx
je case.0x405bca.3
push edi
call fcn.0041828d
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push 0x20470
call fcn.004186e7
add esp, 4
push 0x20470
mov edi, eax
push ebx
push edi
call fcn.00419e30
add esp, 0xc
push 0x20470
lea eax, [esi + 1]
push eax
push edi
call fcn.00419ac0
mov ebx, dword [esi + 0x20471]
add esp, 0xc
push ebx
call fcn.004188cb
add esp, 4
push ebx
add esi, 0x20475
push esi
push eax
mov dword [esp + 0x20], eax
call fcn.00419ac0
add esp, 0xc
push 8
call fcn.004186e7
mov ecx, dword [esp + 0x18]
mov dword [eax], edi
mov dword [eax + 4], ecx
mov edx, dword [eax]
mov dword [esp + 0x14], eax
add esp, 4
lea eax, [esp + 0x10]
mov dword [edx + 0x404], ebx
call fcn.00407050
mov eax, dword [esp + 0x10]
push 0
push 0
push eax
push 0x405620
push 0
push 0
call fcn.00418eb2
add esp, 0x18
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
call fcn.00406090
mov edi, dword [0x43cf9c]
push 0x200
call fcn.004186e7
add esp, 4
push 0x200
mov esi, eax
push ebx
push esi
call fcn.00419e30
add esp, 0xc
push 0x4326a0
push 0x432e00
push 0x432f7c
push 0xff
lea ecx, [esi + 2]
push ecx
mov byte [esi], 1
call fcn.00418767
mov ecx, dword [edi + 4]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
add esp, 0x14
push 0x200
push esi
call eax
push esi
call fcn.0041828d
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push 0x20470
call fcn.004186e7
add esp, 4
push 0x20470
mov edi, eax
push ebx
push edi
call fcn.00419e30
mov ebx, dword [ebp + 0xc]
add esp, 0xc
dec ebx
push ebx
call fcn.004188cb
add esp, 4
push ebx
inc esi
push esi
push eax
mov dword [esp + 0x20], eax
call fcn.00419ac0
add esp, 0xc
push 8
call fcn.004186e7
mov ecx, dword [esp + 0x18]
mov edx, dword [ebp + 0xc]
add esp, 4
mov dword [eax], edi
mov dword [eax + 4], ecx
dec edx
mov dword [edi + 0x404], edx
mov ecx, dword [eax]
mov dword [ecx], 2
jmp 0x405da7
push edx
call fcn.00406190
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp + 0xc]
push eax
push edx
mov ecx, esi
call fcn.00406370
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
lea ecx, [esp + 0x14]
push ecx
push ebx
inc esi
push esi
push 0x406d60
push ebx
mov dword [esp + 0x28], ebx
push ebx
jmp 0x405db5
mov esi, dword [esi + 1]
push esi
mov esi, edx
call fcn.004069f0
mov edi, dword [0x43cf9c]
push 0x200
test eax, eax
je 0x405f54
call fcn.004186e7
add esp, 4
push 0x200
mov esi, eax
push ebx
push esi
call fcn.00419e30
add esp, 0xc
push 0x4326a0
push 0x432e10
push 0x432f7c
lea edx, [esi + 2]
push 0xff
push edx
mov byte [esi], 1
call fcn.00418767
mov ecx, dword [edi + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 8]
add esp, 0x14
push 0x200
push esi
call edx
push esi
call fcn.0041828d
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
call fcn.004186e7
add esp, 4
push 0x200
mov esi, eax
push ebx
push esi
call fcn.00419e30
add esp, 0xc
push 0x4326a0
push 0x432e1c
push 0x432f7c
push 0xff
lea eax, [esi + 2]
push eax
jmp 0x405e0e
movzx eax, byte [esi + 1]
sub eax, ebx
je 0x405fae
dec eax
jne case.0x405bca.3
add esi, 2
push esi
mov edi, str.BEIZHU
mov eax, edx
call fcn.00406cb0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
add esi, 2
push esi
mov edi, str.FENZU
mov eax, edx
call fcn.00406cb0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov dword [0x43f058], 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov dword [0x43f058], ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8