Function at 0x40221f
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
xor esi, esi
push esi
push 0x45edf4
push 0x18
push 0x464e10
push 0x18
push 0x45edf8
push esi
push 0x4e4
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
call fcn.00401290
mov dword [ebp - 0x10], eax
call fcn.00401a5d
mov edi, eax
call fcn.00401144
mov ebx, eax
lea eax, [ebp - 0xc]
push eax
push esi
lea eax, [ebp - 4]
push eax
push 0x401b03
push esi
push esi
mov dword [ebp - 4], esi
mov dword [ebp - 0xc], esi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 8], eax
cmp eax, esi
jne 0x4022a3
push 0x100010
push 0x45eba4
push 0x45ee30
push dword [0x464bf8]
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x40265c
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff7
cmp eax, 8
ja case.default.0x4022b2
jmp dword [eax*4 + 0x402663]
mov eax, dword [0x465010]
sub eax, dword [0x46500c]
push 0x46500c
sar eax, 2
mov dword [0x464bfc], eax
call fcn.00401c6e
mov dword [0x463504], 3
jmp 0x4025e1
cmp edi, esi
jne 0x402315
mov eax, dword [0x464fc0]
sub eax, dword [0x464fbc]
push 0x464fbc
sar eax, 2
mov dword [0x464bfc], eax
call fcn.00401c6e
mov dword [0x463504], 4
jmp 0x4025e1
mov eax, dword [0x464f40]
sub eax, dword [0x464f3c]
push 0x464f3c
sar eax, 2
mov dword [0x464bfc], eax
call fcn.00401c6e
mov dword [0x463504], 6
jmp 0x4025e1
cmp edi, esi
jne 0x402371
mov eax, dword [0x464fd0]
sub eax, dword [0x464fcc]
push 0x464fcc
sar eax, 2
mov dword [0x464bfc], eax
call fcn.00401c6e
mov dword [0x463504], 5
jmp 0x4025e1
mov eax, dword [0x464fa0]
sub eax, dword [0x464f9c]
mov dword [0x463504], 7
push 0x464f9c
jmp 0x4025d4
cmp edi, esi
jne 0x4023a6
mov eax, dword [0x464f60]
sub eax, dword [0x464f5c]
push 0x464f5c
jmp 0x402355
mov eax, dword [0x465030]
sub eax, dword [0x46502c]
mov dword [0x463504], 7
push 0x46502c
jmp 0x4025d4
cmp edi, esi
jne 0x402420
mov edi, 0x46504c
cmp ebx, esi
je 0x402406
push dword [ebp - 0x10]
mov ecx, edi
push dword [0x465020]
push dword [0x46501c]
push dword [0x46504c]
call fcn.004035fb
mov eax, dword [0x465020]
sub eax, dword [0x46501c]
sar eax, 2
add eax, 5
mov dword [0x463504], eax
jmp 0x402410
mov dword [0x463504], 5
mov eax, dword [0x465050]
sub eax, dword [0x46504c]
jmp 0x4025d3
mov edi, 0x464fac
cmp ebx, esi
je 0x40245d
push dword [ebp - 0x10]
mov ecx, edi
push dword [0x465020]
push dword [0x46501c]
push dword [0x464fac]
call fcn.004035fb
mov eax, dword [0x465020]
sub eax, dword [0x46501c]
sar eax, 2
add eax, 7
mov dword [0x463504], eax
jmp 0x402467
mov dword [0x463504], 7
mov eax, dword [0x464fb0]
sub eax, dword [0x464fac]
jmp 0x4025d3
cmp edi, esi
jne 0x4024d2
mov edi, 0x46505c
cmp ebx, esi
je 0x4024b8
push dword [ebp - 0x10]
mov ecx, edi
push dword [0x464f70]
push dword [0x464f6c]
push dword [0x46505c]
call fcn.004035fb
mov eax, dword [0x464f70]
sub eax, dword [0x464f6c]
sar eax, 2
add eax, 5
mov dword [0x463504], eax
jmp 0x4024c2
mov dword [0x463504], 5
mov eax, dword [0x465060]
sub eax, dword [0x46505c]
jmp 0x4025d3
mov edi, 0x464f7c
cmp ebx, esi
je 0x40250f
push dword [ebp - 0x10]
mov ecx, edi
push dword [0x464f70]
push dword [0x464f6c]
push dword [0x464f7c]
call fcn.004035fb
mov eax, dword [0x464f70]
sub eax, dword [0x464f6c]
sar eax, 2
add eax, 7
mov dword [0x463504], eax
jmp 0x402519
mov dword [0x463504], 7
mov eax, dword [0x464f80]
sub eax, dword [0x464f7c]
jmp 0x4025d3
cmp edi, esi
jne 0x402581
mov edi, 0x464fdc
cmp ebx, esi
je 0x40256a
push dword [ebp - 0x10]
mov ecx, edi
push dword [0x465040]
push dword [0x46503c]
push dword [0x464fdc]
call fcn.004035fb
mov eax, dword [0x465040]
sub eax, dword [0x46503c]
sar eax, 2
add eax, 5
mov dword [0x463504], eax
jmp 0x402574
mov dword [0x463504], 5
mov eax, dword [0x464fe0]
sub eax, dword [0x464fdc]
jmp 0x4025d3
mov edi, 0x464f4c
cmp ebx, esi
je 0x4025be
push dword [ebp - 0x10]
mov ecx, edi
push dword [0x465040]
push dword [0x46503c]
push dword [0x464f4c]
call fcn.004035fb
mov eax, dword [0x465040]
sub eax, dword [0x46503c]
sar eax, 2
add eax, 7
mov dword [0x463504], eax
jmp 0x4025c8
mov dword [0x463504], 7
mov eax, dword [0x464f50]
sub eax, dword [0x464f4c]
push edi
sar eax, 2
mov dword [0x464bfc], eax
call fcn.00401c6e
pop ecx
mov eax, dword [0x464f90]
sub eax, dword [0x464f8c]
sar eax, 2
cmp eax, dword [0x464bfc]
je 0x40260c
push 0x100010
push 0x45eba4
push 0x45eebc
jmp 0x402292
push 0xffffffffffffffff
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 4], 0x194
jne 0x40263d
push 0x100010
push 0x45eba4
push 0x45eee8
jmp 0x402292
cmp dword [ebp - 4], esi
je 0x40265c
push esi
push 0x401fac
push dword [0x464bf8]
push 0x67
push dword [0x464b00]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
pop edi
pop esi
pop ebx
leave
ret