Function at 0x403680
Capabilities:
Create thread
Terminate thread

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x24
mov ebx, dword [ebp + 8]
mov dword [esp], 0
call sub.msvcrt.dll_time
mov dword [esp], eax
call sub.msvcrt.dll_srand
call fcn.004027a0
call fcn.00402ad0
call fcn.00402cc0
mov dword [esp], 0
xor edx, edx
xor eax, eax
mov dword [esp + 0x14], edx
xor ecx, ecx
mov edx, 0x4048a0
mov dword [esp + 0x10], eax
xor eax, eax
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], eax
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
cmp byte [0x536011], 0
jne 0x4036f7
mov dword [esp], 0x32
call sub.KERNEL32.dll_Sleep
sub esp, 4
jmp 0x4036dd
call fcn.00403240
mov dword [esp], 0
xor ecx, ecx
xor edx, edx
mov dword [esp + 0x14], ecx
xor eax, eax
mov ecx, 0x4023d0
mov dword [esp + 0x10], edx
xor edx, edx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp + 0xc], eax
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
call fcn.00403490
mov dword [esp], 0
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x14], eax
xor edx, edx
mov eax, 0x404ca0
mov dword [esp + 0x10], ecx
xor ecx, ecx
mov dword [esp + 0xc], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
xor edx, edx
xor eax, eax
mov dword [esp + 0x14], edx
xor ecx, ecx
mov edx, 0x4051f0
mov dword [esp + 0x10], eax
xor eax, eax
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
xor ecx, ecx
xor edx, edx
mov dword [esp + 0x14], ecx
mov eax, 0x405630
xor ecx, ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
xor edx, edx
xor eax, eax
mov dword [esp + 0x14], edx
mov ecx, 0x405990
xor edx, edx
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp + 0x10], eax
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x14], eax
mov edx, 0x4088c0
xor eax, eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
xor ecx, ecx
xor edx, edx
mov dword [esp + 0x14], ecx
mov eax, 0x405cf0
xor ecx, ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], ebx
xor ebx, ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
xor edx, edx
xor eax, eax
mov dword [esp + 0x14], ebx
mov ecx, 0x401290
xor ebx, ebx
mov dword [esp + 0x10], edx
mov dword [esp + 8], ecx
mov dword [esp + 4], ebx
mov ebx, 0x401450
mov dword [esp + 0xc], eax
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
xor edx, edx
xor ecx, ecx
mov dword [esp + 0x14], edx
xor eax, eax
xor edx, edx
mov dword [esp + 0xc], ecx
mov dword [esp + 8], ebx
xor ebx, ebx
mov dword [esp + 4], edx
mov dword [esp + 0x10], eax
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x14], eax
mov edx, 0x401880
xor eax, eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], ebx
xor ebx, ebx
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
xor ecx, ecx
xor edx, edx
mov dword [esp + 0x14], ecx
mov eax, 0x4014e0
xor ecx, ecx
mov dword [esp + 0x10], ebx
xor ebx, ebx
mov dword [esp + 0xc], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
xor edx, edx
mov ecx, 0x401b00
mov dword [esp + 0x14], ebx
xor eax, eax
xor ebx, ebx
mov dword [esp + 4], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
mov ebx, eax
nop
lea esi, [esi]
mov dword [esp], 0x64
call sub.KERNEL32.dll_Sleep
sub esp, 4
cmp byte [0x536012], 0
je 0x403940
test ebx, ebx
je 0x403940
mov dword [esp], ebx
xor eax, eax
mov dword [esp + 4], eax
call sub.KERNEL32.dll_TerminateThread
sub esp, 8
mov dword [esp], 0x64
call sub.KERNEL32.dll_Sleep
sub esp, 4
cmp byte [0x536012], 0
je 0x403940
jmp 0x403958