Function at 0x4035d0
Capabilities:
Create thread
Terminate thread

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x24
mov ebx, dword [ebp + 8]
mov dword [esp], 0
call sub.msvcrt.dll_time
mov dword [esp], eax
call sub.msvcrt.dll_srand
call fcn.004026f0
call fcn.00402a20
call fcn.00402c10
mov dword [esp], 0
xor edx, edx
xor eax, eax
mov dword [esp + 0x14], edx
xor ecx, ecx
mov edx, 0x404820
mov dword [esp + 0x10], eax
xor eax, eax
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], eax
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
cmp byte [0x536011], 0
jne 0x403647
mov dword [esp], 0x64
call sub.KERNEL32.dll_Sleep
sub esp, 4
jmp 0x40362d
call fcn.00403190
mov dword [esp], 0
xor edx, edx
xor eax, eax
mov dword [esp + 0x14], edx
xor ecx, ecx
mov edx, 0x402320
mov dword [esp + 0x10], eax
xor eax, eax
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], eax
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
call fcn.004033e0
mov dword [esp], 0
xor ecx, ecx
xor edx, edx
mov dword [esp + 0x14], ecx
xor eax, eax
mov ecx, 0x40ac20
mov dword [esp + 0x10], edx
xor edx, edx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp + 0xc], eax
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x14], eax
xor edx, edx
mov eax, 0x404c20
mov dword [esp + 0x10], ecx
xor ecx, ecx
mov dword [esp + 0xc], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
xor edx, edx
xor eax, eax
mov dword [esp + 0x14], edx
xor ecx, ecx
mov edx, 0x405170
mov dword [esp + 0x10], eax
xor eax, eax
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
xor ecx, ecx
xor edx, edx
mov dword [esp + 0x14], ecx
mov eax, 0x4055b0
xor ecx, ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
xor edx, edx
xor eax, eax
mov dword [esp + 0x14], edx
mov ecx, 0x405910
xor edx, edx
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp + 0x10], eax
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x14], eax
mov edx, 0x408840
xor eax, eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
xor ecx, ecx
xor edx, edx
mov dword [esp + 0x14], ecx
mov eax, 0x405c70
xor ecx, ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], ebx
xor ebx, ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
xor edx, edx
xor eax, eax
mov dword [esp + 0x14], ebx
mov ecx, 0x401290
xor ebx, ebx
mov dword [esp + 0x10], edx
mov dword [esp + 8], ecx
mov dword [esp + 4], ebx
mov ebx, 0x401450
mov dword [esp + 0xc], eax
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
xor edx, edx
xor ecx, ecx
mov dword [esp + 0x14], edx
xor eax, eax
xor edx, edx
mov dword [esp + 0xc], ecx
mov dword [esp + 8], ebx
xor ebx, ebx
mov dword [esp + 4], edx
mov dword [esp + 0x10], eax
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x14], eax
mov edx, 0x401770
xor eax, eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], ebx
xor ebx, ebx
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
xor ecx, ecx
mov eax, 0x4014e0
mov dword [esp + 0x14], ecx
xor edx, edx
xor ecx, ecx
mov dword [esp + 0x10], ebx
xor ebx, ebx
mov dword [esp + 0xc], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
xor edx, edx
xor eax, eax
mov dword [esp + 0x14], ebx
mov ecx, 0x401a50
xor ebx, ebx
mov dword [esp + 4], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], 0
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
mov ebx, eax
nop
lea esi, [esi]
mov dword [esp], 0x64
call sub.KERNEL32.dll_Sleep
sub esp, 4
cmp byte [0x536012], 0
je 0x4038c0
test ebx, ebx
je 0x4038c0
mov dword [esp], ebx
xor ecx, ecx
mov dword [esp + 4], ecx
call sub.KERNEL32.dll_TerminateThread
sub esp, 8
mov dword [esp], 0x64
call sub.KERNEL32.dll_Sleep
sub esp, 4
cmp byte [0x536012], 0
je 0x4038c0
jmp 0x4038d8