Function at 0x402cd0
Capabilities:
Create thread

Disassembly:
push 0x3c
mov eax, 0x5efe47
call fcn.0044e95a
mov ebx, ecx
mov dword [ebp - 0x48], ebx
cmp byte [0x6a85e8], 0
jne 0x403020
mov byte [0x6a85e8], 1
call fcn.00420994
test al, al
je 0x402d11
push edx
push ebp
pop esp
pop edx
push esi
pop esi
pop edx
push eax
pop edx
pop ebx
pop ebx
pop esp
pop edx
push edi
push esp
push edi
mov ebx, dword [ebp - 0x48]
xor edi, edi
cmp dword [ebx + 0x38], edi
jne 0x402d4f
lea ecx, [ebp - 0x41]
call fcn.0040dba8
lea eax, [ebp - 0x28]
mov dword [ebp - 4], edi
push eax
lea ecx, [ebp - 0x41]
call fcn.00518403
push eax
lea ecx, [ebx + 0x28]
call fcn.0052c8ac
push edi
push 1
lea ecx, [ebp - 0x28]
call fcn.0040376a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x41]
call fcn.004509a0
cmp dword [ebx + 0x80], edi
jne 0x402db3
xor eax, eax
mov dword [ebp - 0x14], 7
mov esi, 0x5f9de4
mov dword [ebp - 0x18], edi
push esi
mov word [ebp - 0x28], ax
call fcn.005454d1
pop ecx
push eax
push esi
lea ecx, [ebp - 0x28]
call fcn.00403bdf
lea eax, [ebp - 0x28]
xor esi, esi
push eax
lea eax, [ebp - 0x40]
inc esi
push eax
mov dword [ebp - 4], esi
call fcn.0051f232
pop ecx
pop ecx
push eax
lea ecx, [ebx + 0x70]
call fcn.0052c8ac
push edi
push esi
lea ecx, [ebp - 0x40]
call fcn.0040376a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push edi
push esi
call fcn.004037bf
call fcn.004208c5
test al, al
je 0x402dd3
pop eax
pop esi
pop edx
push esp
push edi
pop edi
pop ebx
push eax
pop eax
push edx
push ebp
push esi
pop ebx
push edx
push ebx
pop ecx
push ecx
push ebp
mov ebx, dword [ebp - 0x48]
xor edi, edi
cmp dword [ebx + 0x98], edi
jne 0x402e3d
xor eax, eax
mov dword [ebp - 0x14], 7
mov esi, str.10.3.1.0
mov dword [ebp - 0x18], edi
push esi
mov word [ebp - 0x28], ax
call fcn.005454d1
pop ecx
push eax
push esi
lea ecx, [ebp - 0x28]
call fcn.00403bdf
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 2
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.0051f232
pop ecx
pop ecx
push eax
lea ecx, [ebx + 0x88]
call fcn.0052c8ac
push edi
push 1
lea ecx, [ebp - 0x40]
call fcn.0040376a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push edi
push 1
call fcn.004037bf
call fcn.004207f6
test al, al
je 0x402e61
push eax
push ecx
push ebp
pop edi
pop edi
pop esi
pop esi
pop edi
pop esi
push eax
push esp
push edi
pop esp
push eax
push eax
push eax
push esp
push esi
push edi
pop esi
pop esp
push ebp
pop ecx
pop esp
pop edx
pop ecx
pop ebp
call fcn.00420658
test al, al
je 0x402e7f
push ecx
pop edi
push ecx
pop edi
push eax
push ebx
pop ecx
push eax
push ebp
pop edx
push ebp
pop esp
push ebx
push esi
pop esp
pop esi
push esp
pop esp
push eax
pop esi
push ecx
call fcn.004207b1
test al, al
je 0x402e9a
push ebx
pop eax
push esi
pop esi
push ebp
pop esp
pop eax
push esp
pop eax
push edi
push edi
pop eax
pop esp
push ebp
push edx
push esi
push ebx
push eax
lea esi, [ebx + 0xb8]
xor edi, edi
cmp dword [esi + 0x10], edi
jne 0x402ee1
lea ecx, [ebp - 0x1c]
call fcn.0051fd92
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 3
push eax
lea ecx, [ebp - 0x1c]
call fcn.005243da
push eax
mov ecx, esi
call fcn.0052c8ac
push edi
push 1
lea ecx, [ebp - 0x40]
call fcn.0040376a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call fcn.004509a0
cmp dword [ebx + 0x50], edi
jne 0x402f2c
lea eax, [ebp - 0x28]
push eax
call fcn.00403028
mov ecx, eax
call fcn.00516392
push eax
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 4
push eax
call fcn.0051f232
pop ecx
pop ecx
push eax
lea ecx, [ebx + 0x40]
call fcn.0052c8ac
push edi
push 1
lea ecx, [ebp - 0x40]
call fcn.0040376a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push edi
push 1
call fcn.004037bf
cmp dword [ebx + 0x68], edi
jne 0x402f77
lea eax, [ebp - 0x28]
push eax
call fcn.00403028
mov ecx, eax
call fcn.005163b2
push eax
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 5
push eax
call fcn.0051f232
pop ecx
pop ecx
push eax
lea ecx, [ebx + 0x58]
call fcn.0052c8ac
push edi
push 1
lea ecx, [ebp - 0x40]
call fcn.0040376a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
push edi
push 1
call fcn.004037bf
call fcn.004206e2
test al, al
je 0x402f94
push ebp
pop ebp
push eax
push esp
pop ebp
push ebx
pop ebp
push esi
pop ebx
push edi
pop eax
pop esp
push esi
push eax
push ebp
pop eax
pop esi
push ecx
push ebx
push edx
call fcn.004204ff
test al, al
je 0x402fbb
push ebp
push ecx
push edi
push edx
push ebx
push ecx
pop esp
pop ebx
pop ebp
pop edx
pop ecx
pop edi
pop ebx
push esp
push eax
push edi
pop ebx
push edi
pop ebx
push eax
pop edx
push ebp
pop ecx
pop eax
pop eax
pop ebx
push ebx
pop ebx
push esp
push ebp
call fcn.004205ce
test al, al
je 0x402fe3
push esi
push esp
push esp
push eax
pop ebx
pop esi
push ebp
push ecx
push eax
push esp
push esp
push edi
pop ebp
pop ebx
push edi
pop ecx
pop esi
push edi
push ecx
push esp
pop ebp
pop ecx
pop ebp
push eax
pop ebp
pop edi
push ecx
pop ebp
pop eax
pop ecx
push ecx
cmp dword [ebp + 8], 0
je 0x403007
mov esi, dword [ebp - 0x48]
lea eax, [ebp - 0x48]
push eax
xor eax, eax
push eax
push esi
push 0x402a10
push eax
push eax
mov byte [esi], 1
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 8], eax
call fcn.00420361
test al, al
je 0x403020
pop ebp
push ecx
push ebx
push ebp
pop edx
pop edi
push edx
push esp
push esi
pop ebp
push edx
push edx
pop ecx
pop esp
pop esp
pop esi
call fcn.0044e904
ret 4