Function at 0x460fb0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
mov ecx, 4
push 0
push 0
dec ecx
jne 0x460fb8
push ecx
push ebx
push esi
push edi
mov esi, edx
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x4612e3
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0x154], 0
jne 0x46100c
mov dl, 1
mov eax, dword [0x442270]
call fcn.0044c3d0
mov ebx, eax
mov eax, dword [ebp - 0xc]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0xc]
add eax, 0x154
mov edx, ebx
test edx, edx
je 0x461007
sub edx, 0xffffffc0
call fcn.0040a754
mov eax, esi
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0x154]
call fcn.0040a754
mov eax, dword [ebp - 0xc]
cmp byte [eax + 0x174], 0
je 0x4612aa
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x154]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jne 0x4612aa
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0x154]
call fcn.0040a754
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0x154]
mov ecx, 0x4612f4
call fcn.0040a780
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
call dword [edx + 0x18]
xor eax, eax
mov dword [ebp - 8], eax
push ebp
call fcn.00460dbc
pop ecx
lea ecx, [ebp - 0x14]
mov edx, 0x461310
mov eax, dword [ebp - 0xc]
call fcn.0044aca0
mov dl, 0x7c
mov eax, dword [ebp - 0x14]
call fcn.00411d08
test eax, eax
jle 0x46113f
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 1
xor eax, eax
push ebp
push 0x461129
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x10]
push eax
mov cl, 0x7c
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.00411dcc
mov eax, dword [0x62fdb8]
call fcn.00408ffc
mov esi, eax
test esi, esi
jl 0x46111f
inc esi
xor ebx, ebx
mov edi, ebx
add edi, edi
add edi, edi
add edi, edi
sub edi, ebx
mov eax, dword [0x62fdb8]
mov eax, dword [eax + edi*4]
mov edx, dword [ebp - 0x10]
call fcn.004100f8
test al, al
je 0x46111b
mov eax, dword [0x62fdb8]
cmp byte [eax + edi*4 + 0x18], 0
je 0x46111f
push ebp
mov eax, dword [0x62fdb8]
mov eax, dword [eax + edi*4]
mov edx, 0x461324
call fcn.004606c4
pop ecx
jmp 0x46111f
inc ebx
dec esi
jne 0x4610db
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x461133
inc dword [ebp - 0x1c]
dec dword [ebp - 0x20]
jne 0x4610a9
mov eax, dword [ebp - 0xc]
call fcn.00447e90
test al, al
je 0x461168
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0x13c], 0
je 0x461168
push ebp
mov edx, 0x461324
mov eax, 0x46134c
call fcn.004606c4
pop ecx
mov eax, dword [ebp - 0xc]
call fcn.00447eb0
test al, al
je 0x461191
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0x13c], 0
je 0x461191
push ebp
mov edx, 0x461324
mov eax, 0x461368
call fcn.004606c4
pop ecx
mov eax, dword [ebp - 0xc]
call fcn.00447ed4
test al, al
je 0x4611b7
cmp dword [0x61c6a0], 0
je 0x4611b7
push ebp
mov edx, 0x461324
mov eax, 0x461380
call fcn.004606c4
pop ecx
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0xc]
xor eax, eax
push ebp
push 0x46120d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
dec eax
test eax, eax
jl 0x461203
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [eax + edx*8 + 4]
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x1c]
mov edx, dword [eax + edx*8]
mov eax, dword [ebp - 0x18]
mov ebx, dword [eax]
call dword [ebx + 0x28]
inc dword [ebp - 0x1c]
dec dword [ebp - 0x20]
jne 0x4611e0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x461217
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x10]
mov eax, dword [ebp - 0xc]
cmp byte [eax + 0x1c8], 0
jne 0x4612aa
call sub.kernel32.dll_GetCurrentThreadId_1
cmp eax, dword [0x61cf30]
jne 0x46126c
mov eax, 0xfa
call fcn.004392dc
test al, al
jne 0x46126c
mov eax, dword [ebp - 0xc]
add eax, 0x1ac
push eax
push 0
mov eax, dword [ebp - 0xc]
push eax
push fcn.0045fe2c
push 0
push 0
call sub.kernel32.dll_CreateThread_1
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x1a8], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x1a8]
test eax, eax
jne 0x4612a2
mov eax, dword [ebp - 0xc]
call fcn.004472fc
test al, al
je 0x461297
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x1b4]
mov cl, 1
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0x34]
mov eax, dword [ebp - 0xc]
push eax
call fcn.0045fe2c
jmp 0x4612aa
push 1
push eax
call sub.kernel32.dll_SetThreadPriority
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4612ea
lea eax, [ebp - 0x24]
call fcn.0040a73c
lea eax, [ebp - 0x18]
call fcn.0040a73c
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.00406820
lea eax, [ebp - 4]
mov edx, dword [0x46068c]
call fcn.004092dc
ret