Function at 0x4085ac
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
jmp 0x4085c7
jmp 0x4085d9
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
push 0x78
push 0x40aab9
call fcn.00408bba
cmp dword [0x50d0c1], 0
jne 0x4087e9
cmp dword [0x50d0c5], 0
jne 0x40873a
push 0x80000005
push 0
push 0x4abe39
push 1
mov ebx, 4
mov eax, 0x43ad60
call fcn.00437a20
add esp, 0x10
mov dword [ebp - 4], eax
push 0x80000005
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x40866b
mov eax, 0x465166
push eax
push 1
mov ebx, 0x168
call fcn.00437c70
add esp, 0x10
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x408691
push ebx
call fcn.004373ae
add esp, 4
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.004381e0
add esp, 0x10
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], esp
push dword [ebp - 0xc]
push dword [ebp - 8]
call dword [sym.imp.USER32.dll_FindWindowA]
nop
nop
nop
nop
cmp dword [ebp - 0x10], esp
je 0x4086e1
push 0x364
push 0x4075994
push 6
call fcn.004373ba
add esp, 0xc
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4086f4
push ebx
call fcn.004373ae
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x408704
push ebx
call fcn.004373ae
add esp, 4
mov eax, dword [ebp - 0x14]
mov dword [0x50d0c5], eax
mov dword [ebp - 4], esp
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x40873a
push 0x382
push 0x4075994
push 6
call fcn.004373ba
add esp, 0xc
cmp dword [0x50d0c5], 0
je 0x4087b6
mov dword [ebp - 4], esp
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x408775
push 0x3d6
push 0x4075994
push 6
call fcn.004373ba
add esp, 0xc
cmp dword [0x50d0c1], 0
jne 0x4087b6
mov dword [ebp - 4], esp
push 0x50d0c1
push dword [0x50d0c5]
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x4087b6
push 0x428
push 0x4075994
push 6
call fcn.004373ba
add esp, 0xc
mov dword [ebp - 4], esp
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x4087e4
push 0x460
push 0x4075994
push 6
call fcn.004373ba
add esp, 0xc
jmp 0x408618
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push dword [0x50d0c1]
push 0x50d05d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov dword [ebp - 4], esp
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x408844
push 0x4af
push 0x4075994
push 6
call fcn.004373ba
add esp, 0xc
push 0x50d05d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x24]
mov dword [0x50d0c9], eax
mov dword [0x50d0cd], edx
mov dword [ebp - 4], esp
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x40888c
push 0x4fd
push 0x4075994
push 6
call fcn.004373ba
add esp, 0xc
mov dword [0x50d0d1], 0x3a2ce64d
mov dword [0x50d0d5], 0
push dword [0x50d0d5]
push dword [0x50d0d1]
push dword [0x50d0cd]
push dword [0x50d0c9]
call fcn.00409d04
mov dword [0x50d0c9], eax
mov dword [0x50d0cd], edx
push dword [0x50d0d5]
push dword [0x50d0d1]
push dword [0x50d0cd]
push dword [0x50d0c9]
call fcn.00409d04
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0x10], 0
jne 0x4088f5
cmp dword [ebp - 0xc], 0
jne 0x408970
mov eax, 0x4abe5d
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push eax
call fcn.00407bef
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40891f
push ebx
call fcn.004373ae
add esp, 4
mov ebx, 6
call fcn.004011be
push 0x80000301
push 0
push 0
push 0x80000004
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x408948
mov eax, 0x4650d5
push eax
push 4
mov ebx, 0x300
call fcn.00437f40
add esp, 0x34
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40896b
push ebx
call fcn.004373ae
add esp, 4
call fcn.00409d7e
call fcn.00409ea1
push dword [0x50d0c5]
call fcn.0040a6ff
mov dword [ebp - 4], esp
mov eax, 0
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push 0
push 0
push 0x415ccc
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x4089ce
push 0x6b1
push 0x4075994
push 6
call fcn.004373ba
add esp, 0xc
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], esp
push dword [ebp - 0xc]
call dword [0x50d185]
nop
nop
nop
nop
cmp dword [ebp - 0x10], esp
je 0x4089fd
push 0x6b1
push 0x4075994
push 6
call fcn.004373ba
add esp, 0xc
mov dword [ebp - 4], esp
mov eax, 0
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push 0
push 0
push 0x424130
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x408a4b
push 0x709
push 0x4075994
push 6
call fcn.004373ba
add esp, 0xc
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], esp
push dword [ebp - 0xc]
call dword [0x50d185]
nop
nop
nop
nop
cmp dword [ebp - 0x10], esp
je 0x408a7a
push 0x709
push 0x4075994
push 6
call fcn.004373ba
add esp, 0xc
mov dword [ebp - 4], esp
mov eax, 0
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push 0
push 0
push 0x42f8c0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x408ac8
push 0x761
push 0x4075994
push 6
call fcn.004373ba
add esp, 0xc
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], esp
push dword [ebp - 0xc]
call dword [0x50d185]
nop
nop
nop
nop
cmp dword [ebp - 0x10], esp
je 0x408af7
push 0x761
push 0x4075994
push 6
call fcn.004373ba
add esp, 0xc
mov dword [ebp - 4], esp
mov eax, 0
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push 0
push 0
push 0x430d30
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 4], esp
je 0x408b45
push 0x7b9
push 0x4075994
push 6
call fcn.004373ba
add esp, 0xc
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], esp
push dword [ebp - 0xc]
call dword [0x50d185]
nop
nop
nop
nop
cmp dword [ebp - 0x10], esp
je 0x408b74
push 0x7b9
push 0x4075994
push 6
call fcn.004373ba
add esp, 0xc
call fcn.0040a73f
jmp 0x408b8b
jmp 0x408b9d
mov esp, ebp
pop ebp
ret