Function at 0x4fd39d
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
push esi
mov ebx, ecx
mov esi, 0x79688c
mov ecx, esi
mov dword [ebp - 8], ebx
call fcn.00472021
test eax, eax
je 0x4fd876
push edi
lea ecx, [ebx + 0x9b8]
call fcn.00423871
mov ecx, 0x7e7160
call fcn.00528dc2
mov ecx, esi
call fcn.00672d88
mov esi, 0x7e7c70
lea edi, [ebx + 0xa8]
lea ecx, [ebx + 0xe8]
mov eax, dword [eax + 0x50]
mov dword [ebx + 0x1468], eax
xor eax, eax
mov dword [ebx + 0xa0], eax
mov dword [ebx + 0xd4], 1
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0xd8], eax
mov dword [ebx + 0xd0], eax
mov dword [ebx + 0x1464], eax
mov eax, 0xbe
mov word [ebx + 0x1460], ax
call fcn.004c2c38
lea edi, [ebx + 0x11ec]
xor esi, esi
mov ecx, edi
mov dword [ebp - 4], edi
call fcn.00595ff2
test eax, eax
je 0x4fd476
mov ebx, edi
push esi
mov ecx, ebx
call fcn.005796a1
mov edi, eax
test edi, edi
je 0x4fd464
mov ecx, edi
call fcn.004f7c20
push 0x68
push edi
call fcn.0056df27
pop ecx
pop ecx
mov ecx, ebx
inc esi
call fcn.00595ff2
cmp esi, eax
jb 0x4fd445
mov ebx, dword [ebp - 8]
mov edi, dword [ebp - 4]
push 0
mov ecx, edi
call fcn.00578ef5
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0xb4]
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0xc4]
lea ecx, [ebx + 0x210]
call fcn.004fea10
or dword [ebx + 0xdc], 0xffffffff
lea ecx, [ebx + 0xfd8]
or dword [ebx + 0xe0], 0xffffffff
call fcn.00526d9c
xor edi, edi
lea ecx, [ebx + 0x1138]
push edi
call fcn.00544805
push ecx
and dword [esp], edi
lea esi, [ebx + 0x320]
mov ecx, esi
call fcn.0051a564
push 0x6ead14
lea ecx, [ebx + 0x17c]
call fcn.004179fb
push 0x6ead18
lea ecx, [ebx + 0x198]
call fcn.004179fb
push 0x6ead1c
lea ecx, [ebx + 0x118]
mov dword [ebx + 0x138], edi
mov dword [ebx + 0x13c], edi
mov dword [ebx + 0x140], edi
mov dword [ebx + 0x144], edi
mov dword [ebx + 0x148], edi
mov dword [ebx + 0x14c], edi
mov dword [ebx + 0x114], edi
call fcn.004179fb
push 1
mov ecx, 0x79688c
mov dword [ebx + 0x134], edi
call fcn.00471fa3
push edi
push edi
test eax, eax
je 0x4fd5d3
mov ecx, esi
call fcn.00576a7f
push edi
lea esi, [ebx + 0x218]
push 1
mov ecx, esi
call fcn.00576a7f
mov ecx, esi
call fcn.00487af4
mov esi, 0x796c94
push 0x1e2
mov ecx, esi
call fcn.00417bfd
push 4
pop edi
add eax, edi
mov dword [ebp - 4], eax
cmp dword [eax + 0x14], 8
jb 0x4fd58e
mov eax, dword [eax]
mov dword [ebp - 4], eax
mov ecx, ebx
call fcn.005758c0
push eax
push dword [ebp - 4]
mov ecx, 0x795f88
call fcn.0042e39f
push 0x1e2
mov ecx, ebx
call fcn.005758c0
mov ecx, eax
call fcn.005187c0
push 0x1c3
mov ecx, esi
call fcn.00417bfd
push eax
lea ecx, [ebx + 0x160]
call fcn.004248f3
jmp 0x4fd77f
lea ecx, [ebx + 0x218]
call fcn.00576a7f
push edi
push 1
mov ecx, esi
call fcn.00576a7f
push edi
mov ecx, esi
call fcn.0051a554
mov ecx, esi
call fcn.0051a4fc
push 4
pop edi
mov esi, 0x79688c
push edi
mov ecx, esi
call fcn.00471fa3
test eax, eax
je 0x4fd685
mov esi, 0x796c94
push 0x1e4
mov ecx, esi
call fcn.00417bfd
add eax, edi
mov dword [ebp - 4], eax
cmp dword [eax + 0x14], 8
jb 0x4fd62c
mov eax, dword [eax]
mov dword [ebp - 4], eax
mov ecx, ebx
call fcn.005758c0
push eax
push dword [ebp - 4]
mov ecx, 0x795f88
call fcn.0042e39f
push 0x1e4
mov ecx, ebx
call fcn.005758c0
mov ecx, eax
call fcn.005187c0
push 0x43
mov ecx, esi
call fcn.00417bfd
lea ecx, [edi + eax]
cmp dword [ecx + 0x14], 8
jb 0x4fd668
mov ecx, dword [ecx]
lea edx, [ebx + 0x9b8]
mov eax, dword [edx]
push 1
push ecx
mov ecx, edx
call dword [eax + 0xe4]
push 0xdbba3
jmp 0x4fd750
push 8
mov ecx, esi
call fcn.00471fa3
mov esi, 0x796c94
mov ecx, esi
test eax, eax
je 0x4fd709
push 0x1e5
call fcn.00417bfd
add eax, edi
mov dword [ebp - 4], eax
cmp dword [eax + 0x14], 8
jb 0x4fd6b3
mov eax, dword [eax]
mov dword [ebp - 4], eax
mov ecx, ebx
call fcn.005758c0
push eax
push dword [ebp - 4]
mov ecx, 0x795f88
call fcn.0042e39f
push 0x1e5
mov ecx, ebx
call fcn.005758c0
mov ecx, eax
call fcn.005187c0
push 0x53
mov ecx, esi
call fcn.00417bfd
lea ecx, [edi + eax]
cmp dword [ecx + 0x14], 8
jb 0x4fd6ef
mov ecx, dword [ecx]
lea edx, [ebx + 0x9b8]
mov eax, dword [edx]
push 1
push ecx
mov ecx, edx
call dword [eax + 0xe4]
push 0xdbba4
jmp 0x4fd750
push 0x1e3
call fcn.00417bfd
add eax, edi
mov dword [ebp - 4], eax
cmp dword [eax + 0x14], 8
jb 0x4fd723
mov eax, dword [eax]
mov dword [ebp - 4], eax
mov ecx, ebx
call fcn.005758c0
push eax
push dword [ebp - 4]
mov ecx, 0x795f88
call fcn.0042e39f
push 0x1e3
mov ecx, ebx
call fcn.005758c0
mov ecx, eax
call fcn.005187c0
push 0xdbba2
lea ecx, [ebx + 0xb08]
call fcn.0050f4b9
push 0x1c4
mov ecx, esi
call fcn.00417bfd
push eax
lea ecx, [ebx + 0x160]
call fcn.004248f3
mov ecx, dword [0x79670c]
push ebx
call fcn.005580ac
push 0
lea ecx, [ebx + 0x730]
push 1
call fcn.00576a7f
lea ecx, [ebx + 0x730]
mov eax, dword [ecx]
push 0
push 1
call dword [eax + 0x3c]
push 0x3c
mov ecx, esi
call fcn.00417bfd
lea ecx, [edi + eax]
cmp dword [ecx + 0x14], 8
jb 0x4fd7b1
mov ecx, dword [ecx]
lea edx, [ebx + 0x730]
xor edi, edi
mov eax, dword [edx]
push edi
push ecx
mov ecx, edx
call dword [eax + 0xe4]
push edi
lea esi, [ebx + 0x5ec]
push 1
mov ecx, esi
call fcn.00576a7f
mov eax, dword [esi]
mov ecx, esi
push edi
push 1
call dword [eax + 0x3c]
push edi
push edi
lea ecx, [ebx + 0x4a8]
call fcn.00576a7f
push edi
push edi
lea ecx, [ebx + 0xb08]
call fcn.00576a7f
push edi
push edi
lea ecx, [ebx + 0x874]
call fcn.00576a7f
push edi
push edi
lea ecx, [ebx + 0x9b8]
call fcn.00576a7f
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x20]
mov ecx, 0x79688c
call fcn.004720b9
cmp eax, 1
jne 0x4fd83f
lea eax, [ebx + 0x164]
cmp dword [eax + 0x14], 8
jb 0x4fd837
mov eax, dword [eax]
push eax
mov ecx, ebx
call fcn.004fcac0
push edi
push edi
push ebx
push 0x4fd87c
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebx + 0xd0], eax
test eax, eax
je 0x4fd86f
mov eax, dword [ebx]
mov ecx, ebx
push 1
push ebx
push 0xc8
push 0x111999
call dword [eax + 0x60]
jmp 0x4fd875
mov dword [ebx + 0xd4], edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret