Function at 0x40d090
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x20
push esi
push edi
push 7
push dword [0x8b27bc]
mov edi, ecx
push 0x7830e0
push 0x96
push 0x2bc
mov dword [esp + 0x20], edi
call dword [0x740e28]
push eax
mov dword [edi + 0x58], eax
call dword [0x740e24]
push 0
push 0
push 0
push 0
push dword [edi + 0x58]
mov dword [edi + 0x5c], eax
call dword [0x740e20]
push dword [edi + 0x58]
call dword [0x740e1c]
push 0xff
push fcn.00404040
push 2
push eax
call dword [0x740e18]
push dword [edi + 0x58]
push 0x5a
push 0x294
push 0x14
push 0x14
call dword [0x740b64]
push 0xff
push 0xffffff
push eax
mov dword [edi + 0x60], eax
call dword [0x740b88]
push 1
push dword [edi + 0x60]
call dword [0x740b6c]
push 1
push dword [edi + 0x60]
call dword [0x740b70]
push 1
push dword [edi + 0x60]
call dword [0x740e0c]
push 1
push dword [edi + 0x60]
call dword [0x740df4]
push 0
push dword [edi + 0x60]
call dword [0x740b78]
push 0
push 0xa
push str.Microsoft_YaHei
call dword [0x740dfc]
push eax
push dword [edi + 0x60]
call dword [0x740e00]
mov edx, 0x4f6
lea ecx, [esp + 0x10]
call fcn.00405cc0
cmp dword [eax + 0x14], 8
jb 0x40d186
mov eax, dword [eax]
push dword [edi + 0x58]
push eax
push 0x1e
push 0x78
push 0x14
push 0x230
call dword [0x740e08]
mov dword [edi + 0x64], eax
mov eax, dword [esp + 0x24]
cmp eax, 8
jb 0x40d1b6
inc eax
lea ecx, [esp + 0x10]
push eax
push dword [esp + 0x14]
call fcn.00404a50
sub esp, 8
push edi
push ecx
mov ecx, dword [edi + 0x64]
call fcn.0040eeb0
mov esi, dword [0x740df0]
add esp, 0x10
push 0xff
push 0xc0c0c0
push 0
push dword [edi + 0x64]
call esi
push 0xff
push 0xe0e0e0
push 1
push dword [edi + 0x64]
call esi
push 0xff
push 0xe0e0e0
push 2
push dword [edi + 0x64]
call esi
push 0xff
push 0x808080
push 4
push dword [edi + 0x64]
call esi
mov esi, dword [0x740dec]
push 1
push 0xff
push 0
push 0
push dword [edi + 0x64]
call esi
push 1
push 0xff
push 0
push 1
push dword [edi + 0x64]
call esi
push 1
push 0xff
push 0
push 2
push dword [edi + 0x64]
call esi
push 1
push 0xff
push 0
push 4
push dword [edi + 0x64]
call esi
push 0
push dword [edi + 0x64]
call dword [0x740de8]
push dword [edi + 0x58]
push 5
push 0x294
push 0x7d
push 0x14
call dword [0x740de4]
push 1
push eax
mov dword [edi + 0x68], eax
call dword [0x740de0]
push 0x64
push dword [edi + 0x68]
call dword [0x740ddc]
push 5
push dword [edi + 0x68]
call dword [0x740dd8]
push 0x32
push dword [edi + 0x68]
call dword [0x740dd4]
push 0
push 0
push dword [edi + 0x68]
call dword [0x740dd0]
push 0
push dword [edi + 0x68]
call dword [0x740dcc]
push 1
push dword [edi + 0x68]
call dword [0x740df4]
push 0
push dword [edi + 0x68]
mov edi, dword [0x740e10]
call edi
mov esi, dword [esp + 0xc]
push 0xff
push 0xffffff
push dword [esi + 0x68]
call dword [0x740dc8]
push dword [esi + 0x68]
call dword [0x740c18]
mov esi, eax
push 1
push esi
call dword [0x740df4]
push 0
push esi
call dword [0x740b14]
push esi
call dword [0x740b18]
push 0xff
push 0x8000
push 1
push eax
call dword [0x740e18]
mov esi, dword [esp + 0xc]
push dword [esi + 0x58]
push 5
push 0x294
push 0x7d
push 0x14
call dword [0x740b8c]
push 0x64
push eax
mov dword [esi + 0x70], eax
call dword [0x740b90]
push 0
push dword [esi + 0x70]
call dword [0x740b94]
push 0
push 0
push dword [esi + 0x70]
call dword [0x740b98]
push 0
push dword [esi + 0x70]
call edi
push 0
push dword [esi + 0x70]
call dword [0x740de8]
push 1
push 0xb6
push 0x7ceae8
call dword [0x740b9c]
push eax
push dword [esi + 0x70]
call dword [0x740ba0]
push dword [esi + 0x58]
push 0x7830e0
push 0x14
push 0x32
push 0x69
push 0x276
call dword [0x740b44]
push 0x32
push 0
push eax
mov dword [esi + 0x74], eax
call dword [0x740ba4]
push 2
push dword [esi + 0x74]
call dword [0x740ba8]
push 0xff
push 0xffffff
push dword [esi + 0x74]
call dword [0x740b4c]
push 0
push 0xa
push str.Microsoft_YaHei
call dword [0x740dfc]
push eax
push dword [esi + 0x74]
call dword [0x740b48]
sub esp, 8
push esi
push ecx
mov ecx, dword [esi + 0x58]
call fcn.0040ef80
add esp, 8
push esi
push ecx
mov ecx, dword [esi + 0x58]
call fcn.0040f060
add esp, 0x10
push 0xa
push 0xc8
push dword [esi + 0x58]
call dword [0x740b1c]
cmp dword [esi + 0x4c], 0
je 0x40d438
push 0
push 0
push esi
push 0x40d5f0
push 0
push 0
call fcn.006ee9d1
add esp, 0x18
push eax
call dword [0x740584]
push dword [esi + 0x58]
call dword [0x740b20]
pop edi
pop esi
mov esp, ebp
pop ebp
ret