Function at 0x426aab
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
push 0x81
call fcn.0040f632
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push 1
push dword [ebp - 0x10]
push 0x74067c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1a4]
push 1
push 0
push 0x3e9
push dword [ebp + 8]
push 0x740834
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x198]
push 1
push 0
push 0x3ea
push dword [ebp + 8]
push 0x740838
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x198]
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
push 1
push 0xff0090
push 0x740838
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x188]
push 0x3eb
push dword [ebp + 8]
push 0x74083c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x188]
push 0x64
push 0
push 0x74083c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x194]
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
push 0x3ec
push dword [ebp + 8]
push 0x740840
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x198]
push 0x8000
push 0x740840
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xf0]
push 0x7f89
call fcn.0041c9db
mov dword [ebp - 0x10], eax
push 1
push dword [ebp - 0x10]
push 0x740840
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x11c]
push 0x4272d5
push 0x740840
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1b0]
push 0x427796
push 0xc8
push 0x740844
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
push 1
push 3
push 0x74067c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xd0]
push 0x740848
call fcn.00426db6
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
xor ecx, ecx
push eax
lea eax, [ebp - 8]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x426d96
mov dword [ebp - 0x10], esp
push 0
push 0
push dword [ebp - 8]
push 0x428464
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 0x10], esp
je 0x426ca2
push 6
call fcn.0047ee71
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x426d1a
push 0x74067c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x80]
mov dword [ebp - 0x10], eax
push 0x10
mov eax, 0x73907d
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
mov eax, 0x739088
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
push 1
push dword [ebp - 0x10]
push 0x7406cc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x426d05
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x426d15
push ebx
call fcn.0047ee6b
add esp, 4
jmp 0x426db0
push 0x74084c
push 4
mov eax, 2
call fcn.00483800
add esp, 8
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
mov ebx, dword [0x74084c]
mov dword [ebp - 0x14], ebx
call fcn.0040647b
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x426d61
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.0047ee83
add esp, 8
mov dword [0x74084c], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
mov dword [edi], eax
pop eax
pop ebx
pop ecx
jmp 0x426c59
add esp, 0xc
push 0x428499
push 0x74067c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1dc]
mov esp, ebp
pop ebp
ret 4