Function at 0x40b200
Capabilities:
Create thread
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x45e516
mov eax, dword fs:[0]
push eax
sub esp, 0x94
mov eax, dword [0x46e074]
xor eax, esp
mov dword [esp + 0x90], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x46e074]
xor eax, esp
push eax
lea eax, [esp + 0xa8]
mov dword fs:[0], eax
mov eax, dword [esp + 0xb8]
push eax
xor ebx, ebx
push ebx
push 0x1fffff
mov byte [esp + 0x23], bl
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [esp + 0x18], eax
cmp eax, ebx
je 0x40b468
push 0x470938
mov dword [esp + 0x20], vtable.Share::Thread::CSALocker.0
mov dword [esp + 0x24], 0x470938
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [esp + 0xb0], ebx
mov esi, dword [0x470928]
cmp esi, dword [0x47092c]
jbe 0x40b296
call fcn.00446719
mov ebp, dword [0x47091c]
lea esp, [esp]
mov edi, dword [0x47092c]
cmp dword [0x470928], edi
jbe 0x40b2b3
call fcn.00446719
cmp ebp, ebx
je 0x40b2bf
cmp ebp, dword [0x47091c]
je 0x40b2c4
call fcn.00446719
cmp esi, edi
je 0x40b31a
cmp ebp, ebx
jne 0x40b302
call fcn.00446719
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x40b2dd
call fcn.00446719
mov ecx, dword [esp + 0xb8]
cmp dword [esi], ecx
je 0x40b30c
cmp ebp, ebx
jne 0x40b307
call fcn.00446719
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x40b2fd
call fcn.00446719
sub esi, 0xffffff80
jmp 0x40b2a0
mov eax, dword [ebp]
jmp 0x40b2d3
mov eax, dword [ebp]
jmp 0x40b2f3
mov ebp, dword [esp + 0x18]
mov byte [esp + 0x17], 1
jmp 0x40b423
mov esi, 0xf
push ebx
mov dword [esp + 0x64], esi
mov dword [esp + 0x60], ebx
mov byte [esp + 0x50], bl
mov dword [esp + 0x80], esi
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x6c], bl
mov dword [esp + 0x9c], esi
mov dword [esp + 0x98], ebx
mov byte [esp + 0x88], bl
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], 1
mov byte [esp + 0x3c], 1
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
mov byte [esp + 0x48], bl
call fcn.004459b8
add esp, 4
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], edx
mov edx, dword [esp + 0xbc]
mov eax, dword [esp + 0xb8]
mov byte [esp + 0xb0], 1
mov ebp, dword [esp + 0x18]
lea edi, [esp + 0x24]
mov dword [esp + 0x28], ebp
mov dword [esp + 0x30], edx
mov dword [esp + 0x24], eax
call fcn.0040c0a0
mov edi, 0x10
cmp dword [esp + 0x98], edi
jb 0x40b3dc
mov ecx, dword [esp + 0x84]
push ecx
call fcn.00445523
add esp, 4
mov dword [esp + 0x98], esi
mov dword [esp + 0x94], ebx
mov byte [esp + 0x84], bl
cmp dword [esp + 0x7c], edi
jb 0x40b404
mov edx, dword [esp + 0x68]
push edx
call fcn.00445523
add esp, 4
mov dword [esp + 0x7c], esi
mov dword [esp + 0x78], ebx
mov byte [esp + 0x68], bl
cmp dword [esp + 0x60], edi
jb 0x40b423
mov eax, dword [esp + 0x4c]
push eax
call fcn.00445523
add esp, 4
push 0x470938
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [0x46f568], 0xa
mov dword [0x46f56c], ebx
cmp byte [esp + 0x17], bl
jne 0x40b461
lea ecx, [esp + 0x18]
push ecx
push ebx
push ebp
push 0x40bc00
push ebx
push ebx
mov dword [esp + 0x30], ebx
call fcn.00446ebd
add esp, 0x18
push eax
jmp 0x40b462
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0xa8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x90]
xor ecx, esp
call fcn.004453f2
add esp, 0xa0
ret 8