Function at 0x413310
Capabilities:
Create thread

Disassembly:
push 0xffffffffffffffff
push 0x443200
mov eax, dword fs:[0]
push eax
sub esp, 0x58
push ebx
push ebp
push esi
push edi
mov eax, dword [0x455028]
xor eax, esp
push eax
lea eax, [esp + 0x6c]
mov dword fs:[0], eax
mov edi, dword [esp + 0x7c]
mov esi, dword [edi + 0xc]
cmp esi, dword [edi + 0x10]
jbe 0x413349
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov ebp, dword [edi]
mov ebx, esi
lea ecx, [ecx]
mov esi, dword [edi + 0x10]
cmp dword [edi + 0xc], esi
jbe 0x41335e
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov eax, dword [edi]
test ebp, ebp
je 0x413368
cmp ebp, eax
je 0x41336e
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
cmp ebx, esi
je 0x41343e
test ebp, ebp
jne 0x41341f
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x413391
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
cmp dword [ebx + 4], 0
je 0x413400
test ebp, ebp
jne 0x413427
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x4133b2
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov eax, dword [ebx + 4]
cmp dword [eax + 0xa8], 0
je 0x413400
test ebp, ebp
jne 0x41342f
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x4133d5
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov edi, dword [ebx + 4]
call fcn.00434350
test ebp, ebp
jne 0x413434
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x4133f4
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov esi, dword [ebx + 4]
call fcn.00436320
mov edi, dword [esp + 0x7c]
test ebp, ebp
jne 0x413439
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x413417
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
add ebx, 0xc
jmp 0x413350
mov eax, dword [ebp]
jmp 0x413386
mov eax, dword [ebp]
jmp 0x4133a7
mov eax, dword [ebp]
jmp 0x4133ca
mov eax, dword [ebp]
jmp 0x4133e9
mov eax, dword [ebp]
jmp 0x41340c
push 4
call sub.mfc90u.dll_new
xor ecx, ecx
add esp, 4
cmp eax, ecx
je 0x413456
lea edx, [esp + 0x50]
mov dword [eax], edx
jmp 0x413458
xor eax, eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], ecx
mov dword [esp + 0x64], ecx
mov dword [esp + 0x74], 1
mov esi, dword [edi + 0xc]
mov dword [esp + 0x20], ecx
cmp esi, dword [edi + 0x10]
jbe 0x413482
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov ebp, dword [edi]
mov dword [esp + 0x30], ebp
mov ebx, esi
lea ebx, [ebx]
mov esi, dword [edi + 0x10]
cmp dword [edi + 0xc], esi
jbe 0x41349e
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov eax, dword [edi]
test ebp, ebp
je 0x4134a8
cmp ebp, eax
je 0x4134ae
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
cmp ebx, esi
je 0x41377f
test ebp, ebp
jne 0x4135c5
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x4134d1
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
cmp dword [ebx + 4], 0
je 0x41375b
test ebp, ebp
jne 0x4135cd
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x4134f6
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov eax, dword [ebx + 4]
cmp dword [eax + 0xa8], 0
je 0x41375b
cmp dword [esp + 0x20], 0
jne 0x413569
cmp dword [edi + 0x38], 0
je 0x413561
mov esi, dword [edi + 0xc]
cmp esi, dword [edi + 0x10]
jbe 0x413521
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov eax, dword [edi]
test ebp, ebp
je 0x41352b
cmp ebp, eax
je 0x413531
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov ecx, dword [edi + 0x3c]
push ecx
mov ecx, ebx
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [edi + 0x38]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push 0xa
call ecx
cmp eax, 0xffffffff
jne 0x413561
mov edx, dword [edi + 0x44]
cmp edx, eax
je 0x41377f
mov dword [esp + 0x20], 1
mov eax, dword [edi + 0x40]
sub eax, 1
je 0x4136b9
sub eax, 1
je 0x413628
sub eax, 1
jne 0x41375b
test ebp, ebp
jne 0x4135d5
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x41359e
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov eax, dword [ebx + 4]
push 0
push 0
push eax
push 0x413300
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, dword [esp + 0x5c]
mov dword [esp + 0x24], eax
test esi, esi
jne 0x4135da
xor edx, edx
jmp 0x4135e3
mov eax, dword [ebp]
jmp 0x4134c6
mov eax, dword [ebp]
jmp 0x4134eb
mov eax, dword [ebp]
jmp 0x413593
mov edx, dword [esp + 0x64]
sub edx, esi
sar edx, 2
mov ecx, dword [esp + 0x60]
mov ebp, ecx
sub ebp, esi
sar ebp, 2
cmp ebp, edx
jae 0x41360f
mov dword [ecx], eax
add ecx, 4
mov byte [esp + 0x17], 0
mov byte [esp + 0x18], 0
mov byte [esp + 0x19], 0
mov dword [esp + 0x60], ecx
jmp 0x413757
mov edi, ecx
cmp esi, ecx
jbe 0x41361b
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
lea ecx, [esp + 0x24]
lea edx, [esp + 0x38]
jmp 0x413742
test ebp, ebp
jne 0x413666
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x41363f
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov eax, dword [ebx + 4]
push 0
push 0
push eax
push 0x4132f0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, dword [esp + 0x5c]
mov dword [esp + 0x28], eax
test esi, esi
jne 0x41366b
xor edx, edx
jmp 0x413674
mov eax, dword [ebp]
jmp 0x413634
mov edx, dword [esp + 0x64]
sub edx, esi
sar edx, 2
mov ecx, dword [esp + 0x60]
mov ebp, ecx
sub ebp, esi
sar ebp, 2
cmp ebp, edx
jae 0x4136a0
mov dword [ecx], eax
add ecx, 4
mov byte [esp + 0x1a], 0
mov byte [esp + 0x1b], 0
mov byte [esp + 0x1c], 0
mov dword [esp + 0x60], ecx
jmp 0x413757
mov edi, ecx
cmp esi, ecx
jbe 0x4136ac
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
lea ecx, [esp + 0x28]
lea edx, [esp + 0x40]
jmp 0x413742
test ebp, ebp
jne 0x4136f7
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x4136d0
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov eax, dword [ebx + 4]
push 0
push 0
push eax
push 0x4132e0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, dword [esp + 0x5c]
mov dword [esp + 0x2c], eax
test esi, esi
jne 0x4136fc
xor edx, edx
jmp 0x413705
mov eax, dword [ebp]
jmp 0x4136c5
mov edx, dword [esp + 0x64]
sub edx, esi
sar edx, 2
mov ecx, dword [esp + 0x60]
mov ebp, ecx
sub ebp, esi
sar ebp, 2
cmp ebp, edx
jae 0x41372e
mov dword [ecx], eax
add ecx, 4
mov byte [esp + 0x1d], 0
mov byte [esp + 0x1e], 0
mov byte [esp + 0x1f], 0
mov dword [esp + 0x60], ecx
jmp 0x413757
mov edi, ecx
cmp esi, ecx
jbe 0x41373a
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
lea ecx, [esp + 0x2c]
lea edx, [esp + 0x48]
mov eax, dword [esp + 0x50]
push edi
push eax
push ecx
push edx
lea eax, [esp + 0x60]
call fcn.004375e0
mov edi, dword [esp + 0x7c]
mov ebp, dword [esp + 0x30]
test ebp, ebp
jne 0x41377a
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x413772
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
add ebx, 0xc
jmp 0x413490
mov eax, dword [ebp]
jmp 0x413767
mov eax, dword [esp + 0x60]
sub eax, dword [esp + 0x5c]
sar eax, 2
test eax, eax
jbe 0x413822
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x60]
push 0xffffffffffffffff
push 1
sub eax, ecx
push ecx
sar eax, 2
push eax
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov esi, dword [esp + 0x5c]
mov eax, dword [esp + 0x60]
cmp esi, eax
jbe 0x4137c1
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov eax, dword [esp + 0x60]
mov edi, dword [esp + 0x50]
mov ebx, dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
jmp 0x4137d0
mov ebp, eax
cmp dword [esp + 0x5c], eax
jbe 0x4137da
call ebx
test edi, edi
je 0x4137e4
cmp edi, dword [esp + 0x50]
je 0x4137e6
call ebx
cmp esi, ebp
je 0x413822
test edi, edi
jne 0x41381a
call ebx
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x4137f9
call ebx
mov eax, dword [esi]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
jne 0x41381e
call ebx
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x413811
call ebx
mov eax, dword [esp + 0x60]
add esi, 4
jmp 0x4137d0
mov eax, dword [edi]
jmp 0x4137f2
mov eax, dword [edi]
jmp 0x41380a
mov edi, dword [esp + 0x7c]
lea esi, [edi + 0x18]
push esi
call fcn.00412080
mov edx, dword [esi]
mov eax, dword [edx + 0x1c]
mov ecx, esi
mov dword [edi + 0x40], 0xffffffff
call eax
mov eax, dword [esp + 0x5c]
xor esi, esi
cmp eax, esi
je 0x413852
push eax
call sub.mfc90u.dll_delete
add esp, 4
mov ecx, dword [esp + 0x50]
push ecx
mov dword [esp + 0x60], esi
mov dword [esp + 0x64], esi
mov dword [esp + 0x68], esi
call sub.mfc90u.dll_delete
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x6c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x64
ret 4