Function at 0x4171ac
Capabilities:
Create thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x34
push ebx
xor eax, eax
push esi
mov esi, dword [ebp + 8]
cmp dword [esi + 0x208], 2
push edi
sete al
xor ebx, ebx
lea edi, [ebp - 0x34]
push 0x2000012c
push 1
mov dword [ebp - 0x28], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x14], eax
mov eax, dword [esi + 0x214]
mov dword [ebp - 0x20], eax
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x18], ebx
mov dword [ebp + 8], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 4], ebx
stosd dword es:[edi], eax
call fcn.0040bfb2
pop ecx
pop ecx
lea ecx, [ebp - 0x28]
lea eax, [esi + 0xa8]
push ecx
push eax
call fcn.00416cc4
mov edi, eax
cmp edi, ebx
jge 0x41722d
push 0x441abe
push edi
call fcn.00430a6a
pop ecx
pop ecx
jmp 0x4174ad
lea eax, [esi + 0x1b8]
push eax
lea edi, [esi + 0xa8]
push edi
call fcn.00428d5e
mov eax, dword [esi + 0xb8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x54]
push eax
push 1
push edi
call fcn.00416d9c
mov edi, eax
cmp edi, ebx
jge 0x417272
push edi
push 0x25b
push 0x441952
call fcn.004315c0
push 0x441aa6
jmp 0x417220
cmp dword [esi + 0x30], 3
jne 0x417289
mov dword [ebp - 4], 1
mov edi, 0x8007015e
jmp 0x4174ad
lea eax, [ebp - 8]
push eax
push ebx
call fcn.00428d8e
mov edi, eax
cmp edi, ebx
jge 0x4172a0
push 0x441a78
jmp 0x417220
call fcn.00428d18
mov eax, dword [ebp + 0xc]
mov dword [esi + 0xe0], eax
lea eax, [esi + 0x78]
push eax
call fcn.00428d30
mov edi, eax
cmp edi, ebx
jge 0x4172c7
push 0x441a50
jmp 0x417220
lea eax, [esi + 0x270]
cmp dword [eax], ebx
jne 0x4172fe
push eax
lea eax, [esi + 0x40]
push eax
lea eax, [esi + 0xac]
push eax
push dword [esi + 0x12c]
push dword [esi + 0xf4]
call fcn.0041f00c
mov edi, eax
cmp edi, ebx
jge 0x4172fe
push 0x441798
jmp 0x417220
cmp dword [esi + 0x210], ebx
je 0x417360
push dword [esi + 0xe0]
push esi
call fcn.00416e4e
mov edi, eax
cmp edi, ebx
jge 0x417322
push 0x441a3c
jmp 0x417220
xor eax, eax
cmp dword [esi + 0x1e8], ebx
sete al
push eax
push dword [esi + 0x264]
lea eax, [esi + 0x78]
push dword [esi + 0x208]
push eax
push dword [esi + 0x284]
call fcn.004201a4
mov edi, eax
cmp edi, ebx
jge 0x417359
push 0x441a0c
jmp 0x417220
mov dword [ebp - 0x24], 1
cmp dword [ebp - 0x14], ebx
jne 0x41738a
push esi
call fcn.00429194
mov edi, eax
cmp edi, ebx
jge 0x417383
push 0x4419f0
push edi
call fcn.00430a6a
pop ecx
pop ecx
jmp 0x41749d
mov dword [ebp - 0x1c], 1
lea eax, [ebp - 0x18]
push ebx
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0xc]
push ebx
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x34]
push eax
push 0x416fce
push ebx
push ebx
mov dword [ebp - 0x34], esi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp + 8], eax
cmp eax, ebx
jne 0x4173e9
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x4173c7
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
cmp edi, ebx
jl 0x4173d2
mov edi, 0x80004005
push edi
push 0x292
push 0x441952
call fcn.004315c0
push 0x4419d0
jmp 0x417402
cmp dword [esi + 0x1ec], ebx
jne 0x417418
push eax
call fcn.0041704e
mov edi, eax
cmp edi, ebx
jge 0x41740c
push 0x4419a6
push edi
call fcn.00430a6a
pop ecx
pop ecx
jmp 0x417489
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp + 8], ebx
cmp dword [ebp - 0x14], ebx
jne 0x417449
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp + 8]
push esi
call fcn.0042b08e
mov edi, eax
push edi
lea eax, [esi + 0xa8]
push eax
call fcn.004169b6
cmp dword [ebp + 8], ebx
je 0x41745c
push dword [ebp + 8]
call fcn.0041704e
cmp edi, ebx
jl 0x417489
mov edi, eax
cmp edi, ebx
jl 0x417489
cmp dword [ebp - 0xc], ebx
jne 0x417489
cmp dword [ebp - 0x10], ebx
jne 0x417489
cmp dword [ebp - 4], 2
je 0x417489
push dword [esi + 0x284]
lea eax, [esi + 0x208]
push eax
lea eax, [esi + 0xa8]
push eax
call fcn.0042933a
cmp dword [ebp - 0x1c], ebx
je 0x41749d
push dword [ebp - 4]
push dword [ebp - 0x10]
push dword [ebp - 0x20]
push esi
call fcn.00428d94
cmp dword [ebp - 0x24], ebx
je 0x4174ad
push dword [esi + 0x284]
call fcn.00420272
mov dword [esi + 0xe0], ebx
call fcn.00428d24
cmp dword [ebp - 8], ebx
je 0x4174cf
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x28], ebx
je 0x4174e0
lea eax, [esi + 0xa8]
push eax
call fcn.00416992
cmp dword [ebp + 8], ebx
je 0x4174ee
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 4]
mov eax, dword [esi + 0xb8]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0xbc]
cmp eax, 0x66
jne 0x41750d
mov dword [esi + 0x18], 1
push dword [esi + 0x18]
call fcn.00418f4a
push eax
push dword [ebp - 4]
call fcn.004190e0
push eax
push edi
push 0x2000018f
push 1
call fcn.0040bfb2
add esp, 0x14
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 8