Function at 0x461c80
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x511458
mov eax, dword fs:[0]
push eax
sub esp, 0x38
push ebx
push esi
push edi
mov eax, dword [0x570be0]
xor eax, esp
push eax
lea eax, [esp + 0x48]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x20], ebx
push str.IN_time
lea ecx, [esp + 0x28]
call fcn.004204a0
push str.killThread
lea ecx, [esp + 0x1c]
mov dword [esp + 0x54], 0
call fcn.004204a0
mov byte [esp + 0x50], 1
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x1c], eax
mov byte [esp + 0x50], 2
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x30], edi
lea eax, [esp + 0x1c]
push eax
lea edx, [esp + 0x34]
lea ecx, [esp + 0x38]
mov byte [esp + 0x54], 3
call fcn.004215a0
add esp, 4
lea ecx, [esp + 0x24]
push ecx
mov edx, eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x54], 4
call fcn.004215a0
add esp, 4
mov esi, eax
mov byte [esp + 0x50], 5
call fcn.004e8c6d
push eax
mov edx, esi
lea ecx, [esp + 0x30]
call fcn.00421510
add esp, 4
mov byte [esp + 0x50], 6
cmp dword [ebx + 0xc], 0
je 0x461d71
push 0
push eax
lea eax, [esp + 0x20]
push eax
lea eax, [ebx + 8]
push eax
call fcn.004216b0
mov byte [esp + 0x50], 5
mov edx, dword [esp + 0x2c]
add edx, 0xfffffff0
or ebx, 0xffffffff
lea ecx, [edx + 0xc]
mov eax, ebx
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x461d96
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 4
mov edx, dword [esp + 0x28]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x461db8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 3
mov edx, dword [esp + 0x34]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x461dda
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [edi - 0x10]
mov byte [esp + 0x50], 2
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x461df8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 1
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x461e1a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0
mov edx, dword [esp + 0x18]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x461e3c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [esp + 0x50], 0xffffffff
mov edx, dword [esp + 0x24]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x461e61
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
mov byte [esp + 0x17], 0
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x2c], edi
mov esi, dword [ebp + 8]
push str.threadId
mov ecx, esi
mov dword [esp + 0x54], 7
call fcn.00439e70
cmp eax, 0x5781c0
je 0x462105
push str.threadId
mov ecx, esi
call fcn.00439e70
mov al, byte [eax + 8]
cmp al, 1
je 0x461ebf
cmp al, 2
je 0x461ebf
cmp al, 5
je 0x461ebf
cmp al, 3
jne 0x462105
push str.threadId
mov ecx, esi
call fcn.00439e70
mov ecx, eax
call fcn.00439630
mov dword [esp + 0x28], eax
cmp eax, 0xffffffff
je 0x4620fb
mov edx, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x1c], eax
mov eax, str.setting_event_for_thread:
mov byte [esp + 0x50], 0xd
test eax, 0xffff0000
jne 0x461f20
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x461f2e
push esi
push eax
lea ecx, [esp + 0x24]
call fcn.00420bb0
jmp 0x461f2e
push str.setting_event_for_thread:
lea ecx, [esp + 0x20]
call fcn.00420650
mov byte [esp + 0x50], 0xe
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x18], eax
mov eax, str.killThread
mov byte [esp + 0x50], 0xf
test eax, 0xffff0000
jne 0x461f73
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x461f83
push esi
push eax
lea ecx, [esp + 0x20]
call fcn.00420bb0
jmp 0x461f83
push 0xa
push str.killThread
lea ecx, [esp + 0x20]
call fcn.00420c80
mov byte [esp + 0x50], 0x10
mov edx, dword [esp + 0x28]
lea ecx, [esp + 0x38]
call fcn.00421630
mov esi, eax
mov byte [esp + 0x50], 0x11
mov edx, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x24], eax
lea eax, [esp + 0x1c]
push eax
lea edx, [esp + 0x28]
lea ecx, [esp + 0x34]
mov byte [esp + 0x54], 0x12
call fcn.004215a0
add esp, 4
push esi
mov edx, eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x54], 0x13
call fcn.004215a0
add esp, 4
mov esi, dword [esp + 0x20]
mov byte [esp + 0x50], 0x14
cmp dword [esi + 0xc], 0
je 0x461fff
push 0
push eax
lea eax, [esp + 0x20]
push eax
lea eax, [esi + 8]
push eax
call fcn.004216b0
mov byte [esp + 0x50], 0x13
mov edx, dword [esp + 0x34]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x462021
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0x12
mov edx, dword [esp + 0x30]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x462043
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0x11
mov edx, dword [esp + 0x24]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x462065
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0x10
mov edx, dword [esp + 0x38]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x462087
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0xe
mov edx, dword [esp + 0x18]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4620a9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 7
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4620cb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [esp + 0x28]
call dword [sym.imp.KERNEL32.dll_SetEvent]
test eax, eax
jne 0x4620fb
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [esp + 0x30]
push str.killThread_SetEvent__d
push eax
call fcn.00421320
mov edi, dword [esp + 0x38]
add esp, 0xc
jmp 0x462241
mov byte [esp + 0x17], 1
jmp 0x462241
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x1c], eax
mov eax, str.error_threadId_not_exist
mov byte [esp + 0x50], 8
test eax, 0xffff0000
jne 0x462145
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x462153
push esi
push eax
lea ecx, [esp + 0x24]
call fcn.00420bb0
jmp 0x462153
push str.error_threadId_not_exist
lea ecx, [esp + 0x20]
call fcn.00420650
push str.killThread
lea ecx, [esp + 0x28]
mov byte [esp + 0x54], 9
call fcn.004204a0
mov byte [esp + 0x50], 0xa
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x28], eax
lea eax, [esp + 0x1c]
push eax
lea edx, [esp + 0x2c]
lea ecx, [esp + 0x3c]
mov byte [esp + 0x54], 0xb
call fcn.004215a0
add esp, 4
mov esi, dword [esp + 0x20]
mov byte [esp + 0x50], 0xc
cmp dword [esi + 0xc], 0
je 0x4621b9
push 2
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esi + 8]
push eax
call fcn.004216b0
mov byte [esp + 0x50], 0xb
mov edx, dword [esp + 0x38]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4621db
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0xa
mov edx, dword [esp + 0x28]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4621fd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 9
mov edx, dword [esp + 0x24]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46221f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 7
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x462241
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x4622e3
mov ecx, 8
mov word [eax], cx
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x1c], eax
cmp byte [esp + 0x17], 0
mov ecx, str.false
push edi
mov eax, str.true
cmove eax, ecx
push eax
lea eax, [esp + 0x24]
push str.__result__:__s____error__:___s__
push eax
mov byte [esp + 0x60], 0x15
call fcn.00421320
add esp, 0x10
lea ecx, [esp + 0x1c]
push 0x54befc
push 0x54b14c
call fcn.00421c00
mov esi, dword [esp + 0x1c]
push dword [esi - 0xc]
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov ecx, eax
test ecx, ecx
jne 0x4622bf
call fcn.004208f0
mov eax, dword [ebp + 0xc]
add esi, 0xfffffff0
mov dword [eax + 8], ecx
mov byte [esp + 0x50], 7
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4622e3
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
push str.OUT_time
lea ecx, [esp + 0x34]
call fcn.004204a0
push str.killThread
lea ecx, [esp + 0x20]
mov byte [esp + 0x54], 0x16
call fcn.004204a0
mov byte [esp + 0x50], 0x17
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x24], eax
mov byte [esp + 0x50], 0x18
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x28], eax
lea eax, [esp + 0x24]
push eax
lea edx, [esp + 0x2c]
lea ecx, [esp + 0x44]
mov byte [esp + 0x54], 0x19
call fcn.004215a0
add esp, 4
lea ecx, [esp + 0x30]
push ecx
mov edx, eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x54], 0x1a
call fcn.004215a0
add esp, 4
mov esi, eax
mov byte [esp + 0x50], 0x1b
call fcn.004e8c6d
push eax
mov edx, esi
lea ecx, [esp + 0x3c]
call fcn.00421510
add esp, 4
mov ecx, eax
mov eax, dword [esp + 0x20]
mov byte [esp + 0x50], 0x1c
cmp dword [eax + 0xc], 0
je 0x4623a5
push 0
push ecx
lea ecx, [esp + 0x24]
push ecx
add eax, 8
push eax
call fcn.004216b0
mov byte [esp + 0x50], 0x1b
mov edx, dword [esp + 0x38]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4623c7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0x1a
mov edx, dword [esp + 0x3c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4623e9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0x19
mov edx, dword [esp + 0x40]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46240b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0x18
mov edx, dword [esp + 0x28]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46242d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0x17
mov edx, dword [esp + 0x24]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46244f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0x16
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x462471
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 7
mov edx, dword [esp + 0x30]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x462493
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov dword [esp + 0x50], 0xffffffff
lea eax, [edi + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x4624b2
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8