Function at 0x428990
Capabilities:
Create thread

Disassembly:
push 0xffffffffffffffff
push 0x47b460
mov eax, dword fs:[0]
push eax
sub esp, 0x38
push ebx
push ebp
push esi
push edi
mov eax, dword [0x496028]
xor eax, esp
push eax
lea eax, [esp + 0x4c]
mov dword fs:[0], eax
mov edi, dword [esp + 0x5c]
mov esi, dword [edi + 0xc]
cmp esi, dword [edi + 0x10]
jbe 0x4289c9
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov ebp, dword [edi]
mov ebx, esi
lea ecx, [ecx]
mov esi, dword [edi + 0x10]
cmp dword [edi + 0xc], esi
jbe 0x4289de
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov eax, dword [edi]
test ebp, ebp
je 0x4289e8
cmp ebp, eax
je 0x4289ee
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
cmp ebx, esi
je 0x428abe
test ebp, ebp
jne 0x428a9f
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x428a11
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
cmp dword [ebx + 4], 0
je 0x428a80
test ebp, ebp
jne 0x428aa7
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x428a32
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov eax, dword [ebx + 4]
cmp dword [eax + 0x90], 0
je 0x428a80
test ebp, ebp
jne 0x428aaf
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x428a55
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov edi, dword [ebx + 4]
call fcn.00455eb0
test ebp, ebp
jne 0x428ab4
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x428a74
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov esi, dword [ebx + 4]
call fcn.0045b480
mov edi, dword [esp + 0x5c]
test ebp, ebp
jne 0x428ab9
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x428a97
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
add ebx, 0xc
jmp 0x4289d0
mov eax, dword [ebp]
jmp 0x428a06
mov eax, dword [ebp]
jmp 0x428a27
mov eax, dword [ebp]
jmp 0x428a4a
mov eax, dword [ebp]
jmp 0x428a69
mov eax, dword [ebp]
jmp 0x428a8c
push 4
call sub.mfc90u.dll_new
xor ecx, ecx
add esp, 4
cmp eax, ecx
je 0x428ad6
lea edx, [esp + 0x30]
mov dword [eax], edx
jmp 0x428ad8
xor eax, eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], ecx
mov dword [esp + 0x54], 1
mov esi, dword [edi + 0xc]
mov dword [esp + 0x18], ecx
cmp esi, dword [edi + 0x10]
jbe 0x428b02
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov ebp, dword [edi]
mov dword [esp + 0x20], ebp
mov ebx, esi
lea ebx, [ebx]
mov esi, dword [edi + 0x10]
cmp dword [edi + 0xc], esi
jbe 0x428b1e
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov eax, dword [edi]
test ebp, ebp
je 0x428b28
cmp ebp, eax
je 0x428b2e
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
cmp ebx, esi
je 0x428cc5
test ebp, ebp
jne 0x428c2d
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x428b51
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
cmp dword [ebx + 4], 0
je 0x428ca1
test ebp, ebp
jne 0x428c35
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x428b76
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov eax, dword [ebx + 4]
cmp dword [eax + 0x90], 0
je 0x428ca1
cmp dword [esp + 0x18], 0
jne 0x428be9
cmp dword [edi + 0x38], 0
je 0x428be1
mov esi, dword [edi + 0xc]
cmp esi, dword [edi + 0x10]
jbe 0x428ba1
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov eax, dword [edi]
test ebp, ebp
je 0x428bab
cmp ebp, eax
je 0x428bb1
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov ecx, dword [edi + 0x3c]
push ecx
mov ecx, ebx
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [edi + 0x38]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push 0xa
call ecx
cmp eax, 0xffffffff
jne 0x428be1
mov edx, dword [edi + 0x48]
cmp edx, eax
je 0x428cc5
mov dword [esp + 0x18], 1
test ebp, ebp
jne 0x428c3d
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x428c00
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov eax, dword [ebx + 4]
mov ecx, dword [edi + 0x40]
mov edx, dword [ecx*4 + 0x4825c8]
push 0
push 0
push eax
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, dword [esp + 0x3c]
mov dword [esp + 0x1c], eax
test esi, esi
jne 0x428c42
xor edx, edx
jmp 0x428c4b
mov eax, dword [ebp]
jmp 0x428b46
mov eax, dword [ebp]
jmp 0x428b6b
mov eax, dword [ebp]
jmp 0x428bf5
mov edx, dword [esp + 0x44]
sub edx, esi
sar edx, 2
mov ecx, dword [esp + 0x40]
mov ebp, ecx
sub ebp, esi
sar ebp, 2
cmp ebp, edx
jae 0x428c74
mov dword [ecx], eax
add ecx, 4
mov byte [esp + 0x15], 0
mov byte [esp + 0x16], 0
mov byte [esp + 0x17], 0
mov dword [esp + 0x40], ecx
jmp 0x428c9d
mov edi, ecx
cmp esi, ecx
jbe 0x428c80
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov eax, dword [esp + 0x30]
push edi
push eax
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x34]
push ecx
lea eax, [esp + 0x40]
call fcn.0042b670
mov edi, dword [esp + 0x5c]
mov ebp, dword [esp + 0x20]
test ebp, ebp
jne 0x428cc0
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x428cb8
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
add ebx, 0xc
jmp 0x428b10
mov eax, dword [ebp]
jmp 0x428cad
mov eax, dword [esp + 0x40]
sub eax, dword [esp + 0x3c]
sar eax, 2
test eax, eax
jbe 0x428d63
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
push 0xffffffffffffffff
push 1
sub eax, ecx
push ecx
sar eax, 2
push eax
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov esi, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
cmp esi, eax
jbe 0x428d07
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov eax, dword [esp + 0x40]
mov edi, dword [esp + 0x30]
mov ebx, dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov ebp, eax
cmp dword [esp + 0x3c], eax
jbe 0x428d1b
call ebx
test edi, edi
je 0x428d25
cmp edi, dword [esp + 0x30]
je 0x428d27
call ebx
cmp esi, ebp
je 0x428d63
test edi, edi
jne 0x428d5b
call ebx
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x428d3a
call ebx
mov edx, dword [esi]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
jne 0x428d5f
call ebx
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x428d52
call ebx
mov eax, dword [esp + 0x40]
add esi, 4
jmp 0x428d11
mov eax, dword [edi]
jmp 0x428d33
mov eax, dword [edi]
jmp 0x428d4b
mov edi, dword [esp + 0x5c]
lea esi, [edi + 0x18]
push esi
call fcn.00426e70
mov eax, dword [esi]
mov edx, dword [eax + 0x1c]
mov ecx, esi
mov dword [edi + 0x40], 0xffffffff
call edx
mov eax, dword [esp + 0x3c]
xor esi, esi
cmp eax, esi
je 0x428d93
push eax
call sub.mfc90u.dll_delete
add esp, 4
mov eax, dword [esp + 0x30]
push eax
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], esi
call sub.mfc90u.dll_delete
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x4c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x44
ret 4