Function at 0x42b2fb
Capabilities:
Create thread

Disassembly:
push 0x78
mov eax, 0x4401a3
call fcn.004126dd
mov edi, ecx
xor ebx, ebx
cmp byte [edi + 8], bl
je 0x42b512
mov esi, 0x44a2e8
mov eax, esi
call fcn.0040ab20
test al, al
je 0x42b376
push esi
mov ecx, edi
call fcn.0040aa00
cmp byte [eax + 8], 4
jne 0x42b376
push esi
mov ecx, edi
call fcn.0040aa00
push eax
lea ecx, [ebp - 0x4c]
call fcn.00409e40
lea ecx, [ebp - 0x30]
push ecx
mov dword [ebp - 4], ebx
call fcn.004256a3
pop ecx
push dword [ebp + 8]
mov byte [ebp - 4], 1
call fcn.00401938
push ebx
push 1
lea esi, [ebp - 0x30]
call fcn.0040115a
or dword [ebp - 4], 0xffffffff
push ebx
push 1
lea ecx, [ebp - 0x4c]
call fcn.0040173a
mov eax, dword [ebp + 8]
cmp dword [eax + 0x14], ebx
jne 0x42b385
xor eax, eax
jmp 0x42b652
mov esi, 0x449f14
mov eax, esi
mov ecx, edi
call fcn.0040ab20
test al, al
je 0x42b3f3
push esi
mov ecx, edi
call fcn.0040aa00
cmp byte [eax + 8], 4
jne 0x42b3f3
push esi
mov ecx, edi
call fcn.0040aa00
push eax
lea ecx, [ebp - 0x84]
call fcn.00409e40
lea ecx, [ebp - 0x68]
push ecx
mov dword [ebp - 4], 2
call fcn.004256a3
pop ecx
push dword [ebp + 0xc]
mov byte [ebp - 4], 3
call fcn.00401938
push ebx
push 1
lea esi, [ebp - 0x68]
call fcn.0040115a
or dword [ebp - 4], 0xffffffff
push ebx
push 1
lea ecx, [ebp - 0x84]
call fcn.0040173a
mov esi, str.whsc
mov eax, esi
mov ecx, edi
call fcn.0040ab20
test al, al
je 0x42b42c
push esi
mov ecx, edi
call fcn.0040aa00
mov ecx, eax
call fcn.0040abb0
test al, al
je 0x42b42c
push esi
mov ecx, edi
call fcn.0040aa00
mov esi, eax
call fcn.00409f50
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
mov esi, 0x449f0c
mov eax, esi
mov ecx, edi
call fcn.0040ab20
test al, al
je 0x42b465
push esi
mov ecx, edi
call fcn.0040aa00
mov ecx, eax
call fcn.0040abb0
test al, al
je 0x42b465
push esi
mov ecx, edi
call fcn.0040aa00
mov esi, eax
call fcn.00409f50
mov ecx, dword [ebp + 0x18]
mov dword [ecx], eax
mov esi, 0x44a2ec
mov eax, esi
mov ecx, edi
call fcn.0040ab20
test al, al
je 0x42b49e
push esi
mov ecx, edi
call fcn.0040aa00
mov ecx, eax
call fcn.0040abb0
test al, al
je 0x42b49e
push esi
mov ecx, edi
call fcn.0040aa00
mov esi, eax
call fcn.00409f50
mov ecx, dword [ebp + 0x1c]
mov dword [ecx], eax
mov esi, 0x44a2f0
mov eax, esi
mov ecx, edi
call fcn.0040ab20
test al, al
je 0x42b4d7
push esi
mov ecx, edi
call fcn.0040aa00
mov ecx, eax
call fcn.0040abb0
test al, al
je 0x42b4d7
push esi
mov ecx, edi
call fcn.0040aa00
mov esi, eax
call fcn.00409f50
mov ecx, dword [ebp + 0x20]
mov dword [ecx], eax
mov esi, 0x449f10
mov eax, esi
mov ecx, edi
call fcn.0040ab20
test al, al
je 0x42b51e
push esi
mov ecx, edi
call fcn.0040aa00
mov ecx, eax
call fcn.0040ac40
test al, al
je 0x42b51e
push esi
mov ecx, edi
call fcn.0040aa00
mov esi, eax
call fcn.0040a110
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
jmp 0x42b51e
mov eax, dword [ebp + 8]
cmp dword [eax + 0x14], ebx
je 0x42b37e
mov esi, dword [ebp + 8]
push 0x44a2f4
mov eax, esi
call fcn.00403f05
mov edi, eax
neg edi
sbb edi, edi
inc edi
mov eax, edi
dec eax
push 0x50
je 0x42b562
call fcn.00410fd3
pop ecx
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 5
cmp eax, ebx
je 0x42b585
cmp dword [esi + 0x18], 8
jb 0x42b55a
mov esi, dword [esi + 4]
jmp 0x42b55d
add esi, 4
push ebx
push ebx
push esi
jmp 0x42b57d
call fcn.00410fd3
pop ecx
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 4
cmp eax, ebx
je 0x42b585
push ebx
push ebx
push str.STATIC
push eax
call fcn.00422b99
jmp 0x42b587
xor eax, eax
or dword [ebp - 4], 0xffffffff
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.00422695
mov eax, dword [ebp + 0x10]
mov esi, dword [eax]
and esi, 0xfffffbff
dec edi
mov dword [ebp - 0x14], esi
je 0x42b5d8
mov eax, dword [ebp + 0xc]
cmp dword [eax + 0x18], 8
jb 0x42b5b4
mov eax, dword [eax + 4]
jmp 0x42b5b7
add eax, 4
mov ecx, dword [ebp + 0x20]
push ebx
push dword [ecx]
mov ecx, dword [ebp + 0x1c]
push dword [ecx]
mov ecx, dword [ebp + 0x18]
push dword [ecx]
mov ecx, dword [ebp + 0x14]
push dword [ecx]
push esi
mov esi, dword [ebp - 0x10]
push eax
call fcn.004229be
jmp 0x42b64f
push 0x2c
call fcn.00410fd3
mov edi, eax
pop ecx
cmp edi, ebx
je 0x42b5f3
lea esi, [edi + 4]
call fcn.00401903
mov esi, dword [ebp - 0x14]
jmp 0x42b5f5
xor edi, edi
lea eax, [edi + 4]
push eax
mov eax, dword [ebp + 0xc]
call fcn.00401938
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 0x14]
mov dword [edi], eax
mov ecx, dword [ecx]
mov dword [edi + 0x20], ecx
mov ecx, dword [ebp + 0x18]
mov ecx, dword [ecx]
push ebx
mov dword [edi + 0x24], ecx
mov ecx, dword [ebp + 0x20]
mov dword [edi + 0x28], esi
push dword [ecx]
mov ecx, dword [ebp + 0x1c]
push dword [ecx]
mov esi, eax
push ebx
push ebx
push ebx
push 0x44668c
call fcn.004229be
push ebx
push ebx
push edi
push 0x42a64e
push ebx
mov eax, esi
push ebx
mov dword [eax + 0x34], edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x10]
call fcn.004127b5
ret