Function at 0x72887121
Capabilities:
Create thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ecx
push ecx
mov ecx, eax
xor edx, edx
shr ecx, 2
inc edx
push ebx
and ecx, edx
shr eax, 5
xor ebx, ebx
and eax, edx
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 4], ecx
mov ecx, dword [0x7288a010]
cmp dword [ebp + 8], ebx
jne 0x7288714e
mov esi, ecx
cmp eax, ebx
jne 0x72887158
cmp esi, ecx
jbe 0x72887158
mov esi, ecx
cmp dword [ebp + 8], ebx
jne 0x72887165
cmp esi, 0x40
jbe 0x72887165
push 0x40
pop esi
cmp esi, edx
jne 0x7288717c
mov eax, dword [ebp + 0xc]
cmp eax, ebx
je 0x72887172
mov dword [eax], edx
mov eax, 0x7288a038
jmp 0x72887334
push edi
lea eax, [esi*8 + 0x28]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edi, eax
cmp edi, ebx
jne 0x728871a9
mov eax, dword [ebp + 0xc]
cmp eax, ebx
je 0x728871a2
mov dword [eax], ebx
xor eax, eax
jmp 0x72887333
mov eax, dword [ebp - 4]
push 0x14
mov dword [edi], esi
mov dword [edi + 4], eax
mov dword [edi + 8], ebx
mov dword [edi + 0xc], 1
mov dword [edi + 0x10], ebx
call fcn.72881c36
pop ecx
cmp eax, ebx
je 0x728871e1
lea ecx, [esi - 1]
mov dword [eax], ebx
mov dword [eax + 4], 2
mov byte [eax + 8], bl
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ecx
jmp 0x728871e3
xor eax, eax
mov dword [edi + 0x1c], eax
cmp dword [ebp - 4], ebx
je 0x72887233
push 0x10
call fcn.72881c36
pop ecx
cmp eax, ebx
je 0x72887207
lea ecx, [esi - 1]
mov dword [eax], ecx
mov dword [eax + 4], ebx
mov byte [eax + 8], bl
mov dword [eax + 0xc], ebx
jmp 0x72887209
xor eax, eax
push 0x10
mov dword [edi + 0x20], eax
call fcn.72881c36
pop ecx
cmp eax, ebx
je 0x7288722c
lea ecx, [esi - 1]
mov dword [eax], ecx
mov dword [eax + 4], 2
mov byte [eax + 8], bl
mov dword [eax + 0xc], ebx
jmp 0x7288722e
xor eax, eax
mov dword [edi + 0x24], eax
jmp 0x7288724e
cmp esi, dword [0x7288a010]
jbe 0x7288724b
push ebx
push ebx
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [edi + 0x28], eax
jmp 0x7288724e
mov dword [edi + 0x28], ebx
xor edx, edx
inc edx
cmp esi, edx
jbe 0x72887266
lea eax, [edi + 0x34]
lea ecx, [esi - 1]
mov dword [eax - 4], edi
mov dword [eax], ebx
add eax, 8
dec ecx
jne 0x7288725b
cmp dword [ebp - 4], ebx
je 0x72887328
mov eax, dword [edi]
mov dword [ebp - 8], eax
mov dword [ebp + 8], edx
cmp eax, edx
jbe 0x72887328
lea eax, [edi + 0x34]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push ebx
push ebx
add eax, 0xfffffffc
push eax
push 0x72887052
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp eax, ebx
je 0x728872b5
mov ecx, dword [ebp - 4]
inc dword [ebp + 8]
add dword [ebp - 4], 8
mov dword [ecx], eax
mov eax, dword [ebp + 8]
cmp eax, dword [ebp - 8]
jb 0x72887285
jmp 0x72887328
xor eax, eax
inc eax
cmp dword [ebp + 8], eax
jbe 0x728872f1
mov dword [edi + 8], eax
mov eax, dword [edi + 0x1c]
call fcn.72886fcc
mov eax, dword [ebp - 8]
cmp dword [ebp + 8], eax
jae 0x728872e0
sub eax, dword [ebp + 8]
mov ebx, eax
mov esi, dword [edi + 0x1c]
call fcn.72881d63
dec ebx
jne 0x728872d5
mov eax, edi
call fcn.728870bc
mov ebx, dword [edi + 0x1c]
call fcn.72881cec
xor ebx, ebx
mov esi, dword [edi + 0x20]
cmp esi, ebx
je 0x728872fd
call fcn.7288733f
mov esi, dword [edi + 0x24]
cmp esi, ebx
je 0x72887309
call fcn.7288733f
mov esi, dword [edi + 0x1c]
cmp esi, ebx
je 0x72887315
call fcn.7288733f
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
xor esi, esi
xor edi, edi
mov eax, dword [ebp + 0xc]
cmp eax, ebx
je 0x72887331
mov dword [eax], esi
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 8