Function at 0x407fb0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push ebx
lea eax, [ebp - 8]
sub esp, 0x84
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x34], 0x4bd9f0
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x30], 0x4be850
mov dword [ebp - 0x28], 0x408668
mov dword [ebp - 0x24], esp
mov dword [esp], eax
call fcn.00414b70
mov eax, 1
lock xadd dword [0x4d0020], eax
mov edx, dword [ebp - 0x50]
add eax, 1
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x54], eax
mov eax, dword [ebp + 0xc]
mov dword [edx + 0x58], 0
mov dword [edx + 0x5c], 0
mov dword [edx + 0x60], 0
mov dword [edx + 0x64], 0
mov dword [edx], eax
mov eax, dword [ebp + 0x10]
mov dword [edx + 0x68], 0
mov dword [edx + 0x70], 0
mov dword [edx + 0x74], 0
mov dword [edx + 0x7c], 0
mov dword [edx + 4], eax
mov eax, dword [ebp + 0x14]
mov dword [edx + 0x80], 0
mov dword [edx + 0x84], 0
mov byte [edx + 0x88], 0
mov dword [edx + 0xa4], 0
mov dword [edx + 8], eax
mov eax, dword [ebp + 0x1c]
mov dword [edx + 0xa8], 0
mov dword [edx + 0xac], 0
mov dword [edx + 0xb0], 0
mov dword [edx + 0xb4], 0
mov dword [edx + 0x6c], eax
mov eax, dword [ebp + 0x18]
mov byte [edx + 0xb8], 0
mov byte [edx + 0xb9], 0
mov byte [edx + 0xba], 0
mov dword [edx + 0x78], eax
mov eax, dword [ebp + 0x28]
test eax, eax
je 0x408410
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp + 0x28]
mov dword [ebp - 0x48], 1
call fcn.004098d0
test al, al
jne 0x408220
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x408272
mov eax, dword [ebp - 0x50]
lea ecx, [eax + 0xbc]
mov dword [ebp - 0x58], ecx
mov dword [esp], 0x18
mov dword [ebp - 0x48], 1
call fcn.004bcd80
mov ecx, dword [ebp - 0x58]
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [esp], ecx
mov ecx, eax
call fcn.004afea0
mov eax, dword [ebp - 0x50]
sub esp, 4
add dword [eax + 0xc4], 1
cmp dword [ebp - 0x54], 1
je 0x4084d0
mov eax, dword [ebp + 0x18]
test eax, eax
je 0x4081c4
mov dword [esp], 0x4d0024
mov dword [ebp - 0x48], 1
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [0x4d0040]
sub esp, 4
test ecx, ecx
je 0x4084f0
mov edx, dword [ecx + 4]
mov eax, dword [ecx + 8]
mov ebx, dword [ebp - 0x50]
cmp eax, edx
mov dword [ebp - 0xc], ebx
je 0x408524
test edx, edx
je 0x408197
mov eax, dword [ebp - 0x50]
mov dword [edx], eax
add edx, 4
mov dword [ecx + 4], edx
test byte [ebp + 0x18], 1
jne 0x4084a0
test byte [ebp + 0x18], 4
jne 0x408200
mov dword [esp], 0x4d0024
mov dword [ebp - 0x48], 1
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
sub esp, 4
mov eax, dword [ebp - 0x10]
test eax, eax
mov dword [ebp - 0x50], eax
je 0x4081e9
mov ecx, dword [ebp - 0x50]
call fcn.004094d0
mov dword [esp + 4], 0x348
mov eax, dword [ebp - 0x50]
mov dword [esp], eax
call fcn.004bcd50
lea eax, [ebp - 0x4c]
mov dword [esp], eax
call fcn.00414c00
mov ebx, dword [ebp - 4]
leave
ret 0x28
mov dword [esp], 0x407950
mov dword [ebp - 0x48], 1
call dword [0x4c10ac]
mov ebx, dword [ebp - 0x50]
mov dword [ebx + 0x80], eax
jmp 0x4081ad
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], 0
mov ebx, eax
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0xc]
cmp ebx, eax
je 0x4080eb
test eax, eax
je 0x40825e
mov ecx, eax
mov dword [ebp - 0x60], eax
call fcn.004094d0
mov dword [esp + 4], 0x348
mov eax, dword [ebp - 0x60]
mov dword [esp], eax
call fcn.004bcd50
mov ebx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x50]
mov dword [eax + 0xc], ebx
mov ebx, dword [ebp - 0x58]
test ebx, ebx
jne 0x4080f6
mov eax, dword [ebp - 0x50]
add eax, 0x8c
mov dword [esp], eax
mov dword [ebp - 0x48], 1
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, dword [sym.imp.KERNEL32.dll_CreateSemaphoreW]
sub esp, 4
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x58], ecx
call ecx
mov ebx, dword [ebp - 0x50]
sub esp, 0x10
test eax, eax
mov dword [ebx + 0xa4], eax
je 0x4085d0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x48], 1
call dword [ebp - 0x58]
mov ebx, dword [ebp - 0x50]
sub esp, 0x10
test eax, eax
mov dword [ebx + 0xa8], eax
je 0x408600
mov eax, dword [ebp - 0x50]
mov ecx, dword [eax + 0xa4]
test ecx, ecx
je 0x408363
lea eax, [ebp - 0xc]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x50]
mov dword [esp + 8], 0x407600
mov dword [esp + 4], 0x10000
mov dword [esp], 0
mov dword [esp + 0xc], eax
mov dword [ebp - 0x48], 1
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ebx, dword [ebp - 0x50]
sub esp, 0x18
test eax, eax
mov dword [ebx + 0x84], eax
je 0x408640
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [esp], str.dbghelp.dll
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x58], eax
call eax
mov ebx, dword [ebp - 0x50]
sub esp, 4
test eax, eax
mov dword [ebx + 0x64], eax
je 0x4083a2
mov dword [esp + 4], str.MiniDumpWriteDump
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, dword [ebp - 0x50]
sub esp, 8
mov dword [ebx + 0x68], eax
mov dword [esp], str.rpcrt4.dll
mov dword [ebp - 0x48], 1
call dword [ebp - 0x58]
mov ebx, dword [ebp - 0x50]
sub esp, 4
test eax, eax
mov dword [ebx + 0x70], eax
je 0x4083da
mov dword [esp + 4], str.UuidCreate
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, dword [ebp - 0x50]
sub esp, 8
mov dword [ebx + 0x74], eax
mov eax, dword [ebp - 0x50]
lea ecx, [eax + 0x10]
mov eax, dword [ebp + 8]
mov dword [esp], eax
mov dword [ebp - 0x48], 1
call fcn.004a8c50
mov ebx, dword [ebp - 0x50]
sub esp, 4
mov eax, dword [ebx + 0x10]
mov ecx, ebx
mov dword [ebx + 0x58], eax
call fcn.00407bf0
jmp 0x4080f6
mov eax, dword [ebp + 0x20]
test eax, eax
je 0x408540
mov dword [esp], 0x348
mov dword [ebp - 0x48], 1
call fcn.004bcd80
mov ebx, eax
mov eax, dword [ebp + 0x2c]
mov ecx, ebx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0x6c]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x20]
mov dword [esp], eax
mov dword [ebp - 0x48], 2
mov dword [ebp - 0x5c], ebx
call fcn.004092f0
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x5c]
sub esp, 0xc
cmp eax, ecx
mov dword [ebp + 0x28], ecx
je 0x4080cb
test ecx, ecx
je 0x408488
call fcn.004094d0
mov dword [esp + 4], 0x348
mov eax, dword [ebp + 0x28]
mov dword [esp], eax
call fcn.004bcd50
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x10], eax
mov dword [ebp + 0x28], eax
jmp 0x4080cb
mov dword [esp], 0x407720
mov dword [ebp - 0x48], 1
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
sub esp, 4
test byte [ebp + 0x18], 4
mov ebx, dword [ebp - 0x50]
mov dword [ebx + 0x7c], eax
je 0x4081ad
jmp 0x408200
mov dword [esp], 0x4d0024
mov dword [ebp - 0x48], 1
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
sub esp, 4
jmp 0x40814e
mov dword [esp], 0xc
mov dword [ebp - 0x48], 1
call fcn.004bcd80
mov ebx, dword [ebp - 0x50]
mov dword [eax], 0
mov ecx, eax
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [0x4d0040], eax
mov dword [ebp - 0xc], ebx
lea eax, [ebp - 0xc]
mov dword [esp], eax
mov dword [ebp - 0x48], 1
call fcn.004a2120
sub esp, 4
jmp 0x40819d
mov eax, dword [ebp + 0x24]
test eax, eax
je 0x4080e2
mov dword [esp], 0x348
mov dword [ebp - 0x48], 1
call fcn.004bcd80
mov ebx, eax
mov eax, dword [ebp + 0x2c]
mov ecx, ebx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0x6c]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x24]
mov dword [esp], eax
mov dword [ebp - 0x48], 3
mov dword [ebp - 0x64], ebx
call fcn.00409430
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x64]
sub esp, 0xc
cmp eax, ecx
mov dword [ebp + 0x28], ecx
je 0x4080cb
test ecx, ecx
je 0x4085b8
call fcn.004094d0
mov dword [esp + 4], 0x348
mov eax, dword [ebp + 0x28]
mov dword [esp], eax
call fcn.004bcd50
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x10], eax
mov dword [ebp + 0x28], eax
jmp 0x4080cb
mov dword [esp + 8], 0xd3
mov dword [esp + 4], str.src_client_windows_handler_exception_handler.cc
mov dword [esp], str.handler_start_semaphore____NULL
mov dword [ebp - 0x48], 1
call fcn.00416550
jmp 0x4082cb
mov dword [esp + 8], 0xd6
mov dword [esp + 4], str.src_client_windows_handler_exception_handler.cc
mov dword [esp], str.handler_finish_semaphore____NULL
mov dword [ebp - 0x48], 1
call fcn.00416550
mov eax, dword [ebp - 0x50]
mov edx, dword [eax + 0xa8]
test edx, edx
je 0x408363
jmp 0x408308
mov dword [esp + 8], 0xe2
mov dword [esp + 4], str.src_client_windows_handler_exception_handler.cc
mov dword [esp], str.handler_thread____NULL
mov dword [ebp - 0x48], 1
call fcn.00416550
jmp 0x408363