Function at 0x411ff2
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], esp
push 0x10
push 0x40
xor eax, eax
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
nop
nop
cmp dword [ebp - 0x18], esp
je 0x412051
push 0x2b
push 0x426cb29
push 6
call fcn.004e0834
add esp, 0xc
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x41269c
push VariantClear
push 0
mov ebx, dword [ebp + 0x14]
mov eax, dword [ebx]
test eax, eax
jne 0x412073
mov eax, 0x51934a
push eax
push 1
mov ebx, 0x130
call fcn.004e4b50
add esp, 0x10
push eax
push 0
push dword [ebp - 4]
call fcn.004126aa
push VariantClear
push 0
mov ebx, dword [ebp + 0x1c]
mov eax, dword [ebx]
test eax, eax
jne 0x4120a9
mov eax, 0x51934a
push eax
push 1
mov ebx, 0x130
call fcn.004e4b50
add esp, 0x10
push eax
push 4
push dword [ebp - 4]
call fcn.004126aa
push VariantClear
push 0
mov ebx, dword [ebp + 0x24]
mov eax, dword [ebx]
test eax, eax
jne 0x4120df
mov eax, 0x51934a
push eax
push 1
mov ebx, 0x130
call fcn.004e4b50
add esp, 0x10
push eax
push 8
push dword [ebp - 4]
call fcn.004126aa
push VariantClear
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x412115
mov eax, 0x51934a
push eax
push 1
mov ebx, 0x130
call fcn.004e4b50
add esp, 0x10
push eax
push 0xc
push dword [ebp - 4]
call fcn.004126aa
lea eax, [ebp - 8]
mov ebx, eax
mov ecx, 0
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 3
jg 0x4121ce
fild dword [ebp - 8]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fmul qword [0x519326]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
call fcn.0040116b
push eax
push dword [ebp - 4]
call fcn.00402f7f
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jle 0x412180
inc dword [ebp - 0xc]
fild dword [ebp - 8]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fmul qword [0x519326]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
call fcn.0040116b
push eax
push dword [ebp - 4]
call fcn.00402f7f
mov dword [ebp - 0x28], eax
fild dword [ebp - 0xc]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fild dword [ebp - 0x28]
fstp qword [ebp - 0x38]
fadd qword [ebp - 0x38]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
call fcn.0040116b
mov dword [ebp - 0xc], eax
pop ebx
pop ecx
inc ecx
jmp 0x412140
add esp, 8
fild dword [ebp - 0xc]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0x6187a4]
fstp qword [ebp - 0x24]
mov dword [ebp - 0x28], esp
fld qword [ebp - 0x24]
call fcn.0040116b
push eax
push 0x40
xor eax, eax
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
nop
nop
cmp dword [ebp - 0x28], esp
je 0x41221a
push 0x323
push 0x426cb29
push 6
call fcn.004e0834
add esp, 0xc
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x412670
push reloc.OLEAUT32.dll_SysStringLen
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x9dc
call fcn.004e3630
add esp, 0x10
push eax
push 0
push dword [ebp - 0x10]
call fcn.004126aa
push dword [ebp + 0xc]
push 4
push dword [ebp - 0x10]
call fcn.004126aa
mov dword [ebp - 0xc], 0x18
push 0
push dword [ebp - 4]
call fcn.00402f7f
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jle 0x41234e
fild dword [ebp - 0x10]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fild dword [ebp - 0xc]
fstp qword [ebp - 0x24]
fadd qword [ebp - 0x24]
fstp qword [ebp - 0x2c]
push dword [ebp + 0x14]
call fcn.004126d0
mov dword [ebp - 0x30], eax
push 0
push dword [ebp - 4]
call fcn.00402f7f
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], esp
push dword [ebp - 0x34]
push dword [ebp - 0x30]
fld qword [ebp - 0x2c]
call fcn.0040116b
push eax
xor eax, eax
call dword [0xb5f0fe]
add esp, 0xc
nop
nop
cmp dword [ebp - 0x38], esp
je 0x4122ed
push 0x4a8
push 0x426cb29
push 6
call fcn.004e0834
add esp, 0xc
fild dword [ebp - 0x10]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fild dword [ebp - 0xc]
fstp qword [ebp - 0x24]
fadd qword [ebp - 0x24]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x2c]
call fcn.0040116b
push eax
push 8
push dword [ebp - 0x10]
call fcn.004126aa
push 0
push dword [ebp - 4]
call fcn.00402f7f
mov dword [ebp - 0x18], eax
fild dword [ebp - 0xc]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fild dword [ebp - 0x18]
fstp qword [ebp - 0x28]
fadd qword [ebp - 0x28]
fadd qword [0x51931e]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
call fcn.0040116b
mov dword [ebp - 0xc], eax
push 4
push dword [ebp - 4]
call fcn.00402f7f
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jle 0x412434
fild dword [ebp - 0x10]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fild dword [ebp - 0xc]
fstp qword [ebp - 0x24]
fadd qword [ebp - 0x24]
fstp qword [ebp - 0x2c]
push dword [ebp + 0x1c]
call fcn.004126d0
mov dword [ebp - 0x30], eax
push 4
push dword [ebp - 4]
call fcn.00402f7f
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], esp
push dword [ebp - 0x34]
push dword [ebp - 0x30]
fld qword [ebp - 0x2c]
call fcn.0040116b
push eax
xor eax, eax
call dword [0xb5f0fe]
add esp, 0xc
nop
nop
cmp dword [ebp - 0x38], esp
je 0x4123d3
push 0x611
push 0x426cb29
push 6
call fcn.004e0834
add esp, 0xc
fild dword [ebp - 0x10]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fild dword [ebp - 0xc]
fstp qword [ebp - 0x24]
fadd qword [ebp - 0x24]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x2c]
call fcn.0040116b
push eax
push 0xc
push dword [ebp - 0x10]
call fcn.004126aa
push 4
push dword [ebp - 4]
call fcn.00402f7f
mov dword [ebp - 0x18], eax
fild dword [ebp - 0xc]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fild dword [ebp - 0x18]
fstp qword [ebp - 0x28]
fadd qword [ebp - 0x28]
fadd qword [0x51931e]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
call fcn.0040116b
mov dword [ebp - 0xc], eax
push 8
push dword [ebp - 4]
call fcn.00402f7f
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jle 0x41251a
fild dword [ebp - 0x10]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fild dword [ebp - 0xc]
fstp qword [ebp - 0x24]
fadd qword [ebp - 0x24]
fstp qword [ebp - 0x2c]
push dword [ebp + 0x24]
call fcn.004126d0
mov dword [ebp - 0x30], eax
push 8
push dword [ebp - 4]
call fcn.00402f7f
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], esp
push dword [ebp - 0x34]
push dword [ebp - 0x30]
fld qword [ebp - 0x2c]
call fcn.0040116b
push eax
xor eax, eax
call dword [0xb5f0fe]
add esp, 0xc
nop
nop
cmp dword [ebp - 0x38], esp
je 0x4124b9
push 0x77a
push 0x426cb29
push 6
call fcn.004e0834
add esp, 0xc
fild dword [ebp - 0x10]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fild dword [ebp - 0xc]
fstp qword [ebp - 0x24]
fadd qword [ebp - 0x24]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x2c]
call fcn.0040116b
push eax
push 0x10
push dword [ebp - 0x10]
call fcn.004126aa
push 8
push dword [ebp - 4]
call fcn.00402f7f
mov dword [ebp - 0x18], eax
fild dword [ebp - 0xc]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fild dword [ebp - 0x18]
fstp qword [ebp - 0x28]
fadd qword [ebp - 0x28]
fadd qword [0x51931e]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
call fcn.0040116b
mov dword [ebp - 0xc], eax
push 0xc
push dword [ebp - 4]
call fcn.00402f7f
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jle 0x412600
fild dword [ebp - 0x10]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fild dword [ebp - 0xc]
fstp qword [ebp - 0x24]
fadd qword [ebp - 0x24]
fstp qword [ebp - 0x2c]
push dword [ebp + 0x2c]
call fcn.004126d0
mov dword [ebp - 0x30], eax
push 0xc
push dword [ebp - 4]
call fcn.00402f7f
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], esp
push dword [ebp - 0x34]
push dword [ebp - 0x30]
fld qword [ebp - 0x2c]
call fcn.0040116b
push eax
xor eax, eax
call dword [0xb5f0fe]
add esp, 0xc
nop
nop
cmp dword [ebp - 0x38], esp
je 0x41259f
push 0x8e3
push 0x426cb29
push 6
call fcn.004e0834
add esp, 0xc
fild dword [ebp - 0x10]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fild dword [ebp - 0xc]
fstp qword [ebp - 0x24]
fadd qword [ebp - 0x24]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x2c]
call fcn.0040116b
push eax
push 0x14
push dword [ebp - 0x10]
call fcn.004126aa
push 0xc
push dword [ebp - 4]
call fcn.00402f7f
mov dword [ebp - 0x18], eax
fild dword [ebp - 0xc]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fild dword [ebp - 0x18]
fstp qword [ebp - 0x28]
fadd qword [ebp - 0x28]
fadd qword [0x51931e]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
call fcn.0040116b
mov dword [ebp - 0xc], eax
push reloc.OLEAUT32.dll_SysStringLen
push 0
push 0x41284e
push 1
mov ebx, 0x9dc
call fcn.004e3630
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [ebp + 0x34]
call fcn.004126ec
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], esp
push dword [ebp - 0x1c]
push 0
push dword [ebp - 0x10]
push dword [ebp - 0x18]
push 0
push 0
xor eax, eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
cmp dword [ebp - 0x20], esp
je 0x41266d
push 0xa0e
push 0x426cb29
push 6
call fcn.004e0834
add esp, 0xc
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], esp
push dword [ebp - 4]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
nop
nop
cmp dword [ebp - 0x18], esp
je 0x41269c
push 0xa2c
push 0x426cb29
push 6
call fcn.004e0834
add esp, 0xc
mov eax, dword [ebp - 0x14]
jmp 0x4126a4
mov esp, ebp
pop ebp
ret 0x34