Function at 0x411b80
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push esi
sub esp, 0x94
mov eax, dword [ebp + 8]
mov ecx, 0
lea edx, [0x411390]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0xc]
add eax, 0x2c
mov esi, dword [ebp - 0xc]
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], eax
mov dword [ebp - 0x18], ecx
call fcn.0043d8ba
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 8], eax
mov dword [ebp - 0x14], 0xbca3cef
mov eax, dword [ebp - 0x14]
mov ecx, eax
sub ecx, 0x5fb54b7a
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], ecx
jg 0x411da6
jmp 0x411c04
mov eax, dword [ebp - 0x1c]
sub eax, 0x56945a70
mov dword [ebp - 0x24], eax
jg 0x411d90
jmp 0x411c1a
mov eax, dword [ebp - 0x1c]
sub eax, 0x352ec37a
mov dword [ebp - 0x28], eax
jg 0x411d7a
jmp 0x411c30
mov eax, dword [ebp - 0x1c]
sub eax, 0xbca3cee
mov dword [ebp - 0x2c], eax
jg 0x411d64
jmp 0x411c46
mov eax, dword [ebp - 0x1c]
sub eax, 0xb67469e7
mov dword [ebp - 0x30], eax
jg 0x411c72
jmp 0x411c5c
mov eax, dword [ebp - 0x1c]
sub eax, 0xaed2e2bb
mov dword [ebp - 0x34], eax
je 0x411e8b
jmp 0x411dbc
mov eax, dword [ebp - 0x1c]
sub eax, 0xbe995914
mov dword [ebp - 0x38], eax
jg 0x411c9e
jmp 0x411c88
mov eax, dword [ebp - 0x1c]
sub eax, 0xb67469e8
mov dword [ebp - 0x3c], eax
je 0x411df8
jmp 0x411dbc
mov eax, dword [ebp - 0x1c]
sub eax, 0xe85e846c
mov dword [ebp - 0x40], eax
jg 0x411cca
jmp 0x411cb4
mov eax, dword [ebp - 0x1c]
sub eax, 0xbe995915
mov dword [ebp - 0x44], eax
je 0x411deb
jmp 0x411dbc
mov eax, dword [ebp - 0x1c]
sub eax, 0xfd57a3b0
mov dword [ebp - 0x48], eax
jg 0x411d4e
jmp 0x411ce0
mov eax, dword [ebp - 0x1c]
sub eax, 0xf771866a
mov dword [ebp - 0x4c], eax
jg 0x411d38
jmp 0x411cf6
mov eax, dword [ebp - 0x1c]
sub eax, 0xe85e846d
mov dword [ebp - 0x50], eax
je 0x411e82
jmp 0x411d0c
mov eax, dword [ebp - 0x1c]
sub eax, 0xe99c4da9
mov dword [ebp - 0x54], eax
je 0x411eb2
jmp 0x411d22
mov eax, dword [ebp - 0x1c]
sub eax, 0xf569577e
mov dword [ebp - 0x58], eax
je 0x411e2c
jmp 0x411dbc
mov eax, dword [ebp - 0x1c]
sub eax, 0xf771866b
mov dword [ebp - 0x5c], eax
je 0x411ddf
jmp 0x411dbc
mov eax, dword [ebp - 0x1c]
sub eax, 0xfd57a3b1
mov dword [ebp - 0x60], eax
je 0x411e76
jmp 0x411dbc
mov eax, dword [ebp - 0x1c]
sub eax, 0xbca3cef
mov dword [ebp - 0x64], eax
je 0x411dc1
jmp 0x411dbc
mov eax, dword [ebp - 0x1c]
sub eax, 0x352ec37b
mov dword [ebp - 0x68], eax
je 0x411e20
jmp 0x411dbc
mov eax, dword [ebp - 0x1c]
sub eax, 0x56945a71
mov dword [ebp - 0x6c], eax
je 0x411e55
jmp 0x411dbc
mov eax, dword [ebp - 0x1c]
sub eax, 0x5fb54b7b
mov dword [ebp - 0x70], eax
je 0x411e48
jmp 0x411dbc
jmp 0x411ecd
mov eax, 0xbe995915
mov ecx, 0xf771866b
mov edx, dword [ebp - 8]
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x14], eax
jmp 0x411ecd
mov dword [ebp - 0x14], 0xf569577e
jmp 0x411ecd
mov eax, 0xb67469e8
mov dword [ebp - 0x14], eax
jmp 0x411ecd
mov eax, dword [ebp - 0x10]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov ecx, 0x352ec37b
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x74], eax
jmp 0x411ecd
mov dword [ebp - 0x14], 0xf569577e
jmp 0x411ecd
mov eax, 0xe85e846d
mov ecx, 0x5fb54b7b
cmp dword [ebp - 0x10], 0
cmovne eax, ecx
mov dword [ebp - 0x14], eax
jmp 0x411ecd
mov eax, 0x56945a71
mov dword [ebp - 0x14], eax
jmp 0x411ecd
mov eax, dword [ebp - 0x10]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov ecx, 0xfd57a3b1
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x78], eax
jmp 0x411ecd
mov dword [ebp - 0x14], 0xe85e846d
jmp 0x411ecd
add esp, 0x94
pop esi
pop ebp
ret
mov eax, dword [ebp - 0x10]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call eax
sub esp, 8
mov dword [ebp - 0x14], 0xb67469e8
mov dword [ebp - 0x7c], eax
jmp 0x411ecd
mov eax, dword [ebp - 0x10]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [ebp - 0x14], 0x56945a71
mov dword [ebp - 0x80], eax
jmp 0x411be8