Function at 0x40d081
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x54
mov dword [ebp - 4], 0
cmp dword [0x740708], 1
jne 0x40d284
push 0x740734
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
inc dword [0x74071c]
push 0x80000301
push 0
push dword [0x7406f8]
push 1
mov ebx, 0x168
call fcn.00483d00
add esp, 0x10
mov dword [ebp - 8], eax
push 0x80000301
push 0
push dword [0x7406f0]
push 1
mov ebx, 0x168
call fcn.00483d00
add esp, 0x10
mov dword [ebp - 0xc], eax
fild dword [0x740718]
fstp qword [ebp - 0x14]
push dword [ebp - 0x10]
push dword [ebp - 0x14]
call fcn.0040d6f5
mov dword [ebp - 0x18], eax
fild dword [0x740748]
fstp qword [ebp - 0x20]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call fcn.0040d6f5
mov dword [ebp - 0x24], eax
fild dword [0x740718]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x2c]
fild dword [0x74071c]
fstp qword [ebp - 0x34]
fdiv qword [ebp - 0x34]
fstp qword [ebp - 0x3c]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
call fcn.0040d6f5
mov dword [ebp - 0x40], eax
push 0x80000301
push 0
push dword [0x74071c]
push 1
mov ebx, 0x168
call fcn.00483d00
add esp, 0x10
mov dword [ebp - 0x44], eax
push 0x4b5f93
push dword [ebp - 0x44]
push 0x4b5f96
push dword [ebp - 0x40]
push 0x4b5fa1
push dword [ebp - 0x24]
push 0x4b5e63
push dword [ebp - 0x18]
push 0x4b5faa
push dword [ebp - 0xc]
push 0x4b5e63
push dword [ebp - 8]
push 0x4b5fb3
mov ecx, 0xd
call fcn.0040106b
add esp, 0x34
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40d1c5
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40d1d5
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40d1e5
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x40d1f5
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x40d205
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40d215
push ebx
call fcn.0047ee6b
add esp, 4
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
push 1
lea eax, [ebp - 0x48]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x40d260
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40d270
push ebx
call fcn.0047ee6b
add esp, 4
push 0x740734
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
jmp 0x40d6ef
cmp dword [0x740708], 2
jne 0x40d296
jmp 0x40d6ef
cmp dword [0x740708], 3
jne 0x40d2a8
jmp 0x40d6ef
cmp dword [0x740708], 4
jne 0x40d4b5
push 0x740734
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
inc dword [0x740720]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0x80ff
call fcn.0040366e
mov dword [ebp - 0xc], eax
push 1
push dword [ebp - 0xc]
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
push 0x80000301
push 0
push dword [0x740714]
push 1
mov ebx, 0x168
call fcn.00483d00
add esp, 0x10
mov dword [ebp - 8], eax
push 0x80000301
push 0
push dword [0x7406e4]
push 1
mov ebx, 0x168
call fcn.00483d00
add esp, 0x10
mov dword [ebp - 0xc], eax
push 0x80000301
push 0
push dword [0x740720]
push 1
mov ebx, 0x168
call fcn.00483d00
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x4b5f93
push dword [ebp - 0x10]
push 0x4b5f96
push dword [ebp - 0xc]
push 0x4b5e63
push dword [ebp - 8]
push 0x4b5fb9
mov ecx, 7
call fcn.0040106b
add esp, 0x1c
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40d39d
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40d3ad
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40d3bd
push ebx
call fcn.0047ee6b
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
lea eax, [ebp - 0x14]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x40d408
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40d418
push ebx
call fcn.0047ee6b
add esp, 4
fild dword [0x740714]
fstp qword [ebp - 0xc]
fld qword [ebp - 0xc]
fild dword [0x7406e4]
fstp qword [ebp - 0x14]
fdiv qword [ebp - 0x14]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fmul qword [0x4b5ae8]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
call fcn.00401a9c
mov dword [ebp - 4], eax
push 0x80000301
push 0
push 0
fild dword [ebp - 4]
fstp qword [ebp - 0xc]
push 0x80000601
push dword [ebp - 8]
push dword [ebp - 0xc]
push 2
mov ebx, 0x68
call fcn.00484870
add esp, 0x1c
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], edx
fld qword [ebp - 0x1c]
call fcn.00401a9c
mov dword [ebp - 4], eax
push 1
push dword [ebp - 4]
push 0x7406c0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
push 0x740734
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
jmp 0x40d6ef
cmp dword [0x740708], 5
jne 0x40d4c7
jmp 0x40d6ef
cmp dword [0x740708], 0xf
jne 0x40d5e3
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0xff00
call fcn.0040366e
mov dword [ebp - 0xc], eax
push 1
push dword [ebp - 0xc]
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
push 1
mov eax, 0x4b5fcf
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x40d557
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40d567
push ebx
call fcn.0047ee6b
add esp, 4
mov dword [0x740708], 0x10
push 0x740708
call fcn.0040ca1c
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 0
push 0
push dword [ebp - 8]
push 0x40e94b
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x40d5b9
push 6
call fcn.0047ee71
add esp, 4
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], esp
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x14], esp
je 0x40d5de
push 6
call fcn.0047ee71
add esp, 4
jmp 0x40d6ef
cmp dword [0x740708], 0x11
jne 0x40d6ef
mov dword [0x740708], 0
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
push 1
mov eax, 0x4b5ff3
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x40d64d
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40d65d
push ebx
call fcn.0047ee6b
add esp, 4
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0xff00
call fcn.0040366e
mov dword [ebp - 0xc], eax
push 1
push dword [ebp - 0xc]
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
mov dword [ebp - 8], esp
push 0
push 0
push 0
push 0x40eec4
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 8], esp
je 0x40d6ca
push 6
call fcn.0047ee71
add esp, 4
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], esp
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x10], esp
je 0x40d6ef
push 6
call fcn.0047ee71
add esp, 4
mov esp, ebp
pop ebp
ret 0x10