Function at 0x40aaa0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x28
fldz
push ebx
xor ebx, ebx
mov dword [esp + 8], ebx
xor eax, eax
mov word [esp + 4], ax
fst qword [esp + 0x24]
fst qword [esp + 0x14]
push ebp
fldz
push esi
fstp dword [esp + 0x14]
xor esi, esi
push edi
mov dword [0x4277cc], ebx
fstp qword [esp + 0x28]
mov ecx, dword [0x424480]
mov dword [esp + 0x1c], ecx
fild dword [esp + 0x1c]
fadd qword [esp + 0x28]
fcomp qword [0x41fa78]
fnstsw ax
fld1
test ah, 1
jne 0x40ab30
fld qword [0x424ae0]
fadd st(1)
fstp qword [0x424ae0]
fld qword [0x424ae0]
mov dx, word [0x424470]
fsub qword [0x41fa70]
movsx eax, dx
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
faddp st(1)
call fcn.0040b5d0
mov word [0x424470], ax
cmp dword [0x425060], ebx
je 0x40ab5e
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
fstp st(0)
push ebx
push ebx
push esi
push 0x401510
push ebx
push ebx
mov dword [esi*4 + 0x427308], ebx
call edi
inc esi
cmp esi, dword [0x425060]
jne 0x40ab40
fld1
fld qword [0x424458]
or ecx, 0xffffffff
fsub qword [0x41fa68]
fcomp qword [0x41fa60]
fnstsw ax
test ah, 0x41
jne 0x40abd8
fld qword [0x424b08]
fsubr qword [0x41fa58]
fsub qword [0x41fa50]
fld qword [esp + 0x28]
fucompp
fnstsw ax
test ah, 0x44
jp 0x40abb5
mov dx, word [esp + 0x10]
movsx eax, dx
add eax, dword [0x423160]
mov dword [0x423160], eax
add dword [esp + 0x10], ecx
jmp 0x40ac58
mov dx, word [0x42429c]
fld dword [esp + 0x18]
inc word [0x42429c]
fstp st(0)
fld dword [esp + 0x18]
fadd st(1)
fstp dword [esp + 0x18]
jmp 0x40ac58
mov ax, word [0x424398]
movsx edx, ax
mov dword [esp + 0x1c], edx
fild dword [esp + 0x1c]
fadd dword [0x424498]
fsub qword [0x425088]
fcomp qword [0x41fa48]
fnstsw ax
fld qword [0x425088]
fadd st(1)
fstp qword [0x425088]
fld dword [0x424498]
fadd st(1)
fstp dword [0x424498]
test ah, 0x41
jp 0x40ac58
fld qword [0x424b40]
fsub qword [0x41fa40]
fadd dword [0x4241d0]
fmul dword [0x4244a4]
fstp dword [0x4244a4]
fld dword [0x4241d0]
fadd st(1)
fstp dword [0x4241d0]
fld qword [0x424b40]
fsub st(1)
fstp qword [0x424b40]
add dword [esp + 0x14], ecx
fld qword [esp + 0x30]
mov eax, dword [esp + 0x14]
fsub qword [0x41fa38]
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
fsubp st(1)
fcomp qword [0x41fa30]
fnstsw ax
test ah, 0x41
jp 0x40ac8f
fld qword [esp + 0x20]
fsub qword [0x41fa28]
fstp qword [esp + 0x20]
mov ecx, dword [str.ek_v_]
mov dword [esp + 0x1c], ecx
fild dword [esp + 0x1c]
fld qword [0x423120]
fsub qword [0x41fa20]
fsub qword [0x41fa18]
fsubp st(1)
call fcn.0040b5d0
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [str.ek_v_], eax
fadd qword [0x423120]
push 0xa
fstp qword [0x423120]
call edi
fld dword [0x4244a4]
fsub qword [0x41f340]
fstp dword [0x4244a4]
fld dword [0x4244a4]
call fcn.0040b5d0
mov dword [esp + 0x14], eax
fld qword [0x425078]
fsub qword [0x41fa10]
fsub qword [0x41fa08]
call fcn.0040b5d0
mov ebp, dword [sym.imp.KERNEL32.dll_SetEvent]
mov word [esp + 0x10], ax
mov esi, 0x425064
lea esp, [esp]
movzx edx, word [esi]
mov eax, dword [edx*4 + 0x427308]
push eax
call ebp
movzx ecx, word [esi]
cmp dword [ecx*4 + 0x427308], ebx
je 0x40ad5e
lea esp, [esp]
fld qword [esp + 0x30]
push 0xa
fmul qword [0x41fa00]
fstp qword [esp + 0x34]
call edi
movzx edx, word [esi]
cmp dword [edx*4 + 0x427308], ebx
jne 0x40ad40
fld qword [esp + 0x28]
add esi, 2
fadd qword [0x41f9f8]
fstp qword [esp + 0x28]
fld qword [0x425078]
fsub qword [0x41fa10]
fsub qword [0x41fa08]
call fcn.0040b5d0
mov word [esp + 0x10], ax
cmp esi, 0x42506c
jne 0x40ad20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
add eax, 0x3c4f46c2
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
mov dword [esp + 0x1c], ecx
fild dword [esp + 0x1c]
fadd qword [esp + 0x20]
fcompp
fnstsw ax
fld qword [esp + 0x20]
fsub qword [0x41f340]
fstp qword [esp + 0x20]
test ah, 0x41
jne 0x40adf1
fld dword [esp + 0x18]
mov dx, word [esp + 0x10]
fsub qword [0x41f9f0]
movsx eax, dx
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
fmulp st(1)
call fcn.0040b5d0
mov word [esp + 0x10], ax
call dword [0x4277cc]
mov dh, 0xd9
add ebx, ebp
add bl, dl
out dx, al
xchg dword [ebp - 0x5a], ebx
sal ebx, 0x94
in eax, dx
cmp byte [ecx], ah
rcl byte [eax + 0x44], cl
enter 0x1132, 0xfffffffffffffffa
mov esp, 0x86a58172
cli
jmp 0x617749a3