Function at 0x41aab0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x459e78
mov eax, dword fs:[0]
push eax
sub esp, 0x70
mov eax, dword [0x4724e4]
xor eax, ebp
mov dword [ebp - 0x24], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x7c], ecx
mov ecx, dword [ebp - 0x7c]
add ecx, 0x314
call fcn.00419aa0
push eax
lea ecx, [ebp - 0x18]
call fcn.00402ae0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.00412a00
push eax
mov ecx, dword [ebp - 0x7c]
add ecx, 0xd0
call fcn.004013c0
movzx eax, al
test eax, eax
jne 0x41ab40
push 0
push 0
push str.js.SetDocument___failed.
call fcn.0042eb85
mov byte [ebp - 0x71], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004138f0
mov al, byte [ebp - 0x71]
jmp 0x41adbb
mov ecx, dword [ebp - 0x7c]
mov edx, dword [ebp + 8]
mov dword [ecx + 0x8c], edx
mov eax, dword [ebp - 0x7c]
cmp dword [eax + 0x8c], 0x67
jne 0x41ac15
lea ecx, [ebp - 0x20]
call fcn.00403120
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.00403120
mov byte [ebp - 4], 2
push 0x104
push 0x104
lea ecx, [ebp - 0x20]
call fcn.00402e80
push eax
call fcn.00405c30
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0xffffffffffffffff
lea ecx, [ebp - 0x20]
call fcn.0040cec0
mov ecx, dword [ebp - 0x20]
push ecx
push 0x460e04
lea edx, [ebp - 0x1c]
push edx
call fcn.00402860
add esp, 0xc
push 0x460ac7
lea ecx, [ebp - 0x40]
call fcn.00405ba0
mov byte [ebp - 4], 3
push 0
lea ecx, [ebp - 0x1c]
call fcn.00402e80
push eax
mov ecx, dword [ebp - 0x7c]
call fcn.0041a8c0
mov byte [ebp - 0x72], 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x40]
call fcn.00405310
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.00403140
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00403140
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004138f0
mov al, byte [ebp - 0x72]
jmp 0x41adbb
mov eax, dword [ebp - 0x7c]
cmp dword [eax + 0x8c], 0x68
jne 0x41ac6c
push 0x460e1c
lea ecx, [ebp - 0x44]
call fcn.00402580
mov byte [ebp - 4], 4
push 0
lea ecx, [ebp - 0x44]
call fcn.00402e80
push eax
mov ecx, dword [ebp - 0x7c]
call fcn.0041a8c0
mov byte [ebp - 0x73], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.00403140
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004138f0
mov al, byte [ebp - 0x73]
jmp 0x41adbb
mov ecx, dword [ebp - 0x7c]
cmp dword [ecx + 0x8c], 0x66
jne 0x41aca0
mov edx, dword [ebp - 0x7c]
mov eax, dword [edx + 0x74]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov byte [ebp - 0x74], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004138f0
mov al, byte [ebp - 0x74]
jmp 0x41adbb
mov ecx, dword [ebp - 0x7c]
cmp dword [ecx + 0x8c], 0x64
jne 0x41ace8
lea edx, [ebp - 0x70]
push edx
mov ecx, dword [ebp - 0x7c]
call fcn.00427c75
mov dword [ebp - 0x68], 2
lea eax, [ebp - 0x70]
push eax
mov ecx, dword [ebp - 0x7c]
call fcn.00427c91
mov byte [ebp - 0x75], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004138f0
mov al, byte [ebp - 0x75]
jmp 0x41adbb
mov ecx, dword [ebp - 0x7c]
cmp dword [ecx + 0x8c], 0x65
jne 0x41ad17
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
mov byte [ebp - 0x76], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004138f0
mov al, byte [ebp - 0x76]
jmp 0x41adbb
mov edx, dword [ebp - 0x7c]
mov dword [edx + 0x88], 1
cmp dword [ebp + 8], 4
je 0x41ad36
cmp dword [ebp + 8], 5
je 0x41ad36
cmp dword [ebp + 8], 6
jne 0x41ad53
mov ecx, dword [ebp - 0x7c]
call fcn.004127c0
push 0x460e38
mov ecx, dword [ebp - 0x7c]
add ecx, 0xa4
call fcn.004030a0
jmp 0x41ad7f
cmp dword [ebp + 8], 9
jne 0x41ad6e
push 0x460e4c
mov ecx, dword [ebp - 0x7c]
add ecx, 0xa4
call fcn.004030a0
jmp 0x41ad7f
push str.PARM_ERR
mov eax, dword [ebp + 0x10]
push eax
call fcn.00402860
add esp, 8
lea ecx, [ebp - 0x10]
push ecx
push 0
mov edx, dword [ebp - 0x7c]
push edx
push 0x41c4c0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x77], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004138f0
mov al, byte [ebp - 0x77]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x24]
xor ecx, ebp
call fcn.00441f6e
mov esp, ebp
pop ebp
ret 0xc