Function at 0x413ce0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
push 0
push 0
push 1
mov ebx, ecx
push 0
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov edi, dword [ebp + 8]
mov esi, eax
mov dword [edi + 4], esi
test esi, esi
jne 0x413db2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [edi]
mov ecx, edi
push 1
mov ebx, eax
call dword [edx]
mov eax, dword fs:[0x2c]
mov ecx, dword [0x638d08]
mov edx, dword [eax]
cmp ecx, dword [edx + 4]
jle 0x413d5a
push 0x638d08
call fcn.0056f6db
add esp, 4
cmp dword [0x638d08], 0xffffffff
jne 0x413d5a
call fcn.00404a40
push 0x638d08
call fcn.0056f69c
add esp, 4
mov ecx, dword [0x638d30]
mov eax, dword [0x638d34]
mov dword [ebp - 0x14], ebx
cmp ecx, 0x25c5e09b
jne 0x413d77
cmp eax, 0x8fafd21e
je 0x413d86
cmp ecx, 0x257edf0d
jne 0x413d8d
cmp eax, 0xb2ab117a
jne 0x413d8d
test ebx, ebx
setne al
jmp 0x413d9d
mov eax, dword [0x638d28]
mov ecx, 0x638d28
push ebx
mov eax, dword [eax + 0x18]
call eax
mov byte [ebp - 0x10], al
mov dword [ebp - 0xc], 0x638d28
test al, al
jne 0x413f76
mov ebx, dword [ebp - 4]
push 0
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebx + 8], eax
mov dword [edi + 8], eax
cmp dword [ebx + 8], 0
jne 0x413e76
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [edi]
mov ecx, edi
push 1
mov ebx, eax
call dword [edx]
mov eax, dword fs:[0x2c]
mov ecx, dword [0x638d08]
mov edx, dword [eax]
cmp ecx, dword [edx + 4]
jle 0x413e1e
push 0x638d08
call fcn.0056f6db
add esp, 4
cmp dword [0x638d08], 0xffffffff
jne 0x413e1e
call fcn.00404a40
push 0x638d08
call fcn.0056f69c
add esp, 4
mov ecx, dword [0x638d30]
mov eax, dword [0x638d34]
mov dword [ebp - 0x14], ebx
cmp ecx, 0x25c5e09b
jne 0x413e3b
cmp eax, 0x8fafd21e
je 0x413e4a
cmp ecx, 0x257edf0d
jne 0x413e51
cmp eax, 0xb2ab117a
jne 0x413e51
test ebx, ebx
setne al
jmp 0x413e61
mov eax, dword [0x638d28]
mov ecx, 0x638d28
push ebx
mov eax, dword [eax + 0x18]
call eax
mov byte [ebp - 0x10], al
mov dword [ebp - 0xc], 0x638d28
test al, al
jne 0x413f83
mov ebx, dword [ebp - 4]
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0
push edi
push 0x413fa0
push dword [ebp + 0xc]
push 0
call fcn.0057d1a7
add esp, 0x18
mov dword [ebx + 4], eax
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x413f5d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [edi]
mov ecx, edi
push 1
mov dword [ebp + 8], eax
call dword [edx]
test esi, esi
je 0x413ebf
push esi
call ebx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
test eax, eax
je 0x413ecc
push eax
call ebx
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x638d08]
cmp eax, dword [ecx + 4]
jle 0x413f09
push 0x638d08
call fcn.0056f6db
add esp, 4
cmp dword [0x638d08], 0xffffffff
jne 0x413f09
call fcn.00404a40
push 0x638d08
call fcn.0056f69c
add esp, 4
mov ecx, dword [0x638d30]
mov edx, dword [ebp + 8]
mov eax, dword [0x638d34]
mov dword [ebp - 0x14], edx
cmp ecx, 0x25c5e09b
jne 0x413f29
cmp eax, 0x8fafd21e
je 0x413f38
cmp ecx, 0x257edf0d
jne 0x413f3f
cmp eax, 0xb2ab117a
jne 0x413f3f
test edx, edx
setne al
jmp 0x413f4f
mov eax, dword [0x638d28]
mov ecx, 0x638d28
push edx
mov eax, dword [eax + 0x18]
call eax
mov byte [ebp - 0x10], al
mov dword [ebp - 0xc], 0x638d28
test al, al
jne 0x413f90
test esi, esi
je 0x413f6d
push 0xffffffffffffffff
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push esi
call ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov edx, 0x6005a8
lea ecx, [ebp - 0x14]
call fcn.004056f0
mov edx, 0x600594
lea ecx, [ebp - 0x14]
call fcn.004056f0
mov edx, 0x6005bc
lea ecx, [ebp - 0x14]
call fcn.004056f0
int3