Function at 0x41cfb0
Capabilities:
Create thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x24
mov eax, dword [0x4a13b4]
xor eax, esp
mov dword [esp + 0x20], eax
test byte [0x4a2fc1], 8
mov ecx, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0x14]
push edi
mov dword [esp + 0x14], ecx
je 0x41cff3
push ebx
mov edx, 0x406d10
mov ecx, 0x4a0818
call fcn.004792a1
mov ecx, dword [esp + 0x14]
cmp ebx, 0xd
ja 0x41d056
je 0x41d03c
mov eax, ebx
sub eax, 1
je 0x41d07f
sub eax, 3
je 0x41d032
sub eax, 1
je 0x41d07f
sub eax, 6
jne 0x41d06f
mov edi, dword [0x4a09bc]
push esi
push ecx
push dword [ebp + 0xc]
mov eax, dword [edi]
push ebx
mov esi, dword [eax + 0x50]
mov ecx, esi
call dword [0x4a47a8]
mov ecx, edi
call esi
jmp 0x41d222
call fcn.0047fab2
jmp 0x41d222
cmp dword [ebp + 0xc], 4
je 0x41d04c
cmp dword [ebp + 0xc], 7
jne 0x41d222
call fcn.0042222e
jmp 0x41d222
mov eax, ebx
sub eax, 0xe
je 0x41d0fe
sub eax, 1
je 0x41d07f
sub eax, 0x12
je 0x41d0fe
mov ecx, dword [0x4a09bc]
call fcn.0042643a
jmp 0x41d222
push 0x409574
push 0x323
push 0x4094c0
call fcn.0043b3bf
add esp, 0xc
test byte [0x4a2fc2], 8
je 0x41d0b6
lea eax, [esp + 0x18]
mov edx, 0x406d30
push eax
push 1
push ecx
mov ecx, 0x4a0818
call fcn.00479253
xor eax, eax
lea ecx, [esp + 0x10]
cmp ebx, 1
setne al
inc eax
mov dword [esp + 0x10], eax
call fcn.00437769
mov ecx, dword [0x4a09bc]
cmp ebx, 5
je 0x41d0dc
cmp ebx, 0xf
jne 0x41d0e3
mov byte [ecx + 0xbc], 1
push ecx
push 3
call fcn.0042635c
mov eax, dword [0x4a09bc]
push dword [eax + 0x34]
call dword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_SetEvent]
jmp 0x41d222
call fcn.004784e0
test al, al
mov eax, dword [ebp + 0xc]
je 0x41d127
cmp eax, 5
jne 0x41d118
cmp ebx, 0x21
jne 0x41d222
cmp eax, 6
jne 0x41d127
cmp ebx, 0xe
je 0x41d135
jmp 0x41d222
cmp eax, 5
je 0x41d135
cmp eax, 6
jne 0x41d222
push 0x407ffc
push 0x18
call fcn.0042c579
mov esi, eax
mov dword [esp + 0x18], esi
pop ecx
pop ecx
test esi, esi
je 0x41d222
xor eax, eax
mov edi, esi
push 6
pop ecx
rep stosd dword es:[edi], eax
or dword [esi + 8], 0xffffffff
and dword [esi + 0x10], eax
and dword [esi + 0x14], eax
mov edi, dword [ebp + 0xc]
mov dword [esi], ebx
mov dword [esi + 4], edi
cmp ebx, 0xe
jne 0x41d1b0
call fcn.004784e0
test al, al
je 0x41d1db
mov edi, dword [0x4a09bc]
mov eax, dword [edi]
mov esi, dword [eax + 0x58]
mov ecx, esi
mov eax, dword [esp + 0x14]
push dword [eax + 4]
call dword [0x4a47a8]
mov ecx, edi
call esi
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
mov dword [esp + 0x24], edx
add edi, 8
mov ecx, dword [ecx + 4]
mov dword [esp + 0x18], ecx
jmp 0x41d1c8
mov ecx, dword [esp + 0x14]
lea edi, [esi + 8]
mov eax, dword [ecx + 4]
mov dword [esp + 0x18], eax
mov eax, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], eax
lea esi, [esp + 0x18]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [ebp + 0xc]
mov esi, dword [esp + 0x10]
mov eax, dword [esi + 0x10]
or eax, dword [esi + 0x14]
je 0x41d222
call fcn.004784e0
test al, al
je 0x41d1f9
cmp edi, 6
jne 0x41d1f9
push esi
call fcn.00421fb0
jmp 0x41d222
xor eax, eax
push eax
push eax
push esi
push fcn.00421fb0
push eax
push eax
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateThread]
test eax, eax
jne 0x41d21b
push 0x18
push esi
call fcn.0042c527
pop ecx
pop ecx
jmp 0x41d222
push eax
call dword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
test byte [0x4a2fc1], 8
je 0x41d23b
push ebx
mov edx, 0x406d00
mov ecx, 0x4a0818
call fcn.004792a1
mov ecx, dword [esp + 0x2c]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0042bef0
mov esp, ebp
pop ebp
ret 0x10