Function at 0x41e600
Capabilities:
Create thread

Disassembly:
mov eax, dword [esp + 8]
sub esp, 0x188
push ebx
push ebp
push esi
mov esi, dword [0x487170]
push edi
mov edi, dword [0x487174]
xor ecx, ecx
mov byte [eax + 0x1c46b0], 1
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
xor edx, edx
mov dword [eax + 4], edx
mov dword [eax + 8], esi
mov dword [eax + 0xc], edi
sub esp, 0xc4
mov ecx, 0x31
mov esi, 0x17955b0
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.004099b0
add esp, 0xd4
call fcn.0041b270
mov edi, dword [0x476098]
mov ebx, dword [0x47609c]
mov ebp, dword [0x4761e0]
mov esi, 4
test esi, esi
je 0x41e6ba
mov ecx, dword [esi*4 + 0xf69398]
push 0
push ecx
call edi
test eax, eax
jne 0x41e6b2
mov edx, dword [esi*4 + 0xf69398]
push edx
call ebx
mov eax, dword [esi*4 + 0x112fbc0]
push 0x2710
push eax
call edi
mov ecx, dword [esi*4 + 0x112fbc0]
push ecx
call ebp
mov dword [esi*4 + 0x112fbc0], 0
push 0xa
call dword [0x476080]
sub esi, 1
test esi, esi
jg 0x41e674
cmp dword [0x4a0be4], 0
mov dword [esp + 0x10], 0
jle 0x41e7a1
mov ebp, dword [esp + 0x1a0]
mov ecx, dword [esp + 0x19c]
mov eax, dword [esp + 0x1a0]
add ebp, 0xec074
sub eax, ecx
lea ebx, [ecx + 0xebfd0]
mov dword [esp + 0x14], eax
lea ecx, [ecx]
push ebx
call fcn.00408910
mov edx, dword [0x178f600]
mov eax, dword [ebp + 4]
add esp, 4
push edx
mov edx, dword [ebp - 4]
sub esp, 0x170
mov edi, esp
push eax
mov ecx, 0x5c
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp]
push ecx
mov ecx, dword [ebp - 0x7c]
push edx
mov edx, dword [ebp - 0x84]
lea eax, [ebp - 0x74]
push eax
mov eax, dword [ebp - 0x80]
push ecx
mov ecx, dword [ebp - 0x9c]
push edx
mov edx, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
push ecx
push edx
push eax
lea ecx, [esp + 0x1c4]
push ecx
call fcn.0040d4f0
mov edx, dword [esp + 0x1b4]
mov esi, eax
mov eax, dword [esp + 0x1b0]
lea edi, [edx + ebx]
mov ecx, 0x5c
add eax, 1
add esp, 0x1a0
rep movsd dword es:[edi], dword [esi]
add ebx, 0x170
add ebp, 0x170
cmp eax, dword [0x4a0be4]
mov dword [esp + 0x10], eax
jl 0x41e700
mov eax, dword [esp + 0x1a0]
mov ebx, dword [esp + 0x19c]
push 0x1c47e8
push eax
push ebx
call fcn.004014b0
push 1
call fcn.0042d580
mov ecx, dword [0x487180]
mov edx, dword [0x487184]
mov eax, dword [0x487174]
add edx, ecx
mov ecx, dword [0x487170]
add esp, 0x10
cmp edx, 1
mov dword [esp + 0x10], 1
jle 0x41e8ba
mov ebp, 0x178f6bc
add ebx, 0x11808c
lea ebx, [ebx]
imul eax, ecx
cmp dword [0xf1e5fc], 1
push eax
jne 0x41e81b
mov eax, dword [ebp + 0x88]
push eax
call fcn.004015e0
jmp 0x41e827
mov ecx, dword [ebp + 0x88]
push ecx
call fcn.004015a0
add esp, 8
cmp byte [ebx], 0
je 0x41e86c
sub esp, 0xc4
mov edi, esp
lea edx, [esp + 0xec]
push ebx
mov ecx, 0x31
mov esi, ebp
push edx
rep movsd dword es:[edi], dword [esi]
call fcn.00446850
mov esi, eax
mov eax, dword [0x487174]
mov ecx, 0x31
mov edi, ebp
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x487170]
add esp, 0xcc
jmp 0x41e889
mov ecx, dword [0x487170]
mov eax, dword [0x487174]
mov dword [ebp + 0x20], ecx
mov dword [ebp + 0x24], eax
mov dword [ebp + 0x90], ecx
mov dword [ebp + 0x94], eax
mov edx, dword [esp + 0x10]
mov esi, dword [0x487180]
mov edi, dword [0x487184]
add edx, 1
add edi, esi
add ebx, 0x40
add ebp, 0xc4
cmp edx, edi
mov dword [esp + 0x10], edx
jl 0x41e800
mov ebx, dword [esp + 0x19c]
mov ebp, 0x1795360
add ebx, 0x11994c
jmp 0x41e8db
mov ecx, dword [0x487170]
mov eax, dword [0x487174]
imul eax, ecx
cmp dword [0xf1e5fc], 1
push eax
jne 0x41e8f6
mov eax, dword [ebp + 0x88]
push eax
call fcn.004015e0
jmp 0x41e902
mov ecx, dword [ebp + 0x88]
push ecx
call fcn.004015a0
add esp, 8
cmp byte [ebx], 0
je 0x41e93a
sub esp, 0xc4
mov edi, esp
lea edx, [esp + 0xec]
push ebx
mov ecx, 0x31
mov esi, ebp
push edx
rep movsd dword es:[edi], dword [esi]
call fcn.00446850
mov ecx, 0x31
mov esi, eax
mov edi, ebp
add esp, 0xcc
rep movsd dword es:[edi], dword [esi]
add ebp, 0xc4
add ebx, 0x40
cmp ebp, 0x17955ac
jl 0x41e8d0
xor ebx, ebx
cmp dword [0x6e1fe0], ebx
jle 0x41ea3c
mov ebp, dword [esp + 0x19c]
add ebp, 0x119aae
cmp byte [ebp - 0x1e], 1
jne 0x41ea27
mov esi, dword [0x487170]
mov edi, dword [0x487174]
xor ecx, ecx
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
xor edx, edx
mov dword [eax + 4], edx
mov dword [eax + 8], esi
movzx esi, word [ebp - 0x46]
imul esi, esi, 0xc4
mov dword [eax + 0xc], edi
sub esp, 0xc4
add esi, 0x178f5f8
mov ecx, 0x31
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.004099b0
movzx eax, byte [ebp]
add esp, 0xd4
push eax
lea ecx, [ebp + 1]
push ecx
call fcn.0042d870
movzx edx, word [ebp - 2]
movzx esi, word [ebp - 0x46]
mov ecx, dword [ebp - 0xa]
imul esi, esi, 0xc4
add esp, 4
push eax
mov eax, dword [ebp - 6]
push edx
mov edx, dword [ebp - 0x1a]
push eax
push ecx
mov ecx, dword [ebp - 0x16]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [ebp - 0x12]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0xe]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
sub esp, 0xc4
lea edx, [esp + 0x100]
mov edi, esp
add esi, 0x178f5f8
mov ecx, 0x31
push edx
rep movsd dword es:[edi], dword [esi]
call fcn.0040c3b0
add esp, 0xec
add ebx, 1
add ebp, 0x14c
cmp ebx, dword [0x6e1fe0]
jl 0x41e966
mov ebx, dword [esp + 0x19c]
mov ebp, 0x17956f0
add ebx, 0x1b9055
mov edi, edi
cmp dword [0xf1e5fc], 1
jne 0x41ea74
mov eax, dword [0x487174]
imul eax, dword [0x487170]
mov ecx, dword [ebp + 0x88]
push eax
push ecx
call fcn.004015e0
jmp 0x41ea8e
mov edx, dword [0x487174]
imul edx, dword [0x487170]
mov eax, dword [ebp + 0x88]
push edx
push eax
call fcn.004015a0
add esp, 8
cmp byte [ebx], 0
je 0x41eac6
sub esp, 0xc4
mov edi, esp
mov ecx, 0x31
mov esi, ebp
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0xec]
push ebx
push ecx
call fcn.00446850
mov ecx, 0x31
mov esi, eax
mov edi, ebp
add esp, 0xcc
rep movsd dword es:[edi], dword [esi]
add ebp, 0xc4
add ebx, 0x20
cmp ebp, 0x1795c4c
jl 0x41ea50
mov esi, 2
mov edx, dword [0xf1e5e4]
push edx
push 0
push 0
push esi
push 4
push 0x477800
call fcn.004445c0
add esi, 1
add esp, 0x18
cmp esi, 7
jl 0x41eae0
cmp dword [0xf1e5e0], 1
jne 0x41ebdc
mov edi, dword [esp + 0x19c]
xor esi, esi
lea ebp, [edi + 0x1b8ddc]
add edi, 0x1b9004
jmp 0x41eb30
mov ebx, dword [esp + 0x19c]
mov al, byte [ebx + esi + 0x1b8fdc]
cmp al, 2
je 0x41eb5b
cmp al, 7
je 0x41eb5b
mov eax, dword [0xf1e5e4]
mov ecx, dword [edi]
push eax
push 0
push ecx
push esi
push 4
push 0x477800
jmp 0x41eb6b
mov edx, dword [0xf1e5e4]
mov eax, dword [edi]
push edx
push 0
push eax
push esi
push 2
push ebp
call fcn.004445c0
add esi, 1
add esp, 0x18
add edi, 4
add ebp, 0x40
cmp esi, 2
jl 0x41eb30
mov esi, 2
lea ebp, [ebx + 0x1b8e5c]
lea edi, [ebx + 0x1b900c]
mov al, byte [ebx + esi + 0x1b8fdc]
cmp al, 2
je 0x41ebb7
cmp al, 7
je 0x41ebb7
mov ecx, dword [0xf1e5e4]
mov edx, dword [edi]
push ecx
push 0
push edx
push esi
push 4
push 0x477800
jmp 0x41ebc6
mov eax, dword [0xf1e5e8]
mov ecx, dword [edi]
push eax
push 0
push ecx
push esi
push 2
push ebp
call fcn.004445c0
add esi, 1
add esp, 0x18
add edi, 4
add ebp, 0x40
cmp esi, 6
jl 0x41eb92
push 1
sub esp, 0xc4
mov ecx, 0x31
mov esi, 0x178f6bc
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.004391a0
mov esi, dword [esp + 0x264]
mov ebx, dword [0x4760a8]
add esp, 0xc8
xor edi, edi
mov ebp, 0xb3b1e8
add esi, 0x1a1504
jmp 0x41ec20
cmp byte [esi - 0x100c], 1
jne 0x41ece5
push edi
push ebp
push esi
call fcn.0041f4e0
mov edx, dword [esi - 4]
xor ecx, ecx
add esp, 0xc
cmp edi, ecx
mov dword [esi - 0x1008], edx
je 0x41ece5
or eax, 0xffffffff
mov dword [esi + 0x40], ecx
mov dword [esi + 0xc4], ecx
mov dword [esi + 0x84], eax
mov dword [esi + 0x88], eax
mov dword [esi + 0x8c], eax
mov dword [esi + 0x90], eax
mov dword [esi + 0x94], eax
mov dword [esi + 0x98], eax
mov dword [esi + 0x9c], eax
mov dword [esi + 0xa0], eax
mov dword [esi + 0xa4], eax
mov dword [esi + 0xa8], eax
mov dword [esi + 0xac], eax
mov dword [esi + 0xb0], eax
mov dword [esi + 0xb4], eax
mov dword [esi + 0xb8], eax
mov dword [esi + 0xbc], eax
mov dword [esi + 0xc0], eax
lea eax, [edi*4 + 0x6e1fe4]
push eax
push ecx
push edi
push 0x41ff10
push ecx
push ecx
mov dword [esi - 0x1008], ecx
mov dword [esi - 4], ecx
call fcn.004551f3
add esp, 0x18
push 0
push eax
mov dword [edi*4 + 0x112fbc0], eax
call ebx
add ebp, 0x7a120
add edi, 1
add esi, 0x4e94
cmp ebp, 0xd9d788
jl 0x41ec20
call fcn.00436a20
mov eax, dword [esp + 0x19c]
xor ecx, ecx
mov dword [eax + 0x1c46dc], ecx
mov dword [eax + 0x1c46e0], 1
mov dword [eax + 0x1c46e4], ecx
call fcn.0041b270
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x188
ret