Function at 0x41d2c0
Capabilities:
Create thread

Disassembly:
push 0xffffffffffffffff
push 0x4b8dcf
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x6534a4
push 0
push 0
push 0x41c840
push 0
push 0
mov esi, ecx
call edi
push 0x6534a4
push 0
push 0
push 0x41c8d0
push 0
push 0
call edi
push str.Debug.txt
mov ecx, 0x65334c
call fcn.0040bab0
push 0
call fcn.00418110
cmp eax, 1
mov ecx, esi
je 0x41d33f
call fcn.0041cf60
pop edi
xor eax, eax
pop esi
mov ecx, dword [esp + 4]
mov dword fs:[0], ecx
add esp, 0x10
ret 0xc
call fcn.0041ce00
push 0x64
call fcn.004a99fd
add esp, 4
mov dword [esp + 8], eax
test eax, eax
mov dword [esp + 0x14], 0
je 0x41d367
mov ecx, eax
call fcn.00419630
jmp 0x41d369
xor eax, eax
or edi, 0xffffffff
push 0x1ca4
mov dword [esp + 0x18], edi
mov dword [esi + 0x20], eax
call fcn.004a99fd
add esp, 4
mov dword [esp + 8], eax
test eax, eax
mov dword [esp + 0x14], 1
je 0x41d399
mov ecx, eax
call fcn.00463810
jmp 0x41d39b
xor eax, eax
push 0x142c
mov dword [esp + 0x18], edi
mov dword [esi + 4], eax
call fcn.004a99fd
add esp, 4
mov dword [esp + 8], eax
test eax, eax
mov dword [esp + 0x14], 2
je 0x41d3c8
mov ecx, eax
call fcn.0047abc0
jmp 0x41d3ca
xor eax, eax
push 0x14
mov dword [esp + 0x18], edi
mov dword [esi + 0xc], eax
call fcn.004a99fd
add esp, 4
mov dword [esp + 8], eax
test eax, eax
mov dword [esp + 0x14], 3
je 0x41d3f4
mov ecx, eax
call fcn.004a2870
jmp 0x41d3f6
xor eax, eax
push 0x1ae00
mov dword [esp + 0x18], edi
mov dword [esi + 0x24], eax
call fcn.004a99fd
add esp, 4
mov dword [esp + 8], eax
test eax, eax
mov dword [esp + 0x14], 4
je 0x41d423
mov ecx, eax
call fcn.00416e30
jmp 0x41d425
xor eax, eax
push 0x3996b8
mov dword [esp + 0x18], edi
mov dword [esi + 8], eax
call fcn.004a99fd
add esp, 4
mov dword [esp + 8], eax
test eax, eax
mov dword [esp + 0x14], 5
je 0x41d452
mov ecx, eax
call fcn.00453fd0
jmp 0x41d454
xor eax, eax
push 0x3b114
mov dword [esp + 0x18], edi
mov dword [esi + 0x2c], eax
call fcn.004a99fd
add esp, 4
mov dword [esp + 8], eax
test eax, eax
mov dword [esp + 0x14], 6
je 0x41d481
mov ecx, eax
call fcn.004a8830
jmp 0x41d483
xor eax, eax
push 0x154
mov dword [esp + 0x18], edi
mov dword [esi + 0x38], eax
call fcn.004a99fd
add esp, 4
mov dword [esp + 8], eax
test eax, eax
mov dword [esp + 0x14], 7
je 0x41d4b0
mov ecx, eax
call fcn.004526d0
jmp 0x41d4b2
xor eax, eax
push 0x288c
mov dword [esp + 0x18], edi
mov dword [esi + 0x28], eax
call fcn.004a99fd
add esp, 4
mov dword [esp + 8], eax
test eax, eax
mov dword [esp + 0x14], 8
je 0x41d4df
mov ecx, eax
call fcn.0049d4b0
jmp 0x41d4e1
xor eax, eax
push 0x758
mov dword [esp + 0x18], edi
mov dword [esi + 0x34], eax
call fcn.004a99fd
add esp, 4
mov dword [esp + 8], eax
test eax, eax
mov dword [esp + 0x14], 9
je 0x41d50e
mov ecx, eax
call fcn.0049c8a0
jmp 0x41d510
xor eax, eax
push 0x694
mov dword [esp + 0x18], edi
mov dword [esi + 0x30], eax
call fcn.004a99fd
add esp, 4
mov dword [esp + 8], eax
test eax, eax
mov dword [esp + 0x14], 0xa
je 0x41d53d
mov ecx, eax
call fcn.0041c220
jmp 0x41d53f
xor eax, eax
push 0x4998
mov dword [esp + 0x18], edi
mov dword [esi + 0x3c], eax
call fcn.004a99fd
add esp, 4
mov dword [esp + 8], eax
test eax, eax
mov dword [esp + 0x14], 0xb
je 0x41d56c
mov ecx, eax
call fcn.00487230
jmp 0x41d56e
xor eax, eax
push 0x71c
mov dword [esp + 0x18], edi
mov dword [esi + 0x44], eax
call fcn.004a99fd
add esp, 4
mov dword [esp + 8], eax
test eax, eax
mov dword [esp + 0x14], 0xc
je 0x41d59b
mov ecx, eax
call fcn.0047dc70
jmp 0x41d59d
xor eax, eax
mov dword [esp + 0x14], edi
mov dword [esi + 0x40], eax
call fcn.0041c760
mov eax, dword [esi + 0x20]
mov ecx, dword [esp + 0x24]
mov edi, dword [esp + 0x1c]
mov dword [eax + 0x60], ecx
mov ecx, dword [esi + 0x20]
mov edx, dword [ecx + 0x60]
push edx
push 3
push edi
call fcn.00419680
mov eax, dword [esp + 0x20]
mov ecx, dword [esi + 0x34]
push eax
push edi
call fcn.0049ce20
test eax, eax
je 0x41d5e2
mov ecx, 0xeac580
call fcn.00484840
mov ecx, dword [esi + 0x20]
mov edx, dword [ecx + 0x44]
mov ecx, dword [esi + 4]
push ebp
push edx
call fcn.004639c0
mov edi, dword [0x652e0c]
push 1
call fcn.0041a6f0
push eax
call fcn.004ab7c0
push 0
mov ebp, eax
call fcn.0041a6f0
add edi, 0x59c
add esp, 0xc
mov ecx, str.LoginServer
mov edx, edi
sub edx, ecx
push ebx
mov bl, byte [ecx]
mov byte [edx + ecx], bl
inc ecx
test bl, bl
jne 0x41d621
lea edx, [edi + 0x32]
sub edx, eax
pop ebx
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x41d631
mov ecx, 0x653378
mov dword [edi + 0x64], ebp
call fcn.004184b0
mov edi, dword [sym.imp.KERNEL32.dll_CreateEventA]
push 0
push 0
push 1
push 0
call edi
push 0
push 0
push 1
push 0
mov dword [esi + 0x5c], eax
call edi
mov ecx, esi
mov dword [esi + 0x60], eax
call fcn.0041c9b0
mov ecx, dword [esi + 0x34]
call fcn.0049e980
mov eax, dword [esi + 0x20]
mov ecx, dword [eax + 0x44]
push ecx
mov ecx, dword [esi + 4]
call fcn.00463a20
mov edx, dword [esi + 0x60]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov ecx, dword [esp + 0x10]
pop ebp
pop edi
mov eax, 1
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret 0xc