Function at 0x41acf1
Capabilities:
Create thread

Disassembly:
mov eax, 0x510c44
call fcn.00508264
push ecx
push ebx
push esi
xor ebx, ebx
push edi
mov edi, dword [ebp + 8]
mov dword [edi], ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
lea esi, [edi + 0x10]
mov dword [ebp - 4], ebx
call fcn.0041ac3d
push 0xa
pop eax
lea ecx, [edi + 0x1658]
mov dword [edi + 0xe0], eax
mov dword [edi + 0xe4], eax
mov dword [edi + 0xe8], eax
mov dword [edi + 0xec], 5
mov byte [edi + 0xf0], 1
mov dword [edi + 0xf4], ebx
call fcn.0040a717
lea ecx, [edi + 0x1674]
call fcn.00401670
lea ecx, [edi + 0x16a0]
mov dword [edi + 0x1690], ebx
mov dword [edi + 0x1694], ebx
call fcn.0040a717
lea ecx, [edi + 0x16bc]
call fcn.0040a717
lea ecx, [edi + 0x16d8]
call fcn.0040a717
mov byte [ebp - 4], 6
lea ecx, [edi + 0x1704]
mov dword [edi + 0x16f4], 0x1000
mov dword [edi + 0x16f8], ebx
mov dword [edi + 0x16fc], ebx
mov dword [edi + 0x1700], ebx
call fcn.00419b6e
lea eax, [edi + 0x1724]
mov byte [ebp - 4], 7
push eax
mov dword [edi + 0x171c], ebx
call fcn.0041dee3
lea eax, [edi + 0x173c]
push eax
mov byte [ebp - 4], 8
call fcn.0041dee3
mov byte [ebp - 4], 9
push ebx
lea esi, [edi + 0x1768]
push 1
mov dword [edi + 0x1754], ebx
mov dword [edi + 0x1758], ebx
mov dword [edi + 0x175c], ebx
mov byte [edi + 0x1760], bl
mov dword [edi + 0x1764], 0x1f
mov dword [ebp - 0x10], esi
call fcn.0047df04
pop ecx
pop ecx
cmp eax, ebx
je 0x41ae18
mov dword [eax], esi
jmp 0x41ae1a
xor eax, eax
mov dword [esi], eax
mov byte [ebp - 4], 0xa
call fcn.00426279
lea ecx, [esi + 0x18]
mov dword [ecx], eax
mov byte [eax + 0x2d], 1
mov eax, dword [ecx]
mov dword [eax + 4], eax
mov eax, dword [ecx]
mov dword [eax], eax
mov ecx, dword [ecx]
mov dword [ecx + 8], ecx
mov dword [esi + 0x1c], ebx
lea ecx, [edi + 0x17b4]
mov dword [edi + 0x1788], ebx
mov dword [edi + 0x178c], ebx
mov byte [edi + 0x1790], bl
mov dword [edi + 0x1794], ebx
mov byte [edi + 0x17b0], 1
call fcn.0040a717
lea ecx, [edi + 0x17d0]
call fcn.0040a717
lea ecx, [edi + 0x17ec]
call fcn.0040a717
lea ecx, [edi + 0x1808]
call fcn.0040a717
lea ecx, [edi + 0x1828]
mov dword [edi + 0x1824], ebx
call fcn.0040a717
lea ecx, [edi + 0x1844]
call fcn.0040a717
push 5
pop eax
lea ecx, [edi + 0x1870]
mov dword [edi + 0x1860], ebx
mov word [edi + 0x1864], ax
mov dword [edi + 0x1868], ebx
mov dword [edi + 0x186c], ebx
call fcn.0040a717
mov byte [ebp - 4], 0x12
push 0x54
mov dword [edi + 0x188c], ebx
call fcn.0049ad2e
pop ecx
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0x13
cmp eax, ebx
je 0x41aef5
push edi
push eax
call fcn.004262e1
mov esi, eax
jmp 0x41aef7
xor esi, esi
push ebx
push ebx
push ebx
push ebx
mov dword [edi + 0x1720], esi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push esi
push ebx
push esi
push 0x41e30d
push ebx
push ebx
mov dword [esi + 8], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0xffffffffffffffff
push dword [esi + 8]
mov dword [esi + 4], eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0x1540
lea eax, [edi + 0x100]
push ebx
push eax
call fcn.0049d740
mov esi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
add esp, 0xc
lea eax, [edi + 0x1640]
push eax
call esi
lea eax, [edi + 0x1798]
push eax
call esi
mov ecx, dword [ebp - 0xc]
mov eax, edi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4