Function at 0x417460
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov dword [ebp - 0x14], 0
mov eax, dword [ebp + 8]
push eax
call fcn.0043cb70
add esp, 4
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
cmp dword [ebp - 0x1c], 0xb
ja case.default.0x417498
mov eax, dword [ebp - 0x1c]
jmp dword [eax*4 + 0x417720]
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.004183e0
add esp, 4
jmp case.default.0x417498
mov edx, dword [0x48d740]
push edx
call fcn.0043cae0
add esp, 4
mov dword [0x48d740], 0xffffffff
mov dword [ebp - 8], 0
jmp 0x4174db
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0x14
jge 0x41760c
push 0
push 0
push 0x12
mov ecx, dword [ebp - 8]
imul ecx, ecx, 0x70
mov edx, dword [ecx + 0x48ce70]
push edx
call dword [sym.imp.USER32.dll_PostThreadMessageA]
mov eax, dword [ebp - 8]
imul eax, eax, 0x70
mov ecx, dword [eax + 0x48ce78]
push ecx
call fcn.0043cae0
add esp, 4
mov edx, dword [ebp - 8]
imul edx, edx, 0x70
mov eax, dword [edx + 0x48ce74]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 8]
imul ecx, ecx, 0x70
mov dword [ecx + 0x48ce70], 0
mov edx, dword [ebp - 8]
imul edx, edx, 0x70
mov dword [edx + 0x48ce74], 0
mov eax, dword [ebp - 8]
imul eax, eax, 0x70
mov dword [eax + 0x48ce78], 0xffffffff
push 0x46732d
mov ecx, dword [ebp - 8]
imul ecx, ecx, 0x70
add ecx, 0x48ce7c
push ecx
call fcn.00445510
add esp, 8
mov edx, dword [ebp - 8]
imul edx, edx, 0x70
mov dword [edx + 0x4900e0], 0
mov eax, dword [ebp - 8]
imul eax, eax, 0x70
mov dword [eax + 0x4900e4], 0
mov ecx, dword [ebp - 8]
imul ecx, ecx, 0x70
mov dword [ecx + 0x4900e8], 0xffffffff
push 0x46732e
mov edx, dword [ebp - 8]
imul edx, edx, 0x70
add edx, 0x4900ec
push edx
call fcn.00445510
add esp, 8
mov dword [ebp - 0x18], 0
jmp 0x4175cc
mov eax, dword [ebp - 0x18]
add eax, 1
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x64
jge 0x4175f8
push 0x46732f
mov ecx, dword [ebp - 8]
imul ecx, ecx, 0x1f40
mov edx, dword [ebp - 0x18]
imul edx, edx, 0x50
lea eax, [ecx + edx + 0x492040]
push eax
call fcn.00445510
add esp, 8
jmp 0x4175c3
mov ecx, dword [0x4b9f4c]
sub ecx, 1
mov dword [0x4b9f4c], ecx
jmp 0x4174d2
cmp dword [0x4b9f4c], 0
jge 0x41761f
mov dword [0x4b9f4c], 0
push 0
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp + 0xc]
push eax
call fcn.004184d0
add esp, 0xc
jmp case.default.0x417498
push 1
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call fcn.004184d0
add esp, 0xc
mov eax, dword [ebp + 0xc]
push eax
call fcn.00418bf0
add esp, 4
jmp case.default.0x417498
lea ecx, [ebp - 0xc]
push ecx
push 0
mov edx, dword [ebp + 0xc]
push edx
push 0x418180
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x10], eax
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp case.default.0x417498
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.00419270
add esp, 4
jmp case.default.0x417498
push 0
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp + 0xc]
push eax
call fcn.00419310
add esp, 0xc
jmp case.default.0x417498
push 1
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call fcn.00419310
add esp, 0xc
jmp case.default.0x417498
mov eax, dword [ebp + 0xc]
push eax
call fcn.0041a050
add esp, 4
jmp case.default.0x417498
push 0
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call fcn.0041a0f0
add esp, 0xc
jmp case.default.0x417498
push 1
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.0041a0f0
add esp, 0xc
jmp case.default.0x417498
mov edx, dword [ebp + 0xc]
push edx
call fcn.0040fa00
add esp, 4
jmp case.default.0x417498
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.00417780
add esp, 8
xor eax, eax
mov esp, ebp
pop ebp
ret