Function at 0x415eb0
Capabilities:
Create thread

Disassembly:
sub esp, 0x18
push ebp
push esi
mov esi, 1
sub eax, esi
push edi
je 0x415ff1
sub eax, esi
je 0x415fb1
sub eax, esi
jne 0x4161ad
lea esi, [ebx + 0x3d91c]
xor ebp, ebp
cmp esi, ebp
je 0x415eef
mov eax, dword [esi + 0x20]
cmp eax, ebp
je 0x415eef
push 1
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esi + 0x850]
cmp eax, ebp
je 0x415f11
cmp dword [eax + 0x20], ebp
je 0x415f11
mov eax, dword [esi + 0x870]
push ebp
push ebp
push 0x10
push eax
call edi
mov eax, dword [0x4b2dc8]
cmp eax, ebp
je 0x415f2a
mov ecx, dword [eax + 0x20]
push ebp
push ebp
push 0x10
push ecx
call edi
mov dword [0x4b2dc8], ebp
mov eax, dword [0x4b2dc4]
cmp eax, ebp
je 0x415f43
mov edx, dword [eax + 0x20]
push ebp
push ebp
push 0x10
push edx
call edi
mov dword [0x4b2dc4], ebp
mov ecx, ebx
call fcn.00413590
call fcn.0044c060
push ebp
lea ecx, [ebx + 0x42080]
call fcn.0045c0f7
push ebp
lea ecx, [ebx + 0x42158]
call fcn.0045c0f7
push ebp
lea ecx, [ebx + 0x42230]
call fcn.0045c0f7
push ebp
lea ecx, [ebx + 0x4c4]
call fcn.0045c0f7
push ebp
lea ecx, [ebx + 0x42590]
call fcn.0045c0f7
push 0x85
mov ecx, ebx
call fcn.0045bed4
mov eax, dword [eax + 0x20]
push ebp
push ebp
push 6
push eax
call edi
push 0
mov eax, ebx
call fcn.00415550
pop edi
pop esi
pop ebp
add esp, 0x18
ret
call fcn.0044c060
push 0x85
mov ecx, ebx
call fcn.0045bed4
mov ecx, dword [eax + 0x20]
push 0
push 0
push 6
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [0x4b3994]
push edx
call fcn.0044c1b0
add esp, 4
push 0
mov eax, ebx
call fcn.00415550
pop edi
pop esi
pop ebp
add esp, 0x18
ret
call fcn.0044be40
xor edi, edi
cmp dword [0x4b2e00], edi
jne 0x41609c
mov eax, dword [0x4b2dc8]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, edi
je 0x416023
mov eax, dword [eax + 0x20]
push edi
push edi
push 0x10
push eax
call esi
mov dword [0x4b2dc8], edi
mov eax, dword [0x4b2dc4]
cmp eax, edi
je 0x41603c
mov ecx, dword [eax + 0x20]
push edi
push edi
push 0x10
push ecx
call esi
mov dword [0x4b2dc4], edi
mov ecx, ebx
call fcn.00413590
push edi
lea ecx, [ebx + 0x42080]
call fcn.0045c0f7
push edi
lea ecx, [ebx + 0x42158]
call fcn.0045c0f7
push edi
lea ecx, [ebx + 0x42230]
call fcn.0045c0f7
push edi
lea ecx, [ebx + 0x4c4]
call fcn.0045c0f7
push edi
lea ecx, [ebx + 0x42590]
call fcn.0045c0f7
push 0x85
mov ecx, ebx
call fcn.0045bed4
mov edx, dword [eax + 0x20]
push edi
push edi
push 6
push edx
call esi
pop edi
pop esi
pop ebp
add esp, 0x18
ret
mov ebp, dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x4b3a08], esi
jne 0x416116
cmp dword [0x4b2de0], esi
jne 0x416116
mov edi, 0x4b3a0c
mov esi, 0x4b60a4
call fcn.00403940
push 0x4b60b0
mov ecx, 0x4b60b0
call fcn.00435fd0
add esp, 4
push 0x4b60b0
mov ecx, 0x4b60b0
call fcn.00435660
add esp, 4
push 0x4b60b0
mov ecx, 0x4b60b0
call fcn.004360b0
add esp, 4
push 0xcc
mov ecx, ebx
call fcn.0045bed4
mov eax, dword [eax + 0x20]
push 0
push 0
push 0x1437
push eax
call ebp
xor edi, edi
jmp 0x416184
mov dword [0x4b3a08], edi
call fcn.0044f220
mov ecx, dword [0x4b3994]
push ecx
call fcn.0044c1b0
add esp, 4
push 0x4b6048
call fcn.00450f60
lea edx, [esp + 0x14]
add esp, 4
push edx
call fcn.0044ba50
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
add esp, 4
mov dword [0x4b606c], eax
mov dword [0x4b6070], ecx
mov dword [0x4b6074], edx
cmp dword [0x4b6048], esi
je 0x416184
push edi
push edi
push edi
push 0x444080
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x4b2dd0], eax
call fcn.00434a20
mov dword [ebx + 0x4b8], eax
push edi
mov eax, ebx
call fcn.00415550
push 0x85
mov ecx, ebx
call fcn.0045bed4
mov eax, dword [eax + 0x20]
push edi
push edi
push 6
push eax
call ebp
push 0
mov eax, ebx
call fcn.00415550
pop edi
pop esi
pop ebp
add esp, 0x18
ret