Function at 0x4d9a11
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
cmp dword [0x735d78], 0
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x14], edi
jg 0x4d9a42
xor ebx, ebx
push ebx
push ebx
push 0x581
push dword [0x735624]
call dword [0x7353d8]
jmp 0x4d9cbd
lea esi, [edi + 0x20]
mov byte [edi + 0x2c4], 1
push str.weather_refreshtime
mov ecx, esi
call fcn.005cfc5e
mov ebx, eax
test ebx, ebx
je 0x4d9aa7
push 0x6b1828
lea ecx, [edi + 0x2d0]
push ecx
lea eax, [ebp - 8]
push 0x6b1840
push eax
call fcn.0044c94c
add esp, 0xc
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004227e4
mov edx, dword [ebx]
add esp, 0xc
mov ecx, ebx
push dword [eax]
call dword [edx + 0x3c]
mov ecx, dword [ebp - 0x10]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov ecx, dword [ebp - 8]
lea ecx, [ecx - 0x10]
call fcn.00419521
push str.weather_userset_citylist
mov ecx, esi
call fcn.005cfc5e
test eax, eax
je 0x4d9ac3
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx + 0x180]
push str.weather_citysearchlist
mov ecx, esi
call fcn.005cfc5e
xor ebx, ebx
test eax, eax
je 0x4d9ae0
mov edx, dword [eax]
mov ecx, eax
push ebx
call dword [edx + 0x180]
push str.weather_cityselect
mov ecx, esi
call fcn.005cfc5e
test eax, eax
je 0x4d9afb
mov edx, dword [eax]
mov ecx, eax
push ebx
call dword [edx + 0x180]
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
call dword [eax + 0x16c]
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.00418dea
mov ecx, esp
mov dword [ebp - 0x10], eax
push 0x68c4fc
call fcn.004177e7
push ecx
mov esi, esp
push dword [ebp - 0x10]
call fcn.00418dea
add eax, 0x10
mov dword [esi], eax
lea eax, [ebp - 0x24]
pop ecx
push eax
call fcn.0051413f
add esp, 0xc
call fcn.00418f81
push eax
lea ecx, [ebp - 4]
call fcn.0041775d
cmp dword [ebp - 0x20], ebx
je 0x4d9b62
push ebx
lea ecx, [ebp - 0x24]
call fcn.0044c702
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
push ecx
mov ecx, esp
push str.UserConfig
call fcn.004177e7
push ecx
mov ecx, esp
push str.WeatherConfig
call fcn.004177e7
lea eax, [ebp - 0x18]
mov ecx, 0x735bd8
push eax
call fcn.004987e3
mov eax, dword [edi + 0x2d8]
add edi, 0x2d4
mov esi, dword [ebp - 4]
mov dword [ebp - 8], ebx
sub eax, dword [edi]
sar eax, 4
test eax, eax
je 0x4d9c33
mov edx, ebx
mov dword [ebp + 8], ebx
mov eax, dword [edi]
push esi
mov byte [edx + eax + 0xc], bl
mov ecx, dword [edi]
add ecx, edx
call fcn.004229b4
test eax, eax
jne 0x4d9c13
mov eax, dword [edi]
mov ecx, dword [ebp + 8]
mov byte [ecx + eax + 0xc], 1
lea eax, [ebp - 4]
push eax
mov ecx, 0x735b1c
call fcn.00418bac
push 0x6809b0
mov ecx, 0x735b04
call fcn.004195af
mov ecx, dword [ebp + 8]
mov eax, dword [edi]
add ecx, 8
add eax, ecx
mov ecx, 0x735b08
push eax
call fcn.00418bac
mov ecx, dword [ebp + 8]
mov eax, dword [edi]
add ecx, 4
add eax, ecx
mov ecx, 0x735b0c
push eax
call fcn.00418bac
mov eax, dword [edi + 4]
mov ecx, dword [ebp - 8]
sub eax, dword [edi]
inc ecx
mov edx, dword [ebp + 8]
add edx, 0x10
sar eax, 4
mov dword [ebp - 8], ecx
mov dword [ebp + 8], edx
cmp ecx, eax
jb 0x4d9bae
sub esp, 0xc
mov ecx, esp
push edi
call fcn.0043ec29
lea eax, [ebp - 0xc]
push eax
call fcn.0045add5
push 8
call fcn.00609934
mov edi, eax
add esp, 0x14
test edi, edi
je 0x4d9c67
call fcn.00418f81
push eax
lea ecx, [edi + 4]
call fcn.0041775d
jmp 0x4d9c69
mov edi, ebx
mov eax, dword [ebp - 0x14]
lea ecx, [edi + 4]
mov eax, dword [eax + 0x2c0]
mov dword [edi], eax
lea eax, [ebp - 0xc]
push eax
call fcn.00418bac
push edi
push ebx
push 0x506a1b
call fcn.006423a8
mov ecx, dword [ebp - 0xc]
add esp, 0xc
lea ecx, [ecx - 0x10]
call fcn.00419521
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00419521
lea ecx, [esi - 0x10]
call fcn.00419521
lea ecx, [ebp - 0x24]
call fcn.004e8a9c
mov ecx, dword [ebp - 0x10]
call fcn.00419521
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc