Function at 0x4f6ee0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x70
push ebx
push esi
lea eax, [ebp - 0x70]
mov esi, ecx
push edi
push eax
call fcn.004b8240
add esp, 4
mov ecx, esi
push eax
call fcn.004f2720
cmp dword [ebp - 0x5c], 8
jb 0x4f6f10
push dword [ebp - 0x70]
call fcn.00412887
add esp, 4
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 1
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push 0x58e140
mov word [ecx], ax
call fcn.00408659
call fcn.004fbfa0
add esp, 0x18
lea edi, [esi + 0xc0]
mov ecx, edi
push dword [ebp + 0xc]
call fcn.004e8d10
test al, al
jne 0x4f6f5b
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
lea eax, [ebp - 4]
mov dword [ebp - 8], 0
push eax
lea eax, [ebp - 8]
mov dword [ebp - 4], 0
push eax
mov ecx, edi
call fcn.004e65b0
push 1
test al, al
lea ebx, [esi + 0x74]
push 4
lea eax, [ebp - 0x70]
push eax
je 0x4f6f9f
call fcn.004b7e30
add esp, 0xc
mov ecx, ebx
push eax
push dword [ebp - 4]
push dword [ebp - 8]
call fcn.005098a0
jmp 0x4f6fb2
call fcn.004b7e30
add esp, 0xc
mov ecx, ebx
push eax
push dword [ebp + 8]
call fcn.00509960
cmp dword [ebp - 0x5c], 8
jb 0x4f6fc3
push dword [ebp - 0x70]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
mov ecx, edi
lea eax, [ebp - 0x58]
mov dword [ebp - 0x48], 0
push eax
call fcn.004e8660
test eax, eax
je 0x4f6ff2
lea eax, [ebp - 0x58]
push eax
call fcn.004b7f70
add esp, 4
push 0x4f36b0
mov ecx, ebx
call fcn.00509a60
sub esp, 0x18
mov ecx, esp
push str.2345
call fcn.00408718
call fcn.004fbfa0
add esp, 0x18
mov ecx, esi
call fcn.004f3d30
dec eax
mov ecx, ebx
neg eax
sbb eax, eax
inc eax
setne al
movzx eax, al
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.00509510
push eax
mov ecx, edi
call fcn.004e8c10
cmp dword [ebp - 0x5c], 0x10
jb 0x4f704d
push dword [ebp - 0x70]
call fcn.00412887
add esp, 4
sub esp, 0x18
mov ecx, edi
push esp
call fcn.004e6630
call fcn.004ed370
mov ecx, eax
call fcn.004ed890
push 0
push 0
mov ecx, edi
call fcn.004e8b10
push eax
call fcn.004bb790
add esp, 0xc
mov dword [ebp - 0x2c], 7
xor eax, eax
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x40]
mov word [ebp - 0x40], ax
push eax
push 0x581738
call fcn.00408659
push dword [ebp + 0xc]
lea ecx, [ebp - 0x28]
call fcn.00408718
lea eax, [ebp - 0x70]
push eax
call fcn.004ae140
add esp, 4
mov dword [ebp + 0xc], eax
call fcn.004fb990
mov ecx, esi
mov dword [ebp + 8], eax
call fcn.004f3d30
mov ecx, edi
mov dword [ebp - 0xc], eax
call fcn.004e94a0
movzx eax, al
mov ecx, edi
mov dword [ebp - 0x10], eax
call fcn.004e9450
test al, al
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x28]
push eax
push dword [ebp + 0xc]
push dword [ebp + 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
push 0x7d0
push 0x1fc5
je 0x4f7103
call fcn.004bb630
jmp 0x4f7108
call fcn.004bb690
add esp, 0x20
cmp dword [ebp - 0x5c], 8
jb 0x4f711c
push dword [ebp - 0x70]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 0x5c], 7
cmp dword [ebp - 0x14], 8
mov dword [ebp - 0x60], 0
mov word [ebp - 0x70], ax
jb 0x4f7141
push dword [ebp - 0x28]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 0x14], 7
cmp dword [ebp - 0x2c], 8
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
jb 0x4f7166
push dword [ebp - 0x40]
call fcn.00412887
add esp, 4
mov ecx, esi
call fcn.004f2fc0
test eax, eax
je 0x4f721d
sub esp, 0x18
mov ecx, esp
push 0x56dbc8
call fcn.00408718
call fcn.004fbfa0
add esp, 0x18
mov ecx, ebx
call fcn.00509b10
push 0
push 0
push 1
push 0x4f85f0
push 0
push 0
call fcn.00526b46
add esp, 0x18
mov dword [esi + 0x4c], eax
mov ecx, edi
call fcn.004e94a0
test al, al
jne 0x4f7273
mov ecx, esi
call fcn.004f3d30
cmp eax, 2
jne 0x4f71dd
push 0x581738
push 0
push 0
push 0x141
push 0x58e6e0
jmp 0x4f71fc
mov ecx, esi
call fcn.004f3d30
cmp eax, 3
jne 0x4f723b
push 0x581738
push 0
push 0
push 0x141
push 0x58e718
call fcn.004fbc20
add esp, 0x14
cmp eax, 1
je 0x4f723b
mov dword [esi + 0x408], 3
mov dword [esi + 0x40c], 0
xor esi, esi
cmp dword [ebp - 0x44], 8
jb 0x4f7230
push dword [ebp - 0x58]
call fcn.00412887
add esp, 4
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
sub esp, 0x18
mov ecx, esp
push 0x56dbcc
call fcn.00408718
call fcn.004fbfa0
add esp, 0x18
mov ecx, esi
call fcn.004f3370
push eax
mov dword [esi + 0x70], eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x4f7291
mov dword [esi + 0x40c], 7
jmp 0x4f721d
sub esp, 0x18
mov ecx, esp
push 0x56dbd0
call fcn.00408718
call fcn.004fbfa0
add esp, 0x18
mov ecx, esi
call fcn.004f72a0
mov esi, 1
jmp 0x4f721f