Function at 0x415c80
Capabilities:
Create thread

Disassembly:
sub esp, 0x18
push ebp
push esi
mov esi, 1
sub eax, esi
push edi
je 0x415dc1
sub eax, esi
je 0x415d81
sub eax, esi
jne 0x415f9a
lea esi, [ebx + 0x3d91c]
xor ebp, ebp
cmp esi, ebp
je 0x415cbf
mov eax, dword [esi + 0x20]
cmp eax, ebp
je 0x415cbf
push 1
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esi + 0x850]
cmp eax, ebp
je 0x415ce1
cmp dword [eax + 0x20], ebp
je 0x415ce1
mov eax, dword [esi + 0x870]
push ebp
push ebp
push 0x10
push eax
call edi
mov eax, dword [0x4b1dc8]
cmp eax, ebp
je 0x415cfa
mov ecx, dword [eax + 0x20]
push ebp
push ebp
push 0x10
push ecx
call edi
mov dword [0x4b1dc8], ebp
mov eax, dword [0x4b1dc4]
cmp eax, ebp
je 0x415d13
mov edx, dword [eax + 0x20]
push ebp
push ebp
push 0x10
push edx
call edi
mov dword [0x4b1dc4], ebp
mov ecx, ebx
call fcn.00413450
call fcn.0044abc0
push ebp
lea ecx, [ebx + 0x4207c]
call fcn.0045abbc
push ebp
lea ecx, [ebx + 0x42154]
call fcn.0045abbc
push ebp
lea ecx, [ebx + 0x4222c]
call fcn.0045abbc
push ebp
lea ecx, [ebx + 0x4c4]
call fcn.0045abbc
push ebp
lea ecx, [ebx + 0x4258c]
call fcn.0045abbc
push 0x85
mov ecx, ebx
call fcn.0045a999
mov eax, dword [eax + 0x20]
push ebp
push ebp
push 6
push eax
call edi
push 0
mov eax, ebx
call fcn.00415350
pop edi
pop esi
pop ebp
add esp, 0x18
ret
call fcn.0044abc0
push 0x85
mov ecx, ebx
call fcn.0045a999
mov ecx, dword [eax + 0x20]
push 0
push 0
push 6
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [0x4b298c]
push edx
call fcn.0044ad10
add esp, 4
push 0
mov eax, ebx
call fcn.00415350
pop edi
pop esi
pop ebp
add esp, 0x18
ret
call fcn.0044a9a0
xor edi, edi
cmp dword [0x4b1dfc], edi
jne 0x415e6c
mov eax, dword [0x4b1dc8]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, edi
je 0x415df3
mov eax, dword [eax + 0x20]
push edi
push edi
push 0x10
push eax
call esi
mov dword [0x4b1dc8], edi
mov eax, dword [0x4b1dc4]
cmp eax, edi
je 0x415e0c
mov ecx, dword [eax + 0x20]
push edi
push edi
push 0x10
push ecx
call esi
mov dword [0x4b1dc4], edi
mov ecx, ebx
call fcn.00413450
push edi
lea ecx, [ebx + 0x4207c]
call fcn.0045abbc
push edi
lea ecx, [ebx + 0x42154]
call fcn.0045abbc
push edi
lea ecx, [ebx + 0x4222c]
call fcn.0045abbc
push edi
lea ecx, [ebx + 0x4c4]
call fcn.0045abbc
push edi
lea ecx, [ebx + 0x4258c]
call fcn.0045abbc
push 0x85
mov ecx, ebx
call fcn.0045a999
mov edx, dword [eax + 0x20]
push edi
push edi
push 6
push edx
call esi
pop edi
pop esi
pop ebp
add esp, 0x18
ret
mov ebp, dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x4b2a00], esi
jne 0x415ee6
cmp dword [0x4b1de0], esi
jne 0x415ee6
mov edi, 0x4b2a04
mov esi, 0x4b509c
call fcn.00403990
push 0x4b50a8
mov ecx, 0x4b50a8
call fcn.00435210
add esp, 4
push 0x4b50a8
mov ecx, 0x4b50a8
call fcn.004348f0
add esp, 4
push 0x4b50a8
mov ecx, 0x4b50a8
call fcn.004352f0
add esp, 4
push 0xcc
mov ecx, ebx
call fcn.0045a999
mov eax, dword [eax + 0x20]
push 0
push 0
push 0x1437
push eax
call ebp
xor edi, edi
jmp 0x415f54
mov dword [0x4b2a00], edi
call fcn.0044dd40
mov ecx, dword [0x4b298c]
push ecx
call fcn.0044ad10
add esp, 4
push 0x4b5040
call fcn.0044fa80
lea edx, [esp + 0x14]
add esp, 4
push edx
call fcn.0044a5b0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
add esp, 4
mov dword [0x4b5064], eax
mov dword [0x4b5068], ecx
mov dword [0x4b506c], edx
cmp dword [0x4b5040], esi
je 0x415f54
push edi
push edi
push edi
push 0x442d20
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x4b1dd0], eax
cmp dword [0x4b1e10], 8
jne 0x415f6a
xor eax, eax
cmp dword [0x4b2a00], edi
setne al
jmp 0x415f76
mov eax, dword [0x4b2a00]
neg eax
sbb eax, eax
and eax, 2
mov dword [ebx + 0x4b8], eax
push edi
mov eax, ebx
call fcn.00415350
push 0x85
mov ecx, ebx
call fcn.0045a999
mov eax, dword [eax + 0x20]
push edi
push edi
push 6
push eax
call ebp
push 0
mov eax, ebx
call fcn.00415350
pop edi
pop esi
pop ebp
add esp, 0x18
ret