Function at 0x4b80a0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
mov ecx, 5
push 0
push 0
dec ecx
jne 0x4b80a8
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4b86af
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x4cab90], 0
jne 0x4b865c
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.00404344
xor eax, eax
push ebp
push 0x4b8186
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4cd120]
mov eax, dword [eax + 0x2f8]
xor edx, edx
call fcn.0043027c
lea eax, [ebp - 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00404344
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404300
push 0xffffffffffffffff
mov eax, dword [0x4cd550]
push eax
call sub.user32.dll_EnableWindow
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.00404300
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.00404300
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b8190
lea eax, [ebp - 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00404344
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.00404300
lea eax, [ebp - 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00404344
lea eax, [ebp - 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00404344
xor eax, eax
push ebp
push 0x4b82e3
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4cad10]
push eax
mov eax, dword [0x4cad10]
push eax
mov eax, dword [0x4cad10]
push eax
mov eax, dword [0x4cad10]
push eax
lea edx, [ebp - 0x14]
mov eax, 0x4b86c8
call fcn.004a828c
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x10]
call fcn.00404870
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [0x4cd54c]
push eax
mov eax, dword [eax]
call dword [eax + 0x2c]
call fcn.00405c60
lea eax, [ebp - 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00404344
lea eax, [ebp - 8]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404344
lea eax, [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.00404344
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00404300
mov eax, dword [0x4cad10]
push eax
mov eax, dword [0x4cad10]
push eax
mov eax, dword [0x4cad10]
push eax
mov eax, dword [0x4cad10]
push eax
lea edx, [ebp - 0x1c]
mov eax, 0x4b86c8
call fcn.004a828c
mov edx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
call fcn.00404870
mov eax, dword [ebp - 0x18]
push eax
lea edx, [ebp - 0x20]
mov eax, dword [0x4cd120]
mov eax, dword [eax + 0x3f0]
call fcn.00468150
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [eax]
call dword [eax + 0x2c]
call fcn.00405c60
lea eax, [ebp - 8]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404344
lea eax, [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.00404344
lea eax, [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.00404344
lea eax, [ebp - 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00404344
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b82ed
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 8]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404344
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.00404300
cmp dword [ebp - 4], 1
jne 0x4b83c4
lea eax, [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.00404344
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.00404344
mov eax, 0x3e8
call fcn.004a79e4
lea eax, [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.00404344
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea edx, [ebp - 0x24]
mov eax, dword [0x4cd120]
mov eax, dword [eax + 0x3f4]
call fcn.0043e698
mov edx, dword [ebp - 0x24]
mov eax, dword [0x4cd54c]
call fcn.004a8c74
lea eax, [ebp - 8]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404344
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.00404300
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.00404300
jmp 0x4b844d
xor eax, eax
push ebp
push 0x4b8414
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4cd548]
push eax
call sub.user32.dll_GetParent
push eax
call sub.user32.dll_CloseWindow
lea eax, [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.00404344
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.00404344
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b841e
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.00404300
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.00404300
lea eax, [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.00404344
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.00404344
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.00404300
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404300
xor eax, eax
mov dword [0x4cd548], eax
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.00404300
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.00404300
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.00404344
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00404300
xor eax, eax
push ebp
push 0x4b85f5
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x28]
mov eax, 0x4b86e8
call fcn.004a828c
mov edx, dword [ebp - 0x28]
mov eax, 0x4cd538
call fcn.0040408c
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.00404300
lea eax, [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.00404344
lea eax, [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.00404344
xor eax, eax
mov dword [0x4cd53c], eax
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404300
push 0x4cd524
push 0
push 0
push 0x4aaae4
push 0
push 0
call sub.kernel32.dll_CreateThread_1
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.00404344
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 8]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404344
lea eax, [ebp - 8]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404344
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.00404300
mov eax, dword [0x4cd554]
push eax
mov eax, dword [eax]
call dword [eax + 0x30]
call fcn.00405c60
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.00404300
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.00404344
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b85ff
lea eax, [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.00404344
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00404300
lea eax, [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.00404344
lea eax, [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.00404344
mov byte [0x4cab90], 1
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.00404300
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.00404300
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xc]
call fcn.00404300
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b86b6
lea eax, [ebp - 0x28]
call fcn.00404038
lea eax, [ebp - 0x24]
call fcn.00404038
lea eax, [ebp - 0x20]
call fcn.00405b50
lea eax, [ebp - 0x1c]
call fcn.00404038
lea eax, [ebp - 0x18]
call fcn.00404718
lea eax, [ebp - 0x14]
call fcn.00404038
lea eax, [ebp - 0x10]
call fcn.00404718
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0040405c
ret