Function at 0x4415e0
Capabilities:
Check for time delay via gettickcount
Create thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x290c
call fcn.005e00d0
mov eax, dword [0x6aae14]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 0x18]
push 0x5c
shr esi, 0x14
push ebx
imul esi, esi, 0x64
call fcn.005e0a00
add esp, 8
test eax, eax
je 0x441877
sub eax, ebx
push edi
mov edi, eax
cmp edi, 0x7ff
ja 0x441876
mov ecx, dword [0x7330d0]
mov eax, dword [0x686304]
cmp ecx, eax
jl 0x44168d
cmp dword [0x71de6c], 0
je 0x441672
mov edx, dword [0x7330d0]
push eax
push edx
lea eax, [ebp - 0x108]
push str._PSCAN__TOO_MANY_EEMPTY_THREADS___u____u____Not_processing_skipped_folder...
push eax
call fcn.005dfb23
push 0
push 1
lea ecx, [ebp - 0x108]
push ecx
push 0x6aec98
call fcn.004311c0
add esp, 0x20
pop edi
pop esi
mov dword [0x72d24c], 0
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005dfbbe
mov esp, ebp
pop ebp
ret
push edi
lea edx, [ebp - 0x908]
push ebx
push edx
call fcn.005e1e30
add esp, 0xc
push 0x6e8c70
mov byte [ebp + edi - 0x908], 0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0
push 0
lea eax, [ebp - 0x908]
push eax
mov ecx, 0x7335c0
call fcn.004f2f50
mov dword [ebp - 0x290c], eax
test eax, eax
je 0x441796
mov edi, dword [eax + 0x10]
test edi, edi
je 0x4416ea
call dword [sym.imp.KERNEL32.dll_GetTickCount]
add eax, esi
mov dword [edi], eax
jmp 0x44186b
cmp dword [ebp + 0x10], 0
jne 0x44186b
push 4
call fcn.004d9470
mov edi, eax
add esp, 4
test edi, edi
je 0x44186b
mov ecx, dword [ebp - 0x290c]
mov dword [ecx + 0x10], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
add eax, esi
lea edx, [ebp - 0x908]
push edx
mov dword [edi], eax
mov eax, dword [ebp + 0x14]
push eax
lea ecx, [ebp - 0x1908]
push str._PSCAN___A__u_Starting_EEM_for__s
push ecx
call fcn.005dfb23
push 0
push 1
lea edx, [ebp - 0x1908]
push edx
push 0x6aec98
call fcn.004311c0
lea eax, [ebp - 0x290c]
push eax
push 0
push 0x4411c0
call fcn.005e07ac
mov esi, eax
add esp, 0x2c
cmp esi, 0xffffffff
je 0x44186b
cmp dword [ebp - 0x290c], 0
je 0x441789
push 5
call fcn.004d5a60
add esp, 4
cmp dword [ebp - 0x290c], 0
jne 0x441776
push 0
push esi
push str.CBD_4h
jmp 0x441863
cmp dword [ebp + 0x10], 0
jne 0x44186b
push 4
call fcn.004d9470
mov edi, eax
add esp, 4
test edi, edi
je 0x44186b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 1
push edi
lea ecx, [ebp - 0x908]
add eax, esi
push ecx
mov ecx, 0x7335c0
mov dword [edi], eax
call fcn.004f2b40
push 0
push 0
lea edx, [ebp - 0x908]
push edx
mov ecx, 0x7335c0
call fcn.004f2f50
mov dword [ebp - 0x290c], eax
test eax, eax
je 0x44186b
mov ecx, dword [ebp + 0x14]
lea eax, [ebp - 0x908]
push eax
push ecx
lea edx, [ebp - 0x2908]
push str._PSCAN___B__u_Starting_EEM_for__s
push edx
call fcn.005dfb23
push 0
push 1
lea eax, [ebp - 0x2908]
push eax
push 0x6aec98
call fcn.004311c0
lea ecx, [ebp - 0x290c]
push ecx
push 0
push 0x4411c0
call fcn.005e07ac
mov esi, eax
add esp, 0x2c
cmp esi, 0xffffffff
je 0x44186b
cmp dword [ebp - 0x290c], 0
je 0x44185b
push 5
call fcn.004d5a60
add esp, 4
cmp dword [ebp - 0x290c], 0
jne 0x441848
push 0
push esi
push str.CBD_4j
call fcn.00420720
add esp, 0xc
push 0x6e8c70
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
pop edi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.005dfbbe
mov esp, ebp
pop ebp
ret