Function at 0x444872
Capabilities:
Create process on windows
Terminate thread

Disassembly:
push ebp
lea ebp, [esp - 0x78]
sub esp, 0xbc
mov eax, dword [0x4c3a10]
xor eax, ebp
mov dword [ebp + 0x74], eax
push ebx
push esi
push edi
mov esi, ecx
push 0x4b31c8
lea ecx, [ebp - 0x18]
call fcn.00401900
lea eax, [ebp - 0x18]
push eax
call fcn.00403c57
mov ecx, eax
call fcn.00403c82
push str.ProgramSendStaticsRequest.exe
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 0x58]
push eax
call fcn.0041318d
add esp, 0xc
push dword [esi + 0xa0]
call dword [sym.imp.KERNEL32.dll_SetEvent]
push 0x3e8
push dword [esi + 0x9c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
xor ebx, ebx
cmp eax, 0x102
jne 0x4448f1
push ebx
push dword [esi + 0x9c]
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push ebx
lea ecx, [ebp + 0x20]
mov dword [ebp + 0x38], 0xf
call fcn.004027b9
cmp dword [ebp + 0x70], 8
mov eax, dword [ebp + 0x5c]
jae 0x44490d
lea eax, [ebp + 0x5c]
push ebx
push eax
call fcn.004797f6
pop ecx
pop ecx
test eax, eax
jne 0x444a3d
call fcn.0044481d
call fcn.0044481d
mov edi, 0xc0
jmp 0x444a32
call fcn.0044481d
call fcn.0044481d
mov ecx, eax
add ecx, edi
call fcn.00443b2a
push eax
lea ecx, [ebp + 4]
call fcn.00401922
cmp dword [ebp + 0x1c], 8
mov eax, dword [ebp + 8]
jae 0x44495a
lea eax, [ebp + 8]
lea ecx, [ebp + 0x20]
push ecx
push dword [ebp + 0x18]
push eax
call fcn.0040b4ee
mov eax, dword [ebp + 0x24]
add esp, 0xc
cmp dword [ebp + 0x38], 0x10
jae 0x444976
lea eax, [ebp + 0x24]
push str._________.__:
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00443bf1
add esp, 0xc
push ebx
lea ecx, [ebp + 0x3c]
mov dword [ebp + 0x54], 7
call fcn.00401ce9
lea eax, [ebp + 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0042932b
pop ecx
pop ecx
call fcn.0044481d
call fcn.0044481d
call fcn.0044481d
add eax, edi
push eax
mov eax, dword [eax + 0x14]
push dword [eax]
lea ecx, [ebp - 0x3c]
call fcn.004521bf
push dword [ebp - 0x38]
lea eax, [ebp - 0x44]
push dword [ebp - 0x3c]
push eax
call fcn.0044481d
mov ecx, eax
add ecx, edi
call fcn.00443e4c
cmp dword [ebp + 0x54], 8
mov ecx, dword [ebp + 0x40]
jae 0x4449ea
lea ecx, [ebp + 0x40]
cmp dword [ebp + 0x70], 8
mov eax, dword [ebp + 0x5c]
jae 0x4449f6
lea eax, [ebp + 0x5c]
push 1
push ebx
push ecx
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push ebx
push 1
lea ecx, [ebp + 0x3c]
call fcn.00401a62
push ebx
push 1
lea ecx, [ebp - 0x34]
call fcn.004027d5
push ebx
push 1
lea ecx, [ebp + 4]
call fcn.00401a62
call fcn.0044481d
call fcn.0044481d
add eax, edi
cmp dword [eax + 0x18], ebx
jne 0x444932
push dword [esi + 0x9c]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push dword [esi + 0xa4]
call edi
push dword [esi + 0xa0]
call edi
lea eax, [esi + 0xa8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
lea ecx, [esi + 0xc0]
mov dword [esi + 0x9c], ebx
mov dword [esi + 0xa4], ebx
mov dword [esi + 0xa0], ebx
call fcn.00443ea2
push ebx
push 1
lea ecx, [ebp + 0x20]
call fcn.004027d5
push ebx
push 1
lea ecx, [ebp + 0x58]
call fcn.00401a62
push ebx
push 1
lea ecx, [ebp - 0x18]
call fcn.00401a62
mov ecx, dword [ebp + 0x74]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0047674a
add ebp, 0x78
leave
ret