Function at 0x44cf20
Capabilities:
Create thread
Set current directory
Terminate thread

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x240
push 0
push 0
dec ecx
jne 0x44cbf8
push ebx
push esi
push edi
mov dword [ebp - 4], eax
lea eax, [ebp - 0x1e]
mov edx, dword [0x44b624]
call fcn.004047f4
mov ecx, 0x65
lea eax, [ebp - 0x1bc]
mov edx, dword [0x40102c]
call fcn.00404824
xor eax, eax
push ebp
push 0x44dd89
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
push ebp
push 0x44dd2b
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 0x10]
call fcn.00403e08
lea eax, [ebp - 0x11bc]
mov edx, 0x1000
call fcn.004066d8
lea edx, [ebp - 0x11bc]
mov ecx, 0x1000
mov eax, dword [ebp - 4]
call fcn.0043c68c
mov ebx, eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0xc], 0
jne 0x44cc88
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44dd3a
lea eax, [ebp - 0xc]
mov edx, ebx
call fcn.004043f8
lea eax, [ebp - 0xc]
call fcn.00404320
lea edx, [ebp - 0x11bc]
mov ecx, ebx
call fcn.004066c8
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0xc]
call fcn.004040d0
lea edx, [ebp - 0x1e]
mov eax, dword [ebp - 0x10]
call fcn.0044b654
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0x18]
call fcn.00403ea0
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x1c]
call fcn.00403ea0
mov al, byte [ebp - 0x1d]
cmp byte [ebp - 0x1e], 0
je 0x44dd1e
and eax, 0xff
cmp eax, 0x44
ja case.0x44ccee.0
jmp dword [eax*4 + 0x44ccf5]
xor eax, eax
push ebp
push 0x44ce3b
push dword fs:[eax]
mov dword fs:[eax], esp
push 2
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
push eax
call sub.wsock32.dll_shutdown
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
push eax
call sub.wsock32.dll_closesocket
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44ce45
xor eax, eax
push ebp
push 0x44ce8f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4537a4]
mov eax, dword [eax]
call fcn.004045f8
push eax
call sub.kernel32.dll_SetCurrentDirectoryW
push 0
mov edx, dword [0x4536b8]
mov edx, dword [edx]
xor ecx, ecx
mov eax, 0x44dd9c
call fcn.00440554
push 0
call sub.kernel32.dll_ExitProcess_1
xor eax, eax
push ebp
push 0x44ced0
push dword fs:[eax]
mov dword fs:[eax], esp
push 2
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
push eax
call sub.wsock32.dll_shutdown
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
push eax
call sub.wsock32.dll_closesocket
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44ceda
push 0
call sub.kernel32.dll_ExitProcess_1
lea eax, [ebp - 0x11c0]
call fcn.0044eeb4
mov ecx, dword [ebp - 0x11c0]
mov dl, 0x35
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
lea eax, [ebp - 8]
call fcn.0043cf58
mov ecx, dword [ebp - 8]
mov dl, 5
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
lea ecx, [ebp - 8]
mov dl, 1
mov eax, dword [ebp - 0x14]
call fcn.0043ccfc
mov ecx, dword [ebp - 8]
mov dl, 6
mov eax, dword [ebp - 4]
call fcn.0044b720
push 0x64
call sub.kernel32.dll_Sleep_1
lea ecx, [ebp - 8]
xor edx, edx
mov eax, dword [ebp - 0x14]
call fcn.0043ccfc
mov ecx, dword [ebp - 8]
mov dl, 7
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
mov dl, 1
mov eax, dword [ebp - 0x14]
call fcn.00450128
test al, al
je 0x44cf7d
lea eax, [ebp - 8]
mov edx, 0x44ddb0
call fcn.00403ea0
jmp 0x44cf8a
lea eax, [ebp - 8]
mov edx, 0x44ddbc
call fcn.00403ea0
mov ecx, dword [ebp - 8]
mov dl, 8
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
xor edx, edx
mov eax, dword [ebp - 0x14]
call fcn.00450128
test al, al
je 0x44cfb9
lea eax, [ebp - 8]
mov edx, 0x44ddb0
call fcn.00403ea0
jmp 0x44cfc6
lea eax, [ebp - 8]
mov edx, 0x44ddbc
call fcn.00403ea0
mov ecx, dword [ebp - 8]
mov dl, 8
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
mov eax, dword [ebp - 0x14]
call fcn.004042c8
mov edx, eax
lea eax, [ebp - 0x11c4]
call fcn.00404000
mov eax, dword [ebp - 0x11c4]
call fcn.0040812c
test al, al
je 0x44d00b
lea eax, [ebp - 8]
mov edx, 0x44ddb0
call fcn.00403ea0
jmp 0x44d018
lea eax, [ebp - 8]
mov edx, 0x44ddbc
call fcn.00403ea0
mov ecx, dword [ebp - 8]
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
lea edx, [ebp - 0x1bc]
mov ecx, 0x64
mov eax, dword [ebp - 0x14]
call fcn.0044cae8
mov ecx, dword [ebp - 0x1b4]
mov edx, dword [ebp - 0x1b8]
mov eax, dword [ebp - 0x1bc]
call fcn.004501c0
test al, al
je 0x44d067
lea eax, [ebp - 8]
mov edx, 0x44ddb0
call fcn.00403ea0
jmp 0x44d074
lea eax, [ebp - 8]
mov edx, 0x44ddbc
call fcn.00403ea0
mov ecx, dword [ebp - 8]
mov dl, 0xb
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
lea edx, [ebp - 0x1bc]
mov ecx, 0x64
mov eax, dword [ebp - 0x14]
call fcn.0044cae8
mov eax, dword [ebp - 0x1bc]
call fcn.004080a0
test al, al
jne 0x44d0e0
push dword [ebp - 0x1b8]
push 0x44ddc8
push dword [ebp - 0x1b4]
push 0x44ddc8
lea edx, [ebp - 0x11c8]
xor eax, eax
call fcn.00407b34
push dword [ebp - 0x11c8]
lea eax, [ebp - 0x14]
mov edx, 5
call fcn.00404188
jmp 0x44d121
push dword [ebp - 0x1b8]
push 0x44ddc8
push dword [ebp - 0x1b4]
push 0x44ddc8
mov eax, dword [ebp - 0x1bc]
call fcn.0044e7a0
push edx
push eax
lea eax, [ebp - 0x11cc]
call fcn.00407c20
push dword [ebp - 0x11cc]
lea eax, [ebp - 0x14]
mov edx, 5
call fcn.00404188
mov eax, 0x208
call fcn.004026d4
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x4537f4]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.004040a4
mov eax, dword [0x453940]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x14]
mov ecx, 0xff
call fcn.004040a4
mov byte [esi + 0x204], 0x32
push ebx
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x44b7e4
xor edx, edx
xor eax, eax
call fcn.00403dbc
jmp case.0x44ccee.0
lea edx, [ebp - 0x1bc]
mov ecx, 0x64
mov eax, dword [ebp - 0x14]
call fcn.0044cae8
mov eax, dword [ebp - 0x1bc]
call fcn.004080a0
test al, al
jne 0x44d1de
push dword [ebp - 0x1b8]
push 0x44ddc8
push dword [ebp - 0x1b4]
push 0x44ddc8
lea edx, [ebp - 0x11d0]
xor eax, eax
call fcn.00407b34
push dword [ebp - 0x11d0]
lea eax, [ebp - 0x14]
mov edx, 5
call fcn.00404188
jmp 0x44d21f
push dword [ebp - 0x1b8]
push 0x44ddc8
push dword [ebp - 0x1b4]
push 0x44ddc8
mov eax, dword [ebp - 0x1bc]
call fcn.0044e7a0
push edx
push eax
lea eax, [ebp - 0x11d4]
call fcn.00407c20
push dword [ebp - 0x11d4]
lea eax, [ebp - 0x14]
mov edx, 5
call fcn.00404188
mov eax, 0x208
call fcn.004026d4
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x4537f4]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.004040a4
mov eax, dword [0x453940]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x14]
mov ecx, 0xff
call fcn.004040a4
mov byte [esi + 0x204], 0x33
push ebx
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x44b7e4
xor edx, edx
xor eax, eax
call fcn.00403dbc
jmp case.0x44ccee.0
lea edx, [ebp - 0x1bc]
mov ecx, 0x64
mov eax, dword [ebp - 0x14]
call fcn.0044cae8
push dword [ebp - 0x1bc]
push 0x44ddc8
push dword [ebp - 0x1b8]
push 0x44ddc8
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.00404188
mov eax, 0x208
call fcn.004026d4
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x4537f4]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.004040a4
mov eax, dword [0x453940]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x14]
mov ecx, 0xff
call fcn.004040a4
mov byte [esi + 0x204], 0xe
push ebx
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x44b7e4
xor edx, edx
xor eax, eax
call fcn.00403dbc
jmp case.0x44ccee.0
lea eax, [ebp - 8]
call fcn.0043d798
mov ecx, dword [ebp - 8]
mov dl, 0xf
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
mov eax, dword [ebp - 0x14]
call fcn.00407ca0
call fcn.0045025c
test al, al
je 0x44d355
lea eax, [ebp - 8]
mov edx, 0x44ddb0
call fcn.00403ea0
jmp 0x44d362
lea eax, [ebp - 8]
mov edx, 0x44ddbc
call fcn.00403ea0
mov ecx, dword [ebp - 8]
mov dl, 0x10
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
lea eax, [ebp - 8]
call fcn.0043db34
mov ecx, dword [ebp - 8]
mov dl, 0x11
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
mov eax, dword [ebp - 0x14]
call fcn.00407ca0
call fcn.0043d9a0
lea eax, [ebp - 8]
mov edx, 0x44ddb0
call fcn.00403ea0
mov ecx, dword [ebp - 8]
mov dl, 0x12
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
mov eax, dword [ebp - 0x14]
call fcn.00407ca0
call fcn.0043d9ac
lea eax, [ebp - 8]
mov edx, 0x44ddb0
call fcn.00403ea0
mov ecx, dword [ebp - 8]
mov dl, 0x13
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
mov eax, dword [ebp - 0x14]
call fcn.00407ca0
call fcn.0043d990
lea eax, [ebp - 8]
mov edx, 0x44ddb0
call fcn.00403ea0
mov ecx, dword [ebp - 8]
mov dl, 0x13
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
lea eax, [ebp - 8]
call fcn.0043deec
mov ecx, dword [ebp - 8]
mov dl, 0x15
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
lea eax, [ebp - 0x11d8]
push eax
or ecx, 0xffffffff
or edx, 0xffffffff
mov eax, dword [ebp - 0x14]
call fcn.0043de00
lea eax, [ebp - 8]
mov edx, 0x44ddb0
call fcn.00403ea0
mov ecx, dword [ebp - 8]
mov dl, 0x17
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
lea eax, [ebp - 0x11dc]
push eax
xor ecx, ecx
or edx, 0xffffffff
mov eax, dword [ebp - 0x14]
call fcn.0043de00
lea eax, [ebp - 8]
mov edx, 0x44ddb0
call fcn.00403ea0
mov ecx, dword [ebp - 8]
mov dl, 0x16
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
lea edx, [ebp - 0x1bc]
mov ecx, 0x64
mov eax, dword [ebp - 0x14]
call fcn.0044cae8
push dword [ebp - 0x1bc]
push 0x44ddc8
lea eax, [ebp - 0x11e0]
call fcn.0043c994
push dword [ebp - 0x11e0]
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.00404188
mov eax, 0x208
call fcn.004026d4
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x4537f4]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.004040a4
mov eax, dword [0x453940]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x14]
mov ecx, 0xff
call fcn.004040a4
mov byte [esi + 0x204], 0x19
push ebx
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x44b7e4
xor edx, edx
xor eax, eax
call fcn.00403dbc
jmp case.0x44ccee.0
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x14]
call fcn.00403ea0
mov eax, 0x208
call fcn.004026d4
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x4537f4]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.004040a4
mov eax, dword [0x453940]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x14]
mov ecx, 0xff
call fcn.004040a4
mov byte [esi + 0x204], 0x25
push ebx
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x44b7e4
xor edx, edx
xor eax, eax
call fcn.00403dbc
jmp case.0x44ccee.0
lea edx, [ebp - 8]
mov eax, dword [ebp - 0x14]
call fcn.0043e6d8
mov ecx, dword [ebp - 8]
mov dl, 0x1c
mov eax, dword [ebp - 4]
call fcn.0044b720
push 0x64
call sub.kernel32.dll_Sleep_1
lea edx, [ebp - 8]
mov eax, dword [ebp - 0x14]
call fcn.0043e200
mov ecx, dword [ebp - 8]
mov dl, 0x1d
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
mov eax, dword [ebp - 4]
call fcn.0044e3ac
jmp case.0x44ccee.0
push dword [ebp - 0x14]
push 0x44ddd4
push 0x44dde0
lea eax, [ebp - 0x11e4]
mov edx, 3
call fcn.00404188
mov eax, dword [ebp - 0x11e4]
call fcn.0044e3e4
jmp case.0x44ccee.0
lea edx, [ebp - 0x1bc]
mov ecx, 0x64
mov eax, dword [ebp - 0x14]
call fcn.0044cae8
mov ecx, dword [ebp - 0x1b8]
mov edx, dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x1bc]
call fcn.0043ea08
test al, al
je 0x44d653
lea eax, [ebp - 8]
mov edx, 0x44ddb0
call fcn.00403ea0
jmp 0x44d660
lea eax, [ebp - 8]
mov edx, 0x44ddbc
call fcn.00403ea0
mov ecx, dword [ebp - 8]
mov dl, 0x22
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
mov eax, dword [ebp - 0x14]
call fcn.0043ee60
test al, al
je 0x44d68d
lea eax, [ebp - 8]
mov edx, 0x44ddb0
call fcn.00403ea0
jmp 0x44d69a
lea eax, [ebp - 8]
mov edx, 0x44ddbc
call fcn.00403ea0
mov ecx, dword [ebp - 8]
mov dl, 0x23
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
lea edx, [ebp - 0x1bc]
mov ecx, 0x64
mov eax, dword [ebp - 0x14]
call fcn.0044cae8
mov edx, dword [ebp - 0x1b8]
mov eax, dword [ebp - 0x1bc]
call fcn.0043f3d4
test al, al
je 0x44d6e3
lea eax, [ebp - 8]
mov edx, 0x44ddb0
call fcn.00403ea0
jmp 0x44d6f0
lea eax, [ebp - 8]
mov edx, 0x44ddbc
call fcn.00403ea0
mov ecx, dword [ebp - 8]
mov dl, 0x24
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
mov eax, 0x208
call fcn.004026d4
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x4537f4]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.004040a4
mov eax, dword [0x453940]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x14]
mov ecx, 0xff
call fcn.004040a4
mov byte [esi + 0x204], 0x27
push ebx
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x44b7e4
xor edx, edx
xor eax, eax
call fcn.00403dbc
jmp case.0x44ccee.0
mov eax, dword [ebp - 0x14]
mov edx, 0x44ddbc
call fcn.00404214
jne 0x44d77e
lea eax, [ebp - 8]
call fcn.00450078
jmp 0x44d786
lea eax, [ebp - 8]
call fcn.004500d0
cmp dword [ebp - 8], 0
je case.0x44ccee.0
mov ecx, dword [ebp - 8]
mov dl, 0x36
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
mov eax, dword [ebp - 0x14]
call fcn.0043c754
jmp case.0x44ccee.0
lea edx, [ebp - 0x1bc]
mov ecx, 0x64
mov eax, dword [ebp - 0x14]
call fcn.0044cae8
mov eax, dword [ebp - 0x1b8]
call fcn.00407ca0
push eax
mov eax, dword [ebp - 0x1bc]
call fcn.00407ca0
push eax
call sub.user32.dll_SetCursorPos
push 0
push 0
push 0
push 0
push 2
call sub.user32.dll_mouse_event
push 0
push 0
push 0
push 0
push 4
call sub.user32.dll_mouse_event
jmp case.0x44ccee.0
lea edx, [ebp - 0x1bc]
mov ecx, 0x64
mov eax, dword [ebp - 0x14]
call fcn.0044cae8
mov eax, dword [ebp - 0x1b8]
call fcn.00407ca0
push eax
mov eax, dword [ebp - 0x1bc]
call fcn.00407ca0
push eax
call sub.user32.dll_SetCursorPos
push 0
push 0
push 0
push 0
push 8
call sub.user32.dll_mouse_event
push 0
push 0
push 0
push 0
push 0x10
call sub.user32.dll_mouse_event
jmp case.0x44ccee.0
mov eax, dword [ebp - 0x14]
call fcn.00408328
test al, al
je 0x44d875
mov ecx, 0x44ddb0
mov dl, 0x3a
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
mov ecx, 0x44ddbc
mov dl, 0x3a
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
mov eax, dword [ebp - 0x14]
call fcn.0043caa8
test al, al
je 0x44d8a9
mov ecx, 0x44ddb0
mov dl, 0x3b
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
mov ecx, 0x44ddbc
mov dl, 0x3b
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
lea edx, [ebp - 0x1bc]
mov ecx, 0x64
mov eax, dword [ebp - 0x14]
call fcn.0044cae8
mov ecx, dword [ebp - 0x1b4]
mov edx, dword [ebp - 0x1b8]
mov eax, dword [ebp - 0x1bc]
call fcn.004501c0
test al, al
je 0x44d8fa
lea eax, [ebp - 8]
mov edx, 0x44ddb0
call fcn.00403ea0
jmp 0x44d907
lea eax, [ebp - 8]
mov edx, 0x44ddbc
call fcn.00403ea0
mov ecx, dword [ebp - 8]
mov dl, 0x3c
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
mov eax, 0x208
call fcn.004026d4
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x4537f4]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.004040a4
mov eax, dword [0x453940]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
mov byte [esi + 0x100], 0
mov byte [esi + 0x204], 0x3d
push ebx
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x44b7e4
xor edx, edx
xor eax, eax
call fcn.00403dbc
jmp case.0x44ccee.0
xor eax, eax
push ebp
push 0x44d9a2
push dword fs:[eax]
mov dword fs:[eax], esp
push 2
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
push eax
call sub.wsock32.dll_shutdown
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
push eax
call sub.wsock32.dll_closesocket
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44d9ac
call fcn.0044163c
lea edx, [ebp - 8]
mov eax, 0x44ddec
call fcn.00444684
lea edx, [ebp - 0x11e8]
mov eax, 0x44de28
call fcn.00444684
mov edx, dword [ebp - 0x11e8]
lea eax, [ebp - 8]
call fcn.004040d0
lea edx, [ebp - 0x11ec]
mov eax, 0x44de54
call fcn.00444684
mov edx, dword [ebp - 0x11ec]
lea eax, [ebp - 8]
call fcn.004040d0
lea edx, [ebp - 0x11f0]
mov eax, 0x44de88
call fcn.00444684
mov edx, dword [ebp - 0x11f0]
lea eax, [ebp - 8]
call fcn.004040d0
lea edx, [ebp - 0x11f4]
mov eax, 0x44debc
call fcn.004449e4
mov edx, dword [ebp - 0x11f4]
lea eax, [ebp - 8]
call fcn.004040d0
lea edx, [ebp - 0x11f8]
mov eax, 0x44def4
call fcn.004449e4
mov edx, dword [ebp - 0x11f8]
lea eax, [ebp - 8]
call fcn.004040d0
lea edx, [ebp - 0x11fc]
mov eax, 0x44df1c
call fcn.004449e4
mov edx, dword [ebp - 0x11fc]
lea eax, [ebp - 8]
call fcn.004040d0
lea edx, [ebp - 0x1200]
mov eax, 0x44df50
call fcn.004449e4
mov edx, dword [ebp - 0x1200]
lea eax, [ebp - 8]
call fcn.004040d0
mov ecx, dword [ebp - 8]
mov dl, 0x3f
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
mov eax, dword [0x453868]
cmp dword [eax], 0
jne 0x44db52
lea edx, [ebp - 0x1bc]
mov ecx, 0x64
mov eax, dword [ebp - 0x14]
call fcn.0044cae8
xor eax, eax
push ebp
push 0x44db3b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x45377c]
add eax, 4
mov edx, dword [ebp - 0x1bc]
call fcn.00403e5c
mov eax, dword [0x45377c]
add eax, 8
mov edx, dword [ebp - 0x1b8]
call fcn.00403e5c
mov eax, dword [ebp - 0x1b4]
call fcn.00407ca0
mov edx, dword [0x45377c]
mov dword [edx], eax
lea eax, [ebp - 0x28]
push eax
push 0
mov eax, dword [0x45377c]
push eax
push 0x43c33c
push 0
push 0
call sub.kernel32.dll_CreateThread_1
mov edx, dword [0x453868]
mov dword [edx], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44db45
lea eax, [ebp - 8]
mov edx, 0x44df84
call fcn.00403ea0
mov ecx, dword [ebp - 8]
mov dl, 0x40
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
lea edx, [ebp - 0x1bc]
mov ecx, 0x64
mov eax, dword [ebp - 0x14]
call fcn.0044cae8
push 0x44dfa4
push 0x44dfc0
mov al, byte [0x44dfd0]
push eax
mov eax, dword [ebp - 0x1bc]
push eax
mov al, byte [0x44dfd4]
push eax
mov edx, dword [0x4538a4]
mov edx, dword [edx]
mov ecx, 0x44dfe0
mov eax, 0x44e024
call fcn.0044531c
test al, al
je 0x44dbbe
lea eax, [ebp - 8]
mov edx, 0x44e064
call fcn.00403ea0
jmp 0x44dbcb
lea eax, [ebp - 8]
mov edx, 0x44e088
call fcn.00403ea0
mov ecx, dword [ebp - 8]
mov dl, 0x42
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
mov eax, dword [0x453868]
cmp dword [eax], 0
je 0x44dc11
call fcn.0043c440
push 0
mov eax, dword [0x453868]
mov eax, dword [eax]
push eax
call sub.kernel32.dll_TerminateThread
mov eax, dword [0x453868]
xor edx, edx
mov dword [eax], edx
lea eax, [ebp - 8]
mov edx, 0x44e0ac
call fcn.00403ea0
mov ecx, dword [ebp - 8]
mov dl, 0x41
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
mov eax, dword [0x4536e0]
cmp dword [eax], 0
jne 0x44dcd3
lea edx, [ebp - 0x1bc]
mov ecx, 0x64
mov eax, dword [ebp - 0x14]
call fcn.0044cae8
xor eax, eax
push ebp
push 0x44dcbc
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x453914]
mov edx, dword [ebp - 0x1bc]
call fcn.00403e5c
mov eax, dword [ebp - 0x1b8]
call fcn.00407ca0
mov edx, dword [0x453914]
mov dword [edx + 4], eax
mov eax, dword [0x453914]
add eax, 8
mov edx, dword [ebp - 0x1b4]
call fcn.00403e5c
mov eax, dword [ebp - 0x1b0]
call fcn.00407ca0
mov edx, dword [0x453914]
mov dword [edx + 0xc], eax
mov eax, dword [0x453914]
call fcn.00445074
mov eax, dword [0x4536e0]
mov dword [eax], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44dcc6
lea eax, [ebp - 8]
mov edx, 0x44e0c8
call fcn.00403ea0
mov ecx, dword [ebp - 8]
mov dl, 0x43
mov eax, dword [ebp - 4]
call fcn.0044b720
jmp case.0x44ccee.0
mov eax, dword [0x4536e0]
cmp dword [eax], 0
je 0x44dd07
mov eax, dword [0x4536e0]
xor edx, edx
mov dword [eax], edx
call fcn.00445240
lea eax, [ebp - 8]
mov edx, 0x44e0e8
call fcn.00403ea0
mov ecx, dword [ebp - 8]
mov dl, 0x44
mov eax, dword [ebp - 4]
call fcn.0044b720
cmp dword [ebp - 0x10], 0
jne 0x44ccb2
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44cc37
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x44dd90
lea eax, [ebp - 0x1200]
mov edx, 0x11
call fcn.00403e2c
lea eax, [ebp - 0x1bc]
mov ecx, 0x65
mov edx, dword [0x40102c]
call fcn.00404910
lea eax, [ebp - 0x1e]
mov edx, dword [0x44b624]
call fcn.004048c4
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.00403e2c
ret