Function at 0x44b510
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 4
push ebx
push esi
push edi
cmp dword [0x4593bc], 0
je 0x44b52b
jmp 0x44b65a
push 0x8000
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov dword [ebp - 4], eax
push str.imm32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x4593c0], eax
cmp dword [0x4593c0], 0
je 0x44b641
push str.ImmGetContext
mov eax, dword [0x4593c0]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4593c4], eax
push str.ImmReleaseContext
mov eax, dword [0x4593c0]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4593c8], eax
push str.ImmAssociateContext
mov eax, dword [0x4593c0]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4593cc], eax
push str.ImmGetConversionStatus
mov eax, dword [0x4593c0]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4593d0], eax
push str.ImmGetOpenStatus
mov eax, dword [0x4593c0]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4593d4], eax
push str.ImmSetOpenStatus
mov eax, dword [0x4593c0]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4593d8], eax
push str.ImmSetCompositionFontA
mov eax, dword [0x4593c0]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4593dc], eax
push str.ImmSetCompositionWindow
mov eax, dword [0x4593c0]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4593e0], eax
push str.ImmGetCompositionStringA
mov eax, dword [0x4593c0]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4593e4], eax
push str.ImmNotifyIME
mov eax, dword [0x4593c0]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4593e8], eax
mov dword [0x4593bc], 1
jmp 0x44b650
call fcn.0044b65f
mov dword [0x4593bc], 0
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
pop edi
pop esi
pop ebx
leave
ret

Function at 0x44c8c0
Capabilities:
Move file

Disassembly:
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
mov eax, 0
jne 0x44c8df
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x44c8f2
push eax
call fcn.0044d700
add esp, 4
mov eax, 0xffffffff
ret
xor eax, eax
ret

Function at 0x44e670
Capabilities:
Terminate process

Disassembly:
cmp dword [0x45a11c], 1
push ebx
push esi
mov esi, dword [esp + 0xc]
push edi
jne 0x44e68e
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [0x45a118], 1
cmp dword [esp + 0x14], 0
mov ebx, dword [esp + 0x18]
mov byte [0x45a114], bl
jne 0x44e6e8
cmp dword [0x4656b8], 0
je 0x44e6d6
mov edi, dword [0x4656b4]
sub edi, 4
cmp edi, dword [0x4656b8]
jb 0x44e6d6
mov eax, dword [edi]
test eax, eax
je 0x44e6cb
call eax
sub edi, 4
cmp edi, dword [0x4656b8]
jae 0x44e6c3
push 0x45401c
push 0x454014
call fcn.0044e720
add esp, 8
push 0x454024
push 0x454020
call fcn.0044e720
add esp, 8
test ebx, ebx
jne 0x44e70f
mov dword [0x45a11c], 1
push esi
call dword [sym.imp.KERNEL32.dll_ExitProcess]
pop edi
pop esi
pop ebx
ret