Function at 0x4494c0
Capabilities:
Create thread
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x120
mov eax, dword [0x47b0b0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x47f418]
push ebx
push esi
push edi
mov esi, ecx
mov ecx, dword [ebp + 8]
push 0x4731f4
push ecx
mov dword [0x47f41c], eax
xor bl, bl
call fcn.0044f279
push 2
mov edi, eax
push 0
push edi
mov dword [ebp - 0x118], edi
call fcn.0044fca4
add esp, 0x14
push edi
call fcn.0045007c
add esp, 4
mov dword [ebp - 0x11c], eax
cmp eax, 0x1000
jle 0x44980f
mov ecx, dword [esi + 0x16c]
sub esp, 0x14
mov eax, dword [ecx + 0x3e8]
mov ecx, dword [ecx + 0x3e4]
mov eax, dword [eax*4 + 0x46f78c]
push eax
push ecx
lea ecx, [esi + 0xd4]
mov dword [esi + 0x168], esi
call fcn.0044bba0
test eax, eax
je 0x44980f
push 0
push 0
lea eax, [esi + 0xd4]
push eax
push 0x44bdd0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 0xdc], eax
test eax, eax
je 0x44980f
push ecx
push str.__ST
push 0x47f34c
mov ecx, esi
call fcn.00449260
test eax, eax
je 0x4497e5
push 7
push 0x46f880
lea eax, [ebp - 0x114]
push eax
mov ecx, esi
mov dword [ebp - 0x114], 1
call fcn.0044a530
test eax, eax
je 0x4497e5
push 7
push 0x46f870
lea eax, [ebp - 0x114]
push eax
mov ecx, esi
mov dword [ebp - 0x114], 0xc
call fcn.0044a530
test eax, eax
je 0x4497e5
push 0xf
push 0x46f850
lea eax, [ebp - 0x114]
push eax
mov ecx, esi
mov dword [ebp - 0x114], 1
call fcn.0044a530
test eax, eax
je 0x4497e5
push 0x96
call dword [sym.imp.KERNEL32.dll_Sleep]
push ecx
push str.boot_start
push 0x47f31f
mov ecx, esi
call fcn.00449260
test eax, eax
je 0x4497e5
push ecx
push 0x46f7a8
push 0x47f31e
mov ecx, esi
call fcn.00449260
test eax, eax
je 0x4497e5
push edi
call fcn.004500e4
add esp, 4
lea eax, [ebp - 0x10f]
push 0x101
push 0
push eax
mov byte [ebp - 0x110], bl
call fcn.00452d00
add esp, 0xc
lea eax, [ebp - 0x110]
push edi
push 0x100
push 1
push eax
call fcn.00450366
add esp, 0x10
lea eax, [ebp - 0x110]
push eax
mov ecx, esi
call fcn.00449370
test eax, eax
je 0x4497e5
mov ecx, dword [ebp - 0x11c]
mov eax, 0x271000
cdq
add ecx, 0xfffff100
idiv ecx
push 6
push eax
mov eax, dword [esi + 0x16c]
push 0xfb9
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SendMessageA]
push 5
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
push 0xf00
push edi
call fcn.0044fca4
add esp, 0xc
lea eax, [ebp - 0x110]
push edi
push 0x100
push 1
push eax
call fcn.00450366
add esp, 0x10
cmp eax, 0x100
jne 0x4497e5
mov ebx, 0x271000
lea ebx, [ebx]
push ecx
push 0x46f7a8
push 0x47f31e
mov ecx, esi
call fcn.00449260
test eax, eax
je 0x4497e3
lea eax, [ebp - 0x110]
push eax
mov ecx, esi
call fcn.00449370
test eax, eax
je 0x4497e3
mov ecx, dword [ebp - 0x11c]
add ebx, 0x271000
mov eax, ebx
cdq
add ecx, 0xfffff100
idiv ecx
push 6
push eax
mov eax, dword [esi + 0x16c]
push 0xfb9
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SendMessageA]
push 5
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [ebp - 0x118]
push edi
push 0x100
lea eax, [ebp - 0x110]
push 1
push eax
call fcn.00450366
add esp, 0x10
cmp eax, 0x100
je 0x449710
push 0xa
push str.ISP_finish
lea ecx, [esi + 0xd4]
call fcn.0044c0c0
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 7
push 0x46f880
lea eax, [ebp - 0x118]
push eax
mov ecx, esi
mov dword [ebp - 0x118], 1
call fcn.0044a530
cmp eax, 1
sete bl
test bl, bl
jne 0x449804
jmp 0x4497e5
xor bl, bl
push 7
push 0x46f880
lea eax, [ebp - 0x118]
push eax
mov ecx, esi
mov dword [ebp - 0x118], 1
call fcn.0044a530
lea ecx, [esi + 0xd4]
call fcn.0044c100
push edi
call fcn.0044f7db
mov ecx, dword [ebp - 4]
add esp, 4
mov al, bl
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0044d04f
mov esp, ebp
pop ebp
ret 4