Function at 0x407350
Capabilities:
Create process on windows
Create thread
Terminate thread

Disassembly:
sub esp, 0x60c
push ebx
push ebp
push esi
push edi
push 0x43ebd0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov ebp, eax
mov dword [esp + 0x18], ebp
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x4073a1
push 0x43e378
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x60c
ret 0x10
mov ecx, 0x20
xor eax, eax
mov edi, 0x44d190
xor esi, esi
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x620]
mov edi, dword [sym.imp.WINMM.dll_timeGetTime]
mov dword [0x44fb48], eax
call edi
and al, 0xf0
xor ecx, ecx
cmp ecx, eax
sbb edx, edx
neg edx
test dl, 7
je 0x4073e9
call fcn.0043092f
inc esi
call edi
shr eax, 4
cmp esi, eax
sbb eax, eax
neg eax
test al, 7
jne 0x4073d4
push 4
call fcn.00430921
add esp, 4
test eax, eax
je 0x407405
push 0x43ebc4
mov ecx, eax
call fcn.004092e0
jmp 0x407407
xor eax, eax
push 0x43e378
mov ecx, eax
mov dword [0x44af04], eax
call fcn.00409310
mov ecx, dword [0x44af04]
push 0x43ebc0
call fcn.00409310
mov ecx, dword [0x44af04]
push 0x43eba4
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43eb74
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
call fcn.00409360
push 0
call fcn.00430845
lea ecx, [esp + 0x30]
mov dword [esp + 0x30], eax
push ecx
call fcn.004306e5
push eax
call fcn.0043060f
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0xc0]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0xc0]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov byte [esp + ecx + 0xbf], al
lea ecx, [esp + 0xc0]
push ecx
mov ecx, dword [0x44af04]
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
call fcn.00409360
call fcn.0040b800
mov ecx, dword [0x44af04]
push 0x43eb58
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43eb48
call fcn.00409310
call fcn.00425690
mov esi, eax
test esi, esi
je 0x40756a
mov ecx, dword [0x44af04]
push 0x43eb3c
call fcn.00409310
mov ecx, dword [0x44af04]
push esi
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov dword [0x44f2c4], 0x43eb20
jmp 0x408984
mov ecx, dword [0x44af04]
push 0x43eb1c
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
call fcn.004061d0
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
call fcn.00409360
mov eax, dword [0x44d334]
test eax, eax
jne 0x4075b8
mov dword [0x44f2c4], 0x43eb00
jmp 0x408984
mov ebx, 1
mov dword [0x44d324], ebx
call fcn.00406aa0
mov eax, dword [0x44f3bc]
mov esi, dword [sym.imp.USER32.dll_DialogBoxParamA]
xor edi, edi
cmp eax, edi
je 0x4075e1
mov dword [0x44d320], ebx
jmp 0x4075fe
cmp dword [0x44d320], edi
je 0x4075fe
mov edx, dword [0x44fb48]
push edi
push 0x406ad0
push edi
push 0x43eaf8
push edx
call esi
call fcn.00406a80
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43eae0
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
call fcn.00414a60
push edi
push 0x407050
test eax, eax
push edi
je 0x40764c
mov eax, dword [0x44fb48]
push 0x43ead8
push eax
call esi
test eax, eax
je 0x407673
jmp 0x40765e
mov ecx, dword [0x44fb48]
push 0x43ead0
push ecx
call esi
test eax, eax
je 0x40769f
call fcn.00406a80
cmp dword [0x25b4428], edi
je 0x4076d7
mov dword [0x25b4428], edi
jmp 0x407603
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43eab4
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
push ebp
jmp 0x408a9d
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43eab4
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
push ebx
push 0x43eaa8
call dword [sym.imp.KERNEL32.dll_WinExec]
push ebp
jmp 0x408a9d
mov ecx, dword [0x44af04]
push 0x43ea94
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
mov esi, dword [0x44d338]
push 0x43e244
call fcn.00409310
mov ecx, dword [0x44af04]
push esi
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
lea eax, [esi + esi*4]
mov ecx, dword [0x44af04]
push 0x43ea84
lea edx, [eax + eax*4]
lea esi, [esi + edx*8]
shl esi, 2
mov eax, dword [esi + 0x44d33c]
mov dword [0x44d210], eax
call fcn.00409310
mov ecx, dword [0x44d210]
push ecx
mov ecx, dword [0x44af04]
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov edx, dword [esi + 0x44d44c]
push 0x43ea7c
shl edx, 4
lea eax, [edx + esi]
mov ecx, dword [eax + 0x44d454]
mov edx, dword [eax + 0x44d458]
mov dword [0x44f2c0], ecx
mov ecx, dword [0x44af04]
mov dword [0x44f3b4], edx
call fcn.00409310
mov eax, dword [0x44f2c0]
mov ecx, dword [0x44af04]
push eax
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43ea74
call fcn.00409310
mov ecx, dword [0x44f3b4]
push ecx
mov ecx, dword [0x44af04]
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43ea68
mov dword [0x43e0a4], ebx
call fcn.00409310
mov edx, dword [0x43e0a4]
mov ecx, dword [0x44af04]
push edx
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43ea5c
mov dword [0x44f8a8], ebx
call fcn.00409310
mov eax, dword [0x44f8a8]
mov ecx, dword [0x44af04]
push eax
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43ea54
mov dword [0x43e0a0], ebx
call fcn.00409310
mov ecx, dword [0x43e0a0]
push ecx
mov ecx, dword [0x44af04]
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43ea48
mov dword [0x43e0a8], ebx
call fcn.00409310
mov edx, dword [0x43e0a8]
mov ecx, dword [0x44af04]
push edx
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov eax, dword [esi + 0x44d340]
mov ecx, dword [0x44af04]
push 0x43ea38
mov dword [0x44af00], eax
call fcn.00409310
mov ecx, dword [0x44af00]
push ecx
mov ecx, dword [0x44af04]
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43ea2c
mov dword [0x44f2b8], ebx
call fcn.00409310
mov edx, dword [0x44f2b8]
mov ecx, dword [0x44af04]
push edx
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43ea10
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409390
call fcn.00409570
test eax, eax
jne 0x407967
mov dword [0x44f2c4], 0x43e9f4
jmp 0x4079b8
mov ecx, dword [0x44af04]
push 0x43eb1c
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e9d8
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409390
push 0x400000
call fcn.00409220
add esp, 4
test eax, eax
jne 0x4079d8
mov dword [0x44f2c4], 0x43e9b4
mov ecx, dword [0x44af04]
push 0x43e9ac
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
jmp 0x408984
mov ecx, dword [0x44af04]
push 0x43eb1c
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e994
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
call fcn.00409c30
mov ecx, dword [0x44af04]
push 0x43e97c
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
call fcn.00409d50
mov ecx, dword [0x44af04]
push 0x43e968
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
call fcn.0040c060
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e940
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
cmp dword [0x44af00], edi
je 0x407dbb
mov ecx, dword [0x44af04]
push 0x43e930
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e900
call fcn.00409310
mov eax, dword [0x44f3b4]
mov ecx, dword [0x44f2c0]
push 0x44f3b8
push 0xffffffffffffffff
push eax
mov eax, dword [0x44fb4c]
mov edx, dword [0x44d210]
push ecx
push ebx
push edi
push 0x10
push edi
push 0x10
push eax
push eax
push ebx
push edx
call fcn.004254df
mov esi, eax
cmp esi, edi
je 0x407ce1
mov ecx, dword [0x44af04]
push 0x43e8f8
call fcn.00409310
mov ecx, dword [0x44af04]
push 0x43e8f0
call fcn.00409310
mov ecx, dword [0x44af04]
push esi
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
cmp esi, 0x8876024e
mov ebp, 0x258
mov edi, 0x320
jg 0x407b73
je 0x407bf7
cmp esi, 0x8007000e
je 0x407bf7
cmp esi, 0x88760154
je 0x407b8f
cmp esi, 0x8876017c
je 0x407bf7
jmp 0x407c94
cmp esi, 0xc8770bb8
je 0x407bf7
cmp esi, 0xc8770bbf
je 0x407b8f
cmp esi, 0xc8770bc2
jne 0x407c94
mov ecx, dword [0x44af04]
push 0x43e8e0
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e8b8
call fcn.00409310
mov eax, dword [0x44f3b4]
mov ecx, dword [0x44f2c0]
push 0x44f3b8
push 0xffffffffffffffff
push eax
mov eax, dword [0x44fb4c]
mov edx, dword [0x44d210]
push ecx
push ebx
push 0
push 0xffffffffffffffff
push 0
push 0x10
push eax
push eax
push ebx
push edx
call fcn.004254df
mov esi, eax
test esi, esi
je 0x407ce1
jmp 0x407c5d
mov ecx, dword [0x44af04]
push 0x43e8a0
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e878
call fcn.00409310
mov eax, dword [0x44fb4c]
push 0x44f3b8
push 0xffffffffffffffff
push ebp
push edi
push ebx
push 0
push 0x10
push 0
push 0x10
push eax
push eax
mov eax, dword [0x44d210]
push ebx
push eax
call fcn.004254df
mov esi, eax
mov dword [0x44f2c0], edi
test esi, esi
mov dword [0x44f3b4], ebp
je 0x407ce1
mov ecx, dword [0x44af04]
push 0x43e8f8
call fcn.00409310
mov ecx, dword [0x44af04]
push 0x43e8f0
call fcn.00409310
mov ecx, dword [0x44af04]
push esi
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e850
call fcn.00409310
mov eax, dword [0x44fb4c]
push 0x44f3b8
push 0xffffffffffffffff
push ebp
mov ecx, dword [0x44d210]
push edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push eax
push eax
push ebx
push ecx
call fcn.004254df
mov esi, eax
mov dword [0x44f2c0], edi
test esi, esi
mov dword [0x44f3b4], ebp
jne 0x408943
mov ecx, dword [0x44af04]
push 0x43e84c
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e838
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov eax, dword [0x44f3b8]
push eax
mov edx, dword [eax]
call dword [edx + 0xc]
mov dword [0x44f84c], eax
mov eax, dword [0x44f3b8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
mov dword [0x44f850], eax
mov eax, dword [0x44f3b8]
push eax
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [0x44f854], eax
mov eax, dword [0x44f3b8]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov ecx, dword [0x44f84c]
mov dword [0x44f858], eax
test ecx, ecx
jne 0x407d72
mov dword [0x44f2c4], 0x43e81c
jmp 0x408984
mov ecx, dword [0x44f850]
test ecx, ecx
jne 0x407d8b
mov dword [0x44f2c4], 0x43e7fc
jmp 0x408984
mov ecx, dword [0x44f854]
test ecx, ecx
jne 0x407da4
mov dword [0x44f2c4], 0x43e7d8
jmp 0x408984
test eax, eax
jne 0x408147
mov dword [0x44f2c4], 0x43e7bc
jmp 0x408984
mov ecx, dword [0x44af04]
push 0x43e7ac
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e784
call fcn.00409310
mov edx, dword [0x44f3b4]
mov eax, dword [0x44f2c0]
push 0x44f3b8
push 0xffffffffffffffff
push edx
mov ecx, dword [0x44d210]
push eax
mov eax, dword [0x44fb4c]
push ebx
push edi
push edi
push edi
push 0x10
push eax
push eax
push ebx
push ecx
call fcn.004254df
mov esi, eax
cmp esi, edi
je 0x407eb0
mov ecx, dword [0x44af04]
push 0x43e8f8
call fcn.00409310
mov ecx, dword [0x44af04]
push 0x43e8f0
call fcn.00409310
mov ecx, dword [0x44af04]
push esi
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e764
call fcn.00409310
mov eax, dword [0x44fb4c]
push 0x44f3b8
push 0xffffffffffffffff
push 0x1e0
mov edx, dword [0x44d210]
push 0x280
push 0xffffffffffffffff
push edi
push edi
push 0xffffffffffffffff
push 0x10
push eax
push eax
push ebx
push edx
call fcn.004254df
mov esi, eax
mov dword [0x44f2c0], 0x280
cmp esi, edi
mov dword [0x44f3b4], 0x1e0
jne 0x408943
mov ecx, dword [0x44af04]
push 0x43e84c
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e838
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov eax, dword [0x44f3b8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov dword [0x44f84c], eax
mov eax, dword [0x44f3b8]
push eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov dword [0x44f850], eax
mov eax, dword [0x44f3b8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov dword [0x44f854], eax
mov eax, dword [0x44f3b8]
push edi
push eax
mov edx, dword [eax]
call dword [edx + 0x20]
mov ecx, dword [0x44f84c]
mov dword [0x44f858], eax
cmp ecx, edi
jne 0x407f40
mov dword [0x44f2c4], 0x43e81c
jmp 0x408984
cmp dword [0x44f850], edi
jne 0x407f57
mov dword [0x44f2c4], 0x43e7fc
jmp 0x408984
cmp dword [0x44f854], edi
jne 0x407f6e
mov dword [0x44f2c4], 0x43e7d8
jmp 0x408984
cmp eax, edi
jne 0x407f81
mov dword [0x44f2c4], 0x43e7bc
jmp 0x408984
mov ecx, 0x1f
xor eax, eax
lea edi, [esp + 0x44]
mov ebp, 0x7c
rep stosd dword es:[edi], eax
mov ecx, dword [0x44f3b4]
mov eax, dword [0x44f2c0]
mov dword [esp + 0x4c], ecx
mov ecx, dword [0x44af04]
push 0x43e748
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], 7
mov dword [esp + 0xb0], 0x2840
mov dword [esp + 0x54], eax
call fcn.00409310
mov eax, dword [0x44f84c]
xor ebx, ebx
push ebx
lea ecx, [esp + 0x48]
mov edx, dword [eax]
push 0x44f85c
push ecx
push eax
call dword [edx + 0x18]
mov esi, eax
cmp esi, ebx
jne 0x40890a
mov ecx, dword [0x44af04]
push 0x43e84c
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov edx, dword [0x44f2c0]
mov ecx, 0x1f
xor eax, eax
lea edi, [esp + 0x44]
rep stosd dword es:[edi], eax
mov eax, dword [0x44f3b4]
mov ecx, dword [0x44af04]
push 0x43e730
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], 0x1007
mov dword [esp + 0xb0], 0x20800
mov dword [esp + 0x54], edx
mov dword [esp + 0x50], eax
mov dword [esp + 0x90], 0x20
mov dword [esp + 0x94], 0x400
mov dword [esp + 0x9c], 0x10
mov dword [esp + 0xa4], 0xffff
call fcn.00409310
mov eax, dword [0x44f84c]
push ebx
lea edx, [esp + 0x48]
push 0x44f860
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x18]
mov esi, eax
cmp esi, ebx
jne 0x4088d1
mov ecx, dword [0x44af04]
push 0x43e84c
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e718
call fcn.00409310
mov eax, dword [0x44f85c]
mov edx, dword [0x44f860]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov esi, eax
cmp esi, ebx
jne 0x40889b
mov ecx, dword [0x44af04]
push 0x43e84c
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e6fc
call fcn.00409310
mov eax, dword [0x44f854]
mov edx, dword [0x44f85c]
push ebx
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
mov esi, eax
cmp esi, ebx
jne 0x408865
mov ecx, dword [0x44af04]
push 0x43e84c
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
call fcn.00409360
mov eax, dword [0x44f84c]
lea edx, [esp + 0x1ec]
push 0
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x6c]
test eax, eax
jne 0x4082d7
mov ecx, dword [0x44af04]
push 0x43e6e4
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e6d8
call fcn.00409310
mov ecx, dword [0x44af04]
lea eax, [esp + 0x1ec]
push eax
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e6c8
call fcn.00409310
lea ecx, [esp + 0x3ec]
push ecx
mov ecx, dword [0x44af04]
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e6bc
call fcn.00409310
mov ecx, dword [0x44af04]
mov edx, dword [esp + 0x5f4]
push edx
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e6b0
call fcn.00409310
mov ecx, dword [0x44af04]
mov eax, dword [esp + 0x5f8]
push eax
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e6a4
call fcn.00409310
mov ecx, dword [esp + 0x5fc]
push ecx
mov ecx, dword [0x44af04]
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e698
call fcn.00409310
mov ecx, dword [0x44af04]
mov edx, dword [esp + 0x600]
push edx
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e688
call fcn.00409310
mov ecx, dword [0x44af04]
mov eax, dword [esp + 0x614]
push eax
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
call fcn.00409360
xor ecx, ecx
mov eax, dword [0x44f84c]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x30], ecx
mov edx, dword [eax]
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x38]
push ecx
push eax
call dword [edx + 0x5c]
test eax, eax
jne 0x408387
mov ecx, dword [0x44af04]
push 0x43e678
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e66c
call fcn.00409310
mov ecx, dword [0x44af04]
mov edx, dword [esp + 0x14]
push edx
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e664
call fcn.00409310
mov ecx, dword [0x44af04]
mov eax, dword [esp + 0x10]
push eax
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov eax, dword [0x44f84c]
lea edx, [esp + 0x10]
push edx
lea edx, [esp + 0x18]
push edx
lea edx, [esp + 0x38]
mov dword [esp + 0x38], 0x1000
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x5c]
test eax, eax
jne 0x40841e
mov ecx, dword [0x44af04]
push 0x43e648
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e66c
call fcn.00409310
mov ecx, dword [0x44af04]
mov eax, dword [esp + 0x14]
push eax
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e664
call fcn.00409310
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, dword [0x44af04]
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e63c
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov eax, dword [0x44f854]
xor edi, edi
lea ecx, [esp + 0x100]
mov dword [0x44f2bc], edi
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0xc]
test eax, eax
mov ebx, 2
jne 0x4084aa
test byte [esp + 0x14c], bl
je 0x4084aa
test byte [esp + 0x150], bl
je 0x4084aa
mov ecx, dword [0x44af04]
push 0x43e628
mov dword [0x44f2bc], 1
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
call fcn.00409360
cmp dword [0x43e0a0], edi
jne 0x4084c3
mov dword [0x44f2bc], edi
xor edx, edx
mov ecx, dword [0x44af04]
mov dword [esp + 0x1c], edx
push 0x43e60c
mov dword [esp + 0x24], edx
mov dword [esp + 0x20], 0x10
mov dword [esp + 0x28], edx
mov dword [esp + 0x28], 0x1c4
mov dword [esp + 0x2c], edx
mov dword [esp + 0x2c], 0x400
mov dword [esp + 0x24], 0x10801
call fcn.00409310
mov eax, dword [0x44f850]
push edi
lea edx, [esp + 0x20]
push 0x44f8a4
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x14]
mov esi, eax
cmp esi, edi
jne 0x408829
mov ecx, dword [0x44af04]
push 0x43e84c
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e5f4
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
call fcn.00405ab0
mov ecx, dword [0x44af04]
push 0x43e5d4
call fcn.00409310
call fcn.00405690
test eax, eax
je 0x4087ff
mov ecx, dword [0x44af04]
push 0x43e84c
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e5b0
call fcn.00409310
call fcn.00405770
test eax, eax
je 0x4087d5
mov ecx, dword [0x44af04]
push 0x43e84c
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
cmp dword [0x44f2b8], edi
je 0x408602
call fcn.00409f00
call fcn.0040a3d0
lea eax, [esp + 0x40]
push eax
push edi
push edi
push 0x40ab40
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
jmp 0x408606
mov esi, dword [esp + 0x40]
call fcn.00405c30
mov eax, dword [0x44d330]
mov dword [0x44acf8], edi
test al, 0x10
je 0x408624
mov dword [0x44acf8], 1
and eax, 0xf
mov dword [0x44acf4], eax
call fcn.00405f40
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e598
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
call fcn.004244a0
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e580
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
call fcn.00405fc0
mov ecx, dword [0x44af04]
mov dword [0x43ecf0], edi
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e56c
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e554
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
call fcn.00405870
call fcn.00405840
mov ecx, dword [0x44af04]
push 0x43e540
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
call fcn.004072b0
cmp dword [0x44f2b8], edi
je 0x408733
mov ecx, dword [0x44af04]
push 0x43e524
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push edi
push esi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
call fcn.00409ea0
mov ecx, dword [0x44af04]
push 0x43e510
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
call fcn.00425d6c
mov ecx, dword [0x44af04]
push 0x43e4fc
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
call fcn.00409e10
mov ecx, dword [0x44af04]
push 0x43e4ec
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44fb4c]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
mov ecx, dword [0x44af04]
push 0x43e4dc
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
cmp dword [0x2544248], edi
jne 0x4087cb
push 1
push 0x43eaa8
call dword [sym.imp.KERNEL32.dll_WinExec]
mov edx, dword [esp + 0x18]
push edx
jmp 0x408a9d
mov ecx, dword [0x44af04]
push 0x43e8f8
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov dword [0x44f2c4], 0x43e4b8
jmp 0x408984
mov ecx, dword [0x44af04]
push 0x43e8f8
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov dword [0x44f2c4], 0x43e498
jmp 0x408984
mov ecx, dword [0x44af04]
push 0x43e488
mov dword [0x44f8a4], edi
call fcn.00409310
mov ecx, dword [0x44af04]
push esi
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov dword [0x44f2c4], 0x43e468
jmp 0x408984
mov ecx, dword [0x44af04]
push 0x43e488
call fcn.00409310
mov ecx, dword [0x44af04]
push esi
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov dword [0x44f2c4], 0x43e44c
jmp 0x408984
mov ecx, dword [0x44af04]
push 0x43e488
call fcn.00409310
mov ecx, dword [0x44af04]
push esi
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov dword [0x44f2c4], 0x43e430
jmp 0x408984
mov ecx, dword [0x44af04]
push 0x43e488
mov dword [0x44f860], ebx
call fcn.00409310
mov ecx, dword [0x44af04]
push esi
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov dword [0x44f2c4], 0x43e418
jmp 0x408984
mov ecx, dword [0x44af04]
push 0x43e488
mov dword [0x44f85c], ebx
call fcn.00409310
mov ecx, dword [0x44af04]
push esi
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov dword [0x44f2c4], 0x43e3f8
jmp 0x408984
mov ecx, dword [0x44af04]
push 0x43e8f8
call fcn.00409310
mov ecx, dword [0x44af04]
push 0x43e8f0
call fcn.00409310
mov ecx, dword [0x44af04]
push esi
call fcn.004093c0
mov ecx, dword [0x44af04]
call fcn.00409360
mov dword [0x44f2c4], 0x43e3dc
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e3c0
call fcn.00409310
mov eax, dword [0x44f2c4]
mov ecx, dword [0x44af04]
push eax
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44af04]
push 0x43e554
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
call fcn.00405870
call fcn.00405840
mov ecx, dword [0x44af04]
push 0x43e540
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
call fcn.004072b0
mov ecx, dword [0x44af04]
push 0x43e510
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
call fcn.00425d6c
mov ecx, dword [0x44af04]
push 0x43e4fc
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
call fcn.00409e10
mov ecx, dword [0x44af04]
push 0x43e4ec
call fcn.00409310
mov ecx, dword [0x44af04]
call fcn.00409360
mov ecx, dword [0x44fb4c]
mov esi, dword [sym.imp.USER32.dll_DestroyWindow]
push ecx
call esi
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
mov edx, dword [0x44f2c4]
mov eax, dword [0x44fb4c]
push 0
push 0x43e3b4
push edx
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, dword [0x44fb4c]
test eax, eax
je 0x408a98
push eax
call esi
mov ecx, dword [esp + 0x18]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x60c
ret 0x10