Function at 0x44a0b0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
mov eax, dword [0x6aab00]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, ecx
test esi, esi
je 0x44a2de
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x44a0d0
sub eax, edx
cmp eax, 0x104
ja 0x44a2de
push 0x4f
lea eax, [ebp - 0x53]
push 0
push eax
call fcn.00551e50
mov edx, 0x6b9750
add esp, 0xc
mov dword [ebp - 0x58], 0
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x44a104
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CreateEventA]
push edi
mov ecx, 6
mov esi, str.CJProtect_Event_CodeFlag
lea edi, [ebp - 0x54]
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x54]
push ecx
push 0
push 1
push 0
movsb byte es:[edi], byte [esi]
call ebx
mov dword [0x6b9854], eax
test eax, eax
jne 0x44a145
push str.DealSrcCode_CreateEvent_Failed.__n
jmp 0x44a281
push 0x50
lea edx, [ebp - 0x54]
push 0
push edx
call fcn.00551e50
mov ecx, 6
mov esi, str.CJProtect_Event_CodeInfo
lea edi, [ebp - 0x54]
rep movsd dword es:[edi], dword [esi]
add esp, 0xc
lea eax, [ebp - 0x54]
push eax
push 0
push 1
push 0
movsb byte es:[edi], byte [esi]
call ebx
mov dword [0x6b9858], eax
test eax, eax
je 0x44a13b
cmp dword [0x6b0898], 0
mov edi, dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov esi, dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ebx, 0x10
jne 0x44a1dd
mov eax, dword [0x6b0894]
test eax, eax
jne 0x44a1ca
mov eax, dword [0x6b0878]
cmp dword [0x6b088c], ebx
jae 0x44a1af
mov eax, 0x6b0878
mov ecx, dword [0x6b0874]
push eax
push ecx
push 0
push 4
push 0
push 0xffffffffffffffff
call esi
mov dword [0x6b0894], eax
test eax, eax
je 0x44a1dd
push 0
push 0
push 0
push 0xf001f
push eax
call edi
mov dword [0x6b0898], eax
mov eax, dword [0x6b08c0]
mov edx, dword [0x6b0898]
mov dword [0x6b985c], edx
test eax, eax
jne 0x44a241
mov eax, dword [0x6b08bc]
test eax, eax
jne 0x44a227
mov eax, dword [0x6b08a0]
cmp dword [0x6b08b4], ebx
jae 0x44a20d
mov eax, 0x6b08a0
push eax
mov eax, dword [0x6b089c]
push eax
push 0
push 4
push 0
push 0xffffffffffffffff
call esi
mov dword [0x6b08bc], eax
test eax, eax
je 0x44a23c
push 0
push 0
push 0
push 0xf001f
push eax
call edi
mov dword [0x6b08c0], eax
jmp 0x44a241
mov eax, dword [0x6b08c0]
cmp dword [0x6b985c], 0
mov dword [0x6b9860], eax
je 0x44a27c
test eax, eax
je 0x44a27c
push 0
push 0
push 0
push 0x449eb0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
je 0x44a273
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x58], 1
jmp 0x44a289
push str.DealSrcCode_g_MemServer_CodeFlag_or_g_MemServer_CodeData_Failed__n
call fcn.00448aa0
add esp, 4
push 0x6b9750
push str.g_szDataPath:__s__n
call fcn.00448aa0
mov ecx, dword [0x6b9858]
mov edx, dword [0x6b9854]
push ecx
push edx
push str.g_hEventFlag:__x__g_hEvent_CodeInfo:__x__n
call fcn.00448aa0
mov eax, dword [0x6b9860]
mov ecx, dword [0x6b985c]
push eax
push ecx
push str.g_pCodeFlag:__x__g_pCodeInfo:__x__n
call fcn.00448aa0
mov eax, dword [ebp - 0x58]
add esp, 0x20
pop edi
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0054cec4
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor ecx, ebp
xor eax, eax
pop esi
call fcn.0054cec4
mov esp, ebp
pop ebp
ret