Function at 0x440680
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0xc], 0
push edi
mov dword [ebp - 8], edi
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push dword [ebp + 0x10]
call fcn.004408e0
mov ecx, dword [edi + 0x16c]
cmp dword [edi + 0x30], 0
mov dword [ebp + 0x10], eax
je 0x4406ed
push dword [ebp + 8]
lea ecx, [edi + 0x17c]
call fcn.00442d90
mov ecx, edi
call fcn.0043ff90
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp byte [edi + 0x40], 0
je 0x440703
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [edi + 0x30], 1
cmp eax, ecx
je 0x44071b
mov ecx, edi
mov dword [edi + 0x16c], eax
call fcn.00440cb0
push dword [ebp + 8]
inc dword [edi + 0x34]
lea ecx, [ebp - 0x48]
call fcn.00442310
mov esi, eax
lea ebx, [edi + 0x17c]
cmp ebx, esi
je 0x440761
push esi
mov ecx, ebx
call fcn.00442e20
lea ecx, [esi + 0xc]
push ecx
lea ecx, [ebx + 0xc]
call fcn.00442e20
lea eax, [esi + 0x18]
push eax
lea ecx, [ebx + 0x18]
call fcn.00442e20
lea eax, [esi + 0x24]
push eax
lea ecx, [ebx + 0x24]
call fcn.00442e20
lea ecx, [ebp - 0x48]
call fcn.00442470
mov ecx, edi
call fcn.0043ff90
mov ecx, edi
call fcn.00440040
test byte [ebp + 0x10], 4
je 0x440878
push 0x1c
call fcn.0048cef3
add esp, 4
test eax, eax
je 0x44079a
mov ecx, eax
call fcn.0043efe0
mov esi, eax
jmp 0x44079c
xor esi, esi
mov ecx, dword [edi + 0x170]
mov dword [edi + 0x170], 0
test ecx, ecx
je 0x4407b7
mov eax, dword [ecx]
push 1
call dword [eax + 4]
sub esp, 0x20
mov dword [edi + 0x170], esi
mov ecx, esp
call fcn.00444600
push 0x4140a0
push 0x4b6f00
mov ecx, esi
call fcn.0043f270
mov esi, dword [edi + 0x170]
sub esp, 0x20
mov ecx, esp
call fcn.00444600
push 0x414098
push 0x4b6f04
mov ecx, esi
call fcn.0043f270
mov esi, dword [edi + 0x170]
sub esp, 0x20
mov ecx, esp
call fcn.00444600
push 0x4140a8
push 0x4b6f08
mov ecx, esi
call fcn.0043f270
mov esi, dword [edi + 0x170]
lea ebx, [edi + 0x174]
push 8
call fcn.0048cef3
add esp, 4
mov dword [ebp + 8], eax
test ebx, ebx
setne cl
mov dword [eax], esi
push 0
push 0
push eax
push 0x4301b0
push 0
push 0
mov byte [eax + 4], cl
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
jne 0x440862
push dword [ebp + 8]
call fcn.0048cf69
add esp, 4
jmp 0x440878
test ebx, ebx
je 0x440871
mov dword [ebx], eax
mov dword [ebx + 4], 0
jmp 0x440878
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [edi + 0x44]
mov byte [edi + 0x40], 1
push eax
lea ecx, [ebp - 0x18]
call fcn.00442f70
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ebx, dword [ebp - 0x14]
xor esi, esi
sub ebx, dword [ebp - 0x18]
sar ebx, 2
test ebx, ebx
je 0x4408b0
mov edi, dword [ebp - 0x18]
mov ecx, dword [edi + esi*4]
mov eax, dword [ecx]
call dword [eax]
inc esi
cmp esi, ebx
jb 0x4408a1
mov edi, dword [ebp - 8]
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push edi
mov byte [edi + 0x40], 0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x4408d2
push eax
call fcn.0048cf69
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc