Function at 0x446f10
Capabilities:
Create thread

Disassembly:
push 0xffffffffffffffff
push 0x58166b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
push ebx
push ebp
push esi
mov esi, ecx
push edi
lea edi, [esi + 0x210]
mov ecx, edi
mov dword [esp + 0x14], esi
mov dword [esi], 0x59da78
call fcn.00442ff0
lea ebp, [esi + 0x424]
xor ebx, ebx
push ebp
mov dword [esp + 0x34], ebx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push ebp
mov dword [esp + 0x14], ebp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ebp, dword [esp + 0x38]
push ebp
mov ecx, edi
mov byte [esp + 0x34], 2
mov dword [esi + 0x454], ebx
mov dword [esi + 0x458], ebx
call fcn.004440a0
mov eax, dword [esp + 0x3c]
mov dword [esi + 0x204], eax
xor eax, eax
mov dword [esi + 0x440], ebx
mov dword [esi + 0x43c], ebx
mov dword [esi + 0x444], ebx
mov dword [esi + 0x448], ebx
mov dword [esi + 0x44c], ebx
mov dword [esi + 0x450], ebx
lea edi, [esi + 4]
mov ecx, 0x80
rep stosd dword es:[edi], eax
mov ecx, ebp
mov dword [esi + 0x208], ebx
mov byte [esi + 0x20c], bl
call fcn.00443410
xor edi, edi
cmp eax, ebx
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], ebx
jle 0x447004
jmp 0x446fe0
lea ecx, [esp + 0x18]
push ecx
push edi
mov ecx, ebp
call fcn.004434e0
mov eax, dword [esp + 0x24]
cmp dword [esp + 0x38], eax
jg 0x446ffb
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x3c]
inc edi
cmp edi, eax
jl 0x446fe0
cmp dword [esi + 0x204], ebx
mov dword [esp + 0x3c], ebx
jle 0x447065
mov ebp, dword [esp + 0x38]
shl ebp, 0xb
lea edi, [esi + 4]
lea ebx, [ebx]
push 4
push 0x3000
push ebp
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
cmp eax, ebx
mov dword [edi], eax
je 0x4470c0
mov edx, dword [esi + 0x440]
mov eax, dword [esp + 0x38]
mov dword [edi + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [edi + 0x14], edx
mov dword [esi + 0x440], edi
mov ecx, dword [esi + 0x204]
inc eax
add edi, 0x20
cmp eax, ecx
mov dword [esp + 0x3c], eax
jl 0x447020
mov edi, dword [sym.imp.KERNEL32.dll_CreateEventA]
push ebx
push ebx
push 1
push ebx
call edi
push ebx
push 1
push 1
push ebx
mov dword [esi + 0x448], eax
call edi
push ebx
push ebx
push 1
push ebx
mov dword [esi + 0x44c], eax
call edi
cmp dword [esi + 0x448], ebx
mov dword [esi + 0x450], eax
jne 0x447119
push 0xc
call sub.MFC71.DLL_operator_new_1
add esp, 4
mov dword [esp + 0x3c], eax
cmp eax, ebx
mov byte [esp + 0x30], 4
je 0x4470ff
push 0x82
mov ecx, eax
call fcn.0049bd50
jmp 0x447101
push 0xc
call sub.MFC71.DLL_operator_new_1
add esp, 4
mov dword [esp + 0x3c], eax
cmp eax, ebx
mov byte [esp + 0x30], 3
je 0x4470e5
push 0x82
mov ecx, eax
call fcn.0049bd50
jmp 0x4470e7
xor eax, eax
push 0x5d1fa4
lea ecx, [esp + 0x3c]
push ecx
mov byte [esp + 0x38], 2
mov dword [esp + 0x40], eax
call sub.MSVCR71.dll__CxxThrowException
xor eax, eax
push 0x5d1fa4
lea edx, [esp + 0x3c]
push edx
mov byte [esp + 0x38], 2
mov dword [esp + 0x40], eax
call sub.MSVCR71.dll__CxxThrowException
cmp dword [esi + 0x44c], ebx
jne 0x447160
push 0xc
call sub.MFC71.DLL_operator_new_1
add esp, 4
mov dword [esp + 0x3c], eax
cmp eax, ebx
mov byte [esp + 0x30], 5
je 0x447146
push 0x82
mov ecx, eax
call fcn.0049bd50
jmp 0x447148
xor eax, eax
mov dword [esp + 0x38], eax
push 0x5d1fa4
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0x38], 2
call sub.MSVCR71.dll__CxxThrowException
cmp eax, ebx
jne 0x4471a3
push 0xc
call sub.MFC71.DLL_operator_new_1
add esp, 4
mov dword [esp + 0x3c], eax
cmp eax, ebx
mov byte [esp + 0x30], 6
je 0x447189
push 0x82
mov ecx, eax
call fcn.0049bd50
jmp 0x44718b
xor eax, eax
push 0x5d1fa4
lea ecx, [esp + 0x3c]
push ecx
mov byte [esp + 0x38], 2
mov dword [esp + 0x40], eax
call sub.MSVCR71.dll__CxxThrowException
lea eax, [esi + 0x458]
push eax
push ebx
push esi
push 0x446db0
push ebx
push ebx
mov dword [eax], ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp eax, ebx
mov dword [esi + 0x454], eax
jne 0x447204
push 0xc
call sub.MFC71.DLL_operator_new_1
add esp, 4
mov dword [esp + 0x3c], eax
cmp eax, ebx
mov byte [esp + 0x30], 7
je 0x4471ea
push 0x82
mov ecx, eax
call fcn.0049bd50
jmp 0x4471ec
xor eax, eax
push 0x5d1fa4
lea edx, [esp + 0x3c]
push edx
mov byte [esp + 0x38], 2
mov dword [esp + 0x40], eax
call sub.MSVCR71.dll__CxxThrowException
push 2
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [esp + 0x28]
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x24
ret 8