Function at 0x446304
Capabilities:
Create process on windows

Disassembly:
push ebp
sub esp, 0x848
lea ebp, [esp - 4]
mov eax, dword [0x665ebc]
xor eax, ebp
mov dword [ebp + 0x848], eax
push 0xc
mov eax, 0x5de442
call fcn.0059ca24
mov edi, dword [ebp + 0x858]
mov esi, ecx
call fcn.00567d0d
push eax
lea ecx, [ebp - 0x10]
call fcn.00402440
push 2
push 0xffffffffffffffff
xor ebx, ebx
mov dword [edi], ebx
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 0x100c
push dword [esi + 0x190]
mov dword [ebp - 4], ebx
call edi
test eax, eax
jl 0x446554
lea ecx, [ebp]
call fcn.00493dd6
mov byte [ebp - 4], 1
call fcn.00567d0d
push eax
lea ecx, [ebp - 0x14]
call fcn.00402440
push ebx
push str.WorkMode
lea ecx, [ebp]
mov byte [ebp - 4], 2
call fcn.0049359e
push eax
push str.OperaOptionsFile
lea eax, [ebp - 0x14]
push str._s_d
push eax
call fcn.00401b30
add esp, 0x10
push ebx
push dword [ebp - 0x14]
lea ecx, [ebp]
call fcn.0049352a
mov dword [ebp - 0x18], eax
cmp eax, ebx
jne 0x4463dd
mov esi, dword [esi + 0x20]
push 0x2d0
mov ecx, 0x66ea90
call fcn.0047ddbd
push eax
push 0x16
push esi
call fcn.00428d53
add esp, 0xc
jmp 0x44653e
push eax
lea ecx, [ebp + 0x410]
call fcn.00428bc1
push dword [ebp - 0x18]
mov byte [ebp - 4], 3
call fcn.00564e3f
pop ecx
push ebx
push ebx
lea ecx, [ebp + 0x410]
call fcn.00498d2a
push 2
push 0xffffffffffffffff
push 0x100c
push dword [esi + 0x190]
call edi
push 6
push eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [esi + 0x170]
call fcn.0057ad5c
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 4
call fcn.00402340
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
mov byte [ebp - 4], 3
call fcn.00402490
mov edi, dword [ebp - 0x10]
push edi
push ebx
lea ecx, [ebp + 0x410]
call fcn.00499340
lea ecx, [ebp + 0x410]
call fcn.004992e9
test eax, eax
jne 0x4464ac
mov esi, dword [esi + 0x20]
push 0x2e0
mov ecx, 0x66ea90
call fcn.0047ddbd
push eax
push 0x16
push esi
call fcn.00428d53
add esp, 0xc
lea ecx, [ebp + 0x410]
mov byte [ebp - 4], 2
call fcn.0042719c
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00402490
lea ecx, [ebp]
mov byte [ebp - 4], bl
call fcn.00493516
lea ecx, [edi - 0x10]
jmp 0x44655a
push str.shell32.dll_OpenAs_RunDLL
lea ecx, [ebp - 0x10]
call fcn.00401ec0
lea eax, [ebp + 0x410]
push eax
lea ecx, [ebp - 0x10]
call fcn.0040d820
mov eax, dword [esi + 0x20]
push 1
push ebx
push dword [ebp - 0x10]
push str.rundll32.exe
push str.open
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edi, eax
cmp edi, 0x20
ja 0x44652f
push 0x113
mov ecx, 0x66ea90
call fcn.0047ddbd
push eax
lea ecx, [ebp - 0x10]
call fcn.00401ec0
push 0x5f5834
lea ecx, [ebp - 0x10]
call fcn.0040d820
push edi
call fcn.0042848c
pop ecx
push eax
lea ecx, [ebp - 0x10]
call fcn.0040d820
push dword [ebp - 0x10]
mov esi, dword [esi + 0x20]
push 0x16
push esi
call fcn.00428d53
add esp, 0xc
lea ecx, [ebp + 0x410]
mov byte [ebp - 4], 2
call fcn.0042719c
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00402490
lea ecx, [ebp]
mov byte [ebp - 4], bl
call fcn.00493516
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.00402490
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x848]
xor ecx, ebp
call fcn.0059ca15
add ebp, 0x84c
leave
ret 8