Function at 0x443d9c
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe0
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], edx
mov esi, eax
mov eax, dword [ebp - 4]
test eax, eax
je 0x443dbd
xor edx, edx
mov dword [eax], edx
xor eax, eax
push ebp
push 0x4440f2
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.00404788
xor ebx, ebx
push 0
mov eax, dword [esi + 0x38]
push eax
call dword [0x535870]
test eax, eax
je 0x4440ac
mov dword [ebp - 8], 4
push 0
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
push 0
push 0x20000013
mov eax, dword [esi + 0x38]
push eax
call dword [0x535874]
test eax, eax
je 0x443fcb
mov eax, dword [ebp - 0xc]
sub eax, 0xc8
je 0x443e3c
add eax, 0xffffff9b
sub eax, 3
jb 0x443e49
sub eax, 0x61
je 0x443efd
sub eax, 6
je 0x443f86
jmp 0x443fcb
mov al, byte [esi + 0x72]
mov byte [esi + 0x73], al
mov bl, 1
jmp 0x443fcb
xor eax, eax
mov dword [ebp - 8], eax
push 0
lea eax, [ebp - 8]
push eax
push 0
push 0
push 0x21
mov eax, dword [esi + 0x38]
push eax
call dword [0x535874]
test eax, eax
jne 0x443fcb
cmp dword [ebp - 8], 0
jbe 0x443fcb
call sub.kernel32.dll_GetLastError_1
cmp eax, 0x7a
jne 0x443fcb
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 8]
call fcn.00404de8
push 0
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 0x1c]
push eax
push 0
push 0x21
mov eax, dword [esi + 0x38]
push eax
call dword [0x535874]
test eax, eax
je 0x443fcb
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
call fcn.0040506c
mov edx, dword [ebp - 0x20]
mov eax, 0x52fe78
call fcn.00404a20
cmp byte [0x52fe74], 0
je 0x443ef0
cmp byte [esi + 0x14], 0
jne 0x443ef0
push 1
push 0
push 0
mov eax, dword [0x52fe78]
call fcn.00404c58
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
mov al, byte [esi + 0x72]
mov byte [esi + 0x73], al
mov bl, 1
jmp 0x443fcb
cmp byte [esi + 0x72], 0
je 0x443f09
mov byte [esi + 0x73], 0
jmp 0x443f0d
mov byte [esi + 0x72], 1
cmp byte [esi + 0x5d], 0
jne 0x443fcb
mov eax, dword [esi + 0x20]
xor edx, edx
call fcn.00405220
je 0x443fcb
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esi + 0x38]
push eax
call dword [0x535878]
test eax, eax
je 0x443fcb
mov byte [esi + 0x5d], 1
mov eax, dword [ebp - 0x10]
call fcn.00443d60
mov edi, eax
mov dword [esi + 0x60], edi
test edi, edi
je 0x443fcb
push 0
mov eax, dword [esi + 0x24]
call fcn.004050f8
push eax
mov eax, dword [esi + 0x20]
call fcn.004050f8
push eax
push edi
push 0
mov eax, dword [esi + 0x38]
push eax
call dword [0x53587c]
cmp eax, 1
sbb eax, eax
inc eax
mov byte [esi + 0x5c], al
jmp 0x443fcb
cmp byte [esi + 0x64], 0
jne 0x443fcb
mov eax, dword [esi + 0x28]
xor edx, edx
call fcn.00405220
je 0x443fcb
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esi + 0x38]
push eax
call dword [0x535878]
test eax, eax
je 0x443fcb
mov byte [esi + 0x64], 1
mov eax, dword [ebp - 0x10]
call fcn.00443d60
mov edi, eax
mov dword [esi + 0x68], edi
test edi, edi
setne al
mov byte [esi + 0x5c], al
test bl, bl
je 0x4440d4
jmp 0x444015
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 8]
call fcn.00404de8
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [esi + 0x38]
push eax
call dword [0x535884]
test eax, eax
je 0x44402d
mov eax, dword [ebp - 0x1c]
call fcn.00404a58
cmp eax, dword [ebp - 8]
jne 0x44402d
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x1c]
call fcn.00404a60
mov eax, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
mov eax, dword [esi + 0x38]
push eax
call dword [0x535880]
test eax, eax
je 0x44402d
cmp dword [ebp - 8], 0
ja 0x443fd5
push 0
mov esi, dword [0x533448]
mov esi, dword [esi]
mov eax, dword [ebp - 4]
mov ecx, 0x44410c
mov edx, 0x444118
call esi
push 0
mov esi, dword [0x533448]
mov esi, dword [esi]
mov eax, dword [ebp - 4]
mov ecx, 0x444128
mov edx, 0x444134
call esi
push 0
mov esi, dword [0x533448]
mov esi, dword [esi]
mov eax, dword [ebp - 4]
mov ecx, 0x444144
mov edx, 0x444150
call esi
push 0
mov esi, dword [0x533448]
mov esi, dword [esi]
mov eax, dword [ebp - 4]
mov ecx, 0x444160
mov edx, 0x44416c
call esi
push 0
mov esi, dword [0x533448]
mov esi, dword [esi]
mov eax, dword [ebp - 4]
mov ecx, 0x44417c
mov edx, 0x444188
call esi
jmp 0x4440d4
cmp dword [esi + 0x60], 0
jne 0x4440c4
cmp dword [esi + 0x68], 0
jne 0x4440c4
call sub.kernel32.dll_GetLastError_1
cmp eax, 0x2f00
je 0x4440c8
xor eax, eax
jmp 0x4440ca
mov al, 1
mov byte [esi + 0x5c], al
mov eax, esi
call fcn.00444190
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4440f9
lea eax, [ebp - 0x20]
call fcn.00404f44
lea eax, [ebp - 0x1c]
call fcn.00404788
ret