Function at 0x448c18
Capabilities:
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xffffff60
push ebx
push esi
push edi
mov byte [ebp - 2], cl
mov ebx, edx
mov byte [ebp - 1], al
mov eax, 0x4ba55c
call fcn.00458f50
test bl, bl
je 0x448c4c
test al, 1
jne 0x448c4c
xor eax, eax
jmp 0x448fb3
call fcn.0044a49c
mov edi, eax
mov byte [0x4be9b0], 0
xor eax, eax
call fcn.00452aac
lea edx, [ebp - 0xa0]
mov eax, 0x4ba55c
call fcn.0045d1d8
mov ecx, 0x4b2abc
mov edx, 0x4b26bc
mov eax, 0x4ba55c
call fcn.0045d1a4
mov edx, dword [ebp - 0x90]
mov dword [0x4b1274], edx
mov byte [0x4b099a], bl
mov dword [0x4b0e5c], 1
xor ecx, ecx
mov dword [0x4b0940], ecx
xor eax, eax
mov dword [0x4b096c], eax
call fcn.0043e51e
lea edx, [ebp - 0x4a0]
mov eax, 0x4ba55c
xor ecx, ecx
call fcn.0045d1a4
lea edx, [ebp - 0x8a0]
mov eax, 0x4ba55c
xor ecx, ecx
call fcn.0045d178
mov dl, byte [ebp - 1]
lea ecx, [ebp - 0x4a0]
push edx
cmp dword [ebp - 0x2c], 0
setne al
and eax, 1
push eax
mov eax, 0x4be9b0
mov dl, byte [ebp + 8]
push edx
mov edx, 0x49c965
call fcn.004498f8
cmp byte [ebp - 1], 0
je 0x448d1c
mov eax, 1
call fcn.0043e40f
test al, al
jne 0x448d1c
xor eax, eax
jmp 0x448fb3
cmp byte [ebp - 0x8a0], 0
jne 0x448d4f
mov eax, 0x4b982c
call fcn.0046374c
mov esi, eax
mov eax, 0x4b982c
call fcn.00463780
cmp esi, eax
jne 0x448d4f
cmp dword [ebp - 0x2c], 0
je 0x448d4b
cmp byte [ebp - 0xb], 0
je 0x448d4f
mov byte [ebp - 2], 1
cmp byte [ebp - 2], 0
je 0x448d66
mov edx, 0x49cae1
mov eax, dword [0x4b32bc]
call fcn.0040f0a4
jmp 0x448ddd
mov eax, 0x4b982c
xor ecx, ecx
mov edx, dword [0x4b32bc]
call fcn.00463894
test al, al
jne 0x448d83
xor eax, eax
jmp 0x448fb3
mov edx, dword [0x4b32bc]
cmp dword [edx + 0x30], 0
jne 0x448ddd
lea ecx, [ebp - 0x8a0]
push ecx
lea eax, [ebp - 0xca0]
push eax
call fcn.0048d424
add esp, 8
cmp byte [ebp - 0xca0], 0
je 0x448db9
lea eax, [ebp - 0xca0]
call fcn.0040ba78
push 0x49cae1
lea edx, [ebp - 0xca0]
push edx
call fcn.0048d348
add esp, 8
lea edx, [ebp - 0xca0]
mov eax, dword [0x4b32bc]
call fcn.0040f0a4
cmp dword [ebp - 0x2c], 0
je 0x448e5f
cmp byte [ebp - 0xb], 0
jne 0x448e5f
mov eax, 0x4b982c
call fcn.0046374c
mov esi, eax
test esi, esi
je 0x448e10
cmp byte [ebp - 0x8a0], 0
jne 0x448e5f
mov eax, 0x4b982c
call fcn.00463780
cmp esi, eax
jne 0x448e5f
test esi, esi
jne 0x448e1b
mov edx, 1
jmp 0x448e3d
push 0x4b26bc
push 0x43f42d
push dword [0x4b9818]
push 0x49d3b9
push dword [0x4a6fb0]
call sub.USER32.DLL_DialogBoxParamA
mov edx, eax
sub edx, 0xffffffff
je 0x448e49
sub edx, 2
je 0x448e50
jmp 0x448e5f
xor eax, eax
jmp 0x448fb3
mov edx, 0x49cae1
mov eax, dword [0x4b32bc]
call fcn.0040f0a4
mov byte [ebp - 0x10a0], 0
test bl, bl
jne 0x448ec8
cmp byte [0x4be9b0], 0
je 0x448ec8
cmp dword [0x4b08a4], 5
je 0x448ec8
lea ecx, [ebp - 0x10a0]
push ecx
push 0x400
call sub.KERNEL32.DLL_GetCurrentDirectoryA
mov eax, 0x4be9b0
xor ecx, ecx
xor edx, edx
call fcn.00409cac
push 0x4be9b0
call fcn.0048ee28
pop ecx
inc eax
jne 0x448ec8
push 0x4be9b0
mov eax, 0x1f7
call fcn.004117b8
push eax
call fcn.0044a23c
add esp, 8
xor eax, eax
jmp 0x448fb3
mov eax, 0x4ba55c
xor ecx, ecx
xor edx, edx
call fcn.004586e0
cmp byte [ebp - 0x10a0], 0
je 0x448eec
lea eax, [ebp - 0x10a0]
push eax
call fcn.0048ee28
pop ecx
call fcn.0044a49c
cmp edi, eax
jne 0x448efe
cmp dword [0x4bc1b0], 0
je 0x448f02
xor edx, edx
jmp 0x448f07
mov edx, 1
mov byte [ebp - 3], dl
cmp byte [ebp - 3], 0
je 0x448f6f
test bl, bl
je 0x448f39
push 0x40
mov eax, 0x3a7
call fcn.004117b8
push eax
mov eax, 0x3a8
call fcn.004117b8
push eax
push dword [0x4b9818]
call sub.USER32.DLL_MessageBoxA
jmp 0x448f6f
cmp dword [0x4b1a84], 0
je 0x448f6f
mov edx, 0x4b2abc
mov eax, 0x4b26bc
call fcn.0040a0e0
test al, al
jne 0x448f6f
mov eax, 0x4b982c
call fcn.00463a38
test al, al
je 0x448f6f
mov eax, 0x4b982c
xor edx, edx
call fcn.0045e284
mov byte [0x4b9db0], 0
mov eax, 0x4b9d84
call fcn.00445538
test bl, bl
jne 0x448fb0
cmp dword [0x4bc1b0], 0
jne 0x448fb0
cmp byte [0x4bedb5], 0
je 0x448fb0
push 1
push 0x49c965
push 0
push 0x4be9b0
push 0x49d3ca
push 0
call sub.SHELL32.DLL_ShellExecuteA
mov al, byte [ebp - 3]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4