Function at 0x44a030
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50300d
mov eax, dword fs:[0]
push eax
sub esp, 0x830
mov eax, dword [0x54c154]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov ecx, dword [edi + 0x60]
mov esi, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
test ecx, ecx
je 0x44a10a
cmp eax, ecx
jne 0x44a10a
mov ecx, dword [edi + 0x5c]
add ecx, 0x14
mov eax, dword [ecx]
call dword [eax]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x44a0a1
mov ecx, dword [edi + 0x5c]
add ecx, 0x14
push 9
mov eax, dword [ecx]
call dword [eax]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [edi + 0x5c]
push 0x43
push 0
add ecx, 0x14
push 0
push 0
push 0
mov eax, dword [ecx]
push 0xffffffffffffffff
call dword [eax]
mov esi, dword [sym.imp.USER32.dll_SetWindowPos]
push eax
call esi
mov ecx, dword [edi + 0x5c]
add ecx, 0x14
mov eax, dword [ecx]
call dword [eax]
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, dword [edi + 0x5c]
push 0x43
push 0
add ecx, 0x14
push 0
push 0
push 0
mov eax, dword [ecx]
push 0xfffffffffffffffe
call dword [eax]
push eax
call esi
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a44cd
mov esp, ebp
pop ebp
ret 0xc
cmp eax, 0x464
jne 0x44a14b
push str.oobe_set_email_controller::process_message
push str.WM_LOGIN_ERROR
lea ecx, [ebp - 0x424]
call fcn.0040a4d0
mov dword [ebp - 4], 0
mov ecx, dword [edi + 0x5c]
test ecx, ecx
je 0x44a139
call fcn.0044e9c0
lea ecx, [ebp - 0x424]
call fcn.0040a5f0
mov eax, 1
jmp 0x44a0ec
cmp eax, 0x465
jne 0x44a170
push str.oobe_set_email_controller::process_message
push str.WM_SHOW_ERROR
lea ecx, [ebp - 0x424]
call fcn.0040a4d0
mov dword [ebp - 4], 1
jmp 0x44a12d
cmp eax, 0x466
jne 0x44a1b4
push str.oobe_set_email_controller::process_message
push str.WM_SHOW_CONN_FAIL
lea ecx, [ebp - 0x424]
call fcn.0040a4d0
mov dword [ebp - 4], 2
mov ecx, dword [edi + 0x5c]
test ecx, ecx
je 0x44a139
call fcn.0044eae0
lea ecx, [ebp - 0x424]
call fcn.0040a5f0
mov eax, 1
jmp 0x44a0ec
cmp eax, 0x104
jne 0x44a1cc
cmp esi, 0x73
jne 0x44a0ea
lea eax, [esi - 0x72]
jmp 0x44a0ec
cmp eax, 0x469
jne 0x44a261
push str.oobe_set_email_controller::process_message
push str.WM_NAVIGATE_OOBE_SET_EMAIL_URL
lea ecx, [ebp - 0x424]
call fcn.0040a4d0
mov dword [ebp - 4], 3
sub esp, 0x1c
mov ebx, dword [edi + 0x5c]
mov edx, esi
mov edi, esp
xor eax, eax
mov dword [ebp - 0x83c], edi
lea ecx, [edx + 2]
mov dword [edi], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
nop
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x44a220
sub edx, ecx
mov ecx, edi
sar edx, 1
push edx
push esi
call fcn.00415d70
mov ecx, ebx
mov byte [edi + 0x18], 1
call fcn.0044ef20
push esi
call fcn.004da815
add esp, 4
lea ecx, [ebp - 0x424]
call fcn.0040a5f0
mov eax, 1
jmp 0x44a0ec
cmp eax, 0x467
jne 0x44a2a9
push str.oobe_set_email_controller::process_message
push str.WM_SHOW_OOBE_PRODUCT_REGISTERED
lea ecx, [ebp - 0x424]
call fcn.0040a4d0
mov dword [ebp - 4], 4
mov ecx, dword [edi + 0x5c]
test ecx, ecx
je 0x44a139
call fcn.0044f1f0
lea ecx, [ebp - 0x424]
call fcn.0040a5f0
mov eax, 1
jmp 0x44a0ec
cmp eax, 0x46a
jne 0x44a0ea
push str.oobe_set_email_controller::process_message
push str.WM_NAVIGATE_OOBE_SET_PWD_URL
lea ecx, [ebp - 0x838]
call fcn.0040a4d0
push str.oobe_set_email_controller::process_message
mov edx, 0x10
mov dword [ebp - 4], 5
lea ecx, [ebp - 0xb8]
call fcn.0040a850
add esp, 4
mov byte [ebp - 4], 6
cmp byte [eax + 0x48], 0
je 0x44a2fc
push esi
push eax
call fcn.004110a0
add esp, 8
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 5
call fcn.0040a6f0
push 1
push str.open
push 0
xor edx, edx
mov ecx, esi
call fcn.00409a00
add esp, 0xc
test al, al
jne 0x44a377
push str.oobe_set_email_controller::process_message
mov edx, 0x10
lea ecx, [ebp - 0xb8]
call fcn.0040a850
add esp, 4
mov byte [ebp - 4], 7
cmp byte [eax + 0x48], 0
je 0x44a354
push str.ShellExecuteFromExplorer_failed
push eax
call fcn.004110a0
add esp, 8
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 5
call fcn.0040a6f0
push 1
push 0
push 0
push esi
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push esi
call fcn.004da815
add esp, 4
lea eax, [edi + 0x115]
mov cl, 1
xchg byte [eax], cl
cmp dword [edi + 0xe0], 0
lea ecx, [edi + 0xe0]
je 0x44a3b2
sub esp, 0x28
lea eax, [edi - 4]
mov edx, esp
mov dword [edx], vtable.std::_Func_impl_no_alloc_class__lambda_9308e619572738b877450fbed6b11cd1___void___.0
mov dword [edx + 4], eax
mov dword [edx + 0x24], edx
call fcn.00408490
mov ecx, dword [edi + 0x5c]
test ecx, ecx
je 0x44a3c8
mov eax, dword [ecx + 0x14]
add ecx, 0x14
push 0
push 0
push 0x10
call dword [eax + 0x14]
lea ecx, [ebp - 0x838]
call fcn.0040a5f0
mov eax, 1
jmp 0x44a0ec