Function at 0x444690
Capabilities:
Check if file exists
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x70
mov dword [ebp - 0x70], ecx
lea ecx, [ebp - 0xc]
call fcn.00404470
lea ecx, [ebp - 4]
call fcn.00404470
mov dword [ebp - 8], 0
mov dword [ebp - 0x68], 0x44
push 0x40
push 0
lea eax, [ebp - 0x64]
push eax
call fcn.00446c70
add esp, 0xc
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0xc]
push ecx
call fcn.00444440
add esp, 4
test eax, eax
jne 0x444701
mov edx, dword [ebp - 0x70]
mov dword [edx + 0x40], 8
lea ecx, [ebp - 4]
call fcn.00404490
lea ecx, [ebp - 0xc]
call fcn.00404490
jmp 0x444952
lea ecx, [ebp - 0xc]
call fcn.004047b0
test eax, eax
jg 0x44472c
mov eax, dword [ebp - 0x70]
mov dword [eax + 0x40], 8
lea ecx, [ebp - 4]
call fcn.00404490
lea ecx, [ebp - 0xc]
call fcn.00404490
jmp 0x444952
lea ecx, [ebp - 0x20]
push ecx
call fcn.0042fbd0
add esp, 4
test eax, eax
je 0x444743
mov dword [ebp - 8], 1
lea ecx, [ebp - 0xc]
call fcn.00430960
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x444765
mov edx, dword [ebp - 0x70]
mov dword [edx + 0x40], 9
jmp 0x444853
lea ecx, [ebp - 0xc]
call fcn.004047b0
sub eax, 1
push eax
lea ecx, [ebp - 0xc]
call fcn.00444f30
movzx eax, ax
cmp eax, 0x5c
je 0x44478e
push 0x46253c
lea ecx, [ebp - 0xc]
call fcn.00444e60
push 0x462540
lea ecx, [ebp - 0xc]
call fcn.00444e60
mov ecx, dword [str.hrupdate.exe]
push ecx
mov edx, dword [ebp - 0xc]
push edx
push 0x46254c
lea eax, [ebp - 4]
push eax
call fcn.00445260
add esp, 0x10
lea ecx, [ebp - 4]
call fcn.00430960
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4447d6
mov ecx, dword [ebp - 0x70]
mov dword [ecx + 0x40], 0xa
jmp 0x444853
mov edx, dword [str.hipsdaemon.exe]
push edx
mov eax, dword [ebp - 0xc]
push eax
push 0x462558
lea ecx, [ebp - 4]
push ecx
call fcn.00445260
add esp, 0x10
lea ecx, [ebp - 4]
call fcn.00430960
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x444811
mov edx, dword [ebp - 0x70]
mov dword [edx + 0x40], 0x14
jmp 0x444853
mov eax, dword [str.hipstray.exe]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
push 0x462564
lea edx, [ebp - 4]
push edx
call fcn.00445260
add esp, 0x10
lea ecx, [ebp - 4]
call fcn.00430960
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x44484b
mov eax, dword [ebp - 0x70]
mov dword [eax + 0x40], 0x13
jmp 0x444853
xor ecx, ecx
jne 0x444743
cmp dword [ebp - 8], 0
je 0x444865
mov edx, dword [ebp - 0x20]
push edx
call fcn.0042fc20
add esp, 4
mov eax, dword [ebp - 0x70]
cmp dword [eax + 0x40], 0
je 0x444883
lea ecx, [ebp - 4]
call fcn.00404490
lea ecx, [ebp - 0xc]
call fcn.00404490
jmp 0x444952
mov ecx, dword [ebp - 0x70]
call fcn.004444f0
mov ecx, dword [ebp - 0x70]
cmp dword [ecx + 0x40], 0
je 0x444942
mov dword [ebp - 0x6c], 0
mov edx, dword [str.hipstray.exe]
push edx
mov eax, dword [ebp - 0xc]
push eax
push 0x462570
lea ecx, [ebp - 4]
push ecx
call fcn.00445260
add esp, 0x10
lea ecx, [ebp - 4]
call fcn.00430960
push eax
call fcn.00447efa
add esp, 4
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
je 0x444942
lea edx, [ebp - 0x1c]
push edx
lea eax, [ebp - 0x68]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x6c]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x44492c
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x70]
mov dword [ecx + 0x40], 0
mov ecx, dword [ebp - 0x70]
call fcn.004444f0
jmp 0x444936
mov edx, dword [ebp - 0x70]
mov dword [edx + 0x40], 0x15
mov eax, dword [ebp - 0x6c]
push eax
call fcn.0044760b
add esp, 4
lea ecx, [ebp - 4]
call fcn.00404490
lea ecx, [ebp - 0xc]
call fcn.00404490
mov esp, ebp
pop ebp
ret