Function at 0x44c4d8
Capabilities:
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 7
add esp, 0xfffff004
push eax
dec eax
jne 0x44c4e1
mov eax, dword [ebp - 4]
add esp, 0xfffff73c
push ebx
push esi
push edi
mov esi, ecx
mov byte [ebp - 0x22a], dl
mov byte [ebp - 0x229], al
mov edi, 0x4b99b8
mov eax, 0x4a7b38
call fcn.004980b0
test esi, esi
jne 0x44c55d
mov eax, 0x4c4e78
call fcn.0045de7c
test eax, eax
jne 0x44c55d
push 0x30
mov eax, 0x65
call fcn.004125d0
push eax
mov eax, 0x14c
call fcn.004125d0
push eax
push dword [0x4c4e64]
call sub.USER32.DLL_MessageBoxA
mov edx, dword [ebp - 0x228]
mov dword fs:[0], edx
mov eax, edx
jmp 0x44ce0b
xor eax, eax
call fcn.00449b0c
mov dword [0x4c8168], 0
mov dword [0x4c816c], 0
mov dword [0x4c8160], 0
mov dword [0x4c8164], 0
call fcn.00486b94
mov dword [ebp - 0x230], eax
mov word [ebp - 0x218], 8
lea eax, [ebp - 0x10c]
call fcn.00460710
add dword [ebp - 0x20c], 6
mov word [ebp - 0x218], 0x14
mov word [ebp - 0x218], 0x20
lea eax, [ebp - 0x204]
call fcn.0040fa70
add dword [ebp - 0x20c], 4
mov word [ebp - 0x218], 0x14
test esi, esi
sete dl
and edx, 1
mov byte [ebp - 0x231], dl
mov word [ebp - 0x218], 0x2c
cmp byte [ebp - 0x231], 0
je 0x44c647
lea esi, [ebp - 0x204]
mov eax, 0x4c4e78
xor ecx, ecx
xor edx, edx
call fcn.0045dd64
jmp 0x44c628
lea ecx, [ebp - 0xa78]
lea edx, [ebp - 0xe78]
mov eax, esi
call fcn.0040fbfc
lea edx, [ebp - 0xe78]
mov eax, 0x4c4e78
xor ecx, ecx
call fcn.0045dd64
test al, al
je 0x44c647
cmp dword [0x4c7814], 0
je 0x44c615
mov word [ebp - 0x218], 0x14
jmp 0x44c6cb
call fcn.00486b94
mov dword [ebp - 0x238], eax
mov word [ebp - 0x218], 0x14
test esi, esi
je 0x44c6ed
cmp dword [ebp + 0x14], 0
je 0x44c6ed
xor ebx, ebx
jmp 0x44c6f2
mov ebx, 1
push 1
push ebx
push 0
lea eax, [ebp - 0x239]
push 1
push eax
mov eax, esi
lea ecx, [ebp - 0x10c]
mov edx, 2
call fcn.00464838
xor edx, edx
mov dl, al
cmp edx, 1
sbb ecx, ecx
neg ecx
mov ebx, ecx
test bl, bl
jne 0x44c794
cmp dword [ebp - 8], 0
jne 0x44c794
cmp dword [esi + 0x30], 1
jne 0x44c794
mov eax, esi
call fcn.0040fdbc
lea ecx, [ebp - 0x244]
lea edx, [ebp - 0x240]
mov eax, esi
call fcn.0040fd4c
test al, al
je 0x44c794
mov edx, dword [ebp - 0x244]
mov eax, dword [ebp - 0x240]
call fcn.0040ab60
call fcn.0040a8a4
test al, al
jne 0x44c794
lea edx, [ebp - 0x10c]
push edx
push 0
push 0
push 0
push 0
xor ecx, ecx
mov edx, dword [ebp - 0x244]
mov eax, dword [ebp - 0x240]
call fcn.00464a24
lea eax, [ebp - 0x10c]
call fcn.00460ae0
mov esi, dword [ebp - 8]
test bl, bl
jne 0x44c7ad
test esi, esi
jne 0x44c846
cmp dword [ebp + 0x10], 0
jne 0x44c846
test bl, bl
jne 0x44c7e1
call fcn.00486b94
cmp eax, dword [ebp - 0x238]
jne 0x44c7e1
push 0x30
mov eax, 0x35f
call fcn.004125d0
push eax
mov eax, 0x35e
call fcn.004125d0
push eax
push dword [0x4c4e64]
call sub.USER32.DLL_MessageBoxA
mov eax, 0x4c53e8
xor edx, edx
call fcn.0047c864
sub dword [ebp - 0x20c], 4
lea eax, [ebp - 0x204]
mov edx, 2
call fcn.0040fb48
dec dword [ebp - 0x20c]
dec dword [ebp - 0x20c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0043d588
sub dword [ebp - 0x20c], 4
lea eax, [ebp - 0x10c]
mov edx, 2
call fcn.0040fb48
mov ecx, dword [ebp - 0x228]
mov dword fs:[0], ecx
jmp 0x44ce0b
mov al, byte [ebp - 0x22a]
mov byte [edi + 0x21ce], al
xor edx, edx
mov dword [edi + 0x2164], edx
xor ecx, ecx
mov dword [edi + 0x2190], ecx
mov dword [edi + 0x2690], 1
call fcn.0044c2d4
cmp byte [ebp - 0x22a], 0
mov byte [0x4c8274], 0
jne 0x44c9c3
mov byte [ebp - 0x245], 0
cmp esi, 1
jne 0x44c90b
lea ecx, [ebp - 0x1aa8]
lea eax, [ebp - 0x10c]
xor edx, edx
call fcn.00460a14
lea ebx, [ebp - 0x1aa8]
push 1
push 0
lea ecx, [ebp - 0x3308]
lea eax, [ebp - 0x10c]
xor edx, edx
call fcn.00460a14
lea eax, [ebp - 0x3308]
lea ecx, [ebp - 0x26d8]
add eax, 0x400
xor edx, edx
push eax
lea eax, [ebp - 0x10c]
call fcn.00460a14
lea edx, [ebp - 0x26d8]
mov eax, 0x4c5bc4
pop ecx
call fcn.00455fa0
mov eax, 0x4c5bc4
call fcn.004575c4
test eax, eax
setne dl
and edx, 1
mov byte [ebp - 0x245], dl
jmp 0x44c929
lea ecx, [ebp - 0x3708]
push ecx
push 0x400
call sub.KERNEL32.DLL_GetCurrentDirectoryA
lea eax, [ebp - 0x3708]
call fcn.0040bd28
mov ebx, eax
cmp byte [ebx], 0
jne 0x44c933
mov ebx, 0x4a7a81
mov al, byte [ebp - 0x229]
push eax
mov eax, 0x4c8274
mov dl, byte [ebp - 0x245]
push edx
mov edx, 0x4a7940
mov cl, byte [ebp + 0xc]
push ecx
mov ecx, ebx
call fcn.0044ce14
cmp byte [ebp - 0x229], 0
je 0x44c9c3
mov eax, esi
call fcn.0044af0c
test al, al
jne 0x44c9c3
sub dword [ebp - 0x20c], 4
lea eax, [ebp - 0x204]
mov edx, 2
call fcn.0040fb48
dec dword [ebp - 0x20c]
dec dword [ebp - 0x20c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0043d588
sub dword [ebp - 0x20c], 4
lea eax, [ebp - 0x10c]
mov edx, 2
call fcn.0040fb48
mov ecx, dword [ebp - 0x228]
mov dword fs:[0], ecx
jmp 0x44ce0b
cmp dword [ebp + 0x10], 0
je 0x44c9d9
push 0x4c8274
push dword [ebp + 0x10]
call fcn.00497c80
add esp, 8
test esi, esi
jne 0x44ca36
sub dword [ebp - 0x20c], 4
lea eax, [ebp - 0x204]
mov edx, 2
call fcn.0040fb48
dec dword [ebp - 0x20c]
dec dword [ebp - 0x20c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0043d588
sub dword [ebp - 0x20c], 4
lea eax, [ebp - 0x10c]
mov edx, 2
call fcn.0040fb48
mov ecx, dword [ebp - 0x228]
mov dword fs:[0], ecx
jmp 0x44ce0b
mov dword [0x4c815c], esi
cmp dword [0x4c7808], 0
jne 0x44ca4f
mov dword [0x4c7808], 2
xor ebx, ebx
jmp 0x44cc86
mov eax, dword [edi + 0x4b0c]
call fcn.0040fbc4
mov eax, dword [edi + 0x4b00]
call fcn.0040fbc4
mov byte [ebp - 0x3b08], 0
cmp dword [ebp + 0x14], 0
je 0x44ca8c
lea edx, [ebp - 0x3b08]
mov ecx, 0x400
mov eax, dword [ebp + 0x14]
call fcn.0040fc78
cmp byte [ebp - 0x3b08], 0
je 0x44ca9d
lea edx, [ebp - 0x3b08]
jmp 0x44caa2
mov edx, 0x4a7941
mov eax, dword [edi + 0x4b00]
call fcn.0040fbf4
lea ecx, [ebp - 0x4738]
lea eax, [ebp - 0x10c]
mov edx, ebx
call fcn.00460a14
lea eax, [ebp - 0x4738]
lea edx, [edi + 0x3f00]
call fcn.0040abcc
lea ecx, [ebp - 0x5368]
lea eax, [ebp - 0x10c]
mov edx, ebx
call fcn.00460a14
lea eax, [ebp - 0x5368]
lea edx, [edi + 0x4300]
add eax, 0x400
call fcn.0040ac14
mov byte [ebp - 0x5768], 0
cmp byte [0x4c8274], 0
je 0x44cb76
cmp dword [edi + 0x20c8], 5
je 0x44cb76
push 0x4c8274
lea ecx, [ebp - 0x5b68]
push ecx
call fcn.00497c80
add esp, 8
lea eax, [ebp - 0x5768]
push eax
push 0x400
call sub.KERNEL32.DLL_GetCurrentDirectoryA
lea eax, [ebp - 0x5b68]
xor ecx, ecx
xor edx, edx
call fcn.0040a2c4
lea eax, [ebp - 0x5b68]
push eax
call fcn.00499610
pop ecx
inc eax
jne 0x44cb76
lea edx, [ebp - 0x5b68]
mov eax, 0x1f7
push edx
call fcn.004125d0
push eax
call fcn.00486954
add esp, 8
jmp 0x44cc97
cmp byte [edi + 0x21ce], 0
mov al, 0x54
jne 0x44cb84
add eax, 4
lea edx, [edi + 0x3f00]
call fcn.00474d54
push 1
push 0
lea ecx, [edi + 0x4300]
lea edx, [edi + 0x3f00]
mov eax, 0x4c5bc4
call fcn.00455fa0
mov ecx, dword [0x4c5dcc]
mov dword [edi + 0x2ab0], ecx
mov byte [edi + 0x32c0], 1
cmp byte [edi + 0x21ce], 0
je 0x44cbef
mov eax, 0x4c5bc4
call fcn.00453108
test al, 1
jne 0x44cbef
mov eax, 0x3ac
call fcn.004125d0
push eax
lea edx, [edi + 0x3f00]
push edx
call fcn.0047d240
add esp, 8
jmp 0x44cc01
mov eax, 0x4c5bc4
xor ecx, ecx
mov dl, byte [ebp - 0x239]
call fcn.0045249c
mov byte [edi + 0x32c0], 0
cmp byte [ebp - 0x5768], 0
je 0x44cc1e
lea eax, [ebp - 0x5768]
push eax
call fcn.00499610
pop ecx
lea edx, [ebx + 1]
push edx
push dword [ebp - 8]
mov eax, 0x35d
call fcn.004125d0
push eax
lea edx, [ebp - 0x5c68]
push edx
call fcn.0049abd0
add esp, 0x10
lea edx, [ebp - 0x5c68]
mov eax, 0x4c53e8
call fcn.0047c864
lea ecx, [ebp - 0x6898]
lea eax, [ebp - 0x10c]
mov edx, ebx
call fcn.00460a14
lea ecx, [ebp - 0x6898]
mov eax, dword [ecx + 0xc00]
mov edx, dword [ecx + 0xc04]
add dword [0x4c8160], eax
adc dword [0x4c8164], edx
call fcn.00474bac
inc ebx
cmp esi, ebx
jle 0x44cc97
cmp dword [0x4c7814], 0
je 0x44ca56
cmp dword [0x4c7808], 2
jne 0x44cca7
xor eax, eax
mov dword [0x4c7808], eax
cmp byte [ebp + 8], 0
je 0x44ccb8
push dword [0x4c4e70]
call sub.USER32.DLL_DestroyWindow
cmp byte [edi + 0x2696], 0
je 0x44ccd8
cmp dword [0x4c7814], 0
jne 0x44ccd8
cmp dword [0x4c7818], 0
jne 0x44ccd8
call fcn.00464294
mov eax, 0x4c53e8
xor edx, edx
call fcn.0047c864
mov byte [0x4c5414], 0
mov eax, 0x4c53e8
call fcn.0047c924
cmp byte [ebp - 0x22a], 0
je 0x44cd41
cmp dword [0x4c7818], 0
jne 0x44cdb7
call fcn.00486b94
cmp eax, dword [ebp - 0x230]
jne 0x44cdb7
push 0x40
mov eax, 0x3a7
call fcn.004125d0
push eax
mov eax, 0x3a8
call fcn.004125d0
push eax
push dword [0x4c4e64]
call sub.USER32.DLL_MessageBoxA
jmp 0x44cdb7
cmp byte [ebp - 0x231], 0
je 0x44cdb7
cmp dword [0x4c7818], 0
jne 0x44cd76
cmp byte [0x4c8679], 0
je 0x44cd76
push 1
push 0x4a7940
push 0
push 0x4c8274
push 0x4a7956
push 0
call sub.SHELL32.DLL_ShellExecuteA
mov byte [ebp - 0x6c98], 0
lea edx, [ebp - 0x78c8]
mov eax, 0x4c4e78
call fcn.0045df28
test al, al
je 0x44cda7
lea edx, [ebp - 0x78c8]
push edx
lea ecx, [ebp - 0x6c98]
push ecx
call fcn.00497c80
add esp, 8
lea edx, [ebp - 0x6c98]
mov eax, 0x4c4e78
call fcn.00458864
sub dword [ebp - 0x20c], 4
lea eax, [ebp - 0x204]
mov edx, 2
call fcn.0040fb48
dec dword [ebp - 0x20c]
dec dword [ebp - 0x20c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0043d588
sub dword [ebp - 0x20c], 4
lea eax, [ebp - 0x10c]
mov edx, 2
call fcn.0040fb48
mov ecx, dword [ebp - 0x228]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10