Function at 0x44e360
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
mov eax, 0x20078
call fcn.00609180
mov eax, dword [0x6d3438]
xor eax, esp
mov dword [esp + 0x20074], eax
mov eax, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 8]
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], eax
push edi
mov edi, dword [ebp + 0xc]
mov dword [esp + 0x18], edi
test esi, esi
je 0x44e573
xor eax, eax
cmp ax, word [esi]
je 0x44e573
push esi
call fcn.005ee305
add esp, 4
test eax, eax
je 0x44e414
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 5
mov dword [esp + 0x18], eax
call fcn.0049dcb0
add esp, 4
test eax, eax
je 0x44e5a2
lea eax, [esp + 0x14]
mov edx, str.E:BT430b185a_855c_4893_bfb8_5d7192a0aa53ScriptHostJavaScriptScriptablePluginsSystemPlugin_srcSystemPlugin.cpp
push eax
lea eax, [esp + 0x20]
mov ecx, 5
push eax
push str.Module__s_is_invalid__0x_08x_
push 0xf3
push str.McAfee::Script::CSystemPlugin::LaunchProcess
call fcn.00439940
add esp, 0x14
xor al, al
pop edi
pop esi
mov ecx, dword [esp + 0x20074]
xor ecx, esp
call fcn.00608185
mov esp, ebp
pop ebp
ret 0xc
push 0x20000
lea eax, [esp + 0x7c]
push 0
push eax
call fcn.0060a8e0
add esp, 0xc
lea eax, [esp + 0x78]
push edi
push esi
push str._s__s
push eax
call fcn.0044fb00
add esp, 0x10
mov dword [esp + 0x30], 0x44
lea eax, [esp + 0x20]
xorps xmm0, xmm0
movlpd qword [esp + 0x34], xmm0
movlpd qword [esp + 0x3c], xmm0
push eax
lea eax, [esp + 0x34]
movlpd qword [esp + 0x48], xmm0
push eax
push 0
push 0
push 0x8000000
push 0
push 0
push 0
lea eax, [esp + 0x98]
movlpd qword [esp + 0x6c], xmm0
push eax
push esi
movlpd qword [esp + 0x7c], xmm0
movlpd qword [esp + 0x84], xmm0
movlpd qword [esp + 0x8c], xmm0
movlpd qword [esp + 0x94], xmm0
movaps xmmword [esp + 0x48], xmm0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x44e510
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 5
mov dword [esp + 0x18], eax
call fcn.0049dcb0
add esp, 4
test eax, eax
je 0x44e5a2
lea eax, [esp + 0x14]
mov edx, str.E:BT430b185a_855c_4893_bfb8_5d7192a0aa53ScriptHostJavaScriptScriptablePluginsSystemPlugin_srcSystemPlugin.cpp
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x24]
push eax
push str.Failed_to_launch_process__s_with_parameters__s__0x_08x_
push 0x106
push str.McAfee::Script::CSystemPlugin::LaunchProcess
call fcn.0044fb20
add esp, 0x18
xor al, al
pop edi
pop esi
mov ecx, dword [esp + 0x20074]
xor ecx, esp
call fcn.00608185
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x28]
mov dword [esp + 0x18], eax
call fcn.00440aa0
mov eax, dword [esp + 0x14]
mov dword [eax + 4], 3
mov dword [eax + 8], esi
mov eax, dword [esp + 0x18]
test eax, eax
je 0x44e54b
cmp eax, 0xffffffff
je 0x44e54b
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
je 0x44e55b
cmp edi, 0xffffffff
je 0x44e55b
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, 1
pop edi
pop esi
mov ecx, dword [esp + 0x20074]
xor ecx, esp
call fcn.00608185
mov esp, ebp
pop ebp
ret 0xc
push 5
call fcn.0049dcb0
add esp, 4
test eax, eax
je 0x44e5a2
push str.Invalid__empty__path
push 0xe5
push str.McAfee::Script::CSystemPlugin::LaunchProcess
mov edx, str.E:BT430b185a_855c_4893_bfb8_5d7192a0aa53ScriptHostJavaScriptScriptablePluginsSystemPlugin_srcSystemPlugin.cpp
mov ecx, 5
call fcn.00438de0
add esp, 0xc
mov ecx, dword [esp + 0x2007c]
xor al, al
pop edi
pop esi
xor ecx, esp
call fcn.00608185
mov esp, ebp
pop ebp
ret 0xc