Function at 0x44c5a0
Capabilities:
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffffb60
push ebx
push esi
push edi
mov byte [ebp - 2], cl
mov ebx, edx
mov byte [ebp - 1], al
mov eax, 0x4c7c4c
call fcn.00453850
test bl, bl
je 0x44c5d4
test al, 1
jne 0x44c5d4
xor eax, eax
jmp 0x44c982
call fcn.00487a64
mov edi, eax
mov byte [0x4ca2fc], 0
xor eax, eax
call fcn.0044a1d4
lea edx, [ebp - 0xa0]
mov eax, 0x4c7c4c
call fcn.00457db0
mov ecx, 0x4bfd40
mov edx, 0x4bf940
mov eax, 0x4c7c4c
call fcn.00457d7c
mov edx, dword [ebp - 0x90]
mov dword [0x4be4f0], edx
mov byte [0x4bdc0e], bl
mov dword [0x4be0d0], 1
xor ecx, ecx
mov dword [0x4bdba4], ecx
xor eax, eax
mov dword [0x4bdbd0], eax
call fcn.0044c9a4
lea edx, [ebp - 0x4a0]
mov eax, 0x4c7c4c
xor ecx, ecx
call fcn.00457d7c
lea edx, [ebp - 0x8a0]
mov eax, 0x4c7c4c
xor ecx, ecx
call fcn.00457d50
mov dl, byte [ebp - 1]
lea ecx, [ebp - 0x4a0]
push edx
cmp dword [ebp - 0x2c], 0
setne al
and eax, 1
push eax
mov eax, 0x4ca2fc
mov dl, byte [ebp + 8]
push edx
mov edx, 0x4a99b4
call fcn.0044d4ec
cmp byte [ebp - 1], 0
je 0x44c6a4
mov eax, 1
call fcn.0044b5a0
test al, al
jne 0x44c6a4
xor eax, eax
jmp 0x44c982
cmp byte [ebp - 0x8a0], 0
jne 0x44c6d7
mov eax, 0x4c6f00
call fcn.0045e6c0
mov esi, eax
mov eax, 0x4c6f00
call fcn.0045e6f8
cmp esi, eax
jne 0x44c6d7
cmp dword [ebp - 0x2c], 0
je 0x44c6d3
cmp byte [ebp - 0xb], 0
je 0x44c6d7
mov byte [ebp - 2], 1
cmp byte [ebp - 2], 0
je 0x44c6ee
mov edx, 0x4a99b5
mov eax, dword [0x4c0540]
call fcn.0040ff50
jmp 0x44c765
mov eax, 0x4c6f00
xor ecx, ecx
mov edx, dword [0x4c0540]
call fcn.0045e814
test al, al
jne 0x44c70b
xor eax, eax
jmp 0x44c982
mov edx, dword [0x4c0540]
cmp dword [edx + 0x30], 0
jne 0x44c765
lea ecx, [ebp - 0x8a0]
push ecx
lea eax, [ebp - 0xca0]
push eax
call fcn.00498e7c
add esp, 8
cmp byte [ebp - 0xca0], 0
je 0x44c741
lea eax, [ebp - 0xca0]
call fcn.0040c35c
push 0x4a99b5
lea edx, [ebp - 0xca0]
push edx
call fcn.00498da0
add esp, 8
lea edx, [ebp - 0xca0]
mov eax, dword [0x4c0540]
call fcn.0040ff50
cmp dword [ebp - 0x2c], 0
je 0x44c7e7
cmp byte [ebp - 0xb], 0
jne 0x44c7e7
mov eax, 0x4c6f00
call fcn.0045e6c0
mov esi, eax
test esi, esi
je 0x44c798
cmp byte [ebp - 0x8a0], 0
jne 0x44c7e7
mov eax, 0x4c6f00
call fcn.0045e6f8
cmp esi, eax
jne 0x44c7e7
test esi, esi
jne 0x44c7a3
mov edx, 1
jmp 0x44c7c5
push 0x4bf940
push 0x44c502
push dword [0x4c6eec]
push 0x4a99b7
push dword [0x4b41d0]
call sub.USER32.DLL_DialogBoxParamA
mov edx, eax
sub edx, 0xffffffff
je 0x44c7d1
sub edx, 2
je 0x44c7d8
jmp 0x44c7e7
xor eax, eax
jmp 0x44c982
mov edx, 0x4a99b5
mov eax, dword [0x4c0540]
call fcn.0040ff50
mov byte [ebp - 0x10a0], 0
test bl, bl
jne 0x44c850
cmp byte [0x4ca2fc], 0
je 0x44c850
cmp dword [0x4bdb08], 5
je 0x44c850
lea ecx, [ebp - 0x10a0]
push ecx
push 0x400
call sub.KERNEL32.DLL_GetCurrentDirectoryA
mov eax, 0x4ca2fc
xor ecx, ecx
xor edx, edx
call fcn.0040a3dc
push 0x4ca2fc
call fcn.0049a80c
pop ecx
inc eax
jne 0x44c850
push 0x4ca2fc
mov eax, 0x1f7
call fcn.004129c8
push eax
call fcn.00487828
add esp, 8
xor eax, eax
jmp 0x44c982
mov eax, 0x4c7c4c
xor ecx, ecx
xor edx, edx
call fcn.00452bdc
cmp byte [ebp - 0x10a0], 0
je 0x44c874
lea eax, [ebp - 0x10a0]
push eax
call fcn.0049a80c
pop ecx
call fcn.00487a64
cmp edi, eax
jne 0x44c886
cmp dword [0x4c98a0], 0
je 0x44c88a
xor edx, edx
jmp 0x44c88f
mov edx, 1
mov byte [ebp - 3], dl
cmp byte [ebp - 3], 0
je 0x44c8f7
test bl, bl
je 0x44c8c1
push 0x40
mov eax, 0x3a7
call fcn.004129c8
push eax
mov eax, 0x3a8
call fcn.004129c8
push eax
push dword [0x4c6eec]
call sub.USER32.DLL_MessageBoxA
jmp 0x44c8f7
cmp dword [0x4bed04], 0
je 0x44c8f7
mov edx, 0x4bfd40
mov eax, 0x4bf940
call fcn.0040a838
test al, al
jne 0x44c8f7
mov eax, 0x4c6f00
call fcn.0045ea0c
test al, al
je 0x44c8f7
mov eax, 0x4c6f00
xor edx, edx
call fcn.0045905c
mov byte [0x4c749c], 0
mov eax, 0x4c7470
call fcn.0047d6a8
test bl, bl
jne 0x44c97f
cmp dword [0x4c98a0], 0
jne 0x44c97f
cmp byte [0x4ca701], 0
je 0x44c97f
push 0x4ca2fc
call fcn.00498eac
pop ecx
cmp eax, 0x3fe
jae 0x44c97f
push 0x4ca2fc
lea edx, [ebp - 0x14a0]
push edx
call fcn.00498e7c
add esp, 8
lea eax, [ebp - 0x14a0]
call fcn.0040c35c
push 0x4a99c8
lea edx, [ebp - 0x14a0]
push edx
call fcn.00498da0
add esp, 8
push 1
push 0x4a99b4
push 0
lea ecx, [ebp - 0x14a0]
push ecx
push 0x4a99ca
push 0
call sub.SHELL32.DLL_ShellExecuteA
mov al, byte [ebp - 3]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4