Function at 0x10044303
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10064027
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x140
push esi
push edi
push 3
lea ecx, [ebp - 0x12c]
call fcn.10011569
and dword [ebp - 4], 0
mov dword [ebp - 0xe8], 1
mov dword [ebp - 0x18], 0
jmp 0x1004434e
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1004436a
push dword [ebp - 0x18]
lea ecx, [ebp - 0x12c]
call fcn.10011607
mov dword [eax], 0x7571177e
jmp 0x10044347
mov dword [ebp - 0x18], 0
jmp 0x1004437a
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10044390
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x13c], 0xfffffffc
jmp 0x10044373
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x13c], 0
jmp 0x100443be
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x13c]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x13c], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x13c], 2
jg 0x10044453
mov dword [ebp - 0x28], 8
mov dword [ebp - 0x28], 2
jmp 0x100443e9
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1004442c
mov eax, 0xf147909b
test eax, eax
je 0x10044417
push dword [ebp - 0x28]
lea ecx, [ebp - 0x12c]
call fcn.10011607
cmp dword [eax], 0
je 0x10044417
mov dword [ebp - 0xb8], 1
jmp 0x1004441e
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xe8], eax
jmp 0x100443e2
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0x13c]
lea ecx, [ebp - 0x12c]
call fcn.10011607
cmp dword [eax], 0
je 0x1004444e
jmp 0x100443a3
jmp 0x100443a3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12c]
call fcn.100115eb
mov eax, dword [ebp + 8]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax]
test eax, eax
je 0x10044572
mov dword [ebp - 0x24], 0xffff
push 2
lea ecx, [ebp - 0x120]
call fcn.10011569
mov dword [ebp - 4], 1
mov dword [ebp - 0x108], 1
mov dword [ebp - 0x34], 0
jmp 0x100444b1
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x100444cd
push dword [ebp - 0x34]
lea ecx, [ebp - 0x120]
call fcn.10011607
mov dword [eax], 3
jmp 0x100444aa
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0
jmp 0x100444e4
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jg 0x10044551
mov dword [ebp - 0x114], 0xfffffffc
mov dword [ebp - 0x54], 0x3a0b8ee4
push dword [ebp - 0x24]
lea ecx, [ebp - 0x120]
call fcn.10011607
mov esi, dword [ebp - 0x114]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x120]
call fcn.10011607
cmp esi, dword [eax]
jne 0x1004452f
mov dword [ebp - 0xd8], 1
jmp 0x10044536
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x54], 0xfffffff6
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x108], eax
jmp 0x100444dd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x120]
call fcn.100115eb
push 0
push 0x1ee9
push 0x2049
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
push 4
lea ecx, [ebp - 0x48]
call fcn.10011569
mov dword [ebp - 4], 2
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x5c], 0x14ffd814
mov dword [ebp - 0xf8], 0x99333c7d
push 1
lea ecx, [ebp - 0xcc]
call fcn.10011569
mov byte [ebp - 4], 3
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x10], 0
jmp 0x100445c3
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x100445dc
push dword [ebp - 0x10]
lea ecx, [ebp - 0x48]
call fcn.10011607
mov dword [eax], 8
jmp 0x100445bc
mov dword [ebp - 0x10], 0
jmp 0x100445ec
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x10044608
push dword [ebp - 0x10]
lea ecx, [ebp - 0xcc]
call fcn.10011607
mov dword [eax], 1
jmp 0x100445e5
mov dword [ebp - 0x10], 0
jmp 0x10044618
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x1004462b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2c], 0xba52b339
jmp 0x10044611
push 1
lea ecx, [ebp - 0x48]
call fcn.10011607
and dword [eax], 0
jmp 0x10044652
push 1
lea ecx, [ebp - 0x48]
call fcn.10011607
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x6c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x48]
call fcn.10011607
cmp dword [eax], 0xffffffe7
jl 0x10044ada
mov dword [ebp - 0x58], 0xffffffff
push 1
lea ecx, [ebp - 0xe4]
call fcn.10011569
mov byte [ebp - 4], 4
mov dword [ebp - 0x100], 0x642ee1e3
mov dword [ebp - 0x3c], 0
jmp 0x10044697
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x100446b3
push dword [ebp - 0x3c]
lea ecx, [ebp - 0xe4]
call fcn.10011607
mov dword [eax], 2
jmp 0x10044690
push 1
lea ecx, [ebp - 0x48]
call fcn.10011607
mov eax, dword [eax]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0xf0]
cmp eax, dword [ebp - 0x104]
jg 0x100446f2
mov dword [ebp - 0xac], 1
jmp 0x100446f9
and dword [ebp - 0xac], 0
push 0
lea ecx, [ebp - 0xe4]
call fcn.10011607
cmp dword [eax], 0x3d4752e4
jle 0x1004471a
mov dword [ebp - 0xf4], 1
jmp 0x10044721
and dword [ebp - 0xf4], 0
push 0
lea ecx, [ebp - 0xcc]
call fcn.10011607
mov eax, 0x9cff
cmp eax, 0xc214
jge 0x10044743
mov dword [ebp - 0x74], 1
jmp 0x10044747
and dword [ebp - 0x74], 0
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x74]
jg 0x1004475e
mov dword [ebp - 0xb4], 1
jmp 0x10044765
and dword [ebp - 0xb4], 0
push 0
lea ecx, [ebp - 0xe4]
call fcn.10011607
mov ecx, dword [ebp - 0xb4]
cmp ecx, dword [eax]
jg 0x10044785
mov dword [ebp - 0x7c], 1
jmp 0x10044789
and dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x7c], eax
jne 0x1004479d
mov dword [ebp - 0xbc], 1
jmp 0x100447a4
and dword [ebp - 0xbc], 0
mov dword [ebp - 0x58], 0x1328
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0xbc]
mov dword [ebp - 0x5c], eax
mov esi, dword [ebp - 0x5c]
push 0
lea ecx, [ebp - 0xe4]
call fcn.10011607
cmp esi, dword [eax]
jle 0x100447d7
mov dword [ebp - 0xd0], 1
jmp 0x100447de
and dword [ebp - 0xd0], 0
cmp dword [ebp - 0xd0], 0x2fde2bbe
jg 0x100447f3
mov dword [ebp - 0x60], 1
jmp 0x100447f7
and dword [ebp - 0x60], 0
push 0
lea ecx, [ebp - 0xe4]
call fcn.10011607
mov ecx, dword [ebp - 0x60]
mov dword [eax], ecx
cmp dword [ebp - 0x60], 0xffff
jbe 0x1004481e
mov dword [ebp - 0x88], 1
jmp 0x10044825
and dword [ebp - 0x88], 0
mov eax, dword [ebp - 0x88]
add eax, 8
je 0x10044a40
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x14], 0
jmp 0x1004484b
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1004485e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x38], 0x93a
jmp 0x10044844
mov dword [ebp - 0x14], 0
jmp 0x1004486e
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10044884
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x14c], 0x8f302d78
jmp 0x10044867
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c], 0
je 0x1004496c
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x38]
cmp dword [ebp + eax - 0x38], ecx
jge 0x100448b4
mov dword [ebp - 0x4c], 1
jmp 0x100448b8
and dword [ebp - 0x4c], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c], 0xffff
jb 0x100448d4
mov dword [ebp - 0xb0], 1
jmp 0x100448db
and dword [ebp - 0xb0], 0
push 0
lea ecx, [ebp - 0xe4]
call fcn.10011607
mov ecx, dword [ebp - 0x4c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0xb0]
jl 0x1004490a
mov dword [ebp - 0x90], 1
jmp 0x10044911
and dword [ebp - 0x90], 0
cmp dword [ebp - 0x90], 0xd863
jge 0x10044929
mov dword [ebp - 0xc0], 1
jmp 0x10044930
and dword [ebp - 0xc0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
cmp dword [ebp - 0xc0], eax
jne 0x1004494e
mov dword [ebp - 0x98], 1
jmp 0x10044955
and dword [ebp - 0x98], 0
push 1
lea ecx, [ebp - 0x48]
call fcn.10011607
mov ecx, dword [ebp - 0x98]
imul ecx, dword [eax]
test ecx, ecx
jne 0x1004497b
mov eax, 0x9898
test eax, eax
jne 0x1004497b
and dword [ebp - 0x64], 0
jmp 0x10044982
mov dword [ebp - 0x64], 1
mov eax, dword [ebp - 0x64]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x38]
jg 0x1004499f
mov dword [ebp - 0xa0], 1
jmp 0x100449a6
and dword [ebp - 0xa0], 0
push 0
lea ecx, [ebp - 0xcc]
call fcn.10011607
mov ecx, dword [ebp - 0xa0]
cmp ecx, dword [eax]
jg 0x100449c9
mov dword [ebp - 0xd4], 1
jmp 0x100449d0
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0x5c]
sub eax, dword [ebp - 0xd4]
jne 0x100449e7
mov dword [ebp - 0xfc], 1
jmp 0x100449ee
and dword [ebp - 0xfc], 0
push 1
lea ecx, [ebp - 0x48]
call fcn.10011607
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x50], eax
jle 0x10044a0f
mov dword [ebp - 0xa8], 1
jmp 0x10044a16
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0xa8], eax
jle 0x10044a2a
mov dword [ebp - 0x80], 1
jmp 0x10044a2e
and dword [ebp - 0x80], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x80]
mov dword [ebp + eax - 0x14c], ecx
jmp 0x10044a64
mov byte [ebp - 0x1d], 0
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x10044a64
push 0x2552
push 0
push 0
push 0
push 0
push 0x12f3
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x1c], 0x18
jmp 0x10044a74
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x13
jle 0x10044ac6
mov dword [ebp - 0x110], 0xffff
mov dword [ebp - 0x8c], 0x4f120b25
cmp dword [ebp - 0x110], 0xcf48b058
ja 0x10044aa6
mov dword [ebp - 0x84], 1
jmp 0x10044aad
and dword [ebp - 0x84], 0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
je 0x10044ac4
jmp 0x10044a6d
jmp 0x10044a6d
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xe4]
call fcn.100115eb
jmp 0x1004463a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c], 0x82
jge 0x10044af6
mov dword [ebp - 0x94], 1
jmp 0x10044afd
and dword [ebp - 0x94], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x94], eax
jle 0x10044b17
mov dword [ebp - 0xec], 1
jmp 0x10044b1e
and dword [ebp - 0xec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
mov dword [ebp - 0x140], eax
push 0
lea ecx, [ebp - 0xcc]
call fcn.10011607
mov esi, eax
push 0
lea ecx, [ebp - 0xcc]
call fcn.10011607
mov ecx, dword [esi]
add ecx, dword [eax]
sub ecx, dword [ebp - 0x30]
je 0x10044b5e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c], 0
push 0
lea ecx, [ebp - 0xcc]
call fcn.10011607
mov dword [ebp - 0x9c], eax
push 0
lea ecx, [ebp - 0xcc]
call fcn.10011607
mov ecx, dword [ebp - 0x9c]
mov eax, dword [eax]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x48]
call fcn.10011607
mov ecx, dword [ebp - 0x9c]
mov ecx, dword [ecx]
cmp ecx, dword [eax]
jne 0x10044baa
mov dword [ebp - 0xa4], 1
jmp 0x10044bb1
and dword [ebp - 0xa4], 0
push 3
lea ecx, [ebp - 0x48]
call fcn.10011607
mov esi, dword [eax]
neg esi
mov edi, dword [ebp - 0xa4]
neg edi
push 0
lea ecx, [ebp - 0x48]
call fcn.10011607
add edi, dword [eax]
cmp esi, edi
jg 0x10044be0
mov dword [ebp - 0x68], 1
jmp 0x10044be4
and dword [ebp - 0x68], 0
mov esi, dword [ebp - 0x1c]
imul esi, dword [ebp - 0x68]
push 3
lea ecx, [ebp - 0x48]
call fcn.10011607
imul esi, dword [eax]
cmp esi, dword [ebp - 0x30]
je 0x10044c06
mov dword [ebp - 0x70], 1
jmp 0x10044c0a
and dword [ebp - 0x70], 0
mov eax, dword [ebp - 0x1c]
sub eax, 0xfffe
cmp eax, dword [ebp - 0x70]
jle 0x10044c20
mov dword [ebp - 0x78], 1
jmp 0x10044c24
and dword [ebp - 0x78], 0
push 1
lea ecx, [ebp - 0x48]
call fcn.10011607
mov ecx, dword [ebp - 0x78]
mov dword [eax], ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xcc]
call fcn.100115eb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.100115eb
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret