Function at 0x4482c0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fab8e
mov eax, dword fs:[0]
push eax
sub esp, 0x118
mov eax, dword [0x53d058]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x7c], edi
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x20]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x14], ebx
mov edx, dword [eax + 8]
xor eax, eax
mov ecx, edx
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
lea esi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x448320
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x30]
call fcn.004034d0
push str.login2::login_view::browser_events::BeforeNavigate2
mov edx, 0x10
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x124]
call fcn.0040fef0
add esp, 4
mov esi, eax
mov byte [ebp - 4], 1
mov cl, byte [esi + 0x48]
test cl, cl
je 0x448374
mov edx, str.BeforeNavigate2
mov ecx, esi
call fcn.004151c0
mov cl, byte [esi + 0x48]
cmp dword [ebp - 0x1c], 8
lea eax, [ebp - 0x30]
cmovae eax, dword [ebp - 0x30]
test cl, cl
je 0x44838d
push eax
push esi
call fcn.00414f60
add esp, 8
lea ecx, [ebp - 0x124]
call fcn.0040fdc0
xor eax, eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00449f90
test al, al
je 0x44844c
test ebx, ebx
je 0x4483e7
or eax, 0xffffffff
mov word [ebx], ax
mov eax, dword [edi + 4]
lea ecx, [ebp - 0x14]
push ecx
mov dword [ebp - 0x14], 0
mov ecx, dword [eax + 0x494]
call fcn.00443570
mov byte [ebp - 4], 4
mov esi, dword [ebp - 0x14]
test esi, esi
je 0x448411
mov eax, dword [esi]
push esi
call dword [eax + 0x38]
cmp dword [ebp - 0x34], 8
lea edx, [ebp - 0x48]
mov ecx, dword [edi + 4]
lea eax, [ebp - 0x60]
cmovae edx, dword [ebp - 0x48]
cmp dword [ebp - 0x4c], 8
push edx
cmovae eax, dword [ebp - 0x60]
push eax
call fcn.00447950
mov byte [ebp - 4], 3
test esi, esi
je 0x448a37
mov byte [ebp - 4], 5
mov eax, dword [esi]
push esi
call dword [eax + 8]
jmp 0x448a37
cmp dword [ebp - 0x1c], 8
lea ecx, [ebp - 0x30]
mov edx, dword [ebp - 0x30]
lea edi, [ebp - 0x30]
mov eax, dword [ebp - 0x20]
lea ebx, [ebp - 0x30]
cmovae ecx, edx
cmovae edi, edx
cmovae ebx, edx
lea eax, [ecx + eax*2]
mov esi, eax
cmp edi, esi
je 0x44848a
sub ebx, edi
movzx eax, word [edi]
push eax
call fcn.004db0da
mov word [edi + ebx], ax
add esp, 4
add edi, 2
cmp edi, esi
jne 0x448473
lea eax, [ebp - 0x78]
push eax
call fcn.00448a70
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x68]
cmp dword [ebp - 0x20], edx
jb 0x44852b
cmp dword [ebp - 0x64], 8
lea ecx, [ebp - 0x78]
push edx
cmovae ecx, dword [ebp - 0x78]
lea eax, [ebp - 0x30]
cmp dword [ebp - 0x1c], 8
push ecx
cmovae eax, dword [ebp - 0x30]
push eax
call fcn.004d09e9
add esp, 0xc
test eax, eax
jne 0x44852b
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x4484d5
or ecx, 0xffffffff
mov word [eax], cx
mov edi, dword [ebp - 0x7c]
lea ecx, [ebp - 0x14]
push ecx
mov dword [ebp - 0x14], 0
mov eax, dword [edi + 4]
mov ecx, dword [eax + 0x494]
call fcn.00443570
mov byte [ebp - 4], 7
mov esi, dword [ebp - 0x14]
test esi, esi
je 0x448502
mov eax, dword [esi]
push esi
call dword [eax + 0x38]
mov eax, dword [edi + 4]
mov ecx, dword [eax + 0x460]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov byte [ebp - 4], 6
test esi, esi
je 0x448a2f
mov byte [ebp - 4], 8
mov eax, dword [esi]
push esi
call dword [eax + 8]
jmp 0x448a2f
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x545894]
mov dword [ebp - 0x18], ecx
cmp eax, dword [ecx + 8]
jle 0x4485ee
push 0x545894
call fcn.0049892b
add esp, 4
cmp dword [0x545894], 0xffffffff
jne 0x4485ee
push 0x34
xor eax, eax
mov dword [0x545898], 0
push str.https:__m.facebook.com_login__privacy_mutation_token
mov ecx, 0x545898
mov dword [0x5458a8], 0
mov dword [0x5458ac], 7
mov word [0x545898], ax
call fcn.004034d0
mov byte [ebp - 4], 9
xor eax, eax
push 0x1f
mov dword [0x5458b0], 0
mov ecx, 0x5458b0
push str.https:__m.facebook.com_home.php
mov dword [0x5458c0], 0
mov dword [0x5458c4], 7
mov word [0x5458b0], ax
call fcn.004034d0
push 0x505100
mov byte [ebp - 4], 6
call fcn.004987d5
push 0x545894
call fcn.004988e1
add esp, 8
mov ebx, dword [ebp - 0x1c]
mov edi, 0x545898
mov ecx, dword [edi + 0x10]
cmp dword [ebp - 0x20], ecx
jb 0x448676
cmp ebx, 8
lea esi, [ebp - 0x30]
cmovae esi, dword [ebp - 0x30]
cmp dword [edi + 0x14], 8
jb 0x448615
mov eax, dword [edi]
lea edx, [eax + ecx*2]
jmp 0x44861c
lea edx, [edi + ecx*2]
mov ecx, edi
jb 0x44861e
mov ecx, dword [edi]
sub edx, ecx
sub edx, 4
jb 0x448636
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x44863b
add ecx, 4
add esi, 4
sub edx, 4
jae 0x448625
cmp edx, 0xfffffffc
je 0x44866c
mov al, byte [ecx]
cmp al, byte [esi]
jne 0x448668
cmp edx, 0xfffffffd
je 0x44866c
mov al, byte [ecx + 1]
cmp al, byte [esi + 1]
jne 0x448668
cmp edx, 0xfffffffe
je 0x44866c
mov al, byte [ecx + 2]
cmp al, byte [esi + 2]
jne 0x448668
cmp edx, 0xffffffff
je 0x44866c
mov al, byte [ecx + 3]
cmp al, byte [esi + 3]
je 0x44866c
xor al, al
jmp 0x44866e
mov al, 1
test al, al
jne 0x448737
add edi, 0x18
cmp edi, 0x5458c8
jne 0x4485f6
mov ecx, dword [ebp - 0x18]
mov eax, dword [0x545a50]
cmp eax, dword [ecx + 8]
jle 0x4486f4
push 0x545a50
call fcn.0049892b
add esp, 4
cmp dword [0x545a50], 0xffffffff
jne 0x4486f1
push 0x13
push str.https:__github.com_
mov ecx, 0x545a54
mov dword [0x545a54], 0
mov dword [0x545a64], 0
mov dword [0x545a68], 7
call fcn.004034d0
push 0x5051a0
call fcn.004987d5
push 0x545a50
call fcn.004988e1
add esp, 8
mov ebx, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x30]
mov esi, 0x545a54
nop dword [eax]
mov ecx, dword [esi + 0x10]
lea eax, [ebp - 0x30]
cmp ebx, 8
mov edx, esi
cmovae eax, edi
cmp dword [esi + 0x14], 8
jb 0x448716
mov edx, dword [esi]
cmp ecx, dword [ebp - 0x20]
jne 0x44872a
push ecx
push eax
push edx
call fcn.0040c240
add esp, 0xc
test eax, eax
je 0x44878c
add esi, 0x18
cmp esi, 0x545a6c
jne 0x448700
jmp 0x448798
cmp edi, 0x5458c8
je 0x448685
push str.login2::login_view::browser_events::BeforeNavigate2
mov edx, 0x10
lea ecx, [ebp - 0x124]
call fcn.0040fef0
add esp, 4
mov byte [ebp - 4], 0xa
cmp byte [eax + 0x48], 0
je 0x448773
push str.block_navigate
push eax
call fcn.00414f60
add esp, 8
lea ecx, [ebp - 0x124]
call fcn.0040fdc0
mov eax, dword [ebp - 0x14]
or ecx, 0xffffffff
mov word [eax], cx
jmp 0x448a2f
cmp esi, 0x545a6c
jne 0x44896b
lea ecx, [ebp - 0x30]
call fcn.00447de0
test al, al
jne 0x44896b
mov ecx, dword [ebp - 0x18]
mov eax, dword [0x545a6c]
cmp eax, dword [ecx + 8]
jle 0x448814
push 0x545a6c
call fcn.0049892b
add esp, 4
cmp dword [0x545a6c], 0xffffffff
jne 0x448814
push 0x21
push str.https:__login.live.com_logout.srf
mov ecx, 0x545a70
mov dword [0x545a70], 0
mov dword [0x545a80], 0
mov dword [0x545a84], 7
call fcn.004034d0
push 0x5051f0
call fcn.004987d5
push 0x545a6c
call fcn.004988e1
add esp, 8
mov ebx, dword [ebp - 0x20]
mov edi, 0x545a70
nop dword [eax]
mov ecx, dword [edi + 0x10]
cmp ebx, ecx
jb 0x44889d
cmp dword [ebp - 0x1c], 8
lea esi, [ebp - 0x30]
cmovae esi, dword [ebp - 0x30]
cmp dword [edi + 0x14], 8
jb 0x44883f
mov eax, dword [edi]
lea edx, [eax + ecx*2]
jmp 0x448846
lea edx, [edi + ecx*2]
mov ecx, edi
jb 0x448848
mov ecx, dword [edi]
sub edx, ecx
sub edx, 4
jb 0x448861
nop
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x448866
add ecx, 4
add esi, 4
sub edx, 4
jae 0x448850
cmp edx, 0xfffffffc
je 0x448897
mov al, byte [ecx]
cmp al, byte [esi]
jne 0x448893
cmp edx, 0xfffffffd
je 0x448897
mov al, byte [ecx + 1]
cmp al, byte [esi + 1]
jne 0x448893
cmp edx, 0xfffffffe
je 0x448897
mov al, byte [ecx + 2]
cmp al, byte [esi + 2]
jne 0x448893
cmp edx, 0xffffffff
je 0x448897
mov al, byte [ecx + 3]
cmp al, byte [esi + 3]
je 0x448897
xor al, al
jmp 0x448899
mov al, 1
test al, al
jne 0x4488b1
add edi, 0x18
cmp edi, 0x545a88
jne 0x448820
jmp 0x448a2f
cmp edi, 0x545a88
je 0x448a2f
push str.login2::login_view::browser_events::BeforeNavigate2
mov edx, 0x10
lea ecx, [ebp - 0x124]
call fcn.0040fef0
add esp, 4
mov byte [ebp - 4], 0xd
cmp byte [eax + 0x48], 0
je 0x4488ed
push str.block_navigate___goto_home
push eax
call fcn.00414f60
add esp, 8
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 6
call fcn.0040fdc0
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x448909
or ecx, 0xffffffff
mov word [eax], cx
mov edi, dword [ebp - 0x7c]
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], 0
mov eax, dword [edi + 4]
mov ecx, dword [eax + 0x494]
call fcn.00443570
mov byte [ebp - 4], 0xe
mov esi, dword [ebp - 0x18]
test esi, esi
je 0x448950
mov eax, dword [esi]
push esi
call dword [eax + 0x38]
mov ecx, dword [edi + 4]
cmp dword [ecx + 0x550], 8
lea eax, [ecx + 0x53c]
jb 0x44894a
mov eax, dword [eax]
push eax
call fcn.00447ad0
mov byte [ebp - 4], 6
test esi, esi
je 0x448a2f
mov byte [ebp - 4], 0xf
mov eax, dword [esi]
push esi
call dword [eax + 8]
jmp 0x448a2f
push str.login2::login_view::browser_events::BeforeNavigate2
mov edx, 0x10
lea ecx, [ebp - 0x124]
call fcn.0040fef0
add esp, 4
mov byte [ebp - 4], 0xb
cmp byte [eax + 0x48], 0
je 0x44899b
push str.block_navigate___open_in_new_window
push eax
call fcn.00414f60
add esp, 8
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 6
call fcn.0040fdc0
mov eax, dword [ebp - 0x14]
or ecx, 0xffffffff
cmp dword [ebp - 0x1c], 8
push 1
push str.open
mov word [eax], cx
lea ecx, [ebp - 0x30]
cmovae ecx, dword [ebp - 0x30]
xor edx, edx
push 0
call fcn.0041d5a0
add esp, 0xc
test al, al
jne 0x448a2f
push str.login2::login_view::browser_events::BeforeNavigate2
mov edx, 0x10
lea ecx, [ebp - 0x124]
call fcn.0040fef0
add esp, 4
mov byte [ebp - 4], 0xc
cmp byte [eax + 0x48], 0
je 0x448a05
push 0x519b1c
push eax
call fcn.00414f60
add esp, 8
lea ecx, [ebp - 0x124]
call fcn.0040fdc0
cmp dword [ebp - 0x1c], 8
lea eax, [ebp - 0x30]
push 1
cmovae eax, dword [ebp - 0x30]
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x78]
call fcn.004033a0
lea ecx, [ebp - 0x48]
call fcn.004033a0
lea ecx, [ebp - 0x60]
call fcn.004033a0
lea ecx, [ebp - 0x30]
call fcn.004033a0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0049852a
mov esp, ebp
pop ebp
ret 0x1c