Function at 0x44e1a0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffff360
push ebx
push esi
push edi
mov byte [ebp - 2], cl
mov ebx, edx
mov byte [ebp - 1], al
mov eax, 0x4d0b94
call fcn.0045536c
test bl, bl
je 0x44e1d4
test al, 1
jne 0x44e1d4
xor eax, eax
jmp 0x44e5a0
call fcn.0048aa5c
mov edi, eax
mov byte [0x4d3248], 0
xor eax, eax
call fcn.0044b600
lea edx, [ebp - 0xa0]
mov eax, 0x4d0b94
call fcn.00458d98
mov ecx, 0x4c7c88
mov edx, 0x4c7888
mov eax, 0x4d0b94
call fcn.00458d64
mov edx, dword [ebp - 0x90]
mov dword [0x4c6438], edx
mov byte [0x4c5b56], bl
mov dword [0x4c6018], 1
xor ecx, ecx
mov dword [0x4c5aec], ecx
xor eax, eax
mov dword [0x4c5b18], eax
call fcn.0044e5c4
lea edx, [ebp - 0x4a0]
mov eax, 0x4d0b94
xor ecx, ecx
call fcn.00458d64
lea edx, [ebp - 0x8a0]
mov eax, 0x4d0b94
xor ecx, ecx
call fcn.00458d38
mov dl, byte [ebp - 1]
lea ecx, [ebp - 0x4a0]
push edx
cmp dword [ebp - 0x2c], 0
setne al
and eax, 1
push eax
mov eax, 0x4d3248
mov dl, byte [ebp + 8]
push edx
mov edx, 0x4b0d04
call fcn.0044f144
cmp byte [ebp - 1], 0
je 0x44e2a4
mov eax, 1
call fcn.0044ce08
test al, al
jne 0x44e2a4
xor eax, eax
jmp 0x44e5a0
cmp byte [ebp - 0x8a0], 0
jne 0x44e2d7
mov eax, 0x4cfe48
call fcn.004608e0
mov esi, eax
mov eax, 0x4cfe48
call fcn.00460918
cmp esi, eax
jne 0x44e2d7
cmp dword [ebp - 0x2c], 0
je 0x44e2d3
cmp byte [ebp - 0xb], 0
je 0x44e2d7
mov byte [ebp - 2], 1
cmp byte [ebp - 2], 0
je 0x44e2ee
mov edx, 0x4b0d05
mov eax, dword [0x4c8488]
call fcn.004107b8
jmp 0x44e365
mov eax, 0x4cfe48
xor ecx, ecx
mov edx, dword [0x4c8488]
call fcn.00460a34
test al, al
jne 0x44e30b
xor eax, eax
jmp 0x44e5a0
mov edx, dword [0x4c8488]
cmp dword [edx + 0x30], 0
jne 0x44e365
lea ecx, [ebp - 0x8a0]
push ecx
lea eax, [ebp - 0xca0]
push eax
call fcn.0049fdd4
add esp, 8
cmp byte [ebp - 0xca0], 0
je 0x44e341
lea eax, [ebp - 0xca0]
call fcn.0040ca00
push 0x4b0d05
lea edx, [ebp - 0xca0]
push edx
call fcn.0049fcf8
add esp, 8
lea edx, [ebp - 0xca0]
mov eax, dword [0x4c8488]
call fcn.004107b8
cmp dword [ebp - 0x2c], 0
je 0x44e3e7
cmp byte [ebp - 0xb], 0
jne 0x44e3e7
mov eax, 0x4cfe48
call fcn.004608e0
mov esi, eax
test esi, esi
je 0x44e398
cmp byte [ebp - 0x8a0], 0
jne 0x44e3e7
mov eax, 0x4cfe48
call fcn.00460918
cmp esi, eax
jne 0x44e3e7
test esi, esi
jne 0x44e3a3
mov edx, 1
jmp 0x44e3c5
push 0x4c7888
push 0x44e101
push dword [0x4cfe34]
push 0x4b0d07
push dword [0x4bb918]
call sub.USER32.DLL_DialogBoxParamA
mov edx, eax
sub edx, 0xffffffff
je 0x44e3d1
sub edx, 2
je 0x44e3d8
jmp 0x44e3e7
xor eax, eax
jmp 0x44e5a0
mov edx, 0x4b0d05
mov eax, dword [0x4c8488]
call fcn.004107b8
mov byte [ebp - 0x10a0], 0
mov word [ebp - 0x18a0], 0
test bl, bl
jne 0x44e45e
cmp byte [0x4d3248], 0
je 0x44e45e
cmp dword [0x4c5a50], 5
je 0x44e45e
lea edx, [ebp - 0x18a0]
lea eax, [ebp - 0x10a0]
mov ecx, 0x400
call fcn.00466f28
mov eax, 0x4d3248
xor ecx, ecx
xor edx, edx
call fcn.0040a4a0
push 0x4d3248
call fcn.004a186c
pop ecx
inc eax
jne 0x44e45e
push 0x4d3248
mov eax, 0x1f7
call fcn.00413388
push eax
call fcn.0048a820
add esp, 8
xor eax, eax
jmp 0x44e5a0
mov eax, 0x4d0b94
xor ecx, ecx
xor edx, edx
call fcn.00454664
cmp byte [ebp - 0x10a0], 0
jne 0x44e47f
cmp word [ebp - 0x18a0], 0
je 0x44e490
lea edx, [ebp - 0x18a0]
lea eax, [ebp - 0x10a0]
call fcn.00466ee0
call fcn.0048aa5c
cmp edi, eax
jne 0x44e4a2
cmp dword [0x4d27e8], 0
je 0x44e4a6
xor ecx, ecx
jmp 0x44e4ab
mov ecx, 1
mov byte [ebp - 3], cl
cmp byte [ebp - 3], 0
je 0x44e515
test bl, bl
je 0x44e4dd
push 0x40
mov eax, 0x3a7
call fcn.00413388
push eax
mov eax, 0x3a8
call fcn.00413388
push eax
push dword [0x4cfe34]
call sub.USER32.DLL_MessageBoxA
jmp 0x44e515
cmp dword [0x4c6c4c], 0
je 0x44e515
mov edx, 0x4c7c88
mov eax, 0x4c7888
call fcn.0040a918
test al, al
jne 0x44e515
mov eax, 0x4cfe48
call fcn.00460c2c
test al, al
je 0x44e515
mov eax, 0x4cfe48
xor ecx, ecx
xor edx, edx
call fcn.0045b204
mov byte [0x4d03e4], 0
mov eax, 0x4d03b8
call fcn.00480444
test bl, bl
jne 0x44e59d
cmp dword [0x4d27e8], 0
jne 0x44e59d
cmp byte [0x4d364d], 0
je 0x44e59d
push 0x4d3248
call fcn.0049fe04
pop ecx
cmp eax, 0x3fe
jae 0x44e59d
push 0x4d3248
lea edx, [ebp - 0x1ca0]
push edx
call fcn.0049fdd4
add esp, 8
lea eax, [ebp - 0x1ca0]
call fcn.0040ca00
push 0x4b0d18
lea edx, [ebp - 0x1ca0]
push edx
call fcn.0049fcf8
add esp, 8
push 1
push 0x4b0d04
push 0
lea ecx, [ebp - 0x1ca0]
push ecx
push 0x4b0d1a
push 0
call sub.SHELL32.DLL_ShellExecuteA
mov al, byte [ebp - 3]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4