Function at 0x44c124
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff8
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
test ebx, ebx
je 0x44c595
cmp dword [0x4d3774], 0
je 0x44c159
mov dword [ebx + 0x41c], 0xffffffff
mov eax, dword [ebx]
push eax
call fcn.004b7934
push eax
call fcn.004a78e4
push ebx
call fcn.0044bf9c
xor esi, esi
xor edi, edi
mov eax, dword [ebx + 0x414]
test eax, eax
je 0x44c179
cmp eax, dword [ebx + 0x408]
ja 0x44c2aa
mov dword [ebx + 0x3fc], 9
cmp dword [0x4d2374], 0
je 0x44c1d9
mov eax, dword [ebx + 0x3f8]
test eax, eax
jl 0x44c19d
push eax
call fcn.004bfe44
pop ecx
mov dword [ebx + 0x3f8], 0xffffffff
mov dword [0x4ce3f0], ebx
xor edx, edx
mov dword [0x4d2630], edx
push 0
push 0x13
push 0x4ce51d
call fcn.0049a318
xor ecx, ecx
mov dword [0x4ce3f0], ecx
push ebx
call fcn.0044aa9c
test eax, eax
je 0x44c595
push 1
push 0x4e0c16
lea eax, [ebx + 0x230]
push eax
call fcn.00443fd4
cmp byte [0x4e0c16], 0
je 0x44c2aa
push 0x4e0c16
call fcn.004bceac
pop ecx
add eax, 4
push eax
call fcn.004c75a4
pop ecx
mov esi, eax
test esi, esi
je 0x44c2aa
push esi
mov edi, 0x4e0c16
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop esi
lea eax, [ebx + 0x230]
push eax
lea edx, [ebx + 0x130]
push edx
push 0x4ce527
push 0x4e0c16
call sub.USER32.dll_wsprintfA
add esp, 0x10
push 0x4e0c16
call fcn.004bceac
pop ecx
add eax, 4
push eax
call fcn.004c75a4
pop ecx
mov edi, eax
test edi, edi
je 0x44c2a1
push esi
push edi
mov esi, edi
mov edi, 0x4e0c16
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
jmp 0x44c2aa
push esi
call fcn.004c749c
pop ecx
xor esi, esi
cmp dword [0x4cc5e4], 0
je 0x44c4a3
call fcn.0044bf60
mov eax, dword [0x4cb064]
push eax
mov edx, dword [0x4d42ac]
push edx
call fcn.0048d678
mov eax, dword [ebx + 0x414]
test eax, eax
je 0x44c2e4
cmp eax, dword [ebx + 0x408]
ja 0x44c407
lea edx, [ebx + 4]
push edx
lea ecx, [ebx + 0x230]
push ecx
push 0
push 0xb6b
call fcn.0040a8fc
push eax
push 0x4e0c16
call sub.USER32.dll_wsprintfA
add esp, 0x10
mov dword [ebp - 4], 1
mov eax, dword [ebx + 0x428]
test eax, eax
jle 0x44c36c
mov edx, dword [ebx + 0x42c]
sub edx, eax
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 1
jae 0x44c332
mov dword [ebp - 4], 1
cmp dword [ebp - 4], 0
jbe 0x44c358
push 1
mov ecx, dword [ebp - 4]
push ecx
push 0x4ce52d
call fcn.0046865c
push eax
push 0x4e0c16
call fcn.004bcdd0
add esp, 8
jmp 0x44c386
push 0x4ce531
push 0x4e0c16
call fcn.004bcdd0
add esp, 8
jmp 0x44c386
push 0
push 0xb66
call fcn.0040a8fc
push eax
push 0x4e0c16
call fcn.004bcdd0
add esp, 8
push 0x4ce53b
push 0x4e0c16
call fcn.004bcdd0
add esp, 8
cmp dword [ebp - 4], 0
jbe 0x44c3d9
mov ecx, dword [ebx + 0x408]
sub ecx, dword [ebx + 0x418]
mov eax, ecx
xor edx, edx
div dword [ebp - 4]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
push eax
push 0x4ce53e
push 0x4e0c16
call fcn.004bceac
pop ecx
add eax, 0x4e0c16
push eax
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x44c3f3
push 0
push 0xb66
call fcn.0040a8fc
push eax
push 0x4e0c16
call fcn.004bcdd0
add esp, 8
push 0x4ce546
push 0x4e0c16
call fcn.004bcdd0
add esp, 8
jmp 0x44c462
push ebx
call fcn.0044b340
cmp dword [ebx + 0x3fc], 4
jne 0x44c43d
lea edx, [ebx + 4]
push edx
lea ecx, [ebx + 0x230]
push ecx
push 0
push 0xb68
call fcn.0040a8fc
push eax
push 0x4e0c16
call sub.USER32.dll_wsprintfA
add esp, 0x10
jmp 0x44c462
lea eax, [ebx + 4]
push eax
lea edx, [ebx + 0x230]
push edx
push 0
push 0xb69
call fcn.0040a8fc
push eax
push 0x4e0c16
call sub.USER32.dll_wsprintfA
add esp, 0x10
xor ecx, ecx
mov dword [0x4d22f4], ecx
mov eax, dword [0x4cb05c]
push eax
push 0x4e0c16
mov edx, dword [0x4d42ac]
push edx
call fcn.0048d7dc
mov ecx, dword [0x4cb064]
push ecx
mov eax, dword [0x4d42ac]
push eax
call fcn.0048d678
push 0
push 0
push 0x10
mov edx, dword [ebx]
push edx
call sub.USER32.dll_SendMessageA
jmp 0x44c501
mov eax, dword [ebx + 0x414]
test eax, eax
je 0x44c4b5
cmp eax, dword [ebx + 0x408]
ja 0x44c4cc
push 1
push ebx
push 0
push 0xb6a
call fcn.0040a8fc
push eax
call fcn.0044b3a0
jmp 0x44c501
cmp dword [ebx + 0x3fc], 4
jne 0x44c4ec
push 1
push ebx
push 0
push 0xb67
call fcn.0040a8fc
push eax
call fcn.0044b3a0
jmp 0x44c501
push 1
push ebx
push 0
push 0xb60
call fcn.0040a8fc
push eax
call fcn.0044b3a0
test esi, esi
je 0x44c595
cmp byte [esi], 0x2f
jne 0x44c520
push 1
push edi
push esi
mov edx, dword [0x4d42ac]
push edx
call fcn.00460104
jmp 0x44c583
push 0x8000
call sub.KERNEL32.dll_SetErrorMode
push 5
push 0x4e23ec
push edi
push esi
push 0x4ce549
mov ecx, dword [0x4d429c]
push ecx
call sub.SHELL32.dll_ShellExecuteA
cmp eax, 0x1f
jae 0x44c583
xor eax, eax
mov dword [0x4d22f4], eax
push esi
push 0
push 0xb6c
call fcn.0040a8fc
push eax
push 0x4e0c16
call sub.USER32.dll_wsprintfA
add esp, 0xc
mov edx, dword [0x4cb064]
push edx
push 0x4e0c16
mov ecx, dword [0x4d42ac]
push ecx
call fcn.0048e560
push esi
call fcn.004c749c
pop ecx
test edi, edi
je 0x44c595
push edi
call fcn.004c749c
pop ecx
pop edi
pop esi
pop ebx
pop ecx
pop ecx
pop ebp
ret 4