Function at 0x44eef9
Capabilities:
Accept command line arguments
Enumerate gui resources
Get common file path

Disassembly:
push 0xdc8
mov eax, 0x50ebc5
call fcn.004f41e2
mov edi, ecx
push 0x228
xor ebx, ebx
mov byte [ebp - 0xdc5], 1
lea eax, [ebp - 0xdc0]
mov esi, 0x22c
push ebx
push eax
mov dword [ebp - 0xdc4], esi
call fcn.004f5a90
add esp, 0xc
mov dword [ebp - 0xdd4], ebx
mov dword [ebp - 0xdd0], ebx
cmp dword [edi + 4], ebx
jne 0x44ef4b
xor eax, eax
jmp 0x44f27e
mov eax, dword [edi + 0x228]
test eax, eax
je 0x44ef9b
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x44ef75
cmp dword [edi + 4], 3
jne 0x44f223
mov dword [edi + 0x230], ebx
jmp 0x44f223
cmp dword [edi + 4], 3
push ebx
jne 0x44ef8e
push ebx
push ebx
push ebx
push str.Specified_window_not_found
call fcn.00420ad9
jmp 0x44f218
mov ecx, edi
mov dword [edi + 0x230], ebx
call fcn.0044fa1b
cmp dword [edi + 0x224], ebx
je 0x44efdc
mov esi, dword [edi + 0x224]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp esi, eax
je 0x44efce
lea eax, [ebp - 0xdc4]
push eax
push esi
call fcn.004e8345
pop ecx
pop ecx
test al, al
je 0x44efce
mov esi, dword [edi + 0x224]
jmp 0x44f022
push ebx
push ebx
push ebx
push ebx
push str.Invalid_parent_process_specified
jmp 0x44f210
push 0x228
lea eax, [ebp - 0xb94]
mov dword [ebp - 0xb98], esi
push ebx
push eax
call fcn.004f5a90
add esp, 0xc
lea eax, [ebp - 0xb98]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call fcn.004e8345
pop ecx
pop ecx
test al, al
je 0x44f207
mov esi, dword [ebp - 0xb80]
test esi, esi
je 0x44f207
lea eax, [ebp - 0xdd4]
mov dword [ebp - 0xdd4], esi
push eax
push 0x44eb8f
call dword [sym.imp.USER32.dll_EnumWindows]
mov eax, dword [ebp - 0xdd0]
test eax, eax
jne 0x44f076
push 1
push 0xffffffffffffffff
push ebx
push 0x114
push str.Cant_find_appropriate_parent_window__n_nContinue_in_normal_mode_
call fcn.00421ef1
add esp, 0x14
mov ecx, edi
cmp eax, 6
je 0x44f06e
push 0xffffffffffffffff
call fcn.0044fa1b
jmp 0x44f278
mov dword [edi + 4], ebx
jmp 0x44f21d
push eax
mov ecx, edi
mov dword [edi + 0x22c], eax
mov dword [edi + 0x224], esi
call fcn.0044ee74
mov ebx, eax
test ebx, ebx
je 0x44f168
mov ecx, dword [0x5a23f0]
and dword [ecx + 0x11a6c], 0
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea ecx, [ebp - 0x96c]
mov esi, eax
call fcn.004e25a1
and dword [ebp - 4], 0
mov dword [ebp - 0xdcc], esi
xor esi, esi
jmp 0x44f104
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push 0x52f7bc
push 0x52f7d0
lea ecx, [ebp - 0x96c]
call fcn.004e29eb
test al, al
jne 0x44f15e
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push 0x52b6a4
push 0x52b6b0
lea ecx, [ebp - 0x96c]
call fcn.004e29eb
test al, al
jne 0x44f11f
push esi
lea eax, [ebp - 0x96c]
push eax
lea eax, [ebp - 0xdcc]
push eax
call fcn.004e55bb
add esp, 0xc
test eax, eax
je 0x44f0c2
mov eax, dword [ebp - 0xdcc]
test eax, eax
je 0x44f12e
cmp word [eax], si
jne 0x44f130
mov eax, esi
mov ecx, dword [0x5a22a0]
push eax
push ebx
call fcn.0041a3e6
push 0xffffffffffffffff
mov ecx, edi
call fcn.0044fa1b
mov esi, dword [edi + 0x228]
lea ecx, [ebp - 0x96c]
call fcn.004e25e0
mov eax, esi
jmp 0x44f27e
mov eax, esi
mov dword [ebp - 0xdcc], eax
jmp 0x44f125
push dword [ebp - 0xdd0]
mov ecx, edi
call fcn.0044f284
xor ebx, ebx
mov eax, dword [edi + 0x228]
test eax, eax
je 0x44f19c
cmp eax, 0xffffffff
je 0x44f19c
cmp dword [edi + 0x230], ebx
jne 0x44f223
cmp dword [edi + 4], 2
jne 0x44f223
push 0x100
lea eax, [ebp - 0x110]
push ebx
push eax
call fcn.004f5a90
add esp, 0xc
cmp byte [ebp - 0xdc5], bl
je 0x44f1d1
lea eax, [ebp - 0x110]
mov byte [ebp - 0xdc5], bl
push eax
mov ecx, edi
call fcn.0044faed
test al, al
jne 0x44f177
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x910]
push str._sCant_find_appropriate_shell_window__nUnrecognized_layout_of_the_Explorer._n_nContinue_in_normal_mode_
push eax
call fcn.00403c16
push 1
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x910]
push 0x114
push eax
call fcn.00421ef1
add esp, 0x20
jmp 0x44f05b
push ebx
push ebx
push ebx
push ebx
push str.GetProcessInfo_GetCurrentProcessId____failed
call fcn.00420ad9
mov dword [edi + 4], ebx
add esp, 0x14
mov ecx, edi
push ebx
call fcn.0044fa1b
mov ecx, dword [edi + 0x228]
test ecx, ecx
je 0x44f275
cmp ecx, 0xffffffff
je 0x44f275
lea eax, [edi + 0x224]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
lea esi, [edi + 0x262]
push esi
push 0x105
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 3
jle 0x44f278
cmp word [edi + eax*2 + 0x260], 0x5c
jne 0x44f278
xor ecx, ecx
mov word [edi + eax*2 + 0x260], cx
jmp 0x44f278
mov dword [edi + 4], ebx
mov eax, dword [edi + 0x228]
call fcn.004f418c
ret