Function at 0x443d75
Capabilities:
Create process on windows

Disassembly:
push ebp
push ebx
push edi
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push eax
call fcn.005423e0
mov edx, dword [esp + 0x2c]
lea ecx, [esp]
call fcn.004fa000
cmp byte [esp + 0x28], 0
je 0x4440ad
push 2
push 0xffffffff
push 0x100c
lea ebp, [0x72a860]
push dword [ebp + 0x5c]
call sub.USER32.dll_SendMessageW
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0xc]
and ebx, ebx
jl 0x4440a8
push dword [esp]
mov edx, 0x622e0a
mov ecx, dword [esp]
call fcn.004fa4a0
je 0x443eb1
mov ebx, dword [esp + 0x10]
mov ebp, dword [0x72b438]
imul ebx, ebx, 0x5c
add ebp, ebx
push dword [ebp + 8]
call fcn.00541260
fldz
fcompp
fnstsw ax
test ah, 0x40
jne 0x443e16
push 0xa5
call fcn.004b0428
and eax, eax
je 0x443e16
mov eax, 1
jmp 0x443e18
xor eax, eax
and eax, eax
je 0x443e65
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push 6
mov ebx, dword [esp + 0x1c]
mov ebp, dword [0x72b438]
imul ebx, ebx, 0x5c
add ebp, ebx
push dword [ebp + 8]
call fcn.00541260
fdiv qword [0x6425c8]
sub esp, 8
fstp qword [esp]
call fcn.00540110
lea eax, [esp + 0xc]
push eax
call fcn.00542280
jmp 0x443eac
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push 6
mov ebx, dword [esp + 0x1c]
mov ebp, dword [0x72b438]
imul ebx, ebx, 0x5c
add ebp, ebx
push dword [ebp + 4]
call fcn.00541260
fdiv qword [0x6425c8]
sub esp, 8
fstp qword [esp]
call fcn.00540110
lea eax, [esp + 0xc]
push eax
call fcn.00542280
jmp 0x4440a7
mov edx, 0x622cf4
mov ecx, dword [esp]
call fcn.004fa4a0
je 0x4440a7
movsx ebx, byte [esp + 0x34]
cmp ebx, 5
jne 0x443fd0
mov ebx, dword [esp + 0x10]
mov ebp, dword [0x72b438]
imul ebx, ebx, 0x5c
add ebp, ebx
push dword [ebp + 8]
call fcn.00541260
fldz
fcompp
fnstsw ax
test ah, 0x40
jne 0x443f09
push 0xa5
call fcn.004b0428
and eax, eax
je 0x443f09
mov eax, 1
jmp 0x443f0b
xor eax, eax
and eax, eax
je 0x443f6e
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push 1
push 2
mov ebx, dword [esp + 0x20]
mov ebp, dword [0x72b438]
imul ebx, ebx, 0x5c
add ebp, ebx
push dword [ebp + 8]
call fcn.00541260
fmul qword [0x642320]
sub esp, 8
fstp qword [esp]
call fcn.00520db0
fdiv qword [0x642320]
sub esp, 8
fstp qword [esp]
call fcn.00540110
lea eax, [esp + 0xc]
push eax
call fcn.00542280
jmp 0x443fcb
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push 1
push 2
mov ebx, dword [esp + 0x20]
mov ebp, dword [0x72b438]
imul ebx, ebx, 0x5c
add ebp, ebx
push dword [ebp + 4]
call fcn.00541260
fmul qword [0x642320]
sub esp, 8
fstp qword [esp]
call fcn.00520db0
fdiv qword [0x642320]
sub esp, 8
fstp qword [esp]
call fcn.00540110
lea eax, [esp + 0xc]
push eax
call fcn.00542280
jmp 0x4440a7
mov ebx, dword [esp + 0x10]
mov ebp, dword [0x72b438]
imul ebx, ebx, 0x5c
add ebp, ebx
push dword [ebp + 8]
call fcn.00541260
fldz
fcompp
fnstsw ax
test ah, 0x40
jne 0x444007
push 0xa5
call fcn.004b0428
and eax, eax
je 0x444007
mov eax, 1
jmp 0x444009
xor eax, eax
and eax, eax
je 0x44405b
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push 2
mov ebx, dword [esp + 0x1c]
mov ebp, dword [0x72b438]
imul ebx, ebx, 0x5c
add ebp, ebx
push dword [ebp + 8]
call fcn.00541260
sub esp, 8
fstp qword [esp]
call fcn.00520db0
sub esp, 8
fstp qword [esp]
call fcn.00540300
lea eax, [esp + 0xc]
push eax
call fcn.00542280
jmp 0x4440a7
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push 2
mov ebx, dword [esp + 0x1c]
mov ebp, dword [0x72b438]
imul ebx, ebx, 0x5c
add ebp, ebx
push dword [ebp + 4]
call fcn.00541260
sub esp, 8
fstp qword [esp]
call fcn.00520db0
sub esp, 8
fstp qword [esp]
call fcn.00540300
lea eax, [esp + 0xc]
push eax
call fcn.00542280
pop eax
jmp 0x4441f6
call fcn.0042fc1e
push edx
push eax
pop dword [esp + 0x14]
pop dword [esp + 0x14]
push dword [esp + 0x14]
push dword [esp + 0x14]
pop ebx
pop edi
cmp edi, 0
jg 0x4440d6
jl 0x4440d2
cmp ebx, 0
ja 0x4440d6
xor eax, eax
jmp 0x4440db
mov eax, 1
or eax, eax
je 0x4441e4
push dword [esp]
mov edx, 0x622e0a
mov ecx, dword [esp]
call fcn.004fa4a0
je 0x44412e
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push 6
fild qword [esp + 0x20]
fdiv qword [0x6427d0]
sub esp, 8
fstp qword [esp]
call fcn.00540110
lea eax, [esp + 0xc]
push eax
call fcn.00542280
jmp 0x4441e1
mov edx, 0x622cf4
mov ecx, dword [esp]
call fcn.004fa4a0
je 0x4441e1
movsx ebx, byte [esp + 0x34]
cmp ebx, 5
jne 0x44419d
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push 1
push 2
fild qword [esp + 0x24]
fmul qword [0x642320]
fdiv qword [0x6425c8]
sub esp, 8
fstp qword [esp]
call fcn.00520db0
fdiv qword [0x642320]
sub esp, 8
fstp qword [esp]
call fcn.00540110
lea eax, [esp + 0xc]
push eax
call fcn.00542280
jmp 0x4441e1
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push 3
push 2
fild qword [esp + 0x24]
fdiv qword [0x6425c8]
sub esp, 8
fstp qword [esp]
call fcn.00520db0
sub esp, 8
fstp qword [esp]
call fcn.00540110
lea eax, [esp + 0xc]
push eax
call fcn.00542280
pop eax
jmp 0x4441f6
xor eax, eax
push eax
lea ebp, [0x72ab78]
mov eax, dword [ebp + 0x74]
push eax
call fcn.004b4b60
push dword [esp + 4]
call fcn.00540320
fldz
fcompp
fnstsw ax
test ah, 0x40
jne 0x44431c
movsx ebx, byte [esp + 0x30]
push ebx
mov ebx, 1
cmp ebx, dword [esp]
jne 0x444255
push edx
call fcn.00542240
pop edx
push eax
mov edx, str.http:__qrg.globaltuners.com__q
push edx
call fcn.00542310
mov edx, dword [esp + 0xc]
push edx
call fcn.00542310
mov edx, str.n1t1
push edx
call fcn.00542310
lea eax, [esp + 0x10]
push eax
call fcn.00542280
jmp 0x4442f7
mov ebx, 2
cmp ebx, dword [esp]
jne 0x444293
push edx
call fcn.00542240
pop edx
push eax
mov edx, str.http:__www.short_wave.info__freq
push edx
call fcn.00542310
mov edx, dword [esp + 0xc]
push edx
call fcn.00542310
mov edx, str.timbusNOW
push edx
call fcn.00542310
lea eax, [esp + 0x10]
push eax
call fcn.00542280
jmp 0x4442f7
mov ebx, 3
cmp ebx, dword [esp]
jne 0x4442c6
push edx
call fcn.00542240
pop edx
push eax
mov edx, str.https:__www.mwlist.org_now.php_kHz
push edx
call fcn.00542310
mov edx, dword [esp + 0xc]
push edx
call fcn.00542310
lea eax, [esp + 0x10]
push eax
call fcn.00542280
jmp 0x4442f7
mov ebx, 5
cmp ebx, dword [esp]
jne 0x4442f7
push edx
call fcn.00542240
pop edx
push eax
mov edx, str.https:__www.mwlist.org_mwoffset.php_khz
push edx
call fcn.00542310
mov edx, dword [esp + 0xc]
push edx
call fcn.00542310
lea eax, [esp + 0x10]
push eax
call fcn.00542280
pop eax
push 5
push 0
push 0
mov eax, dword [esp + 0x14]
push eax
mov eax, 0x623e60
push eax
push 0
call sub.SHELL32.dll_ShellExecuteW
xor eax, eax
push dword [esp]
call fcn.00542440
push dword [esp + 4]
call fcn.00542440
push dword [esp + 8]
call fcn.00542440
add esp, 0x18
pop edi
pop ebx
pop ebp
ret 0xc