Function at 0x44cbb0
Capabilities:
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 7
add esp, 0xfffff004
push eax
dec eax
jne 0x44cbb9
mov eax, dword [ebp - 4]
add esp, 0xfffff73c
push ebx
push esi
push edi
mov esi, ecx
mov byte [ebp - 0x22a], dl
mov byte [ebp - 0x229], al
mov edi, 0x4bba40
mov eax, 0x4a9bac
call fcn.004992ac
test esi, esi
jne 0x44cc35
mov eax, 0x4c6f00
call fcn.0045e6c0
test eax, eax
jne 0x44cc35
push 0x30
mov eax, 0x65
call fcn.004129c8
push eax
mov eax, 0x14c
call fcn.004129c8
push eax
push dword [0x4c6eec]
call sub.USER32.DLL_MessageBoxA
mov edx, dword [ebp - 0x228]
mov dword fs:[0], edx
mov eax, edx
jmp 0x44d4e3
xor eax, eax
call fcn.0044a1d4
mov dword [0x4ca1f0], 0
mov dword [0x4ca1f4], 0
mov dword [0x4ca1e8], 0
mov dword [0x4ca1ec], 0
call fcn.00487a64
mov dword [ebp - 0x230], eax
mov word [ebp - 0x218], 8
lea eax, [ebp - 0x10c]
call fcn.00460f64
add dword [ebp - 0x20c], 6
mov word [ebp - 0x218], 0x14
mov word [ebp - 0x218], 0x20
lea eax, [ebp - 0x204]
call fcn.0040fdcc
add dword [ebp - 0x20c], 4
mov word [ebp - 0x218], 0x14
test esi, esi
sete dl
and edx, 1
mov byte [ebp - 0x231], dl
mov word [ebp - 0x218], 0x2c
cmp byte [ebp - 0x231], 0
je 0x44cd1f
lea esi, [ebp - 0x204]
mov eax, 0x4c6f00
xor ecx, ecx
xor edx, edx
call fcn.0045e59c
jmp 0x44cd00
lea ecx, [ebp - 0xa78]
lea edx, [ebp - 0xe78]
mov eax, esi
call fcn.0040ff58
lea edx, [ebp - 0xe78]
mov eax, 0x4c6f00
xor ecx, ecx
call fcn.0045e59c
test al, al
je 0x44cd1f
cmp dword [0x4c989c], 0
je 0x44cced
mov word [ebp - 0x218], 0x14
jmp 0x44cda3
call fcn.00487a64
mov dword [ebp - 0x238], eax
mov word [ebp - 0x218], 0x14
test esi, esi
je 0x44cdc5
cmp dword [ebp + 0x14], 0
je 0x44cdc5
xor ebx, ebx
jmp 0x44cdca
mov ebx, 1
push 1
push ebx
push 0
lea eax, [ebp - 0x239]
push 1
push eax
mov eax, esi
lea ecx, [ebp - 0x10c]
mov edx, 2
call fcn.004651b4
xor edx, edx
mov dl, al
cmp edx, 1
sbb ecx, ecx
neg ecx
mov ebx, ecx
test bl, bl
jne 0x44ce6c
cmp dword [ebp - 8], 0
jne 0x44ce6c
cmp dword [esi + 0x30], 1
jne 0x44ce6c
mov eax, esi
call fcn.00410134
lea ecx, [ebp - 0x244]
lea edx, [ebp - 0x240]
mov eax, esi
call fcn.004100c0
test al, al
je 0x44ce6c
mov edx, dword [ebp - 0x244]
mov eax, dword [ebp - 0x240]
call fcn.0040ac6c
call fcn.0040a9b0
test al, al
jne 0x44ce6c
lea edx, [ebp - 0x10c]
push edx
push 0
push 0
push 0
push 0
xor ecx, ecx
mov edx, dword [ebp - 0x244]
mov eax, dword [ebp - 0x240]
call fcn.004653a8
lea eax, [ebp - 0x10c]
call fcn.00461310
mov esi, dword [ebp - 8]
test bl, bl
jne 0x44ce85
test esi, esi
jne 0x44cf1e
cmp dword [ebp + 0x10], 0
jne 0x44cf1e
test bl, bl
jne 0x44ceb9
call fcn.00487a64
cmp eax, dword [ebp - 0x238]
jne 0x44ceb9
push 0x30
mov eax, 0x35f
call fcn.004129c8
push eax
mov eax, 0x35e
call fcn.004129c8
push eax
push dword [0x4c6eec]
call sub.USER32.DLL_MessageBoxA
mov eax, 0x4c7470
xor edx, edx
call fcn.0047d5e0
sub dword [ebp - 0x20c], 4
lea eax, [ebp - 0x204]
mov edx, 2
call fcn.0040fea4
dec dword [ebp - 0x20c]
dec dword [ebp - 0x20c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0043dac4
sub dword [ebp - 0x20c], 4
lea eax, [ebp - 0x10c]
mov edx, 2
call fcn.0040fea4
mov ecx, dword [ebp - 0x228]
mov dword fs:[0], ecx
jmp 0x44d4e3
mov al, byte [ebp - 0x22a]
mov byte [edi + 0x21ce], al
xor edx, edx
mov dword [edi + 0x2164], edx
xor ecx, ecx
mov dword [edi + 0x2190], ecx
mov dword [edi + 0x2690], 1
call fcn.0044c9a4
cmp byte [ebp - 0x22a], 0
mov byte [0x4ca2fc], 0
jne 0x44d09b
mov byte [ebp - 0x245], 0
cmp esi, 1
jne 0x44cfe3
lea ecx, [ebp - 0x1aa8]
lea eax, [ebp - 0x10c]
xor edx, edx
call fcn.0046126c
lea ebx, [ebp - 0x1aa8]
push 1
push 0
lea ecx, [ebp - 0x3308]
lea eax, [ebp - 0x10c]
xor edx, edx
call fcn.0046126c
lea eax, [ebp - 0x3308]
lea ecx, [ebp - 0x26d8]
add eax, 0x400
xor edx, edx
push eax
lea eax, [ebp - 0x10c]
call fcn.0046126c
lea edx, [ebp - 0x26d8]
mov eax, 0x4c7c4c
pop ecx
call fcn.004567bc
mov eax, 0x4c7c4c
call fcn.00457da8
test eax, eax
setne dl
and edx, 1
mov byte [ebp - 0x245], dl
jmp 0x44d001
lea ecx, [ebp - 0x3708]
push ecx
push 0x400
call sub.KERNEL32.DLL_GetCurrentDirectoryA
lea eax, [ebp - 0x3708]
call fcn.0040be48
mov ebx, eax
cmp byte [ebx], 0
jne 0x44d00b
mov ebx, 0x4a9af5
mov al, byte [ebp - 0x229]
push eax
mov eax, 0x4ca2fc
mov dl, byte [ebp - 0x245]
push edx
mov edx, 0x4a99b4
mov cl, byte [ebp + 0xc]
push ecx
mov ecx, ebx
call fcn.0044d4ec
cmp byte [ebp - 0x229], 0
je 0x44d09b
mov eax, esi
call fcn.0044b5a0
test al, al
jne 0x44d09b
sub dword [ebp - 0x20c], 4
lea eax, [ebp - 0x204]
mov edx, 2
call fcn.0040fea4
dec dword [ebp - 0x20c]
dec dword [ebp - 0x20c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0043dac4
sub dword [ebp - 0x20c], 4
lea eax, [ebp - 0x10c]
mov edx, 2
call fcn.0040fea4
mov ecx, dword [ebp - 0x228]
mov dword fs:[0], ecx
jmp 0x44d4e3
cmp dword [ebp + 0x10], 0
je 0x44d0b1
push 0x4ca2fc
push dword [ebp + 0x10]
call fcn.00498e7c
add esp, 8
test esi, esi
jne 0x44d10e
sub dword [ebp - 0x20c], 4
lea eax, [ebp - 0x204]
mov edx, 2
call fcn.0040fea4
dec dword [ebp - 0x20c]
dec dword [ebp - 0x20c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0043dac4
sub dword [ebp - 0x20c], 4
lea eax, [ebp - 0x10c]
mov edx, 2
call fcn.0040fea4
mov ecx, dword [ebp - 0x228]
mov dword fs:[0], ecx
jmp 0x44d4e3
mov dword [0x4ca1e4], esi
cmp dword [0x4c9890], 0
jne 0x44d127
mov dword [0x4c9890], 2
xor ebx, ebx
jmp 0x44d35e
mov eax, dword [edi + 0x4b0c]
call fcn.0040ff20
mov eax, dword [edi + 0x4b00]
call fcn.0040ff20
mov byte [ebp - 0x3b08], 0
cmp dword [ebp + 0x14], 0
je 0x44d164
lea edx, [ebp - 0x3b08]
mov ecx, 0x400
mov eax, dword [ebp + 0x14]
call fcn.0040ffe8
cmp byte [ebp - 0x3b08], 0
je 0x44d175
lea edx, [ebp - 0x3b08]
jmp 0x44d17a
mov edx, 0x4a99b5
mov eax, dword [edi + 0x4b00]
call fcn.0040ff50
lea ecx, [ebp - 0x4738]
lea eax, [ebp - 0x10c]
mov edx, ebx
call fcn.0046126c
lea eax, [ebp - 0x4738]
lea edx, [edi + 0x3f00]
call fcn.0040acd8
lea ecx, [ebp - 0x5368]
lea eax, [ebp - 0x10c]
mov edx, ebx
call fcn.0046126c
lea eax, [ebp - 0x5368]
lea edx, [edi + 0x4300]
add eax, 0x400
call fcn.0040ad28
mov byte [ebp - 0x5768], 0
cmp byte [0x4ca2fc], 0
je 0x44d24e
cmp dword [edi + 0x20c8], 5
je 0x44d24e
push 0x4ca2fc
lea ecx, [ebp - 0x5b68]
push ecx
call fcn.00498e7c
add esp, 8
lea eax, [ebp - 0x5768]
push eax
push 0x400
call sub.KERNEL32.DLL_GetCurrentDirectoryA
lea eax, [ebp - 0x5b68]
xor ecx, ecx
xor edx, edx
call fcn.0040a3dc
lea eax, [ebp - 0x5b68]
push eax
call fcn.0049a80c
pop ecx
inc eax
jne 0x44d24e
lea edx, [ebp - 0x5b68]
mov eax, 0x1f7
push edx
call fcn.004129c8
push eax
call fcn.00487828
add esp, 8
jmp 0x44d36f
cmp byte [edi + 0x21ce], 0
mov al, 0x54
jne 0x44d25c
add eax, 4
lea edx, [edi + 0x3f00]
call fcn.00475980
push 1
push 0
lea ecx, [edi + 0x4300]
lea edx, [edi + 0x3f00]
mov eax, 0x4c7c4c
call fcn.004567bc
mov ecx, dword [0x4c7e54]
mov dword [edi + 0x2ab0], ecx
mov byte [edi + 0x32c0], 1
cmp byte [edi + 0x21ce], 0
je 0x44d2c7
mov eax, 0x4c7c4c
call fcn.00453850
test al, 1
jne 0x44d2c7
mov eax, 0x3ac
call fcn.004129c8
push eax
lea edx, [edi + 0x3f00]
push edx
call fcn.0047dfcc
add esp, 8
jmp 0x44d2d9
mov eax, 0x4c7c4c
xor ecx, ecx
mov dl, byte [ebp - 0x239]
call fcn.00452bdc
mov byte [edi + 0x32c0], 0
cmp byte [ebp - 0x5768], 0
je 0x44d2f6
lea eax, [ebp - 0x5768]
push eax
call fcn.0049a80c
pop ecx
lea edx, [ebx + 1]
push edx
push dword [ebp - 8]
mov eax, 0x35d
call fcn.004129c8
push eax
lea edx, [ebp - 0x5c68]
push edx
call fcn.0049bdcc
add esp, 0x10
lea edx, [ebp - 0x5c68]
mov eax, 0x4c7470
call fcn.0047d5e0
lea ecx, [ebp - 0x6898]
lea eax, [ebp - 0x10c]
mov edx, ebx
call fcn.0046126c
lea ecx, [ebp - 0x6898]
mov eax, dword [ecx + 0xc00]
mov edx, dword [ecx + 0xc04]
add dword [0x4ca1e8], eax
adc dword [0x4ca1ec], edx
call fcn.004757c4
inc ebx
cmp esi, ebx
jle 0x44d36f
cmp dword [0x4c989c], 0
je 0x44d12e
cmp dword [0x4c9890], 2
jne 0x44d37f
xor eax, eax
mov dword [0x4c9890], eax
cmp byte [ebp + 8], 0
je 0x44d390
push dword [0x4c6ef8]
call sub.USER32.DLL_DestroyWindow
cmp byte [edi + 0x2696], 0
je 0x44d3b0
cmp dword [0x4c989c], 0
jne 0x44d3b0
cmp dword [0x4c98a0], 0
jne 0x44d3b0
call fcn.00464bf4
mov eax, 0x4c7470
xor edx, edx
call fcn.0047d5e0
mov byte [0x4c749c], 0
mov eax, 0x4c7470
call fcn.0047d6a8
cmp byte [ebp - 0x22a], 0
je 0x44d419
cmp dword [0x4c98a0], 0
jne 0x44d48f
call fcn.00487a64
cmp eax, dword [ebp - 0x230]
jne 0x44d48f
push 0x40
mov eax, 0x3a7
call fcn.004129c8
push eax
mov eax, 0x3a8
call fcn.004129c8
push eax
push dword [0x4c6eec]
call sub.USER32.DLL_MessageBoxA
jmp 0x44d48f
cmp byte [ebp - 0x231], 0
je 0x44d48f
cmp dword [0x4c98a0], 0
jne 0x44d44e
cmp byte [0x4ca701], 0
je 0x44d44e
push 1
push 0x4a99b4
push 0
push 0x4ca2fc
push 0x4a99ca
push 0
call sub.SHELL32.DLL_ShellExecuteA
mov byte [ebp - 0x6c98], 0
lea edx, [ebp - 0x78c8]
mov eax, 0x4c6f00
call fcn.0045e774
test al, al
je 0x44d47f
lea edx, [ebp - 0x78c8]
push edx
lea ecx, [ebp - 0x6c98]
push ecx
call fcn.00498e7c
add esp, 8
lea edx, [ebp - 0x6c98]
mov eax, 0x4c6f00
call fcn.0045905c
sub dword [ebp - 0x20c], 4
lea eax, [ebp - 0x204]
mov edx, 2
call fcn.0040fea4
dec dword [ebp - 0x20c]
dec dword [ebp - 0x20c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0043dac4
sub dword [ebp - 0x20c], 4
lea eax, [ebp - 0x10c]
mov edx, 2
call fcn.0040fea4
mov ecx, dword [ebp - 0x228]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10