Function at 0x44c4c0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x78
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov byte [ebp - 0x18], 0
mov byte [ebp - 0xd], 0xb
mov byte [ebp - 0x24], 0
mov al, byte [edi + 0x23]
lea esi, [edi + 0x18]
mov byte [ebp - 0x19], 0xb
mov byte [ebp - 0xc], 0
mov byte [ebp - 1], 0xb
test al, al
jns 0x44c4f2
mov ecx, dword [esi]
jmp 0x44c4f4
mov ecx, esi
cmp byte [ecx], 0x22
je 0x44c573
lea eax, [ebp - 0x48]
mov ecx, esi
push eax
call fcn.0045d030
cmp byte [eax + 0xb], 0
jge 0x44c50c
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x24]
call fcn.00445e20
cmp byte [ebp - 0x25], 0
jge 0x44c52b
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x44c52b
push eax
call fcn.0044d750
add esp, 4
cmp byte [ebp - 0x31], 0
jge 0x44c541
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x44c541
push eax
call fcn.0044d750
add esp, 4
cmp byte [ebp - 0x3d], 0
jge 0x44c557
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x44c557
push eax
call fcn.0044d750
add esp, 4
cmp byte [esi + 0xb], 0
jge 0x44c55f
mov esi, dword [esi]
push esi
lea eax, [ebp - 0x18]
push 0x600d34
push eax
call fcn.0044b760
add esp, 0xc
jmp 0x44c5f0
test al, al
jns 0x44c57b
mov eax, dword [esi]
jmp 0x44c57d
mov eax, esi
push eax
lea ecx, [ebp - 0x18]
call fcn.00445e20
lea eax, [ebp - 0x48]
mov ecx, esi
push eax
call fcn.0045d030
cmp byte [eax + 0xb], 0
jge 0x44c599
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x24]
call fcn.00445e20
cmp byte [ebp - 0x25], 0
jge 0x44c5b8
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x44c5b8
push eax
call fcn.0044d750
add esp, 4
cmp byte [ebp - 0x31], 0
jge 0x44c5ce
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x44c5ce
push eax
call fcn.0044d750
add esp, 4
cmp byte [ebp - 0x3d], 0
jge 0x44c5e4
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x44c5e4
push eax
call fcn.0044d750
add esp, 4
push 0x22
push 1
lea ecx, [ebp - 0x24]
call fcn.00440ad0
cmp byte [edi + 0x47], 0
lea eax, [edi + 0x3c]
jge 0x44c5fb
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xc]
call fcn.00445e20
mov bl, byte [ebp + 0xc]
test bl, bl
jne 0x44c66d
mov al, byte [edi + 0x53]
test al, al
jns 0x44c617
mov ecx, dword [edi + 0x4c]
jmp 0x44c621
movzx eax, al
mov ecx, 0xb
sub ecx, eax
test ecx, ecx
je 0x44c66d
mov eax, 0x600d3c
nop word [eax + eax]
inc eax
cmp byte [eax], 0
jne 0x44c630
push eax
push 0x600d3c
lea ecx, [ebp - 0xc]
call fcn.00440bc0
mov al, byte [edi + 0x53]
test al, al
jns 0x44c655
mov ecx, dword [edi + 0x4c]
mov esi, dword [edi + 0x48]
add ecx, esi
jmp 0x44c663
movzx eax, al
lea ecx, [edi + 0x48]
sub ecx, eax
lea esi, [edi + 0x48]
add ecx, 0xb
push ecx
push esi
lea ecx, [ebp - 0xc]
call fcn.00440bc0
test byte [ebp - 1], 0x80
lea ecx, [ebp - 0xc]
lea eax, [ebp - 0x18]
mov dword [ebp - 0x44], 1
cmovne ecx, dword [ebp - 0xc]
test byte [ebp - 0xd], 0x80
push 2
cmovne eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x44]
push eax
push str.Running__s__s
push 3
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x34], 1
call fcn.0044dbd0
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00460c00
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.00460c00
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00460c00
add esp, 0x28
movzx eax, bl
test byte [ebp - 0x55], 0x80
lea esi, [ebp - 0x60]
lea edx, [ebp - 0x54]
cmovne esi, dword [ebp - 0x60]
lea ecx, [ebp - 0x6c]
test byte [ebp - 0x49], 0x80
cmovne edx, dword [ebp - 0x54]
test byte [ebp - 0x61], 0x80
cmovne ecx, dword [ebp - 0x6c]
xor eax, 1
lea eax, [eax*2 + 5]
push eax
push esi
push edx
push ecx
push 0x5ff7d4
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov esi, eax
cmp esi, 0x20
jle 0x44c764
mov byte [ebp - 0x30], 0
mov eax, str.run.success
mov byte [ebp - 0x25], 0xb
inc eax
cmp byte [eax], 0
jne 0x44c726
push eax
push str.run.success
lea ecx, [ebp - 0x30]
call fcn.004409b0
lea eax, [ebp - 0x30]
push eax
push edi
call fcn.0044b860
add esp, 8
test byte [ebp - 0x25], 0x80
je 0x44c75d
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x44c75d
push eax
call fcn.0044d750
add esp, 4
mov bl, 1
jmp 0x44c7e1
mov ecx, str.UNKNOWN
xor eax, eax
nop dword [eax + eax]
cmp dword [eax*8 + 0x68c250], esi
je 0x44c781
inc eax
cmp eax, 0xf
jb 0x44c770
jmp 0x44c788
mov ecx, dword [eax*8 + 0x68c254]
push ecx
push str.run.error._s
push dword [ebp + 0xc]
lea eax, [ebp - 0x78]
push eax
call fcn.0043f2f0
lea eax, [ebp - 0x78]
push eax
push edi
call fcn.0044b860
mov eax, esi
mov dword [ebp - 0x34], 2
cdq
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x34]
push 1
push eax
push str.Running_error__d
push 3
mov dword [ebp - 0x28], edx
call fcn.0044dbd0
add esp, 0x28
xor bl, bl
test byte [ebp - 0x6d], 0x80
je 0x44c7e1
mov eax, dword [ebp - 0x78]
test eax, eax
je 0x44c7e1
push eax
call fcn.0044d750
add esp, 4
test byte [ebp - 0x49], 0x80
je 0x44c7f7
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x44c7f7
push eax
call fcn.0044d750
add esp, 4
test byte [ebp - 0x55], 0x80
je 0x44c80d
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x44c80d
push eax
call fcn.0044d750
add esp, 4
test byte [ebp - 0x61], 0x80
je 0x44c823
mov eax, dword [ebp - 0x6c]
test eax, eax
je 0x44c823
push eax
call fcn.0044d750
add esp, 4
test byte [ebp - 1], 0x80
je 0x44c839
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x44c839
push eax
call fcn.0044d750
add esp, 4
test byte [ebp - 0x19], 0x80
je 0x44c84f
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x44c84f
push eax
call fcn.0044d750
add esp, 4
test byte [ebp - 0xd], 0x80
je 0x44c865
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x44c865
push eax
call fcn.0044d750
add esp, 4
pop edi
pop esi
mov al, bl
pop ebx
mov esp, ebp
pop ebp
ret