Function at 0x44a510
Capabilities:
Accept command line arguments
Check mutex on windows
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x620e6c
mov eax, dword fs:[0]
push eax
sub esp, 0x8ac
mov eax, dword [0x6c6060]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
push 0
mov dword [ebp - 0x8a0], eax
call dword [sym.imp.ole32.dll_CoInitialize]
push str.ZDataRecovery_InsClass
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x44a598
push 0x6b372c
push str.ZDataRecovery_InsClass
call dword [sym.imp.USER32.dll_FindWindowW]
mov esi, eax
test esi, esi
je 0x44a591
push 1
push esi
call dword [sym.imp.USER32.dll_ShowWindow]
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
xor eax, eax
jmp 0x44a8b9
push 3
call fcn.0045c1f0
add esp, 4
push 0
call fcn.0044b170
mov ecx, eax
call fcn.0044d1e0
mov dword [ebp - 0x14], 0
mov byte [ebp - 0x895], 0
mov byte [ebp - 0x896], 1
call fcn.0044b170
lea eax, [ebp - 0x2c]
push eax
call fcn.0044b9a0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov ecx, eax
mov dword [ebp - 0x89c], ecx
test ecx, ecx
jne 0x44a5ff
or esi, 0xffffffff
jmp 0x44a887
xor edi, edi
cmp dword [ebp - 0x14], edi
jle 0x44a795
nop word [eax + eax]
mov esi, dword [ecx + edi*4]
mov ebx, dword [ecx + edi*4 + 4]
push esi
push 0x6b374c
call fcn.005fffb2
add esp, 8
test eax, eax
jne 0x44a633
mov al, 1
mov byte [ebp - 0x895], al
jmp 0x44a694
push esi
push 0x6b3754
call fcn.005fffb2
add esp, 8
test eax, eax
jne 0x44a655
mov al, byte [ebp - 0x895]
xor bl, bl
mov byte [ebp - 0x896], bl
jmp 0x44a69a
push esi
push 0x6b375c
call fcn.005fffb2
add esp, 8
test eax, eax
jne 0x44a68e
cmp word [ebx], ax
jne 0x44a670
xor ecx, ecx
jmp 0x44a684
mov ecx, ebx
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44a675
sub ecx, edx
sar ecx, 1
push ecx
push ebx
lea ecx, [ebp - 0x2c]
call fcn.00447840
mov al, byte [ebp - 0x895]
mov bl, byte [ebp - 0x896]
mov ecx, dword [ebp - 0x89c]
inc edi
cmp edi, dword [ebp - 0x14]
jl 0x44a610
test al, al
je 0x44a795
cmp dword [ebp - 0x1c], 0
jne 0x44a74b
call fcn.0044b170
lea eax, [ebp - 0x8b8]
push eax
call fcn.0044b9a0
mov esi, eax
mov byte [ebp - 4], 1
lea eax, [ebp - 0x2c]
cmp eax, esi
je 0x44a70c
mov eax, dword [ebp - 0x18]
cmp eax, 8
jb 0x44a6ef
inc eax
lea ecx, [ebp - 0x2c]
push eax
push dword [ebp - 0x2c]
call fcn.00447940
xor eax, eax
mov dword [ebp - 0x18], 7
push esi
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x2c], ax
call fcn.0044ab00
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x8a4]
cmp eax, 8
jb 0x44a72e
inc eax
lea ecx, [ebp - 0x8b8]
push eax
push dword [ebp - 0x8b8]
call fcn.00447940
xor eax, eax
mov dword [ebp - 0x8a4], 7
mov dword [ebp - 0x8a8], 0
mov word [ebp - 0x8b8], ax
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
push eax
call fcn.0044b170
mov ecx, eax
call fcn.0044c020
test bl, bl
je 0x44a877
push ecx
call fcn.0044b170
mov ecx, eax
call fcn.0044c2d0
push 1
push 0
push 0
push str.http:__open.55.la_index.php_classSystemtypeGototokenKY0SQ3FX996PU1ZOsoft_type16keyhelp
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x44a877
mov ecx, dword [ebp - 0x8a0]
call fcn.0044a8e0
push 0x868
lea eax, [ebp - 0x894]
push 0
push eax
call fcn.005fd040
add esp, 0xc
lea ecx, [ebp - 0x894]
call fcn.0044f4b0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x894]
push 0
push connect
push connect
push connect
push connect
push 0x100
push 0x10080000
push 0x6b372c
push 0
call fcn.0059da90
lea ecx, [ebp - 0x894]
call fcn.0059d910
lea ecx, [ebp - 0x894]
call fcn.0059df50
mov byte [ebp - 4], 0
mov dword [ebp - method.CMainWnd.2.virtual_0], vtable.CMainWnd.2.0
mov dword [ebp - method.CXMLWnd.virtual_0], vtable.CMainWnd.5.0
mov dword [ebp - method.CMainWnd.1.virtual_0], vtable.CMainWnd.1.0
mov dword [ebp - method.DuiLib::WindowImplBase.1.virtual_0], vtable.CMainWnd.3.0
mov dword [ebp - method.CMainWnd.virtual_0], vtable.CMainWnd.0
mov dword [ebp - method.DuiLib::CActiveXFrameWnd.virtual_16], vtable.CMainWnd.4.0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x50]
call fcn.00450cc0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xd8]
call fcn.0059e480
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x894]
call fcn.0044efe0
call fcn.0045c1b0
call dword [sym.imp.ole32.dll_CoUninitialize]
mov esi, 1
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x18]
cmp eax, 8
jb 0x44a8a3
inc eax
lea ecx, [ebp - 0x2c]
push eax
push dword [ebp - 0x2c]
call fcn.00447940
xor eax, eax
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
mov eax, esi
mov dword [ebp - 0x1c], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0045acaa
mov esp, ebp
pop ebp
ret 0x10