Function at 0x44bea0
Capabilities:
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffffb60
push ebx
push esi
push edi
mov byte [ebp - 2], cl
mov ebx, edx
mov byte [ebp - 1], al
mov eax, 0x4c5b84
call fcn.004530d8
test bl, bl
je 0x44bed4
test al, 1
jne 0x44bed4
xor eax, eax
jmp 0x44c282
call fcn.00486b48
mov edi, eax
mov byte [0x4c8234], 0
xor eax, eax
call fcn.00449adc
lea edx, [ebp - 0xa0]
mov eax, 0x4c5b84
call fcn.0045759c
mov ecx, 0x4bdc78
mov edx, 0x4bd878
mov eax, 0x4c5b84
call fcn.00457568
mov edx, dword [ebp - 0x90]
mov dword [0x4bc428], edx
mov byte [0x4bbb46], bl
mov dword [0x4bc008], 1
xor ecx, ecx
mov dword [0x4bbadc], ecx
xor eax, eax
mov dword [0x4bbb08], eax
call fcn.0044c2a4
lea edx, [ebp - 0x4a0]
mov eax, 0x4c5b84
xor ecx, ecx
call fcn.00457568
lea edx, [ebp - 0x8a0]
mov eax, 0x4c5b84
xor ecx, ecx
call fcn.0045753c
mov dl, byte [ebp - 1]
lea ecx, [ebp - 0x4a0]
push edx
cmp dword [ebp - 0x2c], 0
setne al
and eax, 1
push eax
mov eax, 0x4c8234
mov dl, byte [ebp + 8]
push edx
mov edx, 0x4a7900
call fcn.0044cde4
cmp byte [ebp - 1], 0
je 0x44bfa4
mov eax, 1
call fcn.0044aedc
test al, al
jne 0x44bfa4
xor eax, eax
jmp 0x44c282
cmp byte [ebp - 0x8a0], 0
jne 0x44bfd7
mov eax, 0x4c4e38
call fcn.0045de4c
mov esi, eax
mov eax, 0x4c4e38
call fcn.0045de80
cmp esi, eax
jne 0x44bfd7
cmp dword [ebp - 0x2c], 0
je 0x44bfd3
cmp byte [ebp - 0xb], 0
je 0x44bfd7
mov byte [ebp - 2], 1
cmp byte [ebp - 2], 0
je 0x44bfee
mov edx, 0x4a7901
mov eax, dword [0x4be478]
call fcn.0040fbd8
jmp 0x44c065
mov eax, 0x4c4e38
xor ecx, ecx
mov edx, dword [0x4be478]
call fcn.0045df94
test al, al
jne 0x44c00b
xor eax, eax
jmp 0x44c282
mov edx, dword [0x4be478]
cmp dword [edx + 0x30], 0
jne 0x44c065
lea ecx, [ebp - 0x8a0]
push ecx
lea eax, [ebp - 0xca0]
push eax
call fcn.00497c60
add esp, 8
cmp byte [ebp - 0xca0], 0
je 0x44c041
lea eax, [ebp - 0xca0]
call fcn.0040c210
push 0x4a7901
lea edx, [ebp - 0xca0]
push edx
call fcn.00497b84
add esp, 8
lea edx, [ebp - 0xca0]
mov eax, dword [0x4be478]
call fcn.0040fbd8
cmp dword [ebp - 0x2c], 0
je 0x44c0e7
cmp byte [ebp - 0xb], 0
jne 0x44c0e7
mov eax, 0x4c4e38
call fcn.0045de4c
mov esi, eax
test esi, esi
je 0x44c098
cmp byte [ebp - 0x8a0], 0
jne 0x44c0e7
mov eax, 0x4c4e38
call fcn.0045de80
cmp esi, eax
jne 0x44c0e7
test esi, esi
jne 0x44c0a3
mov edx, 1
jmp 0x44c0c5
push 0x4bd878
push 0x44be01
push dword [0x4c4e24]
push 0x4a7903
push dword [0x4b2108]
call sub.USER32.DLL_DialogBoxParamA
mov edx, eax
sub edx, 0xffffffff
je 0x44c0d1
sub edx, 2
je 0x44c0d8
jmp 0x44c0e7
xor eax, eax
jmp 0x44c282
mov edx, 0x4a7901
mov eax, dword [0x4be478]
call fcn.0040fbd8
mov byte [ebp - 0x10a0], 0
test bl, bl
jne 0x44c150
cmp byte [0x4c8234], 0
je 0x44c150
cmp dword [0x4bba40], 5
je 0x44c150
lea ecx, [ebp - 0x10a0]
push ecx
push 0x400
call sub.KERNEL32.DLL_GetCurrentDirectoryA
mov eax, 0x4c8234
xor ecx, ecx
xor edx, edx
call fcn.0040a2a8
push 0x4c8234
call fcn.004995f4
pop ecx
inc eax
jne 0x44c150
push 0x4c8234
mov eax, 0x1f7
call fcn.004125b4
push eax
call fcn.00486908
add esp, 8
xor eax, eax
jmp 0x44c282
mov eax, 0x4c5b84
xor ecx, ecx
xor edx, edx
call fcn.0045246c
cmp byte [ebp - 0x10a0], 0
je 0x44c174
lea eax, [ebp - 0x10a0]
push eax
call fcn.004995f4
pop ecx
call fcn.00486b48
cmp edi, eax
jne 0x44c186
cmp dword [0x4c77d8], 0
je 0x44c18a
xor edx, edx
jmp 0x44c18f
mov edx, 1
mov byte [ebp - 3], dl
cmp byte [ebp - 3], 0
je 0x44c1f7
test bl, bl
je 0x44c1c1
push 0x40
mov eax, 0x3a7
call fcn.004125b4
push eax
mov eax, 0x3a8
call fcn.004125b4
push eax
push dword [0x4c4e24]
call sub.USER32.DLL_MessageBoxA
jmp 0x44c1f7
cmp dword [0x4bcc3c], 0
je 0x44c1f7
mov edx, 0x4bdc78
mov eax, 0x4bd878
call fcn.0040a710
test al, al
jne 0x44c1f7
mov eax, 0x4c4e38
call fcn.0045e180
test al, al
je 0x44c1f7
mov eax, 0x4c4e38
xor edx, edx
call fcn.00458834
mov byte [0x4c53d4], 0
mov eax, 0x4c53a8
call fcn.0047c8d4
test bl, bl
jne 0x44c27f
cmp dword [0x4c77d8], 0
jne 0x44c27f
cmp byte [0x4c8639], 0
je 0x44c27f
push 0x4c8234
call fcn.00497c90
pop ecx
cmp eax, 0x3fe
jae 0x44c27f
push 0x4c8234
lea edx, [ebp - 0x14a0]
push edx
call fcn.00497c60
add esp, 8
lea eax, [ebp - 0x14a0]
call fcn.0040c210
push 0x4a7914
lea edx, [ebp - 0x14a0]
push edx
call fcn.00497b84
add esp, 8
push 1
push 0x4a7900
push 0
lea ecx, [ebp - 0x14a0]
push ecx
push 0x4a7916
push 0
call sub.SHELL32.DLL_ShellExecuteA
mov al, byte [ebp - 3]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4