Function at 0x434670
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ad8f8
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0xac
mov eax, dword [0x63ee20]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x18]
mov dword [eax + 0x18], 0xd
push 0x612d66
lea ecx, [ebp - 0x38]
call fcn.00410ea0
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x18]
add eax, 0x270
push eax
lea ecx, [ebp - 0x38]
call fcn.0040c030
mov ecx, dword [ebp - 0x18]
add ecx, 0x270
call fcn.0040c0f0
push eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x270
call fcn.0040c0f0
sub eax, 1
push eax
lea eax, [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x270
call fcn.0040c130
mov byte [ebp - 4], 1
lea eax, [ebp - 0x54]
push eax
push 0x5d2fb8
call fcn.0040fbf0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x434739
push 0x5d2fb8
lea ecx, [ebp - 0x38]
call fcn.0040c050
mov eax, dword [ebp - 0x18]
add eax, 0x2c4
push eax
lea ecx, [ebp - 0x38]
call fcn.0040c030
push 0
lea ecx, [ebp - 0x38]
call fcn.00411110
push eax
call fcn.0058a890
add esp, 8
cmp eax, 0xffffffff
jne 0x4347dd
push 0
push 0x5d3878
push 0x5d3868
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x14]
push ecx
call fcn.00506d70
push 0x5d3838
mov ecx, dword [ebp - 0x18]
add ecx, 0x2c4
call fcn.00411110
push eax
push str.11600102
call fcn.005077a0
cmp dword [0x64529c], 0
je 0x4347bd
push 0x22
push 0x22
push 0x5d37fc
mov eax, dword [0x64529c]
push eax
mov ecx, dword [0x64529c]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x54]
call fcn.00411770
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38]
call fcn.00411770
jmp 0x434a7d
push 1
mov ecx, dword [ebp - 0x18]
add ecx, 0x270
call fcn.00411110
push eax
push 0
lea ecx, [ebp - 0x38]
call fcn.00411110
push eax
push str.open
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x14]
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov dword [eax + 0x18], ecx
cmp dword [ebp - 0x58], 0x20
jl 0x434861
cmp dword [0x64529c], 0
je 0x434842
push 0x22
push 0x22
push 0x5d37e0
mov eax, dword [0x64529c]
push eax
mov ecx, dword [0x64529c]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
mov eax, dword [ebp - 0x18]
mov dword [eax + 0x164], 1
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x14]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x434a62
push 0x5d37c0
lea ecx, [ebp - 0x74]
call fcn.00410ea0
mov byte [ebp - 4], 2
movzx eax, byte [ebp + 8]
test eax, eax
je 0x434889
push 0x5d37a8
lea ecx, [ebp - 0x74]
call fcn.0040c050
jmp 0x434896
push 0x5d3794
lea ecx, [ebp - 0x74]
call fcn.0040c050
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xb8], eax
mov ecx, dword [ebp - 0xb8]
sub ecx, 2
mov dword [ebp - 0xb8], ecx
cmp dword [ebp - 0xb8], 0x1e
ja case.0x4348c8.2
mov edx, dword [ebp - 0xb8]
movzx eax, byte [edx + 0x434ad0]
jmp dword [eax*4 + 0x434a9c]
push str.The_specified_file_was_not_found.
lea ecx, [ebp - 0x74]
call fcn.0040c050
jmp 0x43499c
push str.The_specified_path_was_not_found.
lea ecx, [ebp - 0x74]
call fcn.0040c050
jmp 0x43499c
push str.The_.exe_file_is_invalid__non_Win32_.exe_or_error_in_.exe_image_.
lea ecx, [ebp - 0x74]
call fcn.0040c050
jmp 0x43499c
push str.The_operating_system_denied_access_to_the_specified_file.
lea ecx, [ebp - 0x74]
call fcn.0040c050
jmp 0x43499c
push str.The_file_name_association_is_incomplete_or_invalid.
lea ecx, [ebp - 0x74]
call fcn.0040c050
jmp 0x43499c
push str.The_DDE_transaction_could_not_be_completed_because_other_DDE_transactions_were_being_processed.
lea ecx, [ebp - 0x74]
call fcn.0040c050
jmp 0x43499c
push str.The_DDE_transaction_failed.
lea ecx, [ebp - 0x74]
call fcn.0040c050
jmp 0x43499c
push str.The_DDE_transaction_could_not_be_completed_because_the_request_timed_out.
lea ecx, [ebp - 0x74]
call fcn.0040c050
jmp 0x43499c
push str.The_specified_DLL_was_not_found.
lea ecx, [ebp - 0x74]
call fcn.0040c050
jmp 0x43499c
push str.There_is_no_application_associated_with_the_given_file_name_extension._This_error_will_also_be_returned_if_you_attempt_to_print_a_file_that_is_not_printable.
lea ecx, [ebp - 0x74]
call fcn.0040c050
jmp 0x43499c
push str.There_was_not_enough_memory_to_complete_the_operation.
lea ecx, [ebp - 0x74]
call fcn.0040c050
jmp 0x43499c
push str.A_sharing_violation_occurred.
lea ecx, [ebp - 0x74]
call fcn.0040c050
jmp 0x43499c
push str.Unknown_open_failed
lea ecx, [ebp - 0x74]
call fcn.0040c050
push 0
push 0x5d3878
push 0x5d3484
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x14]
push ecx
call fcn.00506d70
cmp dword [0x64529c], 0
je 0x4349dd
push 0x22
push 0x22
lea ecx, [ebp - 0x74]
call fcn.00411110
push eax
mov eax, dword [0x64529c]
push eax
mov ecx, dword [0x64529c]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x74]
call fcn.00411110
mov dword [ebp - 0xb8], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x2c4
call fcn.00411110
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xb8]
push eax
mov ecx, dword [ebp - 0xbc]
push ecx
push str.11600101
call fcn.005077a0
jmp 0x434a4f
mov dword [ebp - 4], 2
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x74]
call fcn.00411770
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x54]
call fcn.00411770
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38]
call fcn.00411770
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0058844d
mov esp, ebp
pop ebp
ret 4