Function at 0x433398
Capabilities:
Check if file exists
Create process on windows
Delete registry value
Get common file path
Get file attributes
Persist via command processor registry key
Set registry value

Disassembly:
push 0x500
mov eax, 0x50e25f
call fcn.004f41e2
mov eax, ecx
mov dword [ebp - 0x4a8], eax
mov ecx, dword [ebp + 8]
lea esi, [eax + 0x35c]
mov ebx, dword [ebp + 0xc]
xor edx, edx
test ecx, ecx
mov dword [ebp - 0x4ac], ebx
mov eax, 0x514870
mov byte [ebp - 0x4ae], dl
cmovne eax, ecx
mov ecx, esi
push 0xffffffffffffffff
push eax
mov dword [ebx], 0x64
call fcn.004e2ad6
mov ecx, esi
call fcn.0044612f
mov ecx, esi
mov dword [ebp - 0x4b8], eax
call fcn.0044612f
push eax
call fcn.004e5a9d
pop ecx
lea ecx, [ebp - 0x3e8]
mov dword [ebp - 0x4a4], eax
call fcn.004e25a1
xor esi, esi
lea ecx, [ebp - 0x444]
mov dword [ebp - 4], esi
call fcn.004e25a1
xor eax, eax
lea ecx, [ebp - 0x38c]
inc eax
mov byte [ebp - 4], al
call fcn.004e25a1
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 2
call fcn.004e25a1
mov eax, dword [0x5a22a0]
add eax, 0xa90
mov byte [ebp - 4], 3
push 0xffffffffffffffff
push eax
call fcn.004e5a5b
pop ecx
push eax
lea ecx, [ebp - 0x38c]
call fcn.004e2ad6
push 0xffffffffffffffff
lea ecx, [ebp - 0x38c]
call fcn.0044612f
push eax
lea ecx, [ebp - 0x4a0]
call fcn.004e2ad6
push dword [ebp - 0x4a0]
call fcn.004e5a3d
pop ecx
test eax, eax
je 0x433490
xor ecx, ecx
mov word [eax], cx
push esi
lea eax, [ebp - 0x3e8]
push eax
lea eax, [ebp - 0x4b8]
push eax
call fcn.004e55bb
add esp, 0xc
test eax, eax
je 0x4334b2
mov dword [ebx], esi
jmp 0x433dd3
lea ecx, [ebp - 0x3e8]
call fcn.0044612f
push eax
call fcn.004e5a5b
pop ecx
lea ecx, [ebp - 0x38c]
mov esi, eax
call fcn.0044612f
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push eax
push esi
call edi
test eax, eax
je 0x4334fa
lea ecx, [ebp - 0x4a0]
call fcn.0044612f
push eax
push esi
call edi
test eax, eax
je 0x4334fa
mov eax, dword [ebp - 0x4a4]
jmp 0x43350c
push dword [ebp - 0x4b8]
call fcn.004e5a9d
pop ecx
mov dword [ebp - 0x4a4], eax
push 0x2d
pop esi
push 0x2f
xor ebx, ebx
pop edi
test eax, eax
je 0x433579
cmp word [eax], bx
je 0x433579
mov dword [ebp - 0x4b8], eax
lea eax, [ebp - 0x3e8]
push ebx
push eax
lea eax, [ebp - 0x4b8]
push eax
call fcn.004e55bb
add esp, 0xc
test eax, eax
jne 0x433579
mov eax, dword [ebp - 0x3e8]
movzx eax, word [eax]
cmp ax, di
je 0x433579
cmp ax, si
mov esi, dword [ebp - 0x4a8]
je 0x43357f
push 0xffffffffffffffff
push dword [ebp - 0x4a4]
lea ecx, [esi + 0x470]
call fcn.004e2ad6
or dword [esi + 0x4d0], 0xffffffff
mov dword [ebp - 0x4a4], ebx
jmp 0x43357f
mov esi, dword [ebp - 0x4a8]
lea ecx, [ebp - 0x3e8]
call fcn.004e2830
lea ecx, [ebp - 0x444]
call fcn.004e2830
mov edi, dword [ebp - 0x4a4]
test edi, edi
je 0x433dc8
cmp word [edi], bx
je 0x433dc8
push 0xffffffffffffffff
lea ecx, [esi + 0x3b8]
push edi
call fcn.004e2ad6
jmp 0x433da3
lea ecx, [ebp - 0x3e8]
call fcn.004e2942
test al, al
je 0x435188
inc dword [esi + 0x4d0]
lea ecx, [ebp - 0x3e8]
push str._autosetup
call fcn.004e2996
xor ebx, ebx
push ebx
test al, al
jne 0x434f97
push ebx
push ebx
push ebx
push ebx
push str._demote
push str._interactive:
push str._system:
push 0x52ef08
push str._bypass
lea ecx, [ebp - 0x3e8]
call fcn.004e29eb
test al, al
jne 0x434b1d
push str._multi
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
lea ecx, [ebp - 0x3e8]
test al, al
je 0x433660
push ebx
call fcn.0044612f
mov ecx, dword [0x5a22a0]
push eax
call fcn.0040b1ed
mov ecx, dword [0x5a22a0]
lea ecx, [ecx + 0x9e8]
jmp 0x4348dd
push str._NoMulti
call fcn.004e2996
lea ecx, [ebp - 0x3e8]
test al, al
je 0x433698
push ebx
call fcn.0044612f
mov ecx, dword [0x5a22a0]
push eax
call fcn.0040b1ed
mov ecx, dword [0x5a22a0]
push ebx
lea ecx, [ecx + 0x9e8]
jmp 0x4348e1
push str._visible
call fcn.004e2996
test al, al
je 0x4336b7
mov ecx, dword [0x5a22a0]
lea ecx, [ecx + 0x9f4]
jmp 0x4348dd
push ebx
push ebx
push ebx
push ebx
push ebx
push str._ct2
push str._ct1
push str._ct0
push str._cleartype
push 0x52f120
lea ecx, [ebp - 0x3e8]
call fcn.004e29eb
lea ecx, [ebp - 0x3e8]
test al, al
je 0x43371c
call fcn.0044612f
push 0x30
pop ecx
movzx eax, word [eax + 6]
sub eax, ecx
mov ecx, dword [0x5a22a0]
je 0x43370d
sub eax, 1
je 0x433709
push 6
jmp 0x43370f
push 4
jmp 0x43370f
push 3
add ecx, 0x8a0
pop eax
push eax
jmp 0x4346ec
push str._lng
call fcn.004e2996
test al, al
je 0x433791
push ebx
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x4a4]
push eax
call fcn.004e55bb
add esp, 0xc
test eax, eax
jne 0x434fb6
mov eax, dword [0x5a22a0]
cmp byte [eax + 0x890], bl
jne 0x433d8d
lea ecx, [ebp - 0x444]
call fcn.0044612f
mov ecx, dword [0x5a22a0]
mov edx, eax
push 4
push edx
lea ecx, [ecx + 0x888]
call fcn.0043554f
lea ecx, [ebp - 0x444]
call fcn.0044612f
push eax
push str._lng
jmp 0x43387f
push str._lngfile
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x433809
push ebx
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x4a4]
push eax
call fcn.004e55bb
add esp, 0xc
test eax, eax
jne 0x434fb6
mov eax, dword [0x5a22a0]
cmp byte [eax + 0x89c], bl
jne 0x433d8d
lea ecx, [ebp - 0x444]
call fcn.0044612f
mov ecx, dword [0x5a22a0]
mov edx, eax
push 4
push edx
lea ecx, [ecx + 0x894]
call fcn.0043554f
lea ecx, [ebp - 0x444]
call fcn.0044612f
push eax
push str._lngfile
jmp 0x43387f
push str._font
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x43388f
push ebx
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x4a4]
push eax
call fcn.004e55bb
add esp, 0xc
test eax, eax
jne 0x434fb6
mov eax, dword [0x5a22a0]
cmp byte [eax + 0x8b4], bl
jne 0x433d8d
lea ecx, [ebp - 0x444]
call fcn.0044612f
mov ecx, dword [0x5a22a0]
mov edx, eax
push 4
push edx
lea ecx, [ecx + 0x8ac]
call fcn.0043554f
lea ecx, [ebp - 0x444]
call fcn.0044612f
push eax
push str._font
mov ecx, dword [0x5a22a0]
call fcn.0040b1ed
jmp 0x433d8d
push str._size
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x4338f1
push ebx
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x4a4]
push eax
call fcn.004e55bb
add esp, 0xc
test eax, eax
jne 0x434fb6
mov eax, dword [0x5a22a0]
cmp byte [eax + 0x8cc], bl
jne 0x433d8d
push 0xa
lea ecx, [ebp - 0x444]
call fcn.0044612f
mov ecx, dword [0x5a22a0]
lea ecx, [ecx + 0x8c4]
jmp 0x4342d9
push str._FontFile
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x43398c
mov dword [ebp - 0x4ec], ebx
mov dword [ebp - 0x4e8], 4
mov byte [ebp - 0x4e4], bl
push ebx
push 0x104
lea eax, [ebp - 0x4ec]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x4a4]
mov ecx, esi
push eax
call fcn.00432ec7
test al, al
je 0x434a50
lea ecx, [ebp - 0x4ec]
call fcn.00433371
mov ecx, dword [0x5a22a0]
push eax
push str._FontFile
call fcn.0040b1ed
xor eax, eax
lea ecx, [ebp - 0x4ec]
inc eax
push eax
call fcn.00433371
mov ecx, dword [0x5a2298]
push eax
call fcn.0044523a
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x4ec]
jmp 0x434981
push str._FontDir
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x433a1f
mov dword [ebp - 0x4f8], ebx
mov dword [ebp - 0x4f4], 4
mov byte [ebp - 0x4f0], bl
push ebx
push 0x104
lea eax, [ebp - 0x4f8]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x4a4]
mov ecx, esi
push eax
call fcn.00432ec7
test al, al
je 0x434a64
lea ecx, [ebp - 0x4f8]
call fcn.00433371
mov ecx, dword [0x5a22a0]
push eax
push str._FontDir
call fcn.0040b1ed
lea ecx, [ebp - 0x4f8]
call fcn.00433371
mov ecx, dword [0x5a2298]
push eax
call fcn.00445aaa
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x4f8]
jmp 0x434981
push 0x52f188
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x433a49
mov ecx, dword [0x5a22a0]
push 0x521
lea ecx, [ecx + 0x8f4]
jmp 0x4346ec
push str._max
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x433a73
mov ecx, dword [0x5a22a0]
push 0x520
lea ecx, [ecx + 0x8f4]
jmp 0x4346ec
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push str._StartTSA
push str._MinTSA
push str._min
lea ecx, [ebp - 0x3e8]
call fcn.004e29eb
lea ecx, [ebp - 0x3e8]
test al, al
je 0x433aea
mov eax, dword [0x5a22a0]
xor ebx, ebx
inc ebx
push str._min
mov byte [eax + 0x3e8c], bl
call fcn.004e2996
test al, al
jne 0x433d8d
mov eax, dword [0x5a22a0]
lea ecx, [ebp - 0x3e8]
push str._MinTSA
mov byte [eax + 0x3e8d], bl
call fcn.004e2996
mov ecx, dword [0x5a22a0]
mov byte [ecx + 0x3e8e], al
jmp 0x433d8d
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push str._tray
push str._tsa
call fcn.004e29eb
test al, al
je 0x433b18
mov eax, dword [0x5a22a0]
xor ecx, ecx
inc ecx
mov byte [eax + 0x3e8f], cl
jmp 0x433d8d
push str._detached
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x433b46
mov eax, dword [0x5a22a0]
lea ecx, [esi + 0x664]
mov dword [eax + 0x708], 2
jmp 0x4348dd
push str._NoAutoClose
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x433b65
lea ecx, [esi + 0x670]
jmp 0x4348dd
push str._here
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x433b98
mov eax, dword [0x5a22a0]
xor ecx, ecx
inc ecx
push ebx
mov byte [eax + 0x70c], cl
mov ecx, dword [0x5a22a0]
call fcn.0041bf18
jmp 0x433d8d
push str._update
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x433bbd
mov ecx, dword [0x5a22a0]
lea ecx, [ecx + 0x930]
jmp 0x4348dd
push str._NoUpdate
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x433be2
mov ecx, dword [0x5a22a0]
lea ecx, [ecx + 0x924]
jmp 0x4348dd
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push str._NoKeybHooks
push str._NoKeybHook
push str._NoKeyHooks
push str._NoKeyHook
lea ecx, [ebp - 0x3e8]
call fcn.004e29eb
test al, al
je 0x433c1e
mov eax, dword [0x5a22a0]
xor ecx, ecx
inc ecx
mov byte [eax + 0x3e90], cl
jmp 0x433d8d
push str._NoCloseConfirm
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x433c45
mov eax, dword [0x5a22a0]
xor ecx, ecx
inc ecx
mov byte [eax + 0x3e95], cl
jmp 0x433d8d
push str._NoMacro
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x433c6c
mov eax, dword [0x5a22a0]
xor ecx, ecx
inc ecx
mov byte [eax + 0x3e91], cl
jmp 0x433d8d
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push str._NoHotkeys
push str._NoHotkey
lea ecx, [ebp - 0x3e8]
call fcn.004e29eb
test al, al
je 0x433ca0
mov eax, dword [0x5a22a0]
xor ecx, ecx
inc ecx
mov byte [eax + 0x3e92], cl
jmp 0x433d8d
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push str._NoDefTerm
push str._NoDefTrm
lea ecx, [ebp - 0x3e8]
call fcn.004e29eb
test al, al
je 0x433cd4
mov eax, dword [0x5a22a0]
xor ecx, ecx
inc ecx
mov byte [eax + 0x3e93], cl
jmp 0x433d8d
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push str._NoRegFonts
push str._NoRegFont
lea ecx, [ebp - 0x3e8]
call fcn.004e29eb
test al, al
je 0x433d08
mov eax, dword [0x5a22a0]
xor ecx, ecx
inc ecx
mov byte [eax + 0x3e94], cl
jmp 0x433d8d
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x52f364
push str._inside
lea ecx, [ebp - 0x3e8]
call fcn.004e29eb
test al, al
je 0x433e16
mov eax, dword [0x5a22a0]
xor ecx, ecx
inc ecx
mov byte [ebp - 0x4e0], bl
push ebx
mov esi, ebx
mov byte [eax + 0x70c], cl
mov ecx, dword [0x5a22a0]
call fcn.0041bf18
push 0x52f364
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x433d75
mov esi, dword [ebp - 0x3e8]
xor eax, eax
inc eax
add esi, 0x10
mov byte [ebp - 0x4e0], al
push ebx
push ebx
push esi
push dword [ebp - 0x4e0]
push ebx
call fcn.0044edbc
add esp, 0x14
mov esi, dword [ebp - 0x4a8]
lea ecx, [ebp - 0x3e8]
call fcn.004e2830
lea ecx, [ebp - 0x444]
call fcn.004e2830
lea eax, [ebp - 0x4c0]
push eax
lea eax, [ebp - 0x3e8]
push eax
lea eax, [ebp - 0x4a4]
push eax
call fcn.004e55bb
add esp, 0xc
test eax, eax
je 0x4335bf
mov ecx, dword [ebp - 0x4a8]
call fcn.0043530b
xor eax, eax
inc eax
mov byte [ebp - 0x4ae], al
lea ecx, [ebp - 0x4a0]
call fcn.004e25e0
lea ecx, [ebp - 0x38c]
call fcn.004e25e0
lea ecx, [ebp - 0x444]
call fcn.004e25e0
lea ecx, [ebp - 0x3e8]
call fcn.004e25e0
mov al, byte [ebp - 0x4ae]
call fcn.004f418c
ret 8
push str._InsidePID
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x433e80
push ebx
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x4a4]
push eax
call fcn.004e55bb
add esp, 0xc
test eax, eax
jne 0x434fb6
push 0xa
lea eax, [ebp - 0x50c]
push eax
lea ecx, [ebp - 0x444]
call fcn.0044612f
push eax
call fcn.004fe2f8
add esp, 0xc
test eax, eax
je 0x433d8d
push ebx
push eax
push ebx
push ebx
push ebx
call fcn.0044edbc
add esp, 0x14
jmp 0x433d8d
push str._InsideWnd
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x433f26
push ebx
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x4a4]
push eax
call fcn.004e55bb
add esp, 0xc
test eax, eax
jne 0x434fb6
mov eax, dword [ebp - 0x444]
push 0x30
pop edx
push 0x78
movzx ecx, word [eax]
cmp cx, dx
jne 0x433ee1
movzx ecx, word [eax + 2]
pop edx
cmp cx, dx
je 0x433edc
push 0x58
pop edx
cmp cx, dx
jne 0x433ef2
add eax, 4
jmp 0x433ef2
pop esi
cmp cx, si
je 0x433eef
push 0x58
pop esi
cmp cx, si
jne 0x433ef2
add eax, 2
push 0x10
lea ecx, [ebp - 0x508]
push ecx
push eax
call fcn.004fe324
mov esi, eax
add esp, 0xc
test esi, esi
je 0x433d87
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x433d87
push esi
push ebx
push ebx
push ebx
jmp 0x433d7e
push 0x52b698
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x433fb5
push ebx
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x4a4]
push eax
call fcn.004e55bb
add esp, 0xc
test eax, eax
jne 0x434fb6
mov eax, dword [0x5a22a0]
cmp byte [eax + 0x8c0], bl
jne 0x433d8d
lea ecx, [ebp - 0x444]
call fcn.004e2932
test al, al
jne 0x433d8d
mov ecx, dword [0x5a22a0]
xor eax, eax
inc eax
push eax
lea ecx, [ecx + 0x8b8]
call fcn.00435420
lea ecx, [ebp - 0x444]
call fcn.0044612f
push eax
call fcn.004e2cec
pop ecx
mov ecx, dword [0x5a22a0]
mov dword [ecx + 0x15d0], eax
jmp 0x433d8d
push 0x52f3b8
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x43408d
push ebx
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x4a4]
push eax
call fcn.004e55bb
add esp, 0xc
test eax, eax
jne 0x434fb6
lea ecx, [ebp - 0x444]
call fcn.004e2932
test al, al
jne 0x433d8d
lea ecx, [ebp - 0x278]
call fcn.004e25a1
push 0x25
lea ecx, [ebp - 0x444]
mov byte [ebp - 4], 0xd
call fcn.0044612f
push eax
call fcn.004f5617
pop ecx
pop ecx
test eax, eax
je 0x434062
lea ecx, [ebp - 0x444]
call fcn.0044612f
push eax
call fcn.004e2cec
pop ecx
mov dword [ebp - 0x4bc], eax
lea ecx, [ebp - 0x278]
lea eax, [ebp - 0x4bc]
push eax
call fcn.004e2618
mov ecx, eax
call fcn.004e269c
lea ecx, [ebp - 0x278]
test al, al
jne 0x434068
lea ecx, [ebp - 0x444]
call fcn.0044612f
mov ecx, dword [0x5a22a0]
push eax
call fcn.0041bf18
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 3
call fcn.004e25e0
jmp 0x433d8d
push str._UpdateJumpList
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x4340b4
mov eax, dword [0x5a22a0]
xor ecx, ecx
inc ecx
mov byte [eax + 0x15e4], cl
jmp 0x433d8d
push ebx
push ebx
push ebx
push ebx
push str._log4
push str._log3
push str._log2
push str._log1
push str._log0
push str._log
lea ecx, [ebp - 0x3e8]
call fcn.004e29eb
lea ecx, [ebp - 0x3e8]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
test al, al
je 0x43414e
push str._log0
push str._log
call fcn.004e29eb
test al, al
je 0x434119
mov ecx, dword [0x5a22a0]
add ecx, 0xa0c
xor eax, eax
lea edx, [eax + 1]
jmp 0x434138
lea ecx, [ebp - 0x3e8]
call fcn.0044612f
mov ecx, dword [0x5a22a0]
mov al, byte [eax + 8]
sub al, 0x30
add ecx, 0xa0c
movzx edx, al
push edx
call fcn.0043550a
mov ecx, dword [0x5a22a0]
call fcn.0040d4ac
jmp 0x433d8d
push str._Reuse
push str._Single
call fcn.004e29eb
lea ecx, [ebp - 0x3e8]
test al, al
je 0x43418c
push ebx
call fcn.0044612f
mov ecx, dword [0x5a22a0]
push eax
call fcn.0040b1ed
mov eax, dword [0x5a23f0]
xor ecx, ecx
inc ecx
mov dword [eax + 0x11a68], ecx
jmp 0x433d8d
push str._NoSingle
call fcn.004e2996
lea ecx, [ebp - 0x3e8]
test al, al
je 0x4341bc
push ebx
call fcn.0044612f
mov ecx, dword [0x5a22a0]
push eax
call fcn.0040b1ed
mov eax, dword [0x5a23f0]
jmp 0x434266
push str._DesktopMode
call fcn.004e2996
test al, al
je 0x4341db
mov ecx, dword [0x5a22a0]
lea ecx, [ecx + 0x978]
jmp 0x4348dd
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push str._NoQuake
push str._QuakeAuto
push str._Quake
lea ecx, [ebp - 0x3e8]
call fcn.004e29eb
lea ecx, [ebp - 0x3e8]
test al, al
je 0x434275
push str._Quake
call fcn.004e2996
test al, al
je 0x434228
mov ecx, dword [0x5a22a0]
xor eax, eax
inc eax
lea ecx, [ecx + 0x960]
jmp 0x433716
push str._QuakeAuto
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
mov ecx, dword [0x5a22a0]
lea ecx, [ecx + 0x960]
test al, al
je 0x43424f
push 2
jmp 0x4346ec
push ebx
call fcn.0043550a
mov eax, dword [0x5a23f0]
cmp dword [eax + 0x11a68], ebx
jne 0x433d8d
mov dword [eax + 0x11a68], 2
jmp 0x433d8d
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push str._Frame
push str._FrameWidth
call fcn.004e29eb
push ebx
test al, al
je 0x4342e4
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x4a4]
push eax
call fcn.004e55bb
add esp, 0xc
test eax, eax
jne 0x434fb6
mov eax, dword [0x5a22a0]
cmp byte [eax + 0x974], bl
jne 0x433d8d
push 0xa
lea ecx, [ebp - 0x444]
call fcn.0044612f
mov ecx, dword [0x5a22a0]
lea ecx, [ecx + 0x96c]
push eax
call fcn.00435525
jmp 0x433d8d
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push str._ShowHideTSA
push str._ShowHide
lea ecx, [ebp - 0x3e8]
call fcn.004e29eb
test al, al
je 0x43433a
mov eax, dword [0x5a23f0]
xor ecx, ecx
inc ecx
push str._ShowHide
mov dword [eax + 0x11a68], ecx
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
xor ecx, ecx
test al, al
mov eax, dword [0x5a23f0]
sete cl
inc ecx
mov dword [eax + 0x11a6c], ecx
jmp 0x433d8d
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push str._Basic
push str._ResetDefault
push str._Reset
lea ecx, [ebp - 0x3e8]
call fcn.004e29eb
test al, al
je 0x4343cb
mov ecx, dword [0x5a22a0]
xor ebx, ebx
inc ebx
push ebx
lea ecx, [ecx + 0xa00]
call fcn.00435420
push str._ResetDefault
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x434398
mov eax, dword [0x5a23f0]
mov byte [eax + 0x11a63], bl
jmp 0x433d8d
push str._Basic
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x433d8d
mov eax, dword [0x5a23f0]
mov byte [eax + 0x11a63], bl
mov eax, dword [0x5a23f0]
mov byte [eax + 0x11a62], bl
jmp 0x433d8d
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push str._DontCascade
push str._NoCascade
lea ecx, [ebp - 0x3e8]
call fcn.004e29eb
lea ecx, [ebp - 0x3e8]
push ebx
test al, al
je 0x434417
call fcn.0044612f
mov ecx, dword [0x5a22a0]
push eax
call fcn.0040b1ed
mov eax, dword [0x5a23f0]
xor ecx, ecx
inc ecx
mov byte [eax + 0x11a64], cl
jmp 0x433d8d
push ebx
push ebx
push ebx
push str._WndHeight
push str._WndH
push str._WndWidth
push str._WndW
push str._WndY
push str._WndX
call fcn.004e29eb
lea ecx, [ebp - 0x3e8]
test al, al
je 0x434544
call fcn.0044612f
mov ax, word [eax + 8]
movzx eax, ax
mov dword [ebp - 0x4b4], eax
xor eax, eax
inc eax
push eax
lea eax, [ebp - 0x4b4]
push eax
call dword [sym.imp.USER32.dll_CharUpperBuffW]
mov dword [ebp - 0x4dc], ebx
mov dword [ebp - 0x4d8], 4
mov byte [ebp - 0x4d4], bl
push ebx
push 0x20
lea eax, [ebp - 0x4dc]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x4a4]
mov ecx, esi
push eax
call fcn.00432ec7
test al, al
je 0x434a70
mov eax, dword [0x5a22a0]
xor ebx, ebx
inc ebx
push 0x58
pop ecx
mov byte [eax + 0x984], bl
mov eax, dword [ebp - 0x4b4]
cmp ax, cx
je 0x4344ca
cmp ax, 0x59
jne 0x4344db
mov eax, dword [0x5a23f0]
mov byte [eax + 0x11a64], bl
mov eax, dword [ebp - 0x4b4]
movzx eax, ax
sub eax, 0x48
je 0x43451c
sub eax, 0xf
je 0x43450e
sub eax, 1
je 0x434500
sub eax, 1
jne 0x434535
mov ecx, dword [0x5a22a0]
lea ecx, [ecx + 0x994]
jmp 0x434528
mov ecx, dword [0x5a22a0]
lea ecx, [ecx + 0x988]
jmp 0x434528
mov ecx, dword [0x5a22a0]
lea ecx, [ecx + 0x9a0]
jmp 0x434528
mov ecx, dword [0x5a22a0]
lea ecx, [ecx + 0x9ac]
push 4
push dword [ebp - 0x4dc]
call fcn.0043554f
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x4dc]
jmp 0x434981
push str._Monitor
call fcn.004e2996
test al, al
je 0x4345ec
mov dword [ebp - 0x504], ebx
mov dword [ebp - 0x500], 4
mov byte [ebp - 0x4fc], bl
push ebx
push 0x40
lea eax, [ebp - 0x504]
mov byte [ebp - 4], 0x11
push eax
lea eax, [ebp - 0x4a4]
mov ecx, esi
push eax
call fcn.00432ec7
test al, al
je 0x434a7c
push dword [ebp - 0x504]
call fcn.004ec66c
pop ecx
mov ecx, eax
mov eax, dword [0x5a22a0]
mov dword [eax + 0x9b8], ecx
test ecx, ecx
je 0x4345dd
mov eax, dword [0x5a22a0]
xor ecx, ecx
inc ecx
mov byte [eax + 0x9c0], cl
mov eax, dword [0x5a22a0]
mov dword [eax + 0x9bc], 2
mov eax, dword [0x5a22a0]
mov ecx, dword [eax + 0x9b8]
mov eax, dword [0x5a2408]
mov dword [eax + 0x48], ecx
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x504]
jmp 0x434981
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push str._BufferHeight
push str._Buffer
lea ecx, [ebp - 0x3e8]
call fcn.004e29eb
test al, al
je 0x4346f6
push ebx
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x4a4]
push eax
call fcn.004e55bb
add esp, 0xc
test eax, eax
jne 0x434fb6
mov eax, dword [0x5a22a0]
cmp byte [eax + 0x8d8], bl
jne 0x433d8d
push 0xa
lea ecx, [ebp - 0x444]
call fcn.0044612f
mov ecx, dword [0x5a22a0]
push eax
lea ecx, [ecx + 0x8d0]
call fcn.00435525
mov edx, dword [0x5a22a0]
lea ecx, [edx + 0x8d0]
mov bl, byte [ecx + 8]
test bl, bl
je 0x43467d
cmp dword [ecx + 4], 2
jne 0x43467d
mov eax, dword [ecx]
jmp 0x43467f
xor eax, eax
test eax, eax
jns 0x4346a1
test bl, bl
je 0x434691
cmp dword [ecx + 4], 2
jne 0x434691
mov eax, dword [ecx]
jmp 0x434693
xor eax, eax
neg eax
push eax
call fcn.0043550a
mov edx, dword [0x5a22a0]
lea ecx, [edx + 0x8d0]
mov dl, byte [ecx + 8]
test dl, dl
je 0x4346ba
cmp dword [ecx + 4], 2
jne 0x4346ba
mov eax, dword [ecx]
xor ebx, ebx
jmp 0x4346be
xor ebx, ebx
mov eax, ebx
cmp eax, 0x12c
jge 0x4346cc
push 0x12c
jmp 0x4346ec
test dl, dl
je 0x4346da
cmp dword [ecx + 4], 2
jne 0x4346da
mov eax, dword [ecx]
jmp 0x4346dc
mov eax, ebx
cmp eax, 0x7ffe
jle 0x433d8d
push 0x7ffe
call fcn.0043550a
jmp 0x433d8d
push str._Config
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x43471c
mov eax, dword [0x5a22a0]
push ebx
push 0x7f
add eax, 0x8dc
jmp 0x43485d
push str._Palette
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x434745
mov eax, dword [0x5a22a0]
push ebx
push 0x104
add eax, 0x8e8
jmp 0x43485d
push str._LoadRegistry
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
lea ecx, [ebp - 0x3e8]
push ebx
test al, al
je 0x434782
call fcn.0044612f
mov ecx, dword [0x5a22a0]
push eax
call fcn.0040b1ed
mov ecx, dword [0x5a22a0]
lea ecx, [ecx + 0x900]
jmp 0x4348dd
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push str._LoadXmlFile
push str._LoadCfgFile
call fcn.004e29eb
test al, al
je 0x4347b4
xor eax, eax
inc eax
push eax
mov eax, dword [0x5a22a0]
push 0x104
add eax, 0x90c
jmp 0x43485d
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push str._SaveXmlFile
push str._SaveCfgFile
lea ecx, [ebp - 0x3e8]
call fcn.004e29eb
test al, al
je 0x4347ea
xor eax, eax
inc eax
push eax
mov eax, dword [0x5a22a0]
push 0x104
add eax, 0x918
jmp 0x43485d
push str._GuiMacro
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x434810
mov eax, dword [0x5a22a0]
push ebx
push 0x8000
add eax, 0x954
jmp 0x43485d
push str._UpdateSrcSet
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x434836
mov eax, dword [0x5a22a0]
push ebx
push 0x410
add eax, 0x93c
jmp 0x43485d
push str._AnsiLog
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x434879
xor eax, eax
inc eax
push eax
mov eax, dword [0x5a22a0]
push 0xdc
add eax, 0x948
push eax
lea eax, [ebp - 0x4a4]
mov ecx, esi
push eax
call fcn.00432ec7
test al, al
je 0x433ddc
jmp 0x433d8d
push str._SetDefTerm
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x43489b
mov ecx, dword [0x5a22a0]
lea ecx, [ecx + 0x9c4]
jmp 0x4348dd
push str._ZoneId
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x4348bd
mov ecx, dword [0x5a22a0]
lea ecx, [ecx + 0x9d0]
jmp 0x4348dd
push 0x52f738
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x4348eb
mov ecx, dword [0x5a22a0]
lea ecx, [ecx + 0x9dc]
xor eax, eax
inc eax
push eax
call fcn.00435420
jmp 0x433d8d
push str._QuitOnClose
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x434912
mov eax, dword [0x5a22a0]
xor ecx, ecx
inc ecx
mov byte [eax + 0x70d], cl
jmp 0x433d8d
push str._Title
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x43498f
mov dword [ebp - 0x4cc], ebx
mov dword [ebp - 0x4c8], 4
mov byte [ebp - 0x4c4], bl
push ebx
push 0x7f
lea eax, [ebp - 0x4cc]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x4a4]
mov ecx, esi
push eax
call fcn.00432ec7
test al, al
je 0x434a88
lea ecx, [ebp - 0x4cc]
call fcn.00433371
mov ecx, dword [0x5a22a0]
push eax
call fcn.0041b368
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x4cc]
call fcn.00432dbb
mov byte [ebp - 4], 3
jmp 0x433d8d
push str._Settings
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x4349b6
mov eax, dword [0x5a22a0]
xor ecx, ecx
inc ecx
mov byte [eax + 0x70e], cl
jmp 0x433d8d
push str._FindBugMode
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x4349dd
mov eax, dword [0x5a22a0]
xor ecx, ecx
inc ecx
mov byte [eax + 0x15e5], cl
jmp 0x433d8d
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push str._debugi
push str._debugw
push str._debug
lea ecx, [ebp - 0x3e8]
call fcn.004e29eb
test al, al
jne 0x433d8d
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push str._help
push 0x52f7ac
push 0x52f7b4
lea ecx, [ebp - 0x3e8]
call fcn.004e29eb
test al, al
je 0x434a94
mov ecx, dword [0x5a28e4]
test ecx, ecx
je 0x434a3b
push ebx
call fcn.004508b5
push ebx
call fcn.00401407
mov eax, dword [ebp - 0x4ac]
pop ecx
or dword [eax], 0xffffffff
jmp 0x433ddc
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x4ec]
call fcn.00432dbb
jmp 0x433ddc
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x4f8]
jmp 0x434a5a
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x4dc]
jmp 0x434a5a
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x504]
jmp 0x434a5a
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x4cc]
jmp 0x434a5a
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x52f7bc
push 0x52b6a4
push 0x52f7d0
push 0x52b6b0
lea ecx, [ebp - 0x3e8]
call fcn.004e29eb
test al, al
je 0x43518a
mov ecx, dword [esi + 0x3b8]
test ecx, ecx
je 0x434adb
mov eax, dword [ebp - 0x4c0]
sub eax, edi
sar eax, 1
xor edx, edx
mov word [ecx + eax*2], dx
push 0xffffffffffffffff
push dword [ebp - 0x4a4]
call fcn.004e5a9d
pop ecx
push eax
lea ecx, [esi + 0x470]
call fcn.004e2ad6
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x52f7bc
push 0x52f7d0
lea ecx, [ebp - 0x3e8]
call fcn.004e29eb
mov byte [esi + 0x4cc], al
jmp 0x433dc8
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x4b8], eax
lea eax, [ebp - 0x444]
push ebx
push eax
lea eax, [ebp - 0x4b8]
push eax
call fcn.004e55bb
add esp, 0xc
test eax, eax
jne 0x434b6f
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x52b6a4
push 0x52b6b0
lea ecx, [ebp - 0x444]
call fcn.004e29eb
test al, al
je 0x434b6f
push 0xffffffffffffffff
push dword [ebp - 0x4b8]
jmp 0x434b77
push 0xffffffffffffffff
push dword [ebp - 0x4a4]
lea ebx, [esi + 0x470]
mov ecx, ebx
call fcn.004e2ad6
mov ecx, ebx
call fcn.004e2932
test al, al
je 0x434be5
xor ebx, ebx
lea ecx, [ebp - 0x3e8]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push str._exists__command_line_is_empty
call fcn.0044612f
push eax
push str.Invalid_command_line._
lea ecx, [ebp - 0x278]
call fcn.004e2531
push ebx
push ebx
push ebx
push 0xffffffffffffffff
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 4
call fcn.0044612f
push eax
call fcn.00420ad9
add esp, 0x14
lea ecx, [ebp - 0x278]
call fcn.004e25e0
jmp 0x433ddc
push 0x40
lea eax, [ebp - 0x2b8]
mov dword [ebp - 0x2bc], 0x44
push 0
push eax
call fcn.004f5a90
xor eax, eax
lea edi, [ebp - 0x4d0]
stosd dword es:[edi], eax
lea ecx, [ebp - 0x3e8]
add esp, 0xc
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
inc eax
mov edi, str._demote
mov dword [ebp - 0x290], eax
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x52ef08
push edi
call fcn.004e29eb
test al, al
je 0x434c40
xor eax, eax
inc eax
jmp 0x434c42
xor eax, eax
push 0x20a
mov word [ebp - 0x28c], ax
lea eax, [ebp - 0x21c]
push 0
push eax
call fcn.004f5a90
add esp, 0xc
lea eax, [ebp - 0x21c]
push eax
push 0x105
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
xor eax, eax
lea ecx, [ebp - 0x3e8]
push eax
push eax
push eax
push 0x521e20
push dword [ebx]
mov dword [ebp - 0x4a8], eax
push 0x52efa0
mov byte [ebp - 0x4ad], al
call fcn.0044612f
push eax
push 0x52efa8
push str.Starting_process
lea ecx, [ebp - 0x278]
call fcn.004e2531
xor eax, eax
mov byte [ebp - 4], 5
inc eax
lea ecx, [ebp - 0x278]
push eax
push eax
call fcn.0044612f
push eax
call fcn.00421c79
add esp, 0xc
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x278]
call fcn.004e25e0
push edi
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x434d1f
lea eax, [ebp - 0x4a8]
push eax
lea eax, [ebp - 0x4d0]
push eax
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x21c]
push eax
xor eax, eax
push eax
push 0x20
push eax
push eax
push eax
push dword [esi + 0x470]
call fcn.004363e6
add esp, 0x28
jmp 0x434d73
push str._system:
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x434d7a
mov eax, dword [ebp - 0x3e8]
push 0xa
add eax, 0x10
push 0
push eax
call fcn.004fe324
xor edx, edx
lea ecx, [ebp - 0x4d0]
push edx
push ecx
lea ecx, [ebp - 0x2bc]
push ecx
lea ecx, [ebp - 0x21c]
push ecx
push edx
push 0x20
push edx
push edx
push edx
push dword [esi + 0x470]
push eax
call fcn.00436ab1
add esp, 0x38
mov esi, eax
jmp 0x434e20
push str._interactive:
lea ecx, [ebp - 0x3e8]
call fcn.004e2996
test al, al
je 0x434dda
mov eax, dword [ebp - 0x3e8]
push 0xa
add eax, 0x1a
push 0
push eax
call fcn.004fe324
lea ecx, [ebp - 0x4a8]
push ecx
lea ecx, [ebp - 0x4d0]
push ecx
lea ecx, [ebp - 0x2bc]
push ecx
lea ecx, [ebp - 0x21c]
push ecx
xor ecx, ecx
push ecx
push 0x20
push 1
push ecx
push ecx
push dword [esi + 0x470]
push ecx
push eax
call fcn.004365ba
add esp, 0x3c
mov esi, eax
jmp 0x434e17
lea eax, [ebp - 0x4d0]
xor ecx, ecx
push eax
lea eax, [ebp - 0x2bc]
inc ecx
push eax
xor eax, eax
push eax
push eax
push 0x20
push ecx
push eax
push eax
push dword [esi + 0x470]
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov esi, eax
test esi, esi
je 0x434e0b
xor eax, eax
jmp 0x434e11
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x4a8], eax
xor eax, eax
inc eax
mov byte [ebp - 0x4ad], al
lea ecx, [ebp - 0x278]
call fcn.004e25a1
push 0x40
lea eax, [ebp - 0x314]
mov byte [ebp - 4], 6
push 0
push eax
call fcn.004f5a90
add esp, 0xc
test esi, esi
je 0x434e88
cmp dword [ebp - 0x4c8], 0
je 0x434e69
push dword [ebp - 0x4c8]
lea eax, [ebp - 0x314]
push str.__PID_u
push eax
call fcn.00401104
add esp, 0xc
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
lea eax, [ebp - 0x314]
push eax
push str.Process_was_created_successfully
call fcn.004e23a5
add esp, 0x24
jmp 0x434ebc
push dword [ebp - 0x4a8]
lea eax, [ebp - 0x314]
push str.__ErrorCode_u
push eax
call fcn.00401104
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
lea eax, [ebp - 0x314]
push eax
push str.Failed_to_start_process
call fcn.004e23a5
add esp, 0x30
mov dword [ebp - 0x4bc], eax
lea ecx, [ebp - 0x278]
lea eax, [ebp - 0x4bc]
push eax
call fcn.004e2618
xor eax, eax
lea ecx, [ebp - 0x278]
inc eax
push eax
push eax
call fcn.0044612f
push eax
call fcn.00421c79
add esp, 0xc
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x278]
call fcn.004e25e0
cmp dword [ebp - 0x4a8], 0
je 0x434f20
xor eax, eax
mov ecx, ebx
push eax
push eax
push eax
push dword [ebp - 0x4a8]
call fcn.0044612f
push eax
call fcn.00420ad9
add esp, 0x14
cmp byte [ebp - 0x4ad], 0
je 0x434f46
xor eax, eax
inc eax
push eax
push eax
push str.Sleeping_for_5_seconds
call fcn.00421c79
add esp, 0xc
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
xor ebx, ebx
test esi, esi
je 0x434f54
mov eax, dword [ebp - 0x4ac]
mov dword [eax], ebx
mov eax, dword [ebp - 0x4d0]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x434f72
cmp eax, 0xffffffff
je 0x434f72
push eax
mov dword [ebp - 0x4d0], ebx
call esi
mov eax, dword [ebp - 0x4cc]
test eax, eax
je 0x433ddc
cmp eax, 0xffffffff
je 0x433ddc
push eax
mov dword [ebp - 0x4cc], ebx
call esi
jmp 0x433ddc
xor eax, eax
lea esi, [eax + 1]
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x4a4]
push eax
call fcn.004e55bb
add esp, 0xc
test eax, eax
je 0x434fc7
mov eax, dword [ebp - 0x4ac]
mov dword [eax], 0x65
jmp 0x433ddc
push ebx
push 0x52eea0
lea ecx, [ebp - 0x444]
call fcn.004e2759
test eax, eax
jne 0x434fe0
mov esi, ebx
jmp 0x435033
push ebx
push 0x52eea4
lea ecx, [ebp - 0x444]
call fcn.004e2759
test eax, eax
jne 0x434fb6
push ebx
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x4a4]
push eax
call fcn.004e55bb
add esp, 0xc
test eax, eax
jne 0x434fb6
lea ecx, [ebp - 0x444]
call fcn.0044612f
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x435177
test al, 0x10
jne 0x435177
lea eax, [ebp - 0x508]
mov dword [ebp - 0x4b4], ebx
push eax
lea eax, [ebp - 0x4b4]
push eax
push ebx
push 0xf003f
push ebx
push ebx
push ebx
push str.SoftwareMicrosoftCommand_Processor
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
je 0x435075
mov eax, dword [ebp - 0x4ac]
mov dword [eax], 0x67
jmp 0x433ddc
test esi, esi
je 0x435137
lea ecx, [ebp - 0x444]
call fcn.004e28ca
mov ecx, dword [ebp - 0x4a4]
mov esi, eax
mov edi, ebx
cmp word [ecx], bx
je 0x4350ad
mov edi, ecx
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x43509c
sub ecx, edx
sar ecx, 1
add esi, ecx
add esi, 0x10
push 2
push esi
call fcn.004e1c42
mov ebx, eax
test edi, edi
mov ecx, 0x514870
mov eax, 0x524d9c
cmove eax, ecx
push eax
mov eax, ecx
cmovne eax, edi
push eax
mov eax, 0x52eea8
cmove eax, ecx
push eax
push dword [ebp - 0x444]
push str.__s__s_s_s
push esi
push ebx
call fcn.004e22e7
mov ecx, ebx
add esp, 0x24
xor esi, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, si
jne 0x4350f5
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
push ebx
xor eax, eax
inc eax
push eax
push esi
push str.AutoRun
push dword [ebp - 0x4b4]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push 0x64
pop esi
test eax, eax
push 1
pop eax
push ebx
cmove esi, eax
call fcn.004e1bea
pop ecx
jmp 0x435153
push str.AutoRun
push dword [ebp - 0x4b4]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
push 0x64
pop esi
test eax, eax
push 1
pop eax
cmove esi, eax
push dword [ebp - 0x4b4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0x4a8]
call fcn.004353ce
mov eax, dword [ebp - 0x4ac]
mov dword [eax], esi
jmp 0x433ddc
mov eax, dword [ebp - 0x4ac]
mov dword [eax], 0x66
jmp 0x433ddc
xor ebx, ebx
mov esi, dword [ebp - 0x4c0]
mov eax, esi
test eax, eax
je 0x433dc8
mov ecx, dword [0x5a23ec]
xor eax, eax
inc eax
push eax
call fcn.004673c5
test eax, eax
je 0x4351f9
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x52b3e8
push esi
push 0x52f7e4
push 0x5219f4
lea ecx, [ebp - 0x2d4]
call fcn.004e2531
push ebx
push ebx
lea ecx, [ebp - 0x2d4]
mov byte [ebp - 4], 0x17
call fcn.0044612f
mov ecx, dword [0x5a22a0]
push eax
call fcn.00410feb
lea ecx, [ebp - 0x2d4]
mov byte [ebp - 4], 3
call fcn.004e25e0
lea ecx, [ebp - 0x278]
call fcn.004e25a1
movzx eax, word [esi]
push 0x2d
pop ecx
mov byte [ebp - 4], 0x18
push 0x2f
pop edx
cmp ax, cx
je 0x43521f
cmp ax, dx
je 0x43521f
mov edi, esi
jmp 0x435232
lea edi, [esi + 2]
movzx eax, word [edi]
cmp ax, cx
je 0x43522f
cmp ax, dx
jne 0x435232
lea edi, [esi + 4]
push 0xb
push str.new_console
push edi
call fcn.004e1d62
add esp, 0xc
test eax, eax
je 0x43525a
push 0xb
push str.cur_console
push edi
call fcn.004e1d62
add esp, 0xc
test eax, eax
jne 0x435294
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x41
call fcn.00450eba
pop ecx
pop ecx
push eax
mov edi, 0x52b3e8
push edi
call fcn.004e23a5
add esp, 0x24
mov dword [ebp - 0x4bc], eax
lea eax, [ebp - 0x4bc]
lea ecx, [ebp - 0x278]
push eax
call fcn.004e2618
jmp 0x435299
mov edi, 0x52b3e8
push ebx
push ebx
push 0x40
call fcn.00450eba
pop ecx
pop ecx
push eax
push str._r_nhttps:__conemu.github.io_en_ConEmuArgs.html_r_n_r_n
push ebx
push 0x3f
call fcn.00450eba
pop ecx
pop ecx
push eax
push edi
lea ecx, [ebp - 0x278]
call fcn.0044612f
push eax
push esi
push edi
push ebx
push 0x3e
call fcn.00450eba
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x330]
call fcn.004e2531
xor eax, eax
mov byte [ebp - 4], 0x19
inc eax
lea ecx, [ebp - 0x330]
push eax
push 0xffffffffffffffff
push ebx
push 0x40
call fcn.0044612f
push eax
call fcn.00421ef1
add esp, 0x14
lea ecx, [ebp - 0x330]
call fcn.004e25e0
jmp 0x434bd5