Function at 0x435090
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5324e4
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
mov eax, dword [0x58a06c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov edi, dword [ebp + 8]
push str.click
push dword [edi]
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x4356a6
mov eax, dword [ebx - 0x24]
lea ecx, [ebx - 0x24]
push edi
call dword [eax + 0x20]
mov ecx, dword [edi + 0x108]
push str.Top_Up
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x43510a
push 1
call fcn.00437b60
jmp 0x435a0a
mov ecx, dword [edi + 0x108]
push str.Top_Down
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x435132
push eax
call fcn.00437b60
jmp 0x435a0a
mov ecx, dword [edi + 0x108]
push str.Bottom_Up
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x43515b
push 3
call fcn.00437b60
jmp 0x435a0a
mov ecx, dword [edi + 0x108]
push str.Bottom_Down
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x435184
push 2
call fcn.00437b60
jmp 0x435a0a
mov ecx, dword [edi + 0x108]
push str.Left_Right
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x435210
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.IrSdk.dll_int___cdecl_IrSdk_GetCameraCutRect_struct_tagCutRect__]
add esp, 4
test eax, eax
jne 0x435a0a
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.IrSdk.dll_int___cdecl_IrSdk_GetCameraResolution_long_int___long_int__]
add esp, 8
test eax, eax
jne 0x435a0a
mov ecx, dword [ebp - 0x24]
lea eax, [ecx - 4]
test eax, eax
cmovg ecx, eax
cmp byte [0x58aad8], 0
mov dword [ebp - 0x24], ecx
je 0x4353fb
call fcn.00401d90
mov ecx, eax
test ecx, ecx
je 0x435a28
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0
jmp 0x4353b2
mov ecx, dword [edi + 0x108]
push str.Left_Left
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x43529d
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.IrSdk.dll_int___cdecl_IrSdk_GetCameraCutRect_struct_tagCutRect__]
add esp, 4
test eax, eax
jne 0x435a0a
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.IrSdk.dll_int___cdecl_IrSdk_GetCameraResolution_long_int___long_int__]
add esp, 8
test eax, eax
jne 0x435a0a
mov ecx, dword [ebp - 0x24]
lea eax, [ecx + 4]
cmp eax, dword [ebp - 0x1c]
cmovl ecx, eax
cmp byte [0x58aad8], 0
mov dword [ebp - 0x24], ecx
je 0x4353fb
call fcn.00401d90
mov ecx, eax
test ecx, ecx
je 0x435a32
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 1
jmp 0x4353b2
mov ecx, dword [edi + 0x108]
push str.Right_Right
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x43532a
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.IrSdk.dll_int___cdecl_IrSdk_GetCameraCutRect_struct_tagCutRect__]
add esp, 4
test eax, eax
jne 0x435a0a
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.IrSdk.dll_int___cdecl_IrSdk_GetCameraResolution_long_int___long_int__]
add esp, 8
test eax, eax
jne 0x435a0a
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx - 4]
cmp eax, dword [ebp - 0x24]
cmovg ecx, eax
cmp byte [0x58aad8], 0
mov dword [ebp - 0x1c], ecx
je 0x4353fb
call fcn.00401d90
mov ecx, eax
test ecx, ecx
je 0x435a3c
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 2
jmp 0x4353b2
mov ecx, dword [edi + 0x108]
push str.Right_Left
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x43540d
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.IrSdk.dll_int___cdecl_IrSdk_GetCameraCutRect_struct_tagCutRect__]
add esp, 4
test eax, eax
jne 0x435a0a
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.IrSdk.dll_int___cdecl_IrSdk_GetCameraResolution_long_int___long_int__]
add esp, 8
test eax, eax
jne 0x435a0a
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + 4]
cmp eax, dword [ebp - 0x2c]
cmovl ecx, eax
cmp byte [0x58aad8], 0
mov dword [ebp - 0x1c], ecx
je 0x4353fb
call fcn.00401d90
mov ecx, eax
test ecx, ecx
je 0x435a46
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
push eax
lea eax, [ebp - 0x14]
push 0x553668
push eax
call fcn.00412750
add esp, 0x10
lea edx, [ebp - 0x14]
call fcn.00401e90
mov dword [ebp - 4], 0xffffffff
or eax, 0xffffffff
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4353fb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.IrSdk.dll_int___cdecl_IrSdk_SetCameraCutRect_struct_tagCutRect__]
add esp, 4
jmp 0x435a0a
mov ecx, dword [edi + 0x108]
push str.to_pcb
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x43546d
cmp dword [0x58f1e0], eax
je 0x435a0a
xorps xmm1, xmm1
xorps xmm0, xmm0
cvtsi2sd xmm1, dword [ebx + 0x40]
cvtsi2sd xmm0, dword [ebx + 0x64]
subsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, dword [ebx + 0x5c]
divsd xmm1, qword [ebx + 0x74]
subsd xmm1, xmm0
movsd qword [ebp - 0x30], xmm1
xorps xmm1, xmm1
cvtsi2sd xmm1, dword [ebx + 0x44]
jmp 0x43570b
mov ecx, dword [edi + 0x108]
push str.pcbUpbtn
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x435493
add dword [ebx + 0x68], 0xfffffff6
jmp 0x435a0a
mov ecx, dword [edi + 0x108]
push str.pcbDownbtn
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x4354b9
add dword [ebx + 0x68], 0xa
jmp 0x435a0a
mov ecx, dword [edi + 0x108]
push str.pcbLeftbtn
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x4354df
add dword [ebx + 0x64], 0xfffffff6
jmp 0x435a0a
mov ecx, dword [edi + 0x108]
push str.pcbRightbtn
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x435505
add dword [ebx + 0x64], 0xa
jmp 0x435a0a
mov ecx, dword [edi + 0x108]
push str.pcbresetbtn
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x435535
mov dword [ebx + 0x64], 0x64
mov dword [ebx + 0x68], 0x32
jmp 0x435a0a
mov ecx, dword [edi + 0x108]
push str.Upbtn
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x435572
add dword [ebx + 0x70], 5
mov eax, dword [ebx + 0x70]
cmp eax, 0x64
jle 0x43556a
mov dword [ebx + 0x70], 0x64
mov eax, 0x64
push 0x14
push eax
jmp 0x435a02
mov ecx, dword [edi + 0x108]
push str.Downbtn
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x4355a9
add dword [ebx + 0x70], 0xfffffffb
mov eax, dword [ebx + 0x70]
jns 0x4355a1
mov dword [ebx + 0x70], 0
xor eax, eax
push 0x14
push eax
jmp 0x435a02
mov ecx, dword [edi + 0x108]
push str.Leftbtn
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x4355e5
inc dword [ebx + 0x6c]
mov eax, dword [ebx + 0x6c]
cmp eax, 0x64
jle 0x4355dd
mov dword [ebx + 0x6c], 0x64
mov eax, 0x64
push 0x13
push eax
jmp 0x435a02
mov ecx, dword [edi + 0x108]
push str.Rightbtn
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x43561c
add dword [ebx + 0x6c], 0xffffffff
mov eax, dword [ebx + 0x6c]
jns 0x435614
mov dword [ebx + 0x6c], 0
xor eax, eax
push 0x13
push eax
jmp 0x435a02
mov ecx, dword [edi + 0x108]
push str.resetbtn
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x435654
push 0x13
push eax
lea ecx, [ebx - 0x24]
mov dword [ebx + 0x6c], eax
mov dword [ebx + 0x70], eax
call fcn.00437d10
push 0x14
push dword [ebx + 0x70]
jmp 0x435a02
mov ecx, dword [edi + 0x108]
push 0x55329c
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x435679
mov dword [ebx + 0x58], eax
jmp 0x435a0a
mov ecx, dword [edi + 0x108]
push 0x5532a4
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x435a0a
mov dword [ebx + 0x58], 1
jmp 0x435a0a
push str.dbclick
push dword [edi]
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x435767
mov eax, dword [edi + 0x108]
cmp eax, dword [ebx + 0x24]
jne 0x435a0a
cmp dword [0x58f1e0], 0
je 0x435a0a
xorps xmm1, xmm1
xorps xmm0, xmm0
cvtsi2sd xmm1, dword [ebx + 0x50]
cvtsi2sd xmm0, dword [ebx + 0x64]
subsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, dword [ebx + 0x5c]
divsd xmm1, qword [ebx + 0x74]
subsd xmm1, xmm0
movsd qword [ebp - 0x30], xmm1
xorps xmm1, xmm1
cvtsi2sd xmm1, dword [ebx + 0x54]
xorps xmm0, xmm0
mov ecx, dword [0x58f394]
xorps xmm2, xmm2
cvtsi2sd xmm0, dword [ebx + 0x68]
cvtsi2sd xmm2, dword [ebx + 0x60]
subsd xmm1, xmm0
divsd xmm1, qword [ebx + 0x7c]
subsd xmm2, xmm1
movsd qword [ebp - 0x38], xmm2
test ecx, ecx
je 0x435750
mov eax, dword [ecx]
lea edx, [ebp - 0x38]
push edx
lea edx, [ebp - 0x30]
push edx
push 0x42a
call dword [eax + 0x1c]
nop dword [eax]
call fcn.0047fd54
mov eax, dword [eax + 0xa8]
push eax
call dword [sym.imp.USER32.dll_SetActiveWindow]
jmp 0x435a0a
push str.windowinit
push dword [edi]
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x435787
lea ecx, [ebx - 0x24]
call fcn.004360b0
jmp 0x435a0a
push str.selectchanged
push dword [edi]
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x435862
mov ecx, dword [edi + 0x108]
push 0x5532ac
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x435826
mov ecx, dword [ebx + 0x10]
mov edi, dword [edi + 0x118]
add ecx, 0x55c
push 1
push str.slider1
call fcn.0047d65a
mov esi, eax
test edi, edi
je 0x4357fa
call dword [sym.imp.IrSdk.dll_int___cdecl_IrSdk_GetFuseScale_void_]
push 0x64
mov dword [0x58aee8], eax
call dword [sym.imp.IrSdk.dll_int___cdecl_IrSdk_SetFuseScale_int_]
add esp, 4
test esi, esi
je 0x435819
push 0
jmp 0x43580f
push dword [0x58aee8]
call dword [sym.imp.IrSdk.dll_int___cdecl_IrSdk_SetFuseScale_int_]
add esp, 4
test esi, esi
je 0x435819
push 1
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x180]
test edi, edi
sete al
mov byte [ebx + 0x3d], al
jmp 0x435a0a
mov ecx, dword [edi + 0x108]
push 0x5532b8
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x435a0a
cmp dword [edi + 0x118], eax
setne al
movzx eax, al
push eax
call dword [sym.imp.IrSdk.dll_int___cdecl_IrSdk_Checkleakage_bool_]
add esp, 4
jmp 0x435a0a
push str.movevaluechanged
push dword [edi]
call fcn.00508b12
add esp, 8
test eax, eax
je 0x43599b
push str.valuechanged
push dword [edi]
call fcn.00508b12
add esp, 8
test eax, eax
je 0x43599b
push 0x552690
push dword [edi]
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x435a0a
mov ecx, dword [ebx + 0x10]
push 1
push 0x553728
add ecx, 0x55c
call fcn.0047d65a
mov edx, eax
test edx, edx
je 0x435a0a
mov ecx, dword [edi + 0x118]
test ecx, ecx
js 0x435a0a
cmp ecx, dword [edx + 0x6e0]
jge 0x435a0a
imul eax, ecx, 0x84
add eax, 0x764
add eax, edx
je 0x435a0a
mov eax, dword [0x58ee44]
test eax, eax
jne 0x435932
push 0x70
call fcn.0050058b
mov esi, eax
add esp, 4
mov dword [ebp - 0x34], esi
push 0x70
push 0
push esi
mov dword [ebp - 4], 4
call fcn.00504db0
add esp, 0xc
mov ecx, esi
call fcn.0045c650
mov dword [ebp - 4], 0xffffffff
mov dword [0x58ee44], eax
push str._index_Program_hot.html
lea edx, [eax + 0x38]
lea ecx, [ebp - 0x14]
call fcn.0040a2c0
add esp, 4
push 1
push 0
push 0
push dword [ebp - 0x14]
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov edx, dword [ebp - 0x14]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x435976
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebx - 0x20]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x435a0a
push 0
push 0x3e8
push 0x10
push dword [ebx - 0x20]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x435a0a
mov ecx, dword [edi + 0x108]
push str.slider1
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x4359bc
push 0x12
jmp 0x4359fc
mov ecx, dword [edi + 0x108]
push str.sliderX
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x4359dd
push 0x13
jmp 0x4359fc
mov ecx, dword [edi + 0x108]
push str.sliderY
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
call fcn.00508b12
add esp, 8
test eax, eax
jne 0x435a0a
push 0x14
push dword [edi + 0x118]
lea ecx, [ebx - 0x24]
call fcn.00437d10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005000f2
mov esp, ebp
pop ebp
ret 4
push 0x80004005
call fcn.00404aa0
push 0x80004005
call fcn.00404aa0
push 0x80004005
call fcn.00404aa0
push 0x80004005
call fcn.00404aa0
int3