Function at 0x438c00
Capabilities:
Check if file exists
Create process on windows
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x596654
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x630
push ebx
push esi
push edi
mov dword [ebp - 0x10], ecx
mov dword [ebp - 4], 3
push 0x44
push 0
lea eax, [ebp - 0x54]
push eax
call fcn.00450460
add esp, 0xc
mov dword [ebp - 0x54], 0x44
push 0x10
push 0
lea ecx, [ebp - 0x64]
push ecx
call fcn.00450460
add esp, 0xc
mov byte [ebp - 0x168], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x167]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
call fcn.004037e0
add eax, 0xc0
push eax
push str._sControlmstsc.exe
lea edx, [ebp - 0x168]
push edx
call fcn.0045126f
add esp, 0xc
lea eax, [ebp - 0x168]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x438cea
push 0
push 0x5ad500
lea ecx, [ebp - 0x168]
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.00574f5a
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.005772b0
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.005772b0
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x10]
call fcn.005772b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x14]
call fcn.005772b0
jmp 0x43917e
push 5
push 0
push 0
lea edx, [ebp - 0x168]
push edx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x174], 0
mov eax, 1
test eax, eax
je 0x438dc6
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x5ad964
push str.32770
call fcn.004393a0
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
je 0x438d5a
jmp 0x438dc6
mov ecx, dword [ebp - 0x170]
add ecx, 1
mov dword [ebp - 0x170], ecx
cmp dword [ebp - 0x170], 0xc8
jb 0x438dc1
push 0
push 0x5ad954
push 0x5ad938
mov ecx, dword [ebp - 0x10]
call fcn.00574f5a
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.005772b0
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.005772b0
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x10]
call fcn.005772b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x14]
call fcn.005772b0
jmp 0x43917e
jmp 0x438d22
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x188], 0
mov edx, dword [ebp - 0x174]
mov eax, dword [edx + 0x1c]
mov dword [ebp - 0x178], eax
mov ecx, 1
test ecx, ecx
je 0x438ea1
push 0x5ad92c
push 0x5ad8cc
push 0
mov edx, dword [ebp - 0x178]
push edx
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0
je 0x438e72
push 0
push 0
push 0x201
mov eax, dword [ebp - 0x18c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x202
mov ecx, dword [ebp - 0x18c]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x5ad920
push 0x5ad8cc
push 0
mov edx, dword [ebp - 0x178]
push edx
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0
je 0x438e9c
jmp 0x438ea1
jmp 0x438e11
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x5a7b30
push str.32770
push 0
mov eax, dword [ebp - 0x178]
push eax
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0
jne 0x438edb
mov dword [ebp - 0x16c], 1
push 0
push str.ComboBoxEx32
push 0
mov ecx, dword [ebp - 0x194]
push ecx
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0
jne 0x438f0a
mov dword [ebp - 0x16c], 1
push 0
push 0x5ad908
push 0
mov edx, dword [ebp - 0x194]
push edx
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0
jne 0x438f39
mov dword [ebp - 0x16c], 1
push 0
push 0x5ad908
mov eax, dword [ebp - 0x180]
push eax
mov ecx, dword [ebp - 0x194]
push ecx
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
jne 0x438f6d
mov dword [ebp - 0x16c], 1
push 0
push 0x5ad908
mov edx, dword [ebp - 0x184]
push edx
mov eax, dword [ebp - 0x194]
push eax
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0
jne 0x438fa1
mov dword [ebp - 0x16c], 1
cmp dword [ebp - 0x16c], 0
je 0x43900e
mov ecx, dword [ebp - 0x170]
add ecx, 1
mov dword [ebp - 0x170], ecx
cmp dword [ebp - 0x170], 0x32
jb 0x43900e
push 0
push 0x5ad954
push 0x5ad8e8
mov ecx, dword [ebp - 0x10]
call fcn.00574f5a
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.005772b0
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.005772b0
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x10]
call fcn.005772b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x14]
call fcn.005772b0
jmp 0x43917e
mov byte [ebp - 0x1f8], 0
mov ecx, 0x18
xor eax, eax
lea edi, [ebp - 0x1f7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x3f8], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x3f7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x5f8], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x5f7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
push str._s:_s
lea ecx, [ebp - 0x1f8]
push ecx
call fcn.0045126f
add esp, 0x10
mov edx, dword [ebp + 0x10]
push edx
push 0x5a8204
lea eax, [ebp - 0x3f8]
push eax
call fcn.0045126f
add esp, 0xc
mov ecx, dword [ebp + 0x14]
push ecx
push 0x5a8204
lea edx, [ebp - 0x5f8]
push edx
call fcn.0045126f
add esp, 0xc
lea eax, [ebp - 0x1f8]
push eax
push 0
push 0xc
mov ecx, dword [ebp - 0x17c]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
lea edx, [ebp - 0x3f8]
push edx
push 0
push 0xc
mov eax, dword [ebp - 0x180]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x5f8]
push ecx
push 0
push 0xc
mov edx, dword [ebp - 0x184]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0xc
mov eax, dword [ebp - 0x188]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x5ad8d4
push 0x5ad8cc
push 0
mov ecx, dword [ebp - 0x178]
push ecx
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0x5fc], eax
push 0
push 0
push 0x201
mov edx, dword [ebp - 0x5fc]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x202
mov eax, dword [ebp - 0x5fc]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.005772b0
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.005772b0
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x10]
call fcn.005772b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x14]
call fcn.005772b0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10