Function at 0x435af4
Capabilities:
Create process on windows

Disassembly:
mov eax, 0x455347
call fcn.00454158
sub esp, 0x54
push ebx
push esi
push edi
push str.open
lea esi, [ebp - 0x24]
mov edi, ecx
call fcn.00413053
xor ebx, ebx
push 0x3c
xor esi, esi
lea eax, [ebp - 0x60]
push ebx
inc esi
push eax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x18], esi
call fcn.00446660
add esp, 0xc
cmp dword [ebp + 0x10], 2
jb 0x435b72
cmp dword [edi + 0xc], esi
ja 0x435b43
lea esi, [edi + 0x18]
jmp 0x435b49
mov eax, dword [edi + 8]
mov esi, dword [eax + 4]
call fcn.004149b3
cmp byte [eax], bl
je 0x435b72
cmp dword [edi + 0xc], 1
ja 0x435b5d
lea esi, [edi + 0x18]
jmp 0x435b63
mov eax, dword [edi + 8]
mov esi, dword [eax + 4]
call fcn.004149b3
push eax
call fcn.00412798
pop ecx
mov dword [ebp - 0x14], eax
cmp dword [ebp + 0x10], 3
jb 0x435b98
cmp dword [edi + 0xc], 2
ja 0x435b83
lea esi, [edi + 0x18]
jmp 0x435b89
mov eax, dword [edi + 8]
mov esi, dword [eax + 8]
call fcn.004149b3
push eax
call fcn.00412798
pop ecx
mov dword [ebp - 0x10], eax
cmp dword [ebp + 0x10], 4
jb 0x435bd8
cmp dword [edi + 0xc], 3
ja 0x435ba9
lea esi, [edi + 0x18]
jmp 0x435baf
mov eax, dword [edi + 8]
mov esi, dword [eax + 0xc]
call fcn.004149b3
cmp byte [eax], bl
je 0x435bd8
cmp dword [edi + 0xc], 3
ja 0x435bc3
lea esi, [edi + 0x18]
jmp 0x435bc9
mov eax, dword [edi + 8]
mov esi, dword [eax + 0xc]
call fcn.004149b3
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.0041316e
cmp dword [ebp + 0x10], 5
jb 0x435bfa
cmp dword [edi + 0xc], 4
ja 0x435be9
lea eax, [edi + 0x18]
jmp 0x435bef
mov eax, dword [edi + 8]
mov eax, dword [eax + 0x10]
call fcn.00414a92
movzx eax, ax
mov dword [ebp - 0x18], eax
push 0x3c
pop esi
push esi
lea eax, [ebp - 0x60]
push ebx
push eax
call fcn.00446660
mov eax, dword [ebp - 0x24]
add esp, 0xc
cmp dword [edi + 0xc], ebx
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x5c], 0x40
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], eax
ja 0x435c28
lea esi, [edi + 0x18]
jmp 0x435c2d
mov eax, dword [edi + 8]
mov esi, dword [eax]
call fcn.004149b3
mov edi, dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x4c], edi
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
cmp edi, ebx
mov esi, eax
je 0x435c5e
push edi
call fcn.0044624a
pop ecx
cmp dword [ebp - 0x10], ebx
je 0x435c6c
push dword [ebp - 0x10]
call fcn.0044624a
pop ecx
cmp esi, ebx
jne 0x435cb8
mov esi, dword [ebp + 8]
cmp byte [esi + 0x60], 1
jne 0x435c92
push 0xffffffffffffffff
call fcn.0041c2a6
push eax
push 0x87
mov ebx, esi
call fcn.0041c119
xor esi, esi
inc esi
jmp 0x435ca8
xor eax, eax
push ebx
inc eax
mov ecx, esi
call fcn.0041da7b
mov esi, dword [ebp + 0x14]
push ebx
call fcn.00415008
xor esi, esi
or dword [ebp - 4], 0xffffffff
push dword [ebp - 0x24]
call fcn.0044624a
mov eax, esi
jmp 0x435cf1
cmp byte [ebp + 0xc], bl
je 0x435ccb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x850], eax
jmp 0x435ce3
mov esi, dword [ebp + 0x14]
push 1
call fcn.00415008
cmp dword [ebp - 0x28], ebx
je 0x435ce3
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [ebp - 4], 0xffffffff
push dword [ebp - 0x24]
call fcn.0044624a
xor eax, eax
pop ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0x10