Function at 0x434830
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x7c
mov eax, dword [ebp + 8]
test eax, eax
je 0x434a20
cmp eax, 1
jne 0x434a12
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp + 0xc]
lea esi, [ebp - 0x44]
mov ecx, esi
mov eax, dword [eax + 4]
mov dword [ebp - 0x5c], eax
mov eax, dword [edx + 8]
mov edx, dword [eax + 0x190]
mov dword [esp], 0x5d9ac8
mov dword [ebp - 0x38], 0x80000000
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x60], edx
call method.QString.QString_char_const_
mov edx, dword [ebp - 0x60]
lea ebx, [ebp - 0x30]
lea edi, [ebp - 0x40]
sub esp, 4
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov ecx, ebx
mov dword [esp], edx
call dword [method.QSettings.value_QString_const__QVariant_const__const]
sub esp, 0xc
lea ecx, [ebp - 0x4c]
mov dword [esp], ebx
call dword [method.QVariant.toString___const]
mov eax, dword [method.QVariant.QVariant__]
sub esp, 4
mov ecx, ebx
mov dword [ebp - 0x60], eax
call eax
mov ecx, esi
call method.QString.QString__
mov ecx, edi
mov eax, dword [ebp - 0x60]
call eax
mov dword [esp], str._explore
mov ecx, edi
call method.QString.QString_char_const_
mov eax, dword [ebp - 0x5c]
sub esp, 4
mov ecx, ebx
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov dword [esp + 4], edi
mov dword [esp], eax
call dword [method.QString.split_QString_const__QString::SplitBehavior__Qt::CaseSensitivity__const]
mov eax, dword [ebp - 0x30]
sub esp, 0x10
mov edx, dword [eax + 8]
mov dword [esp + 8], str._explore
mov dword [esp], esi
lea eax, [eax + edx*4 + 0x10]
lea edx, [ebp - 0x4c]
mov dword [esp + 4], edx
mov dword [ebp - 0x5c], eax
call sym.operator_QString_const__char_const_
mov eax, dword [ebp - 0x5c]
mov dword [esp + 4], esi
mov dword [esp + 8], eax
lea eax, [ebp - 0x48]
mov dword [esp], eax
call sym.operator_QString_const__QString_const_
mov ecx, esi
lea esi, [ebp - 0x28]
call method.QString.QString__
mov ecx, ebx
call method.QList_QString_.QList__
mov ecx, edi
call method.QString.QString__
xor eax, eax
mov dword [ebp - 0x2c], 0
mov dword [esp + 4], 0
mov word [ebp - 0x28], ax
mov eax, dword [ebp - 0x48]
mov ecx, ebx
mov dword [ebp - 0x30], esi
mov eax, dword [eax + 4]
mov dword [esp], eax
call sym.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___::resize_unsigned_int__wchar_t_
mov eax, dword [ebp - 0x48]
sub esp, 8
mov edi, dword [eax + 4]
add eax, dword [eax + 0xc]
lea edx, [edi + edi]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x30]
mov dword [esp + 8], edx
mov dword [esp], eax
call sym._memcpy
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], 0
mov ecx, ebx
mov eax, dword [eax + 4]
mov dword [esp], eax
call sym.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___::resize_unsigned_int__wchar_t_
mov eax, dword [ebp - 0x30]
sub esp, 8
mov dword [esp + 0x14], 5
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x5d9ad6
mov dword [esp + 8], eax
mov dword [esp], 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov eax, dword [ebp - 0x30]
sub esp, 0x18
cmp eax, esi
je 0x434a02
mov dword [esp], eax
call sym.operator_delete_void_
lea ecx, [ebp - 0x48]
call method.QString.QString__
lea ecx, [ebp - 0x4c]
call method.QString.QString__
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov edx, dword [ebp + 0xc]
test edx, edx
je 0x434a12
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call sym.operator_delete_void_
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret