Function at 0x434804
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x208
mov eax, dword [ebp + 0x14]
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, ecx
push edi
xor ecx, ecx
push 1
cmp ebx, 0xad9c
mov dword [eax], ecx
pop edi
jne 0x434842
cmp dword [0x48fd44], ecx
jne 0x434b7f
mov ecx, esi
mov dword [0x48fd44], edi
call fcn.00433526
xor ecx, ecx
cmp ebx, 0xb408
jne 0x434874
xor eax, eax
cmp dword [0x48f528], ecx
push ecx
sete al
push eax
mov dword [0x48f528], eax
push 0x48f530
push dword [0x491c1c]
call fcn.00445c56
add esp, 0x10
jmp 0x434b7f
cmp ebx, 0x85b7
jne 0x434895
xor eax, eax
cmp dword [0x491b00], ecx
push ecx
sete al
push eax
mov dword [0x491b00], eax
push 0x491b08
jmp 0x434861
cmp ebx, 0xb37c
jne 0x434900
call fcn.00405d9b
test eax, eax
jne 0x4348f3
lea eax, [ebp - 0x208]
push 0x104
push eax
push dword [0x492fe8]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x481c20
lea ecx, [ebp + 0x14]
call fcn.0040811c
push 5
push 0
push dword [ebp + 0x14]
lea eax, [ebp - 0x208]
push eax
push 0x47eea8
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp + 0x14]
call fcn.0040139c
jmp 0x434b7f
push 0
call fcn.0042e5fc
pop ecx
jmp 0x434b7f
cmp ebx, 0xb37d
jne 0x434948
push 0x491d58
lea ecx, [ebp + 0x14]
call fcn.00401356
xor esi, esi
push esi
push dword [ebp + 0x14]
call fcn.0046a0c9
pop ecx
pop ecx
push esi
push dword [ebp + 0x14]
test eax, eax
jne 0x43493c
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call fcn.00469f83
add esp, 0xc
jmp 0x434943
call fcn.0046a066
pop ecx
pop ecx
lea ecx, [ebp + 0x14]
jmp 0x4348e9
cmp ebx, 0xb31d
jne 0x43497a
xor eax, eax
cmp dword [0x48f804], ecx
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x48f804], eax
push str.close_ask
call fcn.0040811c
mov ecx, esi
call fcn.0043528b
jmp 0x434b7f
cmp ebx, 0xb3ed
jne 0x43499d
xor eax, eax
cmp dword [0x481998], ecx
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x481998], eax
push 0x482230
jmp 0x434969
cmp ebx, 0xb336
jne 0x4349db
lea eax, [esi + 0x174]
xor edx, edx
cmp dword [eax], ecx
sete dl
mov ecx, edx
push ecx
push ecx
mov dword [eax], ecx
mov ecx, esp
push 0x481b28
call fcn.0040811c
mov ecx, esi
call fcn.0043528b
lea ecx, [esi + 0x148]
call fcn.0040e1d1
jmp 0x434b7f
cmp ebx, 0x8020
jne 0x434a1b
push 2
call fcn.0041f33e
xor ecx, ecx
test eax, eax
sete cl
push ecx
call fcn.0041f33e
push 2
call fcn.0041f33e
add esp, 0xc
neg eax
sbb eax, eax
and eax, 8
push eax
push ebx
push dword [esi + 0x3a4]
call dword [sym.imp.USER32.dll_CheckMenuItem]
jmp 0x434b7f
cmp ebx, 0x84e6
jne 0x434a2c
mov dword [esi + 0x218], ecx
push ecx
jmp 0x434a3b
cmp ebx, 0x84e7
jne 0x434a62
mov dword [esi + 0x218], edi
push edi
push ecx
mov ecx, esp
push str.adresbar_style
call fcn.0040811c
mov ecx, esi
call fcn.0043528b
push 0
push dword [esi + 0x218]
call fcn.0040e514
pop ecx
jmp 0x4348fa
cmp ebx, 0x80b1
jb 0x434abd
cmp ebx, 0x80b4
ja 0x434abd
lea eax, [ebx - 0x80b1]
push eax
push ecx
mov ecx, esp
push 0x480448
mov dword [0x481990], eax
call fcn.0040811c
mov ecx, esi
call fcn.0043528b
cmp ebx, 0x80b3
jne 0x434b7a
push 0
push ecx
mov ecx, esp
push str.WinRCcur_MP
call fcn.004013c8
push dword [esi + 4]
call fcn.0042d879
add esp, 0xc
jmp 0x434b7a
cmp ebx, 0xb31c
jne 0x434ade
call fcn.00405d9b
test eax, eax
je 0x434b7f
mov ecx, esi
call fcn.004358ad
jmp 0x434b7a
cmp ebx, 0xbd74
je 0x434b7f
cmp ebx, 0xbd75
jne 0x434afc
push ecx
mov ecx, esp
push 0x488b98
jmp 0x434b6d
cmp ebx, 0xbd77
jne 0x434b5d
lea eax, [ebp - 0x208]
push 0x104
push eax
push dword [0x492fe8]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x208]
lea ecx, [ebp + 0xc]
push eax
call fcn.0040811c
push 5
push 0
push dword [ebp + 0xc]
push str.explorer.exe
push str.open
push dword [esi + 4]
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0x3333
call dword [sym.imp.USER32.dll_PostQuitMessage]
mov eax, dword [ebp + 0x14]
lea ecx, [ebp + 0xc]
mov dword [eax], edi
jmp 0x4348e9
cmp ebx, 0xbd76
jne 0x434b7f
push ecx
mov ecx, esp
push str.ENABLE_PRIV
call fcn.004013c8
push edi
call fcn.004321e7
pop ecx
pop ecx
mov eax, dword [ebp + 0x14]
mov dword [eax], edi
pop edi
pop esi
xor eax, eax
pop ebx
leave
ret 0x10