Function at 0x436070
Capabilities:
Create process on windows

Disassembly:
push 0xffffffffffffffff
push 0x4a7a3d
mov eax, dword fs:[0]
push eax
sub esp, 0x240
mov eax, dword [0x4ccecc]
xor eax, esp
mov dword [esp + 0x238], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4ccecc]
xor eax, esp
push eax
lea eax, [esp + 0x254]
mov dword fs:[0], eax
mov ebx, ecx
mov eax, dword [esp + 0x264]
push str.MainWnd
push ecx
mov dword [esp + 0x20], eax
call fcn.0041e8f0
add esp, 4
push eax
call fcn.0041f380
push 0xc6
xor ebp, ebp
lea edx, [esp + 0x18a]
xor ecx, ecx
push ebp
push edx
mov dword [esp + 0x28], eax
mov word [esp + 0x190], cx
call fcn.00455040
add esp, 0xc
lea eax, [esp + 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx ecx, word [esp + 0x4c]
movzx edx, word [esp + 0x4a]
movzx eax, word [esp + 0x48]
push ecx
movzx ecx, word [esp + 0x4a]
push edx
movzx edx, word [esp + 0x4a]
push eax
movzx eax, word [esp + 0x4c]
push ecx
push edx
push eax
push str._04d__02d__02d__02d__02d__02d
lea ecx, [esp + 0x1a0]
push 0x104
push ecx
call fcn.004510dd
add esp, 0x24
xor edx, edx
mov edi, 7
push 5
mov eax, str..html
lea esi, [esp + 0x28]
mov dword [esp + 0x40], edi
mov dword [esp + 0x3c], ebp
mov word [esp + 0x2c], dx
call fcn.004093f0
mov dword [esp + 0x25c], ebp
xor eax, eax
mov word [esp + 0x150], ax
lea eax, [esp + 0x184]
mov dword [esp + 0x164], edi
mov dword [esp + 0x160], ebp
lea edx, [eax + 2]
jmp 0x436190
mov cx, word [eax]
add eax, 2
cmp cx, bp
jne 0x436190
sub eax, edx
sar eax, 1
push eax
lea eax, [esp + 0x188]
lea esi, [esp + 0x150]
call fcn.004093f0
mov edx, dword [esp + 0x18]
mov ecx, esi
push ecx
add edx, 0x30
push edx
lea edi, [esp + 0x58]
mov byte [esp + 0x264], 1
call fcn.0040b9b0
lea ecx, [esp + 0x2c]
push ecx
push eax
lea edi, [esp + 0x178]
mov byte [esp + 0x26c], 2
call fcn.0040b9b0
add esp, 0x10
cmp dword [esp + 0x68], 8
jb 0x436200
mov edx, dword [esp + 0x54]
push edx
call fcn.00442977
add esp, 4
mov edi, 7
xor eax, eax
mov dword [esp + 0x68], edi
mov dword [esp + 0x64], ebp
mov word [esp + 0x54], ax
mov esi, 8
cmp dword [esp + 0x164], esi
jb 0x436232
mov ecx, dword [esp + 0x150]
push ecx
call fcn.00442977
add esp, 4
xor edx, edx
mov dword [esp + 0x164], edi
mov dword [esp + 0x160], ebp
mov word [esp + 0x150], dx
cmp dword [esp + 0x3c], esi
jb 0x43625d
mov eax, dword [esp + 0x28]
push eax
call fcn.00442977
add esp, 4
xor ecx, ecx
mov dword [esp + 0x12c], edi
mov dword [esp + 0x128], ebp
mov word [esp + 0x118], cx
mov byte [esp + 0x25c], 7
mov ecx, str.byte_backup.html
mov eax, ebx
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4362aa
cmp dx, bp
je 0x4362a6
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4362aa
add eax, 4
add ecx, 4
cmp dx, bp
jne 0x436284
xor eax, eax
jmp 0x4362af
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebp
jne 0x4362c2
mov ebx, dword [esp + 0x18]
lea eax, [ebx + 0x188]
jmp 0x436390
mov ecx, str.iso_extractor.html
mov eax, ebx
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4362f6
cmp dx, bp
je 0x4362f2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4362f6
add eax, 4
add ecx, 4
cmp dx, bp
jne 0x4362d0
xor eax, eax
jmp 0x4362fb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebp
jne 0x43630e
mov ebx, dword [esp + 0x18]
lea eax, [ebx + 0x1a4]
jmp 0x436390
mov ecx, str.iso_creator.html
mov eax, ebx
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x43633b
cmp dx, bp
je 0x436337
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x43633b
add eax, 4
add ecx, 4
cmp dx, bp
jne 0x436315
xor eax, eax
jmp 0x436340
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebp
jne 0x436350
mov ebx, dword [esp + 0x18]
lea eax, [ebx + 0x1c0]
jmp 0x436390
mov ecx, str.iso_burner.html
mov eax, ebx
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x43637d
cmp dx, bp
je 0x436379
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x43637d
add eax, 4
add ecx, 4
cmp dx, bp
jne 0x436357
xor eax, eax
jmp 0x436382
sbb eax, eax
sbb eax, 0xffffffff
mov ebx, dword [esp + 0x18]
cmp eax, ebp
jne 0x43639f
lea eax, [ebx + 0x1dc]
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x11c]
call fcn.004083f0
call fcn.00435c90
call fcn.00437850
test eax, eax
je 0x436455
push 0x3a0
call fcn.0044293d
add esp, 4
mov dword [esp + 0x1c], eax
mov byte [esp + 0x25c], 8
cmp eax, ebp
je 0x4363d6
push eax
call fcn.004325e0
jmp 0x4363d8
xor eax, eax
push ebp
push 0xa0
push 0x15e
push str.Invalid_Report_Theme.
push ebp
mov ecx, 2
mov ebx, eax
mov byte [esp + 0x270], 7
call fcn.00432b20
mov esi, 8
cmp dword [esp + 0x12c], esi
jb 0x43641b
mov edx, dword [esp + 0x118]
push edx
call fcn.00442977
add esp, 4
xor eax, eax
mov dword [esp + 0x12c], 7
mov dword [esp + 0x128], 0
mov word [esp + 0x118], ax
cmp dword [esp + 0x180], esi
jb 0x436fa1
mov ecx, dword [esp + 0x16c]
push ecx
jmp 0x436f99
mov eax, dword [ebx + 0x60]
cmp eax, ebp
jne 0x43657a
xor edx, edx
push edi
mov eax, 0x4ba760
lea esi, [esp + 0x28]
mov dword [esp + 0x40], edi
mov dword [esp + 0x3c], ebp
mov word [esp + 0x2c], dx
call fcn.004093f0
mov eax, esi
mov byte [esp + 0x25c], 9
mov ecx, dword [esp + 0x1c]
push eax
push ecx
call fcn.0041cec0
push 0xffffffffffffffff
xor edx, edx
push ebp
lea ecx, [esp + 0x154]
mov dword [esp + 0x16c], edi
mov dword [esp + 0x168], ebp
mov word [esp + 0x158], dx
call fcn.004083f0
mov esi, 8
mov byte [esp + 0x25c], 0xb
cmp dword [esp + 0x3c], esi
jb 0x4364da
mov eax, dword [esp + 0x28]
push eax
call fcn.00442977
add esp, 4
mov eax, dword [esp + 0x150]
xor ecx, ecx
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], ebp
mov word [esp + 0x28], cx
cmp dword [esp + 0x164], esi
jae 0x436500
lea eax, [esp + 0x150]
push str.Version
push eax
call fcn.0044ea67
add esp, 8
cmp eax, ebp
je 0x436520
add eax, 0x10
push eax
call fcn.00451368
fstp st(0)
add esp, 4
mov eax, dword [esp + 0x150]
cmp dword [esp + 0x164], esi
jae 0x436537
lea eax, [esp + 0x150]
mov ecx, eax
lea esi, [ecx + 2]
lea esp, [esp]
mov dx, word [ecx]
add ecx, 2
cmp dx, bp
jne 0x436540
sub ecx, esi
sar ecx, 1
push ecx
lea esi, [ebx + 0x4c]
call fcn.004093f0
mov byte [esp + 0x25c], 7
cmp dword [esp + 0x164], 8
jb 0x43657a
mov edx, dword [esp + 0x150]
push edx
call fcn.00442977
add esp, 4
call fcn.00418d90
test eax, eax
jne 0x436588
call fcn.00418be0
xor eax, eax
mov dword [esp + 0x110], edi
mov dword [esp + 0x10c], ebp
mov word [esp + 0xfc], ax
xor ecx, ecx
mov dword [esp + 0x148], edi
mov dword [esp + 0x144], ebp
mov word [esp + 0x134], cx
push 0x11
mov eax, str.Program_version
lea esi, [esp + 0xfc]
mov byte [esp + 0x260], 0xd
call fcn.004093f0
push 0xffffffffffffffff
push ebp
lea eax, [ebx + 0x4c]
lea ecx, [esp + 0x138]
call fcn.004083f0
cmp dword [esp + 0x110], 8
mov eax, dword [esp + 0xfc]
jae 0x4365fd
lea eax, [esp + 0xfc]
mov ebx, dword [esp + 0x10c]
push eax
xor eax, eax
lea edx, [esp + 0x118]
call fcn.0041fa00
cmp eax, 0xffffffff
je 0x436630
lea edx, [esp + 0x130]
push edx
push ebx
lea ecx, [esp + 0x11c]
push ecx
mov ebp, eax
call fcn.0043a0f0
push 0xa
mov eax, str.Computer
lea esi, [esp + 0xfc]
call fcn.004093f0
mov edi, dword [esp + 0x18]
push 0xffffffffffffffff
push 0
lea eax, [edi + 0x68]
lea ecx, [esp + 0x138]
call fcn.004083f0
cmp dword [esp + 0x110], 8
mov eax, dword [esp + 0xfc]
jae 0x436672
lea eax, [esp + 0xfc]
mov ebx, dword [esp + 0x10c]
push eax
mov eax, ebp
lea edx, [esp + 0x118]
call fcn.0041fa00
cmp eax, 0xffffffff
je 0x4366a5
lea edx, [esp + 0x130]
push edx
push ebx
lea ecx, [esp + 0x11c]
push ecx
mov ebp, eax
call fcn.0043a0f0
push 6
mov eax, str.User
lea esi, [esp + 0xfc]
call fcn.004093f0
push 0xffffffffffffffff
push 0
lea eax, [edi + 0x84]
lea ecx, [esp + 0x138]
call fcn.004083f0
cmp dword [esp + 0x110], 8
mov eax, dword [esp + 0xfc]
jae 0x4366e6
lea eax, [esp + 0xfc]
mov ebx, dword [esp + 0x10c]
push eax
mov eax, ebp
lea edx, [esp + 0x118]
call fcn.0041fa00
cmp eax, 0xffffffff
je 0x436719
lea edx, [esp + 0x130]
push edx
push ebx
lea ecx, [esp + 0x11c]
push ecx
mov ebp, eax
call fcn.0043a0f0
push 8
mov eax, str.Action
lea esi, [esp + 0xfc]
call fcn.004093f0
push 0xffffffffffffffff
push 0
lea eax, [edi + 0xa0]
lea ecx, [esp + 0x138]
call fcn.004083f0
cmp dword [esp + 0x110], 8
mov eax, dword [esp + 0xfc]
jae 0x43675a
lea eax, [esp + 0xfc]
mov ebx, dword [esp + 0x10c]
push eax
mov eax, ebp
lea edx, [esp + 0x118]
call fcn.0041fa00
cmp eax, 0xffffffff
je 0x43678d
lea edx, [esp + 0x130]
push edx
push ebx
lea ecx, [esp + 0x11c]
push ecx
mov ebp, eax
call fcn.0043a0f0
push 0xc
mov eax, str.BackupType
lea esi, [esp + 0xfc]
call fcn.004093f0
push 0xffffffffffffffff
push 0
lea eax, [edi + 0xbc]
lea ecx, [esp + 0x138]
call fcn.004083f0
cmp dword [esp + 0x110], 8
mov eax, dword [esp + 0xfc]
jae 0x4367ce
lea eax, [esp + 0xfc]
mov ebx, dword [esp + 0x10c]
push eax
mov eax, ebp
lea edx, [esp + 0x118]
call fcn.0041fa00
cmp eax, 0xffffffff
je 0x436801
lea edx, [esp + 0x130]
push edx
push ebx
lea ecx, [esp + 0x11c]
push ecx
mov ebp, eax
call fcn.0043a0f0
push 9
mov eax, str.Started
lea esi, [esp + 0xfc]
call fcn.004093f0
movzx edx, word [edi + 0xe4]
movzx eax, word [edi + 0xe2]
movzx ecx, word [edi + 0xe0]
push edx
movzx edx, word [edi + 0xde]
push eax
movzx eax, word [edi + 0xda]
push ecx
movzx ecx, word [edi + 0xd8]
push edx
push eax
push ecx
push str._04d__02d__02d__02d:_02d:_02d
lea edx, [esp + 0x1a0]
push 0x104
push edx
call fcn.004510dd
lea eax, [esp + 0x1a8]
add esp, 0x24
lea edx, [eax + 2]
jmp 0x436870
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x436870
sub eax, edx
sar eax, 1
push eax
lea eax, [esp + 0x188]
lea esi, [esp + 0x134]
call fcn.004093f0
cmp dword [esp + 0x110], 8
mov eax, dword [esp + 0xfc]
jae 0x4368ab
lea eax, [esp + 0xfc]
mov ebx, dword [esp + 0x10c]
push eax
mov eax, ebp
lea edx, [esp + 0x118]
call fcn.0041fa00
cmp eax, 0xffffffff
je 0x4368de
lea ecx, [esp + 0x130]
push ecx
push ebx
lea edx, [esp + 0x11c]
push edx
mov ebp, eax
call fcn.0043a0f0
push 0xa
mov eax, str.Finished
lea esi, [esp + 0xfc]
call fcn.004093f0
movzx eax, word [edi + 0xf4]
movzx ecx, word [edi + 0xf2]
movzx edx, word [edi + 0xf0]
push eax
movzx eax, word [edi + 0xee]
push ecx
movzx ecx, word [edi + 0xea]
push edx
movzx edx, word [edi + 0xe8]
push eax
push ecx
push edx
push str._04d__02d__02d__02d:_02d:_02d
lea eax, [esp + 0x1a0]
push 0x104
push eax
call fcn.004510dd
lea eax, [esp + 0x1a8]
add esp, 0x24
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x436945
sub eax, edx
sar eax, 1
push eax
lea eax, [esp + 0x188]
lea esi, [esp + 0x134]
call fcn.004093f0
cmp dword [esp + 0x110], 8
mov eax, dword [esp + 0xfc]
jae 0x436980
lea eax, [esp + 0xfc]
mov ebx, dword [esp + 0x10c]
push eax
mov eax, ebp
lea edx, [esp + 0x118]
call fcn.0041fa00
cmp eax, 0xffffffff
je 0x4369b3
lea ecx, [esp + 0x130]
push ecx
push ebx
lea edx, [esp + 0x11c]
push edx
mov ebp, eax
call fcn.0043a0f0
push 7
mov eax, str.State
lea esi, [esp + 0xfc]
call fcn.004093f0
push 0xffffffffffffffff
push 0
lea eax, [edi + 0xf8]
lea ecx, [esp + 0x138]
call fcn.004083f0
cmp dword [esp + 0x110], 8
mov eax, dword [esp + 0xfc]
jae 0x4369f4
lea eax, [esp + 0xfc]
mov ebx, dword [esp + 0x10c]
push eax
mov eax, ebp
lea edx, [esp + 0x118]
call fcn.0041fa00
cmp eax, 0xffffffff
je 0x436a27
lea ecx, [esp + 0x130]
push ecx
push ebx
lea edx, [esp + 0x11c]
push edx
mov ebp, eax
call fcn.0043a0f0
push 8
mov eax, str.Errors
lea esi, [esp + 0xfc]
call fcn.004093f0
push 0xffffffffffffffff
push 0
lea eax, [edi + 0x114]
lea ecx, [esp + 0x138]
call fcn.004083f0
cmp dword [esp + 0x110], 8
mov eax, dword [esp + 0xfc]
jae 0x436a68
lea eax, [esp + 0xfc]
mov ebx, dword [esp + 0x10c]
push eax
mov eax, ebp
lea edx, [esp + 0x118]
call fcn.0041fa00
cmp eax, 0xffffffff
je 0x436a9b
lea ecx, [esp + 0x130]
push ecx
push ebx
lea edx, [esp + 0x11c]
push edx
mov ebp, eax
call fcn.0043a0f0
push 0xb
mov eax, str.InfoTitle
lea esi, [esp + 0xfc]
call fcn.004093f0
push 0xffffffffffffffff
push 0
lea eax, [edi + 0x14c]
lea ecx, [esp + 0x138]
call fcn.004083f0
cmp dword [esp + 0x110], 8
mov eax, dword [esp + 0xfc]
jae 0x436adc
lea eax, [esp + 0xfc]
mov ebx, dword [esp + 0x10c]
push eax
mov eax, ebp
lea edx, [esp + 0x118]
call fcn.0041fa00
cmp eax, 0xffffffff
je 0x436b0f
lea ecx, [esp + 0x130]
push ecx
push ebx
lea edx, [esp + 0x11c]
push edx
mov ebp, eax
call fcn.0043a0f0
push 0xd
mov eax, str.ObjectTitle
lea esi, [esp + 0xfc]
call fcn.004093f0
push 0xffffffffffffffff
push 0
lea eax, [edi + 0x168]
lea ecx, [esp + 0x138]
call fcn.004083f0
cmp dword [esp + 0x110], 8
mov eax, dword [esp + 0xfc]
jae 0x436b50
lea eax, [esp + 0xfc]
mov ebx, dword [esp + 0x10c]
push eax
mov eax, ebp
lea edx, [esp + 0x118]
call fcn.0041fa00
cmp eax, 0xffffffff
je 0x436b83
lea ecx, [esp + 0x130]
push ecx
push ebx
lea edx, [esp + 0x11c]
push edx
mov ebp, eax
call fcn.0043a0f0
push 8
mov eax, str.Object
lea esi, [esp + 0xfc]
call fcn.004093f0
lea edi, [esp + 0x130]
call fcn.00438250
mov eax, dword [esp + 0x18]
mov esi, dword [eax + 0xc]
cmp esi, dword [eax + 0x10]
jbe 0x436bb3
call fcn.0044ea2b
mov edi, dword [esp + 0x18]
mov ebx, dword [edi]
mov dword [esp + 0x20], esi
lea ecx, [ecx]
mov esi, dword [edi + 0x10]
cmp dword [edi + 0xc], esi
jbe 0x436bcd
call fcn.0044ea2b
mov eax, dword [edi]
test ebx, ebx
je 0x436bd7
cmp ebx, eax
je 0x436bdc
call fcn.0044ea2b
cmp dword [esp + 0x20], esi
je 0x436cdb
xor eax, eax
mov word [esp + 0x28], ax
push 6
mov eax, str._br___n
lea esi, [esp + 0x28]
mov dword [esp + 0x40], 7
mov dword [esp + 0x3c], 0
call fcn.004093f0
mov byte [esp + 0x25c], 0xe
test ebx, ebx
jne 0x436cd0
call fcn.0044ea2b
xor eax, eax
mov ecx, dword [esp + 0x20]
cmp ecx, dword [eax + 0x10]
jb 0x436c32
call fcn.0044ea2b
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x24]
push edx
push eax
lea edi, [esp + 0x58]
call fcn.0040b9b0
add esp, 8
push 0
push eax
or eax, 0xffffffff
lea esi, [esp + 0x138]
mov byte [esp + 0x264], 0xf
call fcn.00409250
cmp dword [esp + 0x68], 8
jb 0x436c76
mov ecx, dword [esp + 0x54]
push ecx
call fcn.00442977
add esp, 4
xor edx, edx
mov byte [esp + 0x25c], 0xd
cmp dword [esp + 0x3c], 8
mov dword [esp + 0x68], 7
mov dword [esp + 0x64], 0
mov word [esp + 0x54], dx
jb 0x436ca9
mov eax, dword [esp + 0x28]
push eax
call fcn.00442977
add esp, 4
test ebx, ebx
jne 0x436cd7
call fcn.0044ea2b
xor eax, eax
mov ecx, dword [esp + 0x20]
cmp ecx, dword [eax + 0x10]
jb 0x436cc2
call fcn.0044ea2b
add dword [esp + 0x20], 0x1c
mov edi, dword [esp + 0x18]
jmp 0x436bc0
mov eax, dword [ebx]
jmp 0x436c24
mov eax, dword [ebx]
jmp 0x436cb4
cmp dword [esp + 0x110], 8
mov eax, dword [esp + 0xfc]
jae 0x436cf3
lea eax, [esp + 0xfc]
mov ebx, dword [esp + 0x10c]
push eax
mov eax, ebp
lea edx, [esp + 0x118]
call fcn.0041fa00
cmp eax, 0xffffffff
je 0x436d26
lea edx, [esp + 0x130]
push edx
push ebx
lea ecx, [esp + 0x11c]
push ecx
mov ebp, eax
call fcn.0043a0f0
push 0xe
mov eax, str.FileLocation
lea esi, [esp + 0xfc]
call fcn.004093f0
push 0xffffffffffffffff
push 0
lea eax, [edi + 0x130]
lea ecx, [esp + 0x138]
call fcn.004083f0
cmp dword [esp + 0x110], 8
mov eax, dword [esp + 0xfc]
jae 0x436d67
lea eax, [esp + 0xfc]
mov ebx, dword [esp + 0x10c]
push eax
mov eax, ebp
lea edx, [esp + 0x118]
call fcn.0041fa00
cmp eax, 0xffffffff
je 0x436d98
lea edx, [esp + 0x130]
push edx
push ebx
lea ecx, [esp + 0x11c]
push ecx
call fcn.0043a0f0
mov eax, dword [esp + 0x16c]
mov ebp, 8
cmp dword [esp + 0x180], ebp
jae 0x436db4
lea eax, [esp + 0x16c]
push eax
call fcn.00441230
add esp, 4
mov esi, eax
push esi
lea edx, [esp + 0x70]
push edx
call fcn.004382f0
xor ebx, ebx
mov byte [esp + 0x25c], 0x10
cmp esi, ebx
je 0x436de1
push esi
call fcn.00442977
add esp, 4
mov eax, dword [esp + 0x118]
cmp dword [esp + 0x12c], ebp
jae 0x436df8
lea eax, [esp + 0x118]
push eax
call fcn.00417970
add esp, 4
mov esi, eax
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], ebx
mov byte [esp + 0x28], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x436e16
sub eax, edx
push eax
push esi
lea ecx, [esp + 0x2c]
call fcn.004090e0
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x70]
push ecx
mov byte [esp + 0x264], 0x11
call fcn.0043b2b0
add esp, 8
mov byte [esp + 0x25c], 0x10
cmp dword [esp + 0x3c], 0x10
jb 0x436e60
mov edx, dword [esp + 0x28]
push edx
call fcn.00442977
add esp, 4
cmp esi, ebx
je 0x436e6d
push esi
call fcn.00442977
add esp, 4
mov esi, dword [esp + 0x18]
mov edi, dword [esi + 0x24]
add esi, 0x18
cmp edi, dword [esi + 0x10]
jbe 0x436e81
call fcn.0044ea2b
mov eax, dword [esi]
push edi
push eax
lea eax, [esp + 0x170]
push eax
lea ecx, [esp + 0x28]
push ecx
mov eax, esi
call fcn.00408680
mov eax, dword [esp + 0x16c]
cmp dword [esp + 0x180], ebp
jae 0x436eb0
lea eax, [esp + 0x16c]
push 1
push ebx
push ebx
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [esp + 0xc0]
mov byte [esp + 0x25c], 0xd
call fcn.00438410
lea edx, [esp + 0xc0]
push edx
mov dword [esp + 0xc4], vtable.std::ios_base.0
call fcn.004687a9
add esp, 4
cmp dword [esp + 0x148], ebp
jb 0x436f09
mov eax, dword [esp + 0x134]
push eax
call fcn.00442977
add esp, 4
xor ecx, ecx
mov esi, 7
mov dword [esp + 0x148], esi
mov dword [esp + 0x144], ebx
mov word [esp + 0x134], cx
cmp dword [esp + 0x110], ebp
jb 0x436f3f
mov edx, dword [esp + 0xfc]
push edx
call fcn.00442977
add esp, 4
xor eax, eax
mov dword [esp + 0x110], esi
mov dword [esp + 0x10c], ebx
mov word [esp + 0xfc], ax
cmp dword [esp + 0x12c], ebp
jb 0x436f70
mov ecx, dword [esp + 0x118]
push ecx
call fcn.00442977
add esp, 4
xor edx, edx
mov dword [esp + 0x12c], esi
mov dword [esp + 0x128], ebx
mov word [esp + 0x118], dx
cmp dword [esp + 0x180], ebp
jb 0x436fa1
mov eax, dword [esp + 0x16c]
push eax
call fcn.00442977
add esp, 4
mov ecx, dword [esp + 0x254]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x238]
xor ecx, esp
call fcn.0044e200
add esp, 0x24c
ret 4