Function at 0x43f560
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b29cd
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0x4ceb90]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x18]
push ecx
mov ecx, 0x46baea0
call fcn.00473430
movzx edx, al
test edx, edx
je case.default.0x43f3ac
push 0xffffffffffffffff
mov ecx, 0x46baea0
call fcn.00472b90
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], 0x100
jg 0x43f3b3
cmp dword [ebp - 0x14], 0x100
je 0x43f5d9
cmp dword [ebp - 0x14], 7
ja case.default.0x43f3ac
mov edx, dword [ebp - 0x14]
jmp dword [edx*4 + 0x43f618]
cmp dword [ebp - 0x14], 0x101
je 0x43f5e3
jmp case.default.0x43f3ac
mov ecx, 0x47c6ba8
call fcn.00465580
mov ecx, 0x47c64f8
call fcn.0041caf0
push 1
mov ecx, 0x47c64f8
call fcn.00463740
push 0x65
mov ecx, 0x484d928
call fcn.00446300
push 0x64
mov ecx, 0x484d928
call fcn.00446300
push 0x6e
mov ecx, 0x484d928
call fcn.00446300
push 0x66
mov ecx, 0x484d928
call fcn.00446300
push 0x67
mov ecx, 0x484d928
call fcn.00446300
push 0x68
mov ecx, 0x484d928
call fcn.00446300
push 0x70
mov ecx, 0x484d928
call fcn.00446300
mov ecx, 0x5670278
call fcn.00448f70
mov ecx, 0x46bae8c
call fcn.0046a530
mov ecx, 0x47c64f8
call fcn.004622f0
push 0
mov ecx, 0x6902580
call fcn.00475e40
mov ecx, 0x6902580
call fcn.0048ab10
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x14], 3
push 0
push 1
push 8
mov ecx, 0x47c64f8
call fcn.0045fb60
push 8
mov ecx, 0x47c64f8
call fcn.004113d0
mov dword [ebp - 0x18], eax
push 0
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x1c]
call eax
mov ecx, 0x4d0938
call fcn.0046ad20
mov ecx, 0x56703e0
call fcn.0045d250
mov ecx, dword [ebp - 0x10]
call fcn.0043f9d0
jmp case.default.0x43f3ac
mov ecx, 0x47c64f8
call fcn.0041caf0
push 1
mov ecx, 0x47c64f8
call fcn.00463740
mov ecx, dword [ebp - 0x10]
call fcn.0043fa40
jmp case.default.0x43f3ac
mov ecx, 0x47c64f8
call fcn.0041caf0
push 1
mov ecx, 0x47c64f8
call fcn.00463740
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x14], 3
push 0
push 1
push 7
mov ecx, 0x47c64f8
call fcn.0045fb60
mov ecx, dword [ebp - 0x10]
call fcn.0043f9d0
jmp case.default.0x43f3ac
mov ecx, dword [ebp - 0x10]
call fcn.0043fa70
jmp case.default.0x43f3ac
mov ecx, dword [ebp - 0x10]
call fcn.0043faa0
jmp case.default.0x43f3ac
push 2
push 2
mov ecx, dword [ebp - 0x10]
call fcn.0041a930
movzx edx, al
test edx, edx
jne 0x43f55b
mov ecx, dword [ebp - 0x10]
call fcn.0043fa00
jmp case.default.0x43f3ac
lea ecx, [ebp - 0x28]
call fcn.00491b40
mov dword [ebp - 4], 0
mov ecx, 0x47c64f8
call fcn.004113b0
push eax
lea ecx, [ebp - 0x28]
call fcn.00491c00
push 0x4c3418
lea ecx, [ebp - 0x28]
call fcn.00491c50
push 1
push 0
push 0
lea ecx, [ebp - 0x28]
call fcn.00411210
push eax
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00491b80
jmp case.default.0x43f3ac
mov ecx, 0x47c64f8
call fcn.0041caf0
push 1
mov ecx, 0x47c64f8
call fcn.00463740
mov ecx, dword [ebp - 0x10]
call fcn.0043fad0
jmp case.default.0x43f3ac
mov ecx, dword [ebp - 0x10]
call fcn.0043fa00
jmp case.default.0x43f3ac
mov ecx, 0x47c6b9c
call fcn.00415f10
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x14], 1
mov ecx, dword [ebp - 0x10]
call fcn.00415d30
mov ecx, 0x4fceaf8
call fcn.00458a70
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret