Function at 0x43a230
Capabilities:
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
lea esp, [esp - 0x58]
push ebx
mov dword [ebp - 4], eax
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x44], 0
xor eax, eax
push fcn.0043a1e0
push ebp
push 0x414a60
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push fcn.0043a1c0
push ebp
push 0x414a60
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
test eax, eax
je 0x43a2a2
mov eax, dword [eax - 4]
add eax, 1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
seta byte [ebp - 8]
mov dword [ebp - 0x40], 0
lea eax, [ebp - 0x40]
push eax
mov edx, 0x751ae0
lea eax, [ebp - 0x24]
mov ecx, 1
call fcn.0040d060
mov dword [ebp - 0x40], 0x104
lea eax, [ebp - 0x40]
push eax
mov edx, 0x751ae0
lea eax, [ebp - 0x24]
mov ecx, 1
call fcn.0040d060
mov dword [ebp - 0x2c], 0x8000
lea eax, [ebp - 0x44]
call fcn.00403d00
push 0
mov eax, 0x751a94
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x54]
push eax
mov eax, dword [0x721b80]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x721b80]
mov eax, 0x747e58
call fcn.004268c0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x4c], eax
mov eax, 0x751aa4
mov dword [ebp - 0x48], eax
lea edx, [ebp - 0x50]
mov ecx, 2
lea eax, [ebp - 0x44]
call fcn.00408f50
mov eax, dword [ebp - 0x44]
lea edx, [ebp - 0x3c]
call fcn.0046eb30
lea eax, [ebp - 0x28]
push eax
push 0
push dword [ebp - 0x2c]
lea eax, [ebp - 0x3c]
push eax
call sub.shell32.dll_SHGetKnownFolderPath
lea ecx, [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov dx, 0
call fcn.0040b430
mov eax, dword [ebp - 0x14]
mov dl, 1
call fcn.004661a0
test al, al
je 0x43a37a
jmp 0x43a388
mov eax, dword [ebp - 0x14]
call fcn.00466000
mov byte [ebp - 8], al
lea esi, [esi]
push 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
mov eax, 0x751ab4
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x54]
push eax
mov eax, dword [str.sF5LG]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [str.sF5LG]
mov eax, 0x747e58
call fcn.004268c0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x48], eax
lea edx, [ebp - 0x50]
lea eax, [ebp - 0x14]
mov ecx, 2
call fcn.00408f50
push 0xff00
mov ecx, dword [ebp - 0x14]
mov edx, 1
mov eax, 0x755608
call fcn.004547a0
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 8]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
call fcn.00454320
mov eax, dword [ebp - 0x20]
call fcn.0040d890
mov eax, dword [ebp - 0x14]
mov dl, 1
call fcn.00466140
mov byte [ebp - 8], al
cmp byte [ebp - 8], 0
jne 0x43a419
jmp 0x43a4fc
mov edx, dword [ebp - 0x14]
test edx, edx
je 0x43a423
mov edx, dword [edx - 4]
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x43a42f
mov eax, 0x7a22f0
lea ecx, [ebp - 0x58]
call fcn.0044d080
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 0x18]
call fcn.0040b370
mov eax, 0x3c
call fcn.00410220
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0x3c
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
lea eax, [ebp - 0x44]
push eax
mov eax, dword [0x721d20]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x721d20]
mov eax, 0x747e58
call fcn.004268c0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x40], eax
lea ecx, [ebp - 0x58]
mov edx, dword [ebp - 0x40]
test edx, edx
je 0x43a499
mov edx, dword [edx - 4]
mov eax, dword [ebp - 0x40]
test eax, eax
jne 0x43a4a5
mov eax, 0x7a22f0
call fcn.0044d080
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 0x1c]
call fcn.0040b370
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x43a4c1
mov eax, 0x7a22f0
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x43a4d0
mov eax, 0x7a22f0
mov dword [ebx + 0x10], eax
mov eax, 0x7a22f0
mov dword [ebx + 0x14], eax
mov eax, 0x7a22f0
mov dword [ebx + 0x18], eax
mov dword [ebx + 0x1c], 1
mov dword [ebx + 0x20], 0
push dword [ebp - 0xc]
call sub.shell32.dll_ShellExecuteExW
lea esi, [esi]
xor eax, eax
pop edx
add esp, 0xc
mov dword fs:[eax], edx
mov eax, ebp
call fcn.0043a1c0