Function at 0x43c9a0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4befe3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
push esi
mov esi, dword [ebp + 8]
mov eax, dword [esi + 0x10]
mov ecx, dword [eax]
push edi
xor edi, edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x2c], edi
mov byte [ebp - 0xd], 0
mov dword [ebp - 0x28], 1
cmp ecx, 2
je 0x43c9e9
cmp ecx, 3
jne 0x43ce66
mov ecx, dword [ebp + 0xc]
mov eax, dword [eax + 4]
mov dword [ebp - 0x18], eax
cmp ecx, edi
je 0x43c9fd
call fcn.00476a20
jmp 0x43c9ff
xor eax, eax
push ebx
push eax
lea ecx, [ebp - 0x24]
call fcn.004a4840
mov eax, dword [esi + 0xc]
mov dword [ebp - 4], edi
cmp eax, 1
jb 0x43ca5c
mov ecx, dword [esi + 0x10]
mov edx, dword [ecx + 8]
cmp edx, 2
je 0x43ca24
cmp edx, 3
jne 0x43ca5c
mov edi, dword [ecx + 0xc]
mov dword [ebp - 0x14], edi
cmp eax, 2
jb 0x43ca61
mov eax, dword [ecx + 0x10]
cmp eax, 2
je 0x43ca3c
cmp eax, 3
jne 0x43ca61
mov ebx, dword [ecx + 0x14]
lea ecx, [ebp - 0x20]
push ecx
push 3
mov ecx, esi
mov dword [ebp - 0x1c], ebx
call fcn.0043b1a0
test al, al
jne 0x43ca68
mov dword [ebp - 0x20], 0
jmp 0x43ca80
mov dword [ebp - 0x14], edi
jmp 0x43ca9f
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
jmp 0x43ca80
lea edx, [ebp - 0x28]
push edx
push 4
mov ecx, esi
call fcn.0043b160
test al, al
jne 0x43ca80
mov dword [ebp - 0x28], 1
test edi, edi
je 0x43ca91
cmp word [edi], 0
jne 0x43cb67
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x43ca9f
cmp word [ebx], 0
jne 0x43cb67
cmp dword [ebp + 0xc], 0
je 0x43cb67
cmp dword [ebp - 0x18], 0
je 0x43cb40
mov eax, dword [ebp - 0x18]
mov edx, 0xb
mov ecx, str.new_console
mov si, word [eax]
cmp si, word [ecx]
jne 0x43cad5
add eax, 2
add ecx, 2
sub edx, 1
jne 0x43cac0
jmp 0x43cae5
movzx eax, word [eax]
cmp ax, word [ecx]
sbb eax, eax
and eax, 0xfffffffe
add eax, 1
jne 0x43cb40
mov ecx, dword [ebp - 0x18]
push 0
push 0x4c2ee0
push ecx
push 0x4d353c
call fcn.004413d0
mov ecx, dword [ebp + 0xc]
add esp, 0x10
push 0
mov esi, eax
push esi
push 1
call fcn.00484270
mov bl, al
test esi, esi
je 0x43cb1b
push esi
call fcn.00441300
add esp, 4
test bl, bl
je 0x43cb40
push 0x4cb448
call fcn.00441380
add esp, 4
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 0xffffffff
call fcn.004a4770
jmp 0x43ce65
mov ecx, dword [ebp + 0xc]
call fcn.004786d0
test eax, eax
je 0x43cb67
cmp word [eax], 0
je 0x43cb67
push eax
call fcn.00441380
mov edi, eax
add esp, 4
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x14], edi
mov byte [ebp - 0xd], 1
test edi, edi
jne 0x43cb84
push 0x4c1318
call fcn.00441380
add esp, 4
mov edi, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x14], edi
test eax, eax
je 0x43cb8a
cmp word [edi], 0
jne 0x43cb9f
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x43ce46
cmp word [eax], 0
je 0x43ce46
movzx eax, word [edi]
xor bl, bl
cmp ax, 0x40
je 0x43cbb0
cmp ax, 0x7b
jne 0x43cbfb
mov ecx, dword [0x50b39c]
push 0
push edi
call fcn.00412410
test eax, eax
je 0x43cbfb
push eax
mov bl, 1
call fcn.00441300
add esp, 4
mov byte [ebp + 0xb], 1
push 0x26c
call fcn.004412a0
add esp, 4
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 1
test eax, eax
je 0x43ccad
mov ecx, eax
call fcn.0046bb70
mov edi, eax
jmp 0x43ccaf
mov eax, dword [ebp - 0x18]
cmp word [eax], 0
je 0x43cbcd
mov edx, 0xb
mov ecx, str.new_console
mov edi, edi
mov si, word [eax]
cmp si, word [ecx]
jne 0x43cc25
add eax, 2
add ecx, 2
sub edx, 1
jne 0x43cc10
jmp 0x43cbcd
mov dx, si
cmp dx, word [ecx]
sbb eax, eax
and eax, 0xfffffffe
add eax, 1
je 0x43cbcd
mov eax, dword [ebp - 0x1c]
mov byte [ebp + 0xb], 0
test eax, eax
je 0x43cc56
push str._new_console
push eax
call fcn.004b138a
add esp, 8
test eax, eax
jne 0x43cbd1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x18]
push ecx
mov ecx, dword [0x50b384]
push edx
push edi
push eax
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0x20
mov esi, eax
call fcn.004412a0
add esp, 4
cmp esi, 0x20
jg 0x43cc9a
push esi
push str.Failed:_i
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x43ce46
push 0x10
push 0x4cb448
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
jmp 0x43ce46
xor edi, edi
mov byte [ebp - 4], 0
test bl, bl
je 0x43cccb
mov edx, dword [ebp - 0x14]
push edx
call fcn.00441380
add esp, 4
mov dword [edi + 0x10], eax
jmp 0x43ce1a
mov eax, dword [ebp - 0x14]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x43ccd1
mov ebx, dword [ebp - 0x1c]
sub eax, edx
sar eax, 1
test ebx, ebx
je 0x43cd01
mov ecx, ebx
lea esi, [ecx + 2]
lea esp, [esp]
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x43ccf0
sub ecx, esi
sar ecx, 1
jmp 0x43cd03
xor ecx, ecx
cmp byte [ebp + 0xb], 0
lea esi, [ecx + eax + 0x10]
je 0x43cd3b
mov eax, dword [ebp - 0x18]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x43cd13
sub eax, edx
sar eax, 1
cmp eax, 0xb
jbe 0x43cd37
mov ecx, dword [ebp - 0x18]
cmp word [ecx + 0x16], 0x3a
jne 0x43cd37
lea esi, [esi + eax + 6]
jmp 0x43cd3b
mov byte [ebp + 0xb], 0
lea edx, [esi + esi]
push edx
call fcn.004412a0
mov edx, dword [ebp - 0x14]
xor ecx, ecx
mov dword [edi + 0x10], eax
mov word [eax], cx
movzx eax, word [edx]
add esp, 4
test ax, ax
je 0x43cdd3
cmp byte [ebp - 0xd], cl
jne 0x43cdac
cmp ax, 0x22
je 0x43cdac
mov eax, edx
push 0x20
push eax
call fcn.004b03ac
add esp, 8
test eax, eax
je 0x43cdac
mov ecx, dword [edi + 0x10]
mov eax, dword [ebp - 0x14]
mov edx, 0x22
mov word [ecx], dx
mov edx, dword [edi + 0x10]
push eax
lea ecx, [esi - 1]
push ecx
add edx, 2
push edx
call fcn.00401800
test ebx, ebx
je 0x43cda4
cmp word [ebx], 0
mov eax, 0x4c2924
jne 0x43cda9
mov eax, 0x4c2ee0
push eax
jmp 0x43cdc9
mov ecx, dword [ebp - 0x14]
mov edx, dword [edi + 0x10]
push ecx
push esi
push edx
call fcn.00401800
test ebx, ebx
je 0x43cde8
cmp word [ebx], 0
je 0x43cdd3
push 0x4c2f1c
mov eax, dword [edi + 0x10]
push esi
push eax
call fcn.00401880
test ebx, ebx
je 0x43cde8
cmp word [ebx], 0
je 0x43cde8
mov ecx, dword [edi + 0x10]
push ebx
push esi
push ecx
call fcn.00401880
cmp byte [ebp + 0xb], 0
je 0x43ce1a
mov edx, dword [edi + 0x10]
push 0x4d3504
push esi
push edx
call fcn.00401880
mov eax, dword [ebp - 0x18]
mov ecx, dword [edi + 0x10]
push eax
push esi
push ecx
call fcn.00401880
mov edx, dword [edi + 0x10]
push 0x4c2ee0
push esi
push edx
call fcn.00401880
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x43ce2d
push eax
call fcn.00441380
add esp, 4
mov dword [edi + 0x14], eax
mov ecx, dword [0x50b39c]
push edi
call fcn.00405860
push 0x4cb448
call fcn.00441380
add esp, 4
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 0xffffffff
call fcn.004a4770
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x43ce65
push eax
call fcn.00441300
add esp, 4
pop ebx
push str.InvalidArg
call fcn.00441380
mov ecx, dword [ebp - 0xc]
add esp, 4
pop edi
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret