Function at 0x43b730
Capabilities:
Allocate or change rwx memory
Create thread
Inject dll
Inject thread
Spawn thread to rwx shellcode

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x344
mov eax, dword [0x441004]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x14]
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0x10]
push 0x31c
mov dword [ebp - 0x32c], eax
lea eax, [ebp - 0x328]
push 0
push eax
mov dword [ebp - 0x334], ecx
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x338], 0
mov dword [ebp - 0x344], 0
call sub.msvcrt.dll_memset
mov eax, dword [ebp - 0x334]
add esp, 0xc
cmp dword [eax + 0x18], 0
jne 0x43b7fd
mov esi, 0x80070057
mov dword [ebp - 0x32c], 0
lea edx, [ebp - 0x32c]
mov ecx, esi
call fcn.00435760
cmp dword [0x441604], 0
je 0x43c125
push 0x42e69c
push dword [ebp - 0x32c]
push esi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x43c125
push 0x176
jmp 0x43c10f
cmp dword [0x441604], 0
je 0x43b81f
push ebx
push esi
push 0x42e6ac
push 7
push 0xfffffffffffffff4
call fcn.004357e0
mov eax, dword [ebp - 0x334]
add esp, 0x14
test edi, edi
je 0x43b940
push 4
push 0x3000
push dword [ebp - 0x32c]
push 0
push dword [eax + 0x18]
call dword [sym.imp.api_ms_win_core_memory_l1_1_0.dll_VirtualAllocEx]
mov dword [ebp - 0x340], eax
test eax, eax
jne 0x43b8b6
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x43b85e
movzx esi, si
or esi, 0x80070000
lea edx, [ebp - 0x32c]
mov dword [ebp - 0x32c], 0
mov ecx, esi
call fcn.00435760
cmp dword [0x441604], 0
je 0x43c125
push 0x42e6e8
push dword [ebp - 0x32c]
push esi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x43c125
push 0x186
jmp 0x43c10f
push 0
push dword [ebp - 0x32c]
push edi
mov edi, dword [ebp - 0x334]
push eax
push dword [edi + 0x18]
call dword [sym.imp.api_ms_win_core_memory_l1_1_0.dll_WriteProcessMemory]
test eax, eax
jne 0x43b946
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x43b8e8
movzx esi, si
or esi, 0x80070000
lea edx, [ebp - 0x32c]
mov dword [ebp - 0x32c], 0
mov ecx, esi
call fcn.00435760
cmp dword [0x441604], 0
je 0x43c125
push 0x42e750
push dword [ebp - 0x32c]
push esi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x43c125
push 0x18e
jmp 0x43c10f
mov edi, dword [ebp - 0x334]
lea ecx, [ebp - 0x31c]
mov edx, 0x104
mov eax, ecx
sub esi, eax
lea eax, [edx + 0x7ffffefa]
test eax, eax
je 0x43b975
movzx eax, word [ecx + esi]
test ax, ax
je 0x43b975
mov word [ecx], ax
add ecx, 2
sub edx, 1
jne 0x43b955
jmp 0x43b979
test edx, edx
jne 0x43b97c
sub ecx, 2
xor eax, eax
mov esi, edx
neg esi
mov word [ecx], ax
sbb esi, esi
and esi, 0x7ff8ff86
add esi, 0x8007007a
test edx, edx
jne 0x43b9eb
lea edx, [ebp - 0x32c]
mov dword [ebp - 0x32c], eax
mov ecx, esi
call fcn.00435760
cmp dword [0x441604], 0
je 0x43c125
push 0x42e798
push dword [ebp - 0x32c]
push esi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x43c125
push 0x195
jmp 0x43c10f
lea ecx, [ebp - 0x114]
mov edx, 0x104
mov eax, ecx
sub ebx, eax
lea ebx, [ebx]
lea eax, [edx + 0x7ffffefa]
test eax, eax
je 0x43ba1b
mov al, byte [ecx + ebx]
test al, al
je 0x43ba1b
mov byte [ecx], al
inc ecx
sub edx, 1
jne 0x43ba00
jmp 0x43ba1f
test edx, edx
jne 0x43ba20
dec ecx
mov esi, edx
mov byte [ecx], 0
neg esi
sbb esi, esi
and esi, 0x7ff8ff86
add esi, 0x8007007a
test edx, edx
jne 0x43ba8d
mov dword [ebp - 0x32c], edx
mov ecx, esi
lea edx, [ebp - 0x32c]
call fcn.00435760
cmp dword [0x441604], 0
je 0x43c125
push 0x42e7f0
push dword [ebp - 0x32c]
push esi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x43c125
push 0x196
jmp 0x43c10f
mov eax, dword [ebp - 0x340]
push 0x42e844
mov dword [ebp - 0x10], eax
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleW]
mov esi, eax
test esi, esi
jne 0x43bb14
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x43babc
movzx esi, si
or esi, 0x80070000
lea edx, [ebp - 0x32c]
mov dword [ebp - 0x32c], 0
mov ecx, esi
call fcn.00435760
cmp dword [0x441604], 0
je 0x43c125
push 0x42e860
push dword [ebp - 0x32c]
push esi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x43c125
push 0x19a
jmp 0x43c10f
push 0x42e890
push esi
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov dword [ebp - 0x328], eax
test eax, eax
jne 0x43bb97
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x43bb3f
movzx esi, si
or esi, 0x80070000
lea edx, [ebp - 0x32c]
mov dword [ebp - 0x32c], 0
mov ecx, esi
call fcn.00435760
cmp dword [0x441604], 0
je 0x43c125
push 0x42e8a0
push dword [ebp - 0x32c]
push esi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x43c125
push 0x19b
jmp 0x43c10f
push 0x42e8fc
push esi
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov dword [ebp - 0x324], eax
test eax, eax
jne 0x43bc1a
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x43bbc2
movzx esi, si
or esi, 0x80070000
lea edx, [ebp - 0x32c]
mov dword [ebp - 0x32c], 0
mov ecx, esi
call fcn.00435760
cmp dword [0x441604], 0
je 0x43c125
push 0x42e910
push dword [ebp - 0x32c]
push esi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x43c125
push 0x19c
jmp 0x43c10f
push 0x42e970
push esi
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov dword [ebp - 0x320], eax
test eax, eax
jne 0x43bc9d
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x43bc45
movzx esi, si
or esi, 0x80070000
lea edx, [ebp - 0x32c]
mov dword [ebp - 0x32c], 0
mov ecx, esi
call fcn.00435760
cmp dword [0x441604], 0
je 0x43c125
push 0x42e990
push dword [ebp - 0x32c]
push esi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x43c125
push 0x19d
jmp 0x43c10f
push 4
push 0x3000
push 0x31c
push 0
push dword [edi + 0x18]
call dword [sym.imp.api_ms_win_core_memory_l1_1_0.dll_VirtualAllocEx]
mov esi, eax
mov dword [ebp - 0x344], esi
test esi, esi
jne 0x43bd2d
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x43bcd5
movzx esi, si
or esi, 0x80070000
lea edx, [ebp - 0x32c]
mov dword [ebp - 0x32c], 0
mov ecx, esi
call fcn.00435760
cmp dword [0x441604], 0
je 0x43c125
push 0x42ea10
push dword [ebp - 0x32c]
push esi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x43c125
push 0x1a9
jmp 0x43c10f
push 0
push 0x31c
lea eax, [ebp - 0x328]
push eax
push esi
push dword [edi + 0x18]
call dword [sym.imp.api_ms_win_core_memory_l1_1_0.dll_WriteProcessMemory]
test eax, eax
jne 0x43bdb6
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x43bd5e
movzx esi, si
or esi, 0x80070000
lea edx, [ebp - 0x32c]
mov dword [ebp - 0x32c], 0
mov ecx, esi
call fcn.00435760
cmp dword [0x441604], 0
je 0x43c125
push 0x42ea80
push dword [ebp - 0x32c]
push esi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x43c125
push 0x1b1
jmp 0x43c10f
push 0x40
push 0x3000
push 0x95
push 0
push dword [edi + 0x18]
call dword [sym.imp.api_ms_win_core_memory_l1_1_0.dll_VirtualAllocEx]
mov ebx, eax
mov dword [ebp - 0x338], ebx
test ebx, ebx
jne 0x43be46
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x43bdee
movzx esi, si
or esi, 0x80070000
lea edx, [ebp - 0x32c]
mov dword [ebp - 0x32c], 0
mov ecx, esi
call fcn.00435760
cmp dword [0x441604], 0
je 0x43c125
push 0x42ead8
push dword [ebp - 0x32c]
push esi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x43c125
push 0x1bd
jmp 0x43c10f
push 0
push 0x95
push 0x42ec88
push ebx
push dword [edi + 0x18]
call dword [sym.imp.api_ms_win_core_memory_l1_1_0.dll_WriteProcessMemory]
test eax, eax
jne 0x43becd
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x43be75
movzx esi, si
or esi, 0x80070000
lea edx, [ebp - 0x32c]
mov dword [ebp - 0x32c], 0
mov ecx, esi
call fcn.00435760
cmp dword [0x441604], 0
je 0x43c125
push 0x42eb48
push dword [ebp - 0x32c]
push esi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x43c125
push 0x1c5
jmp 0x43c10f
push 0
push 0
push esi
push ebx
push 0
push 0
push dword [edi + 0x18]
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_CreateRemoteThread]
mov dword [ebp - 0x32c], eax
test eax, eax
jne 0x43bf71
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x43bf03
movzx esi, si
or esi, 0x80070000
lea edx, [ebp - 0x338]
mov dword [ebp - 0x338], 0
mov ecx, esi
call fcn.00435760
cmp dword [0x441604], 0
je 0x43c142
push 0x42eb98
push dword [ebp - 0x338]
push esi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x43c142
push 0x1d4
push 0x42e0f4
push 0x42b77c
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x14
jmp 0x43c142
push 0xffffffffffffffff
push dword [ebp - 0x32c]
call dword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
push 0
push 0
push dword [edi + 0x18]
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_1.dll_FlushInstructionCache]
test eax, eax
jne 0x43bffd
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x43bfa5
movzx esi, si
or esi, 0x80070000
lea edx, [ebp - 0x330]
mov dword [ebp - 0x330], 0
mov ecx, esi
call fcn.00435760
cmp dword [0x441604], 0
je 0x43c125
push 0x42ec08
push dword [ebp - 0x330]
push esi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x43c125
push 0x1dc
jmp 0x43c10f
lea eax, [ebp - 0x33c]
mov dword [ebp - 0x33c], 0
push eax
push dword [ebp - 0x32c]
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetExitCodeThread]
test eax, eax
jne 0x43c08b
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x43c033
movzx esi, si
or esi, 0x80070000
lea edx, [ebp - 0x330]
mov dword [ebp - 0x330], 0
mov ecx, esi
call fcn.00435760
cmp dword [0x441604], 0
je 0x43c125
push 0x42ec34
push dword [ebp - 0x330]
push esi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x43c125
push 0x1df
jmp 0x43c10f
mov edi, dword [0x441604]
test edi, edi
je 0x43c0b2
push dword [ebp - 0x33c]
push 0x42ec5c
push 7
push 0xfffffffffffffff4
call fcn.004357e0
mov edi, dword [0x441604]
add esp, 0x10
mov esi, dword [ebp - 0x33c]
test esi, esi
jle 0x43c0c7
movzx esi, si
or esi, 0x80070000
test esi, esi
jns 0x43c125
lea edx, [ebp - 0x330]
mov dword [ebp - 0x330], 0
mov ecx, esi
call fcn.00435760
test edi, edi
je 0x43c125
push 0x42dddc
push dword [ebp - 0x330]
push esi
push 0x42b728
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x18
cmp dword [0x441604], 0
je 0x43c125
push 0x1e1
push 0x42e0f4
push 0x42b77c
push 7
push 0xfffffffffffffff4
call fcn.004357e0
add esp, 0x14
mov eax, dword [ebp - 0x32c]
test eax, eax
je 0x43c136
push eax
call dword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov ebx, dword [ebp - 0x338]
mov edi, dword [ebp - 0x334]
mov eax, dword [ebp - 0x340]
test eax, eax
je 0x43c15d
push 0x8000
push 0
push eax
push dword [edi + 0x18]
call dword [sym.imp.api_ms_win_core_memory_l1_1_0.dll_VirtualFreeEx]
mov eax, dword [ebp - 0x344]
test eax, eax
je 0x43c178
push 0x8000
push 0
push eax
push dword [edi + 0x18]
call dword [sym.imp.api_ms_win_core_memory_l1_1_0.dll_VirtualFreeEx]
test ebx, ebx
je 0x43c18d
push 0x8000
push 0
push ebx
push dword [edi + 0x18]
call dword [sym.imp.api_ms_win_core_memory_l1_1_0.dll_VirtualFreeEx]
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0043ffc0
mov esp, ebp
pop ebp
ret 0x10