Function at 0x43c724
Capabilities:
Create process on windows
Self delete

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x4e
push 0
push 0
dec ecx
jne 0x43c72c
push ebx
push esi
push edi
lea ebx, [ebp - 0x1cc]
xor eax, eax
push ebp
push 0x43d064
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
push ebp
push 0x43d035
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x4583e4]
mov dword [eax], 1
call fcn.0043be30
push 0x32
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x458378]
mov eax, dword [eax]
call fcn.0040524c
mov edx, eax
mov eax, ebx
call fcn.00403178
mov eax, ebx
call fcn.00402f08
call fcn.00402b64
mov edx, 0x43d07c
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
mov edx, 0x43d090
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
mov edx, 0x43d0b0
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d0c0
mov eax, dword [0x457f58]
push dword [eax + 0x10]
push 0x43d0dc
lea eax, [ebp - 0x1d0]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x1d0]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d0c0
mov eax, dword [0x458224]
push dword [eax]
push 0x43d0e8
lea eax, [ebp - 0x1d4]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x1d4]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d0f4
mov eax, dword [0x458328]
push dword [eax]
push 0x43d104
lea eax, [ebp - 0x1d8]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x1d8]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d0f4
mov eax, dword [0x458130]
push dword [eax]
push 0x43d104
lea eax, [ebp - 0x1dc]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x1dc]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d0f4
mov eax, dword [0x458028]
push dword [eax]
push 0x43d104
lea eax, [ebp - 0x1e0]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x1e0]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d0f4
mov eax, dword [0x458370]
push dword [eax]
push 0x43d104
lea eax, [ebp - 0x1e4]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x1e4]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d0f4
mov eax, dword [0x4582a4]
push dword [eax]
push 0x43d104
lea eax, [ebp - 0x1e8]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x1e8]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d0f4
mov eax, dword [0x458148]
push dword [eax]
push 0x43d104
lea eax, [ebp - 0x1ec]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x1ec]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d0f4
mov eax, dword [0x458030]
push dword [eax]
push 0x43d104
lea eax, [ebp - 0x1f0]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x1f0]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d0f4
mov eax, dword [0x458020]
push dword [eax]
push 0x43d104
lea eax, [ebp - 0x1f4]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x1f4]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d0f4
mov eax, dword [0x45817c]
push dword [eax]
push 0x43d104
lea eax, [ebp - 0x1f8]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x1f8]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d0f4
mov eax, dword [0x458268]
push dword [eax]
push 0x43d104
lea eax, [ebp - 0x1fc]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x1fc]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d0f4
mov eax, dword [0x458270]
push dword [eax]
push 0x43d104
lea eax, [ebp - 0x200]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x200]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d0f4
mov eax, dword [0x458364]
push dword [eax]
push 0x43d104
lea eax, [ebp - 0x204]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x204]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d0f4
mov eax, dword [0x458224]
push dword [eax]
push 0x43d104
lea eax, [ebp - 0x208]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x208]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d0f4
mov eax, dword [0x45841c]
push dword [eax]
push 0x43d104
lea eax, [ebp - 0x20c]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x20c]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d114
mov eax, dword [0x458014]
push dword [eax]
mov eax, dword [0x458340]
push dword [eax]
push 0x43d128
lea eax, [ebp - 0x210]
mov edx, 4
call fcn.0040510c
mov edx, dword [ebp - 0x210]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d114
mov eax, dword [0x457f58]
push dword [eax + 0x14]
push 0x43d128
lea eax, [ebp - 0x214]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x214]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d114
lea edx, [ebp - 0x21c]
mov eax, dword [0x458224]
mov eax, dword [eax]
call fcn.00409354
push dword [ebp - 0x21c]
push 0x43d128
lea eax, [ebp - 0x218]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x218]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d114
lea eax, [ebp - 0x224]
push eax
mov eax, dword [0x4582f8]
mov eax, dword [eax]
call fcn.0040504c
mov ecx, eax
dec ecx
mov eax, dword [0x4582f8]
mov eax, dword [eax]
mov edx, 1
call fcn.004052ac
push dword [ebp - 0x224]
push 0x43d128
lea eax, [ebp - 0x220]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x220]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d134
mov eax, dword [0x458130]
push dword [eax]
push 0x43d148
lea eax, [ebp - 0x228]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x228]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d134
mov eax, dword [0x458028]
push dword [eax]
push 0x43d148
lea eax, [ebp - 0x22c]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x22c]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d134
mov eax, dword [0x458148]
push dword [eax]
push 0x43d148
lea eax, [ebp - 0x230]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x230]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d134
mov eax, dword [0x458030]
push dword [eax]
push 0x43d148
lea eax, [ebp - 0x234]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x234]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d134
mov eax, dword [0x458370]
push dword [eax]
push 0x43d148
lea eax, [ebp - 0x238]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x238]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d134
mov eax, dword [0x4582a4]
push dword [eax]
push 0x43d148
lea eax, [ebp - 0x23c]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x23c]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d134
mov ecx, dword [0x457f58]
mov ecx, dword [ecx + 0x10]
mov edx, dword [0x457f58]
mov edx, dword [edx + 0x14]
lea eax, [ebp - 0x248]
call fcn.00405098
mov eax, dword [ebp - 0x248]
call fcn.0040524c
mov edx, eax
lea eax, [ebp - 0x244]
call fcn.00404f84
push dword [ebp - 0x244]
push 0x43d148
lea eax, [ebp - 0x240]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x240]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d134
mov eax, dword [0x458224]
mov eax, dword [eax]
call fcn.0040524c
mov edx, eax
lea eax, [ebp - 0x250]
call fcn.00404f84
push dword [ebp - 0x250]
push 0x43d148
lea eax, [ebp - 0x24c]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x24c]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d134
mov eax, dword [0x4582f8]
push dword [eax]
mov eax, dword [0x457fa0]
push dword [eax]
lea edx, [ebp - 0x260]
mov eax, 0x43d15c
call fcn.00443ae8
push dword [ebp - 0x260]
lea eax, [ebp - 0x25c]
mov edx, 3
call fcn.0040510c
mov eax, dword [ebp - 0x25c]
call fcn.0040524c
mov edx, eax
lea eax, [ebp - 0x258]
call fcn.00404f84
push dword [ebp - 0x258]
push 0x43d148
lea eax, [ebp - 0x254]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x254]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d0f4
mov eax, dword [0x45841c]
push dword [eax]
push 0x43d104
lea eax, [ebp - 0x264]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x264]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d0f4
mov eax, dword [0x457f8c]
push dword [eax]
push 0x43d104
lea eax, [ebp - 0x268]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x268]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d134
mov eax, dword [0x45841c]
push dword [eax]
push 0x43d148
lea eax, [ebp - 0x26c]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x26c]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
push 0x43d0f4
mov eax, dword [0x458378]
push dword [eax]
push 0x43d104
lea eax, [ebp - 0x270]
mov edx, 3
call fcn.0040510c
mov edx, dword [ebp - 0x270]
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
mov edx, 0x43d188
mov eax, ebx
call fcn.004053e0
call fcn.00403a90
call fcn.00402b64
mov eax, ebx
call fcn.0040331c
call fcn.00402b64
push 0
mov eax, dword [0x458378]
mov eax, dword [eax]
call fcn.0040524c
push eax
call sub.kernel32.dll_WinExec
push 0
mov eax, dword [0x458378]
mov eax, dword [eax]
call fcn.0040524c
push eax
call sub.kernel32.dll_WinExec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x43d03f
push 0
call sub.kernel32.dll_ExitProcess_1