Function at 0x43e6f394
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x43e6f39c
push ecx
push ebx
push esi
push edi
mov esi, 0x43e729e4
mov edi, 0x43e729d4
xor eax, eax
push ebp
push 0x43e6f746
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.43e52ae0
mov eax, 0xc8
call fcn.43e52b9c
push eax
call sub.kernel32.dll_Sleep
call sub.kernel32.dll_GetCurrentProcessId
xor edx, edx
push edx
push eax
lea eax, [ebp - 8]
call fcn.43e696e4
mov ecx, dword [ebp - 8]
lea eax, [ebp - 4]
mov edx, 0x43e6f75c
call fcn.43e5380c
mov eax, dword [ebp - 4]
call fcn.43e69ab8
test al, al
jne 0x43e6f72b
call fcn.43e6c818
call fcn.43e6c948
cmp byte [0x43e729b4], 0
jne 0x43e6f43d
lea eax, [ebp - 0xc]
mov ecx, 0x43e6f76c
mov edx, dword [0x43e729d0]
call fcn.43e5380c
mov eax, dword [ebp - 0xc]
call fcn.43e691c0
call fcn.43e6c7dc
jmp 0x43e6f72b
cmp byte [0x43e729b3], 0
jne 0x43e6f469
cmp byte [0x43e729b0], 0
je 0x43e6f45d
mov eax, fcn.43e6e088
xor edx, edx
call fcn.43e6885c
jmp 0x43e6f469
mov eax, 0x43e6eae0
xor edx, edx
call fcn.43e6885c
mov eax, dword [0x43e711d4]
cmp eax, dword [0x43e72650]
je 0x43e6f48a
cmp byte [0x43e729b2], 0
jne 0x43e6f48a
mov eax, dword [0x43e711d4]
push eax
call sub.kernel32.dll_FreeLibrary_1
lea eax, [ebp - 0x10]
call fcn.43e68f8c
mov eax, dword [ebp - 0x10]
call fcn.43e537c0
test eax, eax
je 0x43e6f4b1
cmp byte [0x43e7264c], 0
je 0x43e6f4b1
mov eax, dword [0x43e729c4]
call fcn.43e69704
mov eax, 0x43e6f788
call fcn.43e67964
mov ebx, eax
call sub.kernel32.dll_GetCurrentProcessId
cmp ebx, eax
jne 0x43e6f52c
lea edx, [ebp - 0x18]
mov eax, 0x43e6f798
call fcn.43e6bae0
mov ecx, dword [ebp - 0x18]
lea eax, [ebp - 0x14]
mov edx, dword [edi]
call fcn.43e5380c
mov eax, dword [ebp - 0x14]
push eax
lea edx, [ebp - 0x1c]
xor eax, eax
call fcn.43e52a7c
mov eax, dword [ebp - 0x1c]
pop edx
call fcn.43e68de0
test al, al
jne 0x43e6f52c
mov eax, 0x43e6f798
lea edx, [ebp - 0x24]
call fcn.43e6bae0
mov ecx, dword [ebp - 0x24]
lea eax, [ebp - 0x20]
mov edx, dword [edi]
call fcn.43e5380c
mov eax, dword [ebp - 0x20]
push eax
lea edx, [ebp - 0x28]
xor eax, eax
call fcn.43e52a7c
mov eax, dword [ebp - 0x28]
pop edx
call fcn.43e69508
mov eax, dword [0x43e729c8]
call fcn.43e6c714
test al, al
jne 0x43e6f550
mov ecx, dword [0x43e729c8]
mov edx, dword [0x43e729dc]
mov eax, dword [0x43e729e0]
call fcn.43e69438
call fcn.43e6d9b8
test al, al
jne 0x43e6f55e
call fcn.43e6ed28
lea eax, [ebp - 0x2c]
mov ecx, 0x43e6f7ac
mov edx, dword [0x43e729d0]
call fcn.43e5380c
mov eax, dword [ebp - 0x2c]
call fcn.43e691c0
cmp byte [0x43e729b0], 0
je 0x43e6f587
call fcn.43e6eeec
mov edx, dword [0x43e729c8]
mov eax, dword [0x43e729c4]
call fcn.43e682f8
test al, al
jne 0x43e6f5cf
cmp byte [0x43e711c8], 0
jne 0x43e6f5cf
cmp byte [0x43e729b2], 0
jne 0x43e6f5cf
push 0
push 0x80
push 3
push 0
push 0
push 0x80000000
mov eax, dword [0x43e729c4]
call fcn.43e539c0
push eax
call sub.kernel32.dll_CreateFileA
mov eax, dword [0x43e729bc]
call fcn.43e539c0
push eax
mov eax, dword [esi]
add eax, 0x100
push eax
call sub.kernel32.dll_lstrcpyA
mov eax, dword [0x43e729c4]
call fcn.43e539c0
push eax
mov eax, dword [esi]
push eax
call sub.kernel32.dll_lstrcpyA
push 0x43e6f7bc
mov eax, dword [esi]
add eax, 0x20c
push eax
call sub.kernel32.dll_lstrcpyA
call sub.kernel32.dll_GetCommandLineA_1
mov edx, eax
lea eax, [ebp - 0x30]
call fcn.43e5376c
mov edx, dword [ebp - 0x30]
mov eax, 0x43e6f7c8
call fcn.43e680c0
test al, al
je 0x43e6f63e
push 0x43e6f7d0
mov eax, dword [esi]
add eax, 0x20c
push eax
call sub.kernel32.dll_lstrcpyA
mov eax, dword [esi]
mov edx, dword [0x43e72650]
mov dword [eax + 0x200], edx
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [esi]
mov dword [edx + 0x208], eax
call sub.kernel32.dll_GetCurrentProcessId
mov edx, dword [esi]
mov dword [edx + 0x204], eax
mov eax, 0x43e6f7c8
call fcn.43e68144
test al, al
jne 0x43e6f679
call fcn.43e6c7dc
lea edx, [ebp - 0x34]
mov eax, 0x43e6f7dc
call fcn.43e68f10
mov eax, dword [ebp - 0x34]
push eax
call fcn.43e6fa7c
mov eax, dword [0x43e712ec]
mov byte [eax], 1
xor ebx, ebx
push dword [edi]
push 0x43e6f7f0
push dword [0x43e729bc]
lea edx, [ebp - 0x3c]
xor eax, eax
mov al, bl
call fcn.43e68a34
push dword [ebp - 0x3c]
push 0x43e6f7fc
lea eax, [ebp - 0x38]
mov edx, 5
call fcn.43e53880
mov eax, dword [ebp - 0x38]
call fcn.43e6cff8
inc ebx
cmp bl, 6
jne 0x43e6f699
xor ebx, ebx
push dword [edi]
push 0x43e6f80c
lea edx, [ebp - 0x44]
xor eax, eax
mov al, bl
call fcn.43e68a34
push dword [ebp - 0x44]
push 0x43e6f7fc
lea eax, [ebp - 0x40]
mov edx, 4
call fcn.43e53880
mov eax, dword [ebp - 0x40]
call fcn.43e6cff8
inc ebx
cmp bl, 6
jne 0x43e6f6d7
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [esi]
mov dword [edx + 0x208], eax
call fcn.43e6f20c
push 0x4650
call sub.kernel32.dll_Sleep
jmp 0x43e6f70d
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x43e6f74d
lea eax, [ebp - 0x44]
mov edx, 0x11
call fcn.43e53660
ret