Function at 0x437fb0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fe0e8
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x53000c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, edx
mov edi, ecx
lea eax, [edi - 1]
mov dword [ebp - 4], 1
cmp eax, 3
ja case.default.0x437d8f
jmp dword [eax*4 + 0x437fb0]
push 0x218
call fcn.0048e9bb
mov esi, eax
add esp, 4
mov dword [ebp - 0x10], esi
push 0x218
push 0
push esi
mov byte [ebp - 4], 2
call fcn.004bcaf0
sub esp, 0xc
lea eax, [ebp + 0x28]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0041a300
sub esp, 0x18
mov byte [ebp - 4], 3
lea eax, [ebp + 0x10]
mov ecx, esp
push eax
call fcn.0041a300
push dword [ebp + 0xc]
mov ecx, esi
mov byte [ebp - 4], 2
push dword [ebp + 8]
push ebx
push edi
call fcn.00468b50
mov esi, eax
jmp 0x437f12
push 0x218
call fcn.0048e9bb
mov esi, eax
add esp, 4
mov dword [ebp - 0x18], esi
push 0x218
push 0
push esi
mov byte [ebp - 4], 4
call fcn.004bcaf0
sub esp, 0xc
lea eax, [ebp + 0x28]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0041a300
sub esp, 0x18
mov byte [ebp - 4], 5
lea eax, [ebp + 0x10]
mov ecx, esp
push eax
call fcn.0041a300
push dword [ebp + 0xc]
mov ecx, esi
mov byte [ebp - 4], 4
push dword [ebp + 8]
push ebx
push edi
call fcn.0043bd20
mov esi, eax
jmp 0x437f12
push 0x250
call fcn.0048e9bb
mov esi, eax
add esp, 4
mov dword [ebp - 0x18], esi
push 0x250
push 0
push esi
mov byte [ebp - 4], 6
call fcn.004bcaf0
sub esp, 0xc
lea eax, [ebp + 0x28]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0041a300
sub esp, 0x18
mov byte [ebp - 4], 7
lea eax, [ebp + 0x10]
mov ecx, esp
push eax
call fcn.0041a300
push dword [ebp + 0xc]
mov ecx, esi
mov byte [ebp - 4], 6
push dword [ebp + 8]
push ebx
push edi
call fcn.0045a8d0
mov esi, eax
jmp 0x437f12
push 0x218
call fcn.0048e9bb
mov esi, eax
add esp, 4
mov dword [ebp - 0x18], esi
push 0x218
push 0
push esi
mov byte [ebp - 4], 8
call fcn.004bcaf0
sub esp, 0xc
lea eax, [ebp + 0x28]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0041a300
sub esp, 0x18
mov byte [ebp - 4], 9
lea eax, [ebp + 0x10]
mov ecx, esp
push eax
call fcn.0041a300
push dword [ebp + 0xc]
mov ecx, esi
mov byte [ebp - 4], 8
push dword [ebp + 8]
push ebx
push edi
call fcn.0044b120
mov esi, eax
jmp 0x437f12
xor esi, esi
mov edx, dword [ebp + 0x24]
cmp edx, 8
jb 0x437f48
mov ecx, dword [ebp + 0x10]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x437f3e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437fa6
push edx
push ecx
call fcn.0048e9ad
add esp, 8
mov edx, dword [ebp + 0x3c]
xor eax, eax
mov dword [ebp + 0x20], 0
mov dword [ebp + 0x24], 7
mov word [ebp + 0x10], ax
cmp edx, 8
jb 0x437f92
mov ecx, dword [ebp + 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x437f88
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437fab
push edx
push ecx
call fcn.0048e9ad
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.004c5929
call fcn.004c5929
xchg esi, eax
jge 4423670
add dh, dh
jge 0x437ffa
add byte [esi + 0x7e], dl
inc ebx
add byte [ebx + 0x5500437e], dh
push ebp
push esp
add al, 0
xchg dh, cl
add dword [eax], eax
add bh, bh
adc eax, sym.imp.KERNEL32.dll_GetTickCount