Function at 0x43e569
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
push ebx
mov ebx, ecx
test ebx, ebx
je 0x43e7d4
mov eax, dword [ebx + 4]
xor ecx, ecx
sub eax, ecx
je 0x43e59b
sub eax, 1
je 0x43e596
sub eax, 1
jne 0x43e7d4
cmp dword [ebx], 0x28
jmp 0x43e59e
cmp dword [ebx], 0x24
jmp 0x43e59e
cmp dword [ebx], 0x30
jne 0x43e7d4
push esi
push edi
push 2
push ecx
mov byte [ebp - 3], cl
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0xc], ecx
mov byte [ebp - 2], cl
mov byte [ebp - 1], cl
mov dword [ebp - 8], ecx
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov esi, eax
test esi, esi
jns 0x43e5d6
cmp esi, 0x80010106
je 0x43e5da
xor edi, edi
jmp 0x43e71d
mov byte [ebp - 3], 1
lea eax, [ebp - 0x10]
xor edi, edi
push eax
push 0x5482d8
push 4
push edi
push 0x5482c8
call dword [sym.imp.Mso20Win32Client.dll_Ordinal_37401]
mov esi, eax
test esi, esi
js 0x43e71d
lea eax, [ebx + 8]
push eax
push dword [ebp - 0x10]
push 0x5482d8
call dword [sym.imp.ole32.dll_CoMarshalInterThreadInterfaceInStream]
mov esi, eax
test esi, esi
js 0x43e71d
call dword [sym.imp.mso40uiWin32Client.dll_Ordinal_50288]
mov ecx, dword [eax]
mov edx, dword [ecx]
lea ecx, [ebp - 0xc]
push ecx
mov ecx, eax
call edx
neg eax
sbb eax, eax
and eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
je 0x43e648
mov ecx, dword [eax]
push edi
push edi
push edi
push edi
push 1
push edi
push eax
call dword [ecx + 0x28]
mov byte [ebp - 2], 1
cmp dword [ebx + 0x14], edi
je 0x43e668
push dword [ebx + 0x14]
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x43e668
push edi
push dword [ebx + 0x14]
call dword [sym.imp.USER32.dll_EnableWindow]
mov byte [ebp - 1], 1
push edi
push edi
push ebx
push 0x43e7dc
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edi, eax
mov dword [ebp - 0x14], edi
test edi, edi
jne 0x43e69a
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
jmp 0x43e5cf
mov esi, dword [sym.imp.Mso20Win32Client.dll_Ordinal_26828]
mov dword [ebp - 8], edi
xor edi, edi
jmp 0x43e6e5
cmp eax, 1
jne 0x43e78c
push 7
xor eax, eax
lea edi, [ebp - 0x34]
pop ecx
rep stosd dword es:[edi], eax
xor edi, edi
jmp 0x43e6d2
cmp dword [ebp - 0x30], 0x12
je 0x43e785
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push 1
push edi
push edi
push edi
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x43e6be
push 0x4ff
push 0xffffffffffffffff
push edi
lea eax, [ebp - 8]
push eax
push 1
call esi
cmp eax, 0xffffffff
jne 0x43e6a7
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov edi, dword [ebp - 0x14]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor edi, edi
mov dword [ebp - 8], edi
mov ecx, dword [ebx + 8]
test ecx, ecx
je 0x43e72d
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [ebx + 8], edi
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x43e73d
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [ebp - 0x10], edi
cmp byte [ebp - 1], 0
je 0x43e74e
push 1
push dword [ebx + 0x14]
call dword [sym.imp.USER32.dll_EnableWindow]
cmp byte [ebp - 2], 0
je 0x43e763
mov eax, dword [ebp - 0xc]
push edi
push edi
push edi
mov ecx, dword [eax]
push 1
push edi
push eax
call dword [ecx + 0x2c]
mov ecx, dword [ebp - 0xc]
test ecx, ecx
je 0x43e773
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [ebp - 0xc], edi
cmp byte [ebp - 3], 0
je 0x43e77f
call dword [sym.imp.ole32.dll_CoUninitialize]
pop edi
mov eax, esi
pop esi
jmp 0x43e7d9
mov esi, 0x8000ffff
jmp 0x43e70e
test eax, eax
jne 0x43e785
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0x14]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
push edi
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor edi, edi
mov dword [ebp - 8], edi
test esi, esi
jne 0x43e7cc
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
jmp 0x43e71d
mov esi, dword [ebp - 0x18]
jmp 0x43e71d
mov eax, 0x80070057
pop ebx
leave
ret