Function at 0x43fb74
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b472d
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0x4cfb90]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x18]
push ecx
mov ecx, 0x4792b78
call fcn.00474a40
movzx edx, al
test edx, edx
je case.default.0x43f9ac
push 0xffffffffffffffff
mov ecx, 0x4792b78
call fcn.004741a0
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], 0x100
jg 0x43f9b3
cmp dword [ebp - 0x14], 0x100
je 0x43fbcd
cmp dword [ebp - 0x14], 7
ja case.default.0x43f9ac
mov edx, dword [ebp - 0x14]
jmp dword [edx*4 + 0x43fc0c]
cmp dword [ebp - 0x14], 0x101
je 0x43fbd7
jmp case.default.0x43f9ac
mov ecx, 0x489e860
call fcn.00466210
mov ecx, 0x489e1d0
call fcn.0041c820
push 1
mov ecx, 0x489e1d0
call fcn.00463a90
push 0x65
mov ecx, 0x4926138
call fcn.00446820
push 0x64
mov ecx, 0x4926138
call fcn.00446820
push 0x6e
mov ecx, 0x4926138
call fcn.00446820
push 0x66
mov ecx, 0x4926138
call fcn.00446820
push 0x67
mov ecx, 0x4926138
call fcn.00446820
push 0x68
mov ecx, 0x4926138
call fcn.00446820
push 0x70
mov ecx, 0x4926138
call fcn.00446820
mov ecx, 0x574a5f8
call fcn.00449490
mov ecx, 0x4792b64
call fcn.0046b2c0
mov ecx, 0x489e1d0
call fcn.00462640
mov ecx, 0x489e1d0
call fcn.004649a0
push 0
mov ecx, 0x69dc128
call fcn.00477450
mov ecx, 0x69dc128
call fcn.0048c8b0
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x14], 3
push 0
push 1
push 8
mov ecx, 0x489e1d0
call fcn.0045ff70
push 8
mov ecx, 0x489e1d0
call fcn.004113b0
mov dword [ebp - 0x18], eax
push 0
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x1c]
call eax
mov ecx, 0x4d1930
call fcn.0046baa0
mov ecx, 0x574a760
call fcn.0045d730
mov ecx, dword [ebp - 0x10]
call fcn.0043fe80
jmp case.default.0x43f9ac
mov ecx, 0x489e1d0
call fcn.0041c820
push 1
mov ecx, 0x489e1d0
call fcn.00463a90
mov ecx, dword [ebp - 0x10]
call fcn.0043fef0
jmp case.default.0x43f9ac
mov ecx, 0x489e1d0
call fcn.0041c820
push 1
mov ecx, 0x489e1d0
call fcn.00463a90
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x14], 3
push 0
push 1
push 7
mov ecx, 0x489e1d0
call fcn.0045ff70
mov ecx, dword [ebp - 0x10]
call fcn.0043fe80
jmp case.default.0x43f9ac
mov ecx, dword [ebp - 0x10]
call fcn.0043ff20
jmp case.default.0x43f9ac
mov ecx, dword [ebp - 0x10]
call fcn.0043ff50
jmp case.default.0x43f9ac
push 2
push 2
mov ecx, dword [ebp - 0x10]
call fcn.00419f30
movzx edx, al
test edx, edx
jne 0x43fb65
mov ecx, dword [ebp - 0x10]
call fcn.0043feb0
jmp case.default.0x43f9ac
mov ecx, dword [ebp - 0x10]
call fcn.0043ff80
jmp case.default.0x43f9ac
lea ecx, [ebp - 0x28]
call fcn.00493820
mov dword [ebp - 4], 0
mov ecx, 0x489e1d0
call fcn.00411390
push eax
lea ecx, [ebp - 0x28]
call fcn.004938e0
push 0x4c42b4
lea ecx, [ebp - 0x28]
call fcn.004939c0
push 1
push 0
push 0
lea ecx, [ebp - 0x28]
call fcn.00411210
push eax
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00493860
jmp case.default.0x43f9ac
mov ecx, dword [ebp - 0x10]
call fcn.0043feb0
jmp case.default.0x43f9ac
mov ecx, 0x48a60f4
call fcn.00415e80
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x14], 1
mov ecx, dword [ebp - 0x10]
call fcn.00415cc0
mov ecx, 0x50a8e78
call fcn.00458f70
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret