Function at 0x43a7b0
Capabilities:
Create process on windows

Disassembly:
push 0xffffffffffffffff
push 0x50afd7
mov eax, dword fs:[0]
push eax
sub esp, 0x7c0
mov eax, dword [0x53f5a0]
xor eax, esp
mov dword [esp + 0x7bc], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x53f5a0]
xor eax, esp
push eax
lea eax, [esp + 0x7d4]
mov dword fs:[0], eax
cmp byte [0x545ab4], 0
mov edi, ecx
jne 0x43ab0c
test edi, edi
je 0x43ab0c
lea ecx, [esp + 0x14]
call fcn.00438f20
lea esi, [esp + 0x5c8]
mov dword [esp + 0x7dc], 0
call fcn.0043a560
test eax, eax
je 0x43aa5f
lea ecx, [esp + 0x138]
call fcn.00438f20
mov eax, esi
lea edx, [esp + 0x138]
call fcn.00439130
lea ecx, [esp + 0x380]
call fcn.00438f20
mov eax, esi
lea edx, [esp + 0x380]
call fcn.00439130
mov eax, dword [esp + 0x13c]
push eax
lea eax, [esp + 0x13c]
call fcn.004396e0
lea ebx, [esp + 0x13c]
call fcn.00439580
lea eax, [esp + 0x380]
call fcn.004396e0
inc eax
push eax
xor eax, eax
lea ebx, [esp + 0x384]
call fcn.00439580
lea ecx, [esp + 0x25c]
call fcn.00438f20
push 0x528f9c
lea ecx, [esp + 0x4a8]
call fcn.00439010
mov byte [esp + 0x7dc], 4
cmp byte [esp + 0x49c], 0
lea esi, [esp + 0x38c]
jne 0x43a8d7
mov esi, dword [esp + 0x388]
push 0x528fac
push 0x51f1f4
lea edx, [esp + 0x264]
call fcn.00439710
add esi, 4
push esi
push 0x51f1f4
lea edx, [esp + 0x26c]
call fcn.00439710
mov eax, edi
add esp, 0x10
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x43a910
sub eax, edx
sar eax, 1
xor ecx, ecx
lea eax, [eax + eax + 1]
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004cf7ac
add esp, 4
cmp word [edi], 0
mov ebp, eax
mov ecx, edi
mov edx, ebp
je 0x43a9a8
jmp 0x43a950
mov ebx, dword [esp + 0x4a8]
test ebx, ebx
jbe 0x43a996
cmp byte [esp + 0x5c0], 0
lea edi, [esp + 0x4b0]
jne 0x43a973
mov edi, dword [esp + 0x4ac]
movzx esi, word [ecx]
xor eax, eax
cmp word [edi + eax*2 + 4], si
je 0x43a986
inc eax
cmp eax, ebx
jb 0x43a978
jmp 0x43a996
cmp eax, 0xffffffff
je 0x43a996
mov eax, 0x5e
mov word [edx], ax
add edx, 2
mov ax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
cmp word [ecx], 0
jne 0x43a950
xor ecx, ecx
mov word [edx], cx
push 0x51f218
push 0x51f1f4
lea edx, [esp + 0x264]
call fcn.00439710
push ebp
push 0x51f1f4
lea edx, [esp + 0x26c]
call fcn.00439710
push ebp
call fcn.004cf7a1
add esp, 0x14
cmp byte [esp + 0x254], 0
lea ecx, [esp + 0x144]
jne 0x43a9f6
mov ecx, dword [esp + 0x140]
cmp byte [esp + 0x378], 0
lea eax, [esp + 0x268]
jne 0x43aa0e
mov eax, dword [esp + 0x264]
push 0
add ecx, 4
push ecx
add eax, 4
push eax
push str.cmd.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [esp + 0x4a4]
call fcn.00439080
lea ecx, [esp + 0x25c]
call fcn.00439080
lea ecx, [esp + 0x380]
call fcn.00439080
lea ecx, [esp + 0x138]
call fcn.00439080
jmp 0x43aae5
lea edx, [esp + 0x5c8]
push edx
call fcn.0043a170
add esp, 4
test eax, eax
je 0x43aad4
push 0x51f230
push 0x51f1f4
lea edx, [esp + 0x1c]
call fcn.00439710
lea eax, [esp + 0x5d0]
push eax
push 0x51f1f4
lea edx, [esp + 0x24]
call fcn.00439710
push 0x51f230
push 0x51f1f4
lea edx, [esp + 0x2c]
call fcn.00439710
add esp, 0x18
cmp byte [esp + 0x130], 0
lea eax, [esp + 0x20]
jne 0x43aac4
mov eax, dword [esp + 0x1c]
push 5
push 0
push edi
add eax, 4
push eax
push str.open
jmp 0x43aadd
push 5
push 0
push 0
push edi
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp byte [esp + 0x130], 0
mov dword [esp + 0x14], vtable.t_str.0
jne 0x43ab0c
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x20]
cmp eax, ecx
je 0x43ab0c
push eax
call fcn.004cc2c0
add esp, 4
mov ecx, dword [esp + 0x7d4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x7bc]
xor ecx, esp
call fcn.004cc2b1
add esp, 0x7cc
ret