Function at 0x435ed0
Capabilities:
Move file
Set socket configuration
Terminate process

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x7e8
mov rbp, rsp
mov qword [rbp + 0x60], rdx
mov qword [rbp + 0x88], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0xa8], 0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0xa0], 0
mov qword [rbp + 0x98], 0
mov qword [rbp + 0xd8], 0
mov qword [rbp + 0xb8], 0
mov qword [rbp + 0xb0], 0
mov qword [rbp + 0xd0], 0
mov qword [rbp + 0xc8], 0
mov qword [rbp + 0xc0], 0
mov qword [rbp + 0xf8], 0
mov qword [rbp + 0xe0], 0
mov qword [rbp + 0xf0], 0
mov qword [rbp + 0xe8], 0
mov qword [rbp + 0x128], 0
mov qword [rbp + 0x108], 0
mov qword [rbp + 0x100], 0
mov qword [rbp + 0x120], 0
mov qword [rbp + 0x118], 0
mov qword [rbp + 0x110], 0
mov qword [rbp + 0x148], 0
mov qword [rbp + 0x130], 0
mov qword [rbp + 0x140], 0
mov qword [rbp + 0x138], 0
mov qword [rbp + 0x178], 0
mov qword [rbp + 0x158], 0
mov qword [rbp + 0x150], 0
mov qword [rbp + 0x170], 0
mov qword [rbp + 0x168], 0
mov qword [rbp + 0x160], 0
mov qword [rbp + 0x198], 0
mov qword [rbp + 0x180], 0
mov qword [rbp + 0x190], 0
mov qword [rbp + 0x188], 0
mov qword [rbp + 0x1b8], 0
mov qword [rbp + 0x1a0], 0
mov qword [rbp + 0x1b0], 0
mov qword [rbp + 0x1a8], 0
mov qword [rbp + 0x1e8], 0
mov qword [rbp + 0x1c8], 0
mov qword [rbp + 0x1c0], 0
mov qword [rbp + 0x1e0], 0
mov qword [rbp + 0x1d8], 0
mov qword [rbp + 0x1d0], 0
mov qword [rbp + 0x218], 0
mov qword [rbp + 0x1f8], 0
mov qword [rbp + 0x1f0], 0
mov qword [rbp + 0x210], 0
mov qword [rbp + 0x208], 0
mov qword [rbp + 0x200], 0
mov qword [rbp + 0x248], 0
mov qword [rbp + 0x228], 0
mov qword [rbp + 0x220], 0
mov qword [rbp + 0x240], 0
mov qword [rbp + 0x238], 0
mov qword [rbp + 0x230], 0
mov qword [rbp + 0x278], 0
mov qword [rbp + 0x270], 0
mov qword [rbp + 0x268], 0
mov qword [rbp + 0x250], 0
mov qword [rbp + 0x260], 0
mov qword [rbp + 0x258], 0
mov qword [rbp + 0x298], 0
mov qword [rbp + 0x280], 0
mov qword [rbp + 0x290], 0
mov qword [rbp + 0x288], 0
mov qword [rbp + 0x2b0], 0
mov qword [rbp + 0x2a8], 0
mov qword [rbp + 0x2a0], 0
mov qword [rbp + 0x2f0], 0
mov qword [rbp + 0x2b8], 0
mov qword [rbp + 0x2e8], 0
mov qword [rbp + 0x2c8], 0
mov qword [rbp + 0x2c0], 0
mov qword [rbp + 0x2e0], 0
mov qword [rbp + 0x2d8], 0
mov qword [rbp + 0x2d0], 0
mov qword [rbp + 0x310], 0
mov qword [rbp + 0x2f8], 0
mov qword [rbp + 0x308], 0
mov qword [rbp + 0x300], 0
mov qword [rbp + 0x340], 0
mov qword [rbp + 0x320], 0
mov qword [rbp + 0x318], 0
mov qword [rbp + 0x338], 0
mov qword [rbp + 0x330], 0
mov qword [rbp + 0x328], 0
mov qword [rbp + 0x358], 0
mov qword [rbp + 0x348], 0
mov qword [rbp + 0x350], 0
mov qword [rbp + 0x388], 0
mov qword [rbp + 0x368], 0
mov qword [rbp + 0x360], 0
mov qword [rbp + 0x380], 0
mov qword [rbp + 0x378], 0
mov qword [rbp + 0x370], 0
mov qword [rbp + 0x3b8], 0
mov qword [rbp + 0x398], 0
mov qword [rbp + 0x390], 0
mov qword [rbp + 0x3b0], 0
mov qword [rbp + 0x3a8], 0
mov qword [rbp + 0x3a0], 0
mov qword [rbp + 0x3e8], 0
mov qword [rbp + 0x3c8], 0
mov qword [rbp + 0x3c0], 0
mov qword [rbp + 0x3e0], 0
mov qword [rbp + 0x3d8], 0
mov qword [rbp + 0x3d0], 0
mov qword [rbp + 0x408], 0
mov qword [rbp + 0x3f0], 0
mov qword [rbp + 0x400], 0
mov qword [rbp + 0x3f8], 0
mov qword [rbp + 0x438], 0
mov qword [rbp + 0x418], 0
mov qword [rbp + 0x410], 0
mov qword [rbp + 0x430], 0
mov qword [rbp + 0x428], 0
mov qword [rbp + 0x420], 0
mov qword [rbp + 0x440], 0
mov qword [rbp + 0x470], 0
mov qword [rbp + 0x450], 0
mov qword [rbp + 0x448], 0
mov qword [rbp + 0x468], 0
mov qword [rbp + 0x460], 0
mov qword [rbp + 0x458], 0
mov qword [rbp + 0x490], 0
mov qword [rbp + 0x478], 0
mov qword [rbp + 0x488], 0
mov qword [rbp + 0x480], 0
mov qword [rbp + 0x4a8], 0
mov qword [rbp + 0x4a0], 0
mov qword [rbp + 0x498], 0
mov qword [rbp + 0x4c8], 0
mov qword [rbp + 0x4b8], 0
mov qword [rbp + 0x4b0], 0
mov qword [rbp + 0x4c0], 0
mov qword [rbp + 0x4f8], 0
mov qword [rbp + 0x4d8], 0
mov qword [rbp + 0x4d0], 0
mov qword [rbp + 0x4f0], 0
mov qword [rbp + 0x4e8], 0
mov qword [rbp + 0x4e0], 0
mov qword [rbp + 0x500], 0
mov qword [rbp + 0x530], 0
mov qword [rbp + 0x510], 0
mov qword [rbp + 0x508], 0
mov qword [rbp + 0x528], 0
mov qword [rbp + 0x520], 0
mov qword [rbp + 0x518], 0
mov qword [rbp + 0x550], 0
mov qword [rbp + 0x538], 0
mov qword [rbp + 0x548], 0
mov qword [rbp + 0x540], 0
mov qword [rbp + 0x580], 0
mov qword [rbp + 0x560], 0
mov qword [rbp + 0x558], 0
mov qword [rbp + 0x578], 0
mov qword [rbp + 0x570], 0
mov qword [rbp + 0x568], 0
mov qword [rbp + 0x5a0], 0
mov qword [rbp + 0x588], 0
mov qword [rbp + 0x598], 0
mov qword [rbp + 0x590], 0
mov qword [rbp + 0x5c0], 0
mov qword [rbp + 0x5a8], 0
mov qword [rbp + 0x5b8], 0
mov qword [rbp + 0x5b0], 0
mov qword [rbp + 0x5f0], 0
mov qword [rbp + 0x5d0], 0
mov qword [rbp + 0x5c8], 0
mov qword [rbp + 0x5e8], 0
mov qword [rbp + 0x5e0], 0
mov qword [rbp + 0x5d8], 0
mov qword [rbp + 0x610], 0
mov qword [rbp + 0x5f8], 0
mov qword [rbp + 0x608], 0
mov qword [rbp + 0x600], 0
mov qword [rbp + 0x6b0], 0
mov qword [rbp + 0x6c0], 0
mov qword [rbp + 0x6b8], 0
mov qword [rbp + 0x6e0], 0
mov qword [rbp + 0x6d0], 0
mov qword [rbp + 0x6c8], 0
mov qword [rbp + 0x6d8], 0
mov qword [rbp + 0x6e8], 0
mov qword [rbp + 0x708], 0
mov qword [rbp + 0x700], 0
mov qword [rbp + 0x6f0], 0
mov qword [rbp + 0x6f8], 0
mov qword [rbp + 0x720], 0
mov qword [rbp + 0x718], 0
mov qword [rbp + 0x710], 0
mov qword [rbp + 0x750], 0
mov qword [rbp + 0x728], 0
mov qword [rbp + 0x748], 0
mov qword [rbp + 0x740], 0
mov qword [rbp + 0x738], 0
mov qword [rbp + 0x730], 0
mov qword [rbp + 0x758], 0
mov qword [rbp + 0x778], 0
mov qword [rbp + 0x760], 0
mov qword [rbp + 0x770], 0
mov qword [rbp + 0x768], 0
mov qword [rbp + 0x7c0], 0
mov qword [rbp + 0x7b0], 0
mov qword [rbp + 0x7a8], 0
mov qword [rbp + 0x7a0], 0
mov qword [rbp + 0x798], 0
mov qword [rbp + 0x7d8], 0
mov qword [rbp + 0x790], 0
mov qword [rbp + 0x788], 0
mov qword [rbp + 0x780], 0
nop
mov rcx, qword [0x00434a38]
mov dl, 1
call fcn.00406c60
mov qword [rbp + 0x7d0], rax
lea rcx, [rbp + 0x780]
cmp qword [rbp + 0x7d0], 0
jne 0x436854
mov rdx, qword [rbp + 0x7d0]
jmp 0x43685f
mov rax, qword [rbp + 0x7d0]
lea rdx, [rax + 0x10]
call fcn.0040f7f0
mov rax, qword [rbp + 0x7d0]
mov rcx, qword [rbp + 0x60]
mov qword [rax + 0x18], rcx
mov dword [0x004502a4], 1
mov rax, qword [rbp + 0x7d0]
mov rax, qword [rax + 0x18]
mov ecx, dword [rax + 0x28]
mov edx, 0x8004667e
lea r8, [0x004502a4]
call sub.WS2_32.DLL_ioctlsocket
mov byte [0x004502a0], 1
xor eax, eax
mov dword [rbp + 0x68], eax
xor eax, eax
mov dword [rbp + 0x6c], eax
mov ecx, 1
mov edx, 0xff
call fcn.0042b800
mov dword [rbp + 0x7bc], eax
mov rax, qword [rbp + 0x7d0]
mov rcx, qword [rax + 0x18]
lea rdx, [rbp + 0x7bc]
mov r8d, 1
call fcn.004291c0
mov ecx, 1
call sub.kernel32.dll_Sleep
call sub.kernel32.dll_GetTickCount64
mov rsi, rax
call sub.kernel32.dll_GetTickCount64
mov rdi, rax
jmp 0x438ba6