Function at 0x4063d8
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x470
and dword [ebp - 0x468], 0
and dword [ebp - 0x34c], 0
and dword [ebp - 0x350], 0
and dword [ebp - 0x244], 0
and dword [ebp - 0x240], 0
and dword [ebp - 0x470], 0
and dword [ebp - 0x134], 0
and dword [ebp - 0x130], 0
and dword [ebp - 0x46c], 0
and dword [ebp - 0x354], 0
and dword [ebp - 0x23c], 0
mov dword [ebp - 0x464], 1
mov dword [ebp - 0x358], 1
and dword [ebp - 0x460], 0
push 0x423458
push dword [ebp + 0xc]
call fcn.0041003e
push 0
push 2
push dword [ebp + 8]
call fcn.004030f1
mov dword [ebp - 0x468], eax
push 0
call fcn.004193a0
mov dword [ebp - 0x34c], eax
push 0
call fcn.004193a0
mov dword [ebp - 0x350], eax
push 1
pop eax
test eax, eax
je 0x4066e2
push dword [ebp - 0x34c]
call fcn.00419460
and dword [ebp - 0x34c], 0
push 0
call fcn.004193a0
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x464], 0
je 0x4064ff
and dword [ebp - 0x464], 0
push 1
push dword [ebp - 0x34c]
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x354]
push eax
push 0x42345c
push dword [ebp + 0xc]
call fcn.0041008f
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 1
jne 0x4064fd
push 1
pop eax
jmp 0x4067b5
jmp 0x40652f
push 2
push dword [ebp - 0x34c]
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x354]
push eax
push 0x423460
push dword [ebp + 0xc]
call fcn.0041008f
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 0
jge 0x406540
push 0xffffffffffffffe6
pop eax
jmp 0x4067b5
push dword [ebp - 0x34c]
call fcn.00419040
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x470], 0
jne 0x40656d
cmp dword [ebp - 0x46c], 1
jne 0x406568
jmp 0x4066e2
jmp 0x406482
push dword [ebp - 0x34c]
call fcn.004190a0
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
je 0x4065b3
push dword [ebp - 0x134]
push dword [ebp - 0x470]
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x4065b1
push dword [ebp - 0x470]
call fcn.0040bf25
test eax, eax
je 0x4065b1
jmp 0x406482
jmp 0x4065bf
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x240]
and eax, 0x20
test eax, eax
jne 0x4065d1
jmp 0x406482
push dword [ebp - 0x134]
call fcn.0040bf25
test eax, eax
jne 0x4065e5
jmp 0x406482
lea eax, [ebp - 0x348]
push eax
push dword [ebp - 0x134]
call fcn.004142d0
push 0x423464
lea eax, [ebp - 0x348]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x40667d
push 0
lea eax, [ebp - 0x45c]
push eax
call fcn.004136b0
lea eax, [ebp - 0x238]
push eax
push dword [ebp - 0x134]
call fcn.004130de
lea eax, [ebp - 0x238]
push eax
call fcn.0041367a
push dword [ebp - 0x134]
push str.__s___UNREGSERVER
lea eax, [ebp - 0x348]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 1
lea eax, [ebp - 0x348]
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
cmp eax, 0x20
jae 0x40666f
and dword [ebp - 0x358], 0
lea eax, [ebp - 0x45c]
push eax
call fcn.0041367a
jmp 0x40668e
push dword [ebp - 0x134]
call fcn.004076aa
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0
jne 0x4066b6
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
push 0
push dword [ebp - 0x134]
push 0x3f8
call fcn.00403da4
push dword [ebp - 0x134]
push dword [ebp - 0x350]
call fcn.00419100
test eax, eax
jne 0x4066d2
xor eax, eax
jmp 0x4067b5
cmp dword [ebp - 0x46c], 1
jne 0x4066dd
jmp 0x4066e2
jmp 0x406482
push 1
pop eax
test eax, eax
je 0x4067a5
push dword [ebp - 0x350]
call fcn.00419040
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
je 0x4067a5
push dword [ebp - 0x130]
call fcn.0040bb1b
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x460]
and eax, 1
test eax, eax
je 0x406749
mov eax, dword [ebp - 0x460]
xor eax, 1
mov dword [ebp - 0x460], eax
push dword [ebp - 0x460]
push dword [ebp - 0x130]
call fcn.0040a3d7
push dword [ebp - 0x130]
call fcn.0040ac18
cmp eax, 0xffffffff
jne 0x40678f
push 1
push dword [ebp - 0x130]
push dword [ebp + 8]
call fcn.004078a0
add esp, 0xc
test eax, eax
jne 0x40678f
push 0
push dword [ebp - 0x130]
push 0x3f2
call fcn.00403da4
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
push dword [ebp - 0x350]
call fcn.004190a0
mov dword [ebp - 0x130], eax
jmp 0x4066fe
cmp dword [ebp - 0x23c], 0
jle 0x4067b2
xor eax, eax
jmp 0x4067b5
push 1
pop eax
leave
ret 8