Function at 0x404af0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x864
mov eax, dword [0x462040]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov esi, ecx
lea eax, [ebp - 0x808]
mov edx, 0x800
mov byte [eax], 0
lea eax, [eax + 1]
sub edx, 1
jne 0x404b13
mov ecx, 0x44
lea eax, [ebp - 0x850]
nop dword [eax]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x404b30
mov ecx, 0x10
lea eax, [ebp - 0x860]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x404b46
xor eax, eax
lea ebx, [ecx + 5]
mov word [ebp - 0x820], ax
mov edi, 3
mov dword [ebp - 0x864], 0x62eb20
mov eax, dword [ebp - 0x864]
cdq
idiv edi
mov eax, dword [ebp - 0x864]
test edx, edx
je 0x404bca
add eax, 2
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
and eax, reloc.WS2_32.dll_closesocket
jns 0x404b9c
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x404c8a
mov eax, dword [ebp - 0x864]
inc eax
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
and eax, reloc.WS2_32.dll_closesocket
jns 0x404bc3
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x404ba2
jmp 0x404c8a
mov eax, dword [ebp - 0x864]
and eax, reloc.WS2_32.dll_closesocket
jns 0x404bde
dec eax
or eax, 0xfffffffc
add eax, 1
mov eax, dword [ebp - 0x864]
je 0x404c29
add eax, 2
lea eax, [eax + eax*2]
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
nop dword [eax + eax]
mov eax, dword [ebp - 0x864]
cdq
idiv ebx
mov eax, dword [ebp - 0x864]
test edx, edx
je 0x404c16
dec eax
jmp 0x404c17
inc eax
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
test al, 1
je 0x404c00
jmp 0x404c8a
cdq
idiv ebx
test edx, edx
je 0x404c8a
mov ecx, dword [ebp - 0x864]
mov eax, 0xb21642c9
add ecx, 0xb
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
cdq
idiv edi
test edx, edx
jne 0x404c8a
nop
mov eax, dword [ebp - 0x864]
cdq
idiv ebx
mov eax, dword [ebp - 0x864]
test edx, edx
je 0x404c76
inc eax
jmp 0x404c77
dec eax
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
cdq
idiv edi
test edx, edx
je 0x404c60
mov dword [ebp - 0x850], 0x44
mov dword [ebp - 0x864], 0x62eb20
mov eax, dword [ebp - 0x864]
cdq
idiv edi
mov eax, dword [ebp - 0x864]
test edx, edx
je 0x404d08
add eax, 0x46
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
and eax, reloc.WS2_32.dll_closesocket
jns 0x404cce
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x404dca
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [ebp - 0x864]
inc eax
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
and eax, reloc.WS2_32.dll_closesocket
jns 0x404d01
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x404ce0
jmp 0x404dca
mov eax, dword [ebp - 0x864]
and eax, reloc.WS2_32.dll_closesocket
jns 0x404d1c
dec eax
or eax, 0xfffffffc
add eax, 1
mov eax, dword [ebp - 0x864]
je 0x404d69
add eax, 2
imul eax, eax, 0x47
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
test al, 1
jne 0x404dca
nop
mov eax, dword [ebp - 0x864]
cdq
idiv ebx
mov eax, dword [ebp - 0x864]
test edx, edx
je 0x404d56
dec eax
jmp 0x404d57
inc eax
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
test al, 1
je 0x404d40
jmp 0x404dca
cdq
idiv ebx
test edx, edx
je 0x404dca
mov ecx, dword [ebp - 0x864]
mov eax, 0xb40b40b5
add ecx, 0xb
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
cdq
idiv edi
test edx, edx
jne 0x404dca
nop
mov eax, dword [ebp - 0x864]
cdq
idiv ebx
mov eax, dword [ebp - 0x864]
test edx, edx
je 0x404db6
inc eax
jmp 0x404db7
dec eax
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
cdq
idiv edi
test edx, edx
je 0x404da0
mov dword [ebp - 0x824], 1
mov dword [ebp - 0x864], 0x62eb20
mov eax, dword [ebp - 0x864]
cdq
idiv edi
mov eax, dword [ebp - 0x864]
test edx, edx
je 0x404e48
add eax, 3
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
and eax, reloc.WS2_32.dll_closesocket
jns 0x404e0e
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x404efe
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [ebp - 0x864]
inc eax
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
and eax, reloc.WS2_32.dll_closesocket
jns 0x404e41
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x404e20
jmp 0x404efe
mov eax, dword [ebp - 0x864]
and eax, reloc.WS2_32.dll_closesocket
jns 0x404e5c
dec eax
or eax, 0xfffffffc
add eax, 1
mov eax, dword [ebp - 0x864]
je 0x404ea0
lea eax, [eax*4 + 8]
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
mov eax, dword [ebp - 0x864]
cdq
idiv ebx
mov eax, dword [ebp - 0x864]
test edx, edx
je 0x404e8d
dec eax
jmp 0x404e8e
inc eax
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
test al, 1
je 0x404e77
jmp 0x404efe
cdq
idiv ebx
test edx, edx
je 0x404efe
mov ecx, dword [ebp - 0x864]
mov eax, 0x2aaaaaab
add ecx, 0xb
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
cdq
idiv edi
test edx, edx
jne 0x404efe
mov eax, dword [ebp - 0x864]
cdq
idiv ebx
mov eax, dword [ebp - 0x864]
test edx, edx
je 0x404eea
inc eax
jmp 0x404eeb
dec eax
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
cdq
idiv edi
test edx, edx
je 0x404ed4
push esi
lea eax, [ebp - 0x808]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x860]
push eax
lea eax, [ebp - 0x850]
push eax
push 0
push 0
push 0x8000000
push 0
push 0
push 0
lea eax, [ebp - 0x808]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x40535a
push 0x2710
push dword [ebp - 0x860]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x864], 0x62eb20
mov eax, dword [ebp - 0x864]
cdq
idiv edi
test edx, edx
je 0x404fc8
mov ecx, dword [ebp - 0x864]
mov eax, dword [ebp - 0x860]
add eax, 2
add eax, ecx
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
and eax, reloc.WS2_32.dll_closesocket
jns 0x404f93
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x40509a
nop dword [eax]
mov eax, dword [ebp - 0x864]
inc eax
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
and eax, reloc.WS2_32.dll_closesocket
jns 0x404fc1
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x404fa0
jmp 0x40509a
mov eax, dword [ebp - 0x864]
mov eax, dword [ebp - 0x864]
and eax, reloc.WS2_32.dll_closesocket
jns 0x404fe2
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x405039
mov ecx, dword [ebp - 0x864]
mov eax, dword [ebp - 0x860]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
test al, 1
jne 0x40509a
nop dword [eax]
mov eax, dword [ebp - 0x864]
cdq
idiv ebx
mov eax, dword [ebp - 0x864]
test edx, edx
je 0x405026
dec eax
jmp 0x405027
inc eax
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
test al, 1
je 0x405010
jmp 0x40509a
mov eax, dword [ebp - 0x864]
cdq
idiv ebx
test edx, edx
je 0x40509a
mov eax, dword [ebp - 0x864]
mov ecx, dword [ebp - 0x860]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
cdq
idiv edi
test edx, edx
jne 0x40509a
nop
mov eax, dword [ebp - 0x864]
cdq
idiv ebx
mov eax, dword [ebp - 0x864]
test edx, edx
je 0x405086
inc eax
jmp 0x405087
dec eax
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
cdq
idiv edi
test edx, edx
je 0x405070
push dword [ebp - 0x85c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
mov dword [ebp - 0x864], 0x62eb20
mov eax, dword [ebp - 0x864]
cdq
idiv edi
test edx, edx
je 0x405118
mov ecx, dword [ebp - 0x864]
mov eax, dword [ebp - 0x85c]
add eax, 2
add eax, ecx
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
and eax, reloc.WS2_32.dll_closesocket
jns 0x4050ea
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x4051ea
mov eax, dword [ebp - 0x864]
inc eax
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
and eax, reloc.WS2_32.dll_closesocket
jns 0x405111
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x4050f0
jmp 0x4051ea
mov eax, dword [ebp - 0x864]
mov eax, dword [ebp - 0x864]
and eax, reloc.WS2_32.dll_closesocket
jns 0x405132
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x405189
mov ecx, dword [ebp - 0x864]
mov eax, dword [ebp - 0x85c]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
test al, 1
jne 0x4051ea
nop dword [eax]
mov eax, dword [ebp - 0x864]
cdq
idiv ebx
mov eax, dword [ebp - 0x864]
test edx, edx
je 0x405176
dec eax
jmp 0x405177
inc eax
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
test al, 1
je 0x405160
jmp 0x4051ea
mov eax, dword [ebp - 0x864]
cdq
idiv ebx
test edx, edx
je 0x4051ea
mov eax, dword [ebp - 0x864]
mov ecx, dword [ebp - 0x85c]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
cdq
idiv edi
test edx, edx
jne 0x4051ea
nop
mov eax, dword [ebp - 0x864]
cdq
idiv ebx
mov eax, dword [ebp - 0x864]
test edx, edx
je 0x4051d6
inc eax
jmp 0x4051d7
dec eax
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
cdq
idiv edi
test edx, edx
je 0x4051c0
push dword [ebp - 0x860]
call esi
mov dword [ebp - 0x864], 0x62eb20
mov eax, dword [ebp - 0x864]
cdq
idiv edi
test edx, edx
je 0x405274
mov ecx, dword [ebp - 0x864]
mov eax, dword [ebp - 0x860]
add eax, 2
add eax, ecx
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
and eax, reloc.WS2_32.dll_closesocket
jns 0x405234
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x40535a
nop word [eax + eax]
mov eax, dword [ebp - 0x864]
inc eax
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
and eax, reloc.WS2_32.dll_closesocket
jns 0x405261
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x405240
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00434f21
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x864]
mov eax, dword [ebp - 0x864]
and eax, reloc.WS2_32.dll_closesocket
jns 0x40528e
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x4052f8
mov ecx, dword [ebp - 0x864]
mov eax, dword [ebp - 0x860]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
test al, 1
jne 0x40535a
nop dword [eax]
mov eax, dword [ebp - 0x864]
cdq
idiv ebx
mov eax, dword [ebp - 0x864]
test edx, edx
je 0x4052d6
dec eax
jmp 0x4052d7
inc eax
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
test al, 1
je 0x4052c0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00434f21
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x864]
cdq
idiv ebx
test edx, edx
je 0x40535a
mov eax, dword [ebp - 0x864]
mov ecx, dword [ebp - 0x860]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
cdq
idiv edi
test edx, edx
jne 0x40535a
nop dword [eax]
mov eax, dword [ebp - 0x864]
cdq
idiv ebx
mov eax, dword [ebp - 0x864]
test edx, edx
je 0x405346
inc eax
jmp 0x405347
dec eax
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
cdq
idiv edi
test edx, edx
je 0x405330
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00434f21
mov esp, ebp
pop ebp
ret