Function at 0x408ff9
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4681c4
mov eax, dword fs:[0]
push eax
sub esp, 0x1cc
mov eax, dword [0x487304]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, dword [ebp + 0x20]
mov edx, 0x477804
mov eax, dword [ebp + 0x10]
mov esi, 0xc
mov ebx, dword [ebp + 8]
mov edi, dword [ebp + 0x1c]
mov dword [ebp - 0x1cc], ecx
mov ecx, dword [ebp + 0x24]
mov dword [ebp - 0x1c8], ecx
mov ecx, dword [ebp + 0x28]
mov dword [ebp - 0x1c4], ecx
mov ecx, eax
mov dword [ebp - 0x1d8], ebx
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 0x1d0], edi
mov dword [ebp - 0x1a4], 0
nop word [eax + eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x40921b
add ecx, 4
add edx, 4
sub esi, 4
jae 0x408c90
mov eax, dword [ebp + 0xc]
add eax, 0xffffff9a
cmp eax, 0xab
ja case.0x408cbd.103
movzx eax, byte [eax + 0x409274]
jmp dword [eax*4 + 0x40925c]
cmp dword [0x488fa8], 0
je 0x408d9a
lea ecx, [ebp - 0x19c]
call fcn.0042e48f
mov dword [ebp - 4], 0
lea edx, [ebp - 0x1a0]
mov eax, dword [ebx + 8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x78]
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0x19c]
call fcn.0042e641
push 0
push str.http:__gamebox.2217wy.com_index
lea ecx, [ebp - 0x19c]
call fcn.0042e9e0
test eax, eax
js 0x408d8f
mov edi, dword [0x488fa8]
push 0
call fcn.00427730
call fcn.0042b650
lea eax, [ebp - 0x158]
mov ecx, edi
push eax
call fcn.0042b2d0
mov byte [ebp - 4], 1
mov ecx, eax
mov dword [ebp - 0x1a4], 1
call fcn.0042ece7
test al, al
jne 0x408d5f
cmp byte [edi + 0x2cc], al
je 0x408d5f
mov bl, 1
jmp 0x408d61
xor bl, bl
lea ecx, [ebp - 0x158]
mov dword [ebp - 4], 0
call fcn.0042e585
test bl, bl
je 0x408d8f
cmp dword [0x488f9c], 0
mov byte [edi + 0x2cc], 0
jne 0x408d8f
mov ecx, dword [edi + 4]
call fcn.00415c00
lea ecx, [ebp - 0x19c]
jmp 0x4091d4
mov eax, dword [0x488f5c]
mov esi, dword [ebx + 8]
test eax, eax
je case.0x408cbd.102
test esi, esi
je case.0x408cbd.102
cmp byte [eax + 0x330], 0
je case.0x408cbd.102
call fcn.00403300
mov ecx, eax
test ecx, ecx
je 0x40923e
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 4], 2
call fcn.00403300
mov ecx, eax
test ecx, ecx
je 0x409248
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1a8], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c0]
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x74]
mov eax, dword [esi]
lea ecx, [ebp - 0x1bc]
push ecx
push esi
call dword [eax + 0x78]
push dword [ebp - 0x1bc]
lea ecx, [ebp - 0x1a4]
call fcn.00402fc0
push dword [ebp - 0x1c0]
lea ecx, [ebp - 0x1a8]
call fcn.00402fc0
mov eax, dword [0x488f5c]
or ebx, 0xffffffff
mov edi, dword [ebp - 0x1a4]
mov eax, dword [eax + 0x328]
mov dword [ebp - 0x1ac], eax
test eax, eax
je 0x408f82
cmp dword [edi - 0xc], 0
mov esi, dword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsstr]
jl 0x408ebf
push str.about:blank
push edi
call esi
add esp, 8
test eax, eax
je 0x408e85
sub eax, edi
jns 0x408f82
cmp dword [edi - 0xc], 0
jl 0x408ebf
push str.http:__gamebox.2217wy.com_clarino
push edi
call esi
add esp, 8
test eax, eax
je 0x408ea2
sub eax, edi
jns 0x408f82
cmp dword [edi - 0xc], 0
jl 0x408ebf
push str.http:__gamebox.2217wy.com_clarino
push edi
call esi
add esp, 8
test eax, eax
je 0x408ebf
sub eax, edi
jns 0x408f82
call fcn.00403300
mov ecx, eax
test ecx, ecx
je 0x409252
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1a0], eax
mov byte [ebp - 4], 4
lea eax, [ebp - 0x1a0]
push dword [ebp - 0x1a8]
push edi
push str._s__s
push eax
call fcn.00409320
push 0x104
lea eax, [ebp - 0x114]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [ebp - 0x1a0]
lea eax, [ebp - 0x114]
push esi
push 0x104
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
add esp, 0x28
mov dword [ebp - 0x1b4], 0x104
lea eax, [ebp - 0x114]
mov dword [ebp - 0x1b8], 3
mov dword [ebp - 0x1b0], eax
lea eax, [ebp - 0x1b8]
push eax
mov eax, dword [0x488f5c]
push dword [eax + 0x32c]
push 0x4a
push dword [ebp - 0x1ac]
call dword [sym.imp.USER32.dll_SendMessageA]
mov byte [ebp - 4], 3
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x408f82
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, ebx
mov edx, dword [ebp - 0x1a8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x408fa3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], ebx
dec ebx
test ebx, ebx
jg case.0x408cbd.102
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
jmp case.0x408cbd.102
mov ecx, dword [0x488fa8]
test ecx, ecx
je case.0x408cbd.102
call fcn.00427ff0
jmp case.0x408cbd.102
push 0
push str.js_err
push str.js_error
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp case.0x408cbd.102
cmp dword [0x488fa8], 0
je 0x4090b9
lea ecx, [ebp - 0x19c]
call fcn.0042e48f
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x19c]
mov eax, dword [edi]
push dword [eax + 8]
call fcn.0042e641
push 0
push str.gamebox.2217wy.com_game
lea ecx, [ebp - 0x19c]
call fcn.0042e9e0
test eax, eax
lea eax, [ebp - 0x19c]
jle 0x409065
sub esp, 0x44
mov ecx, esp
push eax
call fcn.0042e437
mov ecx, dword [0x488fa8]
call fcn.0042afa0
lea ecx, [ebp - 0x19c]
jmp 0x4091d4
push eax
lea ecx, [ebp - 0x158]
call fcn.0042e437
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 6
call fcn.0042ece7
test al, al
jne 0x4090a3
push 4
push 0
push 0
lea ecx, [ebp - 0x158]
call fcn.0042e701
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x158]
call fcn.0042e585
lea ecx, [ebp - 0x19c]
jmp 0x4091d4
mov eax, dword [0x488f5c]
test eax, eax
je case.0x408cbd.102
cmp dword [ebx + 8], 0
je case.0x408cbd.102
cmp byte [eax + 0x330], 0
je case.0x408cbd.102
lea ecx, [ebp - 0x158]
call fcn.0042e48f
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x158]
mov eax, dword [edi]
push dword [eax + 8]
call fcn.0042e641
mov eax, dword [0x488f5c]
mov esi, dword [eax + 0x328]
test esi, esi
je 0x4091ce
push 0
push str.about:blank
lea ecx, [ebp - 0x158]
call fcn.0042e9e0
test eax, eax
jns 0x4091ce
push 0
push str.http:__gamebox.2217wy.com_welfare
lea ecx, [ebp - 0x158]
call fcn.0042e9e0
test eax, eax
jns 0x4091ce
push 0
push str.http:__gamebox.2217wy.com_clarino
lea ecx, [ebp - 0x158]
call fcn.0042e9e0
test eax, eax
jns 0x4091ce
push 0x104
lea eax, [ebp - 0x114]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x158]
call fcn.0042e701
push eax
lea eax, [ebp - 0x114]
push 0x104
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
add esp, 0xc
mov dword [ebp - 0x1b4], 0x104
lea eax, [ebp - 0x114]
mov dword [ebp - 0x1b8], 9
mov dword [ebp - 0x1b0], eax
lea eax, [ebp - 0x1b8]
push eax
mov eax, dword [0x488f5c]
push dword [eax + 0x32c]
push 0x4a
push esi
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x158]
mov dword [ebp - 4], 0xffffffff
call fcn.0042e585
push dword [ebp - 0x1c4]
push dword [ebp - 0x1c8]
push dword [ebp - 0x1cc]
push dword [ebp - 0x1d0]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp - 0x1d4]
push dword [ebp + 0xc]
push dword [ebp - 0x1d8]
call fcn.00440fd9
jmp 0x409220
invalid
mov eax, 0x80020003
jmp 0x409220
mov eax, 0x80070057
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004662d8
mov esp, ebp
pop ebp
ret 0x24
push 0x80004005
call fcn.004030d0
push 0x80004005
call fcn.004030d0
push 0x80004005
call fcn.004030d0
loopne 0x4091ef
inc eax
add al, cl
pop dword [eax]
les ecx, [eax + eax*2 + 0x408fe000]
add cl, bh
pop dword [eax]
adc al, 0x92
inc eax
add byte [eax], al
add eax, 0x5050005
add eax, 84215045
add byte [84215045], al
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 83952896
add eax, 84215045
add al, byte [84215045]
add eax, 84215045
add eax, 1426326787
push ebp