Function at 0x404820
Capabilities:
Create process on windows
Create process suspended

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x415f60
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x864
mov eax, dword [0x478010]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x85c], ecx
mov dword [ebp - 0x86c], str.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
mov dword [ebp - 0x868], str.T7Lqp2ec9iobELO8s8bBm00f10oJYMW54KXwy5pzHktwEFCPxAvbttTHEyPbW9C5rXWqW6Udz2dQwASB3FEa9plTgTdheF7vdDDAq2X1FMQ5c82rqA0hlsQmJrUTDoVIBMlsxHSAovtzTf7AbChaL37it9foiCfjRrLrFHcfFJ5a7cQsM7EtTuTAsAnxx5M2fL1RUvu1YAw7zzBGLuFL0SbT6UnC0K1R0Yz4anyAfIBaiil5EhgA5b3voOekA0X1qpig3ripXoYtyCIHX4IoU8HsNCMOrsmPOntG0CLz7rbGT80MivNC3nytlbMG09wVvoKubFaVdhFS7J5LcnzFMi6YxXR1Vns6NWbMxcN1hULCiExhgsxSebY6oYzjdNLk4GbDMB93QTHSLtza6FAxb60FuRix4oJNEiC4oaPWYnA784Yuk1YThW5eQNn9WsgVXxG3BVBog6qcgFhuAwp9Svi25wYXDDSkmf0wpNmGKl8viOyDwkTr8jR0gpfm9SMNhnylBx7T40sPDozANFUTWK8N1m66KuOl8TLlIF4Mjw6rVBJc7OhzX5CLrSsq15pbmUok3BvL8XC38X6wa9esElVXd431JBHJqAB2FyU1EWuOqmiQE7oycoQ9sxy10krBN9Y9pySozD3mhXGDjfKJyXjLRyu19Q0DYTsiRu8s3PwJqjdyT8IUtAmYCVk4N7qPsfp6p3ysMS4uPdtvbt6TsCcFq2mFPnmrKFx7aLan0HFANRIxT14sKh9puQNLndaSoI0O207ToNhsOMOWSCaloyHsyUMMQyJNW0hGGVImehF0HLjeVbodbjuLSniAVDH2Xfj8wApRfMxwu0l4RH4IFdg4dTdsy2iB3dnvLMLcJytPwVImwgXsbMUHQMjbUDmLMNa9mdvOurWbnqTcL0dXOlvKzThXvGs0LUKi2mvUNNkfTAXRsajIr4c2HFFv2JHUFBCchyKouDRbdSDSt3cdEVk147UTwETn5VD1lWpQTuHAI9gXK3aNQKlT1OnJeFvrH72SgxJySvRx3tS0bBVSccRAoXh4GkzndnsTN6bwNnjv8k76GiyJCIDFAjKlHuPDg3V5xjhrwpPu8uhAfIwDLCxsu9MwllDTBxTpLBLJts9Sv5gYOzIN82BVuqi0Vq01UmaPAhtvyXQxYwF1nEonUV0PwA6B3Ax5Y4VgQupybXqOvAGATMbv551z2IPDA0xmwhMxa9Epk4gslncPqV8hp77fXs7QDbVkkKIrT3wgqpDH1kE6Y5FGosSGL2osDXhEag7KeOp4tMGfg9cTAkDIjo3psd16cwLgQHJa2QRqXwtbaXCYkQekd0uEwofThlfdb1Il1rzFSxX809khgS3oUfdkYvdp2fdN1fETBFnPMjW7lsmVtK5KYPm4l7WEWnLwbvrp1reDFVbD2Wpi5RJcLoecGjm6JeG4x0qnexgx81hDc1PUcGLsmjgMyLhEoBnmYXjiYvHEdOIwbnAxXNlhEP1y2LnI9CStoLezKKXPv8U8B5i9xO1gi2dWH9h7wKTJGPGAQwAC8l9LpveQ5sJ3ENH7Gkq7jNJENFxGjRfhFpBdJmf3LwPbUQuTBjeryRnVEQ79TGIJhRlE1EVjOS3b1KHQBFUjzppvd12ceF1FBOkKVMqnqtvvFSBflzFlWb7ssWp3BocqO0oEupzePkGzkrD2XJwEvjlanqFP8cv4zDhTSyO3hyvLdsmRcupLoeE6WmEFFjkl6CDxCzgc2lgomOr7dH9GWFd1eHBzRKaJ4mY2s8EhmWBKudKQJQsSPKOQexaz7mHqJQHjpen3zGE3a9fQ10XfXRVJ0XkDyQIgPH7KLdrwX1OuEX3AMK89vLE0CdvD9IaPD4qd7HwRRp0c2RrfkjmoSwHbayvtyj8rSFGXgIVuBqog8QNGptVfOxt3JlvWgNN2TRTLhzAYyKFJwJGvkz2riwWwr26OtbAjswUNwS5946QBzdKYSzG8vzNLp8fPbgWET8uHCDEYygkPqJQ8rXRW02l9LfiE9Iya3KgBt9aGo9UjVDWCOQpXwCtcI31UT1bDh0M3d07F1IOTL58QnU3J6oNGpiwcIuKzq6t2fcEyQ0Cpm1DV0ood3Iwz2Oo2EflaSOD2gYyal9jBSgSF48XRUhw3MwvUxh9kyxvWdYiuXjeciqmytubyx7hrUochVmvERdaak8SLcN9PiYLOFvjE1yVmEuawc8VsImAu3H4qwXdbneSlAHxWHjgzfYv0r22LA4Gd9hc4tfYLNgGLFfXFfmH2X4H1ylzip1d3BNfyy8nay2fpSPxyv5iW64DNcatsEtPaJwQUkdHOrjMhIM7JE6LHVkzzKsMnmh5d40imlbFaYGG7aWsP8qrSNlavpWGSYPqhnatmbLqBwBskKMbTAnig2CsH6fwvz8cTLeWxqNpu6jK4vlOs2BYQXLTfyLKtEKB3zLUKGbw5ASlaYdMuD5JQYvj8fL0IiOKdoGd3zR4Eyec8eApoU8tErATlpk0T45Ff6bkFIWFoq7mfOeS4BnKSJRjN2kEk3QgwNOl5Nyosi44qRtiOIMJjifvoTv15PYhQWs2WtSHW5wEkXgCrzCgXwKUWyreSyWpuakN7qfqVtGCjf5JbFxN4SsigjvDcQMe9oVGEl0LpRBBpl0pGRtt2OwN3cUFbP7cXQalPVAolvbnoqGi9eG0sNc325IWGd8EBXb79XygFk5RHaoU85NMckLWOyMch8BQ6uwXe9uOf4S7wJSJG3JRfTER3YOiciTTYq1tXg6NTeWkIPA4j1KTR2jweulfsVUPf0QTs47rp5rQQHs7X8qdsfj3TYIfGKbyjKw7YnohvEpab4303LHJF8gXv78yh0MS3uQD1YQiSJGRHatHrDM5mdSbsjBDiqnuOg0DfJuOaSWK5Lr8qFitw6W07LW4xjcXnntUzrmBVqIGHbf4N45Msnk5NrRyts5M0r3U7XCNKsjJFaI9KhoxzEWxM4PYi9pjniTJ8cwT7PT5J
mov dword [ebp - 4], 0
push str.CREATE_SUSPENDED
mov eax, dword [ebp - 0x85c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x85c]
mov eax, dword [edx + 0x24]
call eax
push 0x400
lea ecx, [ebp - 0x814]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x44
push 0
lea edx, [ebp - 0x858]
push edx
call fcn.00409d70
add esp, 0xc
mov dword [ebp - 0x874], str.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
mov dword [ebp - 0x870], str.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
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x85c]
call fcn.00406d80
mov dword [ebp - 0x864], eax
push 0x4794b4
lea ecx, [ebp - 0x858]
push ecx
push 0
push 0
push 4
push 0
push 0
push 0
mov edx, dword [ebp - 0x864]
push edx
lea eax, [ebp - 0x814]
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
jmp 0x404935
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0040a5ce
mov esp, ebp
pop ebp
ret 4