Function at 0x407080
Capabilities:
Create process on windows
Delete directory
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x4748f0
mov eax, dword fs:[0]
push eax
sub esp, 0x74
mov eax, dword [0x4c60a0]
xor eax, esp
mov dword [esp + 0x70], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4c60a0]
xor eax, esp
push eax
lea eax, [esp + 0x88]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x98]
mov eax, 7
xor edi, edi
xor ecx, ecx
mov dword [esp + 0x64], eax
mov dword [esp + 0x60], edi
mov word [esp + 0x50], cx
mov dword [esp + 0x90], edi
xor edx, edx
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], edi
mov word [esp + 0x34], dx
mov bl, 1
lea ecx, [esp + 0x14]
mov byte [esp + 0x90], bl
call fcn.0040e230
push 0xffffffffffffffff
push edi
lea ecx, [esp + 0x54]
mov byte [esp + 0x98], 2
call fcn.0040a460
mov byte [esp + 0x90], bl
cmp dword [esp + 0x2c], 8
jb 0x407129
mov eax, dword [esp + 0x18]
push eax
call fcn.0046202e
add esp, 4
lea ecx, [esp + 0x4c]
push ecx
mov ebx, 0x499ba8
lea esi, [esp + 0x18]
call fcn.0040b0e0
add esp, 4
push 0xffffffffffffffff
push edi
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 3
call fcn.0040a460
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x407173
mov edx, dword [esp + 0x18]
push edx
call fcn.0046202e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x407181
lea eax, [esp + 0x34]
push edi
push edi
push edi
push eax
push 0x499bc8
push edi
mov edi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
call edi
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x4071a1
lea eax, [esp + 0x34]
push 0
push 0
push 0
push eax
push 0x499be4
push 0
call edi
push 0xffffffffffffffff
push 0
lea eax, [ebp + 0x180]
lea ecx, [esp + 0x54]
call fcn.0040a460
lea eax, [esp + 0x4c]
push eax
mov ebx, 0x499bfc
lea esi, [esp + 0x18]
call fcn.0040b0e0
add esp, 4
push 0xffffffffffffffff
xor ebp, ebp
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 4
call fcn.0040a460
mov bl, 1
mov esi, 8
mov byte [esp + 0x90], bl
cmp dword [esp + 0x2c], esi
jb 0x407211
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046202e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x40721f
lea eax, [esp + 0x34]
push ebp
push ebp
push ebp
push eax
push 0x499bc8
push ebp
call edi
lea ecx, [esp + 0x14]
call fcn.0040e0b0
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x54]
mov byte [esp + 0x98], 5
call fcn.0040a460
mov byte [esp + 0x90], bl
cmp dword [esp + 0x2c], esi
jb 0x407262
mov edx, dword [esp + 0x18]
push edx
call fcn.0046202e
add esp, 4
lea eax, [esp + 0x4c]
push eax
mov ebx, 0x499c24
lea esi, [esp + 0x18]
call fcn.0040b0e0
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 6
call fcn.0040a460
mov bl, 1
mov esi, 8
mov byte [esp + 0x90], bl
cmp dword [esp + 0x2c], esi
jb 0x4072ad
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046202e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x4072bb
lea eax, [esp + 0x34]
push ebp
push ebp
push ebp
push eax
push 0x499bc8
push ebp
call edi
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x4072d5
lea eax, [esp + 0x34]
push ebp
push ebp
push ebp
push eax
push 0x499be4
push ebp
call edi
lea ecx, [esp + 0x14]
call fcn.0040e0b0
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x54]
mov byte [esp + 0x98], 7
call fcn.0040a460
mov byte [esp + 0x90], bl
cmp dword [esp + 0x2c], esi
jb 0x407318
mov edx, dword [esp + 0x18]
push edx
call fcn.0046202e
add esp, 4
lea eax, [esp + 0x4c]
push eax
mov ebx, 0x499c24
lea esi, [esp + 0x18]
call fcn.0040b0e0
add esp, 4
push 0xffffffffffffffff
mov ebx, 8
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], bl
call fcn.0040a460
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], ebx
jb 0x407361
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046202e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], ebx
jae 0x40736f
lea eax, [esp + 0x34]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push eax
call edi
lea edx, [esp + 0x4c]
push edx
mov ebx, 0x499c38
lea esi, [esp + 0x18]
call fcn.0040b0e0
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 9
call fcn.0040a460
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x4073c2
mov eax, dword [esp + 0x18]
push eax
call fcn.0046202e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x4073d0
lea eax, [esp + 0x34]
push eax
call edi
lea ecx, [esp + 0x4c]
push ecx
mov ebx, 0x499c4c
lea esi, [esp + 0x18]
call fcn.0040b0e0
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 0xa
call fcn.0040a460
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x40741d
mov edx, dword [esp + 0x18]
push edx
call fcn.0046202e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x40742b
lea eax, [esp + 0x34]
push eax
call edi
lea eax, [esp + 0x4c]
push eax
mov ebx, 0x499c60
lea esi, [esp + 0x18]
call fcn.0040b0e0
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 0xb
call fcn.0040a460
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x407478
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046202e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x407486
lea eax, [esp + 0x34]
push eax
call edi
lea edx, [esp + 0x4c]
push edx
mov ebx, 0x499c7c
lea esi, [esp + 0x18]
call fcn.0040b0e0
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 0xc
call fcn.0040a460
mov bl, 1
mov esi, 8
mov byte [esp + 0x90], bl
cmp dword [esp + 0x2c], esi
jb 0x4074d4
mov eax, dword [esp + 0x18]
push eax
call fcn.0046202e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x4074e2
lea eax, [esp + 0x34]
push eax
call edi
lea ecx, [esp + 0x14]
call fcn.0040e230
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x54]
mov byte [esp + 0x98], 0xd
call fcn.0040a460
mov byte [esp + 0x90], bl
cmp dword [esp + 0x2c], esi
jb 0x40751c
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046202e
add esp, 4
lea edx, [esp + 0x4c]
push edx
mov ebx, 0x499ba8
lea esi, [esp + 0x18]
call fcn.0040b0e0
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 0xe
call fcn.0040a460
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x407566
mov eax, dword [esp + 0x18]
push eax
call fcn.0046202e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x407574
lea eax, [esp + 0x34]
push eax
call edi
lea ecx, [esp + 0x4c]
push ecx
mov ebx, 0x499c98
lea esi, [esp + 0x18]
call fcn.0040b0e0
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 0xf
call fcn.0040a460
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x4075c1
mov edx, dword [esp + 0x18]
push edx
call fcn.0046202e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x4075cf
lea eax, [esp + 0x34]
push eax
call edi
lea eax, [esp + 0x4c]
push eax
mov ebx, 0x499cb8
lea esi, [esp + 0x18]
call fcn.0040b0e0
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 0x10
call fcn.0040a460
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x40761c
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046202e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x40762a
lea eax, [esp + 0x34]
push eax
call edi
lea edx, [esp + 0x4c]
push edx
mov ebx, 0x499cdc
lea esi, [esp + 0x18]
call fcn.0040b0e0
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 0x11
call fcn.0040a460
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x407677
mov eax, dword [esp + 0x18]
push eax
call fcn.0046202e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x407685
lea eax, [esp + 0x34]
push eax
call edi
lea ecx, [esp + 0x4c]
push ecx
mov ebx, 0x498c60
lea esi, [esp + 0x6c]
call fcn.0040b0e0
mov eax, dword [esp + 0x70]
mov esi, 8
add esp, 4
cmp dword [esp + 0x80], esi
jae 0x4076b4
lea eax, [esp + 0x6c]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
cmp dword [esp + 0x80], esi
jb 0x4076d1
mov edx, dword [esp + 0x6c]
push edx
call fcn.0046202e
add esp, 4
xor eax, eax
mov edi, 7
mov dword [esp + 0x80], edi
mov dword [esp + 0x7c], ebp
mov word [esp + 0x6c], ax
cmp dword [esp + 0x48], esi
jb 0x4076fb
mov ecx, dword [esp + 0x34]
push ecx
call fcn.0046202e
add esp, 4
xor edx, edx
mov dword [esp + 0x48], edi
mov dword [esp + 0x44], ebp
mov word [esp + 0x34], dx
cmp dword [esp + 0x64], esi
jb 0x40771d
mov eax, dword [esp + 0x50]
push eax
call fcn.0046202e
add esp, 4
mov ecx, dword [esp + 0x88]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x70]
xor ecx, esp
call fcn.00462039
add esp, 0x80
ret 4