Function at 0x4264f0
Capabilities:
Create process on windows
Delete file
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56b312
mov eax, dword fs:[0]
push eax
sub esp, 0xd70
mov eax, dword [0x5d2640]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xc18], ecx
mov dword [ebp - 0xc68], 0
mov dword [ebp - 4], 0
movzx eax, byte [ebp - 0xc39]
push eax
lea ecx, [ebp - 0xec]
call fcn.00409420
mov byte [ebp - 4], 1
mov dword [ebp - 0xc2c], 0x57a6ec
mov ecx, dword [ebp - 0xc2c]
add ecx, 2
mov dword [ebp - 0xcfc], ecx
mov edx, dword [ebp - 0xc2c]
mov ax, word [edx]
mov word [ebp - 0xc46], ax
add dword [ebp - 0xc2c], 2
cmp word [ebp - 0xc46], 0
jne 0x426562
mov ecx, dword [ebp - 0xc2c]
sub ecx, dword [ebp - 0xcfc]
sar ecx, 1
mov dword [ebp - 0xd08], ecx
mov edx, dword [ebp - 0xd08]
mov dword [ebp - 0xd18], edx
mov eax, dword [ebp - 0xd18]
mov dword [ebp - 0xd1c], eax
mov ecx, dword [ebp - 0xd1c]
push ecx
push 0x57a6ec
lea ecx, [ebp - 0xec]
call fcn.00403cb0
mov byte [ebp - 4], 2
movzx edx, byte [ebp - 0xc3a]
push edx
lea ecx, [ebp - 0xd4]
call fcn.00409420
mov byte [ebp - 4], 3
mov dword [ebp - 0xc30], 0x57a700
mov eax, dword [ebp - 0xc30]
add eax, 2
mov dword [ebp - 0xd20], eax
mov ecx, dword [ebp - 0xc30]
mov dx, word [ecx]
mov word [ebp - 0xc48], dx
add dword [ebp - 0xc30], 2
cmp word [ebp - 0xc48], 0
jne 0x4265fa
mov eax, dword [ebp - 0xc30]
sub eax, dword [ebp - 0xd20]
sar eax, 1
mov dword [ebp - 0xd24], eax
mov ecx, dword [ebp - 0xd24]
mov dword [ebp - 0xd28], ecx
mov edx, dword [ebp - 0xd28]
mov dword [ebp - 0xd2c], edx
mov eax, dword [ebp - 0xd2c]
push eax
push 0x57a700
lea ecx, [ebp - 0xd4]
call fcn.00403cb0
mov byte [ebp - 4], 4
movzx ecx, byte [ebp - 0xc3b]
push ecx
lea ecx, [ebp - 0xbc]
call fcn.00409420
mov byte [ebp - 4], 5
mov dword [ebp - 0xc24], 0x57a724
mov edx, dword [ebp - 0xc24]
add edx, 2
mov dword [ebp - 0xd30], edx
mov eax, dword [ebp - 0xc24]
mov cx, word [eax]
mov word [ebp - 0xc4a], cx
add dword [ebp - 0xc24], 2
cmp word [ebp - 0xc4a], 0
jne 0x426692
mov edx, dword [ebp - 0xc24]
sub edx, dword [ebp - 0xd30]
sar edx, 1
mov dword [ebp - 0xd34], edx
mov eax, dword [ebp - 0xd34]
mov dword [ebp - 0xd38], eax
mov ecx, dword [ebp - 0xd38]
mov dword [ebp - 0xd3c], ecx
mov edx, dword [ebp - 0xd3c]
push edx
push 0x57a724
lea ecx, [ebp - 0xbc]
call fcn.00403cb0
mov byte [ebp - 4], 6
lea eax, [ebp - 0xec]
mov dword [ebp - 0xd04], eax
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0xd00], ecx
lea edx, [ebp - 0xc3c]
push edx
mov eax, dword [ebp - 0xd00]
push eax
mov ecx, dword [ebp - 0xd04]
push ecx
lea ecx, [ebp - 0xc88]
call fcn.00436860
mov byte [ebp - 4], 8
push fcn.004046e0
push 3
push 0x18
lea edx, [ebp - 0xec]
push edx
call fcn.0050f7fb
lea eax, [ebp - 0xc88]
push eax
call fcn.00401ec0
add esp, 4
lea ecx, [ebp + 8]
push ecx
mov ecx, dword [ebp - 0xc18]
add ecx, 0x3e8
call fcn.0040d420
mov edx, dword [ebp - 0xc18]
mov eax, dword [edx + 0x3f8]
mov dword [ebp - 0xc8c], eax
cmp dword [ebp - 0xc8c], 0x14
jae 0x4267dd
lea ecx, [ebp - 0xc14]
call fcn.00419540
mov byte [ebp - 4], 9
push 0
lea ecx, [ebp - 0xc14]
call fcn.00454b3d
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xc14]
call fcn.00454a86
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xc88]
call fcn.00418a30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00405e70
jmp 0x427040
mov ecx, dword [ebp - 0xc18]
add ecx, 0x400
push ecx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd58], esp
mov edx, dword [ebp - 0xc18]
add edx, 0x3e8
push edx
call fcn.00404350
mov ecx, dword [ebp - 0xc18]
call fcn.0042cda0
mov byte [ebp - 0xc19], al
mov al, byte [ebp - 0xc19]
mov byte [ebp - 0xc1a], al
movzx ecx, byte [ebp - 0xc1a]
cmp ecx, 1
jne 0x426871
sub esp, 0x48
mov ecx, esp
mov dword [ebp - 0xd64], esp
mov edx, dword [ebp - 0xc18]
add edx, 0x400
push edx
call fcn.0041eb80
mov eax, dword [ebp - 0xc18]
mov ecx, dword [eax + 0x3cc]
call fcn.0041d600
mov ecx, dword [ebp - 0xc18]
mov ecx, dword [ecx + 0x3cc]
call fcn.0041d720
jmp 0x4268bf
lea ecx, [ebp - 0x4b4]
call fcn.00419540
mov byte [ebp - 4], 0xa
push 0
lea ecx, [ebp - 0x4b4]
call fcn.00454b3d
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x4b4]
call fcn.00454a86
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xc88]
call fcn.00418a30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00405e70
jmp 0x427040
mov edx, dword [ebp - 0xc18]
mov ecx, dword [edx + 0x3cc]
call fcn.0041d5e0
mov dword [ebp - 0xd5c], eax
lea eax, [ebp - 0xd7c]
push eax
mov ecx, dword [ebp - 0xc18]
mov ecx, dword [ecx + 0x3cc]
call fcn.0041dfc0
mov dword [ebp - 0xc90], eax
mov edx, dword [ebp - 0xc90]
push edx
mov ecx, dword [ebp - 0xc18]
add ecx, 0x3a8
call fcn.00437570
lea ecx, [ebp - 0xd7c]
call fcn.004188f0
mov eax, dword [ebp - 0xc18]
add eax, 0x3a8
mov dword [ebp - 0xc78], eax
mov ecx, dword [ebp - 0xc78]
mov edx, dword [ebp - 0xc78]
mov eax, dword [ecx + 4]
sub eax, dword [edx]
cdq
mov ecx, 0x18
idiv ecx
mov dword [ebp - 0xc94], eax
cmp dword [ebp - 0xc94], 0
jbe 0x427022
lea edx, [ebp - 0xd14]
mov dword [ebp - 0xc98], edx
mov ecx, dword [ebp - 0xc98]
call fcn.004184d0
mov byte [ebp - 4], 0xb
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0xd60], esp
mov dword [ebp - 0xc54], eax
movzx ecx, byte [ebp - 0xc3d]
push ecx
mov ecx, dword [ebp - 0xc54]
call fcn.00409420
mov byte [ebp - 4], 0xc
mov dword [ebp - 0xc28], 0x57a74c
mov edx, dword [ebp - 0xc28]
add edx, 2
mov dword [ebp - 0xc9c], edx
mov eax, dword [ebp - 0xc28]
mov cx, word [eax]
mov word [ebp - 0xc4c], cx
add dword [ebp - 0xc28], 2
cmp word [ebp - 0xc4c], 0
jne 0x4269b0
mov edx, dword [ebp - 0xc28]
sub edx, dword [ebp - 0xc9c]
sar edx, 1
mov dword [ebp - 0xca0], edx
mov eax, dword [ebp - 0xca0]
mov dword [ebp - 0xca4], eax
mov ecx, dword [ebp - 0xca4]
mov dword [ebp - 0xca8], ecx
mov edx, dword [ebp - 0xca8]
push edx
push 0x57a74c
mov ecx, dword [ebp - 0xc54]
call fcn.00403cb0
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 0xd
push 0
lea eax, [ebp - 0xd14]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd40], esp
mov edx, dword [ebp - 0xc18]
add edx, 0x3b4
push edx
call fcn.00404350
mov byte [ebp - 4], 0xb
call fcn.00408cd0
add esp, 0x38
lea eax, [ebp - 0xd14]
mov dword [ebp - 0xc58], eax
mov ecx, dword [ebp - 0xc58]
mov edx, dword [ecx]
mov dword [ebp - 0xc34], edx
mov eax, dword [ebp - 0xc58]
mov ecx, dword [eax + 4]
mov dword [ebp - 0xcac], ecx
jmp 0x426a88
mov edx, dword [ebp - 0xc34]
add edx, 0x18
mov dword [ebp - 0xc34], edx
mov eax, dword [ebp - 0xc34]
cmp eax, dword [ebp - 0xcac]
je 0x426b6e
mov ecx, dword [ebp - 0xc34]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00404350
mov byte [ebp - 4], 0xe
mov byte [ebp - 0xc1b], 0
lea edx, [ebp - 0xc1b]
push edx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd44], esp
lea eax, [ebp - 0x28]
push eax
call fcn.00404350
lea ecx, [ebp - 0x70]
push ecx
call fcn.00402fc0
add esp, 0x20
mov dword [ebp - 0xd48], eax
push 0
push 0x57a758
lea ecx, [ebp - 0x70]
call fcn.00410030
cmp eax, 0xffffffff
je 0x426b12
lea ecx, [ebp - 0x28]
call fcn.00405cb0
mov dword [ebp - 0xcb0], eax
mov edx, dword [ebp - 0xcb0]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x426b55
push 0
push 0x57a770
lea ecx, [ebp - 0x28]
call fcn.00410030
cmp eax, 0xffffffff
jne 0x426b3a
push 0
push 0x57a788
lea ecx, [ebp - 0x28]
call fcn.00410030
cmp eax, 0xffffffff
je 0x426b55
lea ecx, [ebp - 0x28]
call fcn.00405cb0
mov dword [ebp - 0xcb4], eax
mov eax, dword [ebp - 0xcb4]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x70]
call fcn.00405e70
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x28]
call fcn.00405e70
jmp 0x426a79
push 0x57a798
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov ecx, dword [ebp - 0xc18]
call fcn.0042bea0
mov ecx, dword [ebp - 0xc18]
call fcn.0042a780
mov ecx, dword [ebp - 0xc18]
call fcn.0042b2a0
mov ecx, dword [ebp - 0xc18]
call fcn.0042ed70
mov ecx, dword [ebp - 0xc18]
call fcn.00427060
movzx ecx, al
test ecx, ecx
jne 0x426c05
push 0
push 0
push 0x57a7a8
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0xc18]
call fcn.00424f50
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xd14]
call fcn.00418a30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xc88]
call fcn.00418a30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00405e70
jmp 0x427040
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0xd4c], esp
mov edx, dword [ebp - 0xc18]
add edx, 0x3a8
push edx
call fcn.004367e0
mov ecx, dword [ebp - 0xc18]
call fcn.0042dbc0
mov ecx, dword [ebp - 0xc18]
call fcn.0042ca80
push 0x57a7ec
mov eax, dword [ebp - 0xc18]
add eax, 0x3b4
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.004146d0
add esp, 0xc
mov byte [ebp - 4], 0xf
movzx edx, byte [ebp - 0xc3e]
push edx
lea ecx, [ebp - 0x40]
call fcn.00409420
lea ecx, [ebp - 0x40]
call fcn.0040f620
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x40]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd50], esp
mov edx, dword [ebp - 0xc18]
add edx, 0x430
push edx
call fcn.00404350
call fcn.004159d0
add esp, 0x1c
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xcb8], eax
cmp dword [ebp - 0xcb8], 0
jne 0x426cfa
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x40]
call fcn.0040f520
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x58]
call fcn.00405e70
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xd14]
call fcn.00418a30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xc88]
call fcn.00418a30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00405e70
jmp 0x427040
push 0x2c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd54], esp
lea edx, [ebp - 0x40]
push edx
call fcn.0040bf50
lea eax, [ebp - 0xd70]
push eax
mov ecx, dword [ebp - 0xc18]
call fcn.0042ebb0
mov dword [ebp - 0xcbc], eax
mov ecx, dword [ebp - 0xcbc]
mov dword [ebp - 0xcc0], ecx
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0xcc0]
mov dword [ebp - 0xcc4], edx
xor eax, eax
imul ecx, eax, 0x18
mov edx, dword [ebp - 0xcc4]
add ecx, dword [edx]
mov dword [ebp - 0xcc8], ecx
mov eax, dword [ebp - 0xcc8]
mov dword [ebp - 0xccc], eax
mov ecx, dword [ebp - 0xccc]
mov dword [ebp - 0xc50], ecx
mov edx, dword [ebp - 0xc50]
mov dword [ebp - 0xc60], edx
mov eax, dword [ebp - 0xc50]
cmp dword [eax + 0x14], 0xf
jbe 0x426d93
mov dword [ebp - 0xc5c], 1
jmp 0x426d9d
mov dword [ebp - 0xc5c], 0
mov cl, byte [ebp - 0xc5c]
mov byte [ebp - 0xc1c], cl
movzx edx, byte [ebp - 0xc1c]
test edx, edx
je 0x426dce
mov eax, dword [ebp - 0xc50]
mov ecx, dword [eax]
mov dword [ebp - 0xcd0], ecx
mov edx, dword [ebp - 0xcd0]
mov dword [ebp - 0xc60], edx
mov eax, dword [ebp - 0xc60]
mov dword [ebp - 0xcd4], eax
mov ecx, dword [ebp - 0xcd4]
mov dword [ebp - 0xcd8], ecx
mov edx, dword [ebp - 0xcd8]
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.00417010
add esp, 8
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xd70]
call fcn.004188f0
lea ecx, [ebp - 0xa0]
push ecx
push 0x57a804
lea edx, [ebp - 0x104]
push edx
call fcn.00430220
add esp, 0xc
mov dword [ebp - 0xcdc], eax
mov eax, dword [ebp - 0xcdc]
mov dword [ebp - 0xc64], eax
mov byte [ebp - 4], 0x14
push 0x22
mov ecx, dword [ebp - 0xc64]
call fcn.00418ca0
mov ecx, dword [ebp - 0xc64]
mov dword [ebp - 0xce0], ecx
mov edx, dword [ebp - 0xce0]
push edx
lea ecx, [ebp - 0x88]
call fcn.004042e0
mov eax, dword [ebp - 0xc68]
or eax, 4
mov dword [ebp - 0xc68], eax
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x104]
call fcn.00405e70
lea ecx, [ebp - 0x864]
call fcn.004194c0
mov byte [ebp - 4], 0x17
push 0
lea ecx, [ebp - 0x864]
call fcn.00454b3d
lea ecx, [ebp - 0x88]
mov dword [ebp - 0xc38], ecx
mov edx, dword [ebp - 0xc38]
mov dword [ebp - 0xc70], edx
mov eax, dword [ebp - 0xc38]
cmp dword [eax + 0x14], 7
jbe 0x426ed1
mov dword [ebp - 0xc6c], 1
jmp 0x426edb
mov dword [ebp - 0xc6c], 0
mov cl, byte [ebp - 0xc6c]
mov byte [ebp - 0xc1d], cl
movzx edx, byte [ebp - 0xc1d]
test edx, edx
je 0x426f0c
mov eax, dword [ebp - 0xc38]
mov ecx, dword [eax]
mov dword [ebp - 0xce4], ecx
mov edx, dword [ebp - 0xce4]
mov dword [ebp - 0xc70], edx
mov eax, dword [ebp - 0xc70]
mov dword [ebp - 0xce8], eax
mov ecx, dword [ebp - 0xce8]
mov dword [ebp - 0xcf4], ecx
lea edx, [ebp - 0x58]
mov dword [ebp - 0xc44], edx
mov eax, dword [ebp - 0xc44]
mov dword [ebp - 0xc7c], eax
mov ecx, dword [ebp - 0xc44]
cmp dword [ecx + 0x14], 7
jbe 0x426f51
mov dword [ebp - 0xc74], 1
jmp 0x426f5b
mov dword [ebp - 0xc74], 0
mov dl, byte [ebp - 0xc74]
mov byte [ebp - 0xc1e], dl
movzx eax, byte [ebp - 0xc1e]
test eax, eax
je 0x426f8c
mov ecx, dword [ebp - 0xc44]
mov edx, dword [ecx]
mov dword [ebp - 0xcec], edx
mov eax, dword [ebp - 0xcec]
mov dword [ebp - 0xc7c], eax
mov ecx, dword [ebp - 0xc7c]
mov dword [ebp - 0xcf0], ecx
mov edx, dword [ebp - 0xcf0]
mov dword [ebp - 0xcf8], edx
push 1
push 0
mov eax, dword [ebp - 0xcf4]
push eax
mov ecx, dword [ebp - 0xcf8]
push ecx
push 0x57a830
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [ebp - 0xc18]
call fcn.00424f50
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x864]
call fcn.00454a86
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x88]
call fcn.00405e70
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xa0]
call fcn.00405e70
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x40]
call fcn.0040f520
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x58]
call fcn.00405e70
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xd14]
call fcn.00418a30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xc88]
call fcn.00418a30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00405e70
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0050f496
mov esp, ebp
pop ebp
ret 0x18