Function at 0x10024860
Capabilities:
Create process on windows
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1004215e
mov eax, dword fs:[0]
push eax
sub esp, 0x1ec
mov eax, dword [0x1005b034]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea eax, [ebp - 0x80]
mov esi, ecx
push str.cmd.exe__C_ping
mov ebx, edx
push eax
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0xa4], 0
call fcn.10016630
push eax
mov eax, str.__n_1___temp.txt
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 1
call fcn.10007b50
add esp, 0xc
mov edi, 0x10
mov byte [ebp - 4], 3
cmp dword [ebp - 0x6c], edi
jb 0x100248e3
mov ecx, dword [ebp - 0x80]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor ebx, ebx
push 0x44
lea edx, [ebp - 0x1f8]
push ebx
push edx
mov dword [ebp - 0x6c], 0xf
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
call sub.MSVCR100.dll_memset
xor eax, eax
add esp, 0xc
mov word [ebp - 0x1c8], ax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x1f8], 0x44
mov dword [ebp - 0x1cc], 1
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ebx
cmp dword [ebp - 0x50], edi
jae 0x10024944
lea eax, [ebp - 0x64]
lea ecx, [ebp - 0xb8]
push ecx
lea edx, [ebp - 0x1f8]
push edx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x100249da
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char______cdecl_std::endl_class_std::basic_ostream_char__struct_std::char_traits_char____]
push eax
push ecx
push 0x1004f3ac
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
push eax
push str.CreateProcess_failed__
push ecx
call fcn.10002ad0
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.10002ad0
add esp, 0xc
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], ebx
xor edi, edi
mov eax, 0x1004df8f
mov byte [esi], bl
call fcn.10002d20
cmp dword [ebp - 0x50], 0x10
jb 0x100249cf
mov edx, dword [ebp - 0x64]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [ebp - 0xa0]
jmp 0x10024dda
mov eax, dword [ebp - 0xb8]
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [ebp - 0xb8]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ecx
call edi
mov edx, dword [ebp - 0xb4]
push edx
call edi
push str.temp.txt
lea eax, [ebp - 0x1b0]
push eax
call fcn.1000aba0
mov byte [ebp - 4], 4
cmp dword [ebp - 0x14c], ebx
jne 0x10024adf
mov ecx, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char______cdecl_std::endl_class_std::basic_ostream_char__struct_std::char_traits_char____]
mov edx, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
push ecx
push ecx
push str.Error_al_abrir_el_archivo_temporal.
push edx
call fcn.10002ad0
add esp, 0xc
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], ebx
xor edi, edi
mov eax, 0x1004df8f
mov byte [esi], bl
call fcn.10002d20
mov ecx, dword [ebp - 0x1b0]
mov edx, dword [ecx + 4]
lea eax, [ebp - 0x148]
mov dword [ebp - 0xa4], 1
mov dword [ebp - 0xa8], eax
mov dword [ebp + edx - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 5
call fcn.10006830
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [eax + 4]
mov edx, dword [sym.imp.MSVCP100.dll_const_std::basic_istream_char__struct_std::char_traits_char__::vftable]
mov dword [ebp + ecx - 0x1b0], edx
lea ecx, [ebp - 0x148]
call dword [sym.imp.MSVCP100.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
cmp dword [ebp - 0x50], 0x10
jb 0x100249cf
mov eax, dword [ebp - 0x64]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
mov eax, dword [ebp - 0xa0]
add esp, 4
jmp 0x10024dda
mov edi, 0xf
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
lea ecx, [ebp - 0x100]
push ecx
mov esi, str._d.d.d.d_
mov byte [ebp - 4], 6
call fcn.10025e00
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x1b0]
mov ecx, dword [edx + 4]
push 0xa
lea ecx, [ebp + ecx - 0x1b0]
call dword [sym.imp.MSVCP100.dll_public:_char___thiscall_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const]
movzx eax, al
push eax
lea ecx, [ebp - 0x1b0]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.10007f40
mov edx, dword [eax]
mov ecx, dword [edx + 4]
add ecx, eax
mov eax, dword [ecx + 0xc]
and al, 6
movsx edx, al
add esp, 8
neg edx
sbb edx, edx
not edx
test ecx, edx
je 0x10024ce0
lea ebx, [ebx]
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xd8], ebx
mov byte [ebp - 0xd4], bl
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
mov byte [ebp - 0xc8], bl
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xc0], ebx
mov byte [ebp - 0xbc], bl
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x2c]
mov esi, edx
cmp eax, 0x10
jae 0x10024c5b
lea esi, [ebp - 0x2c]
mov ecx, esi
add ecx, dword [ebp - 0x1c]
cmp eax, 0x10
mov eax, edx
jae 0x10024bd5
lea eax, [ebp - 0x2c]
push esi
lea edx, [ebp - 0x100]
push edx
push ecx
push eax
lea ecx, [ebp - 0xf0]
call fcn.10026c90
add esp, 0x10
test al, al
jne 0x10024c62
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0xec]
cmp eax, ebx
je 0x10024c09
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [eax + 4]
push 0xa
lea ecx, [ebp + ecx - 0x1b0]
call dword [sym.imp.MSVCP100.dll_public:_char___thiscall_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const]
movzx ecx, al
push ecx
lea edx, [ebp - 0x1b0]
push edx
lea ecx, [ebp - 0x2c]
call fcn.10007f40
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
mov edx, dword [ecx + eax + 0xc]
add ecx, eax
and dl, 6
movsx eax, dl
add esp, 8
neg eax
sbb eax, eax
not eax
test ecx, eax
jne 0x10024b60
jmp 0x10024ce0
mov ecx, edx
jmp 0x10024bc8
mov ecx, dword [ebp - 0xe8]
mov esi, dword [ebp - 0xec]
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea eax, [ebp - 0xc4]
je 0x10024c8a
mov eax, esi
lea ecx, [ebp - 0x9c]
call fcn.10025f40
lea edx, [ebp - 0x9c]
push edx
or eax, 0xffffffff
xor ebx, ebx
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xa
call fcn.100031a0
cmp dword [ebp - 0x88], 0x10
jb 0x10024cc6
mov eax, dword [ebp - 0x9c]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0xec]
test eax, eax
je 0x10024cde
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor ebx, ebx
lea ecx, [ebp - 0x1b0]
push ecx
call fcn.100067c0
push str.temp.txt
call dword [sym.imp.MSVCR100.dll_remove]
mov esi, dword [ebp - 0xa0]
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], ebx
add esp, 4
lea edi, [ebp - 0x48]
mov byte [esi], bl
call fcn.10003280
mov edi, 0x10
mov dword [ebp - 0xa4], 1
cmp dword [ebp - 0x34], edi
jb 0x10024d35
mov edx, dword [ebp - 0x48]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea eax, [ebp - 0x100]
push eax
mov dword [ebp - 0x34], 0xf
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
mov byte [ebp - 4], 6
call fcn.10025ea0
cmp dword [ebp - 0x18], edi
jb 0x10024d64
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x148]
mov dword [ebp - 0xa8], edx
mov dword [ebp + ecx - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0xb
call fcn.10006830
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x1b0]
mov ecx, dword [sym.imp.MSVCP100.dll_const_std::basic_istream_char__struct_std::char_traits_char__::vftable]
mov eax, dword [edx + 4]
mov dword [ebp + eax - 0x1b0], ecx
lea ecx, [ebp - 0x148]
call dword [sym.imp.MSVCP100.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
cmp dword [ebp - 0x50], edi
jb 0x10024dd8
mov edx, dword [ebp - 0x64]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1003e6b0
mov esp, ebp
pop ebp
ret