Function at 0x479a80
Capabilities:
Create process on windows
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b481f
mov eax, dword fs:[0]
push eax
sub esp, 0x620
mov eax, dword [0x4e5258]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea ecx, [ebp - 0x5c8]
call fcn.0047b0e0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x5c8]
push eax
mov ecx, 0x4e86a0
call fcn.0047cb50
lea ecx, [ebp - 0x4fc]
call fcn.0045ee70
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x548]
call fcn.004604c0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x548]
call fcn.00460560
lea ecx, [ebp - 0x4fc]
push ecx
lea ecx, [ebp - 0x4f0]
call fcn.0046d870
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x62c]
call fcn.0042abe0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x62c]
call fcn.0042ad20
lea ecx, [ebp - 0x590]
call fcn.00463de0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x56c]
call fcn.00460b00
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x504]
call fcn.004418b0
mov byte [ebp - 4], 7
lea edx, [ebp - 0x28]
push edx
call fcn.00479900
add esp, 4
mov byte [ebp - 4], 8
push 0xffffffffffffffff
push 0x4c0ad0
lea ecx, [ebp - 0x28]
call fcn.0043ed50
push eax
push 0
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x28]
call fcn.004405d0
mov dword [ebp - 0x508], eax
mov ecx, dword [ebp - 0x508]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00438c10
lea ecx, [ebp - 0x40]
call fcn.00438400
push str.Pro5.ini
lea ecx, [ebp - 0x28]
call fcn.00439800
push 0x4c0ae0
lea ecx, [ebp - 0x28]
call fcn.0043d960
push eax
lea edx, [ebp - 0x510]
push edx
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fopen_s
add esp, 0xc
mov dword [ebp - 0x50c], eax
cmp dword [ebp - 0x50c], 0
je 0x479c05
push str._Pro5_:Not_Pro5.ini
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
lea ecx, [ebp - 0x28]
call fcn.0043d960
push eax
push str.binary
push 0x7f
call fcn.004799a0
add esp, 0xc
push 0x14
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x479c14
mov eax, dword [ebp - 0x510]
push eax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fclose
add esp, 4
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x524], esp
lea edx, [ebp - 0x28]
push edx
call fcn.00436730
lea ecx, [ebp - 0x504]
call fcn.00441930
mov byte [ebp - 0x4f1], al
mov al, byte [ebp - 0x4f1]
mov byte [ebp - 0x4f2], al
movzx ecx, byte [ebp - 0x4f2]
test ecx, ecx
jne 0x479c7c
push 0
push str.Pro5.ini___Error
push str.Pro5.ini___Error__r_n1:Could_not_open_file_Pro5.ini_r_n2:The_text_couldnt_be_read_because_it_isnt_in_the_correct_format.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 1
push 0
push 0
push str.http:__www.Pro5.app
push 0x4c0c28
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0
push 0
lea ecx, [ebp - 0x4f0]
call fcn.0047e510
test eax, eax
jne 0x479d3b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x528], eax
mov dword [ebp - 0x514], 0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x28]
call fcn.00438400
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x504]
call fcn.00441910
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x56c]
call fcn.00460b30
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x590]
call fcn.00463e10
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x62c]
call fcn.0042acc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4f0]
call fcn.0046d9f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x548]
call fcn.00460540
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4fc]
call fcn.0045eec0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c8]
call fcn.0047ba50
mov eax, dword [ebp - 0x514]
jmp 0x479ed7
lea ecx, [ebp - 0x4fc]
call fcn.0045eee0
test eax, eax
jne 0x479dfe
push 0
push 0x4c0c30
push str.Init_drivers_err:_r_n1.Antivirus_software_killing_by_mistake._r_n2.Please_try_restarting_the_system.._r_n3.This_operation_requires_administrator_permission_r_n_r_n
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0x518], 0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x28]
call fcn.00438400
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x504]
call fcn.00441910
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x56c]
call fcn.00460b30
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x590]
call fcn.00463e10
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x62c]
call fcn.0042acc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4f0]
call fcn.0046d9f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x548]
call fcn.00460540
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4fc]
call fcn.0045eec0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c8]
call fcn.0047ba50
mov eax, dword [ebp - 0x518]
jmp 0x479ed7
mov edx, dword [ebp + 0xc]
push edx
lea ecx, [ebp - 0x4ec]
call fcn.00444600
lea ecx, [ebp - 0x5c8]
call fcn.00486540
mov dword [ebp - 0x51c], eax
lea ecx, [ebp - 0x4fc]
call fcn.0045ef30
lea ecx, [ebp - 0x548]
call fcn.004605a0
mov ecx, 0x4e86a0
call fcn.00486110
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0x520], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x28]
call fcn.00438400
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x504]
call fcn.00441910
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x56c]
call fcn.00460b30
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x590]
call fcn.00463e10
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x62c]
call fcn.0042acc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4f0]
call fcn.0046d9f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x548]
call fcn.00460540
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4fc]
call fcn.0045eec0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c8]
call fcn.0047ba50
mov eax, dword [ebp - 0x520]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004adff8
mov esp, ebp
pop ebp
ret