Function at 0x464bf0
Capabilities:
Create process on windows
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1e0
mov eax, dword [0x494494]
xor eax, ebp
mov dword [ebp - 0x5c], eax
push 0x104
push 0
lea eax, [ebp - 0x168]
push eax
call fcn.004067d0
add esp, 0xc
push 0x50
push 0
lea ecx, [ebp - 0x1d8]
push ecx
call fcn.004067d0
add esp, 0xc
cmp dword [ebp + 8], 0
je 0x464c3e
cmp dword [ebp + 0x10], 0
je 0x464c3e
cmp dword [ebp + 0xc], 0
jne 0x464c45
xor eax, eax
jmp 0x46502d
push 1
push 0x1a
lea edx, [ebp - 0x168]
push edx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
test eax, eax
jne 0x464c72
push 0x4869bc
lea eax, [ebp - 0x168]
push eax
call fcn.004064e0
add esp, 8
jmp 0x464c86
push 0x4869c0
lea ecx, [ebp - 0x168]
push ecx
call fcn.004064e0
add esp, 8
push 0x2f
mov edx, dword [ebp + 8]
push edx
call fcn.00405c50
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x464cb7
mov eax, dword [ebp + 0x10]
push eax
push str.temp__s.exe
lea ecx, [ebp - 0x1d8]
push ecx
call fcn.00406065
add esp, 0xc
jmp 0x464cd3
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
push eax
lea ecx, [ebp - 0x1d8]
push ecx
call fcn.004064d0
add esp, 8
push 0x2e
lea edx, [ebp - 0x1d8]
push edx
call fcn.00405c50
add esp, 8
test eax, eax
jne 0x464cfc
push 0x4869d0
lea eax, [ebp - 0x1d8]
push eax
call fcn.004064e0
add esp, 8
lea ecx, [ebp - 0x1d8]
push ecx
lea edx, [ebp - 0x168]
push edx
call fcn.004064e0
add esp, 8
cmp dword [ebp + 0x14], 0
je 0x464daa
push 0x2e
lea eax, [ebp - 0x168]
push eax
call fcn.00405c50
add esp, 8
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0
je 0x464daa
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.00406200
add esp, 4
mov edx, dword [ebp - 0x1dc]
sub edx, eax
mov dword [ebp - 0x1dc], edx
mov eax, dword [ebp - 0x1dc]
lea ecx, [ebp - 0x168]
cmp eax, ecx
jbe 0x464daa
mov edx, dword [ebp + 0x10]
push edx
call fcn.00406200
add esp, 4
push eax
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp - 0x1dc]
push ecx
call fcn.00407c65
add esp, 0xc
test eax, eax
je 0x464daa
mov edx, dword [ebp + 0x10]
push edx
call fcn.00406200
add esp, 4
push eax
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp - 0x1dc]
push ecx
call fcn.00405d00
add esp, 0xc
mov dword [ebp - 0x180], 0
push 0x13
push 0x499950
call fcn.00462220
add esp, 8
test eax, eax
je 0x464dfd
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x4b0914], 0
jne 0x464dfd
mov dword [0x4b0914], 1
push 0
push 0
push 0x4869d8
push 0x4869e8
mov ecx, 0x4bc9a0
call fcn.004601f0
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x184], 0
lea edx, [ebp - 0x188]
push edx
lea eax, [ebp - 0x168]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004777a0
add esp, 0xc
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], edx
mov edx, dword [ebp - 0x58]
cmp edx, dword [ebp - 0x188]
jne 0x464e55
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x184]
jne 0x464e55
mov ecx, dword [ebp - 0x188]
or ecx, dword [ebp - 0x184]
jne 0x464ea0
mov edx, dword [ebp - 0x180]
add edx, 1
mov dword [ebp - 0x180], edx
cmp dword [ebp - 0x180], 5
jle 0x464e90
push 0
push 0
push 0x4869f0
mov eax, dword [ebp + 0xc]
push eax
push 0x4869fc
mov ecx, 0x4bc9a0
call fcn.004600c0
xor eax, eax
jmp 0x46502d
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x464db4
push 0
push 0
push 0x486a00
mov ecx, dword [ebp + 0xc]
push ecx
push 0x486a0c
mov ecx, 0x4bc9a0
call fcn.004600c0
push 0x13
push 0x499950
call fcn.00462220
add esp, 8
test eax, eax
je 0x464f05
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x4b0914], 0
jne 0x464f05
mov dword [0x4b0914], 1
push 0
push 0
push str.actinstallinfo
push str.kp1T
mov ecx, 0x4bc9a0
call fcn.004601f0
mov dword [ebp - 0x50], 0x44
push 0x40
push 0
lea edx, [ebp - 0x4c]
push edx
call fcn.004067d0
add esp, 0xc
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0x50]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x168]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
je 0x464fb1
cmp dword [ebp - 0x17c], 0
je 0x464f8e
mov dword [ebp - 0x1e0], 0
push 0x493e0
mov eax, dword [ebp - 0x17c]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x102
jne 0x464f8c
jmp 0x465002
jmp 0x464faf
mov ecx, dword [ebp - 0x180]
add ecx, 1
mov dword [ebp - 0x180], ecx
cmp dword [ebp - 0x180], 5
jge 0x464fab
jmp 0x464db4
jmp 0x465002
jmp 0x464fd2
mov edx, dword [ebp - 0x180]
add edx, 1
mov dword [ebp - 0x180], edx
cmp dword [ebp - 0x180], 5
jge 0x464fce
jmp 0x464db4
jmp 0x465002
lea eax, [ebp - 0x168]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 0
push 0
push 0x486a28
mov ecx, dword [ebp + 0xc]
push ecx
push 0x486a34
mov ecx, 0x4bc9a0
call fcn.004600c0
mov eax, 1
jmp 0x46502d
push 0
push 0
push 0x486a38
mov edx, dword [ebp + 0xc]
push edx
push 0x486a44
mov ecx, 0x4bc9a0
call fcn.004600c0
lea eax, [ebp - 0x168]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
xor eax, eax
mov ecx, dword [ebp - 0x5c]
xor ecx, ebp
call fcn.00405ce8
mov esp, ebp
pop ebp
ret