Function at 0x406cf4
Capabilities:
Create process on windows
Delete file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffec
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], eax
call fcn.00403044
call fcn.004041dc
call fcn.004062e8
mov ebx, 0x40be10
mov esi, 0x40b2f4
mov edi, 0x40b2f8
xor eax, eax
push ebp
push 0x407058
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x10]
call fcn.00406c44
mov edx, dword [ebp - 0x10]
mov eax, 0x40b30c
call fcn.00403150
lea edx, [ebp - 0x10]
xor eax, eax
call fcn.004027e0
mov eax, dword [ebp - 0x10]
mov edx, 0x40
call fcn.004049f0
mov dword [esi], eax
xor ecx, ecx
mov edx, 0x9000
mov eax, dword [esi]
call fcn.00404aac
mov edx, 0x40b41c
mov ecx, 0x9f4
mov eax, dword [esi]
call fcn.00404a54
cmp dword [0x40b438], 0
jne 0x406d93
mov eax, dword [esi]
call fcn.00404ab8
jmp 0x40703d
mov ecx, 1
mov edx, dword [0x40bd4c]
mov eax, dword [esi]
call fcn.00404aac
mov al, byte [0x40bd91]
test al, al
je 0x406e0f
cmp al, 1
je 0x406e0f
mov edx, ebx
mov ecx, 0x80
mov eax, dword [esi]
call fcn.00404a54
mov edx, dword [0x40b30c]
lea eax, [ebp - 0x10]
call fcn.00403194
lea eax, [ebp - 0x14]
mov edx, ebx
call fcn.00403210
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x10]
call fcn.0040326c
mov eax, dword [ebp - 0x10]
call fcn.00404a30
mov dword [edi], eax
mov dword [0x40b300], 0x7fffffff
mov ecx, 0x406b78
mov edx, 0x406a28
mov eax, ebx
call fcn.00406bdc
mov eax, dword [edi]
call fcn.00404ab8
mov edx, ebx
mov ecx, 0x80
mov eax, dword [esi]
call fcn.00404a54
jmp 0x406e72
mov edx, dword [0x40b30c]
lea eax, [ebp - 0x10]
call fcn.00403194
lea eax, [ebp - 0x14]
mov edx, ebx
call fcn.00403210
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x10]
call fcn.0040326c
mov eax, dword [ebp - 0x10]
call fcn.00404a30
mov dword [edi], eax
mov ecx, 0x406b78
mov edx, 0x406b54
mov eax, ebx
call fcn.00406bdc
mov eax, dword [edi]
call fcn.00404ab8
mov edx, ebx
mov ecx, 0x80
mov eax, dword [esi]
call fcn.00404a54
mov eax, ebx
mov edx, 0x40706c
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402838
je 0x406e1f
mov eax, ebx
mov edx, 0x407078
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402838
je 0x406e1f
mov edx, dword [0x40b30c]
lea eax, [ebp - 0x10]
call fcn.00403194
lea eax, [ebp - 0x10]
mov edx, 0x40708c
call fcn.0040326c
mov eax, dword [ebp - 0x10]
call fcn.00404a30
mov dword [edi], eax
mov eax, dword [0x40bd6c]
add eax, dword [0x40bd70]
mov dword [0x40b300], eax
mov ecx, 0x406b2c
mov edx, 0x406a28
mov eax, ebx
call fcn.00406bdc
mov eax, dword [edi]
call fcn.00404ab8
mov eax, dword [esi]
call fcn.00404ab8
mov edx, 0x40b418
xor eax, eax
call fcn.004026bc
lea edx, [ebp - 0x14]
mov eax, 1
call fcn.004027e0
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x10]
call fcn.00404934
mov eax, dword [ebp - 0x10]
mov edx, 0x4070a0
call fcn.00403374
jne 0x406f6d
mov edx, dword [0x40b30c]
lea eax, [ebp - 0x10]
call fcn.00403194
lea eax, [ebp - 0x10]
mov edx, 0x4070b0
call fcn.0040326c
lea eax, [ebp - 0x10]
push eax
lea edx, [ebp - 0x14]
xor eax, eax
call fcn.004027e0
mov edx, dword [ebp - 0x14]
pop eax
call fcn.0040326c
lea eax, [ebp - 0x10]
mov edx, 0x4070cc
call fcn.0040326c
mov edx, dword [ebp - 0x10]
mov eax, 0x40b310
call fcn.00404bc0
jmp 0x406fb9
mov edx, dword [0x40b30c]
lea eax, [ebp - 0x10]
call fcn.00403194
lea eax, [ebp - 0x10]
mov edx, 0x4070d8
call fcn.0040326c
lea eax, [ebp - 0x10]
push eax
lea edx, [ebp - 0x14]
xor eax, eax
call fcn.004027e0
mov edx, dword [ebp - 0x14]
pop eax
call fcn.0040326c
lea eax, [ebp - 0x10]
mov edx, 0x4070cc
call fcn.0040326c
mov edx, dword [ebp - 0x10]
mov eax, 0x40b310
call fcn.00404bc0
mov eax, dword [0x40b30c]
call fcn.004026a0
call fcn.00402664
push 5
push 0x40b310
call sub.kernel32.dll_WinExec
mov edx, dword [0x40b30c]
lea eax, [ebp - 0x10]
call fcn.00403194
lea eax, [ebp - 0x10]
mov edx, 0x40708c
call fcn.0040326c
mov edx, dword [ebp - 0x10]
mov eax, 0x40b310
call fcn.00404bc0
jmp 0x407008
push 0x3e8
call sub.kernel32.dll_Sleep
mov edx, dword [0x40b30c]
lea eax, [ebp - 0x10]
call fcn.00403194
lea eax, [ebp - 0x10]
mov edx, 0x40708c
call fcn.0040326c
mov eax, dword [ebp - 0x10]
call fcn.00404b28
test al, al
je 0x40703d
push 0x40b310
call sub.kernel32.dll_DeleteFileA
test eax, eax
je 0x406ffe
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x40705f
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.00403120
ret