Function at 0x426710
Capabilities:
Create process on windows
Delete file
Self delete

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0
push str.VSIFAX
call fcn.00449f47
add esp, 4
mov dword [ebp - 8], eax
call fcn.00426f50
test eax, eax
je 0x426f3a
push str.C:medent_binFaxService.bat
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 0x46c67c
push str.C:medent_binFaxService.bat
call fcn.00448c8e
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x426f1f
cmp dword [0x4b9f90], 4
jne 0x42697f
push str.rem_Vsifax_Version_4_update_batch_n
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 8
mov ecx, dword [ebp - 8]
push ecx
push 0x46c6a4
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0xc
mov eax, dword [ebp - 8]
push eax
push str.__s_bin_vfxpurge___e_3_n
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 0xc
mov edx, dword [ebp - 8]
push edx
push str.__s_bin_vfxpurge___o_3_n
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 0xc
mov ecx, dword [ebp - 8]
push ecx
push str.__s_bin_vfxpurge___r_7_n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0xc
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 8]
push edx
push str.__s_bin_vdbtool__unload___s_spooldbs_faxtags______s_spool_temp_faxt.tmp__n
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 0x14
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 8]
push eax
push str.__s_bin_vdbtool__unload___s_spooldbs_faxreqs______s_spool_temp_faxr.tmp__n
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 0x14
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.__s_bin_vdbtool__unload___s_spooldbs_faxofns______s_spool_temp_faxo.tmp__n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x14
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.__s_bin_vdbtool__delete___s_spooldbs_faxtags__n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x10
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.__s_bin_vdbtool__delete___s_spooldbs_faxreqs__n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x10
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.__s_bin_vdbtool__delete___s_spooldbs_faxofns__n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x10
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 8]
push edx
push str.__s_bin_vdbtool__create__d___s_spooldbs____slibdbs_faxtags.sch__n
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 0x14
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 8]
push eax
push str.__s_bin_vdbtool__create__d___s_spooldbs____slibdbs_faxreqs.sch__n
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 0x14
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.__s_bin_vdbtool__create__d___s_spooldbs____slibdbs_faxofns.sch__n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x14
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 8]
push edx
push str.__s_bin_vdbtool__load___s_spooldbs_faxtags______s_spool_temp_faxt.tmp__n
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 0x14
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 8]
push eax
push str.__s_bin_vdbtool__load___s_spooldbs_faxreqs______s_spool_temp_faxr.tmp__n
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 0x14
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.__s_bin_vdbtool__load___s_spooldbs_faxofns______s_spool_temp_faxo.tmp__n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x14
mov eax, dword [ebp - 8]
push eax
push str.del___s_spool_temp_faxt.tmp__n
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 0xc
mov edx, dword [ebp - 8]
push edx
push str.del___s_spool_temp_faxr.tmp__n
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 0xc
mov ecx, dword [ebp - 8]
push ecx
push str.del___s_spool_temp_faxo.tmp__n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0xc
mov eax, dword [ebp - 8]
push eax
push 0x46c704
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 0xc
jmp 0x426eee
cmp dword [0x4b9f90], 5
je 0x426995
cmp dword [0x4b9f90], 6
jne 0x426eee
push str._echo_off_n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 8
push str.rem_Vsifax_Version_5_and_Version_6_update_batch_n
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 8
push 0x46c8d4
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 8
push str.rem_Stop_VSI_FAX_scheduler_n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 8
push str.rem________________________n
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 8
mov ecx, dword [ebp - 8]
push ecx
push str.__s_bin_vfxsched__stop_n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0xc
push 0x46c9f4
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 8
push str.rem_Purge_databases_of_records_older_than_7_days_n
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 8
push str.rem________________________________________________n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 8
mov eax, dword [ebp - 8]
push eax
push str.__s_bin_vfxpurge___v__o_7_n
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 0xc
mov edx, dword [ebp - 8]
push edx
push str.__s_bin_vfxpurge___v__i_7_n
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 0xc
mov ecx, dword [ebp - 8]
push ecx
push str.__s_bin_vfxpurge___v__e_7_n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0xc
push 0x46cc40
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 8
push str.rem_Clean_up_old_database_dumps_n
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 8
push str.rem_____________________________n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 8
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.move__Y___s_spool_tempologatt.csv____s_spool_tempologatt.csv.OLD__n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x10
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.move__Y___s_spool_tempologgrp.csv____s_spool_tempologgrp.csv.OLD__n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x10
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.move__Y___s_spool_tempologofn.csv____s_spool_tempologofn.csv.OLD__n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x10
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.move__Y___s_spool_tempologreg.csv____s_spool_tempologreg.csv.OLD__n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x10
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.move__Y___s_spool_tempologtag.csv____s_spool_tempologtag.csv.OLD__n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x10
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.move__Y___s_spool_tempilog.csv____s_spool_tempilog.csv.OLD__n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x10
push 0x46ccec
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 8
push str.rem_Export_databases_to_temporary_files_n
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 8
push str.rem_____________________________________n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 8
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 8]
push edx
push str.__s_bin_vdbtool__unload__d___s_spooldbs___h_on_ologatt_____s_spool_tempologatt.csv__n
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 0x14
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 8]
push eax
push str.__s_bin_vdbtool__unload__d___s_spooldbs___h_on_ologgrp_____s_spool_tempologgrp.csv__n
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 0x14
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.__s_bin_vdbtool__unload__d___s_spooldbs___h_on_ologofn_____s_spool_tempologofn.csv__n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x14
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 8]
push edx
push str.__s_bin_vdbtool__unload__d___s_spooldbs___h_on_ologreg_____s_spool_tempologreg.csv__n
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 0x14
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 8]
push eax
push str.__s_bin_vdbtool__unload__d___s_spooldbs___h_on_ologtag_____s_spool_tempologtag.csv__n
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 0x14
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.__s_bin_vdbtool__unload__d___s_spooldbs___h_on_ilog_____s_spool_tempilog.csv__n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x14
push 0x46d0e4
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 8
push str.rem_Delete_databases_n
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 8
push 0x46d114
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 8
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.__s_bin_vdbtool__delete__v__d___s_spooldbs__ologatt_n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x10
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.__s_bin_vdbtool__delete__v__d___s_spooldbs__ologgrp_n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x10
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.__s_bin_vdbtool__delete__v__d___s_spooldbs__ologofn_n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x10
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.__s_bin_vdbtool__delete__v__d___s_spooldbs__ologreg_n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x10
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.__s_bin_vdbtool__delete__v__d___s_spooldbs__ologtag_n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x10
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.__s_bin_vdbtool__delete__v__d___s_spooldbs__ilog_n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x10
push 0x46d278
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 8
push str.rem_Create_databases_n
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 8
push str.rem__________________n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 8
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 8]
push edx
push str.__s_bin_vdbtool__create__v__d___s_spooldbs____slibdbsologatt.sch__n
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 0x14
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 8]
push eax
push str.__s_bin_vdbtool__create__v__d___s_spooldbs____slibdbsologgrp.sch__n
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 0x14
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.__s_bin_vdbtool__create__v__d___s_spooldbs____slibdbsologofn.sch__n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x14
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 8]
push edx
push str.__s_bin_vdbtool__create__v__d___s_spooldbs____slibdbsologreg.sch__n
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 0x14
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 8]
push eax
push str.__s_bin_vdbtool__create__v__d___s_spooldbs____slibdbsologtag.sch__n
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 0x14
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.__s_bin_vdbtool__create__v__d___s_spooldbs____slibdbsilog.sch__n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x14
push 0x46d46c
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 8
push str.rem_Import_data_from_temporary_files_n
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 8
push str.rem__________________________________n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 8
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 8]
push edx
push str.__s_bin_vdbtool__load__v__d___s_spooldbs___h_on__u_ologatt_____s_spool_tempologatt.csv__n
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 0x14
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 8]
push eax
push str.__s_bin_vdbtool__load__v__d___s_spooldbs___h_on__u_ologgrp_____s_spool_tempologgrp.csv__n
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 0x14
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.__s_bin_vdbtool__load__v__d___s_spooldbs___h_on__u_ologofn_____s_spool_tempologofn.csv__n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x14
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 8]
push edx
push str.__s_bin_vdbtool__load__v__d___s_spooldbs___h_on__u_ologreg_____s_spool_tempologreg.csv__n
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 0x14
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 8]
push eax
push str.__s_bin_vdbtool__load__v__d___s_spooldbs___h_on__u_ologtag_____s_spool_tempologtag.csv__n
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 0x14
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
push str.__s_bin_vdbtool__load__v__d___s_spooldbs___h_on__u_ilog_____s_spool_tempilog.csv__n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 0x14
push 0x46d748
mov eax, dword [ebp - 4]
push eax
call fcn.00449a3b
add esp, 8
push str.rem_Start_VSI_FAX_scheduler_n
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 8
push str.rem_________________________n
mov edx, dword [ebp - 4]
push edx
call fcn.00449a3b
add esp, 8
mov eax, dword [ebp - 8]
push eax
push str.__s_bin_vfxsched__start_n
mov ecx, dword [ebp - 4]
push ecx
call fcn.00449a3b
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x426f07
mov edx, dword [ebp - 4]
push edx
call fcn.004484c1
add esp, 4
mov dword [ebp - 4], 0
push 0
push 0
push 0
push str.C:medent_binFaxService.bat
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp dword [ebp - 4], 0
je 0x426f38
mov eax, dword [ebp - 4]
push eax
call fcn.004484c1
add esp, 4
mov dword [ebp - 4], 0
jmp 0x426f3e
xor eax, eax
jmp 0x426f43
mov eax, 1
mov esp, ebp
pop ebp
ret