Function at 0x4724e9
Capabilities:
Create process on windows
Delete file

Disassembly:
push 0x23c
mov eax, 0x491c95
call fcn.0047ae59
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x134], ebx
xor esi, esi
inc esi
push 0x49bf80
mov dword [ebp - 4], esi
call fcn.00401556
push 0x44
pop edi
push edi
lea eax, [ebp - 0x190]
push ebx
push eax
mov dword [ebp - 0x134], esi
call fcn.00474d90
add esp, 0xc
xor eax, eax
push str.temp
mov word [ebp - 0x160], ax
mov dword [ebp - 0x164], esi
mov dword [ebp - 0x190], edi
call fcn.004783f4
pop ecx
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040d846
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.0041acf8
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.00406268
mov edi, 0x49e094
push edi
lea eax, [ebp - 0x48]
call fcn.00401556
push edi
lea eax, [ebp - 0xb8]
push eax
mov edi, 0x4b6618
mov byte [ebp - 4], 5
call fcn.0041024b
push str..txt
push eax
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.004102a7
add esp, 0x10
mov ebx, eax
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 7
call fcn.004062ac
push esi
xor edi, edi
lea esi, [ebp - 0x2c]
call fcn.0040162a
xor ebx, ebx
inc ebx
push ebx
lea esi, [ebp - 0xb8]
mov byte [ebp - 4], 5
call fcn.0040162a
push str.c2xlWiAranFtbm9wOQ
lea eax, [ebp - 0x2c]
call fcn.00401556
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 8
call fcn.0041fe3a
pop ecx
lea ecx, [ebp - 0x64]
push ecx
lea ecx, [ebp - 0xf0]
push ecx
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.004102d8
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0xd4]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.004102d8
push 0x49c1d8
push eax
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0xb
call fcn.004102a7
lea ecx, [ebp + 0xc]
push ecx
lea ecx, [ebp - 0x80]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.004102d8
add esp, 0x20
push ebx
lea esi, [ebp - 0xb8]
call fcn.0040162a
push ebx
lea esi, [ebp - 0xd4]
call fcn.0040162a
push ebx
lea esi, [ebp - 0xf0]
call fcn.0040162a
push ebx
lea esi, [ebp - 0x128]
call fcn.0040162a
push ebx
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x12
call fcn.0040162a
cmp dword [ebp - 0x6c], 8
mov ecx, dword [ebp - 0x80]
jae 0x4726a1
lea ecx, [ebp - 0x80]
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x190]
push eax
xor eax, eax
push eax
push eax
push 0x8000000
push eax
push eax
push eax
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
push 0xffffffffffffffff
push dword [ebp - 0x140]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x10c]
push eax
lea ebx, [ebp - 0x48]
call fcn.004722da
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x248]
push eax
mov byte [ebp - 4], 0x13
call fcn.00472fed
xor ebx, ebx
inc ebx
push ebx
xor edi, edi
lea esi, [ebp - 0x10c]
mov byte [ebp - 4], 0x15
call fcn.0040162a
mov eax, dword [ebp - 0x248]
mov eax, dword [eax + 4]
lea eax, [ebp + eax - 0x248]
and dword [eax + 0x14], 0xfffffffe
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.0047318e
pop ecx
pop ecx
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
add ecx, eax
mov eax, dword [ecx + 0xc]
and al, 6
movsx eax, al
neg eax
sbb eax, eax
not eax
test ecx, eax
je 0x47276a
cmp word [ebp - 0x12c], di
je 0x47270c
push dword [ebp - 0x12c]
mov esi, dword [ebp - 0x130]
call fcn.0040d8ee
jmp 0x47270c
lea eax, [ebp - 0x230]
call fcn.0040fb23
test eax, eax
jne 0x4727a9
mov eax, dword [ebp - 0x248]
mov ecx, dword [eax + 4]
lea ecx, [ebp + ecx - 0x248]
mov eax, dword [ecx + 0xc]
or eax, 2
cmp dword [ecx + 0x38], edi
jne 0x472797
or eax, 4
and eax, 0x17
mov dword [ecx + 0xc], eax
test dword [ecx + 0x10], eax
je 0x4727a9
push 0
call fcn.0040ea94
push 0
lea eax, [ebp - 0x48]
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x64]
call fcn.00406680
push eax
lea esi, [ebp - 0x9c]
call fcn.00405b15
cmp dword [ebp - 0x88], 8
mov eax, dword [ebp - 0x9c]
jae 0x4727d7
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
xor edi, edi
lea esi, [ebp - 0x9c]
call fcn.0040162a
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x12
call fcn.00473089
lea eax, [ebp - 0x1d8]
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.00474a58
pop ecx
push ebx
lea esi, [ebp - 0x80]
call fcn.0040162a
push ebx
lea esi, [ebp - 0x48]
call fcn.0040162a
push ebx
lea esi, [ebp - 0x64]
call fcn.0040162a
push ebx
lea esi, [ebp + 0xc]
call fcn.0040162a
mov eax, dword [ebp - 0x130]
call fcn.0047aedc
ret