Function at 0x405fc0
Capabilities:
Create process on windows

Disassembly:
push 0xffffffffffffffff
push 0x4dfe8a
mov eax, dword fs:[0]
push eax
sub esp, 0x40c
mov eax, dword [0x5265f0]
xor eax, esp
mov dword [esp + 0x408], eax
push ebp
push esi
push edi
mov eax, dword [0x5265f0]
xor eax, esp
push eax
lea eax, [esp + 0x41c]
mov dword fs:[0], eax
mov eax, dword [0x52f78c]
add eax, 1
mov dword [0x52f78c], eax
imul eax, eax, 0x64
mov ebp, dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, eax
mov eax, 0x88888889
imul ecx
add edx, ecx
mov ecx, dword [0x52f788]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
test ecx, ecx
je 0x406046
cmp dword [0x52f790], 0
je 0x406046
push 0
push eax
mov eax, dword [ecx + 0x20]
push 0x420
push eax
call ebp
mov ecx, dword [0x52f854]
mov edx, dword [ecx]
mov edx, dword [edx]
lea eax, [esp + 0x14]
push eax
call edx
test eax, eax
mov esi, dword [sym.imp.USER32.dll_MessageBoxW]
jne 0x40612e
cmp dword [0x52f858], 0
mov dword [0x52fc68], 1
jne 0x40612e
mov eax, dword [0x52f854]
add eax, 4
mov eax, dword [esp + 0x14]
push eax
push eax
je 0x406107
push str.The_error_code_0x_X___d__occured_during_initialization._nDo_you_want_to_display_the_error_log_file__
lea ecx, [esp + 0x24]
push 0x200
push ecx
call fcn.004225f0
add esp, 0x14
push 0x34
push str.CPU_Z_Error
lea edx, [esp + 0x20]
push edx
push 0
call esi
cmp eax, 6
jne 0x40612e
mov eax, dword [0x52f854]
push 1
push 0
push 0
add eax, 4
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp eax, 0x20
jg 0x40612e
mov eax, dword [0x52f854]
add eax, 4
push eax
push str.Unable_to_open__s
lea ecx, [esp + 0x20]
push 0x200
push ecx
call fcn.004225f0
add esp, 0x10
push 0x34
push str.CPU_Z_Driver_Error
lea edx, [esp + 0x20]
push edx
jmp 0x40612a
push str.The_error_code_0x_X___d__occured_during_initialization.
lea eax, [esp + 0x24]
push 0x200
push eax
call fcn.004225f0
add esp, 0x14
push 0x30
push str.CPU_Z_Error
lea ecx, [esp + 0x20]
push ecx
push 0
call esi
mov ecx, dword [0x52f854]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
lea eax, [esp + 0x14]
push eax
call edx
test eax, eax
jne 0x406199
mov eax, dword [esp + 0x14]
mov ecx, eax
sub ecx, 1
je 0x406189
sub ecx, 1
je 0x40617b
push eax
push eax
push str.The_error_code_0x_X___d__occured_during_parsing.
lea eax, [esp + 0x24]
push 0x200
push eax
call fcn.004225f0
add esp, 0x14
push 0x30
push str.CPU_Z_Driver_Error
lea ecx, [esp + 0x20]
push ecx
jmp 0x406195
push 0x30
push str.CPU_Z_Error
push str.CPU_Z_beta_version_expired
jmp 0x406195
push 0x30
push str.Driver_Error
push str.A_previous_version_of_the_device_driver_is_already_running._This_program_requires_driver_version_1.32.
push 0
call esi
cmp dword [0x52f858], 0
je case.default.0x4061b7
mov eax, dword [0x52f85c]
add eax, 0xffffffff
cmp eax, 4
ja case.default.0x4061b7
jmp dword [eax*4 + 0x406510]
push 0x4f7358
push 0x52f868
push 0x52f780
call fcn.004c2e4e
add esp, 0xc
cmp dword [0x52f780], 0
je case.default.0x4061b7
mov edi, dword [0x52f854]
push 8
call fcn.004b3e57
add esp, 4
mov dword [esp + 0x10], eax
xor esi, esi
cmp eax, esi
mov dword [esp + 0x424], esi
je 0x406213
mov edx, dword [0x52f780]
push edx
mov ecx, eax
call fcn.004211f0
mov esi, eax
mov dword [esp + 0x424], 0xffffffff
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x14]
push str.CPU_Z_TXT_Report
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x14]
push str.Binaries
mov ecx, esi
call edx
mov eax, dword [esi]
mov ecx, dword [eax + 0x20]
push 0x530c88
push 0x4f7398
push 0x4f73a0
push str.CPU_Z_version
push esi
call ecx
mov edx, dword [esi]
mov eax, dword [edx + 0x2c]
add esp, 0x14
mov ecx, esi
call eax
mov edx, dword [edi]
mov eax, dword [edx + 0x230]
push esi
mov ecx, edi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x10]
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx]
push 1
mov ecx, esi
call eax
mov ecx, dword [0x52f780]
push ecx
call fcn.004c2f55
add esp, 4
jmp case.default.0x4061b7
push 0x4f7358
push 0x52f868
push 0x52f780
call fcn.004c2e4e
add esp, 0xc
cmp dword [0x52f780], 0
je case.default.0x4061b7
mov edi, dword [0x52f854]
push 8
call fcn.004b3e57
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x424], 1
je 0x4062f8
mov edx, dword [0x52f780]
push edx
mov ecx, eax
call fcn.004213c0
mov esi, eax
jmp 0x4062fa
xor esi, esi
mov dword [esp + 0x424], 0xffffffff
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x14]
push 0x4f7424
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x2c]
mov ecx, esi
call edx
jmp 0x406235
push str.AttachConsole
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je case.default.0x4061b7
push 0xffffffffffffffff
call eax
cmp eax, 1
jne case.default.0x4061b7
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
test eax, eax
mov dword [0x52f784], eax
je case.default.0x4061b7
mov edi, dword [0x52f854]
push 0xc
call fcn.004b3e57
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x424], 2
je 0x4063a0
mov edx, dword [0x52f784]
push edx
mov ecx, eax
call fcn.00421690
mov esi, eax
jmp 0x4063a2
xor esi, esi
mov dword [esp + 0x424], 0xffffffff
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x14]
push str.CPU_Z_Console_Report
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x14]
push str.Binaries
mov ecx, esi
call edx
mov eax, dword [esi]
mov ecx, dword [eax + 0x20]
push 0x530c88
push 0x4f7398
push 0x4f73a0
push str.CPU_Z_version
push esi
call ecx
mov edx, dword [esi]
mov eax, dword [edx + 0x2c]
add esp, 0x14
mov ecx, esi
call eax
mov edx, dword [edi]
mov eax, dword [edx + 0x234]
push esi
mov ecx, edi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x10]
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx]
push 1
mov ecx, esi
call eax
jmp case.default.0x4061b7
mov ecx, dword [0x52f854]
mov eax, dword [0x52f864]
mov edx, dword [ecx]
mov edx, dword [edx + 0x98]
push eax
push 0
call edx
test eax, eax
je case.default.0x4061b7
push 0x30
push 0x4f7424
push str.Core_mask_set__please_restart_Windows_to_validate.
push 0
call esi
jmp case.default.0x4061b7
mov eax, dword [0x5310f8]
push 0
push 0
push eax
lea ecx, [esp + 0x1c]
push ecx
push 2
mov dword [esp + 0x24], 8
call dword [sym.imp.USER32.dll_BroadcastSystemMessageW]
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x52f854]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
mov eax, dword [0x52f78c]
mov esi, dword [0x52f788]
add eax, 1
test esi, esi
mov dword [0x52f78c], eax
je 0x4064e9
cmp dword [0x52f790], 0
je 0x4064cd
imul eax, eax, 0x64
mov ecx, eax
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
push 0
shr ecx, 0x1f
add ecx, edx
mov edx, dword [esi + 0x20]
push ecx
push 0x420
push edx
call ebp
mov esi, dword [0x52f788]
test esi, esi
je 0x4064e9
cmp dword [0x52f790], 0
je 0x4064e9
mov eax, dword [esi + 0x20]
push 0
push 0
push 0x41f
push eax
call ebp
mov ecx, dword [esp + 0x41c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x408]
xor ecx, esp
call fcn.004c2fd1
add esp, 0x418
ret