Function at 0x405130
Capabilities:
Create process on windows
Create process suspended
Delete file
Get common file path
Get program files directory
Write and execute a file
Write file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4167a8
push 0x407eec
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
add esp, 0xfffff910
mov eax, dword [0x41b2c0]
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x12c], 1
mov byte [ebp - 0x128], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x127]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x238], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x237]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 4], 0
mov byte [ebp - 0x590], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x58f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x594], 0
lea eax, [ebp - 0x594]
push eax
lea ecx, [ebp - 0x590]
push ecx
push 0x104
push 0
push str.msinfo32.exe
push 0
call dword [sym.imp.KERNEL32.dll_SearchPathA]
test eax, eax
je 0x4051fe
movsx edx, byte [ebp - 0x590]
test edx, edx
jne 0x40531e
mov dword [ebp - 0x6ec], 0
lea eax, [ebp - 0x6ec]
push eax
push 0x26
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
cmp dword [ebp - 0x6ec], 0
je 0x40523a
lea ecx, [ebp - 0x590]
push ecx
mov edx, dword [ebp - 0x6ec]
push edx
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListA]
test eax, eax
jne 0x405258
push 0x416510
call fcn.00407cf5
add esp, 4
push 0
push 0
push 0
push 0xe0000101
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov dword [ebp - 0x6f0], 0
lea eax, [ebp - 0x6f0]
push eax
push 1
call dword [sym.imp.ole32.dll_CoGetMalloc]
test eax, eax
jl 0x405297
cmp dword [ebp - 0x6f0], 0
je 0x405297
mov ecx, dword [ebp - 0x6ec]
push ecx
mov edx, dword [ebp - 0x6f0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6f0]
push ecx
call dword [eax + 0x14]
cmp dword [ebp - 0x6f0], 0
je 0x4052bc
mov edx, dword [ebp - 0x6f0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6f0]
push ecx
call dword [eax + 8]
mov dword [ebp - 0x6f0], 0
push str.Common_FilesMicrosoft_SharedMSInfoMSInfo32.exe
lea edx, [ebp - 0x590]
push edx
call fcn.00407710
add esp, 8
lea eax, [ebp - 0x6e8]
push eax
lea ecx, [ebp - 0x590]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x6f4], eax
cmp dword [ebp - 0x6f4], 0xffffffff
jne 0x405311
push str.Failed_to_find_msinfo32.exe_on_the_computer__n
call fcn.00407cf5
add esp, 4
push 0
push 0
push 0
push 0xe0000101
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov edx, dword [ebp - 0x6f4]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x128]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
jne 0x405369
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x6f8], eax
cmp dword [ebp - 0x6f8], 0
je 0x405358
mov ecx, dword [ebp - 0x6f8]
push ecx
call fcn.00405c70
add esp, 4
push 0
push 0
push 0
push 0xe0000101
call dword [sym.imp.KERNEL32.dll_RaiseException]
lea edx, [ebp - 0x238]
push edx
push 0
push 0x4165a4
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
test eax, eax
jne 0x4053bd
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x6fc], eax
cmp dword [ebp - 0x6fc], 0
je 0x4053ac
mov ecx, dword [ebp - 0x6fc]
push ecx
call fcn.00405c70
add esp, 4
push 0
push 0
push 0
push 0xe0000101
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov byte [ebp - 0x440], 0
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x43f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea edx, [ebp - 0x238]
push edx
lea eax, [ebp - 0x590]
push eax
push str._s__report__s__categories_SystemSummaryResourcesConflictsResourcesIRQSComponentsNetworkComponentsStorageComponentsProblemDevicesSWEnvEnvVarsSWEnvNetConnSWEnvServicesSWEnvProgramGroupSWEnvStartupPrograms
lea ecx, [ebp - 0x440]
push ecx
call fcn.00407ff2
add esp, 0x10
push 0
lea edx, [ebp - 0x5a8]
push edx
push 2
push 0x416680
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
lea ecx, [ebp - 0x440]
push ecx
push str.____s
push 0x41bc40
call fcn.00407ff2
add esp, 0xc
push 0
lea edx, [ebp - 0x5a8]
push edx
push 0x41bc40
call fcn.00407800
add esp, 4
push eax
push 0x41bc40
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea ecx, [ebp - 0x5a8]
push ecx
push 2
push 0x41668c
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0x10
push 0
lea eax, [ebp - 0x5a4]
push eax
call fcn.00407c90
add esp, 0xc
push 0x44
push 0
lea ecx, [ebp - 0x488]
push ecx
call fcn.00407c90
add esp, 0xc
mov dword [ebp - 0x488], 0x44
lea edx, [ebp - 0x5a4]
push edx
lea eax, [ebp - 0x488]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x440]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x405553
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x700], eax
cmp dword [ebp - 0x700], 0
je 0x4054f0
mov edx, dword [ebp - 0x700]
push edx
call fcn.00405c70
add esp, 4
push 0
lea eax, [ebp - 0x5a8]
push eax
push 0x416690
call fcn.00407800
add esp, 4
push eax
push str.Unable_to_execute_query
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea edx, [ebp - 0x5a8]
push edx
push 2
push 0x4166c0
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
push str._Unable_to_run_winmsd__n
push 0x41b080
call fcn.00407930
add esp, 8
push 0
push 0
push 0
push 0xe0000101
call dword [sym.imp.KERNEL32.dll_RaiseException]
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x5a0]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea edx, [ebp - 0x238]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00402840
add esp, 8
mov dword [ebp - 4], 0xffffffff
jmp 0x405598
lea ecx, [ebp - 0x238]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x1c]
call fcn.00407d96
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret