Function at 0x51fc64
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x571e53
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x748
push esi
mov dword [ebp - 0x720], ecx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x460], eax
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x410], ecx
mov edx, dword [ebp - 0x410]
mov eax, dword [edx]
push eax
mov ecx, dword [ebp - 0x460]
mov edx, dword [ecx]
push edx
push str.___WM_PLC_RECEIVE_:__ps____s___Arg____s
lea eax, [ebp - 0x40c]
push eax
call fcn.0054c45b
add esp, 0x10
lea ecx, [ebp - 0x40c]
push ecx
call fcn.00536ebf
add esp, 4
push str.START_TEST
mov edx, dword [ebp - 0x460]
push edx
call fcn.004089c0
and eax, 0xff
test eax, eax
je 0x51fdcf
mov ecx, dword [ebp - 0x410]
call fcn.00401400
mov esi, eax
mov ecx, dword [ebp - 0x460]
call fcn.00401400
sub esi, eax
sub esi, 1
push esi
lea eax, [ebp - 0x700]
push eax
mov ecx, dword [ebp - 0x410]
call fcn.0055e5db
mov dword [ebp - 0x724], eax
mov ecx, dword [ebp - 0x724]
mov edx, dword [ecx]
push edx
push 0x5b4be0
lea eax, [ebp - 0x40c]
push eax
call fcn.0054c45b
add esp, 0xc
lea ecx, [ebp - 0x700]
call fcn.00560ea1
mov ecx, dword [ebp - 0x720]
mov dword [ecx + 0x19644], 0
mov edx, dword [ebp - 0x720]
mov dword [edx + 0x19648], 0
push 0x4a
push 0
lea eax, [ebp - 0x45c]
push eax
call fcn.0054bfb0
add esp, 0xc
push str.TEST_READY
lea ecx, [ebp - 0x45c]
push ecx
call fcn.0054bec0
add esp, 8
lea edx, [ebp - 0x45c]
push edx
mov ecx, dword [ebp - 0x720]
add ecx, 0x80
call fcn.00422e70
lea eax, [ebp - 0x40c]
push eax
mov ecx, dword [ebp - 0x720]
call fcn.0051fb36
push 0
mov ecx, dword [ebp - 0x720]
call fcn.00521141
jmp 0x52055a
push 0x5b4bf0
mov ecx, dword [ebp - 0x460]
push ecx
call fcn.004089c0
and eax, 0xff
test eax, eax
jne 0x51fdfd
push str.RESET_HUB
mov ecx, dword [ebp - 0x460]
call fcn.0055e6f1
test eax, eax
jl 0x51fe55
push 0x104
push 0
lea edx, [ebp - 0x564]
push edx
call fcn.0054bfb0
add esp, 0xc
lea eax, [ebp - 0x564]
push eax
call fcn.0053534c
add esp, 4
push str.UFD_MP_restarthub.exe
lea ecx, [ebp - 0x564]
push ecx
call fcn.0054bed0
add esp, 8
push 1
push 0
push 0
lea edx, [ebp - 0x564]
push edx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x52055a
push str.DOWNLOADINI
mov eax, dword [ebp - 0x460]
push eax
call fcn.004089c0
and eax, 0xff
test eax, eax
jne 0x51fe8d
push str.AUTO_DOWNLOAD
mov ecx, dword [ebp - 0x460]
push ecx
call fcn.004089c0
and eax, 0xff
test eax, eax
je 0x51ffe8
mov dword [ebp - 0x56c], 0
push 0x104
push 0
lea edx, [ebp - 0x670]
push edx
call fcn.0054bfb0
add esp, 0xc
mov eax, dword [0x5be04c]
mov dword [ebp - 0x56c], eax
cmp dword [ebp - 0x56c], 0
jne 0x51fed5
push 0x5be06c
lea ecx, [ebp - 0x670]
push ecx
call fcn.0054bec0
add esp, 8
lea edx, [ebp - 0x670]
push edx
call fcn.0054c3e0
add esp, 4
test eax, eax
je 0x51ff35
lea eax, [ebp - 0x670]
push eax
call fcn.0054c3e0
add esp, 4
movsx ecx, byte [ebp + eax - 0x671]
cmp ecx, 0x5c
je 0x51ff18
push 0x5b4c44
lea edx, [ebp - 0x670]
push edx
call fcn.0054bed0
add esp, 8
mov ecx, dword [ebp - 0x410]
call fcn.00401440
push eax
lea eax, [ebp - 0x670]
push eax
call fcn.0054bed0
add esp, 8
jmp 0x51ff50
mov ecx, dword [ebp - 0x410]
call fcn.00401440
push eax
lea ecx, [ebp - 0x670]
push ecx
call fcn.0054bec0
add esp, 8
mov dword [ebp - 0x568], 0
jmp 0x51ff6b
mov edx, dword [ebp - 0x568]
add edx, 1
mov dword [ebp - 0x568], edx
lea eax, [ebp - 0x670]
push eax
call fcn.0054c3e0
add esp, 4
cmp dword [ebp - 0x568], eax
jge 0x51ffa7
mov ecx, dword [ebp - 0x568]
movsx edx, byte [ebp + ecx - 0x670]
cmp edx, 0x2b
jne 0x51ffa5
mov eax, dword [ebp - 0x568]
mov byte [ebp + eax - 0x670], 0
jmp 0x51ffa7
jmp 0x51ff5c
lea ecx, [ebp - 0x670]
push ecx
mov ecx, dword [ebp - 0x720]
call fcn.00521cad
lea edx, [ebp - 0x670]
push edx
push str.Download_IN_from__s
lea eax, [ebp - 0x40c]
push eax
call fcn.0054c45b
add esp, 0xc
lea ecx, [ebp - 0x40c]
push ecx
call fcn.00536ebf
add esp, 4
jmp 0x52055a
push str.FINISH
mov edx, dword [ebp - 0x460]
push edx
call fcn.004089c0
and eax, 0xff
test eax, eax
je 0x520044
mov ecx, dword [ebp - 0x720]
call fcn.00524b77
test eax, eax
je 0x520029
push str.FINISHOK
mov ecx, dword [ebp - 0x720]
add ecx, 0x80
call fcn.00422e70
jmp 0x52003f
push str.FINISHFAIL
mov ecx, dword [ebp - 0x720]
add ecx, 0x80
call fcn.00422e70
jmp 0x52055a
push str.CLOSE_AP
mov eax, dword [ebp - 0x460]
push eax
call fcn.004089c0
and eax, 0xff
test eax, eax
je 0x520077
mov ecx, dword [ebp - 0x720]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x720]
call dword [edx + 0xc8]
jmp 0x52055a
push 0
push str._LOT
mov ecx, dword [ebp - 0x460]
call fcn.0055e6ff
test eax, eax
jl 0x52051d
push 0
push 0x5b4c98
mov ecx, dword [ebp - 0x460]
call fcn.0055e6ff
test eax, eax
jl 0x52051d
mov dword [ebp - 0x6fc], 0
mov dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x460]
push eax
lea ecx, [ebp - 0x6f4]
call fcn.00560c16
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x6f4]
call fcn.00401400
sub eax, 5
push eax
lea ecx, [ebp - 0x704]
push ecx
lea ecx, [ebp - 0x6f4]
call fcn.0055e5db
mov dword [ebp - 0x728], eax
mov edx, dword [ebp - 0x728]
mov dword [ebp - 0x72c], edx
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x72c]
push eax
lea ecx, [ebp - 0x6f4]
call fcn.00560fda
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x704]
call fcn.00560ea1
lea ecx, [ebp - 0x6f4]
call fcn.00401400
sub eax, 1
push eax
lea ecx, [ebp - 0x708]
push ecx
lea ecx, [ebp - 0x6f4]
call fcn.0055e657
mov dword [ebp - 0x730], eax
mov edx, dword [ebp - 0x730]
mov dword [ebp - 0x734], edx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x734]
push eax
lea ecx, [ebp - 0x6f4]
call fcn.00560fda
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x708]
call fcn.00560ea1
lea ecx, [ebp - 0x6f4]
call fcn.00401400
test eax, eax
jle 0x520410
push 0
push 0x5b4c9c
lea ecx, [ebp - 0x6f4]
call fcn.0055e6ff
mov dword [ebp - 0x6fc], eax
cmp dword [ebp - 0x6fc], 0
jl 0x5203f0
mov ecx, dword [ebp - 0x6f8]
mov dword [ebp - 0x738], ecx
cmp dword [ebp - 0x738], 0
je 0x5201f0
cmp dword [ebp - 0x738], 1
je 0x520249
cmp dword [ebp - 0x738], 2
je 0x5202a2
jmp 0x520390
mov edx, dword [ebp - 0x6fc]
push edx
lea eax, [ebp - 0x70c]
push eax
lea ecx, [ebp - 0x6f4]
call fcn.0055e657
mov dword [ebp - 0x73c], eax
mov ecx, dword [ebp - 0x73c]
mov edx, dword [ecx]
push edx
push 0x5b4ca0
push 0x5c7020
call fcn.0054c45b
add esp, 0xc
lea ecx, [ebp - 0x70c]
call fcn.00560ea1
mov eax, dword [ebp - 0x6f8]
add eax, 1
mov dword [ebp - 0x6f8], eax
jmp 0x520390
mov ecx, dword [ebp - 0x6fc]
push ecx
lea edx, [ebp - 0x710]
push edx
lea ecx, [ebp - 0x6f4]
call fcn.0055e657
mov dword [ebp - 0x740], eax
mov eax, dword [ebp - 0x740]
mov ecx, dword [eax]
push ecx
push 0x5b4ca4
push 0x5c6f20
call fcn.0054c45b
add esp, 0xc
lea ecx, [ebp - 0x710]
call fcn.00560ea1
mov edx, dword [ebp - 0x6f8]
add edx, 1
mov dword [ebp - 0x6f8], edx
jmp 0x520390
push 0x7c
lea ecx, [ebp - 0x6f4]
call fcn.0055e6cf
mov dword [ebp - 0x6fc], eax
lea ecx, [ebp - 0x6f4]
call fcn.00401400
sub eax, dword [ebp - 0x6fc]
sub eax, 1
push eax
lea eax, [ebp - 0x714]
push eax
lea ecx, [ebp - 0x6f4]
call fcn.0055e5db
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x744]
mov edx, dword [ecx]
push edx
push 0x5b4ca8
push 0x5c7220
call fcn.0054c45b
add esp, 0xc
lea ecx, [ebp - 0x714]
call fcn.00560ea1
mov eax, dword [ebp - 0x6fc]
push eax
lea ecx, [ebp - 0x718]
push ecx
lea ecx, [ebp - 0x6f4]
call fcn.0055e657
mov dword [ebp - 0x748], eax
mov edx, dword [ebp - 0x748]
mov dword [ebp - 0x74c], edx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x74c]
push eax
lea ecx, [ebp - 0x6f4]
call fcn.00560fda
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x718]
call fcn.00560ea1
mov ecx, dword [ebp - 0x6f4]
push ecx
push 0x5b4cac
push 0x5c7120
call fcn.0054c45b
add esp, 0xc
push 0x5dcbd8
lea ecx, [ebp - 0x6f4]
call fcn.0056102a
mov edx, dword [ebp - 0x6f8]
add edx, 1
mov dword [ebp - 0x6f8], edx
lea ecx, [ebp - 0x6f4]
call fcn.00401400
sub eax, dword [ebp - 0x6fc]
sub eax, 1
push eax
lea eax, [ebp - 0x71c]
push eax
lea ecx, [ebp - 0x6f4]
call fcn.0055e5db
mov dword [ebp - 0x750], eax
mov ecx, dword [ebp - 0x750]
mov dword [ebp - 0x754], ecx
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x754]
push edx
lea ecx, [ebp - 0x6f4]
call fcn.00560fda
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x71c]
call fcn.00560ea1
jmp 0x52040b
mov eax, dword [ebp - 0x6f4]
push eax
push 0x5b4cb0
push 0x5c7220
call fcn.0054c45b
add esp, 0xc
jmp 0x520410
jmp 0x520188
push 0x5c6f20
push 0x5c6018
call fcn.0054bec0
add esp, 8
push 0x5c7020
push 0x5c6218
call fcn.0054bec0
add esp, 8
push 0x5c7120
push 0x5c6418
call fcn.0054bec0
add esp, 8
push 0x5c7220
push 0x5c6618
call fcn.0054bec0
add esp, 8
push 0x5c6f20
push 0x5c5e18
call fcn.0054bec0
add esp, 8
cmp dword [0x5c7720], 1
jne 0x5204c5
push 0x5c6f20
push 0x5c7728
call fcn.0054bec0
add esp, 8
push 0x5c7020
push 0x5c7828
call fcn.0054bec0
add esp, 8
push 0x5c7120
push 0x5c7928
call fcn.0054bec0
add esp, 8
push 0x5c7220
push 0x5c7a28
call fcn.0054bec0
add esp, 8
mov dword [0x5c7724], 1
mov ecx, dword [ebp - 0x460]
mov edx, dword [ecx]
push edx
push 0x5b4cb4
lea eax, [ebp - 0x6f0]
push eax
call fcn.0054c45b
add esp, 0xc
lea ecx, [ebp - 0x6f0]
push ecx
call fcn.00536ebf
add esp, 4
lea edx, [ebp - 0x6f0]
push edx
mov ecx, dword [ebp - 0x720]
add ecx, 0x80
call fcn.00422e70
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6f4]
call fcn.00560ea1
jmp 0x52055a
push 0x80
mov ecx, dword [ebp - 0x410]
call fcn.005612d1
push eax
push str.UnKnowCommand__s
lea eax, [ebp - 0x40c]
push eax
call fcn.0054c45b
add esp, 0xc
lea ecx, [ebp - 0x40c]
push ecx
mov ecx, dword [ebp - 0x720]
add ecx, 0x80
call fcn.00422e70
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret 8