Function at 0x4ef9ac
Capabilities:
Create process on windows
Self delete

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x23
push 0
push 0
dec ecx
jne 0x4ef9b4
push ebx
push esi
mov eax, 0x4eb194
call fcn.00412ac0
mov ebx, 0x500eac
mov esi, dword [0x4f8d38]
xor eax, eax
push ebp
push 0x4f09e1
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.004d6bb4
call fcn.004eac44
call fcn.004eacfc
test al, al
je 0x4f0904
cmp byte [esi + 0x90], 0
je 0x4efa1b
mov eax, dword [0x4f8d48]
cmp byte [eax + 0x2e0], 0
je 0x4efa1b
call fcn.004dda78
test al, al
je 0x4f0904
cmp byte [esi + 0x90], 0
je 0x4efa43
mov dl, 1
mov eax, 0x4f0a00
call fcn.004dde34
xor eax, eax
call fcn.004de034
mov dl, 1
mov eax, 0x4f0a34
call fcn.004dde34
push 0x80
call sub.kernel32.dll_GetCurrentProcessId
push eax
call sub.kernel32.dll_SetPriorityClass
call fcn.004eabdc
mov eax, 0xa
call fcn.0040743c
imul eax, eax, 0x3e8
add eax, 0x3e8
push eax
call sub.kernel32.dll_Sleep
call fcn.004252f4
fstp qword [esi + 0x230]
wait
push 1
call sub.kernel32.dll_SetErrorMode
cmp byte [esi + 0x90], 0
je 0x4efaa2
mov dl, 1
mov eax, 0x4f0a54
call fcn.004dde34
xor eax, eax
call fcn.004de034
call fcn.004d6bcc
cmp byte [esi + 0x90], 0
je 0x4efb0d
push 0x4f0a80
lea edx, [ebp - 0x18]
movzx eax, byte [esi + 4]
call fcn.00422aa8
push dword [ebp - 0x18]
push 0x4f0aa0
lea edx, [ebp - 0x1c]
movzx eax, byte [esi + 5]
call fcn.00422aa8
push dword [ebp - 0x1c]
push 0x4f0aa0
mov eax, dword [esi + 8]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x20]
call fcn.00422ac4
push dword [ebp - 0x20]
lea eax, [ebp - 0x14]
mov edx, 6
call fcn.0040c534
mov eax, dword [ebp - 0x14]
mov dl, 1
call fcn.004dde34
xor eax, eax
call fcn.004de034
cmp byte [esi + 0x90], 0
je 0x4efb29
mov dl, 1
mov eax, 0x4f0ab0
call fcn.004dde34
xor eax, eax
call fcn.004de034
call fcn.004dcfec
test al, al
jne 0x4efb57
cmp byte [esi + 0x90], 0
je 0x4f0904
mov dl, 1
mov eax, 0x4f0ad8
call fcn.004dde34
xor eax, eax
call fcn.004de034
jmp 0x4f0904
cmp byte [esi + 0x90], 0
je 0x4efb6c
mov dl, 1
mov eax, 0x4f0b40
call fcn.004dde34
call fcn.0040730c
dec eax
jne 0x4efba7
lea edx, [ebp - 0x24]
mov eax, 1
call fcn.00407370
mov eax, dword [ebp - 0x24]
call fcn.004ea230
test al, al
jne 0x4efba7
lea edx, [ebp - 0x28]
mov eax, 1
call fcn.00407370
mov edx, dword [ebp - 0x28]
mov eax, dword [0x4f8c60]
call fcn.0040c34c
mov dword [ebx], 1
jmp 0x4f0254
lea edx, [ebp - 0x2c]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0x2c]
mov edx, 0x4f0b68
call fcn.0040c5e4
jne 0x4efbda
mov eax, dword [esi + 0x20]
mov edx, dword [eax]
call dword [edx + 0x48]
inc dword [ebx]
jmp 0x4f0254
lea edx, [ebp - 0x30]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0x30]
mov edx, 0x4f0b88
call fcn.0040c5e4
jne 0x4efc02
mov eax, dword [esi + 0x34]
mov edx, dword [eax]
call dword [edx + 0x48]
inc dword [ebx]
jmp 0x4f0254
lea edx, [ebp - 0x34]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0x34]
mov edx, 0x4f0ba4
call fcn.0040c5e4
jne 0x4efc30
mov byte [esi + 0x9c], 1
mov byte [esi + 0x94], 0
inc dword [ebx]
jmp 0x4f0254
lea edx, [ebp - 0x38]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0x38]
mov edx, 0x4f0bc4
call fcn.0040c5e4
jne 0x4efc8f
inc dword [ebx]
jmp 0x4efc81
lea edx, [ebp - 0x3c]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0x3c]
call fcn.004ea230
test al, al
jne 0x4f0254
lea edx, [ebp - 0x40]
mov eax, dword [ebx]
call fcn.00407370
mov edx, dword [ebp - 0x40]
mov eax, dword [esi + 0x244]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
inc dword [ebx]
call fcn.0040730c
cmp eax, dword [ebx]
jge 0x4efc4d
jmp 0x4f0254
lea edx, [ebp - 0x44]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0x44]
mov edx, 0x4f0bdc
call fcn.0040c5e4
jne 0x4efcee
inc dword [ebx]
jmp 0x4efce0
lea edx, [ebp - 0x48]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0x48]
call fcn.004ea230
test al, al
jne 0x4f0254
lea edx, [ebp - 0x4c]
mov eax, dword [ebx]
call fcn.00407370
mov edx, dword [ebp - 0x4c]
mov eax, dword [esi + 0x240]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
inc dword [ebx]
call fcn.0040730c
cmp eax, dword [ebx]
jge 0x4efcac
jmp 0x4f0254
lea edx, [ebp - 0x50]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0x50]
mov edx, 0x4f0bfc
call fcn.0040c5e4
jne 0x4efd4a
inc dword [ebx]
jmp 0x4efd3c
lea edx, [ebp - 0x54]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0x54]
call fcn.004ea230
test al, al
jne 0x4f0254
lea edx, [ebp - 0x58]
mov eax, dword [ebx]
call fcn.00407370
mov edx, dword [ebp - 0x58]
mov eax, dword [esi + 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
inc dword [ebx]
call fcn.0040730c
cmp eax, dword [ebx]
jge 0x4efd0b
jmp 0x4f0254
lea edx, [ebp - 0x5c]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0x5c]
mov edx, 0x4f0c10
call fcn.0040c5e4
jne 0x4efd72
mov eax, dword [esi + 0x1c]
mov edx, dword [eax]
call dword [edx + 0x48]
inc dword [ebx]
jmp 0x4f0254
lea edx, [ebp - 0x60]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0x60]
mov edx, 0x4f0c3c
call fcn.0040c5e4
jne 0x4efd99
mov byte [esi + 0x8a], 1
inc dword [ebx]
jmp 0x4f0254
lea edx, [ebp - 0x64]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0x64]
mov edx, 0x4f0c58
call fcn.0040c5e4
jne 0x4efdc0
mov byte [esi + 0x94], 0
inc dword [ebx]
jmp 0x4f0254
lea edx, [ebp - 0x68]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0x68]
mov edx, 0x4f0c7c
call fcn.0040c5e4
jne 0x4efe56
mov byte [esi + 0x8d], 0
mov byte [esi + 0x8e], 0
lea edx, [ebp - 0x70]
mov eax, dword [ebx]
inc eax
call fcn.00407370
mov edx, dword [ebp - 0x70]
lea eax, [ebp - 0x6c]
mov ecx, 0
call fcn.0040bef8
mov eax, dword [ebp - 0x6c]
call fcn.00432c20
test al, al
je 0x4efe3e
push 0
push 0xa
push 0
push 1
push 0
push 0x64
lea edx, [ebp - 0x78]
mov eax, dword [ebx]
inc eax
call fcn.00407370
mov edx, dword [ebp - 0x78]
lea eax, [ebp - 0x74]
call fcn.0040c34c
mov eax, dword [ebp - 0x74]
call fcn.004eaaf8
mov byte [esi + 0x95], al
cmp byte [esi + 0x95], 0x64
jne 0x4efe4e
mov byte [esi + 0x8d], 1
add dword [ebx], 2
jmp 0x4f0254
lea edx, [ebp - 0x7c]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0x7c]
mov edx, 0x4f0c98
call fcn.0040c5e4
jne 0x4efecd
mov byte [esi + 0x93], 1
mov eax, dword [esi + 0x23c]
mov edx, dword [eax]
call dword [edx + 0x48]
inc dword [ebx]
jmp 0x4efebf
lea edx, [ebp - 0x80]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0x80]
call fcn.004ea230
test al, al
jne 0x4f0254
lea edx, [ebp - 0x84]
mov eax, dword [ebx]
call fcn.00407370
mov edx, dword [ebp - 0x84]
mov eax, dword [esi + 0x23c]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
inc dword [ebx]
call fcn.0040730c
cmp eax, dword [ebx]
jge 0x4efe85
jmp 0x4f0254
lea edx, [ebp - 0x88]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0x88]
mov edx, 0x4f0cb0
call fcn.0040c5e4
jne 0x4eff43
lea edx, [ebp - 0x90]
mov eax, dword [ebx]
inc eax
call fcn.00407370
mov edx, dword [ebp - 0x90]
lea eax, [ebp - 0x8c]
mov ecx, 0
call fcn.0040bef8
mov eax, dword [ebp - 0x8c]
call fcn.00432c20
test al, al
je 0x4eff3b
lea edx, [ebp - 0x94]
mov eax, dword [ebx]
inc eax
call fcn.00407370
mov eax, dword [ebp - 0x94]
call fcn.00422d00
mov dword [esi + 0x38], eax
add dword [ebx], 2
jmp 0x4f0254
lea edx, [ebp - 0x98]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0x98]
mov edx, 0x4f0ccc
call fcn.0040c5e4
jne 0x4eff6a
add dword [ebx], 2
jmp 0x4f0254
lea edx, [ebp - 0x9c]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0x9c]
mov edx, 0x4f0ce8
call fcn.0040c5e4
jne 0x4eff90
inc dword [ebx]
jmp 0x4f0254
lea edx, [ebp - 0xa0]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0xa0]
mov edx, 0x4f0d04
call fcn.0040c5e4
jne 0x4effbd
mov byte [esi + 0x92], 0
inc dword [ebx]
jmp 0x4f0254
lea edx, [ebp - 0xa4]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0xa4]
mov edx, 0x4f0d2c
call fcn.0040c5e4
jne 0x4effea
mov byte [esi + 0x89], 1
inc dword [ebx]
jmp 0x4f0254
lea edx, [ebp - 0xa8]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0xa8]
mov edx, 0x4f0d48
call fcn.0040c5e4
jne 0x4f0017
mov byte [esi + 0x8b], 1
inc dword [ebx]
jmp 0x4f0254
lea edx, [ebp - 0xac]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0xac]
mov edx, 0x4f0d5c
call fcn.0040c5e4
jne 0x4f004b
mov byte [esi + 0x8d], 1
mov byte [esi + 0x8e], 0
inc dword [ebx]
jmp 0x4f0254
lea edx, [ebp - 0xb0]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0xb0]
mov edx, 0x4f0d74
call fcn.0040c5e4
jne 0x4f007f
mov byte [esi + 0x8d], 0
mov byte [esi + 0x8e], 1
inc dword [ebx]
jmp 0x4f0254
lea edx, [ebp - 0xb4]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0xb4]
mov edx, 0x4f0d8c
call fcn.0040c5e4
jne 0x4f00ac
mov byte [esi + 0x8f], 1
inc dword [ebx]
jmp 0x4f0254
lea edx, [ebp - 0xb8]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0xb8]
mov edx, 0x4f0da8
call fcn.0040c5e4
jne 0x4f00d9
mov byte [esi + 0x9b], 1
inc dword [ebx]
jmp 0x4f0254
lea edx, [ebp - 0xbc]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0xbc]
mov edx, 0x4f0dcc
call fcn.0040c5e4
jne 0x4f013b
cmp byte [esi + 0x9b], 0
je 0x4f0133
lea edx, [ebp - 0xc4]
mov eax, dword [ebx]
inc eax
call fcn.00407370
mov edx, dword [ebp - 0xc4]
lea eax, [ebp - 0xc0]
mov ecx, 0
call fcn.0040bef8
mov eax, dword [ebp - 0xc0]
lea edx, [esi + 0x2c]
call fcn.00432fac
add dword [ebx], 2
jmp 0x4f0254
lea edx, [ebp - 0xc8]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0xc8]
mov edx, 0x4f0dec
call fcn.0040c5e4
jne 0x4f019d
cmp byte [esi + 0x9b], 0
je 0x4f0195
lea edx, [ebp - 0xd0]
mov eax, dword [ebx]
inc eax
call fcn.00407370
mov edx, dword [ebp - 0xd0]
lea eax, [ebp - 0xcc]
mov ecx, 0
call fcn.0040bef8
mov eax, dword [ebp - 0xcc]
lea edx, [esi + 0x14]
call fcn.00432fac
add dword [ebx], 2
jmp 0x4f0254
lea edx, [ebp - 0xd4]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0xd4]
mov edx, 0x4f0e0c
call fcn.0040c5e4
je 0x4f01db
lea edx, [ebp - 0xd8]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0xd8]
mov edx, 0x4f0e20
call fcn.0040c5e4
jne 0x4f01fe
lea edx, [ebp - 0xdc]
mov eax, dword [ebx]
inc eax
call fcn.00407370
mov edx, dword [ebp - 0xdc]
mov eax, dword [0x4f8c60]
call fcn.0040c34c
add dword [ebx], 2
jmp 0x4f0254
lea edx, [ebp - 0xe0]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0xe0]
mov edx, 0x4f0e38
call fcn.0040c5e4
jne 0x4f0228
mov byte [esi + 0x87], 1
inc dword [ebx]
jmp 0x4f0254
lea edx, [ebp - 0xe4]
mov eax, dword [ebx]
call fcn.00407370
mov eax, dword [ebp - 0xe4]
mov edx, 0x4f0e54
call fcn.0040c5e4
jne 0x4f0252
mov byte [esi + 0x88], 1
inc dword [ebx]
jmp 0x4f0254
inc dword [ebx]
call fcn.0040730c
cmp eax, dword [ebx]
jge 0x4efbb2
cmp byte [esi + 0x9c], 0
je 0x4f0284
mov eax, dword [0x4f8c60]
mov eax, dword [eax]
xor edx, edx
call fcn.0040c1c0
jne 0x4f0284
call fcn.004eb060
jmp 0x4f0904
cmp byte [esi + 0x90], 0
je 0x4f02c9
mov eax, dword [0x4f8c60]
mov eax, dword [eax]
xor edx, edx
call fcn.0040c1c0
jne 0x4f02c9
xor edx, edx
mov eax, 0x4f0e6c
call fcn.004dde34
xor edx, edx
mov eax, 0x4f0f0c
call fcn.004dde34
mov eax, dword [0x4f8e20]
call fcn.004089c0
call fcn.004070fc
jmp 0x4f0904
lea eax, [esi + 0x1c]
call fcn.004e4828
lea eax, [esi + 0x1c]
call fcn.004e401c
lea eax, [esi + 0x1c]
call fcn.004e42c8
mov ebx, dword [esi + 0x38]
test ebx, ebx
je 0x4f0338
cmp byte [esi + 0x90], 0
je 0x4f032b
push 0x4f0f50
lea edx, [ebp - 0xec]
mov eax, ebx
call fcn.00422aa8
push dword [ebp - 0xec]
push 0x4f0f6c
lea eax, [ebp - 0xe8]
mov edx, 3
call fcn.0040c534
mov eax, dword [ebp - 0xe8]
mov dl, 1
call fcn.004dde34
imul eax, dword [esi + 0x38], 0x3e8
push eax
call sub.kernel32.dll_Sleep
cmp byte [esi + 0x90], 0
je 0x4f0354
mov dl, 1
mov eax, 0x4f0fa8
call fcn.004dde34
xor eax, eax
call fcn.004de034
mov eax, dword [esi + 0x2c]
test eax, eax
je 0x4f0360
sub eax, 4
mov eax, dword [eax]
test eax, eax
jne 0x4f036c
lea eax, [esi + 0x2c]
call fcn.004d7478
mov eax, dword [0x4f8c60]
mov eax, dword [eax]
xor edx, edx
call fcn.0040c1c0
jne 0x4f03a3
lea edx, [ebp - 0xf0]
lea eax, [esi + 0x2c]
call fcn.00432f68
mov edx, dword [ebp - 0xf0]
lea eax, [esi + 0x80]
call fcn.00432e28
test al, al
jne 0x4f0904
cmp byte [esi + 0x90], 0
je 0x4f03b8
mov dl, 1
mov eax, 0x4f0fd8
call fcn.004dde34
call fcn.004e8628
cmp byte [esi + 0x90], 0
je 0x4f03d9
mov dl, 1
mov eax, 0x4f1010
call fcn.004dde34
xor eax, eax
call fcn.004de034
cmp byte [esi + 0x8f], 0
jne 0x4f03e7
call fcn.004df560
cmp byte [esi + 0x8f], 0
je 0x4f03f5
call fcn.004e47e4
mov eax, dword [esi + 0x20]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
je 0x4f0429
jmp 0x4f040d
push 0x2710
call sub.kernel32.dll_Sleep
push 0
push 0
mov eax, dword [0x4f8cc0]
push eax
mov ecx, 0x4e9f04
xor edx, edx
xor eax, eax
call fcn.0040b254
test eax, eax
je 0x4f0403
mov eax, dword [esi + 0x34]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
je 0x4f043a
call fcn.004ea008
call fcn.004ea758
mov eax, dword [0x4f8c60]
mov eax, dword [eax]
xor edx, edx
call fcn.0040c1c0
je 0x4f0687
mov byte [esi + 0x98], 0
mov eax, dword [0x4f8c60]
mov eax, dword [eax]
call fcn.00432374
test al, al
je 0x4f04ca
cmp byte [esi + 0x90], 0
je 0x4f04b9
mov dl, 1
xor eax, eax
call fcn.004dde34
mov ecx, dword [0x4f8c60]
mov ecx, dword [ecx]
lea eax, [ebp - 0xf8]
mov edx, 0x4f103c
call fcn.0040c078
mov edx, dword [ebp - 0xf8]
lea eax, [ebp - 0xf4]
call fcn.0040c338
mov eax, dword [ebp - 0xf4]
mov dl, 1
call fcn.004dde34
xor eax, eax
call fcn.004de034
mov eax, dword [0x4f8c60]
mov eax, dword [eax]
call fcn.004e8a88
jmp 0x4f05ef
cmp byte [esi + 0x8f], 0
jne 0x4f0510
cmp byte [esi + 0x90], 0
jne 0x4f0510
jmp 0x4f04e8
push 0x2710
call sub.kernel32.dll_Sleep
push 0
push 0
mov eax, dword [0x4f8cc0]
push eax
mov ecx, 0x4e8fe8
xor edx, edx
xor eax, eax
call fcn.0040b254
test eax, eax
je 0x4f04de
push 0x1388
call sub.kernel32.dll_Sleep
jmp 0x4f0517
mov byte [esi + 0x98], 1
cmp byte [esi + 0x90], 0
je 0x4f0566
mov dl, 1
xor eax, eax
call fcn.004dde34
mov ecx, dword [0x4f8c60]
mov ecx, dword [ecx]
lea eax, [ebp - 0x100]
mov edx, 0x4f106c
call fcn.0040c078
mov edx, dword [ebp - 0x100]
lea eax, [ebp - 0xfc]
call fcn.0040c338
mov eax, dword [ebp - 0xfc]
mov dl, 1
call fcn.004dde34
xor eax, eax
call fcn.004de034
mov eax, dword [0x4f8c60]
mov eax, dword [eax]
call fcn.004e8d24
jmp 0x4f057e
push 0x3e8
call sub.kernel32.dll_Sleep
cmp byte [esi + 0x98], 0
je 0x4f0574
cmp byte [esi + 0x90], 0
je 0x4f05ac
mov dl, 1
xor eax, eax
call fcn.004dde34
mov dl, 1
mov eax, 0x4f10a8
call fcn.004dde34
xor eax, eax
call fcn.004de034
call fcn.004de00c
cmp byte [esi + 0x90], 0
je 0x4f05ef
mov eax, dword [0x4f8d48]
cmp byte [eax + 0x2e0], 0
je 0x4f05ef
xor edx, edx
mov eax, 0x4f10e0
call fcn.004dde34
xor edx, edx
mov eax, 0x4f0f0c
call fcn.004dde34
mov eax, dword [0x4f8e20]
call fcn.004089c0
call fcn.004070fc
cmp byte [esi + 0x93], 0
je 0x4f05fd
call fcn.004e9804
cmp byte [esi + 0x89], 0
je 0x4f0623
push 0
push 0x4f1100
push 0x4f1104
push 0x4f1120
push 0x4f1134
push 0
call sub.shell32.dll_ShellExecuteW
cmp byte [esi + 0x8a], 0
je 0x4f067a
push 0
push 0
push 0x4f114c
lea edx, [ebp - 0x108]
xor eax, eax
call fcn.00407370
push dword [ebp - 0x108]
push 0x4f1198
lea eax, [ebp - 0x104]
mov edx, 3
call fcn.0040c534
mov eax, dword [ebp - 0x104]
call fcn.0040c25c
push eax
push 0x4f11a0
push 0x4f1134
push 0
call sub.shell32.dll_ShellExecuteW
mov eax, dword [0x4f8d7c]
mov byte [eax], 0
jmp 0x4f0904
cmp byte [esi + 0x8f], 0
je 0x4f06f4
cmp byte [esi + 0x8a], 0
je 0x4f06e7
push 0
push 0
push 0x4f114c
lea edx, [ebp - 0x110]
xor eax, eax
call fcn.00407370
push dword [ebp - 0x110]
push 0x4f1198
lea eax, [ebp - 0x10c]
mov edx, 3
call fcn.0040c534
mov eax, dword [ebp - 0x10c]
call fcn.0040c25c
push eax
push 0x4f11a0
push 0x4f1134
push 0
call sub.shell32.dll_ShellExecuteW
mov eax, dword [0x4f8d7c]
mov byte [eax], 0
jmp 0x4f0904
cmp byte [esi + 0x87], 0
je 0x4f0710
mov byte [esi + 0x98], 1
jmp 0x4f072c
push 0x2710
call sub.kernel32.dll_Sleep
push 0
push 0
mov eax, dword [0x4f8cc0]
push eax
mov ecx, 0x4e7224
xor edx, edx
xor eax, eax
call fcn.0040b254
test eax, eax
je 0x4f0706
push 0x1388
call sub.kernel32.dll_Sleep
cmp byte [esi + 0x87], 0
je 0x4f0752
mov byte [esi + 0x96], 1
jmp 0x4f076e
push 0x2710
call sub.kernel32.dll_Sleep
push 0
push 0
mov eax, dword [0x4f8cc0]
push eax
mov ecx, 0x4e6fd8
xor edx, edx
xor eax, eax
call fcn.0040b254
test eax, eax
je 0x4f0748
cmp byte [esi + 0x88], 0
je 0x4f078a
mov byte [esi + 0x9a], 1
jmp 0x4f07b2
push 0x2710
call sub.kernel32.dll_Sleep
push 0
push 0
mov eax, dword [0x4f8cc0]
push eax
mov ecx, 0x4e8a2c
xor edx, edx
xor eax, eax
call fcn.0040b254
test eax, eax
je 0x4f0780
jmp 0x4f07b2
push 0x2710
call sub.kernel32.dll_Sleep
cmp byte [esi + 0x9a], 0
je 0x4f07a8
cmp byte [esi + 0x88], 0
je 0x4f07d7
mov byte [esi + 0x99], 1
jmp 0x4f07f3
push 0x2710
call sub.kernel32.dll_Sleep
push 0
push 0
mov eax, dword [0x4f8cc0]
push eax
mov ecx, 0x4e8930
xor edx, edx
xor eax, eax
call fcn.0040b254
test eax, eax
je 0x4f07cd
push 0x1388
call sub.kernel32.dll_Sleep
cmp byte [esi + 0x88], 0
je 0x4f0819
mov byte [esi + 0x97], 1
jmp 0x4f0841
push 0x2710
call sub.kernel32.dll_Sleep
push 0
push 0
mov eax, dword [0x4f8cc0]
push eax
mov ecx, 0x4e8778
xor edx, edx
xor eax, eax
call fcn.0040b254
test eax, eax
je 0x4f080f
jmp 0x4f0841
push 0x3e8
call sub.kernel32.dll_Sleep
cmp byte [esi + 0x96], 0
je 0x4f0837
cmp byte [esi + 0x97], 0
je 0x4f0837
cmp byte [esi + 0x98], 0
je 0x4f0837
cmp byte [esi + 0x99], 0
je 0x4f0837
cmp byte [esi + 0x93], 0
je 0x4f0873
call fcn.004e9804
mov eax, dword [esi + 0x80]
push eax
call sub.kernel32.dll_CloseHandle
cmp byte [esi + 0x89], 0
je 0x4f08a5
push 0
push 0x4f1100
push 0x4f1104
push 0x4f1120
push 0x4f1134
push 0
call sub.shell32.dll_ShellExecuteW
cmp byte [esi + 0x8a], 0
je 0x4f08fc
push 0
push 0
push 0x4f114c
lea edx, [ebp - 0x118]
xor eax, eax
call fcn.00407370
push dword [ebp - 0x118]
push 0x4f1198
lea eax, [ebp - 0x114]
mov edx, 3
call fcn.0040c534
mov eax, dword [ebp - 0x114]
call fcn.0040c25c
push eax
push 0x4f11a0
push 0x4f1134
push 0
call sub.shell32.dll_ShellExecuteW
mov eax, dword [0x4f8d7c]
mov byte [eax], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4f09eb
lea eax, [ebp - 0x118]
mov edx, 6
call fcn.0040b3f4
lea eax, [ebp - 0x100]
call fcn.0040b3dc
lea eax, [ebp - 0xfc]
call fcn.0040b394
lea eax, [ebp - 0xf8]
call fcn.0040b3dc
lea eax, [ebp - 0xf4]
call fcn.0040b394
lea eax, [ebp - 0xf0]
call fcn.0040b3b8
lea eax, [ebp - 0xec]
mov edx, 8
call fcn.0040b3f4
lea eax, [ebp - 0xcc]
call fcn.0040b3b8
lea eax, [ebp - 0xc8]
mov edx, 2
call fcn.0040b3f4
lea eax, [ebp - 0xc0]
call fcn.0040b3b8
lea eax, [ebp - 0xbc]
mov edx, 0xc
call fcn.0040b3f4
lea eax, [ebp - 0x8c]
call fcn.0040b3b8
lea eax, [ebp - 0x88]
mov edx, 5
call fcn.0040b3f4
lea eax, [ebp - 0x74]
call fcn.0040b3dc
lea eax, [ebp - 0x70]
call fcn.0040b394
lea eax, [ebp - 0x6c]
call fcn.0040b3b8
lea eax, [ebp - 0x68]
mov edx, 0x16
call fcn.0040b3f4
pop eax
jmp eax