Function at 0x55e860
Capabilities:
Create process on windows
Schedule task via at

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff8b4
mov eax, dword [ebp + 8]
test eax, eax
jne 0x55e877
xor eax, eax
jmp 0x55f2a3
push dword [ebp + 8]
lea edx, [ebp - 0x140]
push edx
call fcn.0066c9ec
add esp, 8
push 0x2e
lea ecx, [ebp - 0x140]
push ecx
call fcn.0066cb35
add esp, 8
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x55e8ab
xor eax, eax
jmp 0x55f2a3
inc dword [ebp - 0x14]
push 0x80ce02
push dword [ebp - 0x14]
call fcn.0066c9ec
add esp, 8
push 0x5c
push dword [ebp + 8]
call fcn.0066cb35
add esp, 8
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x14]
test edx, edx
jne 0x55e8dc
xor eax, eax
jmp 0x55f2a3
push 0
push dword [ebp + 8]
call fcn.0066e7cc
add esp, 8
test eax, eax
je 0x55e8f4
xor eax, eax
jmp 0x55f2a3
push 0x80ce06
push dword [ebp + 8]
call fcn.0066ef18
add esp, 8
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 0x10]
test edx, edx
jne 0x55e915
xor eax, eax
jmp 0x55f2a3
mov edx, dword [ebp - 0x10]
movsx ecx, byte [edx + 0x16]
push ecx
call fcn.0066ec90
pop ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cmp eax, 0x20
jge 0x55e93e
push dword [ebp - 0x10]
call fcn.0066ea1c
pop ecx
xor eax, eax
jmp 0x55f2a3
push 1
push dword [ebp - 0x18]
call fcn.0055cfd0
add esp, 8
test eax, eax
jne 0x55e95f
push dword [ebp - 0x10]
call fcn.0066ea1c
pop ecx
xor eax, eax
jmp 0x55f2a3
push dword [ebp - 0x10]
push dword [ebp - 0x18]
push 1
push dword [0x80cd98]
call fcn.0066f1f8
add esp, 0x10
push dword [ebp - 0x10]
call fcn.0066ea1c
pop ecx
mov dword [ebp - 0x20], 1
lea edx, [ebp - 0x340]
push edx
lea ecx, [ebp - 0x240]
push ecx
call fcn.0055d060
add esp, 8
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
dec eax
jne 0x55e9bc
push 0x80ce09
lea edx, [ebp - 0x240]
push edx
call fcn.0066cbe8
add esp, 8
test eax, eax
je 0x55e9c8
call fcn.0055d033
xor eax, eax
jmp 0x55f2a3
lea edx, [ebp - 0x340]
push edx
lea ecx, [ebp - 0x240]
push ecx
call fcn.0055d060
add esp, 8
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
dec eax
jne 0x55ea03
push 0x80ce0d
lea edx, [ebp - 0x240]
push edx
call fcn.0066cbe8
add esp, 8
test eax, eax
je 0x55ea83
mov ecx, dword [ebp - 0xc]
cmp ecx, 2
je 0x55ea17
call fcn.0055d033
xor eax, eax
jmp 0x55f2a3
push 0x80ce12
lea edx, [ebp - 0x240]
push edx
call fcn.0066cbe8
add esp, 8
test eax, eax
jne 0x55e9c8
push 0x80ce18
lea ecx, [ebp - 0x340]
push ecx
call fcn.0066cbe8
add esp, 8
test eax, eax
jne 0x55ea53
mov dword [ebp - 0x20], 1
jmp 0x55e9c8
push 0x80ce1b
lea eax, [ebp - 0x340]
push eax
call fcn.0066cbe8
add esp, 8
test eax, eax
jne 0x55ea77
mov dword [ebp - 0x20], 2
jmp 0x55e9c8
call fcn.0055d033
xor eax, eax
jmp 0x55f2a3
lea edx, [ebp - 0x340]
push edx
lea ecx, [ebp - 0x240]
push ecx
call fcn.0055d060
add esp, 8
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
dec eax
jne 0x55eaba
push 0x80ce1f
lea edx, [ebp - 0x240]
push edx
call fcn.0066cbe8
add esp, 8
test eax, eax
je 0x55eac6
call fcn.0055d033
xor eax, eax
jmp 0x55f2a3
lea edx, [ebp - 0x340]
push edx
lea ecx, [ebp - 0x240]
push ecx
call fcn.0055d060
add esp, 8
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
dec eax
jne 0x55eafd
push 0x80ce23
lea edx, [ebp - 0x240]
push edx
call fcn.0066cbe8
add esp, 8
test eax, eax
je 0x55eb11
mov ecx, dword [ebp - 0xc]
cmp ecx, 2
je 0x55eac6
call fcn.0055d033
xor eax, eax
jmp 0x55f2a3
lea edx, [ebp - 0x340]
push edx
lea ecx, [ebp - 0x240]
push ecx
call fcn.0055d060
add esp, 8
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
dec eax
jne 0x55eb48
push 0x80ce28
lea edx, [ebp - 0x240]
push edx
call fcn.0066cbe8
add esp, 8
test eax, eax
je 0x55eb54
call fcn.0055d033
xor eax, eax
jmp 0x55f2a3
xor edx, edx
mov dword [0x80cda4], edx
push 0x8243fb
push 0x80ce2c
lea ecx, [ebp - 0x74c]
push ecx
call fcn.00670e94
add esp, 0xc
push 0x80ce3b
lea eax, [ebp - 0x74c]
push eax
call fcn.0066ef18
add esp, 8
mov dword [0x80cda8], eax
mov edx, dword [0x80cda8]
test edx, edx
je 0x55ec04
push dword [ebp + 8]
push 0x80ce3f
push dword [0x80cda8]
call fcn.0066ef4c
add esp, 0xc
mov ecx, dword [ebp - 0x20]
cmp ecx, 2
jne 0x55ebcb
push 0x80ce4d
push dword [0x80cda8]
call fcn.0066ef4c
add esp, 8
jmp 0x55ebde
push 0x80ce5e
push dword [0x80cda8]
call fcn.0066ef4c
add esp, 8
push 0x80ce6e
push dword [0x80cda8]
call fcn.0066ef4c
add esp, 8
push 0x80ce98
push dword [0x80cda8]
call fcn.0066ef4c
add esp, 8
mov eax, dword [0x80cda0]
mov dword [ebp - 0x30], eax
xor edx, edx
mov dword [ebp - 4], edx
xor ecx, ecx
mov dword [ebp - 8], ecx
mov dword [ebp - 0x2c], 1
lea eax, [ebp - 0x544]
push eax
lea edx, [ebp - 0x440]
push edx
lea ecx, [ebp - 0x340]
push ecx
call fcn.0055d6a2
add esp, 0xc
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
dec eax
jne 0x55ec5f
push 0x80ceb9
lea edx, [ebp - 0x340]
push edx
call fcn.0066cbe8
add esp, 8
test eax, eax
je 0x55ed73
mov ecx, dword [ebp - 0xc]
cmp ecx, 5
je 0x55ec1d
mov eax, dword [ebp - 0xc]
cmp eax, 4
jne 0x55ec83
lea edx, [ebp - 0x340]
push edx
call fcn.006749dc
pop ecx
mov dword [0xcf1d28], eax
jmp 0x55ec1d
mov ecx, dword [ebp - 0xc]
cmp ecx, 3
je 0x55ecbf
mov eax, dword [0x80cda8]
test eax, eax
je 0x55ecb5
lea edx, [ebp - 0x440]
push edx
lea ecx, [ebp - 0x340]
push ecx
push 0x80cebe
push dword [0x80cda8]
call fcn.0066ef4c
add esp, 0x10
xor eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x55ed73
movsx edx, byte [ebp - 0x543]
cmp edx, 0x3a
je 0x55ed1c
push dword [ebp + 8]
lea ecx, [ebp - 0x648]
push ecx
call fcn.0066c9ec
add esp, 8
push 0x5c
lea eax, [ebp - 0x648]
push eax
call fcn.0066cb35
add esp, 8
mov dword [ebp - 0x14], eax
inc dword [ebp - 0x14]
lea edx, [ebp - 0x544]
push edx
push dword [ebp - 0x14]
call fcn.0066c9ec
add esp, 8
lea ecx, [ebp - 0x648]
push ecx
lea eax, [ebp - 0x544]
push eax
call fcn.0066c9ec
add esp, 8
push 0
lea edx, [ebp - 0x544]
push edx
call fcn.0066e7cc
add esp, 8
test eax, eax
je 0x55ed5b
mov ecx, dword [0x80cda8]
test ecx, ecx
je 0x55ed55
lea eax, [ebp - 0x544]
push eax
push 0x80ced6
push dword [0x80cda8]
call fcn.0066ef4c
add esp, 0xc
inc dword [0x80cda4]
lea edx, [ebp - 0x440]
push edx
call fcn.006749dc
pop ecx
mov dword [ebp - 8], eax
inc dword [ebp - 4]
jmp 0x55ec1d
mov ecx, dword [0x80cda8]
test ecx, ecx
je 0x55ed90
push 0x80ceda
push dword [0x80cda8]
call fcn.0066ef4c
add esp, 8
mov eax, dword [0xcf1d28]
inc eax
mov edx, dword [ebp - 8]
cmp eax, edx
jbe 0x55eda7
mov ecx, dword [0xcf1d28]
inc ecx
mov dword [ebp - 8], ecx
mov eax, dword [0x80cda4]
test eax, eax
jne 0x55edb7
mov edx, dword [ebp - 8]
test edx, edx
jne 0x55eded
mov ecx, dword [0x80cda8]
test ecx, ecx
je 0x55ede3
mov eax, dword [0x80cda4]
test eax, eax
je 0x55ede3
push dword [0x80cda4]
push 0x80cefb
push dword [0x80cda8]
call fcn.0066ef4c
add esp, 0xc
xor edx, edx
mov dword [ebp - 0x2c], edx
jmp 0x55f1da
mov dword [0x826584], 0
mov dword [0x826588], 0
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [0x82657c], eax
mov dword [0x826580], edx
mov ecx, dword [ebp - 0x20]
dec ecx
jne 0x55ee29
add dword [0x82657c], 0x96
adc dword [0x826580], 0
xor eax, eax
mov dword [0x80cdac], eax
mov edx, dword [ebp - 0x20]
dec edx
jne 0x55ee7a
mov ecx, dword [0x6e7428]
test ecx, ecx
je 0x55ee7a
mov eax, dword [0x6e742c]
test eax, eax
jne 0x55ee70
push 0x2e
lea edx, [ebp - 0x140]
push edx
call fcn.0066cb35
add esp, 8
mov dword [ebp - 0x14], eax
inc dword [ebp - 0x14]
push 0x80cf10
push dword [ebp - 0x14]
call fcn.0066c9ec
add esp, 8
mov dword [0x80cdac], 1
mov ecx, dword [ebp - 0x30]
mov dword [0x80cda0], ecx
push 0
push 0
push 2
push 0
push 1
push 0x40000000
lea eax, [ebp - 0x140]
push eax
call sub.KERNEL32.DLL_CreateFileA
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x28]
cmp edx, 0xffffffff
jne 0x55eed7
mov ecx, dword [0x80cda8]
test ecx, ecx
je 0x55eecd
lea eax, [ebp - 0x140]
push eax
push str.Error_creating_file:___s_._n
push dword [0x80cda8]
call fcn.0066ef4c
add esp, 0xc
xor edx, edx
mov dword [ebp - 0x2c], edx
jmp 0x55f1da
call fcn.00404a38
call fcn.00441118
lea ecx, [ebp - 0x140]
push ecx
call fcn.00441278
pop ecx
mov dword [ebp - 0x2c], 1
xor eax, eax
mov dword [0x6f4078], eax
xor edx, edx
mov dword [ebp - 4], edx
lea ecx, [ebp - 0x544]
push ecx
lea eax, [ebp - 0x440]
push eax
lea edx, [ebp - 0x340]
push edx
call fcn.0055d6a2
add esp, 0xc
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
dec ecx
jne 0x55ef43
push 0x80cf30
lea eax, [ebp - 0x340]
push eax
call fcn.0066cbe8
add esp, 8
test eax, eax
je 0x55f0d2
mov edx, dword [ebp - 0xc]
cmp edx, 5
je 0x55ef01
movsx ecx, byte [ebp - 0x543]
cmp ecx, 0x3a
je 0x55efa8
push dword [ebp + 8]
lea eax, [ebp - 0x648]
push eax
call fcn.0066c9ec
add esp, 8
push 0x5c
lea edx, [ebp - 0x648]
push edx
call fcn.0066cb35
add esp, 8
mov dword [ebp - 0x14], eax
inc dword [ebp - 0x14]
lea ecx, [ebp - 0x544]
push ecx
push dword [ebp - 0x14]
call fcn.0066c9ec
add esp, 8
lea eax, [ebp - 0x648]
push eax
lea edx, [ebp - 0x544]
push edx
call fcn.0066c9ec
add esp, 8
push 0
push 0
push 3
push 0
push 1
push SysReAllocStringLen
lea ecx, [ebp - 0x544]
push ecx
call sub.KERNEL32.DLL_CreateFileA
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp eax, 0xffffffff
jne 0x55effc
mov edx, dword [0x80cda8]
test edx, edx
je 0x55eff2
lea ecx, [ebp - 0x544]
push ecx
push str.Error_opening_file:__s._n
push dword [0x80cda8]
call fcn.0066ef4c
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x55f0d2
push dword [ebp - 0x24]
call fcn.0045d988
pop ecx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], edx
lea edx, [ebp - 0x340]
push edx
call fcn.006749dc
pop ecx
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
cmp ecx, 4
jne 0x55f04f
mov eax, dword [ebp - 0x20]
cmp eax, 2
jne 0x55f069
lea edx, [ebp - 0x440]
push edx
call fcn.006749dc
pop ecx
push eax
push dword [ebp - 8]
push dword [ebp - 0x28]
push dword [ebp - 0x24]
call fcn.0055e0f4
add esp, 0x10
mov dword [ebp - 0x2c], eax
jmp 0x55f069
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 8]
push dword [ebp - 0x28]
push dword [ebp - 0x24]
call fcn.0055de24
add esp, 0x14
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
jg 0x55f0c5
mov edx, dword [0x80cda8]
test edx, edx
je 0x55f0be
mov ecx, dword [ebp - 0x2c]
inc ecx
jne 0x55f09c
lea eax, [ebp - 0x544]
push eax
push str.Error_reading_file:__s._n
push dword [0x80cda8]
call fcn.0066ef4c
add esp, 0xc
jmp 0x55f0be
mov edx, dword [ebp - 0x2c]
cmp edx, 0xfffffffe
jne 0x55f0be
lea ecx, [ebp - 0x140]
push ecx
push str.Error_writing_file:__s._n
push dword [0x80cda8]
call fcn.0066ef4c
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x55f0d2
push dword [ebp - 0x24]
call sub.KERNEL32.DLL_CloseHandle
jmp 0x55ef01
xor edx, edx
mov dword [0x6f4078], edx
call fcn.00441200
call fcn.00404a4c
mov ecx, dword [ebp - 0x20]
dec ecx
jne 0x55f0fa
push 0x96
push dword [ebp - 0x28]
call fcn.0055e3a4
add esp, 8
push dword [ebp - 0x28]
call sub.KERNEL32.DLL_CloseHandle
mov eax, dword [0x80cdac]
test eax, eax
je 0x55f1da
mov edx, dword [0x6e742c]
test edx, edx
jne 0x55f1da
lea ecx, [ebp - 0x140]
push ecx
lea eax, [ebp - 0x648]
push eax
call fcn.0066c9ec
add esp, 8
push 0x5c
lea edx, [ebp - 0x648]
push edx
call fcn.0066cb35
add esp, 8
mov dword [ebp - 0x14], eax
inc dword [ebp - 0x14]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x544]
push ecx
call fcn.0066c9ec
add esp, 8
push 0x2e
lea eax, [ebp - 0x648]
push eax
call fcn.0066cb35
add esp, 8
mov dword [ebp - 0x14], eax
inc dword [ebp - 0x14]
push 0x80cf80
push dword [ebp - 0x14]
call fcn.0066c9ec
add esp, 8
push 0x80cf84
lea edx, [ebp - 0x648]
push edx
call fcn.0066ef18
add esp, 8
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x544]
push ecx
push str.FILE___s__BINARY_n
push dword [ebp - 0x10]
call fcn.0066ef4c
add esp, 0xc
push str.__TRACK_01_MODE2_2352_n
push dword [ebp - 0x10]
call fcn.0066ef4c
add esp, 8
push str.____INDEX_01_00:00:00_n
push dword [ebp - 0x10]
call fcn.0066ef4c
add esp, 8
push dword [ebp - 0x10]
call fcn.0066ea1c
pop ecx
call fcn.0055d033
mov eax, dword [0x80cda8]
test eax, eax
je 0x55f1f4
push dword [0x80cda8]
call fcn.0066ea1c
pop ecx
mov edx, dword [0x80cda4]
test edx, edx
jne 0x55f209
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
jne 0x55f28c
mov eax, dword [0x80cda8]
test eax, eax
je 0x55f260
push 0x61ac
call fcn.00402a64
pop ecx
push eax
push 0x9f2fb4
call fcn.00670e94
add esp, 8
push 0x9f2fb4
push 0
call fcn.00462810
add esp, 8
test eax, eax
je 0x55f28c
push 5
push 0x8243fb
push 0
lea edx, [ebp - 0x74c]
push edx
push 0x80cfc7
push dword [0x6e716c]
call sub.SHELL32.DLL_ShellExecuteA
jmp 0x55f28c
push 0x61ab
call fcn.00402a64
pop ecx
push eax
push 0x9f2fb4
call fcn.00670e94
add esp, 8
push 0x9f2fb4
push dword [0x6e716c]
call fcn.004627e0
add esp, 8
xor ecx, ecx
mov dword [0x80cda8], ecx
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x55f2a0
mov eax, dword [ebp - 0x20]
jmp 0x55f2a3
mov eax, dword [ebp - 0x2c]
mov esp, ebp
pop ebp
ret