Function at 0x414b1f
Capabilities:
Create process on windows
Delete file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x10d0
call fcn.00419430
push ebx
push esi
mov dword [ebp - 8], ecx
push edi
push 1
lea ecx, [ebp - 0x2c]
call fcn.004051cd
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x64]
push str..exe
push eax
mov ecx, esi
call fcn.00411896
mov ecx, eax
call fcn.00410c6e
xor ebx, ebx
test al, al
jne 0x414b8c
lea eax, [ebp - 0x8c]
push str..msp
push eax
mov ecx, esi
call fcn.00411896
mov ecx, eax
call fcn.00410c6e
lea ecx, [ebp - 0x8c]
mov byte [ebp - 1], al
call fcn.00401925
cmp byte [ebp - 1], bl
mov byte [ebp - 1], bl
je 0x414b90
mov byte [ebp - 1], 1
lea ecx, [ebp - 0x64]
call fcn.00401925
cmp byte [ebp - 1], bl
je 0x414dbd
push dword [ebp - 0x1c]
mov esi, dword [esi + 0x10]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push 0x41ed08
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
call fcn.00410ea4
mov eax, dword [ebp + 0xc]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantInit]
mov esi, dword [eax + 0x10]
push esi
call edi
push eax
push esi
lea ecx, [ebp - 0x1c]
call fcn.0040387c
cmp dword [ebp - 0x1c], ebx
jne 0x414be6
xor eax, eax
jmp 0x414beb
push dword [ebp - 0x1c]
call edi
add eax, 0x40
push eax
call fcn.00411cd0
mov ecx, dword [ebp + 8]
mov dword [ebp + 0xc], eax
lea eax, [ebp - 0x64]
mov dword [esp], str..exe
push eax
call fcn.00411896
mov ecx, eax
call fcn.00410c6e
lea ecx, [ebp - 0x64]
mov byte [ebp + 0xb], al
call fcn.00401925
cmp byte [ebp + 0xb], bl
je 0x414c67
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
mov dword [ebp + 8], eax
jne 0x414c2f
xor edi, edi
jmp 0x414c5b
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea esi, [eax + eax + 2]
mov eax, esi
add eax, 3
and al, 0xfc
call fcn.00419430
mov edi, esp
push ebx
push ebx
push esi
push edi
push 0xffffffffffffffff
push dword [ebp + 8]
mov byte [edi], bl
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push edi
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x414cb9
push str.MSIEXEC.EXE__p
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
mov dword [ebp + 8], eax
jne 0x414c83
xor edi, edi
jmp 0x414caf
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea esi, [eax + eax + 2]
mov eax, esi
add eax, 3
and al, 0xfc
call fcn.00419430
mov edi, esp
push ebx
push ebx
push esi
push edi
push 0xffffffffffffffff
push dword [ebp + 8]
mov byte [edi], bl
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push edi
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x10
xor eax, eax
pop ecx
lea edi, [ebp - 0xcc]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x3c]
mov dword [ebp - 0xd0], 0x44
push eax
lea eax, [ebp - 0xd0]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
mov dword [ebp - 0x3c], ebx
push dword [ebp + 0xc]
mov dword [ebp - 0x38], ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x414d60
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, dword [sym.imp.USER32.dll_LoadStringA]
mov esi, 0x400
lea eax, [ebp - 0x10d0]
push esi
push eax
push 0x32cd
push dword [0x41f8f0]
call edi
lea eax, [ebp - 0xcd0]
push esi
push eax
push 0x64
push dword [0x41f8f0]
call edi
push dword [ebp + 0xc]
lea eax, [ebp - 0x10d0]
push eax
lea eax, [ebp - 0x4d0]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0xcd0]
push 0x10
push eax
lea eax, [ebp - 0x4d0]
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x414d95
push 0xffffffffffffffff
push dword [ebp - 0x3c]
call dword [sym.imp.USER32.dll_WaitForInputIdle]
mov esi, dword [ebp - 8]
push 2
mov eax, dword [esi + 8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
push dword [ebp - 0x3c]
call fcn.0041579b
mov eax, dword [esi + 8]
push 2
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push dword [ebp + 0xc]
call fcn.00411cdb
pop ecx
lea ecx, [ebp - 0x3c]
call fcn.0040e3ff
lea ecx, [ebp - 0x2c]
call fcn.0040539b
xor eax, eax
lea esp, [ebp - 0x10dc]
pop edi
pop esi
pop ebx
leave
ret 8
mov eax, dword [ebp + 0xc]
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [eax + 0x10]
cmp eax, ebx
mov dword [ebp - 0xc], eax
jne 0x414ddb
mov dword [ebp - 8], ebx
jmp 0x414e0b
push eax
call esi
lea eax, [eax + eax + 2]
mov dword [ebp + 0xc], eax
add eax, 3
and al, 0xfc
call fcn.00419430
mov eax, esp
push ebx
push ebx
mov dword [ebp - 8], eax
push dword [ebp + 0xc]
mov byte [eax], bl
push eax
push 0xffffffffffffffff
push dword [ebp - 0xc]
push ebx
push ebx
call edi
mov eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x10]
cmp eax, ebx
mov dword [ebp - 0xc], eax
jne 0x414e1c
xor eax, eax
jmp 0x414e49
push eax
call esi
lea eax, [eax + eax + 2]
mov dword [ebp + 0xc], eax
add eax, 3
and al, 0xfc
call fcn.00419430
mov eax, esp
push ebx
push ebx
mov dword [ebp - 0x10], eax
push dword [ebp + 0xc]
mov byte [eax], bl
push eax
push 0xffffffffffffffff
push dword [ebp - 0xc]
push ebx
push ebx
call edi
mov eax, dword [ebp - 0x10]
push 1
push ebx
push dword [ebp - 8]
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
ja 0x414da6
push ebx
lea eax, [ebp - 8]
push ebx
push eax
push ebx
mov dword [ebp - 8], ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebx
push 0x1300
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
cmp dword [ebp - 8], ebx
je 0x414ee3
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x10]
cmp eax, ebx
mov dword [ebp - 0xc], eax
jne 0x414e98
xor esi, esi
jmp 0x414ebf
push eax
call esi
lea eax, [eax + eax + 2]
mov dword [ebp + 0xc], eax
add eax, 3
and al, 0xfc
call fcn.00419430
mov esi, esp
push ebx
push ebx
push dword [ebp + 0xc]
mov byte [esi], bl
push esi
push 0xffffffffffffffff
push dword [ebp - 0xc]
push ebx
push ebx
call edi
push dword [ebp - 8]
lea eax, [ebp - 0x8d0]
push esi
push str.Error_in_executing_file__s_nDescription:__s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x414eff
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x8d0]
push 0x41ed1c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0x10
lea eax, [ebp - 0x8d0]
push str.Error
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x2c]
call fcn.0040539b
mov eax, 0x80004005
jmp 0x414db0