Function at 0x4077e0
Capabilities:
Create process on windows
Delete directory
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x490dd0
mov eax, dword fs:[0]
push eax
sub esp, 0x74
mov eax, dword [0x4ed394]
xor eax, esp
mov dword [esp + 0x70], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4ed394]
xor eax, esp
push eax
lea eax, [esp + 0x88]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x98]
mov eax, 7
xor edi, edi
xor ecx, ecx
mov dword [esp + 0x64], eax
mov dword [esp + 0x60], edi
mov word [esp + 0x50], cx
mov dword [esp + 0x90], edi
xor edx, edx
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], edi
mov word [esp + 0x34], dx
mov bl, 1
lea ecx, [esp + 0x14]
mov byte [esp + 0x90], bl
call fcn.00410990
push 0xffffffffffffffff
push edi
lea ecx, [esp + 0x54]
mov byte [esp + 0x98], 2
call fcn.0040bb80
mov byte [esp + 0x90], bl
cmp dword [esp + 0x2c], 8
jb 0x407889
mov eax, dword [esp + 0x18]
push eax
call fcn.00479461
add esp, 4
lea ecx, [esp + 0x4c]
push ecx
mov ebx, 0x4bdf40
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push edi
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 3
call fcn.0040bb80
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x4078d3
mov edx, dword [esp + 0x18]
push edx
call fcn.00479461
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x4078e1
lea eax, [esp + 0x34]
push edi
push edi
push edi
push eax
push str.taskbarunpin
push edi
mov edi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
call edi
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x407901
lea eax, [esp + 0x34]
push 0
push 0
push 0
push eax
push str.startunpin
push 0
call edi
push 0xffffffffffffffff
push 0
lea eax, [ebp + 0x1a8]
lea ecx, [esp + 0x54]
call fcn.0040bb80
lea eax, [esp + 0x4c]
push eax
mov ebx, str.TaskBarBt_
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
xor ebp, ebp
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 4
call fcn.0040bb80
mov bl, 1
mov esi, 8
mov byte [esp + 0x90], bl
cmp dword [esp + 0x2c], esi
jb 0x407971
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00479461
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x40797f
lea eax, [esp + 0x34]
push ebp
push ebp
push ebp
push eax
push str.taskbarunpin
push ebp
call edi
lea ecx, [esp + 0x14]
call fcn.004108d0
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x54]
mov byte [esp + 0x98], 5
call fcn.0040bb80
mov byte [esp + 0x90], bl
cmp dword [esp + 0x2c], esi
jb 0x4079c2
mov edx, dword [esp + 0x18]
push edx
call fcn.00479461
add esp, 4
lea eax, [esp + 0x4c]
push eax
mov ebx, 0x4bdfbc
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 6
call fcn.0040bb80
mov bl, 1
mov esi, 8
mov byte [esp + 0x90], bl
cmp dword [esp + 0x2c], esi
jb 0x407a0d
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00479461
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x407a1b
lea eax, [esp + 0x34]
push ebp
push ebp
push ebp
push eax
push str.taskbarunpin
push ebp
call edi
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x407a35
lea eax, [esp + 0x34]
push ebp
push ebp
push ebp
push eax
push str.startunpin
push ebp
call edi
lea ecx, [esp + 0x14]
call fcn.004108d0
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x54]
mov byte [esp + 0x98], 7
call fcn.0040bb80
mov byte [esp + 0x90], bl
cmp dword [esp + 0x2c], esi
jb 0x407a78
mov edx, dword [esp + 0x18]
push edx
call fcn.00479461
add esp, 4
lea eax, [esp + 0x4c]
push eax
mov ebx, 0x4bdfbc
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
mov ebx, 8
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], bl
call fcn.0040bb80
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], ebx
jb 0x407ac1
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00479461
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], ebx
jae 0x407acf
lea eax, [esp + 0x34]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push eax
call edi
lea edx, [esp + 0x4c]
push edx
mov ebx, 0x4bdfd0
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 9
call fcn.0040bb80
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x407b22
mov eax, dword [esp + 0x18]
push eax
call fcn.00479461
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x407b30
lea eax, [esp + 0x34]
push eax
call edi
lea ecx, [esp + 0x4c]
push ecx
mov ebx, 0x4bdfe4
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 0xa
call fcn.0040bb80
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x407b7d
mov edx, dword [esp + 0x18]
push edx
call fcn.00479461
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x407b8b
lea eax, [esp + 0x34]
push eax
call edi
lea eax, [esp + 0x4c]
push eax
mov ebx, 0x4bdff8
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 0xb
call fcn.0040bb80
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x407bd8
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00479461
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x407be6
lea eax, [esp + 0x34]
push eax
call edi
lea edx, [esp + 0x4c]
push edx
mov ebx, 0x4be014
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 0xc
call fcn.0040bb80
mov bl, 1
mov esi, 8
mov byte [esp + 0x90], bl
cmp dword [esp + 0x2c], esi
jb 0x407c34
mov eax, dword [esp + 0x18]
push eax
call fcn.00479461
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x407c42
lea eax, [esp + 0x34]
push eax
call edi
lea ecx, [esp + 0x14]
call fcn.00410990
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x54]
mov byte [esp + 0x98], 0xd
call fcn.0040bb80
mov byte [esp + 0x90], bl
cmp dword [esp + 0x2c], esi
jb 0x407c7c
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00479461
add esp, 4
lea edx, [esp + 0x4c]
push edx
mov ebx, 0x4bdf40
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 0xe
call fcn.0040bb80
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x407cc6
mov eax, dword [esp + 0x18]
push eax
call fcn.00479461
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x407cd4
lea eax, [esp + 0x34]
push eax
call edi
lea ecx, [esp + 0x4c]
push ecx
mov ebx, 0x4be030
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 0xf
call fcn.0040bb80
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x407d21
mov edx, dword [esp + 0x18]
push edx
call fcn.00479461
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x407d2f
lea eax, [esp + 0x34]
push eax
call edi
lea eax, [esp + 0x4c]
push eax
mov ebx, 0x4be050
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 0x10
call fcn.0040bb80
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x407d7c
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00479461
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x407d8a
lea eax, [esp + 0x34]
push eax
call edi
lea edx, [esp + 0x4c]
push edx
mov ebx, 0x4be074
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 0x11
call fcn.0040bb80
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x407dd7
mov eax, dword [esp + 0x18]
push eax
call fcn.00479461
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x407de5
lea eax, [esp + 0x34]
push eax
call edi
lea ecx, [esp + 0x4c]
push ecx
mov ebx, 0x4bc91c
lea esi, [esp + 0x6c]
call fcn.0040d170
mov eax, dword [esp + 0x70]
mov esi, 8
add esp, 4
cmp dword [esp + 0x80], esi
jae 0x407e14
lea eax, [esp + 0x6c]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
cmp dword [esp + 0x80], esi
jb 0x407e31
mov edx, dword [esp + 0x6c]
push edx
call fcn.00479461
add esp, 4
xor eax, eax
mov edi, 7
mov dword [esp + 0x80], edi
mov dword [esp + 0x7c], ebp
mov word [esp + 0x6c], ax
cmp dword [esp + 0x48], esi
jb 0x407e5b
mov ecx, dword [esp + 0x34]
push ecx
call fcn.00479461
add esp, 4
xor edx, edx
mov dword [esp + 0x48], edi
mov dword [esp + 0x44], ebp
mov word [esp + 0x34], dx
cmp dword [esp + 0x64], esi
jb 0x407e7d
mov eax, dword [esp + 0x50]
push eax
call fcn.00479461
add esp, 4
mov ecx, dword [esp + 0x88]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x70]
xor ecx, esp
call fcn.0047946c
add esp, 0x80
ret 4