Function at 0x406d30
Capabilities:
Create process on windows
Delete directory
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x474220
mov eax, dword fs:[0]
push eax
sub esp, 0x74
mov eax, dword [0x4c40a0]
xor eax, esp
mov dword [esp + 0x70], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4c40a0]
xor eax, esp
push eax
lea eax, [esp + 0x88]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x98]
mov eax, 7
xor edi, edi
xor ecx, ecx
mov dword [esp + 0x64], eax
mov dword [esp + 0x60], edi
mov word [esp + 0x50], cx
mov dword [esp + 0x90], edi
xor edx, edx
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], edi
mov word [esp + 0x34], dx
mov bl, 1
lea ecx, [esp + 0x14]
mov byte [esp + 0x90], bl
call fcn.0040dc20
push 0xffffffffffffffff
push edi
lea ecx, [esp + 0x54]
mov byte [esp + 0x98], 2
call fcn.0040a0f0
mov byte [esp + 0x90], bl
cmp dword [esp + 0x2c], 8
jb 0x406dd9
mov eax, dword [esp + 0x18]
push eax
call fcn.0046190e
add esp, 4
lea ecx, [esp + 0x4c]
push ecx
mov ebx, 0x49885c
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push edi
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 3
call fcn.0040a0f0
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x406e23
mov edx, dword [esp + 0x18]
push edx
call fcn.0046190e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x406e31
lea eax, [esp + 0x34]
push edi
push edi
push edi
push eax
push str.taskbarunpin
push edi
mov edi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
call edi
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x406e51
lea eax, [esp + 0x34]
push 0
push 0
push 0
push eax
push str.startunpin
push 0
call edi
push 0xffffffffffffffff
push 0
lea eax, [ebp + 0x170]
lea ecx, [esp + 0x54]
call fcn.0040a0f0
lea eax, [esp + 0x4c]
push eax
mov ebx, str.TaskBarBt_
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
xor ebp, ebp
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 4
call fcn.0040a0f0
mov bl, 1
mov esi, 8
mov byte [esp + 0x90], bl
cmp dword [esp + 0x2c], esi
jb 0x406ec1
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046190e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x406ecf
lea eax, [esp + 0x34]
push ebp
push ebp
push ebp
push eax
push str.taskbarunpin
push ebp
call edi
lea ecx, [esp + 0x14]
call fcn.0040daa0
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x54]
mov byte [esp + 0x98], 5
call fcn.0040a0f0
mov byte [esp + 0x90], bl
cmp dword [esp + 0x2c], esi
jb 0x406f12
mov edx, dword [esp + 0x18]
push edx
call fcn.0046190e
add esp, 4
lea eax, [esp + 0x4c]
push eax
mov ebx, 0x4988d8
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 6
call fcn.0040a0f0
mov bl, 1
mov esi, 8
mov byte [esp + 0x90], bl
cmp dword [esp + 0x2c], esi
jb 0x406f5d
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046190e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x406f6b
lea eax, [esp + 0x34]
push ebp
push ebp
push ebp
push eax
push str.taskbarunpin
push ebp
call edi
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x406f85
lea eax, [esp + 0x34]
push ebp
push ebp
push ebp
push eax
push str.startunpin
push ebp
call edi
lea ecx, [esp + 0x14]
call fcn.0040daa0
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x54]
mov byte [esp + 0x98], 7
call fcn.0040a0f0
mov byte [esp + 0x90], bl
cmp dword [esp + 0x2c], esi
jb 0x406fc8
mov edx, dword [esp + 0x18]
push edx
call fcn.0046190e
add esp, 4
lea eax, [esp + 0x4c]
push eax
mov ebx, 0x4988d8
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
mov ebx, 8
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], bl
call fcn.0040a0f0
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], ebx
jb 0x407011
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046190e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], ebx
jae 0x40701f
lea eax, [esp + 0x34]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push eax
call edi
lea edx, [esp + 0x4c]
push edx
mov ebx, 0x4988ec
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 9
call fcn.0040a0f0
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x407072
mov eax, dword [esp + 0x18]
push eax
call fcn.0046190e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x407080
lea eax, [esp + 0x34]
push eax
call edi
lea ecx, [esp + 0x4c]
push ecx
mov ebx, 0x498900
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 0xa
call fcn.0040a0f0
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x4070cd
mov edx, dword [esp + 0x18]
push edx
call fcn.0046190e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x4070db
lea eax, [esp + 0x34]
push eax
call edi
lea eax, [esp + 0x4c]
push eax
mov ebx, 0x498914
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 0xb
call fcn.0040a0f0
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x407128
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046190e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x407136
lea eax, [esp + 0x34]
push eax
call edi
lea edx, [esp + 0x4c]
push edx
mov ebx, 0x498930
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 0xc
call fcn.0040a0f0
mov bl, 1
mov esi, 8
mov byte [esp + 0x90], bl
cmp dword [esp + 0x2c], esi
jb 0x407184
mov eax, dword [esp + 0x18]
push eax
call fcn.0046190e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x407192
lea eax, [esp + 0x34]
push eax
call edi
lea ecx, [esp + 0x14]
call fcn.0040dc20
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x54]
mov byte [esp + 0x98], 0xd
call fcn.0040a0f0
mov byte [esp + 0x90], bl
cmp dword [esp + 0x2c], esi
jb 0x4071cc
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046190e
add esp, 4
lea edx, [esp + 0x4c]
push edx
mov ebx, 0x49885c
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 0xe
call fcn.0040a0f0
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x407216
mov eax, dword [esp + 0x18]
push eax
call fcn.0046190e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x407224
lea eax, [esp + 0x34]
push eax
call edi
lea ecx, [esp + 0x4c]
push ecx
mov ebx, 0x49894c
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 0xf
call fcn.0040a0f0
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x407271
mov edx, dword [esp + 0x18]
push edx
call fcn.0046190e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x40727f
lea eax, [esp + 0x34]
push eax
call edi
lea eax, [esp + 0x4c]
push eax
mov ebx, 0x49896c
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 0x10
call fcn.0040a0f0
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x4072cc
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046190e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x4072da
lea eax, [esp + 0x34]
push eax
call edi
lea edx, [esp + 0x4c]
push edx
mov ebx, 0x498990
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 0x11
call fcn.0040a0f0
mov esi, 8
mov byte [esp + 0x90], 1
cmp dword [esp + 0x2c], esi
jb 0x407327
mov eax, dword [esp + 0x18]
push eax
call fcn.0046190e
add esp, 4
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x407335
lea eax, [esp + 0x34]
push eax
call edi
lea ecx, [esp + 0x4c]
push ecx
mov ebx, 0x497c60
lea esi, [esp + 0x6c]
call fcn.0040ad70
mov eax, dword [esp + 0x70]
mov esi, 8
add esp, 4
cmp dword [esp + 0x80], esi
jae 0x407364
lea eax, [esp + 0x6c]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
cmp dword [esp + 0x80], esi
jb 0x407381
mov edx, dword [esp + 0x6c]
push edx
call fcn.0046190e
add esp, 4
xor eax, eax
mov edi, 7
mov dword [esp + 0x80], edi
mov dword [esp + 0x7c], ebp
mov word [esp + 0x6c], ax
cmp dword [esp + 0x48], esi
jb 0x4073ab
mov ecx, dword [esp + 0x34]
push ecx
call fcn.0046190e
add esp, 4
xor edx, edx
mov dword [esp + 0x48], edi
mov dword [esp + 0x44], ebp
mov word [esp + 0x34], dx
cmp dword [esp + 0x64], esi
jb 0x4073cd
mov eax, dword [esp + 0x50]
push eax
call fcn.0046190e
add esp, 4
mov ecx, dword [esp + 0x88]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x70]
xor ecx, esp
call fcn.00461919
add esp, 0x80
ret 4