Function at 0x4057f6
Capabilities:
Create process on windows
Delete file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x105b4
call fcn.0041dff0
push ebx
xor ebx, ebx
cmp dword [ebp + 0x10], ebx
push esi
push edi
mov dword [esp + 0x14], ecx
mov dword [ecx + 0x94b4], ebx
mov dword [esp + 0x10], ebx
jne 0x405cca
mov edi, dword [ebp + 8]
cmp dword [edi + 0xef0], ebx
je 0x405cca
lea esi, [edi + 0x31b]
push 0x41f9d4
mov eax, esi
call fcn.00409bae
test eax, eax
pop ecx
jge 0x405cca
lea eax, [esp + 0xc]
push eax
mov eax, dword [esp + 0x18]
push edi
lea edi, [esp + 0x20]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x14], ebx
call fcn.00405795
test eax, eax
je 0x405cca
push str._webm
mov eax, esi
call fcn.00409bae
test eax, eax
pop ecx
jle 0x405888
mov dword [esp + 0x10], 1
mov edi, 0x104
push edi
lea eax, [esp + 0x3a5]
push ebx
push eax
mov byte [esp + 0x3ac], bl
call sub.msvcrt.dll_memset
add esp, 0xc
push edi
lea eax, [esp + 0x4ad]
push ebx
push eax
mov byte [esp + 0x4b4], bl
call sub.msvcrt.dll_memset
add esp, 0xc
push edi
lea eax, [esp + 0x45]
push ebx
push eax
mov byte [esp + 0x4c], bl
call sub.msvcrt.dll_memset
add esp, 0xc
push dword [ebp + 0xc]
lea esi, [esp + 0x44]
call fcn.00409fce
cmp dword [esp + 0x14], ebx
pop ecx
push edi
je 0x405a06
lea eax, [esp + 0x195]
push ebx
push eax
mov byte [esp + 0x19c], bl
call sub.msvcrt.dll_memset
add esp, 0xc
push edi
lea eax, [esp + 0x5b5]
push ebx
push eax
mov byte [esp + 0x5bc], bl
call sub.msvcrt.dll_memset
add esp, 0xc
push edi
lea eax, [esp + 0x6bd]
push ebx
push eax
mov byte [esp + 0x6c4], bl
call sub.msvcrt.dll_memset
mov ecx, dword [ebp + 0xc]
add esp, 0xc
call fcn.00409fb5
mov ebx, edi
push eax
lea edi, [esp + 0x194]
call fcn.00409d78
pop ecx
mov eax, edi
push eax
call fcn.00409ff1
test eax, eax
pop ecx
je 0x40595c
mov byte [eax], 0
lea eax, [esp + 0x190]
push eax
push str._s_1.webm
mov esi, ebx
lea eax, [esp + 0x5b8]
push esi
push eax
call sub.msvcrt.dll__snprintf
lea eax, [esp + 0x1a0]
push eax
push str._s_2.webm
lea eax, [esp + 0x6d0]
push esi
push eax
call sub.msvcrt.dll__snprintf
push esi
lea eax, [esp + 0x5d4]
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0x3cc]
call fcn.0040a12c
add esp, 0x2c
push esi
lea eax, [esp + 0x6bc]
push eax
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x4b4]
call fcn.0040a12c
mov ecx, dword [esp + 0x20]
add esp, 0xc
push dword [esp + 0x18]
lea eax, [esp + 0x3a4]
push eax
push dword [ebp + 8]
call fcn.004057f6
push dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x4ac]
push eax
push dword [ebp + 8]
call fcn.004057f6
xor eax, eax
inc eax
jmp 0x405efa
lea eax, [esp + 0x44]
push str.mpegdashtmp1.mp4
push eax
lea eax, [esp + 0x3ac]
call fcn.0040a12c
add esp, 0xc
push edi
lea eax, [esp + 0x44]
push str.mpegdashtmp2.mp4
push eax
lea eax, [esp + 0x4b4]
call fcn.0040a12c
mov ecx, dword [esp + 0x20]
add esp, 0xc
push dword [esp + 0x18]
lea eax, [esp + 0x3a4]
push eax
push dword [ebp + 8]
call fcn.004057f6
push dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x4ac]
push eax
push dword [ebp + 8]
call fcn.004057f6
push edi
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x29d]
push ebx
push eax
mov dword [esp + 0x28], ebx
mov byte [esp + 0x2a4], bl
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x29c]
push eax
push edi
push ebx
push str.mp4box.exe
push ebx
call dword [sym.imp.KERNEL32.DLL_SearchPathA]
cmp byte [esp + 0x298], bl
jne 0x405b92
push 0xf9ff
lea eax, [esp + 0xbc5]
push ebx
push eax
mov byte [esp + 0xbcc], bl
call sub.msvcrt.dll_memset
add esp, 0xc
push edi
lea eax, [esp + 0x195]
push ebx
push eax
mov byte [esp + 0x19c], bl
call sub.msvcrt.dll_memset
add esp, 0xc
push 0xfa00
push str.Path
push str.Environment
push 0x80000001
lea esi, [esp + 0xbd0]
mov dword [esp + 0x20], ebx
call fcn.004174a7
push ebx
mov esi, 0x41fbc8
push esi
lea eax, [esp + 0xbd8]
push eax
lea eax, [esp + 0x1ac]
push edi
push eax
lea ebx, [esp + 0x34]
call fcn.0040ab6f
add esp, 0x24
jmp 0x405b7f
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x29c]
push eax
push edi
push 0
push str.mp4box.exe
lea eax, [esp + 0x1a4]
push eax
call dword [sym.imp.KERNEL32.DLL_SearchPathA]
cmp byte [esp + 0x298], 0
jne 0x405b90
push 0
push esi
lea eax, [esp + 0xbc8]
push eax
lea eax, [esp + 0x19c]
push edi
push eax
lea ebx, [esp + 0x24]
call fcn.0040ab6f
add esp, 0x14
test eax, eax
jne 0x405b32
cmp byte [esp + 0x298], al
je 0x405cb3
xor ebx, ebx
mov esi, 0x3ff
push esi
lea eax, [esp + 0x7c5]
push ebx
push eax
mov byte [esp + 0x7cc], bl
call sub.msvcrt.dll_memset
add esp, 0xc
push 0x40
lea eax, [esp + 0x150]
push ebx
push eax
call sub.msvcrt.dll_memset
xor eax, eax
mov dword [esp + 0x3c], ebx
lea edi, [esp + 0x40]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
push dword [ebp + 0xc]
stosd dword es:[edi], eax
lea eax, [esp + 0x4ac]
push eax
lea eax, [esp + 0x3a8]
push eax
lea eax, [esp + 0x2a4]
push eax
push str.__s___add___s___add___s____s_
lea eax, [esp + 0x7d4]
push esi
push eax
mov dword [esp + 0x164], 0x44
call sub.msvcrt.dll__snprintf
mov esi, dword [sym.imp.KERNEL32.DLL_DeleteFileA]
add esp, 0x1c
push dword [ebp + 0xc]
call esi
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x14c]
push eax
push ebx
push ebx
push 0x8000000
push ebx
push ebx
push ebx
lea eax, [esp + 0x7e0]
push eax
lea eax, [esp + 0x2bc]
push eax
call dword [sym.imp.KERNEL32.DLL_CreateProcessA]
test eax, eax
je 0x405cc1
push 0x3a98
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
mov edi, eax
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x34]
mov dword [esp + 0x18], ebx
call dword [sym.imp.KERNEL32.DLL_GetExitCodeProcess]
test eax, eax
je 0x405c7e
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x94b4], eax
push dword [esp + 0x30]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
cmp edi, 0x102
je 0x405cc1
push dword [ebp + 0xc]
call fcn.00409f03
test eax, eax
pop ecx
je 0x405cc1
lea eax, [esp + 0x3a0]
push eax
call esi
lea eax, [esp + 0x4a8]
push eax
call esi
jmp 0x405cc1
mov eax, dword [esp + 0x14]
mov dword [eax + 0x93a8], 1
mov eax, dword [esp + 0x18]
jmp 0x405efa
mov edi, 0x4000
lea esi, [esp + 0x30]
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], 0x1388
call fcn.0040b6a8
mov esi, dword [ebp + 8]
mov eax, dword [esi + 0xee4]
mov edi, dword [esp + 0x14]
push dword [ebp + 0xc]
mov byte [esp + 0x24], 0x46
mov byte [esp + 0x25], 0x4c
mov byte [esp + 0x26], 0x56
mov byte [esp + 0x27], 1
mov byte [esp + 0x28], 5
mov byte [esp + 0x29], bl
mov byte [esp + 0x2a], bl
mov byte [esp + 0x2b], bl
mov byte [esp + 0x2c], 9
mov byte [esp + 0x2d], bl
mov byte [esp + 0x2e], bl
mov byte [esp + 0x2f], bl
mov byte [esp + 0x30], bl
mov dword [esp + 0x20], ebx
mov dword [edi + 0x93a0], eax
call fcn.00409a9d
cmp eax, 0xffffffff
pop ecx
mov dword [esp + 0x18], eax
je 0x405eed
push 0x41f9d4
lea eax, [esi + 0x31b]
call fcn.00409bae
test eax, eax
pop ecx
jl 0x405d77
push 0xd
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x20]
call fcn.0040a8ae
add esp, 0xc
xor eax, eax
inc eax
mov dword [esp + 0x10], eax
push eax
jmp 0x405ec4
mov eax, dword [ebp + 0x10]
cmp eax, ebx
je 0x405d97
cmp dword [esi + 0xef0], eax
jne 0x405ebc
cmp dword [esi + 0xeec], 0x20
jne 0x405dc9
cmp dword [esi + 0xe70], 2
jne 0x405dc9
push dword [esp + 0x18]
mov eax, 0x41f4f3
push eax
push eax
add esi, 0xc
push esi
lea eax, [edi + 0x244]
push eax
call fcn.00413652
jmp 0x405ebc
push 0x104
lea eax, [esp + 0x45]
push ebx
push eax
mov byte [esp + 0x4c], bl
call sub.msvcrt.dll_memset
add esp, 0xc
cmp dword [esi + 0xe70], 4
lea ecx, [esi + 0xc]
mov dword [esp + 0xc], ecx
jne 0x405e49
call fcn.00401b31
test eax, eax
je 0x405e49
push 0x41fbec
lea edi, [esp + 0x44]
call fcn.00409df3
pop ecx
mov ecx, dword [esp + 0xc]
call fcn.00409fb5
push eax
lea eax, [esi + 0xea4]
push eax
mov eax, edi
push eax
push dword [esi + 0xe90]
mov eax, dword [esp + 0x24]
push ebx
add esi, 0xd60
push esi
add eax, 0x8fe0
push eax
call fcn.00401d3d
test eax, eax
mov edi, dword [esp + 0x14]
je 0x405e49
lea eax, [esp + 0x40]
mov dword [esp + 0xc], eax
push dword [esp + 0xc]
call fcn.00409a84
cmp eax, 0xffffffff
pop ecx
mov dword [esp + 0x1c], eax
je 0x405eab
push dword [esp + 0x34]
push dword [esp + 0x34]
push eax
jmp 0x405e8d
cmp dword [esp + 0xc], ebx
je 0x405ea1
push dword [esp + 0xc]
push dword [esp + 0x34]
push dword [esp + 0x20]
call fcn.0040a8ae
add esp, 0xc
push dword [esp + 0x34]
push dword [esp + 0x34]
push dword [esp + 0x24]
lea esi, [esp + 0x18]
mov dword [esp + 0x18], ebx
call fcn.0040a886
add esp, 0xc
test eax, eax
jne 0x405e67
push dword [esp + 0x1c]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
cmp byte [esp + 0x40], bl
je 0x405ebc
lea eax, [esp + 0x40]
push eax
call dword [sym.imp.KERNEL32.DLL_DeleteFileA]
inc dword [esp + 0x10]
push dword [esp + 0x10]
push dword [edi + 0x93a0]
mov eax, edi
call fcn.0040575f
mov esi, eax
cmp esi, ebx
jne 0x405d84
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov dword [esp + 0x1c], 1
lea ecx, [esp + 0x30]
call fcn.0040b68f
mov eax, dword [esp + 0x1c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc