Function at 0x6117a8
Capabilities:
Create process on windows
Self delete

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x6c
push 0
push 0
dec ecx
jne 0x6117b0
push ecx
push ebx
push esi
mov ebx, eax
lea esi, [ebp - 0x2e0]
xor eax, eax
push ebp
push 0x611b1f
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x324]
xor eax, eax
call fcn.00407080
mov eax, dword [ebp - 0x324]
lea edx, [ebp - 0x320]
call fcn.0041f59c
mov edx, dword [ebp - 0x320]
lea eax, [ebp - 4]
mov ecx, 0x611b38
call fcn.0040acd0
xor ecx, ecx
mov edx, dword [ebp - 4]
mov eax, esi
call fcn.00407564
call fcn.00406e14
mov eax, esi
call fcn.00407224
call fcn.00406e14
mov edx, 0x611b64
mov eax, esi
call fcn.00407c20
call fcn.00407d20
call fcn.00406e14
mov edx, 0x611b84
mov eax, esi
call fcn.00407c20
call fcn.00407d20
call fcn.00406e14
push 0x611b9c
lea edx, [ebp - 0x32c]
xor eax, eax
call fcn.00407080
push dword [ebp - 0x32c]
push 0x611bb4
lea eax, [ebp - 0x328]
mov edx, 3
call fcn.0040ad58
mov edx, dword [ebp - 0x328]
mov eax, esi
call fcn.00407c20
call fcn.00407d20
call fcn.00406e14
push 0x611bc4
lea edx, [ebp - 0x334]
xor eax, eax
call fcn.00407080
push dword [ebp - 0x334]
push 0x611bb4
push 0x611be8
lea eax, [ebp - 0x330]
mov edx, 4
call fcn.0040ad58
mov edx, dword [ebp - 0x330]
mov eax, esi
call fcn.00407c20
call fcn.00407d20
call fcn.00406e14
mov edx, 0x611c0c
mov eax, esi
call fcn.00407c20
call fcn.00407d20
call fcn.00406e14
push 0x611c28
push dword [ebx + 0x414]
lea edx, [ebp - 0x340]
mov eax, dword [0x625fb4]
mov eax, dword [eax]
call fcn.00568650
mov eax, dword [ebp - 0x340]
lea edx, [ebp - 0x33c]
call fcn.0041f5dc
push dword [ebp - 0x33c]
push 0x611c44
push dword [ebx + 0x410]
lea edx, [ebp - 0x348]
mov eax, dword [0x625fb4]
mov eax, dword [eax]
call fcn.00568650
mov eax, dword [ebp - 0x348]
lea edx, [ebp - 0x344]
call fcn.0041f5dc
push dword [ebp - 0x344]
push 0x611bb4
lea eax, [ebp - 0x338]
mov edx, 7
call fcn.0040ad58
mov edx, dword [ebp - 0x338]
mov eax, esi
call fcn.00407c20
call fcn.00407d20
call fcn.00406e14
push 0x611c58
push dword [ebx + 0x410]
lea edx, [ebp - 0x354]
mov eax, dword [0x625fb4]
mov eax, dword [eax]
call fcn.00568650
mov eax, dword [ebp - 0x354]
lea edx, [ebp - 0x350]
call fcn.0041f5dc
push dword [ebp - 0x350]
push 0x611bb4
push 0x611c84
lea eax, [ebp - 0x34c]
mov edx, 5
call fcn.0040ad58
mov edx, dword [ebp - 0x34c]
mov eax, esi
call fcn.00407c20
call fcn.00407d20
call fcn.00406e14
push 0x611b9c
push dword [ebx + 0x414]
lea edx, [ebp - 0x360]
mov eax, dword [0x625fb4]
mov eax, dword [eax]
call fcn.00568650
mov eax, dword [ebp - 0x360]
lea edx, [ebp - 0x35c]
call fcn.0041f5dc
push dword [ebp - 0x35c]
push 0x611bb4
lea eax, [ebp - 0x358]
mov edx, 4
call fcn.0040ad58
mov edx, dword [ebp - 0x358]
mov eax, esi
call fcn.00407c20
call fcn.00407d20
call fcn.00406e14
push 0x611b9c
push dword [ebp - 4]
push 0x611bb4
lea eax, [ebp - 0x364]
mov edx, 3
call fcn.0040ad58
mov edx, dword [ebp - 0x364]
mov eax, esi
call fcn.00407c20
call fcn.00407d20
call fcn.00406e14
mov eax, esi
call fcn.0040766c
call fcn.00406e14
lea eax, [ebp - 0x31c]
xor ecx, ecx
mov edx, 0x3c
call fcn.004076c4
mov dword [ebp - 0x31c], 0x3c
mov dword [ebp - 0x318], 0x40
xor eax, eax
mov dword [ebp - 0x314], eax
xor eax, eax
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 4]
call fcn.0040aa64
mov dword [ebp - 0x30c], eax
mov eax, 0x611c9c
mov dword [ebp - 0x308], eax
xor eax, eax
mov dword [ebp - 0x304], eax
xor eax, eax
mov dword [ebp - 0x300], eax
xor eax, eax
mov dword [ebp - 0x2fc], eax
lea eax, [ebp - 0x31c]
push eax
call sub.shell32.dll_ShellExecuteExW
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x611b26
lea eax, [ebp - 0x364]
mov edx, 0x12
call fcn.00409de8
lea eax, [ebp - 4]
call fcn.00409d88
ret