Function at 0x55ec7c
Capabilities:
Create process on windows
Schedule task via at

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff8b4
mov eax, dword [ebp + 8]
test eax, eax
jne 0x55ec93
xor eax, eax
jmp 0x55f6bf
push dword [ebp + 8]
lea edx, [ebp - 0x140]
push edx
call fcn.0066ce08
add esp, 8
push 0x2e
lea ecx, [ebp - 0x140]
push ecx
call fcn.0066cf51
add esp, 8
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x55ecc7
xor eax, eax
jmp 0x55f6bf
inc dword [ebp - 0x14]
push 0x81a7d6
push dword [ebp - 0x14]
call fcn.0066ce08
add esp, 8
push 0x5c
push dword [ebp + 8]
call fcn.0066cf51
add esp, 8
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x14]
test edx, edx
jne 0x55ecf8
xor eax, eax
jmp 0x55f6bf
push 0
push dword [ebp + 8]
call fcn.0066ebe8
add esp, 8
test eax, eax
je 0x55ed10
xor eax, eax
jmp 0x55f6bf
push 0x81a7da
push dword [ebp + 8]
call fcn.0066f334
add esp, 8
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 0x10]
test edx, edx
jne 0x55ed31
xor eax, eax
jmp 0x55f6bf
mov edx, dword [ebp - 0x10]
movsx ecx, byte [edx + 0x16]
push ecx
call fcn.0066f0ac
pop ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cmp eax, 0x20
jge 0x55ed5a
push dword [ebp - 0x10]
call fcn.0066ee38
pop ecx
xor eax, eax
jmp 0x55f6bf
push 1
push dword [ebp - 0x18]
call fcn.0055d3ec
add esp, 8
test eax, eax
jne 0x55ed7b
push dword [ebp - 0x10]
call fcn.0066ee38
pop ecx
xor eax, eax
jmp 0x55f6bf
push dword [ebp - 0x10]
push dword [ebp - 0x18]
push 1
push dword [0x81a76c]
call fcn.0066f614
add esp, 0x10
push dword [ebp - 0x10]
call fcn.0066ee38
pop ecx
mov dword [ebp - 0x20], 1
lea edx, [ebp - 0x340]
push edx
lea ecx, [ebp - 0x240]
push ecx
call fcn.0055d47c
add esp, 8
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
dec eax
jne 0x55edd8
push 0x81a7dd
lea edx, [ebp - 0x240]
push edx
call fcn.0066d004
add esp, 8
test eax, eax
je 0x55ede4
call fcn.0055d44f
xor eax, eax
jmp 0x55f6bf
lea edx, [ebp - 0x340]
push edx
lea ecx, [ebp - 0x240]
push ecx
call fcn.0055d47c
add esp, 8
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
dec eax
jne 0x55ee1f
push 0x81a7e1
lea edx, [ebp - 0x240]
push edx
call fcn.0066d004
add esp, 8
test eax, eax
je 0x55ee9f
mov ecx, dword [ebp - 0xc]
cmp ecx, 2
je 0x55ee33
call fcn.0055d44f
xor eax, eax
jmp 0x55f6bf
push 0x81a7e6
lea edx, [ebp - 0x240]
push edx
call fcn.0066d004
add esp, 8
test eax, eax
jne 0x55ede4
push 0x81a7ec
lea ecx, [ebp - 0x340]
push ecx
call fcn.0066d004
add esp, 8
test eax, eax
jne 0x55ee6f
mov dword [ebp - 0x20], 1
jmp 0x55ede4
push 0x81a7ef
lea eax, [ebp - 0x340]
push eax
call fcn.0066d004
add esp, 8
test eax, eax
jne 0x55ee93
mov dword [ebp - 0x20], 2
jmp 0x55ede4
call fcn.0055d44f
xor eax, eax
jmp 0x55f6bf
lea edx, [ebp - 0x340]
push edx
lea ecx, [ebp - 0x240]
push ecx
call fcn.0055d47c
add esp, 8
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
dec eax
jne 0x55eed6
push 0x81a7f3
lea edx, [ebp - 0x240]
push edx
call fcn.0066d004
add esp, 8
test eax, eax
je 0x55eee2
call fcn.0055d44f
xor eax, eax
jmp 0x55f6bf
lea edx, [ebp - 0x340]
push edx
lea ecx, [ebp - 0x240]
push ecx
call fcn.0055d47c
add esp, 8
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
dec eax
jne 0x55ef19
push 0x81a7f7
lea edx, [ebp - 0x240]
push edx
call fcn.0066d004
add esp, 8
test eax, eax
je 0x55ef2d
mov ecx, dword [ebp - 0xc]
cmp ecx, 2
je 0x55eee2
call fcn.0055d44f
xor eax, eax
jmp 0x55f6bf
lea edx, [ebp - 0x340]
push edx
lea ecx, [ebp - 0x240]
push ecx
call fcn.0055d47c
add esp, 8
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
dec eax
jne 0x55ef64
push 0x81a7fc
lea edx, [ebp - 0x240]
push edx
call fcn.0066d004
add esp, 8
test eax, eax
je 0x55ef70
call fcn.0055d44f
xor eax, eax
jmp 0x55f6bf
xor edx, edx
mov dword [0x81a778], edx
push 0x831dcf
push 0x81a800
lea ecx, [ebp - 0x74c]
push ecx
call fcn.006712b0
add esp, 0xc
push 0x81a80f
lea eax, [ebp - 0x74c]
push eax
call fcn.0066f334
add esp, 8
mov dword [0x81a77c], eax
mov edx, dword [0x81a77c]
test edx, edx
je 0x55f020
push dword [ebp + 8]
push 0x81a813
push dword [0x81a77c]
call fcn.0066f368
add esp, 0xc
mov ecx, dword [ebp - 0x20]
cmp ecx, 2
jne 0x55efe7
push 0x81a821
push dword [0x81a77c]
call fcn.0066f368
add esp, 8
jmp 0x55effa
push 0x81a832
push dword [0x81a77c]
call fcn.0066f368
add esp, 8
push 0x81a842
push dword [0x81a77c]
call fcn.0066f368
add esp, 8
push 0x81a86c
push dword [0x81a77c]
call fcn.0066f368
add esp, 8
mov eax, dword [0x81a774]
mov dword [ebp - 0x30], eax
xor edx, edx
mov dword [ebp - 4], edx
xor ecx, ecx
mov dword [ebp - 8], ecx
mov dword [ebp - 0x2c], 1
lea eax, [ebp - 0x544]
push eax
lea edx, [ebp - 0x440]
push edx
lea ecx, [ebp - 0x340]
push ecx
call fcn.0055dabe
add esp, 0xc
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
dec eax
jne 0x55f07b
push 0x81a88d
lea edx, [ebp - 0x340]
push edx
call fcn.0066d004
add esp, 8
test eax, eax
je 0x55f18f
mov ecx, dword [ebp - 0xc]
cmp ecx, 5
je 0x55f039
mov eax, dword [ebp - 0xc]
cmp eax, 4
jne 0x55f09f
lea edx, [ebp - 0x340]
push edx
call fcn.00674df8
pop ecx
mov dword [0xcff6fc], eax
jmp 0x55f039
mov ecx, dword [ebp - 0xc]
cmp ecx, 3
je 0x55f0db
mov eax, dword [0x81a77c]
test eax, eax
je 0x55f0d1
lea edx, [ebp - 0x440]
push edx
lea ecx, [ebp - 0x340]
push ecx
push 0x81a892
push dword [0x81a77c]
call fcn.0066f368
add esp, 0x10
xor eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x55f18f
movsx edx, byte [ebp - 0x543]
cmp edx, 0x3a
je 0x55f138
push dword [ebp + 8]
lea ecx, [ebp - 0x648]
push ecx
call fcn.0066ce08
add esp, 8
push 0x5c
lea eax, [ebp - 0x648]
push eax
call fcn.0066cf51
add esp, 8
mov dword [ebp - 0x14], eax
inc dword [ebp - 0x14]
lea edx, [ebp - 0x544]
push edx
push dword [ebp - 0x14]
call fcn.0066ce08
add esp, 8
lea ecx, [ebp - 0x648]
push ecx
lea eax, [ebp - 0x544]
push eax
call fcn.0066ce08
add esp, 8
push 0
lea edx, [ebp - 0x544]
push edx
call fcn.0066ebe8
add esp, 8
test eax, eax
je 0x55f177
mov ecx, dword [0x81a77c]
test ecx, ecx
je 0x55f171
lea eax, [ebp - 0x544]
push eax
push 0x81a8aa
push dword [0x81a77c]
call fcn.0066f368
add esp, 0xc
inc dword [0x81a778]
lea edx, [ebp - 0x440]
push edx
call fcn.00674df8
pop ecx
mov dword [ebp - 8], eax
inc dword [ebp - 4]
jmp 0x55f039
mov ecx, dword [0x81a77c]
test ecx, ecx
je 0x55f1ac
push 0x81a8ae
push dword [0x81a77c]
call fcn.0066f368
add esp, 8
mov eax, dword [0xcff6fc]
inc eax
mov edx, dword [ebp - 8]
cmp eax, edx
jbe 0x55f1c3
mov ecx, dword [0xcff6fc]
inc ecx
mov dword [ebp - 8], ecx
mov eax, dword [0x81a778]
test eax, eax
jne 0x55f1d3
mov edx, dword [ebp - 8]
test edx, edx
jne 0x55f209
mov ecx, dword [0x81a77c]
test ecx, ecx
je 0x55f1ff
mov eax, dword [0x81a778]
test eax, eax
je 0x55f1ff
push dword [0x81a778]
push 0x81a8cf
push dword [0x81a77c]
call fcn.0066f368
add esp, 0xc
xor edx, edx
mov dword [ebp - 0x2c], edx
jmp 0x55f5f6
mov dword [0x833f58], 0
mov dword [0x833f5c], 0
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [0x833f50], eax
mov dword [0x833f54], edx
mov ecx, dword [ebp - 0x20]
dec ecx
jne 0x55f245
add dword [0x833f50], 0x96
adc dword [0x833f54], 0
xor eax, eax
mov dword [0x81a780], eax
mov edx, dword [ebp - 0x20]
dec edx
jne 0x55f296
mov ecx, dword [0x6ebcf0]
test ecx, ecx
je 0x55f296
mov eax, dword [0x6ebcf4]
test eax, eax
jne 0x55f28c
push 0x2e
lea edx, [ebp - 0x140]
push edx
call fcn.0066cf51
add esp, 8
mov dword [ebp - 0x14], eax
inc dword [ebp - 0x14]
push 0x81a8e4
push dword [ebp - 0x14]
call fcn.0066ce08
add esp, 8
mov dword [0x81a780], 1
mov ecx, dword [ebp - 0x30]
mov dword [0x81a774], ecx
push 0
push 0
push 2
push 0
push 1
push 0x40000000
lea eax, [ebp - 0x140]
push eax
call sub.KERNEL32.DLL_CreateFileA
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x28]
cmp edx, 0xffffffff
jne 0x55f2f3
mov ecx, dword [0x81a77c]
test ecx, ecx
je 0x55f2e9
lea eax, [ebp - 0x140]
push eax
push str.Error_creating_file:___s_._n
push dword [0x81a77c]
call fcn.0066f368
add esp, 0xc
xor edx, edx
mov dword [ebp - 0x2c], edx
jmp 0x55f5f6
call fcn.00404b70
call fcn.00441290
lea ecx, [ebp - 0x140]
push ecx
call fcn.004413f0
pop ecx
mov dword [ebp - 0x2c], 1
xor eax, eax
mov dword [0x6f88f8], eax
xor edx, edx
mov dword [ebp - 4], edx
lea ecx, [ebp - 0x544]
push ecx
lea eax, [ebp - 0x440]
push eax
lea edx, [ebp - 0x340]
push edx
call fcn.0055dabe
add esp, 0xc
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
dec ecx
jne 0x55f35f
push 0x81a904
lea eax, [ebp - 0x340]
push eax
call fcn.0066d004
add esp, 8
test eax, eax
je 0x55f4ee
mov edx, dword [ebp - 0xc]
cmp edx, 5
je 0x55f31d
movsx ecx, byte [ebp - 0x543]
cmp ecx, 0x3a
je 0x55f3c4
push dword [ebp + 8]
lea eax, [ebp - 0x648]
push eax
call fcn.0066ce08
add esp, 8
push 0x5c
lea edx, [ebp - 0x648]
push edx
call fcn.0066cf51
add esp, 8
mov dword [ebp - 0x14], eax
inc dword [ebp - 0x14]
lea ecx, [ebp - 0x544]
push ecx
push dword [ebp - 0x14]
call fcn.0066ce08
add esp, 8
lea eax, [ebp - 0x648]
push eax
lea edx, [ebp - 0x544]
push edx
call fcn.0066ce08
add esp, 8
push 0
push 0
push 3
push 0
push 1
push SysReAllocStringLen
lea ecx, [ebp - 0x544]
push ecx
call sub.KERNEL32.DLL_CreateFileA
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp eax, 0xffffffff
jne 0x55f418
mov edx, dword [0x81a77c]
test edx, edx
je 0x55f40e
lea ecx, [ebp - 0x544]
push ecx
push str.Error_opening_file:__s._n
push dword [0x81a77c]
call fcn.0066f368
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x55f4ee
push dword [ebp - 0x24]
call fcn.0045dc70
pop ecx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], edx
lea edx, [ebp - 0x340]
push edx
call fcn.00674df8
pop ecx
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
cmp ecx, 4
jne 0x55f46b
mov eax, dword [ebp - 0x20]
cmp eax, 2
jne 0x55f485
lea edx, [ebp - 0x440]
push edx
call fcn.00674df8
pop ecx
push eax
push dword [ebp - 8]
push dword [ebp - 0x28]
push dword [ebp - 0x24]
call fcn.0055e510
add esp, 0x10
mov dword [ebp - 0x2c], eax
jmp 0x55f485
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 8]
push dword [ebp - 0x28]
push dword [ebp - 0x24]
call fcn.0055e240
add esp, 0x14
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
jg 0x55f4e1
mov edx, dword [0x81a77c]
test edx, edx
je 0x55f4da
mov ecx, dword [ebp - 0x2c]
inc ecx
jne 0x55f4b8
lea eax, [ebp - 0x544]
push eax
push str.Error_reading_file:__s._n
push dword [0x81a77c]
call fcn.0066f368
add esp, 0xc
jmp 0x55f4da
mov edx, dword [ebp - 0x2c]
cmp edx, 0xfffffffe
jne 0x55f4da
lea ecx, [ebp - 0x140]
push ecx
push str.Error_writing_file:__s._n
push dword [0x81a77c]
call fcn.0066f368
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x55f4ee
push dword [ebp - 0x24]
call sub.KERNEL32.DLL_CloseHandle
jmp 0x55f31d
xor edx, edx
mov dword [0x6f88f8], edx
call fcn.00441378
call fcn.00404b84
mov ecx, dword [ebp - 0x20]
dec ecx
jne 0x55f516
push 0x96
push dword [ebp - 0x28]
call fcn.0055e7c0
add esp, 8
push dword [ebp - 0x28]
call sub.KERNEL32.DLL_CloseHandle
mov eax, dword [0x81a780]
test eax, eax
je 0x55f5f6
mov edx, dword [0x6ebcf4]
test edx, edx
jne 0x55f5f6
lea ecx, [ebp - 0x140]
push ecx
lea eax, [ebp - 0x648]
push eax
call fcn.0066ce08
add esp, 8
push 0x5c
lea edx, [ebp - 0x648]
push edx
call fcn.0066cf51
add esp, 8
mov dword [ebp - 0x14], eax
inc dword [ebp - 0x14]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x544]
push ecx
call fcn.0066ce08
add esp, 8
push 0x2e
lea eax, [ebp - 0x648]
push eax
call fcn.0066cf51
add esp, 8
mov dword [ebp - 0x14], eax
inc dword [ebp - 0x14]
push 0x81a954
push dword [ebp - 0x14]
call fcn.0066ce08
add esp, 8
push 0x81a958
lea edx, [ebp - 0x648]
push edx
call fcn.0066f334
add esp, 8
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x544]
push ecx
push str.FILE___s__BINARY_n
push dword [ebp - 0x10]
call fcn.0066f368
add esp, 0xc
push str.__TRACK_01_MODE2_2352_n
push dword [ebp - 0x10]
call fcn.0066f368
add esp, 8
push str.____INDEX_01_00:00:00_n
push dword [ebp - 0x10]
call fcn.0066f368
add esp, 8
push dword [ebp - 0x10]
call fcn.0066ee38
pop ecx
call fcn.0055d44f
mov eax, dword [0x81a77c]
test eax, eax
je 0x55f610
push dword [0x81a77c]
call fcn.0066ee38
pop ecx
mov edx, dword [0x81a778]
test edx, edx
jne 0x55f625
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
jne 0x55f6a8
mov eax, dword [0x81a77c]
test eax, eax
je 0x55f67c
push 0x61ac
call fcn.00402b9c
pop ecx
push eax
push 0xa00988
call fcn.006712b0
add esp, 8
push 0xa00988
push 0
call fcn.00462af8
add esp, 8
test eax, eax
je 0x55f6a8
push 5
push 0x831dcf
push 0
lea edx, [ebp - 0x74c]
push edx
push 0x81a99b
push dword [0x6eba34]
call sub.SHELL32.DLL_ShellExecuteA
jmp 0x55f6a8
push 0x61ab
call fcn.00402b9c
pop ecx
push eax
push 0xa00988
call fcn.006712b0
add esp, 8
push 0xa00988
push dword [0x6eba34]
call fcn.00462ac8
add esp, 8
xor ecx, ecx
mov dword [0x81a77c], ecx
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x55f6bc
mov eax, dword [ebp - 0x20]
jmp 0x55f6bf
mov eax, dword [ebp - 0x2c]
mov esp, ebp
pop ebp
ret