Function at 0x4a7c64
Capabilities:
Create process on windows
Delete directory
Self delete

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x14
push 0
push 0
dec ecx
jne 0x4a7c6c
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], edx
mov ebx, eax
mov eax, dword [ebp - 4]
call fcn.00404128
xor eax, eax
push ebp
push 0x4a89da
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [ebp - 4], 0
je 0x4a89a2
lea eax, [ebp - 0x14]
push eax
mov cl, 0x24
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.004a7888
mov eax, dword [ebp - 0x14]
call fcn.00408d8c
mov esi, eax
lea eax, [ebp - 8]
push eax
mov cl, 0x24
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.004a7904
mov edi, dword [ebx + 0x5f8]
cmp esi, 0x63
jle 0x4a7d00
lea eax, [ebp - 0x18]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.0040417c
mov eax, dword [ebp - 0x18]
call fcn.00408d8c
mov esi, eax
mov eax, dword [ebp - 4]
cmp byte [eax + 2], 0x31
jne 0x4a7d00
mov edi, dword [ebx + 0x710]
mov eax, esi
cmp eax, 0x3d
ja case.0x4a7d0b.0
jmp dword [eax*4 + 0x4a7d12]
mov byte [ebx + 0x734], 1
mov edx, ebx
mov eax, ebx
call fcn.004a6620
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 0x638]
call fcn.00433c54
mov eax, ebx
call fcn.0049daa4
jmp 0x4a89a2
mov edx, ebx
mov eax, ebx
call fcn.004a1780
jmp 0x4a89a2
mov edx, ebx
mov eax, ebx
call fcn.004a8d90
jmp case.0x4a7d0b.0
mov edx, ebx
mov eax, ebx
call fcn.004abe6c
jmp case.0x4a7d0b.0
mov eax, ebx
call fcn.004abf48
jmp case.0x4a7d0b.0
xor eax, eax
mov al, byte [0x4c2be1]
cmp eax, 0xc
ja case.0x4a7d0b.0
jmp dword [eax*4 + 0x4a7e81]
mov edx, 0x4a89f0
mov eax, ebx
call fcn.004a8ce8
jmp case.0x4a7d0b.0
mov edx, 0x4a8a10
mov eax, ebx
call fcn.004a8ce8
jmp case.0x4a7d0b.0
mov edx, 0x4a8a38
mov eax, ebx
call fcn.004a8ce8
jmp case.0x4a7d0b.0
mov edx, 0x4a8a58
mov eax, ebx
call fcn.004a8ce8
jmp case.0x4a7d0b.0
mov edx, 0x4a8a78
mov eax, ebx
call fcn.004a8ce8
jmp case.0x4a7d0b.0
mov edx, 0x4a8a98
mov eax, ebx
call fcn.004a8ce8
jmp case.0x4a7d0b.0
mov dl, 1
mov eax, ebx
call fcn.0049d220
jmp case.0x4a7d0b.0
cmp byte [0x4c2d84], 0
jne 0x4a89a2
mov cl, 1
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.004af068
jmp 0x4a89a2
mov eax, dword [0x4c2bcc]
call fcn.0044ecfc
jmp case.0x4a7d0b.0
mov edx, 0x4a8ab0
mov eax, dword [ebx + 0x474]
call fcn.00433c54
jmp case.0x4a7d0b.0
mov edx, 0x4a8ac0
mov eax, dword [ebx + 0x474]
call fcn.00433c54
jmp case.0x4a7d0b.0
mov edx, 0x4a8ad0
mov eax, dword [ebx + 0x474]
call fcn.00433c54
jmp case.0x4a7d0b.0
mov edx, ebx
mov eax, ebx
call fcn.004aa574
jmp 0x4a89a2
mov edx, dword [ebx + 0x5f8]
mov eax, ebx
call fcn.0044d498
mov edx, dword [ebp - 8]
mov eax, 0x4a8ae0
call fcn.00404260
test eax, eax
jle 0x4a8017
push 1
mov ecx, dword [ebp - 8]
mov edx, dword [ebx + 0x5f8]
mov eax, ebx
call fcn.004a799c
mov eax, dword [ebx + 0x5f8]
call fcn.0046a9b8
test eax, eax
jle 0x4a7ff6
or ecx, 0xffffffff
mov edx, 1
mov eax, ebx
call fcn.0049a358
jmp 0x4a89a2
lea eax, [ebp - 0x1c]
mov ecx, dword [ebp - 8]
mov edx, 0x4a8aec
call fcn.00403fc0
mov edx, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, ebx
call fcn.0049cde0
jmp case.0x4a7d0b.0
mov eax, dword [ebx + 0x714]
mov eax, dword [eax + 0x20c]
call fcn.0046896c
mov esi, eax
mov edx, dword [ebp - 8]
mov eax, 0x4a8b10
call fcn.00404260
test eax, eax
jle 0x4a8068
lea eax, [ebp - 0xc]
push eax
mov cl, 0x3a
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.004a7904
lea eax, [ebp - 0x20]
push eax
mov cl, 0x3a
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.004a7888
mov edx, dword [ebp - 0x20]
lea eax, [ebp - 8]
call fcn.00403d8c
jmp 0x4a8070
lea eax, [ebp - 0xc]
call fcn.00403cf4
lea ecx, [ebp - 0x24]
mov edx, dword [0x4c2bd8]
mov eax, ebx
call fcn.0049c8f8
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 8]
call fcn.00403f7c
mov edx, dword [ebp - 0x24]
mov eax, esi
call fcn.00468440
mov eax, dword [esi + 8]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x34]
cmp dword [ebp - 0xc], 0
jne 0x4a80cd
lea ecx, [ebp - 0x28]
mov edx, dword [0x4c2bd4]
mov eax, ebx
call fcn.0049c8f8
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 8]
call fcn.00403f7c
mov edx, dword [ebp - 0x28]
mov eax, dword [esi + 8]
mov ecx, dword [eax]
call dword [ecx + 0x34]
jmp 0x4a80f3
lea ecx, [ebp - 0x2c]
mov edx, dword [0x4c2bd4]
mov eax, ebx
call fcn.0049c8f8
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0xc]
call fcn.00403f7c
mov edx, dword [ebp - 0x2c]
mov eax, dword [esi + 8]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov ecx, 1
xor edx, edx
mov eax, esi
call fcn.004685e4
or ecx, 0xffffffff
xor edx, edx
mov eax, ebx
call fcn.0049a358
jmp 0x4a89a2
mov edx, dword [ebx + 0x710]
mov eax, ebx
call fcn.0044d498
mov edx, dword [ebp - 8]
mov eax, 0x4a8ae0
call fcn.00404260
test eax, eax
jle 0x4a818d
push 1
mov ecx, dword [ebp - 8]
mov edx, dword [ebx + 0x710]
mov eax, ebx
call fcn.004a799c
mov eax, dword [ebx + 0x710]
call fcn.0046a9b8
test eax, eax
jle 0x4a816c
cmp esi, 0x1c
sete al
push eax
or ecx, 0xffffffff
mov edx, 1
mov eax, ebx
call fcn.0049acf4
jmp 0x4a89a2
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 8]
mov edx, 0x4a8aec
call fcn.00403fc0
mov edx, dword [ebp - 0x30]
xor ecx, ecx
mov eax, ebx
call fcn.0049cde0
jmp case.0x4a7d0b.0
mov eax, dword [ebx + 0x714]
mov eax, dword [eax + 0x20c]
call fcn.0046896c
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 8]
mov eax, 0x4a8b10
call fcn.00404260
test eax, eax
jle 0x4a81df
lea eax, [ebp - 0xc]
push eax
mov cl, 0x3a
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.004a7904
lea eax, [ebp - 0x34]
push eax
mov cl, 0x3a
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.004a7888
mov edx, dword [ebp - 0x34]
lea eax, [ebp - 8]
call fcn.00403d8c
jmp 0x4a81e7
lea eax, [ebp - 0xc]
call fcn.00403cf4
lea ecx, [ebp - 0x38]
mov edx, dword [0x4c2bd4]
mov eax, ebx
call fcn.0049c8f8
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 8]
call fcn.00403f7c
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x10]
call fcn.00468440
lea eax, [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x10]
mov edx, dword [eax + 0x24]
mov eax, dword [ebx + 0x724]
call fcn.0047dbac
push edx
push eax
call fcn.00495e0c
fstp xword [ebp - 0x50]
wait
lea eax, [ebp - 0x50]
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 3
lea edx, [ebp - 0x44]
xor ecx, ecx
mov eax, 0x4a8b1c
call fcn.00409c54
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
call dword [ecx + 0x34]
cmp dword [ebp - 0xc], 0
jne 0x4a8285
lea ecx, [ebp - 0x54]
mov edx, dword [0x4c2bd8]
mov eax, ebx
call fcn.0049c8f8
lea eax, [ebp - 0x54]
mov edx, dword [ebp - 8]
call fcn.00403f7c
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
call dword [ecx + 0x34]
jmp 0x4a82ae
lea ecx, [ebp - 0x58]
mov edx, dword [0x4c2bd8]
mov eax, ebx
call fcn.0049c8f8
lea eax, [ebp - 0x58]
mov edx, dword [ebp - 0xc]
call fcn.00403f7c
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 8]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov ecx, 3
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.004685e4
cmp esi, 0x1c
sete al
push eax
or ecx, 0xffffffff
xor edx, edx
mov eax, ebx
call fcn.0049acf4
jmp 0x4a89a2
mov edx, edi
mov eax, ebx
call fcn.0044d498
cmp edi, dword [ebx + 0x710]
jne 0x4a8326
mov edx, dword [ebp - 8]
mov eax, 0x4a8ae0
call fcn.00404260
dec eax
jge 0x4a8326
lea eax, [ebp - 0x5c]
mov ecx, dword [ebp - 8]
mov edx, 0x4a8b2c
call fcn.00403fc0
mov edx, dword [ebp - 0x5c]
xor ecx, ecx
mov eax, ebx
call fcn.0049cde0
mov eax, dword [ebp - 8]
call fcn.004090ec
mov eax, ebx
call fcn.0049b548
jmp case.0x4a7d0b.0
push 1
mov ecx, dword [ebp - 8]
mov edx, edi
mov eax, ebx
call fcn.004a799c
cmp edi, dword [ebx + 0x5f8]
sete dl
mov eax, ebx
call fcn.004a2274
jmp 0x4a89a2
lea eax, [ebp - 0xc]
push eax
mov cl, 0x3a
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.004a7888
lea eax, [ebp - 0x60]
push eax
mov cl, 0x3a
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.004a7904
mov edx, dword [ebp - 0x60]
lea eax, [ebp - 8]
call fcn.00403d8c
mov edx, edi
mov eax, ebx
call fcn.0044d498
mov eax, dword [ebx + 0x208]
cmp eax, dword [ebx + 0x710]
jne 0x4a83a2
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
call fcn.00409104
mov eax, ebx
call fcn.0049b548
jmp case.0x4a7d0b.0
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebx + 0x724]
call fcn.0047dfdc
jmp 0x4a89a2
lea eax, [ebp - 0xc]
push eax
mov cl, 0x3a
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.004a7888
lea eax, [ebp - 0x64]
push eax
mov cl, 0x3a
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.004a7904
mov edx, dword [ebp - 0x64]
lea eax, [ebp - 8]
call fcn.00403d8c
mov edx, dword [ebx + 0x5f8]
mov eax, ebx
call fcn.0044d498
push 1
mov ecx, dword [ebp - 8]
mov edx, dword [ebx + 0x5f8]
mov eax, ebx
call fcn.004a799c
mov eax, 0x4c2cd4
mov edx, dword [ebp - 0xc]
call fcn.00403d48
mov eax, ebx
call fcn.004ac01c
jmp 0x4a89a2
mov edx, edi
mov eax, ebx
call fcn.0044d498
push 1
mov ecx, dword [ebp - 8]
mov edx, edi
mov eax, ebx
call fcn.004a799c
xor ecx, ecx
mov edx, edi
mov eax, ebx
call fcn.004aa0bc
jmp case.0x4a7d0b.0
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 0x724]
call fcn.0047d8b0
jmp 0x4a89a2
cmp edi, dword [ebx + 0x710]
jne 0x4a8483
lea ecx, [ebp - 0x68]
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.0049c8f8
mov edx, dword [ebp - 0x68]
mov eax, 0x4c2bd4
call fcn.00403d48
mov eax, ebx
call fcn.0049b548
jmp case.0x4a7d0b.0
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 0x724]
call fcn.0047e234
jmp 0x4a89a2
cmp edi, dword [ebx + 0x710]
jne 0x4a84b8
lea ecx, [ebp - 0x6c]
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.0049c8f8
mov eax, dword [ebp - 0x6c]
call fcn.00479824
jmp case.0x4a7d0b.0
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 0x724]
call fcn.0047e10c
jmp 0x4a89a2
cmp edi, dword [ebx + 0x710]
jne 0x4a84e6
mov eax, dword [ebp - 8]
call fcn.00404138
push eax
call sub.kernel32.dll_RemoveDirectoryA
jmp case.0x4a7d0b.0
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 0x724]
call fcn.0047e080
jmp 0x4a89a2
cmp edi, dword [ebx + 0x710]
jne 0x4a850d
mov eax, ebx
call fcn.0049b548
jmp 0x4a89a2
cmp byte [0x4c2be1], 4
je 0x4a8527
mov edx, 0x4a8b44
mov eax, ebx
call fcn.004a8ce8
jmp 0x4a89a2
lea ecx, [ebp - 0x70]
mov eax, dword [ebx + 0x724]
mov edx, dword [eax + 0x510]
mov eax, ebx
call fcn.0049c8f8
mov edx, dword [ebp - 0x70]
mov eax, ebx
call fcn.004a0254
mov esi, eax
cmp esi, 0xffffffff
je 0x4a8557
mov edx, esi
mov eax, ebx
call fcn.004a0138
mov eax, ebx
call fcn.0049f934
jmp 0x4a89a2
cmp edi, dword [ebx + 0x710]
jne 0x4a858d
lea eax, [ebp - 0x74]
mov ecx, dword [0x4c2bd4]
mov edx, 0x4a8b74
call fcn.00403fc0
mov edx, dword [ebp - 0x74]
mov eax, ebx
call fcn.004a8ce8
jmp case.0x4a7d0b.0
lea eax, [ebp - 0x78]
mov ecx, dword [0x4c2bd8]
mov edx, 0x4a8b8c
call fcn.00403fc0
mov edx, dword [ebp - 0x78]
mov eax, ebx
call fcn.004a8ce8
jmp case.0x4a7d0b.0
cmp edi, dword [ebx + 0x710]
jne 0x4a85c9
mov eax, 0x4c2d6c
mov edx, dword [ebp - 8]
call fcn.00403d48
jmp case.0x4a7d0b.0
mov eax, 0x4c2d70
mov edx, dword [ebp - 8]
call fcn.00403d48
jmp case.0x4a7d0b.0
mov edx, dword [0x4c2bd8]
mov eax, ebx
call fcn.004a0254
mov edx, eax
mov eax, ebx
call fcn.004a0138
mov eax, ebx
call fcn.0049f934
jmp case.0x4a7d0b.0
mov eax, dword [ebx + 0x538]
call fcn.0048552c
test al, al
jne 0x4a8623
mov ecx, dword [0x4c2c40]
mov edx, dword [0x4c2c3c]
mov eax, dword [ebx + 0x538]
call fcn.004859e4
mov eax, dword [ebx + 0x538]
call fcn.0048552c
test al, al
je 0x4a8644
mov dl, 1
mov eax, dword [ebx + 0x53c]
call fcn.00444324
jmp case.0x4a7d0b.0
xor edx, edx
mov eax, dword [ebx + 0x53c]
call fcn.00444324
jmp case.0x4a7d0b.0
mov eax, dword [ebx + 0x538]
call fcn.00485720
jmp case.0x4a7d0b.0
mov eax, dword [ebx + 0x53c]
cmp byte [eax + 0x2c], 1
jne 0x4a867d
mov eax, dword [ebx + 0x538]
call fcn.00485720
lea eax, [ebp - 0x7c]
push eax
mov cl, 0x3a
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.004a7888
mov edx, dword [ebp - 0x7c]
mov eax, 0x4c2c3c
call fcn.00403d48
lea eax, [ebp - 0xc]
push eax
mov cl, 0x3a
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.004a7904
lea eax, [ebp - 0x80]
push eax
mov cl, 0x3a
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.004a7888
mov edx, dword [ebp - 0x80]
mov eax, 0x4c2c40
call fcn.00403d48
lea eax, [ebp - 0x84]
push eax
mov cl, 0x3a
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.004a7904
mov edx, dword [ebp - 0x84]
mov eax, 0x4c2c44
call fcn.00403d48
mov ecx, dword [0x4c2c40]
mov edx, dword [0x4c2c3c]
mov eax, dword [ebx + 0x538]
call fcn.004859e4
mov eax, dword [ebx + 0x538]
call fcn.0048552c
test al, al
je 0x4a8722
mov dl, 1
mov eax, dword [ebx + 0x53c]
call fcn.00444324
jmp case.0x4a7d0b.0
xor edx, edx
mov eax, dword [ebx + 0x53c]
call fcn.00444324
jmp case.0x4a7d0b.0
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.004ab10c
jmp case.0x4a7d0b.0
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.004ab434
jmp case.0x4a7d0b.0
mov eax, dword [ebx + 0x714]
mov eax, dword [eax + 0x20c]
call fcn.00468adc
jmp case.0x4a7d0b.0
mov dword [0x4c2d88], 1
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.00494d90
dec eax
lea edx, [ebp - 0x88]
call fcn.00408cec
mov ecx, dword [ebp - 0x88]
xor edx, edx
mov eax, dword [0x4c2d90]
mov esi, dword [eax]
call dword [esi + 0x54]
jmp case.0x4a7d0b.0
lea ecx, [ebp - 0x8c]
xor edx, edx
mov eax, dword [0x4c2d90]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x8c]
call fcn.00408d8c
mov esi, eax
test esi, esi
jle 0x4a87f1
dec esi
lea edx, [ebp - 0x90]
mov eax, esi
call fcn.00408cec
mov ecx, dword [ebp - 0x90]
xor edx, edx
mov eax, dword [0x4c2d90]
mov esi, dword [eax]
call dword [esi + 0x20]
mov dword [0x4c2d88], 1
jmp case.0x4a7d0b.0
inc esi
jne 0x4a8803
mov dword [0x4c2d88], 1
jmp case.0x4a7d0b.0
mov esi, dword [0x4c2d88]
dec esi
test esi, esi
jl 0x4a881e
inc esi
xor edx, edx
mov eax, dword [0x4c2d90]
mov ecx, dword [eax]
call dword [ecx + 0x44]
dec esi
jne 0x4a880f
xor eax, eax
mov dword [0x4c2d88], eax
jmp case.0x4a7d0b.0
mov eax, dword [ebx + 0x728]
mov eax, dword [eax + 0x1f0]
mov edx, 1
call fcn.00464990
push eax
push 0x4a8ba4
push dword [ebp - 8]
push 0x4a8bbc
lea eax, [ebp - 0x94]
mov edx, 3
call fcn.00404034
mov edx, dword [ebp - 0x94]
pop eax
call fcn.00464908
mov eax, dword [ebp - 8]
call fcn.00408d8c
imul edx, eax, 0x3e8
mov eax, dword [ebx + 0x5c0]
call fcn.00455e44
mov dl, 1
mov eax, dword [ebx + 0x5c0]
call fcn.00455e34
jmp 0x4a89a2
mov edx, edi
mov eax, ebx
call fcn.0044d498
push 0
mov ecx, dword [ebp - 8]
mov edx, edi
mov eax, ebx
call fcn.004a799c
test al, al
jne case.0x4a7d0b.0
mov eax, dword [0x4c2d90]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle case.0x4a7d0b.0
cmp dword [0x4c2d88], 0
jne 0x4a8918
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x9c]
xor edx, edx
mov eax, dword [0x4c2d90]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x9c]
mov ecx, 2
mov edx, 1
call fcn.0040417c
mov eax, dword [ebp - 0x98]
call fcn.00408d8c
mov esi, eax
xor edx, edx
mov eax, dword [0x4c2d90]
mov ecx, dword [eax]
call dword [ecx + 0x44]
jmp 0x4a895d
inc dword [0x4c2d88]
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0xa4]
mov edx, dword [0x4c2d88]
mov eax, dword [0x4c2d90]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0xa4]
mov ecx, 2
mov edx, 1
call fcn.0040417c
mov eax, dword [ebp - 0xa0]
call fcn.00408d8c
mov esi, eax
mov eax, dword [0x4c2d90]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
je case.0x4a7d0b.0
cmp esi, 0x36
jne 0x4a88c6
jmp case.0x4a7d0b.0
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.004a7ad8
jmp 0x4a89a2
push 1
mov eax, dword [ebp - 8]
call fcn.00404138
push eax
call sub.kernel32.dll_WinExec
cmp byte [0x4c2d84], 0
je 0x4a89a2
mov eax, ebx
call fcn.004a7b54
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a89e1
lea eax, [ebp - 0xa4]
mov edx, 0x15
call fcn.00403d18
lea eax, [ebp - 0x3c]
mov edx, 0xb
call fcn.00403d18
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00403d18
ret