Function at 0x4052b1
Capabilities:
Create process on windows
Terminate process

Disassembly:
push 0x84
mov eax, 0x40973e
call fcn.004088be
xor eax, eax
lea ecx, [ebp - 0x3c]
mov word [0x40f6c8], ax
mov word [0x40f8d2], ax
mov word [0x40fadc], ax
call fcn.00402068
and dword [ebp - 4], 0
lea ecx, [ebp - 0x24]
push ecx
mov ecx, eax
call fcn.00402054
lea edx, [ebp - 0x24]
mov byte [ebp - 4], 1
xor ecx, ecx
call fcn.0040158c
lea ecx, [ebp - 0x24]
call fcn.004014c8
or ebx, 0xffffffff
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], ebx
call fcn.004014c8
mov edi, str.7z.exe
lea ecx, [ebp - 0x24]
push edi
call fcn.0040604f
push 2
pop esi
lea edx, [ebp - 0x24]
mov dword [ebp - 4], esi
xor ecx, ecx
call fcn.0040158c
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], ebx
call fcn.004014c8
lea ecx, [ebp - 0x3c]
call fcn.00402068
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 3
push ecx
mov ecx, eax
call fcn.00402054
xor ecx, ecx
mov byte [ebp - 4], 4
lea edx, [ebp - 0x24]
inc ecx
call fcn.0040158c
lea ecx, [ebp - 0x24]
call fcn.004014c8
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], ebx
call fcn.004014c8
push str.Mesen.zip
lea ecx, [ebp - 0x24]
call fcn.0040604f
xor ecx, ecx
mov dword [ebp - 4], 5
lea edx, [ebp - 0x24]
inc ecx
call fcn.0040158c
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], ebx
call fcn.004014c8
lea ecx, [ebp - 0x3c]
call fcn.00402068
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 6
push ecx
mov ecx, eax
call fcn.00402054
lea edx, [ebp - 0x24]
mov byte [ebp - 4], 7
mov ecx, esi
call fcn.0040158c
lea ecx, [ebp - 0x24]
call fcn.004014c8
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], ebx
call fcn.004014c8
push str.dotnet.exe
lea ecx, [ebp - 0x24]
call fcn.0040604f
lea edx, [ebp - 0x24]
mov dword [ebp - 4], 8
mov ecx, esi
call fcn.0040158c
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], ebx
call fcn.004014c8
push str.https:__download.visualstudio.microsoft.com_download_pr_bb581716_4cca_466e_9857_512e2371734b_5fe261422a7305171866fd7812d0976f_windowsdesktop_runtime_8.0.7_win_x64.exe
lea ecx, [ebp - 0x24]
call fcn.0040604f
mov edx, esi
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x24]
call fcn.00401d5b
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], ebx
call fcn.004014c8
push str.https:__nightly.link_SourMesen_Mesen2_workflows_build_master_Mesen_20_28Windows_20__20net8.0_20__20AoT_29.zip
lea ecx, [ebp - 0x24]
call fcn.0040604f
xor edx, edx
mov dword [ebp - 4], 0xa
inc edx
lea ecx, [ebp - 0x24]
call fcn.00401d5b
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], ebx
call fcn.004014c8
push edi
lea ecx, [ebp - 0x24]
call fcn.0040604f
xor edx, edx
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x24]
call fcn.00401cde
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], ebx
call fcn.004014c8
push 0x3c
pop ebx
push ebx
lea eax, [ebp - 0x90]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea esi, [ebp - 0x90]
mov eax, 0x41a0d8
mov edi, eax
push 0xf
pop ecx
rep movsd dword es:[edi], dword [esi]
push eax
mov dword [0x41a0d8], ebx
mov dword [0x41a0dc], 0x40
mov dword [0x41a0f4], 5
mov dword [0x41a0e8], 0x40fadc
mov dword [0x41a0ec], 0x40c180
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov eax, dword [0x41a110]
mov ebx, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x4054ea
push 0xffffffffffffffff
push eax
call ebx
push 0x3c
lea eax, [ebp - 0x90]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea esi, [ebp - 0x90]
mov eax, 0x41a0d8
mov edi, eax
push 0xf
pop ecx
rep movsd dword es:[edi], dword [esi]
mov esi, 0x40f6c8
mov dword [0x41a0d8], 0x3c
push eax
mov dword [0x41a0dc], 0x40
mov dword [0x41a0f4], 5
mov dword [0x41a0e8], esi
mov dword [0x41a0ec], 0x40c8c4
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov eax, dword [0x41a110]
test eax, eax
je 0x405557
push 0xffffffffffffffff
push eax
call ebx
push ecx
push esi
lea ecx, [ebp - 0x24]
call fcn.004061f0
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 0xc
call fcn.00403dc0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.004014c8
push ecx
push 0x40f8d2
lea ecx, [ebp - 0x24]
call fcn.004061f0
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 0xd
call fcn.00403dc0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.004014c8
push ecx
push 0x40fadc
lea ecx, [ebp - 0x54]
call fcn.004061f0
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0xe
call fcn.00403dc0
lea ecx, [ebp - 0x54]
call fcn.004014c8
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3