Function at 0x4052c7
Capabilities:
Create process on windows
Terminate process

Disassembly:
push 0x84
mov eax, 0x4097be
call fcn.0040893e
xor eax, eax
lea ecx, [ebp - 0x3c]
mov word [0x40f6c8], ax
mov word [0x40f8d2], ax
mov word [0x40fadc], ax
call fcn.0040207d
and dword [ebp - 4], 0
lea ecx, [ebp - 0x24]
push ecx
mov ecx, eax
call fcn.00402069
lea edx, [ebp - 0x24]
mov byte [ebp - 4], 1
xor ecx, ecx
call fcn.0040159b
lea ecx, [ebp - 0x24]
call fcn.004014d4
or ebx, 0xffffffff
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], ebx
call fcn.004014d4
mov edi, str.7z.exe
lea ecx, [ebp - 0x24]
push edi
call fcn.0040606d
push 2
pop esi
lea edx, [ebp - 0x24]
mov dword [ebp - 4], esi
xor ecx, ecx
call fcn.0040159b
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], ebx
call fcn.004014d4
lea ecx, [ebp - 0x3c]
call fcn.0040207d
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 3
push ecx
mov ecx, eax
call fcn.00402069
xor ecx, ecx
mov byte [ebp - 4], 4
lea edx, [ebp - 0x24]
inc ecx
call fcn.0040159b
lea ecx, [ebp - 0x24]
call fcn.004014d4
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], ebx
call fcn.004014d4
push str.Mesen.zip
lea ecx, [ebp - 0x24]
call fcn.0040606d
xor ecx, ecx
mov dword [ebp - 4], 5
lea edx, [ebp - 0x24]
inc ecx
call fcn.0040159b
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], ebx
call fcn.004014d4
lea ecx, [ebp - 0x3c]
call fcn.0040207d
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 6
push ecx
mov ecx, eax
call fcn.00402069
lea edx, [ebp - 0x24]
mov byte [ebp - 4], 7
mov ecx, esi
call fcn.0040159b
lea ecx, [ebp - 0x24]
call fcn.004014d4
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], ebx
call fcn.004014d4
push str.dotnet.exe
lea ecx, [ebp - 0x24]
call fcn.0040606d
lea edx, [ebp - 0x24]
mov dword [ebp - 4], 8
mov ecx, esi
call fcn.0040159b
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], ebx
call fcn.004014d4
push str.https:__download.visualstudio.microsoft.com_download_pr_907765b0_2bf8_494e_93aa_5ef9553c5d68_a9308dc010617e6716c0e6abd53b05ce_windowsdesktop_runtime_8.0.8_win_x64.exe
lea ecx, [ebp - 0x24]
call fcn.0040606d
mov edx, esi
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x24]
call fcn.00401d70
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], ebx
call fcn.004014d4
push str.https:__nightly.link_SourMesen_Mesen2_workflows_build_master_Mesen_20_28Windows_20__20net8.0_20__20AoT_29.zip
lea ecx, [ebp - 0x24]
call fcn.0040606d
xor edx, edx
mov dword [ebp - 4], 0xa
inc edx
lea ecx, [ebp - 0x24]
call fcn.00401d70
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], ebx
call fcn.004014d4
push edi
lea ecx, [ebp - 0x24]
call fcn.0040606d
xor edx, edx
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x24]
call fcn.00401cf0
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], ebx
call fcn.004014d4
push 0x3c
pop ebx
push ebx
lea eax, [ebp - 0x90]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea esi, [ebp - 0x90]
mov eax, 0x41a0d8
mov edi, eax
push 0xf
pop ecx
rep movsd dword es:[edi], dword [esi]
push eax
mov dword [0x41a0d8], ebx
mov dword [0x41a0dc], 0x40
mov dword [0x41a0f4], 5
mov dword [0x41a0e8], 0x40fadc
mov dword [0x41a0ec], 0x40c180
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov eax, dword [0x41a110]
mov ebx, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x405500
push 0xffffffffffffffff
push eax
call ebx
push 0x3c
lea eax, [ebp - 0x90]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea esi, [ebp - 0x90]
mov eax, 0x41a0d8
mov edi, eax
push 0xf
pop ecx
rep movsd dword es:[edi], dword [esi]
mov esi, 0x40f6c8
mov dword [0x41a0d8], 0x3c
push eax
mov dword [0x41a0dc], 0x40
mov dword [0x41a0f4], 5
mov dword [0x41a0e8], esi
mov dword [0x41a0ec], 0x40c8c4
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov eax, dword [0x41a110]
test eax, eax
je 0x40556d
push 0xffffffffffffffff
push eax
call ebx
push ecx
push esi
lea ecx, [ebp - 0x24]
call fcn.0040620e
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 0xc
call fcn.00403dd5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.004014d4
push ecx
push 0x40f8d2
lea ecx, [ebp - 0x24]
call fcn.0040620e
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 0xd
call fcn.00403dd5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.004014d4
push ecx
push 0x40fadc
lea ecx, [ebp - 0x54]
call fcn.0040620e
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0xe
call fcn.00403dd5
lea ecx, [ebp - 0x54]
call fcn.004014d4
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3