Function at 0x403376
Capabilities:
Create process on windows
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x330
push ebx
push esi
lea eax, [ebp - 0x10]
push edi
mov esi, ecx
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetWindowRect]
xor ebx, ebx
lea eax, [ebp - 0x30]
push ebx
push eax
push ebx
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
push 1
pop edi
push edi
push 2
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
cmp dword [ebp + 0xc], ebx
je 0x40355e
cmp dword [ebp + 0xc], 0x3e8
je 0x403532
mov eax, dword [ebp - 0xc]
push edi
sub eax, dword [ebp - 4]
push ebx
push ebx
add eax, dword [ebp - 0x24]
push eax
push ebx
push 0xffffffffffffffff
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetWindowPos]
lea eax, [ebp - 0x230]
push 0xa
push eax
push dword [ebp + 0xc]
call fcn.0040596c
add esp, 0xc
lea eax, [ebp - 0x230]
push 0x100
push eax
push dword [ebp + 0xc]
call sub.RASAPI32.dll_RasGetErrorStringA
lea eax, [ebp - 0x230]
push 0x408db4
push eax
call fcn.00405830
lea eax, [ebp - 0x230]
push 0x40c494
push eax
call fcn.00405830
add esp, 0x10
inc dword [0x409238]
cmp dword [0x409238], 2
jle 0x403497
push ebx
push ebx
push 0x80a0
push edi
push 0xa
push 0xa
push 0x40a394
call fcn.00401225
add esp, 0x10
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp dword [0x409238], 2
jle 0x403497
push 0x24
lea eax, [ebp - 0x230]
push 0x40bd94
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
je 0x403497
push ebx
mov byte [0x409688], bl
push dword [esi + 4]
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x4034f0
cmp dword [0x409238], 2
mov edi, 0x409a8c
jl 0x4034b2
push 0x40998c
push edi
call fcn.00405820
pop ecx
pop ecx
test byte [0x409238], 1
je 0x4034e9
lea eax, [ebp - 0x130]
push 0x408db0
push eax
call fcn.00405820
lea eax, [ebp - 0x130]
push edi
push eax
call fcn.00405830
lea eax, [ebp - 0x130]
push eax
push edi
call fcn.00405820
add esp, 0x18
mov ecx, esi
call fcn.004039f0
lea eax, [ebp - 0x230]
push 0xa
push eax
push dword [ebp + 0xc]
call fcn.0040596c
push 0x100
lea eax, [ebp - 0x330]
push 0x40b694
push eax
call fcn.00405bd0
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x330]
push eax
call fcn.00405830
add esp, 0x20
jmp 0x4036ed
push ebx
push ebx
push 0x80a0
push edi
push 0xa
push 0xa
push 0x40a394
call fcn.00401225
add esp, 0x10
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, esi
call fcn.00403d94
jmp 0x4036ed
push ebx
push ebx
push 0x80a0
push edi
push 0xa
push 0xa
push 0x40a394
call fcn.00401225
add esp, 0x10
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push str.coder.ini
lea eax, [ebp - 0x130]
push 0x100
push eax
push 0x408644
mov edi, 0x408850
push str.count
push edi
call dword [sym.imp.KERNEL32.DLL_GetPrivateProfileStringA]
lea eax, [ebp - 0x130]
push eax
call fcn.00405e4d
lea ecx, [ebp - 0x130]
inc eax
push 0xa
push ecx
push eax
call fcn.0040596c
add esp, 0x10
lea eax, [ebp - 0x130]
push str.coder.ini
push eax
push str.count
push edi
call dword [sym.imp.KERNEL32.DLL_WritePrivateProfileStringA]
lea eax, [ebp - 0x330]
push 0x409388
push eax
call fcn.00405820
mov eax, dword [ebp + 0x10]
mov edi, dword [sym.imp.KERNEL32.DLL_GetLocalTime]
pop ecx
mov dword [0x409284], eax
pop ecx
push 0x409270
call edi
push 0x40b994
push 2
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
lea eax, [ebp - 0x330]
push eax
push 0x415
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
lea eax, [ebp - 0x20]
push eax
call edi
movzx eax, word [ebp - 0x1a]
movzx ecx, word [ebp - 0x18]
lea eax, [eax + eax*2]
lea eax, [ecx + eax*8]
movzx ecx, word [ebp - 0x16]
imul eax, eax, 0x3c
add eax, ecx
movzx ecx, word [0x409276]
imul eax, eax, 0x3c
imul ecx, ecx, 0x15180
sub eax, ecx
movzx ecx, word [0x409278]
imul ecx, ecx, 0xe10
sub eax, ecx
movzx ecx, word [0x40927a]
imul ecx, ecx, 0x3c
sub eax, ecx
movzx ecx, word [0x40927c]
sub eax, ecx
movzx ecx, word [ebp - 0x14]
add ecx, dword [0x409280]
add ecx, eax
push 0x40370b
push 0x3e8
push 0xbba
mov dword [0x409280], ecx
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetTimer]
push 3
push ebx
push 0x409488
push str.iexplore.exe
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0xbb8
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov eax, dword [ebp - 0xc]
push 1
sub eax, dword [ebp - 4]
push ebx
push ebx
add eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 8]
add eax, dword [ebp - 0x28]
push eax
push 0xffffffffffffffff
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetWindowPos]
lea eax, [ebp - 0x330]
push eax
push 0x415
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
pop edi
pop esi
xor eax, eax
pop ebx
leave
ret 0x10