Function at 0x403300
Capabilities:
Create process on windows

Disassembly:
push 0x248
mov eax, 0x4347b4
call fcn.0042e724
xor ebx, ebx
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
cmp eax, ebx
jge 0x403323
xor eax, eax
jmp 0x403980
lea edi, [ebp - 0xbc]
call fcn.00411659
mov dword [ebp - 4], ebx
mov edi, dword [ebp + 8]
mov byte [ebp - 0x1a], bl
mov byte [ebp - 0x19], bl
mov dword [ebp - 0x20], ebx
cmp byte [edi + 1], bl
jne 0x4035b0
lea eax, [ebp - 0x254]
push eax
call fcn.00407810
lea eax, [ebp - 0x14]
push eax
mov ecx, str.Q1JSfUZNT0NLTA
mov byte [ebp - 4], 1
call fcn.00413bec
pop ecx
mov byte [ebp - 4], 2
mov eax, dword [eax]
push 3
push eax
lea eax, [ebp - 0x1c0]
lea ecx, [ebp - 0x1bc]
push eax
mov dword [ebp - 0x1c0], ecx
call fcn.00404654
mov byte [ebp - 4], 3
push dword [edi + 0xc]
lea eax, [ebp - 0x1fc]
push dword [ebp - 0x1c0]
call fcn.00404bcb
push eax
call fcn.00401aa8
lea eax, [ebp - 0x1bc]
cmp dword [ebp - 0x1c0], eax
je 0x4033be
push dword [ebp - 0x1c0]
call fcn.0041b196
pop ecx
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
call fcn.00401053
lea eax, [ebp - 0x14]
push eax
mov ecx, str.Q1JSfUxDT0c
call fcn.00413bec
pop ecx
mov byte [ebp - 4], 4
mov eax, dword [eax]
push 3
push eax
lea eax, [ebp - 0x1c0]
lea ecx, [ebp - 0x1bc]
push eax
mov dword [ebp - 0x1c0], ecx
call fcn.00404654
mov byte [ebp - 4], 5
push dword [edi + 8]
lea eax, [ebp - 0x1fc]
push dword [ebp - 0x1c0]
call fcn.00404bcb
push eax
call fcn.00401aa8
lea eax, [ebp - 0x1bc]
cmp dword [ebp - 0x1c0], eax
je 0x403435
push dword [ebp - 0x1c0]
call fcn.0041b196
pop ecx
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
call fcn.00401053
lea eax, [ebp - 0x14]
push eax
mov ecx, str.Q1JSfUZHUUE
call fcn.00413bec
pop ecx
mov byte [ebp - 4], 6
mov eax, dword [eax]
push 3
push eax
lea eax, [ebp - 0x1c0]
lea ecx, [ebp - 0x1bc]
push eax
mov dword [ebp - 0x1c0], ecx
call fcn.00404654
mov byte [ebp - 4], 7
push dword [edi + 0x10]
lea eax, [ebp - 0x1fc]
push dword [ebp - 0x1c0]
call fcn.00404bcb
push eax
call fcn.00401aa8
lea eax, [ebp - 0x1bc]
cmp dword [ebp - 0x1c0], eax
je 0x4034ac
push dword [ebp - 0x1c0]
call fcn.0041b196
pop ecx
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
call fcn.00401053
lea eax, [ebp - 0x254]
call fcn.004181f4
cmp byte [ebp - 0x1cc], bl
jne 0x4035a2
mov eax, dword [edi + 0x2c]
sub eax, 0x10
call fcn.0040482d
add eax, 0x10
mov dword [ebp + 8], eax
push ebx
lea eax, [ebp - 0x18]
push 0x438c44
push eax
mov byte [ebp - 4], 8
call fcn.00413ad1
add esp, 0xc
mov esi, eax
push ebx
lea eax, [ebp - 0x14]
push 0x438c68
push eax
mov byte [ebp - 4], 9
call fcn.00413ad1
add esp, 0xc
mov byte [ebp - 4], 0xa
mov esi, dword [esi]
mov eax, dword [eax]
push esi
push eax
lea eax, [ebp + 8]
push eax
call fcn.00404128
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
call fcn.00401053
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
call fcn.00401053
push ebx
lea eax, [ebp - 0x14]
push str.S0dR
push eax
call fcn.00413ad1
add esp, 0xc
mov byte [ebp - 4], 0xb
mov esi, dword [ebp + 8]
push dword [eax]
mov ecx, esi
call fcn.00410d49
mov eax, dword [ebp - 0x14]
pop ecx
add eax, 0xfffffff0
call fcn.00401053
call dword [sym.imp.ole32.dll_CoUninitialize]
lea eax, [esi - 0x10]
call fcn.00401053
lea esi, [ebp - 0x254]
mov byte [ebp - 4], bl
call fcn.004078f8
push 0x20
pop esi
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xbc]
push eax
call fcn.004116c1
mov eax, esi
jmp 0x403980
lea esi, [ebp - 0x254]
mov byte [ebp - 4], bl
call fcn.004078f8
mov eax, dword [edi + 0x14]
mov eax, dword [eax - 0xc]
cmp eax, ebx
je 0x403690
mov eax, dword [edi + 0x18]
cmp dword [eax - 0xc], ebx
je 0x403690
lea ecx, [ebp - 0xbc]
call fcn.00411925
test al, al
je 0x403689
lea esi, [ebp - 0xac]
call fcn.00413992
mov eax, dword [edi + 0x3c]
xor esi, esi
cmp eax, ebx
jbe 0x40361b
mov dword [ebp - 0x24], ebx
cmp esi, eax
jae 0x40367f
mov eax, dword [edi + 0x38]
add eax, dword [ebp - 0x24]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.00404c6e
mov eax, dword [edi + 0x3c]
add dword [ebp - 0x24], 0x34
inc esi
cmp esi, eax
jb 0x4035fc
mov eax, dword [edi + 0x28]
mov ecx, dword [edi + 0x20]
mov edx, dword [edi + 0x18]
mov esi, dword [edi + 0x14]
push eax
movzx eax, byte [edi]
push ecx
push edx
push esi
push eax
lea eax, [ebp - 0xbc]
call fcn.00412304
mov dword [ebp - 0x18], eax
cmp eax, ebx
jne 0x40366c
lea esi, [ebp - 0x14]
lea eax, [ebp - 0xbc]
call fcn.00413689
add edi, 0x1c
mov byte [ebp - 4], 0xc
call fcn.004040c1
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
call fcn.00401053
mov edi, dword [ebp + 8]
cmp dword [ebp - 0x18], 4
jne 0x403690
mov byte [ebp - 0x19], 1
mov dword [ebp - 0x20], 8
jmp 0x403690
push 0x80070057
call fcn.00401000
mov dword [ebp - 0x20], 2
mov eax, dword [edi + 0x24]
mov eax, dword [eax - 0xc]
cmp eax, ebx
je 0x403707
lea ecx, [ebp - 0xbc]
call fcn.00412870
test al, al
je 0x403756
lea esi, [ebp - 0x9c]
call fcn.00413992
mov eax, dword [edi + 0x4c]
xor esi, esi
cmp eax, ebx
jbe 0x4036e2
cmp esi, eax
jae 0x40367f
mov eax, dword [edi + 0x48]
add eax, ebx
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.00404c6e
mov eax, dword [edi + 0x4c]
inc esi
add ebx, 0x34
cmp esi, eax
jb 0x4036c5
push dword [edi + 0x58]
mov eax, dword [edi + 0x24]
push eax
movzx eax, byte [edi]
push eax
lea ebx, [ebp - 0xbc]
call fcn.00412989
cmp eax, 4
jne 0x403705
or dword [ebp - 0x20], 0x10
mov byte [ebp - 0x1a], 1
xor ebx, ebx
mov eax, dword [edi + 0x2c]
sub eax, 0x10
call fcn.0040482d
add eax, 0x10
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0xd
cmp byte [ebp - 0x1a], bl
jne 0x40375c
cmp byte [ebp - 0x19], bl
jne 0x40375c
push ebx
lea eax, [ebp - 0x18]
push str.R1p9S0xRVkNOTkdG
push eax
call fcn.00413ad1
add esp, 0xc
mov esi, eax
push ebx
lea eax, [ebp - 0x14]
push 0x438c68
push eax
mov byte [ebp - 4], 0x10
call fcn.00413ad1
add esp, 0xc
mov byte [ebp - 4], 0x11
jmp 0x40378a
or dword [ebp - 0x20], 4
jmp 0x403707
push ebx
lea eax, [ebp - 0x18]
push str.R1p9Q05QR0NGW31LTFFWQ05OR0Y
push eax
call fcn.00413ad1
add esp, 0xc
mov esi, eax
push ebx
lea eax, [ebp - 0x14]
push 0x438c68
push eax
mov byte [ebp - 4], 0xe
call fcn.00413ad1
add esp, 0xc
mov byte [ebp - 4], 0xf
mov esi, dword [esi]
mov eax, dword [eax]
push esi
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.00404128
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
call fcn.00401053
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
call fcn.00401053
push edi
call fcn.00403988
push ebx
lea eax, [ebp - 0x14]
push str.S0dR
push eax
call fcn.00413ad1
add esp, 0xc
mov byte [ebp - 4], 0x12
mov esi, dword [ebp - 0x24]
push dword [eax]
mov ecx, esi
call fcn.00410d49
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x14]
pop ecx
add eax, 0xfffffff0
call fcn.00401053
push 0x38
lea eax, [ebp - 0x64]
push ebx
push eax
mov dword [ebp - 0x68], ebx
call fcn.0041ca10
add esp, 0xc
push ebx
lea eax, [ebp - 0x18]
push str.TVJHTA
push eax
call fcn.00413ad1
add esp, 0xc
lea edi, [ebp - 0x28]
mov byte [ebp - 4], 0x13
call fcn.00411f19
mov byte [ebp - 4], 0x14
mov eax, dword [0x44970c]
mov ecx, 0x44970c
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x15
mov eax, dword [ebp + 8]
mov edi, 0x438a10
cmp byte [eax + 2], bl
jne 0x403846
mov edi, dword [eax + 0x24]
push ebx
lea eax, [ebp - 0x2c]
push str.D0xNRFBDT0dPR1BFS0xF
push eax
call fcn.00413ad1
add esp, 0xc
push edi
mov byte [ebp - 4], 0x16
push dword [eax]
lea eax, [ebp - 0x14]
push str._s__s
call fcn.00401cd7
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x2c]
add esp, 0xc
add eax, 0xfffffff0
call fcn.00401053
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp - 0x14]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x68], 0x3c
mov dword [ebp - 0x64], 0x40
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x4c], 1
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
jne 0x4038e7
call dword [sym.imp.ole32.dll_CoUninitialize]
lea eax, [edi - 0x10]
call fcn.00401053
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
call fcn.00401053
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
call fcn.00401053
lea eax, [esi - 0x10]
call fcn.00401053
mov esi, dword [ebp - 0x20]
jmp 0x40358b
mov eax, dword [ebp + 8]
cmp byte [eax + 2], bl
je 0x403941
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_GetProcessId]
mov ecx, dword [ebp + 8]
push dword [ecx + 8]
push eax
call fcn.0040106b
pop ecx
pop ecx
test al, al
je 0x403941
call fcn.00401415
mov eax, dword [0x44a5b8]
cmp eax, ebx
je 0x403941
mov ecx, dword [eax + 4]
push dword [eax]
mov dword [ebp + 8], ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp dword [ebp + 8], ebx
je 0x403941
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x403941
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_UpdateWindow]
lea eax, [edi - 0x10]
call fcn.00401053
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
call fcn.00401053
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
call fcn.00401053
call dword [sym.imp.ole32.dll_CoUninitialize]
lea eax, [esi - 0x10]
call fcn.00401053
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xbc]
push eax
call fcn.004116c1
mov eax, dword [ebp - 0x20]
call fcn.0042e7fc
ret 4