Function at 0x40a270
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov dword [ebp - 8], ecx
mov ecx, 0x428e24
call fcn.00406b90
test eax, eax
je 0x40a2ae
mov ecx, 0x428e24
call fcn.00406b90
mov dword [ebp - 0xc], eax
push 1
push 0x421a2c
push str.TrialReminder
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
mov ecx, dword [ebp - 8]
movzx edx, byte [ecx + 0x158]
test edx, edx
je 0x40a46d
mov ecx, dword [ebp - 8]
add ecx, 0x154
call fcn.0040b1c0
push eax
mov ecx, dword [ebp - 8]
add ecx, 0x154
call fcn.0040b210
mov dword [ebp - 4], eax
push 0x421a34
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrA]
test eax, eax
je 0x40a30c
push 0x421a38
push 0x800
push 0x4266d8
call fcn.00408230
jmp 0x40a44b
push 0x421a3c
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrStrA]
test eax, eax
je 0x40a338
push 0x421a40
push 0x800
push 0x4266d8
call fcn.00408230
jmp 0x40a44b
push 0x421a44
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.SHLWAPI.dll_StrStrA]
test eax, eax
je 0x40a364
push 0x421a48
push 0x800
push 0x4266d8
call fcn.00408230
jmp 0x40a44b
push 0x421a4c
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrA]
test eax, eax
je 0x40a390
push 0x421a50
push 0x800
push 0x4266d8
call fcn.00408230
jmp 0x40a44b
push 0x421a54
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrStrA]
test eax, eax
je 0x40a3bc
push 0x421a58
push 0x800
push 0x4266d8
call fcn.00408230
jmp 0x40a44b
push 0x421a5c
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.SHLWAPI.dll_StrStrA]
test eax, eax
je 0x40a3e5
push 0x421a60
push 0x800
push 0x4266d8
call fcn.00408230
jmp 0x40a44b
push 0x421a64
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrA]
test eax, eax
je 0x40a40e
push 0x421a68
push 0x800
push 0x4266d8
call fcn.00408230
jmp 0x40a44b
push str.100_
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrStrA]
test eax, eax
je 0x40a437
push 0x421a74
push 0x800
push 0x4266d8
call fcn.00408230
jmp 0x40a44b
push 0x421a78
push 0x800
push 0x4266d8
call fcn.00408230
push 1
push 0
push 0
push 0x4266d8
push str.open
mov edx, dword [ebp - 8]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x40a50e
movzx ecx, byte [0x4266cc]
test ecx, ecx
je 0x40a4c4
mov ecx, dword [ebp - 8]
add ecx, 0x154
call fcn.0040b1c0
push eax
mov ecx, dword [ebp - 8]
add ecx, 0x154
call fcn.0040b210
push eax
push 0x800
push str.http:__www.paypal.com_cgi_bin_webscr_cmd_s_xclickhosted_button_idAT5PFAUV3C8KQon0Type_20of_20Licensecurrency_codeUSDos0
call fcn.00408230
push 1
push 0
push 0
push str.http:__www.paypal.com_cgi_bin_webscr_cmd_s_xclickhosted_button_idAT5PFAUV3C8KQon0Type_20of_20Licensecurrency_codeUSDos0
push str.open
mov edx, dword [ebp - 8]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x40a50e
mov ecx, dword [ebp - 8]
add ecx, 0x154
call fcn.0040b1c0
push eax
mov ecx, dword [ebp - 8]
add ecx, 0x154
call fcn.0040b210
push eax
push 0x800
push str.http:__www.paypal.com_cgi_bin_webscr_cmd_s_xclickhosted_button_idXS8J5WJZJ2ZGNon0Type_20of_20Licensecurrency_codeUSDos0
call fcn.00408230
push 1
push 0
push 0
push str.http:__www.paypal.com_cgi_bin_webscr_cmd_s_xclickhosted_button_idXS8J5WJZJ2ZGNon0Type_20of_20Licensecurrency_codeUSDos0
push str.open
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
mov ecx, dword [ebp - 8]
call fcn.0040a580
xor eax, eax
mov esp, ebp
pop ebp
ret 0x10