Function at 0x40d3ed
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44547b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x884
push esi
push edi
mov dword [ebp - 0x880], ecx
lea ecx, [ebp - 0x614]
call fcn.00404460
mov dword [ebp - 4], 0
lea eax, [ebp - 0x614]
push eax
mov ecx, dword [ebp - 0x880]
add ecx, 0x85058
call fcn.004044d0
push ecx
mov ecx, esp
mov dword [ebp - 0x878], esp
push eax
call fcn.0043708e
mov dword [ebp - 0x884], eax
mov ecx, 0x45ea40
call fcn.00412c50
mov dword [ebp - 0x888], eax
mov ecx, dword [ebp - 0x888]
mov dword [ebp - 0x610], ecx
lea edx, [ebp - 0x20c]
push edx
mov ecx, 0x45ea40
call fcn.00411be0
test eax, eax
jne 0x40d4a7
push str.GetPortName___is_failed._maybe_printer_driver_not_installed
call fcn.00401000
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x614]
call fcn.00437020
jmp 0x40d7bf
lea eax, [ebp - 0x20c]
push eax
mov ecx, 0x45ea40
call fcn.00412a78
test eax, eax
je 0x40d6c3
cmp dword [ebp - 0x610], 0
je 0x40d6c3
mov dword [ebp - 0x76c], 0
mov ecx, 0xc
mov esi, 0x4568dc
lea edi, [ebp - 0x768]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x34
xor eax, eax
lea edi, [ebp - 0x738]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x668], 0
mov ecx, 0x10
xor eax, eax
lea edi, [ebp - 0x664]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x624], 0
xor ecx, ecx
mov dword [ebp - 0x620], ecx
mov dword [ebp - 0x61c], ecx
mov dword [ebp - 0x618], ecx
mov dword [ebp - 0x668], 0x44
lea edx, [ebp - 0x768]
push edx
mov ecx, dword [ebp - 0x880]
call fcn.0040d28a
lea ecx, [ebp - 0x614]
call fcn.004044d0
push eax
mov ecx, 0x45ea40
call fcn.0041322e
cmp eax, 0x17
jne 0x40d63c
lea eax, [ebp - 0x614]
push eax
lea ecx, [ebp - 0x870]
call fcn.00436d95
mov byte [ebp - 4], 1
push 0x25
lea ecx, [ebp - 0x614]
call fcn.004373c0
cmp eax, 0xffffffff
je 0x40d5f5
push 0x25
lea ecx, [ebp - 0x614]
call fcn.004373c0
mov dword [ebp - 0x874], eax
mov ecx, dword [ebp - 0x874]
push ecx
lea edx, [ebp - 0x87c]
push edx
lea ecx, [ebp - 0x614]
call fcn.00435a92
mov dword [ebp - 0x88c], eax
mov eax, dword [ebp - 0x88c]
mov dword [ebp - 0x890], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x890]
push ecx
lea ecx, [ebp - 0x870]
call fcn.00437159
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x87c]
call fcn.00437020
mov edx, dword [ebp - 0x870]
push edx
lea eax, [ebp - 0x768]
push eax
push str._s_http:____s__
lea ecx, [ebp - 0x86c]
push ecx
call fcn.00420bf4
add esp, 0x10
lea edx, [ebp - 0x86c]
push edx
push 0x45691c
call fcn.00401000
add esp, 8
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x870]
call fcn.00437020
jmp 0x40d672
mov eax, dword [ebp - 0x614]
push eax
lea ecx, [ebp - 0x768]
push ecx
push str._s_http:___s_
lea edx, [ebp - 0x86c]
push edx
call fcn.00420bf4
add esp, 0x10
lea eax, [ebp - 0x86c]
push eax
push str.Web_SyncTh._path___s
call fcn.00401000
add esp, 8
lea ecx, [ebp - 0x624]
push ecx
lea edx, [ebp - 0x668]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x86c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov dword [ebp - 0x76c], eax
cmp dword [ebp - 0x76c], 0
jne 0x40d6be
lea ecx, [ebp - 0x86c]
push ecx
push str.Not_Found_IExplore.exe__Path____s_
call fcn.00401000
add esp, 8
jmp 0x40d7ad
lea edx, [ebp - 0x20c]
push edx
mov ecx, 0x45ea40
call fcn.0041301a
test eax, eax
jne 0x40d6f1
lea eax, [ebp - 0x20c]
push eax
mov ecx, 0x45ea40
call fcn.00412f8a
test eax, eax
je 0x40d799
mov ecx, dword [ebp - 0x880]
add ecx, 0xc0
call dword [sym.imp.spiomgr.dll_public:_int___thiscall_IOEventManager::IsPrintJobRunning_void_]
test eax, eax
je 0x40d742
push 0x456980
push str.Printer_Setting_is_available_when_the_printer_is_idle
push str.Printer_is_busy
mov ecx, dword [ebp - 0x880]
call fcn.0040da19
push str.Maybe.._printer_name_is_changed
call fcn.00401000
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x614]
call fcn.00437020
jmp 0x40d7bf
push 0x4608fc
push 0x4633d0
push 0x4569ec
lea ecx, [ebp - 0x60c]
push ecx
call fcn.00420bf4
add esp, 0x10
lea edx, [ebp - 0x60c]
push edx
push str.PSU_Path____s_
call fcn.00401000
add esp, 8
push 5
lea eax, [ebp - 0x60c]
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
lea ecx, [ebp - 0x60c]
push ecx
push str.Run_RCP_from_Manager..._s_n
call fcn.00401000
add esp, 8
jmp 0x40d7ad
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x614]
call fcn.00437020
jmp 0x40d7bf
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x614]
call fcn.00437020
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret