Function at 0x403390
Capabilities:
Create process on windows
Create thread
Execute command
Inject thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x407789
mov eax, dword fs:[0]
push eax
sub esp, 0x1a4
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
push eax
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x118], eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov esi, eax
mov dword [ebp - 0x194], edx
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__getpid]
imul eax, esi
push eax
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
add esp, 8
lea eax, [ebp - 0x168]
xor esi, esi
mov dword [ebp - 0x168], esi
push eax
push 8
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x403440
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x11c], 4
push eax
push 4
lea eax, [ebp - 0x118]
push eax
push 0x14
push dword [ebp - 0x168]
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
cmovne esi, dword [ebp - 0x118]
mov eax, dword [ebp - 0x168]
test eax, eax
je 0x403451
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
jne 0x403474
push str.____Run_as_admin__n
call fcn.00401020
push str.pause
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 8
xor eax, eax
jmp 0x4039d8
mov byte [ebp - 0x118], 0
lea ecx, [ebp - 0x18c]
push dword [ebp - 0x118]
call fcn.00406000
add esp, 4
lea ecx, [ebp - 0x18c]
mov dword [ebp - 4], 0
call fcn.00402540
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x178]
mov byte [ebp - 0x169], al
cmp ecx, 7
jbe 0x4034f6
mov edx, dword [ebp - 0x18c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4034e6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4034e6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004065f4
mov al, byte [ebp - 0x169]
add esp, 8
test al, al
jne 0x403504
push str.____ExitLag.dll_not_found_n
jmp 0x40345a
lea ecx, [ebp - 0x164]
call fcn.00402f70
mov dword [ebp - 4], 1
xorps xmm0, xmm0
movups xmmword [ebp - 0x14c], xmm0
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0xf
mov byte [ebp - 0x14c], 0
mov byte [ebp - 4], 2
push str.ExitTrial_by_femto1337_n1___generate_new_serial_n2___run_exitlag_n
call fcn.00401020
add esp, 4
nop dword [eax]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea edx, [ebp - 0x14c]
call fcn.00404ba0
mov edi, dword [ebp - 0x138]
lea eax, [ebp - 0x14c]
mov esi, dword [ebp - 0x14c]
cmp edi, 0xf
mov ecx, dword [ebp - 0x13c]
cmova eax, esi
cmp ecx, 1
jne 0x40383e
cmp byte [eax], 0x31
jne 0x40383e
push dword [ebp - 0x170]
mov byte [ebp - 4], 3
xorps xmm0, xmm0
mov eax, dword [ebp - 0x174]
or eax, ecx
mov dword [ebp - 0x124], 0
movups xmmword [ebp - 0x134], xmm0
push 0x10
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x120], 0xf
mov byte [ebp - 0x134], 0
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x118], eax
call fcn.00405130
xor esi, esi
mov dword [ebp - 0x124], esi
lea edi, [esi + 0x10]
nop dword [eax]
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
xor edx, edx
mov ecx, 0x24
div ecx
mov cl, byte [edx + str.0123456789abcdefghijklmnopqrstuvwxyz]
mov edx, dword [ebp - 0x120]
mov byte [ebp - 0x11c], cl
cmp esi, edx
jae 0x403638
lea eax, [esi + 1]
cmp edx, 0xf
mov dword [ebp - 0x124], eax
lea eax, [ebp - 0x134]
cmova eax, dword [ebp - 0x134]
mov byte [eax + esi], cl
mov byte [eax + esi + 1], 0
jmp 0x403650
push dword [ebp - 0x11c]
push dword [ebp - 0x170]
push ecx
lea ecx, [ebp - 0x134]
call fcn.004054e0
sub edi, 1
je 0x40365d
mov esi, dword [ebp - 0x124]
jmp 0x4035f0
lea ecx, [ebp - 0x1b0]
call fcn.00402db0
mov esi, eax
sub esp, 0x18
mov byte [ebp - 4], 4
lea eax, [ebp - 0x134]
mov dword [ebp - 0x194], esp
mov ecx, esp
push eax
call fcn.004045e0
mov byte [ebp - 0x190], 0
lea ecx, [ebp - 0x18c]
push dword [ebp - 0x190]
mov byte [ebp - 4], 5
call fcn.00406090
add esp, 4
mov byte [ebp - 4], 6
lea edx, [ebp - 0x18c]
cmp dword [ebp - 0x178], 7
mov ecx, dword [esi + 0x10]
cmova edx, dword [ebp - 0x18c]
mov eax, dword [esi + 0x14]
mov edi, dword [ebp - 0x17c]
sub eax, ecx
mov dword [ebp - 0x170], ecx
cmp edi, eax
ja 0x403717
cmp dword [esi + 0x14], 7
lea eax, [edi + ecx]
mov dword [esi + 0x10], eax
mov eax, esi
mov dword [ebp - 0x168], esi
jbe 0x4036f0
mov eax, dword [esi]
mov dword [ebp - 0x168], eax
lea ecx, [eax + ecx*2]
lea eax, [edi + edi]
push eax
push edx
push ecx
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x170]
add esp, 0xc
mov ecx, dword [ebp - 0x168]
add eax, edi
xor edx, edx
mov word [ecx + eax*2], dx
jmp 0x403727
push edi
push edx
push dword [ebp - 0x194]
mov ecx, esi
push edi
call fcn.00404ea0
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x178]
cmp ecx, 7
jbe 0x40376b
mov edx, dword [ebp - 0x18c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403761
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4034e0
push ecx
push edx
call fcn.004065f4
add esp, 8
sub esp, 0x18
mov dword [ebp - 0x17c], 0
xor eax, eax
mov dword [ebp - 0x178], 7
mov ecx, esp
mov word [ebp - 0x18c], ax
push esi
call fcn.00401b70
mov byte [ebp - 4], 4
call fcn.004027c0
mov byte [ebp - 4], 3
add esp, 0x30
mov ecx, dword [ebp - 0x19c]
cmp ecx, 7
jbe 0x4037e3
mov edx, dword [ebp - 0x1b0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4037d9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4034e0
push ecx
push edx
call fcn.004065f4
add esp, 8
push str.___generated_new_serial_n
call fcn.00401020
and dword [ebp - 0x174], 0xfffffffe
add esp, 4
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x120]
cmp ecx, 0xf
jbe 0x403550
mov edx, dword [ebp - 0x134]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40382f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4039c3
push ecx
push edx
call fcn.004065f4
add esp, 8
jmp 0x403550
cmp edi, 0xf
lea eax, [ebp - 0x14c]
cmova eax, esi
cmp ecx, 1
jne 0x403854
cmp byte [eax], 0x32
je 0x40385e
push str.____unknown_operation_n
jmp 0x403544
cmp dword [ebp - 0x150], 7
lea eax, [ebp - 0x164]
push 0xa
cmova eax, dword [ebp - 0x164]
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push str.___starting_exitlag_n
call fcn.00401020
add esp, 4
call fcn.004026e0
push 0xc8
mov dword [ebp - 0x168], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp - 0x168], 0
je 0x403893
push 0
lea eax, [ebp - 0x114]
push eax
push 0x104
push str.ExitLag.dll
call dword [sym.imp.KERNEL32.dll_GetFullPathNameA]
push dword [ebp - 0x168]
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push 4
push 0x3000
push 0x104
push 0
push eax
mov dword [ebp - 0x168], eax
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
push 0
push 0x104
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x170], eax
push ecx
push eax
push dword [ebp - 0x168]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x40394f
push 0
push 0
push dword [ebp - 0x170]
push dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0
push dword [ebp - 0x168]
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov eax, dword [ebp - 0x168]
test eax, eax
je 0x40394f
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.___injected_n
call fcn.00401020
push str.pause
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 8
cmp edi, 0xf
jbe 0x403991
inc edi
mov eax, esi
cmp edi, 0x1000
jb 0x403987
mov esi, dword [eax - 4]
add edi, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4039c3
push edi
push esi
call fcn.004065f4
add esp, 8
mov ecx, dword [ebp - 0x150]
cmp ecx, 7
jbe 0x4039d3
mov edx, dword [ebp - 0x164]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4039c9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4039c9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004065f4
add esp, 8
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004065b1
mov esp, ebp
pop ebp
ret