Function at 0x404369
Capabilities:
Create process on windows
Terminate process

Disassembly:
push 0x84
mov eax, 0x407e6e
call fcn.0040721d
xor eax, eax
lea ecx, [ebp - 0x3c]
mov word [0x40d7d0], ax
mov word [0x40d9da], ax
mov word [0x40dbe4], ax
call fcn.00402743
and dword [ebp - 4], 0
lea ecx, [ebp - 0x24]
push ecx
mov ecx, eax
call fcn.00401b68
lea edx, [ebp - 0x24]
mov byte [ebp - 4], 1
xor ecx, ecx
call fcn.00402929
lea ecx, [ebp - 0x24]
call fcn.00401cf8
or ebx, 0xffffffff
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], ebx
call fcn.00401cf8
mov edi, str.7z.exe
lea ecx, [ebp - 0x24]
push edi
call fcn.00402791
push 2
pop esi
lea edx, [ebp - 0x24]
mov dword [ebp - 4], esi
xor ecx, ecx
call fcn.00402929
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], ebx
call fcn.00401cf8
lea ecx, [ebp - 0x3c]
call fcn.00402743
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 3
push ecx
mov ecx, eax
call fcn.00401b68
xor ecx, ecx
mov byte [ebp - 4], 4
lea edx, [ebp - 0x24]
inc ecx
call fcn.00402929
lea ecx, [ebp - 0x24]
call fcn.00401cf8
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], ebx
call fcn.00401cf8
push str.Mesen.zip
lea ecx, [ebp - 0x24]
call fcn.00402791
xor ecx, ecx
mov dword [ebp - 4], 5
lea edx, [ebp - 0x24]
inc ecx
call fcn.00402929
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], ebx
call fcn.00401cf8
lea ecx, [ebp - 0x3c]
call fcn.00402743
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 6
push ecx
mov ecx, eax
call fcn.00401b68
lea edx, [ebp - 0x24]
mov byte [ebp - 4], 7
mov ecx, esi
call fcn.00402929
lea ecx, [ebp - 0x24]
call fcn.00401cf8
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], ebx
call fcn.00401cf8
push str.dotnet.exe
lea ecx, [ebp - 0x24]
call fcn.00402791
lea edx, [ebp - 0x24]
mov dword [ebp - 4], 8
mov ecx, esi
call fcn.00402929
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], ebx
call fcn.00401cf8
push str.https:__download.visualstudio.microsoft.com_download_pr_76e5dbb2_6ae3_4629_9a84_527f8feb709c_09002599b32d5d01dc3aa5dcdffcc984_windowsdesktop_runtime_8.0.6_win_x64.exe
lea ecx, [ebp - 0x24]
call fcn.00402791
mov edx, esi
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x24]
call fcn.00402ba0
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], ebx
call fcn.00401cf8
push str.https:__nightly.link_SourMesen_Mesen2_workflows_build_master_Mesen_20_28Windows_20__20net8.0_29.zip
lea ecx, [ebp - 0x24]
call fcn.00402791
xor edx, edx
mov dword [ebp - 4], 0xa
inc edx
lea ecx, [ebp - 0x24]
call fcn.00402ba0
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], ebx
call fcn.00401cf8
push edi
lea ecx, [ebp - 0x24]
call fcn.00402791
xor edx, edx
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x24]
call fcn.00402b20
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], ebx
call fcn.00401cf8
push 0x3c
pop ebx
push ebx
lea eax, [ebp - 0x90]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea esi, [ebp - 0x90]
mov eax, 0x418114
mov edi, eax
push 0xf
pop ecx
rep movsd dword es:[edi], dword [esi]
push eax
mov dword [0x418114], ebx
mov dword [0x418118], 0x40
mov dword [0x418130], 5
mov dword [0x418124], 0x40d7d0
mov dword [0x418128], 0x40a2c8
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov eax, dword [0x41814c]
mov ebx, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x4045a2
push 0xffffffffffffffff
push eax
call ebx
push 0x3c
lea eax, [ebp - 0x90]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea esi, [ebp - 0x90]
mov eax, 0x418114
mov edi, eax
push 0xf
pop ecx
rep movsd dword es:[edi], dword [esi]
mov esi, 0x40dbe4
mov dword [0x418114], 0x3c
push eax
mov dword [0x418118], 0x40
mov dword [0x418130], 5
mov dword [0x418124], esi
mov dword [0x418128], 0x40a2e8
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov eax, dword [0x41814c]
test eax, eax
je 0x40460f
push 0xffffffffffffffff
push eax
call ebx
push ecx
push 0x40d7d0
lea ecx, [ebp - 0x24]
call fcn.00405283
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 0xc
call fcn.00402640
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00401cf8
push ecx
push 0x40d9da
lea ecx, [ebp - 0x24]
call fcn.00405283
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 0xd
call fcn.00402640
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00401cf8
push ecx
push esi
lea ecx, [ebp - 0x54]
call fcn.00405283
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0xe
call fcn.00402640
lea ecx, [ebp - 0x54]
call fcn.00401cf8
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3