Function at 0x40f008
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff994
mov eax, 0x45fa68
push ebx
push esi
push edi
call fcn.00452470
mov word [ebp - 0x358], 0x14
xor edx, edx
mov dword [ebp - 4], edx
lea edx, [ebp - 4]
inc dword [ebp - 0x34c]
xor eax, eax
call fcn.0044ec18
mov word [ebp - 0x358], 8
mov word [ebp - 0x358], 0x20
xor ecx, ecx
mov dword [ebp - 8], ecx
lea edx, [ebp - 8]
inc dword [ebp - 0x34c]
mov eax, dword [ebp - 4]
call fcn.00449c0c
mov word [ebp - 0x358], 8
mov word [ebp - 0x358], 0x2c
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0xc], ecx
mov edx, str..inf
inc dword [ebp - 0x34c]
mov word [ebp - 0x358], 8
mov word [ebp - 0x358], 0x38
mov dword [ebp - 0x158], eax
lea eax, [ebp - 0x184]
inc dword [ebp - 0x34c]
inc dword [ebp - 0x34c]
mov word [ebp - 0x358], 8
mov word [ebp - 0x358], 0x44
call fcn.0045b2b8
inc dword [ebp - 0x34c]
xor ecx, ecx
mov dword [ebp - 0x188], ecx
lea ecx, [ebp - 0x188]
inc dword [ebp - 0x34c]
lea edx, [ebp - 0x184]
lea eax, [ebp - 8]
call fcn.0045b384
lea eax, [ebp - 0x188]
mov eax, dword [eax]
lea ecx, [ebp - 0x164]
mov edx, 0x3f
call fcn.00449ae4
test eax, eax
mov edx, 2
sete al
and eax, 1
push eax
lea eax, [ebp - 0x188]
dec dword [ebp - 0x34c]
call fcn.0045b32c
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x184]
mov edx, 2
call fcn.0045b32c
pop ecx
test cl, cl
je 0x40f16d
lea edx, [ebp - 0x158]
lea eax, [ebp - 0xc]
call fcn.0045b35c
mov ecx, dword [ebp - 0xc]
test ecx, ecx
je 0x40f160
mov eax, dword [ebp - 0xc]
mov edx, dword [eax - 4]
jmp 0x40f162
xor edx, edx
add edx, 0xfffffffc
lea eax, [ebp - 0xc]
call fcn.0045b424
lea eax, [ebp - 0x164]
call fcn.00449b58
mov word [ebp - 0x358], 0x50
mov edx, 0x45f638
lea eax, [ebp - 0x18c]
call fcn.0045b2b8
inc dword [ebp - 0x34c]
xor ecx, ecx
mov dword [ebp - 0x190], ecx
lea ecx, [ebp - 0x190]
inc dword [ebp - 0x34c]
lea edx, [ebp - 0x18c]
lea eax, [ebp - 8]
call fcn.0045b384
lea eax, [ebp - 0x190]
xor edx, edx
mov dword [ebp - 0x194], edx
lea ecx, [ebp - 0x194]
inc dword [ebp - 0x34c]
lea edx, [ebp - 0xc]
call fcn.0045b384
lea eax, [ebp - 0x194]
push eax
mov edx, str..exe
lea eax, [ebp - 0x198]
call fcn.0045b2b8
inc dword [ebp - 0x34c]
xor eax, eax
mov dword [ebp - 0x168], eax
lea edx, [ebp - 0x198]
inc dword [ebp - 0x34c]
lea ecx, [ebp - 0x168]
pop eax
call fcn.0045b384
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x198]
mov edx, 2
call fcn.0045b32c
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x194]
mov edx, 2
call fcn.0045b32c
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x190]
mov edx, 2
call fcn.0045b32c
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x18c]
mov edx, 2
call fcn.0045b32c
mov word [ebp - 0x358], 8
lea ecx, [ebp - 0x46c]
push ecx
push str.Desktop
call fcn.004108dc
mov word [ebp - 0x358], 0x5c
add esp, 8
lea edx, [ebp - 0x168]
lea eax, [ebp - 0x16c]
call fcn.0045b2f0
inc dword [ebp - 0x34c]
lea edx, [ebp - 0x46c]
mov word [ebp - 0x358], 8
mov word [ebp - 0x358], 0x68
lea eax, [ebp - 0x170]
call fcn.0045b2b8
inc dword [ebp - 0x34c]
xor ecx, ecx
mov word [ebp - 0x358], 8
mov word [ebp - 0x358], 0x74
mov dword [ebp - 0x19c], ecx
lea ecx, [ebp - 0x19c]
inc dword [ebp - 0x34c]
lea edx, [ebp - 0xc]
mov eax, 0x45f647
call fcn.0045b444
lea eax, [ebp - 0x19c]
push eax
mov edx, 0x45f649
lea eax, [ebp - 0x1a0]
call fcn.0045b2b8
inc dword [ebp - 0x34c]
xor ecx, ecx
mov dword [ebp - 0x1a4], ecx
lea ecx, [ebp - 0x1a4]
inc dword [ebp - 0x34c]
lea edx, [ebp - 0x1a0]
pop eax
call fcn.0045b384
lea edx, [ebp - 0x1a4]
lea eax, [ebp - 0x170]
call fcn.0045b370
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x1a4]
mov edx, 2
call fcn.0045b32c
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x1a0]
mov edx, 2
call fcn.0045b32c
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x19c]
mov edx, 2
call fcn.0045b32c
mov word [ebp - 0x358], 0x80
mov edx, 0x45f64e
lea eax, [ebp - 0x1a8]
call fcn.0045b2b8
inc dword [ebp - 0x34c]
xor eax, eax
mov dword [ebp - 0x174], eax
lea eax, [ebp - 0xc]
inc dword [ebp - 0x34c]
lea edx, [ebp - 0x1a8]
lea ecx, [ebp - 0x174]
call fcn.0045b384
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x1a8]
mov edx, 2
call fcn.0045b32c
mov word [ebp - 0x358], 8
mov ecx, dword [ebp - 0x174]
test ecx, ecx
je 0x40f40b
mov eax, dword [ebp - 0x174]
jmp 0x40f410
mov eax, 0x45f65a
push eax
mov edx, dword [ebp - 0x16c]
test edx, edx
je 0x40f423
mov ecx, dword [ebp - 0x16c]
jmp 0x40f428
mov ecx, 0x45f659
push ecx
mov eax, dword [ebp - 0x170]
test eax, eax
je 0x40f43b
mov edx, dword [ebp - 0x170]
jmp 0x40f440
mov edx, 0x45f658
push edx
call fcn.004107cc
mov word [ebp - 0x358], 0x8c
add esp, 0xc
mov edx, str.mpeg4
lea eax, [ebp - 0x1ac]
call fcn.0045b2b8
inc dword [ebp - 0x34c]
xor eax, eax
mov dword [ebp - 0x178], eax
lea eax, [ebp - 8]
inc dword [ebp - 0x34c]
lea edx, [ebp - 0x1ac]
lea ecx, [ebp - 0x178]
call fcn.0045b384
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x1ac]
mov edx, 2
call fcn.0045b32c
mov word [ebp - 0x358], 8
mov word [ebp - 0x358], 0x98
mov edx, str.mpeg4xvid.inf
lea eax, [ebp - 0x1b0]
call fcn.0045b2b8
inc dword [ebp - 0x34c]
xor eax, eax
mov dword [ebp - 0x17c], eax
lea eax, [ebp - 8]
inc dword [ebp - 0x34c]
lea edx, [ebp - 0x1b0]
lea ecx, [ebp - 0x17c]
call fcn.0045b384
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x1b0]
mov edx, 2
call fcn.0045b32c
mov word [ebp - 0x358], 8
mov ecx, dword [ebp - 0x178]
test ecx, ecx
je 0x40f51b
mov eax, dword [ebp - 0x178]
jmp 0x40f520
mov eax, 0x45f672
push eax
call fcn.00453628
pop ecx
push 1
push 0
push 0
mov edx, dword [ebp - 0x17c]
test edx, edx
je 0x40f53f
mov ecx, dword [ebp - 0x17c]
jmp 0x40f544
mov ecx, 0x45f67b
push ecx
push 0x45f673
push 0
call sub.SHELL32.DLL_ShellExecuteA
lea eax, [ebp - 0x66c]
push eax
push str.Startup
call fcn.004108dc
add esp, 8
lea edx, [ebp - 0x168]
lea eax, [ebp - 0x16c]
call fcn.0045b35c
mov word [ebp - 0x358], 0xa4
lea edx, [ebp - 0x66c]
lea eax, [ebp - 0x1b4]
call fcn.0045b2b8
inc dword [ebp - 0x34c]
lea edx, [ebp - 0x1b4]
lea eax, [ebp - 0x170]
call fcn.0045b35c
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x1b4]
mov edx, 2
call fcn.0045b32c
mov word [ebp - 0x358], 0xb0
xor ecx, ecx
mov dword [ebp - 0x1b8], ecx
lea ecx, [ebp - 0x1b8]
inc dword [ebp - 0x34c]
lea edx, [ebp - 0xc]
mov eax, 0x45f684
call fcn.0045b444
lea eax, [ebp - 0x1b8]
push eax
mov edx, str..lnk
lea eax, [ebp - 0x1bc]
call fcn.0045b2b8
inc dword [ebp - 0x34c]
xor ecx, ecx
mov dword [ebp - 0x1c0], ecx
lea ecx, [ebp - 0x1c0]
inc dword [ebp - 0x34c]
lea edx, [ebp - 0x1bc]
pop eax
call fcn.0045b384
lea edx, [ebp - 0x1c0]
lea eax, [ebp - 0x170]
call fcn.0045b370
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x1c0]
mov edx, 2
call fcn.0045b32c
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x1bc]
mov edx, 2
call fcn.0045b32c
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x1b8]
mov edx, 2
call fcn.0045b32c
mov word [ebp - 0x358], 0xbc
mov edx, str._Netphone
lea eax, [ebp - 0x1c4]
call fcn.0045b2b8
inc dword [ebp - 0x34c]
xor eax, eax
mov dword [ebp - 0x1c8], eax
lea eax, [ebp - 0xc]
inc dword [ebp - 0x34c]
lea edx, [ebp - 0x1c4]
lea ecx, [ebp - 0x1c8]
call fcn.0045b384
lea edx, [ebp - 0x1c8]
lea eax, [ebp - 0x174]
call fcn.0045b35c
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x1c8]
mov edx, 2
call fcn.0045b32c
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x1c4]
mov edx, 2
call fcn.0045b32c
mov ecx, dword [ebp - 0x174]
test ecx, ecx
je 0x40f707
mov eax, dword [ebp - 0x174]
jmp 0x40f70c
mov eax, 0x45f697
push eax
mov edx, dword [ebp - 0x16c]
test edx, edx
je 0x40f71f
mov ecx, dword [ebp - 0x16c]
jmp 0x40f724
mov ecx, 0x45f696
push ecx
mov eax, dword [ebp - 0x170]
test eax, eax
je 0x40f737
mov edx, dword [ebp - 0x170]
jmp 0x40f73c
mov edx, 0x45f695
push edx
call fcn.004107cc
add esp, 0xc
mov eax, str.Softwareheadcall.comNetPhone
mov word [ebp - 0x358], 8
mov ecx, dword [ebp - 0x168]
push ecx
push str.install
push eax
push 0x80000002
call fcn.00410a30
mov word [ebp - 0x358], 0xc8
add esp, 0x10
lea edx, [ebp - 0x168]
lea eax, [ebp - 0x180]
call fcn.0045b2f0
inc dword [ebp - 0x34c]
mov word [ebp - 0x358], 8
mov ecx, dword [ebp - 0x180]
test ecx, ecx
je 0x40f7ab
mov eax, dword [ebp - 0x180]
mov edx, dword [eax - 4]
jmp 0x40f7ad
xor edx, edx
add edx, 0xfffffffc
lea eax, [ebp - 0x180]
call fcn.0045b424
mov word [ebp - 0x358], 0xd4
mov edx, str.X.OCX
lea eax, [ebp - 0x1cc]
call fcn.0045b2b8
inc dword [ebp - 0x34c]
lea edx, [ebp - 0x1cc]
lea eax, [ebp - 0x180]
call fcn.0045b370
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x1cc]
mov edx, 2
call fcn.0045b32c
mov ecx, dword [ebp - 0x180]
test ecx, ecx
je 0x40f813
mov eax, dword [ebp - 0x180]
jmp 0x40f818
mov eax, 0x45f6c5
push eax
call sub.KERNEL32.DLL_LoadLibraryA
mov ebx, eax
mov word [ebp - 0x358], 8
test ebx, ebx
je 0x40f844
push str.DllRegisterServer
push ebx
call sub.KERNEL32.DLL_GetProcAddress
test eax, eax
je 0x40f83e
call eax
push ebx
call sub.KERNEL32.DLL_FreeLibrary
mov dl, 1
mov eax, dword [0x43ffe0]
call fcn.0040fba4
mov word [ebp - 0x358], 0xe0
mov esi, eax
xor eax, eax
mov dword [ebp - 0x318], eax
lea eax, [ebp - 0x328]
inc dword [ebp - 0x34c]
inc dword [ebp - 0x34c]
mov edx, str.locale..oem
mov word [ebp - 0x358], 0xec
mov word [ebp - 0x358], 0xf8
call fcn.0045b2b8
inc dword [ebp - 0x34c]
xor ecx, ecx
mov dword [ebp - 0x32c], ecx
lea ecx, [ebp - 0x32c]
inc dword [ebp - 0x34c]
lea edx, [ebp - 0x328]
lea eax, [ebp - 8]
call fcn.0045b384
lea eax, [ebp - 0x32c]
mov eax, dword [eax]
lea ecx, [ebp - 0x324]
mov edx, 0x3f
call fcn.00449ae4
test eax, eax
mov edx, 2
sete al
and eax, 1
push eax
lea eax, [ebp - 0x32c]
dec dword [ebp - 0x34c]
call fcn.0045b32c
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x328]
mov edx, 2
call fcn.0045b32c
pop ecx
test cl, cl
je 0x40f9d9
mov word [ebp - 0x358], 0x104
mov edx, 0x45f6e6
lea eax, [ebp - 0x330]
call fcn.0045b2b8
inc dword [ebp - 0x34c]
xor eax, eax
mov dword [ebp - 0x334], eax
lea eax, [ebp - 8]
inc dword [ebp - 0x34c]
lea edx, [ebp - 0x330]
lea ecx, [ebp - 0x334]
call fcn.0045b384
lea eax, [ebp - 0x334]
xor edx, edx
mov dword [ebp - 0x338], edx
lea ecx, [ebp - 0x338]
inc dword [ebp - 0x34c]
lea edx, [ebp - 0x318]
call fcn.0045b384
mov eax, esi
lea edx, [ebp - 0x338]
mov ecx, dword [eax]
mov edx, dword [edx]
call dword [ecx + 0x34]
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x338]
mov edx, 2
call fcn.0045b32c
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x334]
mov edx, 2
call fcn.0045b32c
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x330]
mov edx, 2
call fcn.0045b32c
lea eax, [ebp - 0x324]
call fcn.00449b34
test eax, eax
je 0x40f90f
lea eax, [ebp - 0x324]
call fcn.00449b58
mov word [ebp - 0x358], 0xec
xor ebx, ebx
jmp 0x40fa3b
mov word [ebp - 0x358], 0x110
xor eax, eax
lea ecx, [ebp - 0x33c]
mov dword [ebp - 0x33c], eax
mov eax, esi
inc dword [ebp - 0x34c]
mov edx, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x33c]
mov eax, dword [eax]
call fcn.0045b200
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x33c]
mov edx, 2
call fcn.0045b32c
inc ebx
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jl 0x40f9f1
mov ebx, esi
mov dword [ebp - 0x344], ebx
test ebx, ebx
je 0x40fa7c
mov eax, dword [ebx]
mov dword [ebp - 0x340], eax
mov word [ebp - 0x358], 0x128
mov edx, 3
mov eax, dword [ebp - 0x344]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x358], 0x11c
dec dword [ebp - 0x34c]
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x318]
mov edx, 2
call fcn.0045b32c
mov word [ebp - 0x358], 8
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x180]
mov edx, 2
call fcn.0045b32c
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x17c]
mov edx, 2
call fcn.0045b32c
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x178]
mov edx, 2
call fcn.0045b32c
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x174]
mov edx, 2
call fcn.0045b32c
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x170]
mov edx, 2
call fcn.0045b32c
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x16c]
mov edx, 2
call fcn.0045b32c
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x168]
mov edx, 2
call fcn.0045b32c
dec dword [ebp - 0x34c]
dec dword [ebp - 0x34c]
lea eax, [ebp - 0x158]
mov edx, 2
call fcn.0045b32c
dec dword [ebp - 0x34c]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0045b32c
dec dword [ebp - 0x34c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0045b32c
dec dword [ebp - 0x34c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0045b32c
mov ecx, dword [ebp - 0x368]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret