Function at 0x401d90
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x200
push ebx
push esi
mov esi, dword [esp + 0x210]
push edi
cmp esi, 0x3ea
jne 0x401dc2
mov eax, dword [esp + 0x210]
push eax
call fcn.00401740
add esp, 4
pop edi
pop esi
pop ebx
add esp, 0x200
ret
cmp esi, 0x3ec
jne 0x401de9
mov ecx, dword [esp + 0x210]
push 0
push 0x3f3
push ecx
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
pop edi
pop esi
pop ebx
add esp, 0x200
ret
cmp esi, 0x3ef
jne 0x401e0f
mov edx, dword [esp + 0x210]
push 0
push 0
push 0x10
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
pop edi
pop esi
pop ebx
add esp, 0x200
ret
cmp esi, 0x3f6
jne 0x401e3f
mov eax, dword [esp + 0x210]
push 5
push 0
push 0
push str.commmonitor.chm
push str.open
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
pop edi
pop esi
pop ebx
add esp, 0x200
ret
cmp esi, 0x3f4
jne 0x401eb8
mov edi, dword [sym.imp.USER32.dll_GetMenu]
push 0
push esi
mov esi, dword [esp + 0x218]
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_GetMenuState]
push 3
push 0
push 0
cmp eax, 8
push 0
push 0
jne 0x401e94
push 0xfffffffffffffffe
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0
push 0x3f4
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_CheckMenuItem]
pop edi
pop esi
pop ebx
add esp, 0x200
ret
push 0xffffffffffffffff
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
push 8
push 0x3f4
push esi
call edi
push eax
call dword [sym.imp.USER32.dll_CheckMenuItem]
pop edi
pop esi
pop ebx
add esp, 0x200
ret
mov ebx, dword [esp + 0x210]
cmp esi, 0x3f7
je 0x401ed4
cmp esi, 0x3f8
je 0x401ed4
cmp esi, 0x68
jne 0x401f4a
mov ecx, 0x7f
xor eax, eax
lea edi, [esp + 0xd]
mov byte [esp + 0xc], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
cmp esi, 0x68
stosb byte es:[edi], al
jne 0x401f01
push 0x40
push 0x408110
push str._tSoftName_:_CommMonitor3.13
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x80
xor eax, eax
lea edi, [esp + 0xc]
cmp esi, 0x3f8
rep stosd dword es:[edi], eax
jne 0x401f22
lea ecx, [esp + 0xc]
push str.http:__software.jfyes.com_
push ecx
jmp 0x401f2c
lea edx, [esp + 0xc]
push str.http:__www.jfyes.com_
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 5
push 0
lea eax, [esp + 0x14]
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp esi, 0x3f5
jne 0x401fea
mov ecx, dword [str.CommMonitor.log]
mov edx, dword [0x4082b0]
mov eax, dword [0x4082b4]
mov dword [esp + 0xc], ecx
mov ecx, dword [0x4082b8]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
push 0x4082a8
lea edx, [esp + 0x10]
mov ecx, 0x3d
xor eax, eax
lea edi, [esp + 0x20]
push str.LogFile
push edx
push ebx
rep stosd dword es:[edi], eax
call fcn.00401cc0
add esp, 0x10
test eax, eax
je 0x401fea
mov eax, dword [0x40ad04]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
mov esi, eax
inc esi
push esi
call fcn.004023f8
add esp, 4
mov edi, eax
push esi
push edi
push 0x3f3
push ebx
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
test eax, eax
jle 0x401fe1
push eax
lea ecx, [esp + 0x10]
push edi
push ecx
call fcn.00401d40
add esp, 0xc
push edi
call fcn.0040238f
add esp, 4
pop edi
pop esi
pop ebx
add esp, 0x200
ret