Function at 0x4070b0
Capabilities:
Create process on windows

Disassembly:
mov eax, dword [esp + 8]
sub esp, 0x248
cmp eax, 0x9c58
push ebx
mov ebx, dword [esp + 0x250]
push ebp
push esi
push edi
jg 0x40745c
cmp eax, 0x9c58
je 0x407440
cmp eax, 0x439
jg 0x407381
je 0x40735a
add eax, 0xfffffc02
cmp eax, 0x3a
ja case.0x407472.40035
xor ecx, ecx
mov cl, byte [eax + 0x407880]
jmp dword [ecx*4 + 0x407868]
mov eax, dword [0x40dde0]
cmp eax, 3
je 0x40715e
cmp eax, 2
jne 0x407140
push ebx
call fcn.004067a0
mov edx, dword [0x40dc70]
add esp, 4
push 0
push 0x4010d0
push ebx
push 0x90
push edx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
jmp case.0x407472.40035
mov eax, dword [0x40dc70]
push 0
push 0x4010d0
push ebx
push 0x90
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamA]
jmp case.0x407472.40035
push 0x34
push 0x40d16c
push 0x40da04
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne case.0x407472.40035
mov ecx, dword [0x40dc70]
push 0
push 0x40b150
push ebx
push 0x8f
push ecx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
jmp case.0x407472.40035
cmp dword [0x40dde0], 3
je 0x4071d8
call fcn.00406ee0
cmp eax, 0xffffffff
je case.0x407472.40035
mov eax, dword [0x40dde0]
push ebx
cmp eax, 2
jne 0x4071cb
call fcn.004067a0
push ebx
call fcn.00408a30
jmp 0x40774c
call fcn.00408a30
add esp, 4
jmp case.0x407472.40035
push 0x34
push 0x40d16c
push 0x40d6d4
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne case.0x407472.40035
push 0
jmp 0x4076b7
call fcn.00406ee0
cmp eax, 0xffffffff
mov dword [esp + 0x18], eax
je 0x4072ec
mov ecx, dword [0x40dc74]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], ecx
mov esi, dword [ecx + 0x174]
test esi, esi
je 0x4072ff
mov ebp, dword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [esp + 0x10], eax
jne 0x407279
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x58]
push esi
rep stosd dword es:[edi], eax
lea eax, [esi + 0x100]
lea ecx, [esp + 0x5c]
push eax
push 0x40d9cc
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edx, [esp + 0x58]
push 0x24
push 0x40d668
push edx
push ebx
call ebp
cmp eax, 6
je 0x40729a
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x14], esi
mov esi, dword [esi + 0x174]
inc edx
test esi, esi
mov dword [esp + 0x10], edx
jne 0x407233
call fcn.00406120
jmp case.0x407472.40035
mov ecx, dword [esp + 0x14]
mov eax, dword [esi + 0x174]
push esi
mov dword [ecx + 0x174], eax
call dword [sym.imp.MSVCRT.dll_free]
mov edx, dword [esp + 0x1c]
add esp, 4
push 0
push edx
push 0x1008
push 0x3ee
push ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0x40d384
push 0x40d9c0
push ebx
call ebp
call fcn.00406120
jmp case.0x407472.40035
push 0x30
push 0x40d16c
push 0x40d9a4
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00406120
jmp case.0x407472.40035
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextA]
push 0x40dc08
push 0x431
push ebx
call esi
push 0x40dc08
push 0x432
push ebx
call esi
push 0x40dc08
jmp 0x4073c1
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextA]
push 0x40d9a0
push 0x431
push ebx
call esi
push 0x40d99c
push 0x432
push ebx
call esi
push 0x40d99c
jmp 0x4073c1
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextA]
push 0x40d99c
push 0x431
push ebx
call esi
push 0x40d9a0
push 0x432
push ebx
call esi
push 0x40d99c
jmp 0x4073c1
cmp eax, 0x9c47
jg 0x407419
je 0x4073fe
sub eax, 0x43a
je 0x4073d7
dec eax
jne case.0x407472.40035
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextA]
push 0x40d99c
push 0x431
push ebx
call esi
push 0x40d99c
push 0x432
push ebx
call esi
push 0x40d998
push 0x433
push ebx
call esi
push ebx
call fcn.00408830
add esp, 4
jmp case.0x407472.40035
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextA]
push 0x40d99c
push 0x431
push ebx
call esi
push 0x40d99c
push 0x432
push ebx
call esi
push 0x40d994
jmp 0x4073c1
mov eax, dword [0x40dc70]
push 0
push 0x40aa50
push ebx
push 0x73
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamA]
jmp case.0x407472.40035
cmp eax, 0x9c4c
jne case.0x407472.40035
mov ecx, dword [0x40dc70]
push 0
push section..text
push ebx
push 0x72
push ecx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
jmp case.0x407472.40035
mov edx, dword [0x40dc70]
push 0
push 0x40b640
push ebx
push 0x74
push edx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
jmp case.0x407472.40035
add eax, 0xffff63a7
cmp eax, 0x13
ja case.0x407472.40035
xor ecx, ecx
mov cl, byte [eax + 0x4078e8]
jmp dword [ecx*4 + 0x4078bc]
mov edi, dword [0x40dc74]
mov eax, dword [edi + 0x174]
test eax, eax
je 0x4074a5
mov ecx, dword [eax + 0x170]
test ecx, ecx
je 0x4074a1
mov edi, eax
mov eax, dword [eax + 0x174]
test eax, eax
jne 0x407489
jmp 0x4074a5
test eax, eax
jne 0x4074ca
mov edx, dword [esp + 0x25c]
push 0
push 0x40d16c
push 0x40d97c
push edx
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x248
ret
mov ebp, dword [sym.imp.USER32.dll_MessageBoxA]
push 0x24
push 0x40d668
push 0x40d964
push ebx
call ebp
cmp eax, 6
jne 0x40757c
push 0x24
push 0x40d668
push 0x40d640
push ebx
call ebp
cmp eax, 6
jne 0x407505
push ebx
call fcn.00407fd0
add esp, 4
mov eax, dword [0x40dc74]
mov esi, dword [eax + 0x174]
test esi, esi
je 0x40756d
mov ebp, dword [sym.imp.MSVCRT.dll_free]
mov eax, dword [esi + 0x170]
test eax, eax
jne 0x40755b
push 0
push esi
push ebx
call fcn.004050c0
add esp, 8
push eax
push 0x1008
push 0x3ee
push ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [esi + 0x174]
push esi
mov dword [edi + 0x174], ecx
call ebp
add esp, 4
mov edi, esi
mov esi, dword [esi + 0x174]
test esi, esi
jne 0x40751a
mov ebp, dword [sym.imp.USER32.dll_MessageBoxA]
push 0
push 0x40d384
push 0x40d94c
push ebx
call ebp
call fcn.00406120
jmp case.0x407472.40035
mov edx, dword [0x40dc70]
push 0
push 0x405d50
push ebx
push 0x98
push edx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
jmp case.0x407472.40035
push 0x24
push 0x40d668
push 0x40d934
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne case.0x407472.40035
push 0
push 0
push 0x1009
push 0x3ee
push ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x40dc74]
mov eax, dword [eax + 0x174]
test eax, eax
je 0x407614
mov esi, dword [eax + 0x174]
mov edi, dword [sym.imp.MSVCRT.dll_free]
test esi, esi
je 0x40760e
push eax
call edi
mov eax, esi
mov esi, dword [esi + 0x174]
add esp, 4
test esi, esi
jne 0x4075fc
push eax
call edi
add esp, 4
mov ecx, dword [0x40dc74]
mov dword [ecx + 0x174], 0
call fcn.00406120
jmp case.0x407472.40035
push ebx
call fcn.00406f40
add esp, 4
jmp case.0x407472.40035
push ebx
call fcn.00407900
add esp, 4
jmp case.0x407472.40035
mov edx, dword [0x40dc70]
push 0
push 0x404940
push ebx
push 0x8e
push edx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
jmp case.0x407472.40035
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x58]
push 0x40dc84
rep stosd dword es:[edi], eax
lea eax, [esp + 0x5c]
push 0x40d928
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x58]
push 1
push 0
push 0
push ecx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp case.0x407472.40035
mov eax, dword [0x40dde0]
push 0
cmp eax, 1
je 0x4076d1
mov edx, dword [0x40dc70]
push 0x40b150
push ebx
push 0x8f
push edx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
jmp case.0x407472.40035
push 0x40d16c
push 0x40d918
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp case.0x407472.40035
push ebx
call fcn.00408d10
mov ebp, eax
lea eax, [esp + 0x44]
push ebp
push eax
call fcn.00407ab0
mov ecx, 6
mov esi, eax
lea edi, [esp + 0x34]
add esp, 0xc
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
push ebp
push ecx
mov ecx, dword [esp + 0x34]
push edx
mov edx, dword [esp + 0x34]
push eax
push ecx
push edx
lea eax, [esp + 0x70]
push 0x40d8f4
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [esp + 0x78]
push ecx
call fcn.004082e0
add esp, 0x24
jmp case.0x407472.40035
push ebx
call fcn.00408d10
push eax
call fcn.004082e0
add esp, 8
mov eax, dword [esp + 0x268]
mov esi, dword [esp + 0x264]
cmp eax, 9
je 0x407774
cmp eax, 0x400
je 0x4077a6
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x248
ret
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x406
push ebx
call edi
cmp eax, esi
jne 0x4077ac
push 0
push 0
push 0x147
push esi
call dword [sym.imp.USER32.dll_SendMessageA]
push ebx
mov dword [0x40d6d0], eax
call fcn.00408830
add esp, 4
jmp 0x4077ac
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x431
push ebx
call edi
cmp esi, eax
je 0x4077d4
push 0x432
push ebx
call edi
cmp esi, eax
je 0x4077d4
push 0x433
push ebx
call edi
cmp esi, eax
jne 0x407854
mov esi, dword [sym.imp.USER32.dll_GetDlgItemTextA]
lea edx, [esp + 0x1c]
push 0xa
push edx
push 0x432
push ebx
call esi
mov edi, dword [sym.imp.MSVCRT.dll_atoi]
lea eax, [esp + 0x1c]
push eax
call edi
add esp, 4
cmp eax, 0x17
jle 0x40781a
push 0x40dc08
push 0x432
push ebx
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x248
ret
lea ecx, [esp + 0x1c]
push 0xa
push ecx
push 0x433
push ebx
call esi
lea edx, [esp + 0x1c]
push edx
call edi
add esp, 4
cmp eax, 0x3b
jle 0x407854
push 0x40dc08
push 0x433
push ebx
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x248
ret
push ebx
call fcn.00408830
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x248
ret