Function at 0x40a118
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff8
push ebx
mov dword [0x41a56e], 0
push 0
call fcn.00409e65
cmp dword [0x41c5e8], 0
jne 0x40a188
mov eax, dword [0x41a255]
cmp dword [0x41c5fc], eax
jbe 0x40a156
push dword [0x41c5fc]
call fcn.0040a4e1
jmp 0x40a4de
cmp dword [0x41c5fc], 0
jne 0x40a164
jmp 0x40a4de
mov dword [0x41a582], 0
mov dword [0x41a586], 0
push dword [0x41c5fc]
call fcn.0040372e
jmp 0x40a4de
cmp dword [0x41c5e8], 0x11
jne 0x40a1b5
mov dword [0x41a582], 0
mov dword [0x41a586], 0
push dword [0x41a398]
call fcn.0040372e
jmp 0x40a4de
cmp dword [0x41c5e8], 0xe
jne 0x40a1e2
mov dword [0x41a582], 0
mov dword [0x41a586], 0
push dword [0x41a3a4]
call fcn.0040372e
jmp 0x40a4de
cmp dword [0x41c5e8], 0xf
jne 0x40a1f7
push 1
call fcn.0040f4bf
jmp 0x40a4de
cmp dword [0x41c5e8], 0x10
jne 0x40a20c
push 0
call fcn.0040f4bf
jmp 0x40a4de
cmp dword [0x41c5e8], 1
jne 0x40a26f
mov ebx, dword [0x41c5fc]
shl ebx, 2
add ebx, dword [0x41a2ad]
mov eax, dword [ebx]
add eax, dword [0x41a2c1]
mov dword [ebp - 8], eax
push dword [0x41c600]
push 0x41d2ff
push dword [ebp - 8]
call fcn.00410720
mov ebx, dword [0x41c600]
mov byte [ebx + 0x41d2ff], 0
push 1
push 0
push 0
push 0x41d2ff
push str.open
push dword [0x41a004]
call sub.SHELL32.dll_ShellExecuteA
jmp 0x40a4de
cmp dword [0x41c5e8], 2
jne 0x40a282
call fcn.0040a982
jmp 0x40a4de
cmp dword [0x41c5e8], 3
jne 0x40a325
mov dword [0x41a5a6], 1
jmp 0x40a2a2
mov eax, dword [0x41c5fc]
mov dword [ebp - 4], 0x20
mul dword [ebp - 4]
mov dword [ebp - 4], eax
mov ebx, eax
push dword [ebx + 0x41c7d3]
push 0x40ac3d
push dword [0x41a004]
push 0x40a29b
push dword [section..data]
call sub.USER32.dll_DialogBoxParamA
cmp eax, 1
jne 0x40a301
mov ebx, dword [ebp - 4]
mov eax, dword [0x41a59a]
mov dword [ebx + 0x41c7d3], eax
wait
fninit
fild dword [0x41a59a]
fmul qword [ebx + 0x41c7cb]
fstp qword [ebx + 0x41c7d7]
jmp 0x40a311
cmp eax, 3
jne 0x40a311
push dword [0x41c5fc]
call fcn.0040af65
mov dword [0x41a5a6], 0
call fcn.004034bd
jmp 0x40a4de
cmp dword [0x41c5e8], 4
jne 0x40a342
mov dword [0x41a592], 0
call fcn.004034bd
jmp 0x40a4de
cmp dword [0x41c5e8], 5
jne 0x40a3dc
mov ebx, dword [0x41c5fc]
shl ebx, 2
add ebx, dword [0x41a2ad]
mov eax, dword [ebx]
add eax, dword [0x41a2c1]
mov dword [ebp - 8], eax
push dword [0x41c600]
push 0x41cdd3
push dword [ebp - 8]
call fcn.00410720
mov ebx, dword [0x41c600]
mov byte [ebx + 0x41cdd3], 0
push str._Productid
push 0x41cdd3
call fcn.004106d0
push 8
call fcn.0040a5ef
push str.number
push 0x41cdd3
call fcn.004106d0
push 0x14
call fcn.0040a5ef
jmp 0x40a3bc
push 1
push 0
push 0
push 0x41cdd3
push 0x40a3b7
push dword [0x41a004]
call sub.SHELL32.dll_ShellExecuteA
jmp 0x40a4de
cmp dword [0x41c5e8], 6
jne 0x40a402
cmp dword [0x41a5b2], 0
jbe 0x40a4de
dec dword [0x41a5b2]
call fcn.004034bd
jmp 0x40a4de
cmp dword [0x41c5e8], 7
jne 0x40a433
mov eax, dword [0x41a5b2]
inc eax
mul dword [0x41a269]
cmp eax, dword [0x41a592]
jae 0x40a4de
inc dword [0x41a5b2]
call fcn.004034bd
jmp 0x40a4de
cmp dword [0x41c5e8], 0xa
jne 0x40a458
push 0
push 0xf060
push 0x112
push dword [0x41a004]
call sub.USER32.dll_SendMessageA
jmp 0x40a4de
cmp dword [0x41c5e8], 0xb
jne 0x40a47a
push 0
push 0x6a6
push 0x111
push dword [0x41a004]
call sub.USER32.dll_SendMessageA
jmp 0x40a4de
cmp dword [0x41c5e8], 0xc
jne 0x40a49c
push 0
push 0x3f5
push 0x111
push dword [0x41a004]
call sub.USER32.dll_SendMessageA
jmp 0x40a4de
cmp dword [0x41c5e8], 0xd
jne 0x40a4be
push 0
push 0x6a7
push 0x111
push dword [0x41a004]
call sub.USER32.dll_SendMessageA
jmp 0x40a4de
cmp dword [0x41c5e8], 0x12
jne 0x40a4de
push 0
push 0x6ac
push 0x111
push dword [0x41a004]
call sub.USER32.dll_SendMessageA
pop ebx
leave
ret