Function at 0x407380
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x424894
mov eax, dword fs:[0]
push eax
sub esp, 0x830
mov eax, dword [0x435014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
push 5
push 0
push 0
mov dword [ebp - 0x83c], 0
mov eax, dword [edi + 0x90]
push eax
push 0x4292b4
push 0
mov dword [ebp - 0x838], eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov esi, eax
cmp esi, 0x20
ja 0x4074d7
lea eax, [ebp - 0x420]
mov edx, str..htm
push eax
call fcn.004072f0
add esp, 4
test eax, eax
jne 0x4074d4
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0x420]
push str._shellopencommand
push eax
call ebx
lea eax, [ebp - 0x420]
push eax
mov edx, eax
call fcn.004072f0
add esp, 4
test eax, eax
jne 0x4074d4
lea eax, [ebp - 0x420]
push str.__1_
push eax
call dword [sym.imp.VCRUNTIME140.dll_wcsstr]
mov esi, eax
add esp, 8
test esi, esi
jne 0x40747a
lea eax, [ebp - 0x420]
push 0x429300
push eax
call dword [sym.imp.VCRUNTIME140.dll_strstr]
mov esi, eax
add esp, 8
test esi, esi
jne 0x40747a
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea esi, [ebp + eax*2 - 0x422]
jmp 0x40747f
xor eax, eax
mov word [esi], ax
push 0x427cdc
push esi
call ebx
push dword [ebp - 0x838]
push esi
call ebx
push 0x410
lea eax, [ebp - 0x830]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0x420]
push eax
push 0x429304
lea eax, [ebp - 0x830]
push 0x410
push eax
call fcn.00407790
add esp, 0x1c
lea eax, [ebp - 0x830]
push 5
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
mov esi, eax
cmp esi, 0x20
jg 0x4076b6
push 0x30
call dword [sym.imp.USER32.dll_MessageBeep]
lea ecx, [ebp - 0x834]
call dword [sym.imp.mfc140u.dll_Ordinal_296]
mov dword [ebp - 4], 0
cmp esi, 0x20
ja case.0x407508.1
movzx eax, byte [esi + 0x407724]
jmp dword [eax*4 + 0x4076ec]
push str.The_operating_system_is_out_nof_memory_or_resources.
lea ecx, [ebp - 0x834]
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::operator]
jmp 0x407631
push str.The_specified_file_was_not_found.
lea ecx, [ebp - 0x834]
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::operator]
jmp 0x407631
push str.The_specified_path_was_not_found.
lea ecx, [ebp - 0x834]
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::operator]
jmp 0x407631
push str.The_.EXE_file_is_invalid_n_non_Win32_.EXE_or_error_in_.EXE_image_.
lea ecx, [ebp - 0x834]
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::operator]
jmp 0x407631
push str.The_operating_system_denied_naccess_to_the_specified_file.
lea ecx, [ebp - 0x834]
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::operator]
jmp 0x407631
push str.The_filename_association_is_nincomplete_or_invalid.
lea ecx, [ebp - 0x834]
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::operator]
jmp 0x407631
push str.The_DDE_transaction_could_not_nbe_completed_because_other_DDE_transactions_nwere_being_processed.
lea ecx, [ebp - 0x834]
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::operator]
jmp 0x407631
push str.The_DDE_transaction_failed.
lea ecx, [ebp - 0x834]
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::operator]
jmp 0x407631
push str.The_DDE_transaction_could_not_nbe_completed_because_the_request_timed_out.
lea ecx, [ebp - 0x834]
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::operator]
jmp 0x407631
push str.The_specified_dynamic_link_library_was_not_found.
lea ecx, [ebp - 0x834]
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::operator]
jmp 0x407631
push str.There_is_no_application_associated_nwith_the_given_filename_extension.
lea ecx, [ebp - 0x834]
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::operator]
jmp 0x407631
push str.There_was_not_enough_memory_to_complete_the_operation.
lea ecx, [ebp - 0x834]
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::operator]
jmp 0x407631
push str.A_sharing_violation_occurred.
lea ecx, [ebp - 0x834]
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::operator]
jmp 0x407631
push esi
lea eax, [ebp - 0x834]
push str.Unknown_Error___d__occurred.
push eax
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__14]
add esp, 0xc
lea ecx, [ebp - 0x834]
mov byte [ebp - 4], 1
call dword [sym.imp.mfc140u.dll_Ordinal_5921]
push eax
lea ecx, [ebp - 0x838]
call dword [sym.imp.mfc140u.dll_Ordinal_285]
mov ecx, dword [ebp - 0x834]
mov esi, eax
lea eax, [ebp - 0x838]
mov dword [ebp - 0x83c], 1
push dword [ecx - 0xc]
push ecx
push 0x12
push str.Cant_open_link:_n_n
push eax
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::Concatenate]
add esp, 0x14
lea ecx, [ebp - 0x834]
push esi
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
lea ecx, [ebp - 0x838]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push 0
push 0x30
push dword [ebp - 0x834]
call dword [sym.imp.mfc140u.dll_AfxMessageBox]
lea ecx, [ebp - 0x834]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
jmp 0x4076cd
push 1
push 0
push dword [edi + 0x20]
mov dword [edi + 0x88], 1
call dword [sym.imp.USER32.dll_InvalidateRect]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00422eb6
mov esp, ebp
pop ebp
ret