Function at 0x427980
Capabilities:
Create process on windows

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x5d0cab
push eax
mov dword fs:[0], esp
sub esp, 0x710
lea eax, [esp + 2]
push ebx
push ebp
mov ebp, ecx
push esi
mov ebx, 1
push edi
lea esi, [ebp + 0x264]
push ebx
push eax
push str.ShowCompanyInfo
mov ecx, esi
call fcn.00497a00
lea ecx, [esp + 0x11]
push 0
push ecx
push str.ShowSigSignup
mov ecx, esi
call fcn.00497a00
call fcn.00481170
test eax, eax
jne 0x427ce8
mov al, byte [esp + 0x12]
test al, al
je 0x427ce8
lea ecx, [esp + 0x14]
call fcn.00498b10
test ebp, ebp
mov dword [esp + 0x728], 0
je 0x427a0a
lea eax, [ebp + 0x25c]
jmp 0x427a0c
xor eax, eax
push 0
lea edx, [esp + 0x18]
push eax
push edx
lea ecx, [esp + 0x16c]
call fcn.00415250
lea eax, [esp + 0x14]
lea ecx, [esp + 0x160]
push eax
mov byte [esp + 0x72c], bl
call fcn.00415550
lea ecx, [esp + 0x13]
push ebx
push ecx
push str.FirstCompanyInfoPrompt
mov ecx, esi
call fcn.00497a00
mov al, byte [esp + 0x13]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
test al, al
je 0x427abc
mov edx, dword [esp + 0x8c]
push edx
call edi
test eax, eax
je 0x427a9e
mov eax, dword [esp + 0x120]
push eax
call edi
test eax, eax
je 0x427a9e
mov ecx, dword [esp + 0x11c]
push ecx
call edi
test eax, eax
je 0x427a9e
mov edx, dword [esp + 0x110]
push edx
call edi
test eax, eax
je 0x427a9e
mov eax, dword [esp + 0x118]
push eax
call edi
test eax, eax
jne 0x427abc
push 0
push 0x40
push str.Welcome_to_RealLegal_E_Transcript_Manager._We_recommend_you_enter_your_company_information_in_the_following_screen__to_ensure_your_clients_receive_your_correct_contact_details._n_nEntering_or_changing_any_information_also_optionally_updates_all_your_E_Transcript_files_to_the_current_version_without_the_Demo_Copy_watermark.
call fcn.005ab679
push 0
push str.FirstCompanyInfoPrompt
mov ecx, esi
call fcn.00497d90
jmp 0x427b21
mov ecx, dword [esp + 0x8c]
push ecx
call edi
test eax, eax
je 0x427b09
mov edx, dword [esp + 0x120]
push edx
call edi
test eax, eax
je 0x427b09
mov eax, dword [esp + 0x11c]
push eax
call edi
test eax, eax
je 0x427b09
mov ecx, dword [esp + 0x110]
push ecx
call edi
test eax, eax
je 0x427b09
mov edx, dword [esp + 0x118]
push edx
call edi
test eax, eax
je 0x427b09
mov ebx, 2
jmp 0x427b28
push 0
push 0x141
push str.We_recommend_you_complete_the_following_screen_including_the_scheduling_page._nPress_Cancel_to_prevent_this_message_from_appearing_again.
call fcn.005ab679
mov ebx, eax
cmp ebx, 2
je 0x427b28
mov ecx, ebp
call fcn.0045c090
lea eax, [esp + 0x14]
lea ecx, [esp + 0x160]
push eax
call fcn.00415550
cmp ebx, 2
je 0x427b84
mov ecx, dword [esp + 0x8c]
push ecx
call edi
test eax, eax
je 0x427b92
mov edx, dword [esp + 0x120]
push edx
call edi
test eax, eax
je 0x427b92
mov eax, dword [esp + 0x11c]
push eax
call edi
test eax, eax
je 0x427b92
mov ecx, dword [esp + 0x110]
push ecx
call edi
test eax, eax
je 0x427b92
mov edx, dword [esp + 0x118]
push edx
call edi
test eax, eax
je 0x427b92
push 0
push str.ShowCompanyInfo
mov ecx, esi
call fcn.00497d90
lea ecx, [esp + 0x718]
mov byte [esp + 0x728], 0xf
call fcn.0059d7fd
lea ecx, [esp + 0x5c8]
mov byte [esp + 0x728], 0xe
call fcn.00498ea0
lea ecx, [esp + 0x588]
mov byte [esp + 0x728], 0xd
call fcn.005b4c60
lea ecx, [esp + 0x54c]
mov byte [esp + 0x728], 0xc
call fcn.005b4c60
lea ecx, [esp + 0x510]
mov byte [esp + 0x728], 0xb
call fcn.005b4fae
lea ecx, [esp + 0x4d4]
mov byte [esp + 0x728], 0xa
call fcn.005b4fae
lea ecx, [esp + 0x498]
mov byte [esp + 0x728], 9
call fcn.005b4c60
lea ecx, [esp + 0x45c]
mov byte [esp + 0x728], 8
call fcn.005b4fae
lea ecx, [esp + 0x420]
mov byte [esp + 0x728], 7
call fcn.005b4fae
lea ecx, [esp + 0x3e4]
mov byte [esp + 0x728], 6
call fcn.005b4fae
lea ecx, [esp + 0x3a8]
mov byte [esp + 0x728], 5
call fcn.005b4fae
lea ecx, [esp + 0x36c]
mov byte [esp + 0x728], 4
call fcn.005b4fae
lea ecx, [esp + 0x330]
mov byte [esp + 0x728], 3
call fcn.005b4c60
lea ecx, [esp + 0x2f4]
mov byte [esp + 0x728], 2
call fcn.005b4c60
lea ecx, [esp + 0x1bc]
mov byte [esp + 0x728], 0x10
call fcn.0059d7fd
lea ecx, [esp + 0x160]
mov byte [esp + 0x728], 0
call fcn.0059e09e
lea ecx, [esp + 0x14]
mov dword [esp + 0x728], 0xffffffff
call fcn.00498ea0
jmp 0x427d36
mov al, byte [esp + 0x11]
test al, al
je 0x427d36
push 0
push 0x23
push str.Do_you_want_to_sign_up_for_an_electronic_signing_account_with_RealLegal_now__r_nThis_will_require_an_Internet_connection._r_n_r_nPress_No_to_sign_up_later__or_Cancel_to_prevent_r_nthis_message_from_appearing_again.
call fcn.005ab679
mov edi, eax
cmp edi, 7
je 0x427d13
push 0
push str.ShowSigSignup
mov ecx, esi
call fcn.00497d90
cmp edi, 6
jne 0x427d36
push ebx
push 0x652af0
push 0
push str.http:__www.reallegal.com_esig.asp
push 0x65464c
call fcn.00481160
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [esp + 0x720]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x71c
ret