Function at 0x415b74
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff0
push ebx
call fcn.0040fecb
or eax, eax
je 0x415b87
pop ebx
leave
ret
cmp dword [0x452308], 0
jne 0x415bec
mov eax, dword [0x4419c0]
cmp dword [0x45231c], eax
jbe 0x415bba
cmp dword [0x441d35], 1
jne 0x416172
push dword [0x45231c]
call fcn.00416175
jmp 0x416172
cmp dword [0x45231c], 0
jne 0x415bc8
jmp 0x416172
mov dword [0x441d35], 0
mov dword [0x441d39], 0
push dword [0x45231c]
call fcn.00409845
jmp 0x416172
cmp dword [0x452308], 0x11
jne 0x415c23
mov dword [0x441d35], 0
mov dword [0x441d39], 0
mov dword [0x443098], 1
push dword [0x441b17]
call fcn.00409845
jmp 0x416172
cmp dword [0x452308], 0xe
jne 0x415c3c
push dword [0x441b23]
call fcn.00409845
jmp 0x416172
cmp dword [0x452308], 0xf
jne 0x415c51
push 1
call fcn.004265b4
jmp 0x416172
cmp dword [0x452308], 0x10
jne 0x415c66
push 0
call fcn.004265b4
jmp 0x416172
cmp dword [0x452308], 1
jne 0x415cc9
mov ebx, dword [0x45231c]
shl ebx, 2
add ebx, dword [0x441a18]
mov eax, dword [ebx]
add eax, dword [0x441a2c]
mov dword [ebp - 8], eax
push dword [0x452320]
push 0x453027
push dword [ebp - 8]
call fcn.0042e300
mov ebx, dword [0x452320]
mov byte [ebx + 0x453027], 0
push dword [0x45391f]
push 0
push 0
push 0x453027
push str.open
push 0
call sub.SHELL32.dll_ShellExecuteA
jmp 0x416172
cmp dword [0x452308], 2
jne 0x415cdc
call fcn.00417071
jmp 0x416172
cmp dword [0x452308], 3
jne 0x415d81
mov dword [0x441d59], 1
jmp 0x415cfc
mov eax, dword [0x45231c]
mov dword [ebp - 4], 0x20
mul dword [ebp - 4]
mov dword [ebp - 4], eax
mov ebx, eax
push dword [ebx + 0x4524ff]
push 0x41732c
push dword [0x441160]
push 0x415cf5
push dword [0x44115c]
call sub.USER32.dll_DialogBoxParamA
cmp eax, 1
jne 0x415d5b
mov ebx, dword [ebp - 4]
mov eax, dword [0x441d4d]
mov dword [ebx + 0x4524ff], eax
wait
fninit
fild dword [0x441d4d]
fmul qword [ebx + 0x4524f7]
fstp qword [ebx + 0x452503]
jmp 0x415d6b
cmp eax, 3
jne 0x415d6b
push dword [0x45231c]
call fcn.00417654
mov dword [0x441d59], 0
push 1
call fcn.00409472
jmp 0x416172
cmp dword [0x452308], 4
jne 0x415da0
mov dword [0x441d45], 0
push 1
call fcn.00409472
jmp 0x416172
cmp dword [0x452308], 5
jne 0x415e3a
mov ebx, dword [0x45231c]
shl ebx, 2
add ebx, dword [0x441a18]
mov eax, dword [ebx]
add eax, dword [0x441a2c]
mov dword [ebp - 8], eax
push dword [0x452320]
push 0x452aff
push dword [ebp - 8]
call fcn.0042e300
mov ebx, dword [0x452320]
mov byte [ebx + 0x452aff], 0
push str._Productid
push 0x452aff
call fcn.0042e2b0
push 8
call fcn.0041632a
push str.number
push 0x452aff
call fcn.0042e2b0
push 0x14
call fcn.0041632a
jmp 0x415e1a
push 1
push 0
push 0
push 0x452aff
push 0x415e15
push dword [0x441160]
call sub.SHELL32.dll_ShellExecuteA
jmp 0x416172
cmp dword [0x452308], 6
jne 0x415e62
cmp dword [0x441d65], 0
jbe 0x416172
dec dword [0x441d65]
push 1
call fcn.00409472
jmp 0x416172
cmp dword [0x452308], 7
jne 0x415e95
mov eax, dword [0x441d65]
inc eax
mul dword [0x4419d4]
cmp eax, dword [0x441d45]
jae 0x416172
inc dword [0x441d65]
push 1
call fcn.00409472
jmp 0x416172
cmp dword [0x452308], 0xa
jne 0x415eba
push 0
push 0xf060
push 0x112
push dword [0x441160]
call sub.USER32.dll_SendMessageA
jmp 0x416172
cmp dword [0x452308], 0xb
jne 0x415edf
push 0
push 0x6a6
push 0x111
push dword [0x441160]
call sub.USER32.dll_SendMessageA
jmp 0x416172
cmp dword [0x452308], 0xc
jne 0x415f04
push 0
push 0x3f5
push 0x111
push dword [0x441160]
call sub.USER32.dll_SendMessageA
jmp 0x416172
cmp dword [0x452308], 0xd
jne 0x415f29
push 0
push 0x6a7
push 0x111
push dword [0x441160]
call sub.USER32.dll_SendMessageA
jmp 0x416172
cmp dword [0x452308], 0x12
jne 0x415f4e
push 0
push 0x6ac
push 0x111
push dword [0x441160]
call sub.USER32.dll_SendMessageA
jmp 0x416172
cmp dword [0x452308], 0x13
jne 0x415f73
push 0
push 0x3f8
push 0x111
push dword [0x441160]
call sub.USER32.dll_SendMessageA
jmp 0x416172
cmp dword [0x452308], 0x3e8
jne 0x415fa6
push 0
push dword [0x452324]
push 0x41f8a3
push dword [0x441160]
push 0x442fbe
push 0x442f8a
call fcn.0042025e
jmp 0x416172
cmp dword [0x452308], 0x1d
jne 0x415fcb
push 0
push 0x6ad
push 0x111
push dword [0x441160]
call sub.USER32.dll_SendMessageA
jmp 0x416172
cmp dword [0x452308], 0x1e
jne 0x415ff0
push 0
push 0x6ae
push 0x111
push dword [0x441160]
call sub.USER32.dll_SendMessageA
jmp 0x416172
cmp dword [0x452308], 0x1f
jne 0x416009
push dword [0x441160]
call fcn.0040d325
jmp 0x416172
cmp dword [0x452308], 0x20
jne 0x41602e
push 0
push 0x3f6
push 0x111
push dword [0x441160]
call sub.USER32.dll_SendMessageA
jmp 0x416172
cmp dword [0x452308], 0x21
jne 0x416049
push 2
push dword [0x45231c]
call fcn.00421f04
jmp 0x416172
cmp dword [0x452308], 0x22
jne 0x416064
push 3
push dword [0x45231c]
call fcn.00421f04
jmp 0x416172
cmp dword [0x452308], 0x23
jne 0x41607f
push 4
push dword [0x45231c]
call fcn.00421f04
jmp 0x416172
cmp dword [0x452308], 0x24
jne 0x4160d3
call fcn.0040fdc5
cmp eax, 5
jbe 0x4160b1
cmp dword [0x4419a8], 0
je 0x4160a6
push dword [0x4419ac]
pop dword [ebp - 4]
jmp 0x4160ba
push dword [0x441160]
pop dword [ebp - 4]
jmp 0x4160ba
push dword [0x4419ac]
pop dword [ebp - 4]
push 0
push 0xf020
push 0x112
push dword [ebp - 4]
call sub.USER32.dll_SendMessageA
jmp 0x416172
cmp dword [0x452308], 0x25
jne 0x4160f5
push 0
push 0x6b4
push 0x111
push dword [0x441160]
call sub.USER32.dll_SendMessageA
jmp 0x416172
cmp dword [0x452308], 0x26
jne 0x41612a
cmp dword [0x45231c], 0
je 0x41611e
push dword [0x452324]
push dword [0x4432a8]
push dword [0x45231c]
call fcn.00416c13
mov dword [0x4432a8], 0
jmp 0x416172
cmp dword [0x452308], 0x2a
jne 0x416172
cmp dword [0x45231c], 0
je 0x416172
cmp dword [0x452324], 1
jne 0x41614e
mov dword [ebp - 4], 1
jmp 0x416155
mov dword [ebp - 4], 0
lea eax, [0x45232c]
mov ebx, dword [eax + 4]
mov eax, dword [eax]
push 1
push dword [ebp - 4]
push ebx
push eax
push dword [0x45231c]
call fcn.0040ffed
pop ebx
leave
ret