Function at 0x40d702
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff0
push ebx
mov dword [0x41fa73], 0
push 0
call fcn.0040d3e6
cmp dword [0x423c04], 0
jne 0x40d77f
mov eax, dword [0x41f716]
cmp dword [0x423c18], eax
jbe 0x40d74d
cmp dword [0x41fa87], 1
jne 0x40dbed
push dword [0x423c18]
call fcn.0040dbf0
jmp 0x40dbed
cmp dword [0x423c18], 0
jne 0x40d75b
jmp 0x40dbed
mov dword [0x41fa87], 0
mov dword [0x41fa8b], 0
push dword [0x423c18]
call fcn.00403f43
jmp 0x40dbed
cmp dword [0x423c04], 0x11
jne 0x40d7b6
mov dword [0x41fa87], 0
mov dword [0x41fa8b], 0
mov dword [0x420a4b], 1
push dword [0x41f869]
call fcn.00403f43
jmp 0x40dbed
cmp dword [0x423c04], 0xe
jne 0x40d7ed
mov dword [0x41fa87], 0
mov dword [0x41fa8b], 0
mov dword [0x420a4b], 1
push dword [0x41f875]
call fcn.00403f43
jmp 0x40dbed
cmp dword [0x423c04], 0xf
jne 0x40d802
push 1
call fcn.00416e8d
jmp 0x40dbed
cmp dword [0x423c04], 0x10
jne 0x40d817
push 0
call fcn.00416e8d
jmp 0x40dbed
cmp dword [0x423c04], 1
jne 0x40d87a
mov ebx, dword [0x423c18]
shl ebx, 2
add ebx, dword [0x41f76e]
mov eax, dword [ebx]
add eax, dword [0x41f782]
mov dword [ebp - 8], eax
push dword [0x423c1c]
push 0x424923
push dword [ebp - 8]
call fcn.0041b8c0
mov ebx, dword [0x423c1c]
mov byte [ebx + 0x424923], 0
push 1
push 0
push 0
push 0x424923
push str.open
push dword [0x41f048]
call sub.SHELL32.dll_ShellExecuteA
jmp 0x40dbed
cmp dword [0x423c04], 2
jne 0x40d88d
call fcn.0040e5df
jmp 0x40dbed
cmp dword [0x423c04], 3
jne 0x40d932
mov dword [0x41faab], 1
jmp 0x40d8ad
mov eax, dword [0x423c18]
mov dword [ebp - 4], 0x20
mul dword [ebp - 4]
mov dword [ebp - 4], eax
mov ebx, eax
push dword [ebx + 0x423dfb]
push 0x40e89a
push dword [0x41f048]
push 0x40d8a6
push dword [0x41f044]
call sub.USER32.dll_DialogBoxParamA
cmp eax, 1
jne 0x40d90c
mov ebx, dword [ebp - 4]
mov eax, dword [0x41fa9f]
mov dword [ebx + 0x423dfb], eax
wait
fninit
fild dword [0x41fa9f]
fmul qword [ebx + 0x423df3]
fstp qword [ebx + 0x423dff]
jmp 0x40d91c
cmp eax, 3
jne 0x40d91c
push dword [0x423c18]
call fcn.0040ebc2
mov dword [0x41faab], 0
push 1
call fcn.00403c7c
jmp 0x40dbed
cmp dword [0x423c04], 4
jne 0x40d951
mov dword [0x41fa97], 0
push 1
call fcn.00403c7c
jmp 0x40dbed
cmp dword [0x423c04], 5
jne 0x40d9eb
mov ebx, dword [0x423c18]
shl ebx, 2
add ebx, dword [0x41f76e]
mov eax, dword [ebx]
add eax, dword [0x41f782]
mov dword [ebp - 8], eax
push dword [0x423c1c]
push 0x4243fb
push dword [ebp - 8]
call fcn.0041b8c0
mov ebx, dword [0x423c1c]
mov byte [ebx + 0x4243fb], 0
push str._Productid
push 0x4243fb
call fcn.0041b870
push 8
call fcn.0040dd8d
push str.number
push 0x4243fb
call fcn.0041b870
push 0x14
call fcn.0040dd8d
jmp 0x40d9cb
push 1
push 0
push 0
push 0x4243fb
push 0x40d9c6
push dword [0x41f048]
call sub.SHELL32.dll_ShellExecuteA
jmp 0x40dbed
cmp dword [0x423c04], 6
jne 0x40da13
cmp dword [0x41fab7], 0
jbe 0x40dbed
dec dword [0x41fab7]
push 1
call fcn.00403c7c
jmp 0x40dbed
cmp dword [0x423c04], 7
jne 0x40da46
mov eax, dword [0x41fab7]
inc eax
mul dword [0x41f72a]
cmp eax, dword [0x41fa97]
jae 0x40dbed
inc dword [0x41fab7]
push 1
call fcn.00403c7c
jmp 0x40dbed
cmp dword [0x423c04], 0xa
jne 0x40da6b
push 0
push 0xf060
push 0x112
push dword [0x41f048]
call sub.USER32.dll_SendMessageA
jmp 0x40dbed
cmp dword [0x423c04], 0xb
jne 0x40da90
push 0
push 0x6a6
push 0x111
push dword [0x41f048]
call sub.USER32.dll_SendMessageA
jmp 0x40dbed
cmp dword [0x423c04], 0xc
jne 0x40dab5
push 0
push 0x3f5
push 0x111
push dword [0x41f048]
call sub.USER32.dll_SendMessageA
jmp 0x40dbed
cmp dword [0x423c04], 0xd
jne 0x40dada
push 0
push 0x6a7
push 0x111
push dword [0x41f048]
call sub.USER32.dll_SendMessageA
jmp 0x40dbed
cmp dword [0x423c04], 0x12
jne 0x40daff
push 0
push 0x6ac
push 0x111
push dword [0x41f048]
call sub.USER32.dll_SendMessageA
jmp 0x40dbed
cmp dword [0x423c04], 0x13
jne 0x40db24
push 0
push 0x3f8
push 0x111
push dword [0x41f048]
call sub.USER32.dll_SendMessageA
jmp 0x40dbed
cmp dword [0x423c04], 0x3e8
jne 0x40db55
push dword [0x423c20]
push 0x4120d8
push dword [0x41f048]
push 0x4209fa
push 0x4209c6
call fcn.00412520
jmp 0x40dbed
cmp dword [0x423c04], 0x1d
jne 0x40db77
push 0
push 0x6ad
push 0x111
push dword [0x41f048]
call sub.USER32.dll_SendMessageA
jmp 0x40dbed
cmp dword [0x423c04], 0x1e
jne 0x40db99
push 0
push 0x6ae
push 0x111
push dword [0x41f048]
call sub.USER32.dll_SendMessageA
jmp 0x40dbed
cmp dword [0x423c04], 0x1f
jne 0x40dbcd
lea eax, [ebp - 0x10]
push eax
call sub.USER32.dll_GetCursorPos
mov eax, dword [ebp - 0xc]
shl eax, 0x10
mov ebx, dword [ebp - 0x10]
mov ax, bx
push eax
push dword [0x41f048]
push 0x7b
push dword [0x41f048]
call sub.USER32.dll_SendMessageA
jmp 0x40dbed
cmp dword [0x423c04], 0x20
jne 0x40dbed
push 0
push 0x3f6
push 0x111
push dword [0x41f048]
call sub.USER32.dll_SendMessageA
pop ebx
leave
ret