Function at 0x40df68
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff0
push ebx
mov dword [0x429b58], 0
push 0
call fcn.0040dc4c
cmp dword [0x435af4], 0
jne 0x40dfe5
mov eax, dword [0x4297fb]
cmp dword [0x435b08], eax
jbe 0x40dfb3
cmp dword [0x429b6c], 1
jne 0x40e480
push dword [0x435b08]
call fcn.0040e483
jmp 0x40e480
cmp dword [0x435b08], 0
jne 0x40dfc1
jmp 0x40e480
mov dword [0x429b6c], 0
mov dword [0x429b70], 0
push dword [0x435b08]
call fcn.00404038
jmp 0x40e480
cmp dword [0x435af4], 0x11
jne 0x40e01c
mov dword [0x429b6c], 0
mov dword [0x429b70], 0
mov dword [0x42ad47], 1
push dword [0x42994e]
call fcn.00404038
jmp 0x40e480
cmp dword [0x435af4], 0xe
jne 0x40e053
mov dword [0x429b6c], 0
mov dword [0x429b70], 0
mov dword [0x42ad47], 1
push dword [0x42995a]
call fcn.00404038
jmp 0x40e480
cmp dword [0x435af4], 0xf
jne 0x40e068
push 1
call fcn.00418e80
jmp 0x40e480
cmp dword [0x435af4], 0x10
jne 0x40e07d
push 0
call fcn.00418e80
jmp 0x40e480
cmp dword [0x435af4], 1
jne 0x40e0e0
mov ebx, dword [0x435b08]
shl ebx, 2
add ebx, dword [0x429853]
mov eax, dword [ebx]
add eax, dword [0x429867]
mov dword [ebp - 8], eax
push dword [0x435b0c]
push 0x436813
push dword [ebp - 8]
call fcn.0041df10
mov ebx, dword [0x435b0c]
mov byte [ebx + 0x436813], 0
push 1
push 0
push 0
push 0x436813
push str.open
push dword [0x429048]
call sub.SHELL32.dll_ShellExecuteA
jmp 0x40e480
cmp dword [0x435af4], 2
jne 0x40e0f3
call fcn.0040ee76
jmp 0x40e480
cmp dword [0x435af4], 3
jne 0x40e198
mov dword [0x429b90], 1
jmp 0x40e113
mov eax, dword [0x435b08]
mov dword [ebp - 4], 0x20
mul dword [ebp - 4]
mov dword [ebp - 4], eax
mov ebx, eax
push dword [ebx + 0x435ceb]
push 0x40f131
push dword [0x429048]
push 0x40e10c
push dword [0x429044]
call sub.USER32.dll_DialogBoxParamA
cmp eax, 1
jne 0x40e172
mov ebx, dword [ebp - 4]
mov eax, dword [0x429b84]
mov dword [ebx + 0x435ceb], eax
wait
fninit
fild dword [0x429b84]
fmul qword [ebx + 0x435ce3]
fstp qword [ebx + 0x435cef]
jmp 0x40e182
cmp eax, 3
jne 0x40e182
push dword [0x435b08]
call fcn.0040f459
mov dword [0x429b90], 0
push 1
call fcn.00403d6c
jmp 0x40e480
cmp dword [0x435af4], 4
jne 0x40e1b7
mov dword [0x429b7c], 0
push 1
call fcn.00403d6c
jmp 0x40e480
cmp dword [0x435af4], 5
jne 0x40e251
mov ebx, dword [0x435b08]
shl ebx, 2
add ebx, dword [0x429853]
mov eax, dword [ebx]
add eax, dword [0x429867]
mov dword [ebp - 8], eax
push dword [0x435b0c]
push 0x4362eb
push dword [ebp - 8]
call fcn.0041df10
mov ebx, dword [0x435b0c]
mov byte [ebx + 0x4362eb], 0
push str._Productid
push 0x4362eb
call fcn.0041dec0
push 8
call fcn.0040e620
push str.number
push 0x4362eb
call fcn.0041dec0
push 0x14
call fcn.0040e620
jmp 0x40e231
push 1
push 0
push 0
push 0x4362eb
push 0x40e22c
push dword [0x429048]
call sub.SHELL32.dll_ShellExecuteA
jmp 0x40e480
cmp dword [0x435af4], 6
jne 0x40e279
cmp dword [0x429b9c], 0
jbe 0x40e480
dec dword [0x429b9c]
push 1
call fcn.00403d6c
jmp 0x40e480
cmp dword [0x435af4], 7
jne 0x40e2ac
mov eax, dword [0x429b9c]
inc eax
mul dword [0x42980f]
cmp eax, dword [0x429b7c]
jae 0x40e480
inc dword [0x429b9c]
push 1
call fcn.00403d6c
jmp 0x40e480
cmp dword [0x435af4], 0xa
jne 0x40e2d1
push 0
push 0xf060
push 0x112
push dword [0x429048]
call sub.USER32.dll_SendMessageA
jmp 0x40e480
cmp dword [0x435af4], 0xb
jne 0x40e2f6
push 0
push 0x6a6
push 0x111
push dword [0x429048]
call sub.USER32.dll_SendMessageA
jmp 0x40e480
cmp dword [0x435af4], 0xc
jne 0x40e31b
push 0
push 0x3f5
push 0x111
push dword [0x429048]
call sub.USER32.dll_SendMessageA
jmp 0x40e480
cmp dword [0x435af4], 0xd
jne 0x40e340
push 0
push 0x6a7
push 0x111
push dword [0x429048]
call sub.USER32.dll_SendMessageA
jmp 0x40e480
cmp dword [0x435af4], 0x12
jne 0x40e365
push 0
push 0x6ac
push 0x111
push dword [0x429048]
call sub.USER32.dll_SendMessageA
jmp 0x40e480
cmp dword [0x435af4], 0x13
jne 0x40e38a
push 0
push 0x3f8
push 0x111
push dword [0x429048]
call sub.USER32.dll_SendMessageA
jmp 0x40e480
cmp dword [0x435af4], 0x3e8
jne 0x40e3bb
push dword [0x435b10]
push 0x412e3c
push dword [0x429048]
push 0x42ac79
push 0x42ac45
call fcn.00413361
jmp 0x40e480
cmp dword [0x435af4], 0x1d
jne 0x40e3e0
push 0
push 0x6ad
push 0x111
push dword [0x429048]
call sub.USER32.dll_SendMessageA
jmp 0x40e480
cmp dword [0x435af4], 0x1e
jne 0x40e402
push 0
push 0x6ae
push 0x111
push dword [0x429048]
call sub.USER32.dll_SendMessageA
jmp 0x40e480
cmp dword [0x435af4], 0x1f
jne 0x40e418
push dword [0x429048]
call fcn.00407663
jmp 0x40e480
cmp dword [0x435af4], 0x20
jne 0x40e43a
push 0
push 0x3f6
push 0x111
push dword [0x429048]
call sub.USER32.dll_SendMessageA
jmp 0x40e480
cmp dword [0x435af4], 0x21
jne 0x40e452
push 2
push dword [0x435b08]
call fcn.00414eab
jmp 0x40e480
cmp dword [0x435af4], 0x22
jne 0x40e46a
push 3
push dword [0x435b08]
call fcn.00414eab
jmp 0x40e480
cmp dword [0x435af4], 0x23
jne 0x40e480
push 4
push dword [0x435b08]
call fcn.00414eab
pop ebx
leave
ret