Function at 0x413754
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff0
push ebx
call fcn.0040dd29
or eax, eax
je 0x413767
pop ebx
leave
ret
cmp dword [0x44e080], 0
jne 0x4137cc
mov eax, dword [0x43c9a7]
cmp dword [0x44e094], eax
jbe 0x41379a
cmp dword [0x43cd1c], 1
jne 0x413d1d
push dword [0x44e094]
call fcn.00413d20
jmp 0x413d1d
cmp dword [0x44e094], 0
jne 0x4137a8
jmp 0x413d1d
mov dword [0x43cd1c], 0
mov dword [0x43cd20], 0
push dword [0x44e094]
call fcn.004078a9
jmp 0x413d1d
cmp dword [0x44e080], 0x11
jne 0x413803
mov dword [0x43cd1c], 0
mov dword [0x43cd20], 0
mov dword [0x43e07f], 1
push dword [0x43cafe]
call fcn.004078a9
jmp 0x413d1d
cmp dword [0x44e080], 0xe
jne 0x413844
mov dword [0x43cd1c], 0
mov dword [0x43cd20], 0
mov dword [0x43e07f], 1
mov dword [0x43c5e7], 1
push dword [0x43cb0a]
call fcn.004078a9
jmp 0x413d1d
cmp dword [0x44e080], 0xf
jne 0x413859
push 1
call fcn.00423dc9
jmp 0x413d1d
cmp dword [0x44e080], 0x10
jne 0x41386e
push 0
call fcn.00423dc9
jmp 0x413d1d
cmp dword [0x44e080], 1
jne 0x4138d1
mov ebx, dword [0x44e094]
shl ebx, 2
add ebx, dword [0x43c9ff]
mov eax, dword [ebx]
add eax, dword [0x43ca13]
mov dword [ebp - 8], eax
push dword [0x44e098]
push 0x44ed9f
push dword [ebp - 8]
call fcn.0042b450
mov ebx, dword [0x44e098]
mov byte [ebx + 0x44ed9f], 0
push dword [0x44f697]
push 0
push 0
push 0x44ed9f
push str.open
push 0
call sub.8485868788898A8B8C8D8E8F909192939495969798999A9B9C9D9E9FA0A1A2A3A4A5A6A7A8A9AAABACADAEAFB0B1B2B3B4B5B6B7B8B9BABBBCBDBEBFC0
jmp 0x413d1d
cmp dword [0x44e080], 2
jne 0x4138e4
call fcn.00414ae3
jmp 0x413d1d
cmp dword [0x44e080], 3
jne 0x413989
mov dword [0x43cd40], 1
jmp 0x413904
mov eax, dword [0x44e094]
mov dword [ebp - 4], 0x20
mul dword [ebp - 4]
mov dword [ebp - 4], eax
mov ebx, eax
push dword [ebx + 0x44e277]
push 0x414d9e
push dword [0x43c160]
push 0x4138fd
push dword [0x43c15c]
call fcn.0042872c
cmp eax, 1
jne 0x413963
mov ebx, dword [ebp - 4]
mov eax, dword [0x43cd34]
mov dword [ebx + 0x44e277], eax
wait
fninit
fild dword [0x43cd34]
fmul qword [ebx + 0x44e26f]
fstp qword [ebx + 0x44e27b]
jmp 0x413973
cmp eax, 3
jne 0x413973
push dword [0x44e094]
call fcn.004150c6
mov dword [0x43cd40], 0
push 1
call fcn.004074fc
jmp 0x413d1d
cmp dword [0x44e080], 4
jne 0x4139a8
mov dword [0x43cd2c], 0
push 1
call fcn.004074fc
jmp 0x413d1d
cmp dword [0x44e080], 5
jne 0x413a42
mov ebx, dword [0x44e094]
shl ebx, 2
add ebx, dword [0x43c9ff]
mov eax, dword [ebx]
add eax, dword [0x43ca13]
mov dword [ebp - 8], eax
push dword [0x44e098]
push 0x44e877
push dword [ebp - 8]
call fcn.0042b450
mov ebx, dword [0x44e098]
mov byte [ebx + 0x44e877], 0
push str._Productid
push 0x44e877
call fcn.0042b400
push 8
call fcn.00413ed5
push str.number
push 0x44e877
call fcn.0042b400
push 0x14
call fcn.00413ed5
jmp 0x413a22
push 1
push 0
push 0
push 0x44e877
push 0x413a1d
push dword [0x43c160]
call sub.8485868788898A8B8C8D8E8F909192939495969798999A9B9C9D9E9FA0A1A2A3A4A5A6A7A8A9AAABACADAEAFB0B1B2B3B4B5B6B7B8B9BABBBCBDBEBFC0
jmp 0x413d1d
cmp dword [0x44e080], 6
jne 0x413a6a
cmp dword [0x43cd4c], 0
jbe 0x413d1d
dec dword [0x43cd4c]
push 1
call fcn.004074fc
jmp 0x413d1d
cmp dword [0x44e080], 7
jne 0x413a9d
mov eax, dword [0x43cd4c]
inc eax
mul dword [0x43c9bb]
cmp eax, dword [0x43cd2c]
jae 0x413d1d
inc dword [0x43cd4c]
push 1
call fcn.004074fc
jmp 0x413d1d
cmp dword [0x44e080], 0xa
jne 0x413ac2
push 0
push 0xf060
push 0x112
push dword [0x43c160]
call fcn.00428924
jmp 0x413d1d
cmp dword [0x44e080], 0xb
jne 0x413ae7
push 0
push 0x6a6
push 0x111
push dword [0x43c160]
call fcn.00428924
jmp 0x413d1d
cmp dword [0x44e080], 0xc
jne 0x413b0c
push 0
push 0x3f5
push 0x111
push dword [0x43c160]
call fcn.00428924
jmp 0x413d1d
cmp dword [0x44e080], 0xd
jne 0x413b31
push 0
push 0x6a7
push 0x111
push dword [0x43c160]
call fcn.00428924
jmp 0x413d1d
cmp dword [0x44e080], 0x12
jne 0x413b56
push 0
push 0x6ac
push 0x111
push dword [0x43c160]
call fcn.00428924
jmp 0x413d1d
cmp dword [0x44e080], 0x13
jne 0x413b7b
push 0
push 0x3f8
push 0x111
push dword [0x43c160]
call fcn.00428924
jmp 0x413d1d
cmp dword [0x44e080], 0x3e8
jne 0x413bae
push 0
push dword [0x44e09c]
push 0x41d126
push dword [0x43c160]
push 0x43dfa5
push 0x43df71
call fcn.0041dadb
jmp 0x413d1d
cmp dword [0x44e080], 0x1d
jne 0x413bd3
push 0
push 0x6ad
push 0x111
push dword [0x43c160]
call fcn.00428924
jmp 0x413d1d
cmp dword [0x44e080], 0x1e
jne 0x413bf8
push 0
push 0x6ae
push 0x111
push dword [0x43c160]
call fcn.00428924
jmp 0x413d1d
cmp dword [0x44e080], 0x1f
jne 0x413c11
push dword [0x43c160]
call fcn.0040b335
jmp 0x413d1d
cmp dword [0x44e080], 0x20
jne 0x413c36
push 0
push 0x3f6
push 0x111
push dword [0x43c160]
call fcn.00428924
jmp 0x413d1d
cmp dword [0x44e080], 0x21
jne 0x413c51
push 2
push dword [0x44e094]
call fcn.0041f74f
jmp 0x413d1d
cmp dword [0x44e080], 0x22
jne 0x413c6c
push 3
push dword [0x44e094]
call fcn.0041f74f
jmp 0x413d1d
cmp dword [0x44e080], 0x23
jne 0x413c87
push 4
push dword [0x44e094]
call fcn.0041f74f
jmp 0x413d1d
cmp dword [0x44e080], 0x24
jne 0x413cd8
call fcn.0040dc29
cmp eax, 5
jbe 0x413cb9
cmp dword [0x43c98f], 0
je 0x413cae
push dword [0x43c993]
pop dword [ebp - 4]
jmp 0x413cc2
push dword [0x43c160]
pop dword [ebp - 4]
jmp 0x413cc2
push dword [0x43c993]
pop dword [ebp - 4]
push 0
push 0xf020
push 0x112
push dword [ebp - 4]
call fcn.00428924
jmp 0x413d1d
cmp dword [0x44e080], 0x25
jne 0x413cfa
push 0
push 0x6b4
push 0x111
push dword [0x43c160]
call fcn.00428924
jmp 0x413d1d
cmp dword [0x44e080], 0x26
jne 0x413d1d
cmp dword [0x44e094], 0
je 0x413d1d
push dword [0x44e09c]
push dword [0x44e094]
call fcn.004147bb
pop ebx
leave
ret