Function at 0x4127c0
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x1a8
mov eax, dword [0x432fc8]
xor eax, esp
mov dword [esp + 0x1a4], eax
mov eax, dword [0x432024]
push ebx
push 0x82
lea ecx, [esp + 8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
call fcn.0040c400
push 0x83
lea ecx, [esp + 0xc]
call fcn.0040c400
lea ecx, [esp + 0x58]
call fcn.00407410
lea ecx, [esp + 0x58]
call fcn.004081d0
mov eax, dword [esp + 0xd4]
xor ebx, ebx
cmp eax, ebx
mov dword [0x4344e0], eax
jne 0x4128f2
lea ecx, [esp + 0x10]
call fcn.00403750
mov eax, dword [0x4344fc]
push 0x428460
push 0xcd
push eax
lea ecx, [esp + 0x1c]
call fcn.004037e0
test eax, eax
jne 0x4128aa
mov ecx, dword [esp + 8]
mov edx, dword [esp + 4]
push ebx
push ecx
push edx
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x434488
call fcn.0040c240
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [esp + 0x10]
call fcn.004037b0
lea ecx, [esp + 0x58]
call fcn.00407300
lea ecx, [esp + 8]
call fcn.004084a0
lea ecx, [esp + 4]
call fcn.004084a0
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x1a4]
xor ecx, esp
call fcn.00417168
add esp, 0x1a8
ret
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
push eax
push ecx
lea edx, [esp + 0xb4]
push edx
mov ecx, 0x4344c4
call fcn.004020f0
lea ecx, [esp + 0x10]
call fcn.004037b0
mov eax, dword [0x4344c8]
cmp eax, ebx
je 0x4128e5
mov ecx, dword [0x4344cc]
sub ecx, eax
sar ecx, 2
jne 0x41292f
mov edx, dword [esp + 8]
mov eax, dword [esp + 4]
push ebx
push edx
push eax
jmp 0x412913
lea eax, [esp + 0xac]
push eax
mov ecx, 0x4344c4
call fcn.00401dd0
test al, al
jne 0x4128cf
mov ecx, dword [esp + 8]
mov edx, dword [esp + 4]
push ebx
push ecx
push edx
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x434488
call fcn.0040c240
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x412877
cmp byte [esp + 0xa4], bl
push ebp
mov ebp, dword [esp + 0xc]
push esi
mov esi, dword [sym.imp.USER32.dll_MessageBoxA]
jne 0x41294e
push ebx
push ebp
push str.This_programe_was_created_by_Bullrushsoft_SWF_to_EXE_Converter._nPlease_register_the_product_to_remove_this_dialog.
push ebx
call esi
call fcn.00409a10
and eax, 0xffff0000
cmp eax, 0xa0000
jge 0x4129eb
mov ecx, dword [0x432024]
mov dword [esp + 0x14], ecx
push 0x81
lea ecx, [esp + 0x18]
call fcn.0040c400
cmp dword [esp + 0x8c], 0x10
mov eax, dword [esp + 0x78]
jae 0x41298d
lea eax, [esp + 0x78]
mov edx, dword [esp + 0x14]
push 0x40
push eax
push edx
push ebx
call esi
push 5
push ebx
push ebx
push str.http:__get.adobe.com_flashplayer_
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [esp + 0x14]
call fcn.004084a0
lea ecx, [esp + 0x60]
call fcn.00407300
lea ecx, [esp + 0x10]
call fcn.004084a0
lea ecx, [esp + 0xc]
call fcn.004084a0
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x1a4]
xor ecx, esp
call fcn.00417168
add esp, 0x1a8
ret
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x11c]
call fcn.00414240
push ebx
mov ecx, 0x4344c4
call fcn.00402f70
mov eax, dword [eax]
push 0xffffffffffffffff
add eax, 4
push ebx
push eax
lea ecx, [esp + 0x19c]
call fcn.004014e0
lea ecx, [esp + 0x28]
push ecx
mov ecx, 0x434488
mov dword [esp + 0x2c], vtable.WTL::CMessageLoop.0
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
call fcn.0040bc90
push ebx
push ebx
lea ecx, [esp + 0x120]
call fcn.00411600
test eax, eax
je 0x412a6d
mov edx, dword [esp + 0x11c]
push 0xa
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
lea ecx, [esp + 0x28]
call fcn.00409650
mov ecx, 0x434488
mov dword [esp + 0x14], eax
call fcn.0040c2a0
cmp dword [esp + 0xa4], ebx
je 0x412ab6
cmp dword [esp + 0xa8], 0x10
mov eax, dword [esp + 0x94]
jae 0x412aa5
lea eax, [esp + 0x94]
push 5
push ebx
push ebx
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov eax, dword [esp + 0xb0]
cdq
push edi
push edx
push eax
call fcn.00408e00
add esp, 8
lea ecx, [esp + 0x2c]
call fcn.00409b70
lea ecx, [esp + 0x11c]
call fcn.0040c090
lea ecx, [esp + 0x64]
call fcn.00407300
mov edi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea eax, [ebp - 0xc]
cmp eax, dword [0x432020]
je 0x412b0b
lea esi, [ebp - 0xc]
push esi
call edi
test eax, eax
jg 0x412b0b
push esi
call fcn.00417cf5
add esp, 4
mov eax, dword [esp + 0x10]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x432020]
je 0x412b2d
lea esi, [eax - 0xc]
push esi
call edi
test eax, eax
jg 0x412b2d
push esi
call fcn.00417cf5
add esp, 4
mov ecx, dword [esp + 0x1b4]
mov eax, dword [esp + 0x18]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00417168
add esp, 0x1a8
ret