Function at 0x4135bf
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff0
push ebx
call fcn.0040dc56
or eax, eax
je 0x4135d2
pop ebx
leave
ret
cmp dword [0x44c080], 0
jne 0x413637
mov eax, dword [0x43b99f]
cmp dword [0x44c094], eax
jbe 0x413605
cmp dword [0x43bd14], 1
jne 0x413b7e
push dword [0x44c094]
call fcn.00413b81
jmp 0x413b7e
cmp dword [0x44c094], 0
jne 0x413613
jmp 0x413b7e
mov dword [0x43bd14], 0
mov dword [0x43bd18], 0
push dword [0x44c094]
call fcn.00407822
jmp 0x413b7e
cmp dword [0x44c080], 0x11
jne 0x41366e
mov dword [0x43bd14], 0
mov dword [0x43bd18], 0
mov dword [0x43d077], 1
push dword [0x43baf6]
call fcn.00407822
jmp 0x413b7e
cmp dword [0x44c080], 0xe
jne 0x4136a5
mov dword [0x43bd14], 0
mov dword [0x43bd18], 0
mov dword [0x43d077], 1
push dword [0x43bb02]
call fcn.00407822
jmp 0x413b7e
cmp dword [0x44c080], 0xf
jne 0x4136ba
push 1
call fcn.00423be5
jmp 0x413b7e
cmp dword [0x44c080], 0x10
jne 0x4136cf
push 0
call fcn.00423be5
jmp 0x413b7e
cmp dword [0x44c080], 1
jne 0x413732
mov ebx, dword [0x44c094]
shl ebx, 2
add ebx, dword [0x43b9f7]
mov eax, dword [ebx]
add eax, dword [0x43ba0b]
mov dword [ebp - 8], eax
push dword [0x44c098]
push 0x44cd9f
push dword [ebp - 8]
call fcn.0042b270
mov ebx, dword [0x44c098]
mov byte [ebx + 0x44cd9f], 0
push dword [0x44d697]
push 0
push 0
push 0x44cd9f
push str.open
push 0
call sub.SHELL32.dll_ShellExecuteA
jmp 0x413b7e
cmp dword [0x44c080], 2
jne 0x413745
call fcn.0041493d
jmp 0x413b7e
cmp dword [0x44c080], 3
jne 0x4137ea
mov dword [0x43bd38], 1
jmp 0x413765
mov eax, dword [0x44c094]
mov dword [ebp - 4], 0x20
mul dword [ebp - 4]
mov dword [ebp - 4], eax
mov ebx, eax
push dword [ebx + 0x44c277]
push 0x414bf8
push dword [0x43b160]
push 0x41375e
push dword [0x43b15c]
call sub.USER32.dll_DialogBoxParamA
cmp eax, 1
jne 0x4137c4
mov ebx, dword [ebp - 4]
mov eax, dword [0x43bd2c]
mov dword [ebx + 0x44c277], eax
wait
fninit
fild dword [0x43bd2c]
fmul qword [ebx + 0x44c26f]
fstp qword [ebx + 0x44c27b]
jmp 0x4137d4
cmp eax, 3
jne 0x4137d4
push dword [0x44c094]
call fcn.00414f20
mov dword [0x43bd38], 0
push 1
call fcn.00407475
jmp 0x413b7e
cmp dword [0x44c080], 4
jne 0x413809
mov dword [0x43bd24], 0
push 1
call fcn.00407475
jmp 0x413b7e
cmp dword [0x44c080], 5
jne 0x4138a3
mov ebx, dword [0x44c094]
shl ebx, 2
add ebx, dword [0x43b9f7]
mov eax, dword [ebx]
add eax, dword [0x43ba0b]
mov dword [ebp - 8], eax
push dword [0x44c098]
push 0x44c877
push dword [ebp - 8]
call fcn.0042b270
mov ebx, dword [0x44c098]
mov byte [ebx + 0x44c877], 0
push str._Productid
push 0x44c877
call fcn.0042b220
push 8
call fcn.00413d2f
push str.number
push 0x44c877
call fcn.0042b220
push 0x14
call fcn.00413d2f
jmp 0x413883
push 1
push 0
push 0
push 0x44c877
push 0x41387e
push dword [0x43b160]
call sub.SHELL32.dll_ShellExecuteA
jmp 0x413b7e
cmp dword [0x44c080], 6
jne 0x4138cb
cmp dword [0x43bd44], 0
jbe 0x413b7e
dec dword [0x43bd44]
push 1
call fcn.00407475
jmp 0x413b7e
cmp dword [0x44c080], 7
jne 0x4138fe
mov eax, dword [0x43bd44]
inc eax
mul dword [0x43b9b3]
cmp eax, dword [0x43bd24]
jae 0x413b7e
inc dword [0x43bd44]
push 1
call fcn.00407475
jmp 0x413b7e
cmp dword [0x44c080], 0xa
jne 0x413923
push 0
push 0xf060
push 0x112
push dword [0x43b160]
call sub.USER32.dll_SendMessageA
jmp 0x413b7e
cmp dword [0x44c080], 0xb
jne 0x413948
push 0
push 0x6a6
push 0x111
push dword [0x43b160]
call sub.USER32.dll_SendMessageA
jmp 0x413b7e
cmp dword [0x44c080], 0xc
jne 0x41396d
push 0
push 0x3f5
push 0x111
push dword [0x43b160]
call sub.USER32.dll_SendMessageA
jmp 0x413b7e
cmp dword [0x44c080], 0xd
jne 0x413992
push 0
push 0x6a7
push 0x111
push dword [0x43b160]
call sub.USER32.dll_SendMessageA
jmp 0x413b7e
cmp dword [0x44c080], 0x12
jne 0x4139b7
push 0
push 0x6ac
push 0x111
push dword [0x43b160]
call sub.USER32.dll_SendMessageA
jmp 0x413b7e
cmp dword [0x44c080], 0x13
jne 0x4139dc
push 0
push 0x3f8
push 0x111
push dword [0x43b160]
call sub.USER32.dll_SendMessageA
jmp 0x413b7e
cmp dword [0x44c080], 0x3e8
jne 0x413a0f
push 0
push dword [0x44c09c]
push 0x41cf73
push dword [0x43b160]
push 0x43cf9d
push 0x43cf69
call fcn.0041d928
jmp 0x413b7e
cmp dword [0x44c080], 0x1d
jne 0x413a34
push 0
push 0x6ad
push 0x111
push dword [0x43b160]
call sub.USER32.dll_SendMessageA
jmp 0x413b7e
cmp dword [0x44c080], 0x1e
jne 0x413a59
push 0
push 0x6ae
push 0x111
push dword [0x43b160]
call sub.USER32.dll_SendMessageA
jmp 0x413b7e
cmp dword [0x44c080], 0x1f
jne 0x413a72
push dword [0x43b160]
call fcn.0040b2ae
jmp 0x413b7e
cmp dword [0x44c080], 0x20
jne 0x413a97
push 0
push 0x3f6
push 0x111
push dword [0x43b160]
call sub.USER32.dll_SendMessageA
jmp 0x413b7e
cmp dword [0x44c080], 0x21
jne 0x413ab2
push 2
push dword [0x44c094]
call fcn.0041f56b
jmp 0x413b7e
cmp dword [0x44c080], 0x22
jne 0x413acd
push 3
push dword [0x44c094]
call fcn.0041f56b
jmp 0x413b7e
cmp dword [0x44c080], 0x23
jne 0x413ae8
push 4
push dword [0x44c094]
call fcn.0041f56b
jmp 0x413b7e
cmp dword [0x44c080], 0x24
jne 0x413b39
call fcn.0040db99
cmp eax, 5
jbe 0x413b1a
cmp dword [0x43b987], 0
je 0x413b0f
push dword [0x43b98b]
pop dword [ebp - 4]
jmp 0x413b23
push dword [0x43b160]
pop dword [ebp - 4]
jmp 0x413b23
push dword [0x43b98b]
pop dword [ebp - 4]
push 0
push 0xf020
push 0x112
push dword [ebp - 4]
call sub.USER32.dll_SendMessageA
jmp 0x413b7e
cmp dword [0x44c080], 0x25
jne 0x413b5b
push 0
push 0x6b4
push 0x111
push dword [0x43b160]
call sub.USER32.dll_SendMessageA
jmp 0x413b7e
cmp dword [0x44c080], 0x26
jne 0x413b7e
cmp dword [0x44c094], 0
je 0x413b7e
push dword [0x44c09c]
push dword [0x44c094]
call fcn.00414615
pop ebx
leave
ret