Function at 0x407239
Capabilities:
Contain obfuscated stackstrings
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x714
mov eax, dword [0x42c004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, ecx
call dword [sym.imp.KERNEL32.dll_GetACP]
lea ecx, [ebp - 0x100]
call fcn.004064dd
mov ebx, 0x431588
mov ecx, 0x426df0
push 0x1e
mov edx, ebx
call fcn.004032df
pop ecx
test eax, eax
je 0x40762a
call fcn.004038ef
test eax, eax
je 0x40762a
cmp byte [0x431588], 0
je 0x40762a
push 4
pop esi
push esi
lea eax, [ebp - 0x24]
push ebx
push eax
call fcn.0040c810
add esp, 0xc
lea eax, [ebp - 0x20]
mov ebx, 0x4298e4
push 1
push ebx
push eax
call fcn.0040c810
add esp, 0xc
lea eax, [ebp - 0x1f]
push esi
push 0x43158c
push eax
call fcn.0040c810
add esp, 0xc
lea eax, [ebp - 0x1b]
push 1
push ebx
push eax
call fcn.0040c810
add esp, 0xc
lea eax, [ebp - 0x1a]
push esi
push 0x431590
push eax
call fcn.0040c810
add esp, 0xc
lea eax, [ebp - 0x16]
push 1
push ebx
push eax
call fcn.0040c810
add esp, 0xc
lea eax, [ebp - 0x15]
push esi
push 0x431594
push eax
call fcn.0040c810
add esp, 0xc
mov byte [ebp - 0x11], 0
mov esi, 0x431f88
mov ecx, 0x427338
mov edx, esi
push 0x1e
call fcn.004032df
pop ecx
push 4
lea eax, [ebp - 0x44]
push esi
push eax
call fcn.0040c810
add esp, 0xc
lea eax, [ebp - 0x40]
push 1
push ebx
push eax
call fcn.0040c810
add esp, 0xc
lea eax, [ebp - 0x3f]
push 4
push 0x431f8c
push eax
call fcn.0040c810
add esp, 0xc
lea eax, [ebp - 0x3b]
push 1
push ebx
push eax
call fcn.0040c810
add esp, 0xc
lea eax, [ebp - 0x3a]
push 4
push 0x431f90
push eax
call fcn.0040c810
add esp, 0xc
lea eax, [ebp - 0x36]
push 1
push ebx
push eax
call fcn.0040c810
add esp, 0xc
lea eax, [ebp - 0x35]
push 4
push 0x431f94
push eax
call fcn.0040c810
add esp, 0xc
lea eax, [ebp - 0x64]
xor ebx, ebx
lea ecx, [ebp - 0x24]
mov edx, 0x4315a8
mov byte [ebp - 0x31], bl
mov byte [ebp - 0x20], bl
push eax
mov byte [ebp - 0x1b], bl
mov byte [ebp - 0x16], bl
call fcn.00403b7d
pop ecx
lea edx, [ebp - 0x44]
mov byte [ebp - 0x60], 0x2d
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x5b], 0x2d
mov byte [ebp - 0x56], 0x2d
mov byte [ebp - 0x51], bl
call fcn.00403f43
cwde
test eax, eax
je 0x4073ed
lea ecx, [ebp - 0x24]
call fcn.00407138
test eax, eax
je 0x40762a
call fcn.00407848
test ax, ax
jne 0x40762a
push 0x14
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x84]
push eax
call fcn.00408ff0
add esp, 0xc
mov byte [ebp - 0x80], 0x2d
lea eax, [ebp - 0x24]
mov byte [ebp - 0x7b], 0x2d
mov ebx, 0x426cae
mov byte [ebp - 0x76], 0x2d
mov byte [ebp - 0x20], 0x2d
push eax
push ebx
push ebx
lea eax, [ebp - 0x2f8]
mov dword [ebp - 0x1b], 0x2a2a2a2d
push str._s_r_n_r_n_s__s_r_n
push eax
mov dword [ebp - 0x17], 0x2a2a2d2a
mov word [ebp - 0x13], 0x2a2a
call fcn.00401474
add esp, 0x14
lea edx, [ebp - 0x70c]
lea ecx, [ebp - 0x44]
call fcn.00403ead
mov esi, eax
test esi, esi
js 0x40762a
mov eax, dword [ebp - 0x6f8]
test eax, eax
je 0x40762a
cmp eax, 0x7f1
jg 0x40762a
push dword [ebp - 0x700]
push dword [ebp - 0x6fc]
push eax
push esi
lea eax, [ebp - 0x4f0]
push ebx
push eax
call fcn.00401474
lea eax, [ebp - 0x4f0]
push eax
lea eax, [ebp - 0x2f8]
push eax
push str._s_r_n_s
push eax
call fcn.00401474
mov ebx, dword [sym.imp.USER32.dll_MessageBoxW]
add esp, 0x28
cmp word [0x42ea24], 0
jne 0x4075d4
push 0x4309f8
push 0x42ddc8
call fcn.0040c780
pop ecx
pop ecx
test eax, eax
je 0x4075d4
cmp esi, 0x14
jg 0x4075d4
push 1
mov edx, str.expiryRemind
call fcn.00403152
pop ecx
cmp esi, eax
je 0x4075d4
push dword [ebp - 0x700]
lea eax, [ebp - 0x6e8]
push dword [ebp - 0x6fc]
push dword [ebp - 0x6f8]
push esi
push 0x426cae
push eax
call fcn.00401474
add esp, 0x18
push 0x1043
push dword [ebp - 0x710]
push dword [ebp - 0x710]
push dword [0x439e7c]
call ebx
cmp eax, 6
jne 0x407563
push 0x4309f8
push 0x42ddc8
call fcn.0040c780
pop ecx
pop ecx
mov ecx, 0x517
jmp 0x40756d
cmp eax, 7
jne 0x40758c
mov ecx, 0x515
push 1
xor edi, edi
mov edx, 0x3b6
push edi
push edi
call fcn.00404436
push eax
push str.open
push edi
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x4075ad
cmp eax, 2
jne 0x4075ad
push 0x4309f8
push 0x42ddc8
call fcn.0040c780
pop ecx
pop ecx
test eax, eax
jne 0x4075ad
push ecx
call fcn.00407a5c
pop ecx
push esi
lea eax, [ebp - 0x98]
push 0x4272ac
push eax
call fcn.00401474
add esp, 0xc
lea eax, [ebp - 0x98]
mov edx, str.expiryRemind
push eax
call fcn.004030f3
pop ecx
test di, di
je 0x407625
cmp esi, 0x5a
jl 0x4075e5
mov eax, 0x1000
jmp 0x407604
push 0x426cae
lea eax, [ebp - 0x2f8]
push eax
push str._s_r_n_r_n_s
push eax
call fcn.00401474
add esp, 0x10
mov eax, 0x1103
push eax
push dword [ebp - 0x710]
push dword [ebp - 0x710]
push dword [0x439e7c]
call ebx
cmp eax, 6
jne 0x407625
push ecx
call fcn.00407a5c
pop ecx
lea eax, [esi + 1]
jmp 0x40762c
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0040827c
leave
ret