Function at 0x406cb2
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
cmp dword [ebp + 0x1c], 0
push ebx
push esi
mov ebx, ecx
push edi
mov dword [esp + 0x10], ebx
jne 0x406f5b
mov esi, dword [ebp + 0x18]
mov edi, dword [ebp + 0xc]
push 0
push esi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push edi
push dword [ebp + 8]
call fcn.0040eded
test eax, eax
je 0x406cf2
xor eax, eax
inc eax
jmp 0x406f5d
lea eax, [ebx + 0xe8]
cmp edi, 0x201
jne 0x406d27
test eax, eax
je 0x406d0b
add eax, 0xfffffee0
jmp 0x406d0d
xor eax, eax
push 0
push 0xf012
push 0x112
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
and dword [esi], 0
jmp 0x406cea
push dword [ebp + 0x14]
lea ecx, [ebx + 0x60]
push dword [ebp + 0x10]
push edi
call fcn.00414ef8
test eax, eax
jne 0x406cea
mov ecx, dword [ebp + 0x14]
mov eax, dword [ebp + 8]
push esi
push dword [ebp + 0x10]
lea edx, [ebx + 0x78]
push edi
call fcn.00414c01
test eax, eax
jne 0x406cea
cmp edi, 0x469
jne 0x406d69
push dword [ebp + 0x10]
add ebx, 0xffffffc8
push ebx
call fcn.0040814d
mov dword [esi], eax
jmp 0x406cea
mov eax, dword [ebp + 8]
push esi
push dword [ebp + 0x14]
mov esi, edi
push dword [ebp + 0x10]
call fcn.004143da
add esp, 0xc
test eax, eax
jne 0x406cea
cmp edi, 0x473
jne 0x406d98
push dword [ebp + 0x14]
call fcn.00415d4f
pop ecx
jmp 0x406d9a
xor eax, eax
test eax, eax
jne 0x406cea
push esi
call fcn.00404c51
mov esi, dword [ebp + 0x18]
mov edi, esi
call fcn.004066ed
test eax, eax
jne 0x406cea
cmp dword [ebp + 0xc], 0x111
jne 0x406f04
mov eax, dword [ebp + 0x10]
mov ecx, 0x8007
cmp cx, ax
jne 0x406df0
shr eax, 0x10
xor ecx, ecx
cmp cx, ax
jne 0x406f04
push dword [ebx - 0x34]
call fcn.0040775a
pop ecx
jmp 0x406d22
mov ecx, 0x8017
cmp cx, ax
jne 0x406e15
shr eax, 0x10
xor ecx, ecx
cmp cx, ax
jne 0x406f04
lea edi, [ebx - 0x38]
call fcn.004096f5
jmp 0x406d22
mov ecx, 0x80a0
cmp cx, ax
jne 0x406e4b
shr eax, 0x10
xor ecx, ecx
cmp cx, ax
jne 0x406f04
push 1
xor edi, edi
push edi
push edi
push str.http:__www.iiapple.com
push str.open
push edi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [esi], edi
jmp 0x406cea
mov ecx, 0xbbf
cmp cx, ax
jne 0x406e6a
shr eax, 0x10
xor ecx, ecx
cmp cx, ax
jne 0x406f04
and dword [esi], ecx
jmp 0x406cea
mov ecx, 0x800b
cmp cx, ax
je 0x406e55
mov ecx, 0x80a6
cmp cx, ax
jne 0x406e96
shr eax, 0x10
xor ecx, ecx
cmp cx, ax
jne 0x406f04
add ebx, 0xffffffc8
push ebx
call fcn.00409881
jmp 0x406d65
mov ecx, 0x800c
cmp cx, ax
je 0x406e55
mov ecx, 0x80e0
cmp cx, ax
jne 0x406ec5
shr eax, 0x10
xor ecx, ecx
cmp cx, ax
jne 0x406f04
push 1
xor edi, edi
push edi
push edi
push str.http:__www.iiapple.com_feedback.html
push edi
jmp 0x406e3d
mov ecx, 0x80bd
cmp cx, ax
jne 0x406ee3
shr eax, 0x10
xor ecx, ecx
cmp cx, ax
jne 0x406f04
call fcn.00409755
jmp 0x406d65
mov ecx, 0x801a
cmp cx, ax
jne 0x406f04
shr eax, 0x10
xor ecx, ecx
cmp cx, ax
jne 0x406f04
lea edi, [ebx - 0x38]
call fcn.0040dd28
jmp 0x406d65
mov esi, dword [ebp + 0x14]
lea eax, [esp + 0x14]
lea ecx, [ebx - 0x38]
mov ebx, dword [ebp + 0x10]
push eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x18], 1
mov dword [esp + 0x10], ecx
call fcn.004111ce
cmp dword [esp + 0x14], 0
mov dword [edi], eax
jne 0x406cea
mov ecx, dword [ebp + 0xc]
cmp ecx, 0x203
jne 0x406f50
push dword [esp + 0xc]
mov eax, esi
call fcn.004083a5
mov dword [edi], eax
jmp 0x406cea
cmp ecx, 3
jne 0x406f66
mov dword [edi], 1
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
xor ebx, ebx
inc ebx
cmp ecx, ebx
jne 0x406f7c
mov ecx, dword [esp + 0xc]
call fcn.004085cc
mov dword [edi], eax
mov eax, ebx
jmp 0x406f5d
cmp ecx, 2
jne 0x406f8c
mov eax, dword [esp + 0xc]
call fcn.00409624
jmp 0x406f76
cmp ecx, 0x10
jne 0x406f9c
mov ecx, dword [esp + 0xc]
call fcn.0040843c
jmp 0x406f76
cmp ecx, 0x18
jne 0x406faf
push dword [ebp + 0x10]
push dword [esp + 0x10]
call fcn.00409545
jmp 0x406f76
cmp ecx, 5
jne 0x406fcb
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
push dword [eax - 0x34]
call dword [sym.imp.USER32.dll_GetClientRect]
and dword [edi], 0
jmp 0x406f78
cmp ecx, 0x46f
jne 0x406fe2
mov ecx, dword [ebp + 0x10]
mov eax, dword [esp + 0xc]
push esi
call fcn.004096be
jmp 0x406f76
cmp ecx, 0xbdb
je 0x406fd3
cmp ecx, 0x46
jne 0x407019
xor esi, esi
push esi
lea eax, [esp + 0x1c]
push eax
push esi
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
lea eax, [esp + 0x28]
push eax
mov eax, dword [esp + 0x14]
push dword [eax - 0x34]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov dword [edi], esi
jmp 0x406f78
cmp ecx, 0x113
jne 0x407032
mov edx, dword [ebp + 0x10]
mov esi, dword [esp + 0xc]
call fcn.004099ca
jmp 0x406f76
cmp ecx, 0x24
jne 0x407041
call fcn.00409aea
jmp 0x406f76
cmp ecx, 0x11
jne 0x40707b
push 0x53eee4
call fcn.004884a1
mov esi, dword [esp + 0x10]
pop ecx
call fcn.00409c30
push 0x53ef08
call fcn.004884a1
pop ecx
push 0
push 0
push 0x10
push dword [esi + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
mov dword [edi], ebx
jmp 0x406f78
cmp ecx, 0x4a
jne 0x40709e
mov ecx, esi
test ecx, ecx
jne 0x40708d
xor eax, eax
jmp 0x406f76
push dword [ebp + 0x10]
push dword [esp + 0x10]
call fcn.00409e8e
jmp 0x406f76
cmp ecx, 0x219
jne 0x4070b4
push esi
push dword [ebp + 0x10]
call fcn.0040a012
jmp 0x406f76
cmp ecx, 0x7e9
je 0x406fc6
cmp ecx, 0x467
jne 0x4070d9
mov eax, dword [ebp + 0x10]
mov ecx, dword [esp + 0xc]
call fcn.0040a087
jmp 0x406f76
cmp ecx, 0x4a3
je 0x406fc6
cmp ecx, 0x7ee
jne 0x4070fd
push dword [esp + 0xc]
mov ecx, esi
call fcn.00409cf7
jmp 0x406f76
cmp ecx, 0x475
jne 0x407117
mov ebx, dword [esp + 0xc]
push esi
push dword [ebp + 0x10]
call fcn.0040a2ad
jmp 0x406f49
cmp ecx, 0x4a2
jne 0x40712e
mov eax, dword [esp + 0xc]
push esi
call fcn.0040a24a
jmp 0x406f76
cmp ecx, 0x47f
jne 0x407144
push esi
push dword [ebp + 0x10]
call fcn.0040d977
jmp 0x406f76
cmp ecx, 0x47e
jne 0x40717a
mov eax, esi
push 0
push 0
lea esi, [esp + 0x1c]
mov dword [esp + 0x1c], eax
call fcn.0041d7e3
test eax, eax
je 0x406fc6
push ebx
push 0
call fcn.00406733
push eax
call fcn.0044ac85
jmp 0x406fc6
cmp ecx, 0x7f0
je 0x406fc6
cmp ecx, 0x7f7
jne 0x4071b5
mov eax, dword [esp + 0xc]
mov ecx, esi
cmp ecx, dword [eax + 0x124]
je 0x406fc6
push 0
push ecx
mov edi, eax
call fcn.0040d2b7
mov edi, dword [ebp + 0x18]
xor ebx, ebx
inc ebx
jmp 0x406fc6
cmp ecx, 0x7f8
jne 0x4071f0
call fcn.00404c51
mov esi, dword [eax + 4]
test esi, esi
je 0x406fc6
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x406fc6
push 0
push ebx
push 0x489
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x406fc6
cmp ecx, 0x805
jne 0x407209
push 6
mov ecx, dword [esp + 0x10]
call fcn.0041fba7
pop ecx
jmp 0x406fc6
cmp ecx, 0xbda
jne 0x40722d
call fcn.00404c51
xor esi, esi
push esi
push esi
push 0x49f
push dword [eax + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x407012
cmp ecx, 0xbdc
jne 0x407248
mov edi, dword [ebp + 0x10]
push esi
call fcn.0040d9bc
mov ecx, dword [ebp + 0x18]
mov dword [ecx], eax
jmp 0x406cea
cmp ecx, 0xc40
jne 0x40725f
push dword [ebp + 0x10]
mov ecx, esi
call fcn.0040e3ea
jmp 0x406f76
mov eax, 0x802
cmp ecx, eax
jne 0x407274
push esi
push dword [ebp + 0x10]
call fcn.00402a9a
pop ecx
jmp 0x407203
cmp ecx, 0x803
jne 0x40728f
mov esi, dword [esp + 0xc]
xor ecx, ecx
call fcn.0040ddfb
push ebx
mov ecx, esi
jmp 0x4071fe
cmp ecx, 0xbde
jne 0x4072a8
push esi
call fcn.0040753c
push eax
call fcn.00455e6c
jmp 0x406fc6
cmp ecx, 0xc31
jne 0x4072bf
push dword [ebp + 0x10]
mov ecx, esi
call fcn.0040dacf
jmp 0x406f76
cmp ecx, 0xc30
jne 0x4072d3
mov ecx, esi
call fcn.0040db3a
jmp 0x406f76
cmp ecx, 0xbe0
je 0x406fc6
cmp ecx, 0xbe1
jne 0x407302
cmp dword [ebp + 0x10], 0x5fa
push 0
sbb eax, eax
inc eax
push eax
push esi
call fcn.00452513
add esp, 0xc
jmp 0x406fc6
cmp ecx, 0x7eb
jne 0x40731c
push esi
push dword [ebp + 0x10]
mov esi, dword [esp + 0x14]
call fcn.0040db9f
jmp 0x406f76
cmp ecx, 0x15b3
jne 0x407348
cmp dword [ebp + 0x10], ebx
jne 0x406fc6
mov eax, dword [esp + 0x10]
push 0x105
push 0
push 0
push dword [eax - 0x34]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x406fc6
cmp ecx, 0xc33
jne 0x40735c
mov ebx, esi
call fcn.0040e2fc
jmp 0x406f49
cmp ecx, 0xc32
jne 0x407374
mov esi, dword [esp + 0xc]
xor ecx, ecx
call fcn.0040ddfb
jmp 0x406fc6
cmp ecx, 0xc98
jne 0x40738d
call fcn.0040753c
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x28], ecx
push ebx
jmp 0x4071fa
cmp ecx, 0xc99
jne 0x4073a8
mov ecx, dword [esp + 0xc]
mov eax, dword [ebp + 0x10]
mov dword [ecx + 0x924], eax
push ebx
jmp 0x4071fe
cmp ecx, 0xc9a
jne 0x4073c0
push dword [esp + 0xc]
mov ecx, esi
call fcn.0040e7e1
jmp 0x406f76
cmp ecx, 0xca4
jne 0x4073d2
call fcn.0040e85c
jmp 0x406f76
cmp ecx, 0xbe2
jne 0x4073e8
mov edi, dword [esp + 0xc]
call fcn.0040e8ae
jmp 0x40723e
cmp ecx, 0xc9b
jne 0x406f5b
mov edi, dword [esp + 0xc]
push esi
call fcn.0040e989
jmp 0x40723e