Function at 0x423520
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x6c
mov eax, dword [0x50c080]
xor eax, esp
mov dword [esp + 0x68], eax
cmp dword [ebp + 0x1c], 0
push ebx
push esi
mov esi, ecx
mov ecx, dword [ebp + 0x14]
push edi
mov edi, dword [ebp + 0x18]
mov dword [esp + 0x10], ecx
jne 0x423636
mov ebx, dword [ebp + 0xc]
cmp ebx, 0x110
jne 0x42364c
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 1
push eax
push ecx
push dword [ebp + 0x10]
mov ecx, esi
push ebx
call fcn.00423da0
mov dword [edi], eax
cmp dword [esp + 0x14], 0
jne 0x4237d7
mov eax, dword [ebp + 0x10]
movzx eax, ax
cmp ebx, 0x14
jne 0x423717
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
xorps xmm0, xmm0
mov dword [esp + 0x14], 1
push ecx
push eax
movlpd qword [esp + 0x28], xmm0
movlpd qword [esp + 0x30], xmm0
movlpd qword [esp + 0x38], xmm0
movlpd qword [esp + 0x40], xmm0
movlpd qword [esp + 0x48], xmm0
movlpd qword [esp + 0x50], xmm0
movlpd qword [esp + 0x58], xmm0
movlpd qword [esp + 0x60], xmm0
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], eax
call dword [sym.imp.USER32.dll_BeginPaint]
mov dword [esp + 0x18], eax
xorps xmm0, xmm0
lea eax, [esp + 0x64]
push eax
push dword [esi + 4]
movups xmmword [esp + 0x6c], xmm0
call dword [sym.imp.USER32.dll_GetClientRect]
push dword [esi + 0x108]
lea eax, [esp + 0x68]
push eax
push dword [esp + 0x20]
call dword [sym.imp.USER32.dll_FillRect]
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x20]
call dword [sym.imp.USER32.dll_EndPaint]
mov dword [edi], 1
cmp dword [esp + 0x14], 0
jne 0x4237d7
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.00490c46
mov esp, ebp
pop ebp
ret 0x18
cmp ebx, 0x10
jne 0x42366f
push 2
push dword [esi + 4]
mov dword [esp + 0x1c], 1
call dword [sym.imp.USER32.dll_EndDialog]
mov dword [edi], 0
jmp 0x423577
cmp ebx, 0x138
jne 0x4236a6
mov edx, 1
mov dword [esp + 0x14], edx
cmp ecx, dword [esi + 0x50]
jne 0x423697
push 0x191514
push dword [ebp + 0x10]
call dword [sym.imp.GDI32.dll_SetTextColor]
mov edx, dword [esp + 0x14]
mov eax, dword [esi + 0x108]
test edx, edx
mov dword [edi], eax
jmp 0x42357c
cmp ebx, 0x2b
jne 0x423582
movzx eax, word [ebp + 0x10]
mov edx, eax
mov dword [esp + 0x14], 1
mov dword [esp + 0xc], edx
sub eax, 0x642
je 0x4236f0
sub eax, 1
je 0x4236e1
sub eax, 1
jne 0x423703
push dword [esi + 0x108]
push ecx
lea ecx, [esi + 0xcc]
jmp 0x4236fa
push dword [esi + 0x108]
push ecx
lea ecx, [esi + 0x90]
jmp 0x4236fa
push dword [esi + 0x108]
push ecx
lea ecx, [esi + 0x54]
call fcn.00421390
mov edx, dword [esp + 0xc]
cmp dword [esp + 0x14], 0
mov dword [edi], 1
jne 0x4237d7
movzx eax, dx
cmp ebx, 0x4e
jne 0x42376e
mov eax, dword [esp + 0x10]
mov ecx, 1
mov dword [esp + 0x14], ecx
mov edx, dword [eax + 8]
cmp edx, 0xfffffffe
je 0x423736
cmp edx, 0xfffffffc
jne 0x423761
mov eax, dword [eax]
cmp eax, dword [esi + 0x50]
jne 0x423761
mov eax, dword [esi + 0x120]
cmp dword [eax - 0xc], 0
je 0x423761
push 1
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [esp + 0x14]
mov dword [edi], 0
test ecx, ecx
jmp 0x423630
cmp ebx, 0x111
jne 0x423636
movzx ecx, ax
mov edx, 0x642
mov eax, ecx
cmp dx, cx
jne 0x4237a7
mov eax, dword [sym.imp.USER32.dll_EndDialog]
push edx
push dword [esi + 4]
mov dword [esp + 0x1c], 1
call eax
mov dword [edi], 0
jmp 0x42362b
mov edx, 0x643
mov ecx, eax
cmp dx, ax
jne 0x4237f0
mov eax, dword [sym.imp.USER32.dll_EndDialog]
push edx
push dword [esi + 4]
mov dword [esp + 0x1c], 1
call eax
cmp dword [esp + 0x14], 0
mov dword [edi], 0
je 0x423636
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.00490c46
mov esp, ebp
pop ebp
ret 0x18
mov eax, 0x644
cmp ax, cx
jne 0x423636
push eax
push dword [esi + 4]
mov eax, dword [sym.imp.USER32.dll_EndDialog]
mov dword [esp + 0x1c], 1
call eax
mov ecx, dword [esp + 0x74]
xor eax, eax
cmp dword [esp + 0x14], eax
mov dword [edi], 0
pop edi
pop esi
setne al
pop ebx
xor ecx, esp
call fcn.00490c46
mov esp, ebp
pop ebp
ret 0x18