Function at 0x4096ee
Capabilities:
Create process on windows

Disassembly:
mov eax, 0x40b3e3
call fcn.0040b0d4
sub esp, 0xb4c
push ebx
push esi
push edi
lea ecx, [ebp - 0x320]
call fcn.0040ad97
xor ebx, ebx
push 0x83c
lea eax, [ebp - 0xb58]
push ebx
push eax
mov dword [ebp - 4], ebx
call sub.MSVCRT.dll_memset
mov esi, dword [sym.imp.MSVCRT.dll__strcmpi]
mov edi, 0x40fbd8
push edi
push str._stext
mov dword [ebp - 0x328], 0x12
call esi
add esp, 0x14
test eax, eax
jne 0x409771
lea eax, [ebp - 0xb58]
push eax
call fcn.00407684
push ebx
push 1
pop esi
lea eax, [ebp - 0xb58]
push esi
push 0x40fce0
push eax
call fcn.00408715
add esp, 0x14
jmp 0x40998a
push edi
push str._stab
call esi
pop ecx
test eax, eax
pop ecx
jne 0x409790
lea eax, [ebp - 0xb58]
push eax
call fcn.00407684
push ebx
push 2
jmp 0x4097eb
push edi
push str._shtml
call esi
pop ecx
test eax, eax
pop ecx
jne 0x4097af
lea eax, [ebp - 0xb58]
push eax
call fcn.00407684
push ebx
push 4
jmp 0x4097eb
push edi
push str._sxml
call esi
pop ecx
test eax, eax
pop ecx
jne 0x4097ce
lea eax, [ebp - 0xb58]
push eax
call fcn.00407684
push ebx
push 5
jmp 0x4097eb
push edi
push str._stabular
call esi
pop ecx
test eax, eax
pop ecx
jne 0x409807
lea eax, [ebp - 0xb58]
push eax
call fcn.00407684
push ebx
push 3
lea eax, [ebp - 0xb58]
push 0x40fce0
push eax
call fcn.00408715
add esp, 0x14
push 1
pop esi
jmp 0x40998a
push edi
push str._uninstall
call esi
pop ecx
test eax, eax
pop ecx
jne 0x40988b
lea eax, [ebp - 0xb58]
push eax
call fcn.00407684
lea eax, [ebp - 0xb58]
mov dword [esp], 0x40fce0
push eax
call fcn.004096a3
pop ecx
mov edx, eax
pop ecx
cmp edx, ebx
push 1
pop esi
je 0x40998a
mov al, byte [0x40f030]
mov ecx, 0xc3
mov byte [ebp - 0x31c], al
xor eax, eax
lea edi, [ebp - 0x31b]
push esi
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x31c]
push ebx
push eax
push edx
call fcn.00405792
add esp, 0x10
test eax, eax
je 0x40998a
lea eax, [ebp - 0x31c]
push 5
push eax
call dword [sym.imp.KERNEL32.DLL_WinExec]
jmp 0x40998a
push edi
push str._quninstall
call esi
pop ecx
test eax, eax
pop ecx
jne 0x40990d
lea eax, [ebp - 0xb58]
push eax
call fcn.00407684
lea eax, [ebp - 0xb58]
mov dword [esp], 0x40fce0
push eax
call fcn.004096a3
mov edx, eax
pop ecx
cmp edx, ebx
pop ecx
je 0x4097ff
mov al, byte [0x40f030]
mov ecx, 0xc3
mov byte [ebp - 0x31c], al
xor eax, eax
lea edi, [ebp - 0x31b]
push 2
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x31c]
push ebx
push eax
push edx
call fcn.00405792
add esp, 0x10
test eax, eax
je 0x4097ff
push 5
lea eax, [ebp - 0x31c]
push eax
call dword [sym.imp.KERNEL32.DLL_WinExec]
jmp 0x4097ff
push edi
push str._change
call esi
pop ecx
test eax, eax
pop ecx
jne 0x409988
lea eax, [ebp - 0xb58]
push eax
call fcn.00407684
lea eax, [ebp - 0xb58]
mov dword [esp], 0x40fce0
push eax
call fcn.004096a3
mov edx, eax
pop ecx
cmp edx, ebx
pop ecx
je 0x4097ff
mov al, byte [0x40f030]
mov ecx, 0xc3
mov byte [ebp - 0x31c], al
xor eax, eax
lea edi, [ebp - 0x31b]
push 3
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x31c]
push ebx
push eax
push edx
call fcn.00405792
add esp, 0x10
test eax, eax
je 0x4097ff
push 5
lea eax, [ebp - 0x31c]
jmp 0x409901
xor esi, esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x320]
call fcn.0040ad9d
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret