Function at 0x402eb3
Capabilities:
Create process on windows
Set current directory

Disassembly:
push 0x9c
mov eax, 0x444c67
call fcn.00438522
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xa4], eax
xor eax, eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
push 1
sub esp, 0x14
mov dword [ebp - 4], eax
mov esi, esp
mov dword [ebp - 0x88], esp
call fcn.004040c6
push dword [ebp + 8]
lea ebx, [ebp - 0x9c]
call fcn.00404149
add esp, 0x1c
mov eax, ebx
call fcn.00403a46
test eax, eax
je 0x40311b
mov esi, dword [ebp - 0x98]
cmp esi, dword [ebp - 0x94]
jbe 0x402f39
call fcn.004367c5
lea eax, [ebp - 0x9c]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], esi
mov esi, dword [ebp - 0x94]
cmp dword [ebp - 0x98], esi
jbe 0x402f5e
call fcn.004367c5
xor ebx, ebx
cmp dword [ebp - 0x8c], ebx
je 0x402f76
lea eax, [ebp - 0x9c]
cmp dword [ebp - 0x8c], eax
je 0x402f7b
call fcn.004367c5
cmp dword [ebp - 0x88], esi
je 0x40311b
lea esi, [ebp - 0x8c]
call fcn.00403a09
cmp dword [eax + 0x14], ebx
je 0x40310b
call fcn.00403a09
mov edi, eax
lea ecx, [ebp - 0x30]
call fcn.0042f6da
push 0x447ea4
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.0040c575
cmp dword [ebp - 0x1c], ebx
pop ecx
je 0x4030fd
lea edi, [ebp - 0x30]
call fcn.00402e42
cmp al, bl
mov esi, dword [ebp - 0xa0]
jne 0x402fec
cmp dword [esi + 0x18], 8
jb 0x402fe2
mov eax, dword [esi + 4]
jmp 0x402fe5
lea eax, [esi + 4]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea edi, [ebp - 0x30]
call fcn.00402d6a
test al, al
je 0x403004
mov eax, edi
push eax
mov eax, esi
call fcn.00402cdf
jmp 0x403035
cmp dword [esi + 0x18], 8
jb 0x40300f
mov esi, dword [esi + 4]
jmp 0x403012
add esi, 4
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
jae 0x40301e
lea eax, [ebp - 0x2c]
push 1
push esi
push ebx
push eax
push 0x447dec
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp eax, 0x20
seta al
cmp al, bl
jne 0x4030fd
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
jae 0x403049
lea eax, [ebp - 0x2c]
push eax
push 0x527f
lea ecx, [ebp - 0x4c]
call fcn.00402c01
lea eax, [ebp - 0x68]
push 0x507e
push eax
mov byte [ebp - 4], 2
call fcn.00402be4
add esp, 0x10
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 3
call fcn.0040cd8a
mov byte [ebp - 4], 4
cmp dword [ebp - 0x70], ebx
je 0x4030a3
push 0x447e50
lea eax, [ebp - 0x4c]
push eax
call fcn.00403978
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x84]
lea esi, [ebp - 0x4c]
call fcn.00403ece
mov esi, dword [ebp - 0xa4]
lea eax, [ebp - 0x4c]
push eax
call fcn.004038ce
cmp dword [ebp - 0x50], 8
mov ecx, dword [ebp - 0x64]
jae 0x4030be
lea ecx, [ebp - 0x64]
cmp dword [ebp - 0x34], 8
mov eax, dword [ebp - 0x48]
jae 0x4030ca
lea eax, [ebp - 0x48]
push ebx
push ecx
push eax
push dword [ebp - 0xa8]
call dword [sym.imp.USER32.dll_MessageBoxW]
push ebx
push 1
lea esi, [ebp - 0x84]
call fcn.0040115e
push ebx
push 1
lea esi, [ebp - 0x68]
call fcn.0040115e
push ebx
push 1
lea esi, [ebp - 0x4c]
call fcn.0040115e
push ebx
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], bl
call fcn.0040115e
lea esi, [ebp - 0x8c]
call fcn.00403a26
jmp 0x402f4b
lea esi, [ebp - 0x9c]
call fcn.00403afe
call fcn.004385a5
ret 0x10