Function at 0x4081e0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45c5b8
mov eax, dword fs:[0]
push eax
sub esp, 0x68
mov eax, dword [0x47ca80]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x54], ecx
push str.CEdpDiskDlg::AutoLoginUsb_enter
push 0
push 0x58f
push 0x461bdc
push 0x461bf0
call fcn.00405d80
add esp, 0x14
jmp 0x408238
push str.CEdpDiskDlg::AutoLoginUsb_call_AutoLogin
push 0
push 0x592
push 0x461c38
push 0x461c4c
call fcn.00405d80
add esp, 0x14
mov byte [ebp - 0xd], 0
lea eax, [ebp - 0xd]
push eax
mov ecx, dword [0x47e060]
mov edx, dword [ecx]
mov ecx, dword [0x47e060]
mov eax, dword [edx + 0xc]
call eax
mov dword [ebp - 0x18], eax
push str.CEdpDiskDlg::AutoLoginUsb_call_AutoLogin_end
push 0
push 0x596
push 0x461c98
push str.CEdpDiskDlg::AutoLoginUsb
call fcn.00405d80
add esp, 0x14
cmp dword [ebp - 0x18], 1
je 0x408326
mov ecx, dword [0x47e060]
mov edx, dword [ecx]
mov ecx, dword [0x47e060]
mov eax, dword [edx + 8]
call eax
push eax
lea ecx, [ebp - 0x24]
call fcn.00402fd0
mov dword [ebp - 4], 0
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
lea edx, [ebp - 0x24]
push edx
call fcn.00402fb0
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x5c], eax
mov byte [ebp - 4], 1
push ecx
mov ecx, esp
mov dword [ebp - 0x40], esp
push 0x47e124
call fcn.00402fb0
mov dword [ebp - 0x60], eax
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x64], ecx
mov byte [ebp - 4], 2
call fcn.004103d0
mov byte [ebp - 4], 0
mov ecx, eax
call fcn.004105a0
mov dword [ebp - 0x44], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00403050
mov eax, dword [ebp - 0x44]
jmp 0x4086d6
mov dl, byte [ebp - 0xd]
mov byte [0x47e04e], dl
mov dword [0x47df40], 1
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x54]
mov edx, dword [eax + 0x4a8]
or edx, dword [ecx + 0x4ac]
mov eax, dword [ebp - 0x54]
mov dword [eax + 0x4a8], edx
push 0
mov ecx, dword [ebp - 0x54]
add ecx, 0x7c
call fcn.00428e3c
push 0
mov ecx, dword [ebp - 0x54]
add ecx, 0x17c
call fcn.00428e3c
mov ecx, dword [ebp - 0x54]
cmp dword [ecx + 0x538], 0
je 0x4083a6
call fcn.00411f30
mov ecx, eax
call fcn.00412060
movzx edx, al
test edx, edx
je 0x4083a6
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax + 0x4ac]
push ecx
call fcn.00411f30
mov ecx, eax
call fcn.00412080
mov byte [ebp - 0x19], 1
movzx edx, byte [0x47e050]
test edx, edx
je 0x4083c7
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax + 0x4a8]
and ecx, 1
jne 0x4083c7
mov byte [ebp - 0x19], 0
movzx edx, byte [0x47e051]
test edx, edx
je 0x4083e4
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax + 0x4a8]
and ecx, 2
jne 0x4083e4
mov byte [ebp - 0x19], 0
movzx edx, byte [ebp - 0x19]
test edx, edx
je 0x4083f6
push 0
mov ecx, dword [ebp - 0x54]
call fcn.00428dfa
push 1
push 0
push 0
push 0x461cc8
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x20]
call fcn.00402f90
mov dword [ebp - 4], 3
push 0xc9
lea ecx, [ebp - 0x20]
call fcn.004032a0
lea ecx, [ebp - 0x20]
call fcn.00403180
movzx eax, al
test eax, eax
je 0x408446
push 0x461cf4
lea ecx, [ebp - 0x20]
call fcn.00403070
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx + 0x4a8]
and edx, 1
je 0x40851d
mov eax, dword [ebp - 0x54]
mov dword [eax + 0x4b0], 1
mov ecx, dword [ebp - 0x54]
cmp dword [ecx + 0x4b4], 1
jne 0x4084c6
lea ecx, [ebp - 0x28]
call fcn.00402f90
mov byte [ebp - 4], 4
mov edx, dword [0x47e0b8]
push edx
mov eax, dword [0x47e0d0]
push eax
push 0x461d0c
lea ecx, [ebp - 0x28]
push ecx
call fcn.00404400
add esp, 0x10
lea ecx, [ebp - 0x28]
call fcn.00403130
push eax
push 0x3e9
mov ecx, dword [ebp - 0x54]
call fcn.00428c44
mov ecx, eax
call fcn.00428d58
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x28]
call fcn.00403050
jmp 0x408513
lea ecx, [ebp - 0x2c]
call fcn.00402f90
mov byte [ebp - 4], 5
mov edx, dword [0x47e0d0]
push edx
push 0x461d1c
lea eax, [ebp - 0x2c]
push eax
call fcn.00404400
add esp, 0xc
lea ecx, [ebp - 0x2c]
call fcn.00403130
push eax
push 0x3e9
mov ecx, dword [ebp - 0x54]
call fcn.00428c44
mov ecx, eax
call fcn.00428d58
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c]
call fcn.00403050
push 1
mov ecx, dword [ebp - 0x54]
call fcn.0040a020
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx + 0x4a8]
and edx, 2
je 0x40860f
lea ecx, [ebp - 0x20]
call fcn.00403180
movzx eax, al
test eax, eax
jne 0x40854b
push 0x461d28
lea ecx, [ebp - 0x20]
call fcn.0040a0b0
mov ecx, dword [ebp - 0x54]
mov dword [ecx + 0x4b4], 1
mov edx, dword [ebp - 0x54]
cmp dword [edx + 0x4b0], 1
jne 0x4085b9
lea ecx, [ebp - 0x30]
call fcn.00402f90
mov byte [ebp - 4], 6
mov eax, dword [0x47e0b8]
push eax
mov ecx, dword [0x47e0d0]
push ecx
push 0x461d2c
lea edx, [ebp - 0x30]
push edx
call fcn.00404400
add esp, 0x10
lea ecx, [ebp - 0x30]
call fcn.00403130
push eax
push 0x3e9
mov ecx, dword [ebp - 0x54]
call fcn.00428c44
mov ecx, eax
call fcn.00428d58
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x30]
call fcn.00403050
jmp 0x408605
lea ecx, [ebp - 0x34]
call fcn.00402f90
mov byte [ebp - 4], 7
mov eax, dword [0x47e0b8]
push eax
push 0x461d3c
lea ecx, [ebp - 0x34]
push ecx
call fcn.00404400
add esp, 0xc
lea ecx, [ebp - 0x34]
call fcn.00403130
push eax
push 0x3e9
mov ecx, dword [ebp - 0x54]
call fcn.00428c44
mov ecx, eax
call fcn.00428d58
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x34]
call fcn.00403050
push 1
mov ecx, dword [ebp - 0x54]
call fcn.0040a020
mov ecx, dword [ebp - 0x54]
call fcn.00408890
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x408632
mov edx, dword [ebp - 0x38]
push edx
mov ecx, dword [ebp - 0x54]
add ecx, 0x4b8
call fcn.004126d0
mov eax, dword [0x47e060]
mov edx, dword [eax]
mov ecx, dword [0x47e060]
mov eax, dword [edx + 8]
call eax
push eax
lea ecx, [ebp - 0x20]
call fcn.00403070
lea ecx, [ebp - 0x20]
call fcn.0040a150
lea ecx, [ebp - 0x20]
call fcn.00403180
movzx ecx, al
test ecx, ecx
jne 0x4086ad
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
lea edx, [ebp - 0x20]
push edx
call fcn.00402fb0
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x6c], eax
mov byte [ebp - 4], 8
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push 0x47e118
call fcn.00402fb0
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x74], ecx
mov byte [ebp - 4], 9
call fcn.004103d0
mov byte [ebp - 4], 3
mov ecx, eax
call fcn.004105a0
jmp 0x4086bd
mov dword [ebp - 0x50], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00403050
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret