Function at 0x408ae0
Capabilities:
Create process on windows
Delete file
Print debug messages
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x4160
call fcn.004213e0
mov eax, dword [0x444e3c]
xor eax, esp
mov dword [esp + 0x415c], eax
push ebx
push ebp
push 0x3a98
xor ebx, ebx
lea eax, [esp + 0x6d0]
push ebx
push eax
mov ebp, ecx
mov dword [esp + 0x18], 0xffffffff
call fcn.00421410
lea ecx, [esp + 0x6d8]
push ecx
call fcn.00404c90
lea edx, [esp + 0x6dc]
push 0x43985e
push edx
call fcn.00422b07
add esp, 0x18
test eax, eax
je 0x408ea3
lea eax, [esp + 0xc]
push eax
call fcn.00404d10
add esp, 4
cmp dword [esp + 0xc], ebx
jne 0x408ea3
push edi
xor eax, eax
push 0x1ff
lea ecx, [esp + 0x2d5]
push ebx
push ecx
mov byte [esp + 0x4c], bl
mov dword [esp + 0x4d], eax
mov dword [esp + 0x51], eax
mov dword [esp + 0x55], eax
mov dword [esp + 0x59], eax
mov dword [esp + 0x5d], eax
mov byte [esp + 0x61], al
mov byte [esp + 0x1b], bl
mov byte [esp + 0x2dc], bl
call fcn.00421410
xor eax, eax
push 0x1ff
lea edx, [esp + 0xe1]
push ebx
push edx
mov byte [esp + 0x2c], bl
mov dword [esp + 0x2d], eax
mov dword [esp + 0x31], eax
mov dword [esp + 0x35], eax
mov dword [esp + 0x39], eax
mov word [esp + 0x3d], ax
mov byte [esp + 0x3f], al
mov byte [esp + 0x40], bl
mov dword [esp + 0x41], eax
mov dword [esp + 0x45], eax
mov dword [esp + 0x49], eax
mov dword [esp + 0x4d], eax
mov dword [esp + 0x51], eax
mov byte [esp + 0x55], al
mov byte [esp + 0xe8], bl
call fcn.00421410
push 0x1ff
lea eax, [esp + 0x4ed]
push ebx
push eax
mov byte [esp + 0x4f4], bl
call fcn.00421410
add esp, 0x24
xor edi, edi
cmp byte [esp + 0x6d0], bl
je 0x408e6b
lea eax, [esp + 0x6d0]
push esi
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x1c]
push edx
push eax
mov ecx, ebp
call fcn.00407b90
test al, al
je 0x408e64
lea eax, [esp + 0x18]
push 0x43a208
push eax
call fcn.00422b07
add esp, 8
test eax, eax
jne 0x408c64
mov cl, byte [esp + eax + 0x2c]
mov byte [esp + eax + 0x44], cl
add eax, 1
cmp cl, bl
jne 0x408c50
jmp 0x408dee
mov eax, dword [ebp + 0xf0]
push eax
lea ecx, [esp + 0x1c]
push ecx
call fcn.00422b07
add esp, 8
test eax, eax
jne 0x408c86
mov byte [esp + 0x13], 1
jmp 0x408dee
lea edx, [esp + 0x18]
push 0x43a36c
push edx
call fcn.00422b07
add esp, 8
test eax, eax
jne 0x408d63
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x2dc]
push str._s_s.zip
push edx
call fcn.00420f5a
mov ecx, dword [ebp + 0x4c]
lea eax, [esp + 0x2e4]
push eax
push ecx
lea edx, [esp + 0xec]
push str._sUpdate_s
push edx
call fcn.00420f5a
mov eax, dword [ebp + 0x4c]
push eax
lea ecx, [esp + 0x4f8]
push str._sreg.exe
push ecx
call fcn.00420f5a
add esp, 0x2c
lea edx, [esp + 0xd4]
push edx
mov ecx, ebp
call fcn.00407d20
test al, al
je 0x408d4c
push ebx
lea eax, [esp + 0x4d8]
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x1c]
push edx
call fcn.004057b0
add esp, 8
lea eax, [esp + 0xd4]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x1c]
push edx
call fcn.00404db0
add esp, 8
jmp 0x408dee
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x1c]
push ecx
call fcn.00404db0
add esp, 8
jmp 0x408dee
push 0x77
lea edx, [esp + 0x61]
push ebx
push edx
mov byte [esp + 0x68], bl
call fcn.00421410
lea eax, [esp + 0x38]
push eax
push 0x43a250
lea ecx, [esp + 0x2c]
push ecx
push 0x43a20c
lea edx, [esp + 0x78]
push str._s_s__s_s_
push edx
call fcn.00420f5a
add esp, 0x24
mov ecx, ebp
call fcn.004074b0
test al, al
je 0x408db6
mov ecx, dword [ebp]
lea eax, [esp + 0x5c]
push eax
push 2
call fcn.00406100
jmp 0x408de3
push str.Replace_Item_when_Casino_Isnt_Alive
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
lea ecx, [esp + 0x18]
push str.clientupdate
push ecx
call fcn.00422b07
add esp, 8
test eax, eax
je 0x408de3
lea edx, [esp + 0x5c]
push edx
mov ecx, ebp
call fcn.00408350
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x18]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x408df5
sub eax, edx
mov edx, eax
lea eax, [esp + 0x2c]
lea esi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x408e10
sub eax, esi
add eax, edx
lea edi, [edi + eax + 2]
xor eax, eax
cmp byte [esp + edi + 0x6d4], bl
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov word [esp + 0x40], ax
lea eax, [esp + edi + 0x6d4]
jne 0x408c20
cmp byte [esp + 0x13], bl
pop esi
jne 0x408ea2
lea eax, [esp + 0x40]
push 0x43985e
push eax
call fcn.00422b07
add esp, 8
test eax, eax
je 0x408ea2
lea ecx, [esp + 0x40]
push ecx
push 0x43a208
call fcn.004057b0
lea edx, [esp + 0x48]
push edx
push 0x43a208
call fcn.00404db0
add esp, 0x10
pop edi
mov ecx, ebp
call fcn.00408010
mov ecx, dword [esp + 0x4164]
pop ebp
pop ebx
xor ecx, esp
call fcn.004213c3
add esp, 0x4160
ret