Function at 0x413b9b
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x440849
mov eax, dword fs:[0]
push eax
sub esp, 0xb0
push ebx
push esi
push edi
mov eax, dword [0x44c040]
xor eax, esp
push eax
lea eax, [esp + 0xc0]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x54], ebx
mov eax, dword [0x44e98c]
mov edx, dword [eax + 0xc]
mov ecx, 0x44e98c
call edx
add eax, 0x10
mov dword [esp + 0x10], eax
xor esi, esi
mov dword [esp + 0xc8], esi
mov eax, dword [0x44e98c]
mov edx, dword [eax + 0xc]
mov ecx, 0x44e98c
call edx
add eax, 0x10
mov dword [esp + 0x20], eax
mov byte [esp + 0xc8], 1
mov eax, dword [0x44e98c]
mov edx, dword [eax + 0xc]
mov ecx, 0x44e98c
call edx
add eax, 0x10
mov dword [esp + 0x28], eax
mov byte [esp + 0xc8], 2
mov eax, dword [0x44e98c]
mov edx, dword [eax + 0xc]
mov ecx, 0x44e98c
call edx
add eax, 0x10
mov dword [esp + 0x24], eax
mov byte [esp + 0xc8], 3
mov eax, dword [0x44e98c]
mov edx, dword [eax + 0xc]
mov ecx, 0x44e98c
call edx
add eax, 0x10
mov dword [esp + 0x18], eax
lea eax, [esp + 0x44]
push eax
call dword [sym.imp.HTMLayout.dll_ValueInit]
xor edi, edi
mov dword [esp + 0x34], esi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x30], esi
mov dword [esp + 0x2c], esi
mov byte [esp + 0xc8], 8
mov edx, dword [0x44e98c]
mov eax, dword [edx + 0xc]
mov ecx, 0x44e98c
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x10]
mov byte [esp + 0xc8], 9
cmp eax, 0x83
ja case.0x4136e4.1
movzx ecx, byte [eax + 0x414064]
jmp dword [ecx*4 + 0x41403c]
mov edi, dword [ebp + 0xc]
lea esi, [esp + 0x1c]
call fcn.00403840
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x40]
push edx
push 0x4431d4
push eax
mov dword [esp + 0x4c], 0
call dword [sym.imp.HTMLayout.dll_HTMLayoutGetAttributeByName]
mov edx, dword [esp + 0x40]
lea edi, [esp + 0x14]
call fcn.004035e0
mov edx, str.game_dtype
call fcn.004035e0
cmp dword [eax], 0
je 0x413f11
mov ecx, dword [ebp + 0xc]
push ebx
call fcn.00414a20
lea ecx, [esp + 0x14]
call fcn.004109f0
lea esi, [esp + 0x2c]
call fcn.00402870
lea esi, [esp + 0x30]
call fcn.00403900
lea esi, [esp + 0x1c]
call fcn.00403900
lea ecx, [esp + 0x44]
push ecx
call dword [sym.imp.HTMLayout.dll_ValueClear]
lea ecx, [esp + 0x18]
call fcn.004109f0
lea ecx, [esp + 0x24]
call fcn.004109f0
lea ecx, [esp + 0x28]
call fcn.004109f0
lea ecx, [esp + 0x20]
call fcn.004109f0
lea ecx, [esp + 0x10]
call fcn.004109f0
mov eax, 1
mov ecx, dword [esp + 0xc0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [ebp + 0xc]
mov edi, dword [sym.imp.HTMLayout.dll_HTMLayoutGetParentElement]
lea edx, [esp + 0x38]
push edx
push eax
call edi
mov eax, dword [esp + 0x38]
cmp eax, esi
je 0x413f13
lea ecx, [esp + 0x38]
push ecx
push eax
call edi
mov eax, dword [esp + 0x38]
cmp eax, esi
je 0x413f13
lea edx, [esp + 0x5c]
push edx
push eax
call edi
mov eax, dword [ebx + 0x84]
cmp dword [esp + 0x5c], eax
jne 0x41385b
mov edi, dword [esp + 0x38]
lea esi, [ebx + 0x108c]
call fcn.00403840
lea eax, [esp + 0x54]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push 0xc1c
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_LoadMenuW]
mov ecx, dword [ebx + 0x10]
mov edx, dword [esp + 0x58]
push 0
push ecx
push 0
push edx
mov esi, eax
mov eax, dword [esp + 0x64]
push eax
push 0
push 0
push esi
call dword [sym.imp.USER32.dll_GetSubMenu]
push eax
call dword [sym.imp.USER32.dll_TrackPopupMenu]
push esi
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41373d
mov ebx, dword [ebp + 0xc]
lea edx, [esp + 0x34]
push edx
push str.class
push ebx
call dword [sym.imp.HTMLayout.dll_HTMLayoutGetAttributeByName]
cmp dword [esp + 0x34], esi
jne 0x413f13
lea eax, [esp + 0x38]
push eax
push ebx
call edi
mov eax, dword [esp + 0x38]
cmp eax, esi
je 0x413f13
mov ebx, dword [sym.imp.HTMLayout.dll_HTMLayoutGetAttributeByName]
lea ecx, [esp + 0x34]
push ecx
push str.class
push eax
call ebx
cmp dword [esp + 0x34], esi
jne 0x4138c4
mov eax, dword [esp + 0x38]
cmp eax, esi
je 0x413f13
lea edx, [esp + 0x38]
push edx
push eax
call edi
cmp dword [esp + 0x38], esi
je 0x413f13
mov ecx, dword [esp + 0x38]
lea eax, [esp + 0x38]
push eax
push ecx
call edi
mov eax, dword [esp + 0x38]
cmp eax, esi
je 0x413f13
lea edx, [esp + 0x5c]
push edx
push eax
call edi
mov eax, dword [esp + 0x5c]
cmp eax, esi
je 0x413f13
lea ecx, [esp + 0x34]
push ecx
push 0x4431d4
push eax
call ebx
mov eax, dword [esp + 0x34]
cmp eax, esi
je 0x413f13
push str.online_list
push eax
call fcn.0043ac1f
add esp, 8
test eax, eax
je 0x413935
mov edx, dword [esp + 0x34]
push str.friend_list
push edx
call fcn.0043ac1f
add esp, 8
test eax, eax
jne 0x413f13
mov eax, dword [esp + 0x34]
push str.online_list
push eax
xor edi, edi
call fcn.0043ac1f
add esp, 8
test eax, eax
jne 0x41394d
mov ecx, dword [esp + 0x34]
push str.friend_list
push ecx
call fcn.0043ac1f
add esp, 8
test eax, eax
jne 0x413966
lea edi, [eax + 1]
mov eax, dword [esp + 0x38]
lea edx, [esp + 0x3c]
push edx
push 0x4431d4
push eax
call ebx
cmp dword [esp + 0x3c], esi
je 0x413f13
lea esi, [esp + 0x40]
call fcn.0040b750
mov byte [esp + 0xc8], 0xa
mov ebx, dword [esp + 0x3c]
mov eax, esi
call fcn.00408640
mov ecx, dword [esp + 0x40]
push 0xa
push 0
push ecx
call fcn.0042a011
mov esi, dword [esp + 0x60]
add esp, 0xc
push edi
call fcn.0041c580
lea eax, [esp + 0x40]
call fcn.0040b730
lea ecx, [esp + 0x14]
call fcn.004109f0
lea esi, [esp + 0x2c]
call fcn.00402870
lea esi, [esp + 0x30]
call fcn.00403900
lea esi, [esp + 0x1c]
call fcn.00403900
lea edx, [esp + 0x44]
push edx
jmp 0x413766
mov ecx, dword [ebp + 0xc]
cmp dword [ebx + 0x3c], ecx
jne 0x413a2c
mov eax, ebx
call fcn.0041a190
lea ecx, [esp + 0x14]
call fcn.004109f0
lea esi, [esp + 0x2c]
call fcn.00402870
lea esi, [esp + 0x30]
call fcn.00403900
lea esi, [esp + 0x1c]
call fcn.00403900
lea eax, [esp + 0x44]
push eax
jmp 0x413766
lea eax, [ebx + 0x5c]
mov dword [esp + 0x54], eax
cmp dword [eax], ecx
jne case.0x4136e4.1
cmp dword [ebx + 0xa0], 1
jne case.0x4136e4.1
push eax
lea esi, [esp + 0xa0]
call fcn.00402fe0
push eax
lea ecx, [esp + 0x48]
push ecx
call dword [sym.imp.HTMLayout.dll_ValueCopy]
mov edx, esi
push edx
call dword [sym.imp.HTMLayout.dll_ValueClear]
lea eax, [esp + 0x68]
lea edi, [esp + 0x44]
call fcn.00402f30
mov byte [esp + 0xc8], 0xb
mov eax, dword [eax]
lea edx, [eax + 8]
test eax, eax
jne 0x413a8d
mov edx, 0x44f7bc
lea edi, [esp + 0x20]
call fcn.004035e0
lea esi, [esp + 0x68]
mov byte [esp + 0xc8], 9
call fcn.00402870
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], 0x20
jle 0x413b0f
lea eax, [esp + 0x7c]
push eax
mov ecx, 0x444568
call fcn.00402e30
mov edx, dword [esp + 0x54]
mov eax, dword [edx]
lea ecx, [esp + 0x7c]
push ecx
push eax
call dword [sym.imp.HTMLayout.dll_HTMLayoutControlSetValue]
mov edi, dword [sym.imp.HTMLayout.dll_ValueClear]
lea ecx, [esp + 0x7c]
push ecx
call edi
lea ecx, [esp + 0x14]
call fcn.004109f0
lea esi, [esp + 0x2c]
call fcn.00402870
lea esi, [esp + 0x30]
call fcn.00403900
lea esi, [esp + 0x1c]
call fcn.00403900
lea edx, [esp + 0x44]
push edx
call edi
jmp 0x41376c
push eax
lea eax, [ebx + 0xb90]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
sub esp, 0x98c
mov edi, esp
lea esi, [ebx + 0x470]
mov ecx, 0x263
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 0xdfc]
push ecx
call fcn.00407640
jmp 0x4139c1
mov edi, dword [ebp + 0xc]
lea eax, [esp + 0x38]
push eax
push edi
call dword [sym.imp.HTMLayout.dll_HTMLayoutGetParentElement]
mov eax, dword [ebx + 0x84]
cmp dword [esp + 0x38], eax
jne 0x413f13
push ebx
mov eax, edi
call fcn.0041a010
jmp 0x41373d
mov edi, dword [ebp + 0xc]
lea edx, [esp + 0x38]
push edx
push edi
call dword [sym.imp.HTMLayout.dll_HTMLayoutGetParentElement]
mov eax, dword [ebx + 0x84]
cmp dword [esp + 0x38], eax
jne 0x413f13
push ebx
mov ecx, edi
call fcn.00414ef0
jmp 0x4139fe
mov edi, dword [ebp + 0xc]
lea ecx, [esp + 0x3c]
push ecx
push 0x4431d4
push edi
call dword [sym.imp.HTMLayout.dll_HTMLayoutGetAttributeByName]
lea edx, [esp + 0x34]
push edx
push str.href
push edi
call dword [sym.imp.HTMLayout.dll_HTMLayoutGetAttributeByName]
mov eax, dword [esp + 0x3c]
cmp eax, esi
je 0x413bfe
push str.exit_home
push eax
call fcn.0043ac1f
add esp, 8
test eax, eax
jne 0x413bfe
mov eax, dword [ebx + 0xdfc]
cmp dword [eax + 0x28c], esi
je 0x4139fe
call fcn.00404ea0
push esi
mov edi, ebx
call fcn.0041c760
jmp 0x41373d
mov eax, dword [esp + 0x34]
cmp eax, esi
je 0x413f13
push 0x443708
push eax
call fcn.0043ac1f
add esp, 8
test eax, eax
je 0x413f13
mov edx, dword [esp + 0x34]
push 5
push esi
push esi
push edx
push str.open
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x4139fe
mov edi, dword [ebp + 0xc]
lea ecx, [esp + 0x34]
push ecx
push str.class
push edi
call dword [sym.imp.HTMLayout.dll_HTMLayoutGetAttributeByName]
mov eax, dword [esp + 0x34]
cmp eax, esi
je 0x413f13
push 0x44459c
push eax
call fcn.0043ac1f
add esp, 8
test eax, eax
jne 0x413de9
lea eax, [ebx + 0x38]
push eax
lea esi, [esp + 0x70]
mov dword [esp + 0x58], eax
call fcn.00402fe0
lea eax, [esp + 0x64]
mov edi, esi
call fcn.00402f30
mov byte [esp + 0xc8], 0xd
mov eax, dword [eax]
lea edx, [eax + 8]
test eax, eax
jne 0x413ca2
mov edx, 0x44f7bc
lea edi, [esp + 0x10]
call fcn.004035e0
lea esi, [esp + 0x64]
mov byte [esp + 0xc8], 0xc
call fcn.00402870
mov edx, dword [esp + 0x10]
cmp dword [edx - 0xc], 0
jne 0x413d03
mov edi, dword [sym.imp.HTMLayout.dll_ValueClear]
lea eax, [esp + 0x6c]
push eax
call edi
lea ecx, [esp + 0x14]
call fcn.004109f0
lea esi, [esp + 0x2c]
call fcn.00402870
lea esi, [esp + 0x30]
call fcn.00403900
lea esi, [esp + 0x1c]
call fcn.00403900
lea ecx, [esp + 0x44]
push ecx
call edi
jmp 0x41376c
lea esi, [esp + 0x10]
call fcn.00402460
mov esi, dword [ebx + 0xdfc]
push eax
call fcn.004058a0
test eax, eax
je 0x413dda
lea edx, [ebx + 0x4c]
push edx
lea esi, [esp + 0xb0]
call fcn.00402fe0
push eax
lea eax, [esp + 0x48]
push eax
call dword [sym.imp.HTMLayout.dll_ValueCopy]
mov ecx, esi
push ecx
call dword [sym.imp.HTMLayout.dll_ValueClear]
lea eax, [esp + 0x60]
lea edi, [esp + 0x44]
call fcn.00402f30
mov byte [esp + 0xc8], 0xe
mov eax, dword [eax]
lea edx, [eax + 8]
test eax, eax
jne 0x413d68
mov edx, 0x44f7bc
lea edi, [esp + 0x18]
call fcn.004035e0
lea esi, [esp + 0x60]
mov byte [esp + 0xc8], 0xc
call fcn.00402870
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
mov ecx, dword [ebx + 0xdfc]
push 1
push edx
push eax
push ecx
call fcn.00404500
lea edx, [esp + 0x8c]
push edx
mov ecx, 0x443140
call fcn.00402e30
mov ecx, dword [esp + 0x54]
mov edx, dword [ecx]
lea eax, [esp + 0x8c]
push eax
push edx
call dword [sym.imp.HTMLayout.dll_HTMLayoutControlSetValue]
mov edi, dword [sym.imp.HTMLayout.dll_ValueClear]
lea eax, [esp + 0x8c]
push eax
call edi
lea ecx, [esp + 0x6c]
jmp 0x413adc
mov edi, dword [sym.imp.HTMLayout.dll_ValueClear]
lea ecx, [esp + 0x6c]
jmp 0x413adc
mov eax, dword [esp + 0x34]
push 0x443a0c
push eax
call fcn.0043ac1f
add esp, 8
test eax, eax
jne 0x413e32
mov eax, dword [ebx + 0x1078]
mov edx, dword [ebx + 0xdfc]
mov ecx, dword [ebx + 0x1080]
push eax
push edx
call fcn.00405050
cmp eax, 3
je 0x413e22
cmp eax, 4
jne 0x413e32
mov ecx, dword [ebx + 0x1078]
call fcn.00418140
jmp 0x4139fe
mov ecx, dword [esp + 0x34]
push str.game_t_version
push ecx
call fcn.0043ac1f
add esp, 8
test eax, eax
jne 0x413f13
push ebx
mov ecx, edi
call fcn.00414a20
jmp 0x4139c1
mov ecx, dword [ebp + 0xc]
lea eax, [esp + 0x34]
push eax
push str.class
push ecx
call dword [sym.imp.HTMLayout.dll_HTMLayoutGetAttributeByName]
mov eax, dword [esp + 0x34]
cmp eax, esi
je 0x413f13
push str.for_test
push eax
call fcn.0043ac1f
add esp, 8
test eax, eax
jne 0x413f13
push ebx
call fcn.0041c950
cmp eax, esi
je 0x413f13
mov ecx, eax
mov edi, ebx
call fcn.0041c3a0
jmp 0x4139c1
mov ecx, dword [ebp + 0xc]
lea eax, [esp + 0x3c]
push eax
push 0x4431d4
push ecx
call dword [sym.imp.HTMLayout.dll_HTMLayoutGetAttributeByName]
mov eax, dword [esp + 0x3c]
cmp eax, esi
je 0x413f13
push str.sound_kq
push eax
call fcn.0043ac1f
add esp, 8
test eax, eax
jne 0x413eea
mov edx, dword [ebx + 0xdfc]
mov dword [edx + 0x2d8], 1
jmp 0x4139fe
mov ecx, dword [esp + 0x3c]
push str.sound_gb
push ecx
call fcn.0043ac1f
add esp, 8
test eax, eax
jne 0x413f13
mov edx, dword [ebx + 0xdfc]
mov dword [edx + 0x2d8], esi
jmp 0x4139fe
xor esi, esi
mov edi, dword [esp + 0x1c]
mov byte [esp + 0xc8], 8
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413f3f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp edi, esi
je 0x413f4a
push edi
call dword [sym.imp.HTMLayout.dll_HTMLayout_UnuseElement]
lea ecx, [esp + 0x44]
push ecx
call dword [sym.imp.HTMLayout.dll_ValueClear]
mov byte [esp + 0xc8], 3
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x413f7d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xc8], 2
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413fa5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xc8], 1
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413fcd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xc8], 0
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413ff5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0xc8], 0xffffffff
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414020
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
mov ecx, dword [esp + 0xc0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10