Function at 0x482d30
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x308
mov eax, dword [str.Global_]
mov ecx, dword [0x5584d4]
push esi
push edi
push str.imm32.dll
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
test esi, esi
je 0x482d77
push str.ImmDisableIME
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x482d70
push 0xffffffffffffffff
call eax
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call fcn.00428010
call fcn.00427ff0
call fcn.00482cd0
test eax, eax
je 0x482e48
xor eax, eax
mov cl, byte [esp + eax + 8]
mov byte [esp + eax + 0x110], cl
inc eax
test cl, cl
jne 0x482d90
lea edi, [esp + 0x110]
or ecx, 0xffffffff
xor eax, eax
mov esi, str.Medal_of_Honor_Allied_Assault
repne scasb al, byte es:[edi]
dec edi
mov ecx, 7
rep movsd dword es:[edi], dword [esi]
lea edx, [esp + 0x110]
push edx
movsw word es:[edi], word [esi]
call fcn.00482c70
add esp, 4
cmp eax, 1
jne 0x482e77
push str.Medal_of_Honor_Allied_Assault
push str.Medal_of_Honor_Allied_Assault
call dword [sym.imp.USER32.dll_FindWindowA]
mov esi, eax
test esi, esi
je 0x482e19
push esi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x482e00
push 9
push esi
call dword [sym.imp.USER32.dll_ShowWindow]
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
call fcn.00428000
xor eax, eax
pop edi
pop esi
add esp, 0x308
ret 0x10
push 0
push str.Medal_of_Honor_Allied_Assault
push str.Another_user_is_playing_Allied_Assault
call fcn.0047f3a0
add esp, 4
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00428000
xor eax, eax
pop edi
pop esi
add esp, 0x308
ret 0x10
push str.Medal_of_Honor_Allied_Assault
push str.Medal_of_Honor_Allied_Assault
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
je 0x482e77
push 9
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
call fcn.00428000
xor eax, eax
pop edi
pop esi
add esp, 0x308
ret 0x10
call fcn.00427fa0
test eax, eax
je 0x482ee3
mov eax, dword [esp + 0x31c]
push eax
call fcn.00428070
mov eax, dword [str.Configure.exe]
lea edx, [esp + 0x14]
add esp, 4
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x482e9b
lea edi, [esp + 0x10]
or ecx, 0xffffffff
xor eax, eax
mov dl, byte [0x55846a]
repne scasb al, byte es:[edi]
mov cx, word [0x558468]
dec edi
mov word [edi], cx
mov byte [edi + 2], dl
call fcn.00482d10
lea eax, [esp + 0x10]
push 5
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
xor eax, eax
pop edi
pop esi
add esp, 0x308
ret 0x10
call fcn.00427f80
test eax, eax
je 0x482f4e
mov ecx, dword [esp + 0x31c]
push ecx
call fcn.00428070
mov eax, dword [str.Configure.exe]
lea edx, [esp + 0x14]
add esp, 4
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x482f07
lea edi, [esp + 0x10]
or ecx, 0xffffffff
xor eax, eax
mov dx, word [0x558464]
repne scasb al, byte es:[edi]
mov al, byte [0x558466]
dec edi
mov word [edi], dx
mov byte [edi + 2], al
call fcn.00482d10
lea ecx, [esp + 0x10]
push 5
push ecx
call dword [sym.imp.KERNEL32.dll_WinExec]
xor eax, eax
pop edi
pop esi
add esp, 0x308
ret 0x10
mov edx, dword [esp + 0x31c]
push edx
call fcn.00428100
mov edi, eax
mov eax, dword [esp + 0x31c]
add esp, 4
test eax, eax
je 0x482f7d
call fcn.00482d10
pop edi
xor eax, eax
pop esi
add esp, 0x308
ret 0x10
mov esi, dword [esp + 0x314]
push esi
call fcn.004810b0
push 0x800
push edi
push 0x8009f0
mov dword [0x7ff9dc], eax
mov dword [0xccc9ec], esi
call fcn.00465230
push str.sys_copy
push 0x8009f0
call fcn.0051c9c0
add esp, 0x18
test eax, eax
je 0x482fe8
mov cl, byte [eax + 9]
lea edx, [eax + 9]
cmp cl, 0x20
je 0x482fca
test cl, cl
jne 0x482fe8
mov cl, byte [edx]
test cl, cl
je 0x482fdb
mov byte [eax], cl
mov cl, byte [edx + 1]
inc eax
inc edx
test cl, cl
jne 0x482fd0
mov byte [eax], 0
mov dword [0x801438], 1
call fcn.00488300
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
call fcn.00484770
push 0x8009f0
call fcn.0044de10
lea eax, [esp + 0x214]
push pe_nt_image_headers32
push eax
call fcn.0051e6fa
lea ecx, [esp + 0x21c]
push ecx
push str.Working_directory:__s_n
call fcn.0044cca0
add esp, 0x14
call fcn.0047f340
mov edx, dword [0xee14b0]
mov eax, dword [edx + 0x20]
test eax, eax
jne 0x483055
mov eax, dword [0xee14ac]
mov ecx, dword [eax + 0x20]
test ecx, ecx
jne 0x483055
push 0
push 0
call fcn.004889c0
add esp, 8
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov eax, dword [0xee14b0]
mov ecx, dword [eax + 0x20]
test ecx, ecx
jne 0x48307a
call fcn.004108a0
mov eax, dword [0xee14b0]
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0xccc9f4]
test ecx, ecx
jne 0x483095
test eax, eax
je 0x483099
mov ecx, dword [eax + 0x20]
test ecx, ecx
je 0x483099
push 5
call esi
call fcn.0047ea90
wait
fninit
call fcn.0044e800
mov eax, dword [0xee14b0]
jmp 0x483080