Function at 0x407d10
Capabilities:
Create process on windows
Delete file
Print debug messages

Disassembly:
mov eax, 0x4158
call fcn.00420520
mov eax, dword [0x443d3c]
xor eax, esp
mov dword [esp + 0x4154], eax
push ebx
push ebp
push 0x3a98
xor ebx, ebx
lea eax, [esp + 0x6c8]
push ebx
push eax
mov ebp, ecx
mov dword [esp + 0x18], 0xffffffff
call fcn.00420550
lea ecx, [esp + 0x6d0]
push ecx
call fcn.00404120
lea edx, [esp + 0x6d4]
push 0x438897
push edx
call fcn.0042157f
add esp, 0x18
test eax, eax
je 0x4080ce
lea eax, [esp + 0xc]
push eax
call fcn.004041a0
add esp, 4
cmp dword [esp + 0xc], ebx
jne 0x4080ce
push edi
xor eax, eax
push 0x1ff
lea ecx, [esp + 0x2cd]
push ebx
push ecx
mov byte [esp + 0x48], bl
mov dword [esp + 0x49], eax
mov dword [esp + 0x4d], eax
mov dword [esp + 0x51], eax
mov dword [esp + 0x55], eax
mov word [esp + 0x59], ax
mov byte [esp + 0x5b], al
mov byte [esp + 0x1b], bl
mov byte [esp + 0x2d4], bl
call fcn.00420550
xor eax, eax
push 0x1ff
lea edx, [esp + 0xd9]
push ebx
push edx
mov byte [esp + 0x2c], bl
mov dword [esp + 0x2d], eax
mov dword [esp + 0x31], eax
mov dword [esp + 0x35], eax
mov dword [esp + 0x39], eax
mov word [esp + 0x3d], ax
mov byte [esp + 0x3f], al
mov byte [esp + 0x40], bl
mov dword [esp + 0x41], eax
mov dword [esp + 0x45], eax
mov dword [esp + 0x49], eax
mov dword [esp + 0x4d], eax
mov word [esp + 0x51], ax
mov byte [esp + 0x53], al
mov byte [esp + 0xe0], bl
call fcn.00420550
push 0x1ff
lea eax, [esp + 0x4e5]
push ebx
push eax
mov byte [esp + 0x4ec], bl
call fcn.00420550
add esp, 0x24
xor edi, edi
cmp byte [esp + 0x6c8], bl
je 0x408096
lea eax, [esp + 0x6c8]
push esi
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x1c]
push edx
push eax
mov ecx, ebp
call fcn.00406dd0
test al, al
je 0x40808f
lea eax, [esp + 0x18]
push 0x4396c8
push eax
call fcn.0042157f
add esp, 8
test eax, eax
jne 0x407e96
mov cl, byte [esp + eax + 0x2c]
mov byte [esp + eax + 0x40], cl
add eax, 1
cmp cl, bl
jne 0x407e82
jmp 0x408020
mov eax, dword [ebp + 0xec]
push eax
lea ecx, [esp + 0x1c]
push ecx
call fcn.0042157f
add esp, 8
test eax, eax
jne 0x407eb8
mov byte [esp + 0x13], 1
jmp 0x408020
lea edx, [esp + 0x18]
push 0x43982c
push edx
call fcn.0042157f
add esp, 8
test eax, eax
jne 0x407f95
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x2d4]
push str._s_s.zip
push edx
call fcn.004200a5
mov ecx, dword [ebp + 0x4c]
lea eax, [esp + 0x2dc]
push eax
push ecx
lea edx, [esp + 0xe4]
push str._sUpdate_s
push edx
call fcn.004200a5
mov eax, dword [ebp + 0x4c]
push eax
lea ecx, [esp + 0x4f0]
push str._sreg.exe
push ecx
call fcn.004200a5
add esp, 0x2c
lea edx, [esp + 0xcc]
push edx
mov ecx, ebp
call fcn.00406f60
test al, al
je 0x407f7e
push ebx
lea eax, [esp + 0x4d0]
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x1c]
push edx
call fcn.00404980
add esp, 8
lea eax, [esp + 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x1c]
push edx
call fcn.00404240
add esp, 8
jmp 0x408020
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x1c]
push ecx
call fcn.00404240
add esp, 8
jmp 0x408020
push 0x77
lea edx, [esp + 0x59]
push ebx
push edx
mov byte [esp + 0x60], bl
call fcn.00420550
lea eax, [esp + 0x38]
push eax
push 0x439710
lea ecx, [esp + 0x2c]
push ecx
push 0x4396cc
lea edx, [esp + 0x70]
push str._s_s__s_s_
push edx
call fcn.004200a5
add esp, 0x24
mov ecx, ebp
call fcn.00406640
test al, al
je 0x407fe8
mov ecx, dword [ebp]
lea eax, [esp + 0x54]
push eax
push 2
call fcn.004052d0
jmp 0x408015
push str.Replace_Item_when_Casino_Isnt_Alive
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
lea ecx, [esp + 0x18]
push str.clientupdate
push ecx
call fcn.0042157f
add esp, 8
test eax, eax
je 0x408015
lea edx, [esp + 0x54]
push edx
mov ecx, ebp
call fcn.00407590
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x18]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x408027
sub eax, edx
mov edx, eax
lea eax, [esp + 0x2c]
lea esi, [eax + 1]
jmp 0x408040
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x408040
sub eax, esi
add eax, edx
lea edi, [edi + eax + 2]
xor eax, eax
cmp byte [esp + edi + 0x6cc], bl
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
lea eax, [esp + edi + 0x6cc]
jne 0x407e52
cmp byte [esp + 0x13], bl
pop esi
jne 0x4080cd
lea eax, [esp + 0x3c]
push 0x438897
push eax
call fcn.0042157f
add esp, 8
test eax, eax
je 0x4080cd
lea ecx, [esp + 0x3c]
push ecx
push 0x4396c8
call fcn.00404980
lea edx, [esp + 0x44]
push edx
push 0x4396c8
call fcn.00404240
add esp, 0x10
pop edi
mov ecx, ebp
call fcn.00407250
mov ecx, dword [esp + 0x415c]
pop ebp
pop ebx
xor ecx, esp
call fcn.0042050e
add esp, 0x4158
ret