Function at 0x408d9c
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffd7c
push ebx
push esi
mov esi, dword [ebp + 8]
lea ebx, [ebp - 0x284]
mov eax, 0x455230
call fcn.0044938c
mov word [ebx + 0x10], 8
lea edx, [ebp - 0x20c]
push edx
call fcn.00405c6c
pop ecx
xor eax, eax
inc dword [ebx + 0x1c]
xor ecx, ecx
mov word [ebx + 0x10], 0x14
mov word [ebx + 0x10], 0x20
mov dword [ebp - 0x210], ecx
lea edx, [ebp - 0x20c]
inc dword [ebx + 0x1c]
mov word [ebx + 0x10], 0x14
mov word [ebx + 0x10], 0x2c
mov dword [ebp - 0x214], eax
inc dword [ebx + 0x1c]
mov word [ebx + 0x10], 0x14
push edx
call fcn.00405cb0
pop ecx
sub eax, 1
jb 0x4092f6
je 0x408e2f
dec eax
je 0x408f4d
dec eax
je 0x4091c3
jmp 0x4092f6
mov word [ebx + 0x10], 0x38
mov edx, 0x45578e
lea eax, [ebp - 0x218]
call fcn.00424cc4
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x218]
lea eax, [ebp - 0x214]
call fcn.00424f53
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x218]
mov edx, 2
call fcn.00424f24
mov word [ebx + 0x10], 0x44
mov ecx, dword [ebp - 0x214]
xor eax, eax
push ecx
push esi
mov dword [ebp - 0x21c], eax
lea edx, [ebp - 0x21c]
push edx
inc dword [ebx + 0x1c]
call fcn.00407a1c
add esp, 0xc
lea edx, [ebp - 0x21c]
lea eax, [ebp - 0x210]
call fcn.00424f53
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x21c]
mov edx, 2
call fcn.00424f24
mov word [ebx + 0x10], 0x50
mov edx, str.__device:AudioCD
lea eax, [ebp - 0x220]
call fcn.00424cc4
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x224], eax
lea eax, [ebp - 0x210]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x220]
lea ecx, [ebp - 0x224]
call fcn.00424f7b
lea edx, [ebp - 0x224]
lea eax, [ebp - 0x210]
call fcn.00424f53
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x224]
mov edx, 2
call fcn.00424f24
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x220]
mov edx, 2
call fcn.00424f24
push 5
cmp dword [ebp - 0x210], 0
je 0x408f3d
mov ecx, dword [ebp - 0x210]
jmp 0x408f42
mov ecx, 0x4557ac
push ecx
call sub.KERNEL32.dll_WinExec
jmp 0x4092f6
mov word [ebx + 0x10], 0x5c
mov edx, str.wmplayer.exe
lea eax, [ebp - 0x228]
call fcn.00424cc4
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x228]
lea eax, [ebp - 0x214]
call fcn.00424f53
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x228]
mov edx, 2
call fcn.00424f24
mov word [ebx + 0x10], 0x68
mov ecx, dword [ebp - 0x214]
xor eax, eax
push ecx
push esi
mov dword [ebp - 0x22c], eax
lea edx, [ebp - 0x22c]
push edx
inc dword [ebx + 0x1c]
call fcn.00407a1c
add esp, 0xc
lea edx, [ebp - 0x22c]
lea eax, [ebp - 0x210]
call fcn.00424f53
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x22c]
mov edx, 2
call fcn.00424f24
mov word [ebx + 0x10], 0x74
mov edx, 0x4557ba
lea eax, [ebp - 0x230]
call fcn.00424cc4
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x234], eax
lea eax, [ebp - 0x210]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x234]
call fcn.00424f7b
lea edx, [ebp - 0x234]
lea eax, [ebp - 0x210]
call fcn.00424f53
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x234]
mov edx, 2
call fcn.00424f24
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x230]
mov edx, 2
call fcn.00424f24
mov word [ebx + 0x10], 0x80
lea edx, [ebp - 0x104]
lea eax, [ebp - 0x238]
call fcn.00424cc4
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x23c], eax
lea eax, [ebp - 0x210]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x238]
lea ecx, [ebp - 0x23c]
call fcn.00424f7b
lea edx, [ebp - 0x23c]
lea eax, [ebp - 0x210]
call fcn.00424f53
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x23c]
mov edx, 2
call fcn.00424f24
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x238]
mov edx, 2
call fcn.00424f24
mov word [ebx + 0x10], 0x8c
mov edx, 0x4557bc
lea eax, [ebp - 0x240]
call fcn.00424cc4
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x244], eax
lea eax, [ebp - 0x210]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x240]
lea ecx, [ebp - 0x244]
call fcn.00424f7b
lea edx, [ebp - 0x244]
lea eax, [ebp - 0x210]
call fcn.00424f53
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x244]
mov edx, 2
call fcn.00424f24
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x240]
mov edx, 2
call fcn.00424f24
mov word [ebx + 0x10], 0x98
lea edx, [ebp - 0x208]
lea eax, [ebp - 0x248]
call fcn.00424cc4
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x24c], eax
lea eax, [ebp - 0x210]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x248]
lea ecx, [ebp - 0x24c]
call fcn.00424f7b
lea edx, [ebp - 0x24c]
lea eax, [ebp - 0x210]
call fcn.00424f53
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x24c]
mov edx, 2
call fcn.00424f24
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x248]
mov edx, 2
call fcn.00424f24
push 5
cmp dword [ebp - 0x210], 0
je 0x4091b3
mov ecx, dword [ebp - 0x210]
jmp 0x4091b8
mov ecx, 0x4557be
push ecx
call sub.KERNEL32.dll_WinExec
jmp 0x4092f6
mov word [ebx + 0x10], 0xa4
lea edx, [ebp - 0x104]
lea eax, [ebp - 0x250]
call fcn.00424cc4
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x250]
lea eax, [ebp - 0x210]
call fcn.00424f53
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x250]
mov edx, 2
call fcn.00424f24
mov word [ebx + 0x10], 0xb0
mov edx, 0x4557bf
lea eax, [ebp - 0x254]
call fcn.00424cc4
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x258], eax
lea eax, [ebp - 0x210]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x258]
call fcn.00424f7b
lea edx, [ebp - 0x258]
lea eax, [ebp - 0x210]
call fcn.00424f53
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x258]
mov edx, 2
call fcn.00424f24
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x254]
mov edx, 2
call fcn.00424f24
mov word [ebx + 0x10], 0xbc
lea edx, [ebp - 0x208]
lea eax, [ebp - 0x25c]
call fcn.00424cc4
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x260], eax
lea eax, [ebp - 0x210]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x25c]
lea ecx, [ebp - 0x260]
call fcn.00424f7b
lea edx, [ebp - 0x260]
lea eax, [ebp - 0x210]
call fcn.00424f53
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x260]
mov edx, 2
call fcn.00424f24
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x25c]
mov edx, 2
call fcn.00424f24
mov ecx, dword [ebp - 0x210]
push ecx
push esi
call fcn.00407460
add esp, 8
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x214]
mov edx, 2
call fcn.00424f24
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x210]
mov edx, 2
call fcn.00424f24
dec dword [ebx + 0x1c]
push 2
lea ecx, [ebp - 0x20c]
push ecx
call fcn.00405c94
add esp, 8
mov eax, dword [ebx]
mov dword fs:[0], eax
pop esi
pop ebx
mov esp, ebp
pop ebp
ret