Function at 0x6113e0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x204
push ebx
push esi
mov dword [ebp - 4], ecx
push edi
mov edi, 0x7bd64c
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x104]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov ebx, dword [ebp + 0xc]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
cmp ebx, 0x12
rep movsb byte es:[edi], byte [esi]
je 0x61142b
call fcn.00419190
mov ecx, eax
call fcn.00418890
cmp ebx, 0x63
jg 0x611692
je 0x611688
cmp ebx, 0x1e
ja case.0x611745.5022
jmp dword [ebx*4 + 0x6119b4]
push 6
jmp 0x6118d0
mov eax, dword [0x80fe3c]
test eax, eax
jne 0x611508
mov al, byte [0x80fe33]
inc al
cmp al, 3
mov byte [0x80fe33], al
jl 0x611508
mov edi, 0x78b010
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x104]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push str.message
mov eax, ecx
mov esi, edi
mov edi, edx
push 0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 1
and ecx, 3
push 1
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x104]
push 0
push ecx
mov ecx, 0x7d67b0
call fcn.005069d0
cmp eax, 0x7a
jne 0x61165a
mov eax, dword [0x83a14c]
push 1
cmp eax, 1
push 0
push 0
jne 0x6114ed
mov edx, dword [0x83a870]
push str.http:__www.hangame.com
push str.open
push edx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x611650
mov eax, dword [0x83a870]
push str.http:__ragnarok.co.kr
push str.open
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x611650
push 0x10b
jmp 0x6118d0
push 8
jmp 0x6118d0
push 0x10a
jmp 0x6118d0
push 0x136
jmp 0x6118d0
mov ecx, dword [ebp + 8]
push ecx
push 0x1c1
jmp 0x6116e9
push 0x1b7
jmp 0x6118d0
push 0x2a9
jmp 0x6118d0
push 0x2bf
jmp 0x6118d0
push 0x2c0
jmp 0x6118d0
push 0x2c1
jmp 0x6118d0
push 0x2c2
jmp 0x6118d0
push 0x2c3
jmp 0x6118d0
push 0x2c4
jmp 0x6118d0
push 0x2c5
jmp 0x6118d0
mov eax, dword [0x80fe3c]
test eax, eax
jne 0x6118fd
mov edi, 0x78afb0
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x104]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push str.message
mov eax, ecx
mov esi, edi
mov edi, edx
push 0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 1
and ecx, 3
push 1
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x104]
push 0
push ecx
mov ecx, 0x7d67b0
call fcn.005069d0
cmp eax, 0x7a
jne 0x61165a
mov edx, dword [0x83a870]
push 1
push 0
push 0
push str.http:__www.ragnarok.co.kr_setNewPW_password_change_agreement.asp
push str.open
push edx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x611650
mov ecx, dword [ebp + 8]
push ecx
push 0x564
call fcn.0057ed70
add esp, 4
lea edx, [ebp - 0x104]
push eax
push edx
call fcn.0070dea8
add esp, 0xc
lea eax, [ebp - 0x104]
mov ecx, 0x7d67b0
push str.message
push 0
push 1
push 1
push 2
push eax
call fcn.005069d0
cmp eax, 0x7d
jne 0x61165a
mov ecx, 0x80fe50
call fcn.00530d40
lea edx, [ebp - 0x104]
mov edi, 0x7bd64c
jmp 0x6118e0
push 0x565
jmp 0x6118d0
push 0x6d7
jmp 0x6118d0
push 0x6d8
jmp 0x6118d0
push 0x170
jmp 0x6118d0
cmp ebx, 0x1393
jg 0x61172e
je case.0x611745.5016
lea eax, [ebx - 0x64]
cmp eax, 9
ja case.0x611745.5022
jmp dword [eax*4 + 0x611a30]
mov ecx, dword [ebp + 8]
push ecx
push 0x32a
jmp 0x6116e9
push 0x32b
jmp 0x6118d0
push 0x35b
jmp 0x6118d0
push 0x35c
jmp 0x6118d0
mov ecx, dword [ebp + 8]
push ecx
push 0x329
call fcn.0057ed70
add esp, 4
lea edx, [ebp - 0x104]
push eax
push edx
call fcn.0070dea8
add esp, 0xc
jmp 0x6118fd
push 0x50d
jmp 0x6118d0
push 0x55c
jmp 0x6118d0
push 0x571
jmp 0x6118d0
push 0x572
jmp 0x6118d0
lea eax, [ebx - 0x1394]
cmp eax, 0x34
ja case.0x611745.5022
xor ecx, ecx
mov cl, byte [eax + 0x611a84]
jmp dword [ecx*4 + 0x611a58]
push ebx
push 9
call fcn.0057ed70
add esp, 4
lea edx, [ebp - 0x104]
push eax
push str._s__d_
push edx
call fcn.0070dea8
add esp, 0x10
jmp 0x6118fd
mov eax, dword [ebp + 8]
push eax
push 0x337
call fcn.0057ed70
add esp, 4
lea ecx, [ebp - 0x104]
push eax
push ecx
call fcn.0070dea8
add esp, 0xc
jmp 0x6118fd
push ebx
push 0x6fd
call fcn.0057ed70
add esp, 4
lea edx, [ebp - 0x104]
push eax
push str._s__d_
push edx
call fcn.0070dea8
add esp, 0x10
jmp 0x6118fd
push ebx
push 0x6fe
call fcn.0057ed70
add esp, 4
push eax
lea eax, [ebp - 0x104]
push str._s__d_
push eax
call fcn.0070dea8
add esp, 0x10
jmp 0x6118fd
push ebx
push 0x6ff
call fcn.0057ed70
add esp, 4
lea ecx, [ebp - 0x104]
push eax
push str._s__d_
push ecx
call fcn.0070dea8
add esp, 0x10
jmp 0x6118fd
push ebx
push 0x700
call fcn.0057ed70
add esp, 4
lea edx, [ebp - 0x104]
push eax
push str._s__d_
push edx
call fcn.0070dea8
add esp, 0x10
jmp 0x6118fd
push ebx
push 0x6fa
call fcn.0057ed70
add esp, 4
push eax
lea eax, [ebp - 0x104]
push str._s__d_
push eax
call fcn.0070dea8
add esp, 0x10
jmp 0x6118fd
push ebx
push 0x10a
call fcn.0057ed70
add esp, 4
lea ecx, [ebp - 0x104]
push eax
push str._s__d_
push ecx
call fcn.0070dea8
add esp, 0x10
jmp 0x6118fd
push ebx
push 0x701
call fcn.0057ed70
add esp, 4
lea edx, [ebp - 0x104]
push eax
push str._s__d_
push edx
call fcn.0070dea8
add esp, 0x10
jmp 0x6118fd
push ebx
push 0x702
call fcn.0057ed70
add esp, 4
push eax
lea eax, [ebp - 0x104]
push str._s__d_
push eax
call fcn.0070dea8
add esp, 0x10
jmp 0x6118fd
push 9
call fcn.0057ed70
add esp, 4
lea edx, [ebp - 0x104]
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x104]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x611994
lea ecx, [ebp - 0x104]
push ebx
push ecx
lea edx, [ebp - 0x204]
push str._s__d_
push edx
call fcn.0070dea8
add esp, 0x10
xor edi, edi
lea eax, [ebp - 0x204]
mov ecx, 0x7d67b0
push str.message
push edi
push edi
push 1
push edi
push eax
call fcn.005069d0
cmp ebx, 5
je 0x611956
cmp ebx, 0x63
jne 0x61197b
mov esi, dword [ebp - 4]
push edi
push edi
push edi
mov edx, dword [esi]
push 2
mov ecx, esi
call dword [edx + 0x18]
mov dword [0x80feb0], edi
mov dword [esi + 0xc], 3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp - 4]
mov dword [0x80feb0], edi
pop edi
pop esi
mov dword [eax + 0xc], 3
pop ebx
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [ebp - 4]
pop edi
mov dword [0x80feb0], 0
pop esi
mov dword [ecx + 0xc], 3
pop ebx
mov esp, ebp
pop ebp
ret 8