Function at 0x4fcae0
Capabilities:
Create process on windows

Disassembly:
push 0xffffffffffffffff
push 0x623afe
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe5c
push ebx
push ebp
mov ebx, ecx
push esi
mov ecx, dword [0x6833d0]
push edi
call fcn.00424940
mov ebp, dword [ebx + 0x20]
push 0
push str.Join_Screen
mov ecx, 0x68d8e0
call fcn.004a5ed0
mov ecx, dword [0x6833d0]
call fcn.004209d0
mov eax, dword [0x683330]
mov edi, 0x64a6e8
add eax, 0x12e0
lea esi, [esp + 0x10]
mov ecx, dword [eax]
mov dword [esp + 0x10], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x14], edx
mov ecx, dword [eax + 8]
mov dword [esp + 0x18], ecx
mov ecx, 4
mov edx, dword [eax + 0xc]
xor eax, eax
push eax
mov dword [esp + 0x20], edx
push eax
push 0xc385
repe cmpsd dword [esi], dword es:[edi]
push str.scr3
jne 0x4fcb77
push 0x4c3
jmp 0x4fcb7c
push 0x4c2
mov ecx, dword [0x6833d0]
call fcn.005c9fb0
mov ecx, dword [0x6833d0]
call fcn.004209d0
push 0
push str.dataclosedpw.exe
call dword [sym.imp.KERNEL32.dll_WinExec]
mov eax, dword [ebp]
mov cl, 2
cmp byte [eax + 0x3c], cl
jne 0x4fcbb7
cmp byte [eax + 0x3d], cl
jne 0x4fcbb7
mov eax, dword [eax + 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov ebp, dword [esp + 0xe7c]
mov ecx, dword [0x683320]
lea edx, [esp + 0x24]
push ebp
push edx
call fcn.0043d860
mov eax, dword [esp + 0x5b4]
mov ecx, dword [0x6833d0]
lea eax, [eax + eax*4]
shl eax, 5
lea esi, [esp + eax + 0x5f8]
call fcn.0041df70
mov ecx, dword [0x683330]
push esi
call fcn.00431940
mov ecx, dword [esp + 0x5b0]
lea edx, [esp + 0x24]
push ecx
mov ecx, dword [0x683330]
lea eax, [esp + 0x148]
push edx
push eax
call fcn.00431600
mov ecx, dword [ebx + 0x9f8]
call fcn.004c4490
test eax, eax
jl 0x4fcc5e
mov ecx, dword [ebx + 0x9f8]
call fcn.004c4490
lea ecx, [esp + 0x10]
push eax
push ecx
mov ecx, dword [ebx + 0xa08]
call fcn.0043b360
mov ecx, 4
mov edi, 0x64a708
mov esi, eax
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
jne 0x4fcc5e
mov eax, 1
jmp 0x4fcc60
xor eax, eax
push eax
mov eax, dword [esp + 0x5b4]
lea ecx, [esp + 0x28]
push eax
push ecx
mov ecx, dword [0x683330]
call fcn.00431d80
push str.closedpw
push str.closedpw
mov esi, eax
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
je 0x4fcc9c
push 0
push 0
push 0x10
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
test esi, esi
jne 0x4fcd2c
mov ecx, dword [0x683330]
push 1
call fcn.004357f0
mov ecx, dword [0x683330]
push ebp
call fcn.00435820
push 0x1c38
call fcn.0061317d
add esp, 4
mov dword [esp + 0x20], eax
test eax, eax
mov dword [esp + 0xe74], esi
je 0x4fcce1
push ebp
mov ecx, eax
call fcn.004fe330
push 0
push str.MP_Setup_Screen
mov ecx, 0x68d8e0
mov dword [esp + 0xe7c], 0xffffffff
call fcn.004a5ed0
push str.Status_Screen
mov ecx, 0x68d8e0
call fcn.004a60c0
push str.Create_Dialog
mov ecx, 0x68d8e0
call fcn.004a60c0
push str.Main_Menu
mov ecx, 0x68d8e0
call fcn.004a60c0
jmp 0x4fcd87
mov ecx, dword [0x683330]
push 0
call fcn.004357f0
push 0
push str.Main_Menu
mov ecx, 0x68d8e0
call fcn.004a5ed0
push str.Create_Dialog
mov ecx, 0x68d8e0
call fcn.004a60c0
push str.Status_Screen
mov ecx, 0x68d8e0
call fcn.004a60c0
cmp esi, 0x88770118
je 0x4fcd87
push 1
push 0x64
push 0x1c2
push 0
push 0x25ad
mov ecx, ebx
call fcn.004ac3d0
mov ecx, dword [esp + 0xe6c]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov dword fs:[0], ecx
add esp, 0xe68
ret 4