Function at 0x4082cc
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x359c
call fcn.0040ce20
mov al, byte [0x412a30]
push ebx
push esi
push edi
push 0x41
mov byte [ebp - 0x108], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x107]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x108]
push eax
call fcn.004015cf
test eax, eax
pop ecx
jne 0x408311
call fcn.004082b9
push 1
jmp 0x4084c8
xor ebx, ebx
push ebx
call fcn.0040377a
mov dword [esp], 0x19e4
lea eax, [ebp - 0x1e04]
push ebx
push eax
call sub.MSVCRT.dll_memset
mov edi, dword [ebp + 8]
add esp, 0xc
cmp dword [ebp + 0xc], ebx
lea eax, [ebp - 0x420]
push 0x40
push eax
je 0x408346
push dword [ebp + 0xc]
jmp 0x408347
push edi
call fcn.004046d1
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x1bb2]
push eax
call fcn.0040434a
add esp, 0xc
lea eax, [ebp - 0x1e04]
push eax
lea eax, [ebp - 0x108]
push eax
push edi
call fcn.00407820
mov esi, eax
push ebx
lea eax, [ebp - 0x108]
push 0x4110cc
push eax
call fcn.00401687
add esp, 0x18
call fcn.004037cd
cmp esi, ebx
je 0x408399
push 2
jmp 0x4084c8
lea eax, [ebp - 0x1e04]
push eax
lea eax, [ebp - 0x319c]
push eax
push ebx
call fcn.00401fc7
mov ecx, eax
call fcn.00402119
cmp dword [ebp - 0x1e0c], ebx
jne 0x4084ce
cmp dword [ebp - 0x1e04], ebx
je 0x4083e4
push 0x1c
call fcn.00406cd3
push eax
push ebx
call fcn.0040151e
add esp, 0xc
cmp eax, 6
jne 0x4084ce
jmp 0x40842c
cmp dword [ebp - 0x1e00], 1
jne 0x4084ce
cmp byte [ebp - 0x1b2b], bl
jne 0x4084ce
push 0x1d
call fcn.00406cd3
push eax
push ebx
call fcn.0040151e
add esp, 0xc
cmp eax, 6
jne 0x4084ce
lea eax, [ebp - 0x1a26]
push eax
lea eax, [ebp - 0x1dfc]
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x210]
push eax
call fcn.004015cf
test eax, eax
pop ecx
je 0x408305
push ebx
call fcn.0040377a
push ebx
lea eax, [ebp - 0x210]
push ebx
push eax
push edi
call fcn.00407bf7
add esp, 0x14
mov esi, eax
call fcn.004037cd
cmp esi, ebx
jne 0x4084c6
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x1dfc]
push eax
lea eax, [ebp - 0x210]
push eax
call fcn.0040773f
add esp, 0xc
test eax, eax
je 0x4085c3
cmp dword [ebp - 0x1e04], 2
push 5
jne 0x4084b4
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp - 0x318]
push ebx
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x4085c3
lea eax, [ebp - 0x318]
push eax
call dword [sym.imp.KERNEL32.DLL_WinExec]
jmp 0x4085c3
push 3
pop eax
jmp 0x4085c5
lea eax, [ebp - 0x1e04]
push eax
lea eax, [ebp - 0x319c]
push eax
call fcn.0040186c
cmp dword [ebp - 0x1e0c], ebx
pop ecx
pop ecx
jne 0x40852e
lea eax, [ebp - 0x319c]
push eax
lea eax, [ebp - 0x1e04]
push eax
push ebx
call fcn.00403624
add esp, 0xc
test eax, eax
je 0x4085c3
cmp dword [ebp - 0x319c], ebx
je 0x40852e
lea eax, [ebp - 0x1e04]
push eax
lea eax, [ebp - 0x319c]
push eax
push 1
call fcn.00401fc7
mov ecx, eax
call fcn.00402119
push ebx
call fcn.0040377a
lea eax, [ebp - 0x42c]
push eax
call fcn.0040144b
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp - 0x3184]
push ebx
push eax
push edi
call fcn.00407bf7
add esp, 0x18
test eax, eax
jne 0x4085b1
lea eax, [ebp - 0x1e04]
push eax
lea eax, [ebp - 0x319c]
push eax
call fcn.00408169
pop ecx
test eax, eax
pop ecx
jne 0x4085b1
call fcn.004037cd
lea eax, [ebp - 0x1c75]
push eax
push 0x1e
call fcn.00406cd3
pop ecx
push eax
lea eax, [ebp - 0x359c]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
cmp dword [ebp - 0x3188], ebx
jne 0x4085b1
lea eax, [ebp - 0x359c]
push eax
push ebx
call fcn.00401508
pop ecx
pop ecx
lea eax, [ebp - 0x42c]
push eax
call fcn.0040144b
pop ecx
call fcn.004037cd
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret