Function at 0x408d38
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x408d40
push ebx
push esi
push edi
mov eax, 0x408cf0
call fcn.00404bf4
mov ebx, 0x40b92c
mov esi, 0x40be6c
mov edi, 0x40b7e0
xor eax, eax
push ebp
push 0x40912f
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x14]
mov eax, 1
call fcn.004027b4
cmp dword [ebp - 0x14], 0
je 0x409114
call fcn.00406b44
fstp st(0)
lea edx, [ebp - 0x18]
mov eax, 1
call fcn.004027b4
lea eax, [ebp - 0x18]
mov edx, 0x409148
call fcn.00403f8c
mov edx, dword [ebp - 0x18]
mov eax, 0x40bd20
call fcn.00402a6c
mov edx, 0x3f2
mov eax, 0x40bd20
call fcn.00402df0
call fcn.0040262c
lea edx, [ebp - 0x1c]
mov eax, 1
call fcn.004027b4
lea eax, [ebp - 0x1c]
mov edx, 0x409160
call fcn.00403f8c
mov edx, dword [ebp - 0x1c]
mov eax, edi
call fcn.00402a6c
lea edx, [ebp - 0x20]
mov eax, 1
call fcn.004027b4
lea eax, [ebp - 0x20]
mov edx, 0x409160
call fcn.00403f8c
mov eax, dword [ebp - 0x20]
call fcn.00405ccc
test al, al
je 0x408e2a
mov edx, 0x3f2
mov eax, edi
call fcn.00402dd4
call fcn.0040262c
jmp 0x408fc8
mov edx, 0x3f2
mov eax, edi
call fcn.00402df0
call fcn.0040262c
jmp 0x408fc8
mov edx, ebx
mov eax, edi
call fcn.00402c80
call fcn.0040262c
cmp byte [ebx + 0x3ba], 0
jne 0x408fc8
lea eax, [esi + 0x71]
lea edx, [ebx + 0x71]
call fcn.00402b80
lea eax, [esi + 0x171]
lea edx, [ebx + 0x171]
call fcn.00402b80
lea eax, [esi + 0x271]
lea edx, [ebx + 0x271]
call fcn.00402b80
lea eax, [esi + 0x371]
lea edx, [ebx + 0x371]
mov cl, 0xa
call fcn.00402b8c
lea eax, [esi + 0x37c]
lea edx, [ebx + 0x37c]
mov cl, 5
call fcn.00402b8c
mov eax, esi
mov edx, ebx
mov cl, 0x32
call fcn.00402b8c
lea eax, [esi + 0x33]
lea edx, [ebx + 0x33]
mov cl, 0x32
call fcn.00402b8c
lea eax, [esi + 0x66]
lea edx, [ebx + 0x66]
mov cl, 0xa
call fcn.00402b8c
lea eax, [esi + 0x382]
lea edx, [ebx + 0x382]
mov cl, 0xa
call fcn.00402b8c
lea eax, [esi + 0x38d]
lea edx, [ebx + 0x38d]
mov cl, 0xa
call fcn.00402b8c
lea eax, [esi + 0x398]
lea edx, [ebx + 0x398]
mov cl, 5
call fcn.00402b8c
lea eax, [esi + 0x39e]
lea edx, [ebx + 0x39e]
mov cl, 0xa
call fcn.00402b8c
lea eax, [esi + 0x3a9]
lea edx, [ebx + 0x3a9]
mov cl, 0xa
call fcn.00402b8c
lea eax, [esi + 0x3b4]
lea edx, [ebx + 0x3b4]
mov cl, 5
call fcn.00402b8c
lea eax, [esi + 0x3ba]
lea edx, [ebx + 0x3ba]
mov cl, 0xa
call fcn.00402b8c
lea eax, [esi + 0x3c5]
lea edx, [ebx + 0x3c5]
mov cl, 0xa
call fcn.00402b8c
lea eax, [esi + 0x3d0]
lea edx, [ebx + 0x3d0]
mov cl, 5
call fcn.00402b8c
lea eax, [esi + 0x3d6]
lea edx, [ebx + 0x3d6]
mov cl, 0xa
call fcn.00402b8c
lea eax, [esi + 0x3e1]
lea edx, [ebx + 0x3e1]
mov cl, 0xa
call fcn.00402b8c
lea eax, [esi + 0x3ec]
lea edx, [ebx + 0x3ec]
mov cl, 5
call fcn.00402b8c
mov edx, esi
mov eax, 0x40bd20
call fcn.00402ed0
call fcn.0040262c
mov eax, edi
call fcn.00402ba8
call fcn.0040262c
test al, al
je 0x408e40
mov eax, 0x40bd20
call fcn.00402b28
call fcn.0040262c
mov eax, edi
call fcn.00402b28
call fcn.0040262c
lea edx, [ebp - 0x24]
mov eax, 1
call fcn.004027b4
lea eax, [ebp - 0x24]
mov edx, 0x409160
call fcn.00403f8c
mov eax, dword [ebp - 0x24]
xor edx, edx
call fcn.00405cdc
lea edx, [ebp - 0x28]
mov eax, 1
call fcn.004027b4
lea eax, [ebp - 0x28]
mov edx, 0x409160
call fcn.00403f8c
mov eax, dword [ebp - 0x28]
call fcn.00405d04
lea edx, [ebp - 0x2c]
mov eax, 1
call fcn.004027b4
lea eax, [ebp - 0x2c]
mov edx, 0x409160
call fcn.00403f8c
mov eax, dword [ebp - 0x2c]
push eax
lea edx, [ebp - 0x30]
mov eax, 1
call fcn.004027b4
lea eax, [ebp - 0x30]
mov edx, 0x409148
call fcn.00403f8c
mov eax, dword [ebp - 0x30]
pop edx
call fcn.00405d1c
lea edx, [ebp - 0x34]
mov eax, 1
call fcn.004027b4
lea eax, [ebp - 0x34]
mov edx, 0x409160
call fcn.00403f8c
mov eax, dword [ebp - 0x34]
mov edx, 2
call fcn.00405cdc
push 0x1f4
call sub.kernel32.dll_Sleep
lea edx, [ebp - 0x38]
mov eax, 2
call fcn.004027b4
mov eax, dword [ebp - 0x38]
mov edx, 0x409178
call fcn.0040405c
jne 0x409114
mov eax, 0x409188
call fcn.00408b48
lea edx, [ebp - 0x3c]
mov eax, 1
call fcn.004027b4
mov eax, dword [ebp - 0x3c]
call fcn.00405e3c
push 5
lea edx, [ebp - 0x40]
mov eax, 1
call fcn.004027b4
lea eax, [ebp - 0x40]
mov edx, 0x4091a4
call fcn.00403f8c
mov eax, dword [ebp - 0x40]
call fcn.00404110
push eax
call sub.kernel32.dll_WinExec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x409136
lea eax, [ebp - 0x40]
mov edx, 0xc
call fcn.00403d34
ret