Function at 0x414020
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x451f08
mov eax, dword fs:[0]
push eax
sub esp, 0x6c
mov eax, dword [0x46b008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [ebp + 0xc]
xor ebx, ebx
mov dword [ebp - 0x78], eax
mov dword [eax], ebx
mov eax, dword [ebp + 8]
cmp eax, dword [edi + 0xa8]
jne 0x4140c3
xor eax, eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov dword [ebp - 4], eax
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
call fcn.00417eb0
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x414460
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4140b4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414480
push edx
push ecx
call fcn.0041b677
add esp, 8
jmp 0x414460
cmp eax, dword [edi + 0xb4]
jne 0x414351
xor eax, eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 1
call fcn.00410260
test al, al
je 0x414080
push 6
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
push str.LicensesLicenses.txt
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x70]
call fcn.00403fc0
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x414117
mov eax, dword [eax]
push 1
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov edx, dword [ebp - 0x5c]
cmp eax, 0x20
setbe al
mov byte [ebp - 0x71], al
cmp edx, 8
jb 0x414171
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x414164
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414485
push edx
push ecx
call fcn.0041b677
mov al, byte [ebp - 0x71]
add esp, 8
test al, al
je 0x414080
push 0xe
push str.File_Not_Found
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
call fcn.004015a0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x70]
push 0x1b
push str.launcher.error_filenotfound
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
call fcn.004015a0
sub esp, 0x18
mov byte [ebp - 4], 3
mov esi, dword [edi + 0x90]
lea eax, [ebp - 0x70]
mov ecx, esp
push eax
call fcn.004035a0
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [esi + 0x68]
call fcn.00402ff0
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x5c]
cmp edx, 0x10
jb 0x41421f
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x414215
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41448a
push edx
push ecx
call fcn.0041b677
add esp, 8
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x44]
cmp edx, 0x10
jb 0x414257
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41424d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41448f
push edx
push ecx
call fcn.0041b677
add esp, 8
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
test ecx, ecx
je 0x4142e4
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x40]
mov esi, dword [ebp - 0x40]
cmp edx, 8
jb 0x414280
mov eax, esi
cmp word [eax + ecx*2 - 2], 0x2e
jne 0x41429f
lea eax, [ecx - 1]
push 0
push eax
lea ecx, [ebp - 0x40]
call fcn.00401200
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov esi, dword [ebp - 0x40]
test ecx, ecx
je 0x4142e4
lea eax, [ebp - 0x40]
cmp edx, 8
jb 0x4142ad
mov eax, esi
cmp word [eax + ecx*2 - 2], 0x3a
je 0x4142e4
cmp ecx, edx
jae 0x4142d2
lea eax, [ecx + 1]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x40]
cmp edx, 8
jb 0x4142c9
mov eax, esi
mov dword [eax + ecx*2], 0x3a
jmp 0x4142e4
push 0x3a
mov byte [ebp - 0x78], 0
push dword [ebp - 0x78]
push ecx
lea ecx, [ebp - 0x40]
call fcn.004042b0
push str._LicensesLicenses.txt.
lea ecx, [ebp - 0x40]
call fcn.00403680
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
jb 0x4142fd
mov eax, dword [ebp - 0x40]
push 0x40
push str.EAC_Setup
push eax
push dword [edi + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x414080
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x414342
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414494
push edx
push ecx
call fcn.0041b677
add esp, 8
jmp 0x414080
cmp eax, dword [edi + 0xac]
jne 0x414384
push 0x13
xor eax, eax
mov dword [ebp - 0x18], ebx
push str._r_service_privacy_
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.004013e0
mov dword [ebp - 4], 7
jmp 0x414075
cmp eax, dword [edi + 0xb0]
jne 0x4143a5
push str._r_service_kb_
lea ecx, [ebp - 0x28]
call fcn.00401300
mov dword [ebp - 4], 8
jmp 0x414075
cmp eax, dword [edi + 0xc4]
jne 0x414438
cmp byte [edi + 0x9c], bl
je 0x4143ed
mov esi, dword [edi + 0x88]
push esi
call fcn.004178d0
test al, al
jne 0x4143e6
push esi
mov ecx, edi
call fcn.00417880
test al, al
jne 0x4143e6
push 0
push 0
push 0x10
push dword [edi + 8]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x414460
mov ebx, 2
jmp 0x41444d
lea esi, [edi + 0x88]
push esi
lea ecx, [edi + 0xe4]
call fcn.00418600
test eax, eax
je 0x414460
mov esi, dword [esi]
cmp dword [edi + 0x98], esi
jne 0x414414
mov ebx, 1
jmp 0x41444d
push esi
mov ecx, edi
call fcn.00417880
test al, al
jne 0x4143d5
push esi
mov ecx, edi
call fcn.004178d0
xor ebx, ebx
test al, al
setne bl
lea ebx, [ebx*2 + 1]
jmp 0x41444d
cmp eax, dword [edi + 0xbc]
je 0x4143e6
cmp eax, dword [edi + 0xb8]
jne 0x414460
mov ebx, 3
push ebx
mov ecx, edi
call fcn.00415b50
mov eax, dword [ebp - 0x78]
mov ecx, dword [edi + 0x88]
mov dword [eax], ecx
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041b636
mov esp, ebp
pop ebp
ret 8
call fcn.00436a99
call fcn.00436a99
call fcn.00436a99
call fcn.00436a99
call fcn.00436a99
int3