Function at 0x413ff0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x451ef8
mov eax, dword fs:[0]
push eax
sub esp, 0x6c
mov eax, dword [0x46b008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [ebp + 0xc]
xor ebx, ebx
mov dword [ebp - 0x78], eax
mov dword [eax], ebx
mov eax, dword [ebp + 8]
cmp eax, dword [edi + 0xa8]
jne 0x414093
xor eax, eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov dword [ebp - 4], eax
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
call fcn.00417e90
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x414430
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x414084
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414450
push edx
push ecx
call fcn.0041b657
add esp, 8
jmp 0x414430
cmp eax, dword [edi + 0xb4]
jne 0x414321
xor eax, eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 1
call fcn.00410230
test al, al
je 0x414050
push 6
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
push str.LicensesLicenses.txt
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x70]
call fcn.00403fa0
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x4140e7
mov eax, dword [eax]
push 1
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov edx, dword [ebp - 0x5c]
cmp eax, 0x20
setbe al
mov byte [ebp - 0x71], al
cmp edx, 8
jb 0x414141
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x414134
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414455
push edx
push ecx
call fcn.0041b657
mov al, byte [ebp - 0x71]
add esp, 8
test al, al
je 0x414050
push 0xe
push str.File_Not_Found
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
call fcn.00401580
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x70]
push 0x1b
push str.launcher.error_filenotfound
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
call fcn.00401580
sub esp, 0x18
mov byte [ebp - 4], 3
mov esi, dword [edi + 0x90]
lea eax, [ebp - 0x70]
mov ecx, esp
push eax
call fcn.00403580
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [esi + 0x68]
call fcn.00402fd0
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x5c]
cmp edx, 0x10
jb 0x4141ef
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4141e5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41445a
push edx
push ecx
call fcn.0041b657
add esp, 8
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x44]
cmp edx, 0x10
jb 0x414227
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41421d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41445f
push edx
push ecx
call fcn.0041b657
add esp, 8
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
test ecx, ecx
je 0x4142b4
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x40]
mov esi, dword [ebp - 0x40]
cmp edx, 8
jb 0x414250
mov eax, esi
cmp word [eax + ecx*2 - 2], 0x2e
jne 0x41426f
lea eax, [ecx - 1]
push 0
push eax
lea ecx, [ebp - 0x40]
call fcn.004011e0
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov esi, dword [ebp - 0x40]
test ecx, ecx
je 0x4142b4
lea eax, [ebp - 0x40]
cmp edx, 8
jb 0x41427d
mov eax, esi
cmp word [eax + ecx*2 - 2], 0x3a
je 0x4142b4
cmp ecx, edx
jae 0x4142a2
lea eax, [ecx + 1]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x40]
cmp edx, 8
jb 0x414299
mov eax, esi
mov dword [eax + ecx*2], 0x3a
jmp 0x4142b4
push 0x3a
mov byte [ebp - 0x78], 0
push dword [ebp - 0x78]
push ecx
lea ecx, [ebp - 0x40]
call fcn.00404290
push str._LicensesLicenses.txt.
lea ecx, [ebp - 0x40]
call fcn.00403660
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
jb 0x4142cd
mov eax, dword [ebp - 0x40]
push 0x40
push str.EAC_Setup
push eax
push dword [edi + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x414050
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x414312
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414464
push edx
push ecx
call fcn.0041b657
add esp, 8
jmp 0x414050
cmp eax, dword [edi + 0xac]
jne 0x414354
push 0x13
xor eax, eax
mov dword [ebp - 0x18], ebx
push str._r_service_privacy_
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.004013c0
mov dword [ebp - 4], 7
jmp 0x414045
cmp eax, dword [edi + 0xb0]
jne 0x414375
push str._r_service_kb_
lea ecx, [ebp - 0x28]
call fcn.004012e0
mov dword [ebp - 4], 8
jmp 0x414045
cmp eax, dword [edi + 0xc4]
jne 0x414408
cmp byte [edi + 0x9c], bl
je 0x4143bd
mov esi, dword [edi + 0x88]
push esi
call fcn.004178a0
test al, al
jne 0x4143b6
push esi
mov ecx, edi
call fcn.00417850
test al, al
jne 0x4143b6
push 0
push 0
push 0x10
push dword [edi + 8]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x414430
mov ebx, 2
jmp 0x41441d
lea esi, [edi + 0x88]
push esi
lea ecx, [edi + 0xe4]
call fcn.004185e0
test eax, eax
je 0x414430
mov esi, dword [esi]
cmp dword [edi + 0x98], esi
jne 0x4143e4
mov ebx, 1
jmp 0x41441d
push esi
mov ecx, edi
call fcn.00417850
test al, al
jne 0x4143a5
push esi
mov ecx, edi
call fcn.004178a0
xor ebx, ebx
test al, al
setne bl
lea ebx, [ebx*2 + 1]
jmp 0x41441d
cmp eax, dword [edi + 0xbc]
je 0x4143b6
cmp eax, dword [edi + 0xb8]
jne 0x414430
mov ebx, 3
push ebx
mov ecx, edi
call fcn.00415b20
mov eax, dword [ebp - 0x78]
mov ecx, dword [edi + 0x88]
mov dword [eax], ecx
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041b616
mov esp, ebp
pop ebp
ret 8
call fcn.00436a89
call fcn.00436a89
call fcn.00436a89
call fcn.00436a89
call fcn.00436a89
int3