Function at 0x408e70
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x378
push ebx
push esi
push edi
push ebp
push 0
call fcn.004092a0
add esp, 4
test eax, eax
jne 0x408e98
mov eax, 0xffffffff
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x378
ret
mov eax, dword [esp + 0x38c]
mov ecx, dword [esp + 0x390]
push eax
push ecx
mov ecx, 0x435bf0
call fcn.00403dc0
lea ecx, [esp + 0x8c]
push eax
push str._s_s_s
push ecx
call fcn.0040f6c0
lea ecx, [esp + 0x98]
add esp, 0x14
push ecx
call fcn.004091a0
add esp, 4
test eax, eax
jne 0x408f0c
mov ebx, dword [esp + 0x3a0]
mov edi, dword [esp + 0x39c]
or ebx, 0x30
push ebx
push str.WebBullet_Installation_Error
push edi
call fcn.00409610
add esp, 0xc
mov eax, 0xffffffff
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x378
ret
push 0x7f02
mov eax, dword [0x436898]
push eax
call dword [sym.imp.USER32.dll_LoadCursorA]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
mov esi, eax
lea edi, [esp + 0x24]
xor eax, eax
mov ecx, 0x11
rep stosd dword es:[edi], eax
mov ax, word [esp + 0x398]
mov ecx, dword [esp + 0x394]
mov word [esp + 0x54], ax
push ecx
lea edx, [esp + 0x88]
lea eax, [esp + 0x18c]
mov dword [esp + 0x28], 0x44
mov dword [esp + 0x54], 1
push edx
push str._s__s
push eax
call fcn.0040f6c0
mov edi, dword [esp + 0x3ac]
mov ebx, dword [esp + 0x3b0]
add esp, 0x10
mov ebp, dword [sym.imp.KERNEL32.dll_CreateProcessA]
lea eax, [esp + 0x14]
lea ecx, [esp + 0x24]
lea edx, [esp + 0x188]
push eax
push ecx
push 0
push 0
push 0x200
push 0
push 0
push 0
push edx
push 0
call ebp
test eax, eax
jne 0x408ff1
mov eax, ebx
or eax, 0x30
push eax
push str.WebBullet_Installation_Error
push edi
call fcn.00409610
add esp, 0xc
cmp eax, 2
je 0x408fda
cmp eax, 3
je 0x408fda
cmp eax, 5
je 0x408fda
cmp eax, 7
jne 0x408f89
push esi
call dword [sym.imp.USER32.dll_SetCursor]
mov eax, 0xffffffff
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x378
ret
push esi
call dword [sym.imp.USER32.dll_SetCursor]
mov dword [esp + 0x10], 0x103
cmp dword [esp + 0x14], 0xffffffff
je 0x409079
mov esi, dword [sym.imp.USER32.dll_PeekMessageA]
mov ebp, dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x10]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x409079
cmp dword [esp + 0x10], 0x103
jne 0x409079
lea eax, [esp + 0x68]
push 0
push 0
push 0
push 0
push eax
call esi
test eax, eax
je 0x409072
call fcn.00421a04
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x60]
push 0
test eax, eax
je 0x40906d
call ebp
lea eax, [esp + 0x68]
push 0
push 0
push 0
push 0
push eax
call esi
test eax, eax
jne 0x409044
jmp 0x409072
call fcn.0042883c
cmp dword [esp + 0x14], 0xffffffff
jne 0x409013
mov eax, dword [esp + 0x18]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
call esi
mov ecx, dword [esp + 0x14]
push ecx
call esi
mov ecx, 0x435bf0
call fcn.00403de0
mov eax, dword [eax + 0x1c]
mov ebp, dword [sym.imp.USER32.dll_SetForegroundWindow]
push eax
call ebp
cmp dword [esp + 0x10], 0x103
jne 0x4090cf
or ebx, 0x30
push ebx
push str.WebBullet_Installation_Error
push edi
call fcn.00409610
add esp, 0xc
mov eax, 0xffffffff
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x378
ret
mov eax, dword [esp + 0x10]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x378
ret