Function at 0x413c70
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45c828
mov eax, dword fs:[0]
push eax
sub esp, 0x6c
mov eax, dword [0x47b008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [ebp + 0xc]
xor ebx, ebx
mov dword [ebp - 0x74], eax
mov dword [eax], ebx
mov eax, dword [ebp + 8]
cmp eax, dword [edi + 0xa8]
jne 0x413cdd
xor eax, eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
mov dword [ebp - 4], eax
lea eax, [ebp - 0x40]
mov ecx, edi
push eax
call fcn.00415f70
lea ecx, [ebp - 0x40]
call fcn.00401520
jmp 0x413fbd
cmp eax, dword [edi + 0xb4]
jne 0x413e8d
xor eax, eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 1
call fcn.00410640
test al, al
je 0x413e80
push 6
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
push str.LicensesLicenses.txt
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x58]
call fcn.0040a880
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x413d35
mov eax, dword [eax]
push 1
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x58]
mov esi, eax
call fcn.00401520
cmp esi, 0x20
ja 0x413e80
push 0xe
push str.File_Not_Found
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
call fcn.004016e0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x70]
push 0x1b
push str.launcher.error_filenotfound
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
call fcn.004016e0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 3
mov ecx, dword [edi + 0x90]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0040fa00
lea ecx, [ebp - 0x70]
call fcn.00401680
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 6
call fcn.00401680
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x413e4c
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x28]
mov esi, dword [ebp - 0x28]
cmp edx, 8
jb 0x413de8
mov eax, esi
cmp word [eax + ecx*2 - 2], 0x2e
jne 0x413e07
lea eax, [ecx - 1]
push 0
push eax
lea ecx, [ebp - 0x28]
call fcn.00401450
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x28]
test ecx, ecx
je 0x413e4c
lea eax, [ebp - 0x28]
cmp edx, 8
jb 0x413e15
mov eax, esi
cmp word [eax + ecx*2 - 2], 0x3a
je 0x413e4c
cmp ecx, edx
jae 0x413e3a
lea eax, [ecx + 1]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x28]
cmp edx, 8
jb 0x413e31
mov eax, esi
mov dword [eax + ecx*2], 0x3a
jmp 0x413e4c
push 0x3a
mov byte [ebp - 0x74], 0
push dword [ebp - 0x74]
push ecx
lea ecx, [ebp - 0x28]
call fcn.0040ac30
push 0x17
push str._LicensesLicenses.txt.
lea ecx, [ebp - 0x28]
call fcn.0040a810
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
jb 0x413e67
mov eax, dword [ebp - 0x28]
push 0x40
push str.EAC_Setup
push eax
push dword [edi + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x28]
call fcn.00401520
lea ecx, [ebp - 0x40]
call fcn.00401520
jmp 0x413fbd
cmp eax, dword [edi + 0xac]
jne 0x413ebe
xor eax, eax
mov dword [ebp - 0x30], ebx
push str._r_service_privacy_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
call fcn.00401590
mov dword [ebp - 4], 7
jmp 0x413cc5
cmp eax, dword [edi + 0xb0]
jne 0x413f02
xor eax, eax
mov dword [ebp - 0x48], ebx
push str._r_service_kb_
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
call fcn.00401590
lea eax, [ebp - 0x58]
mov dword [ebp - 4], 8
push eax
mov ecx, edi
call fcn.00415f70
lea ecx, [ebp - 0x58]
call fcn.00401520
jmp 0x413fbd
cmp eax, dword [edi + 0xc4]
jne 0x413f95
lea eax, [edi + 0x88]
cmp byte [edi + 0x9c], bl
je 0x413f4c
mov esi, dword [eax]
push esi
call fcn.00415ad0
test al, al
jne 0x413f45
push esi
mov ecx, edi
call fcn.00415a80
test al, al
jne 0x413f45
push 0
push 0
push 0x10
push dword [edi + 8]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x413fbd
mov ebx, 2
jmp 0x413faa
push eax
lea ecx, [edi + 0xe4]
call fcn.00416630
test eax, eax
je 0x413fbd
mov esi, dword [edi + 0x88]
cmp dword [edi + 0x98], esi
jne 0x413f71
mov ebx, 1
jmp 0x413faa
push esi
mov ecx, edi
call fcn.00415a80
test al, al
jne 0x413f34
push esi
mov ecx, edi
call fcn.00415ad0
xor ebx, ebx
test al, al
setne bl
lea ebx, [ebx*2 + 1]
jmp 0x413faa
cmp eax, dword [edi + 0xbc]
je 0x413f45
cmp eax, dword [edi + 0xb8]
jne 0x413fbd
mov ebx, 3
push ebx
mov ecx, edi
call fcn.00414dd0
mov eax, dword [ebp - 0x74]
mov ecx, dword [edi + 0x88]
mov dword [eax], ecx
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042207c
mov esp, ebp
pop ebp
ret 8