Function at 0x414a50
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x456180
mov eax, dword fs:[0]
push eax
sub esp, 0x74
mov eax, dword [0x46f068]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], 0
mov dword [eax], 0
mov eax, dword [ebp + 8]
cmp eax, dword [edi + 0xac]
jne 0x414b00
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov dword [ebp - 4], eax
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
call fcn.00418cc0
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x414f0f
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x414af1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414f30
push edx
push ecx
call fcn.00434e86
add esp, 8
jmp 0x414f0f
cmp eax, dword [edi + 0xb4]
jne 0x414d8e
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 1
call fcn.0040fc10
test al, al
je 0x414abd
push 6
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
push str.LicensesLicenses.txt
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x70]
call fcn.00403990
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x414b58
mov eax, dword [eax]
push 1
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov edx, dword [ebp - 0x5c]
cmp eax, 0x20
setbe bl
cmp edx, 8
jb 0x414bac
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x414ba2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414f35
push edx
push ecx
call fcn.00434e86
add esp, 8
test bl, bl
je 0x414abd
mov esi, dword [edi + 0x94]
lea ecx, [ebp - 0x58]
push 0xe
push str.File_Not_Found
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
call fcn.00401590
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x70]
push 0x1b
push str.launcher.error_filenotfound
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
call fcn.00401590
sub esp, 0x18
mov byte [ebp - 4], 3
lea eax, [ebp - 0x70]
mov ecx, esp
push eax
call fcn.004035c0
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [esi + 0x68]
call fcn.00402ea0
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x5c]
cmp edx, 0x10
jb 0x414c5a
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x414c50
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414f3a
push edx
push ecx
call fcn.00434e86
add esp, 8
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x44]
cmp edx, 0x10
jb 0x414c92
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x414c88
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414f3f
push edx
push ecx
call fcn.00434e86
add esp, 8
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
test ecx, ecx
je 0x414d1f
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x40]
mov esi, dword [ebp - 0x40]
cmp edx, 8
jb 0x414cbb
mov eax, esi
cmp word [eax + ecx*2 - 2], 0x2e
jne 0x414cda
lea eax, [ecx - 1]
push 0
push eax
lea ecx, [ebp - 0x40]
call fcn.004011f0
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov esi, dword [ebp - 0x40]
test ecx, ecx
je 0x414d1f
lea eax, [ebp - 0x40]
cmp edx, 8
jb 0x414ce8
mov eax, esi
cmp word [eax + ecx*2 - 2], 0x3a
je 0x414d1f
cmp ecx, edx
jae 0x414d0d
lea eax, [ecx + 1]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x40]
cmp edx, 8
jb 0x414d04
mov eax, esi
mov dword [eax + ecx*2], 0x3a
jmp 0x414d1f
push 0x3a
mov byte [ebp - 0x74], 0
push dword [ebp - 0x74]
push ecx
lea ecx, [ebp - 0x40]
call fcn.00403ce0
push 0x17
push str._LicensesLicenses.txt.
lea ecx, [ebp - 0x40]
call fcn.004038a0
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
jb 0x414d3a
mov eax, dword [ebp - 0x40]
push 0x40
push str.EAC_Setup
push eax
push dword [edi + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x414abd
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x414d7f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414f44
push edx
push ecx
call fcn.00434e86
add esp, 8
jmp 0x414abd
cmp eax, dword [edi + 0xb0]
jne 0x414dc5
push 0x13
xor eax, eax
mov dword [ebp - 0x18], 0
push str._r_service_privacy_
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.004013d0
mov dword [ebp - 4], 7
jmp 0x414ab2
cmp eax, dword [edi + 0xc4]
jne 0x414ee0
cmp byte [edi + 0xa0], 0
je 0x414e14
mov esi, dword [edi + 0x88]
push esi
call fcn.004186e0
test al, al
jne 0x414e0a
push esi
mov ecx, edi
call fcn.00418690
test al, al
jne 0x414e0a
push 0
push 0
push 0x10
push dword [edi + 8]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x414f0f
mov ecx, 2
jmp 0x414ef9
mov edx, dword [edi + 0xe4]
mov esi, edx
mov dword [ebp - 0x74], edx
mov eax, dword [edx + 4]
mov ecx, eax
cmp byte [ecx + 0xd], 0
jne 0x414e58
mov ebx, dword [edi + 0x88]
mov edx, dword [ecx + 0x10]
cmp edx, ebx
jae 0x414e3f
mov ecx, dword [ecx + 8]
mov edx, dword [ebp - 0x74]
jmp 0x414e52
cmp byte [esi + 0xd], 0
je 0x414e4b
cmp ebx, edx
jae 0x414e4b
mov esi, ecx
mov edx, ecx
mov ecx, dword [ecx]
mov dword [ebp - 0x74], edx
cmp byte [ecx + 0xd], 0
je 0x414e30
cmp byte [esi + 0xd], 0
jne 0x414e60
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
jne 0x414e84
mov ecx, dword [edi + 0x88]
lea esp, [esp]
cmp ecx, dword [eax + 0x10]
jae 0x414e7b
mov esi, eax
mov eax, dword [eax]
jmp 0x414e7e
mov eax, dword [eax + 8]
cmp byte [eax + 0xd], 0
je 0x414e70
xor ebx, ebx
mov dword [ebp - 0x74], edx
cmp edx, esi
je 0x414f0f
lea ecx, [ebp - 0x74]
inc ebx
call fcn.00419360
cmp dword [ebp - 0x74], esi
jne 0x414e91
test ebx, ebx
je 0x414f0f
mov esi, dword [edi + 0x88]
cmp dword [edi + 0x9c], esi
jne 0x414eb8
mov ecx, 1
jmp 0x414ef9
push esi
mov ecx, edi
call fcn.00418690
test al, al
jne 0x414df6
push esi
mov ecx, edi
call fcn.004186e0
xor ecx, ecx
test al, al
setne cl
lea ecx, [ecx*2 + 1]
jmp 0x414ef9
cmp eax, dword [edi + 0xbc]
je 0x414e0a
cmp eax, dword [edi + 0xb8]
jne 0x414f0f
mov ecx, 3
mov dword [ebp - 0x78], ecx
push ecx
mov ecx, edi
call fcn.00416530
mov eax, dword [ebp - 0x7c]
mov ecx, dword [edi + 0x88]
mov dword [eax], ecx
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00434e45
mov esp, ebp
pop ebp
ret 8
call fcn.00439dba
call fcn.00439dba
call fcn.00439dba
call fcn.00439dba
call fcn.00439dba
int3