Function at 0x401d10
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x894
mov eax, dword [0x40c178]
xor eax, esp
mov dword [esp + 0x890], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
push 0x208
lea ecx, [esp + 0x48c]
push 0
push ecx
mov dword [esp + 0x1c], eax
call fcn.004046f0
add esp, 0xc
push 0x208
lea edx, [esp + 0x694]
push 0
push edx
call fcn.004046f0
add esp, 0xc
push 0x208
push 0
push 0x414380
call fcn.004046f0
add esp, 0xc
push 0x208
push 0
push 0x414588
call fcn.004046f0
add esp, 0xc
push 0x1a9c
push 0
push 0x4128e0
call fcn.004046f0
add esp, 0xc
push 0x414
lea eax, [esp + 0x74]
push 0
push eax
mov dword [esp + 0x20], 0
call fcn.004046f0
add esp, 0xc
push 0x44
lea ecx, [esp + 0x2c]
push 0
push ecx
call fcn.004046f0
xor eax, eax
add esp, 0xc
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], 0x44
mov dword [esp + 0x54], 1
mov word [esp + 0x58], 5
call fcn.00401000
mov esi, eax
push esi
lea edx, [esp + 0x48c]
push 0x104
push edx
call fcn.00402630
add esp, 0xc
push esi
push 0x104
push 0x414380
call fcn.00402630
add esp, 0xc
push esi
push 0x104
push 0x414588
call fcn.00402630
add esp, 0xc
push 0x40a4a4
lea eax, [esp + 0x48c]
push 0x104
push eax
call fcn.00402a44
add esp, 8
mov ecx, 0x104
sub ecx, eax
push ecx
lea edx, [esp + 0x490]
push edx
call fcn.004029ca
lea eax, [esp + 0x494]
add esp, 0xc
push eax
call fcn.00401110
add esp, 4
test eax, eax
je 0x4020f5
push str.Setup.ini
push 0x104
push 0x414380
call fcn.00402a44
mov ecx, 0x104
add esp, 8
sub ecx, eax
push ecx
push 0x414380
call fcn.004029ca
add esp, 0xc
push 0x414380
call fcn.00401110
add esp, 4
test eax, eax
je 0x4020f5
push str.PSDM.exe
push 0x104
push 0x414588
call fcn.00402a44
mov edx, 0x104
add esp, 8
sub edx, eax
push edx
push 0x414588
call fcn.004029ca
add esp, 0xc
push 0x414588
call fcn.00401110
add esp, 4
test eax, eax
je 0x4020f5
lea ebx, [esp + 0x690]
lea esi, [esp + 0x488]
call fcn.00401210
cmp eax, 1
jne 0x401fea
cmp word [esp + 0x690], 0
je 0x401fea
mov eax, ebx
push eax
lea ecx, [esp + 0x78]
push 0x104
push ecx
call fcn.00402630
add esp, 0xc
lea ebx, [esp + 0x70]
call fcn.00401340
push 0x40e930
lea edx, [esp + 0x74]
mov ecx, str.defLang
call fcn.00401c10
add esp, 4
test eax, eax
je 0x4020f5
push 0x40a4e0
push 0x104
push 0x414588
call fcn.00402a44
mov edx, 0x104
add esp, 8
sub edx, eax
push edx
push 0x414588
call fcn.004029ca
add esp, 0xc
push 0x40d2d8
push 0x104
push 0x414588
call fcn.00402a44
mov ecx, 0x104
add esp, 8
sub ecx, eax
push ecx
push 0x414588
call fcn.004029ca
add esp, 0xc
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x2c]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0x414588
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
jmp 0x4020f5
mov edi, 0x411e00
lea ecx, [esp + 0x488]
call fcn.00401ae0
mov eax, edi
lea ecx, [ecx]
mov esi, 1
cmp dword [eax + 4], esi
jne 0x402014
mov ecx, dword [eax]
add dword [esp + 0x14], esi
mov dword [esp + 0x70], ecx
add eax, 8
cmp eax, 0x411e68
jl 0x402000
cmp dword [esp + 0x14], esi
jne 0x40203a
lea ebx, [esp + 0x70]
call fcn.00401340
test eax, eax
je 0x4020f5
jmp 0x401f4c
push 0x414
lea ecx, [esp + 0x74]
push 0
push ecx
call fcn.004046f0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
cmp dword [0x411e54], esi
mov dword [esp + 0x70], eax
jne 0x402072
cmp dword [0x411e08], eax
jne 0x402072
mov dword [esp + 0x70], 0x270f
jmp 0x402081
cmp eax, 0xc0a
jne 0x402081
mov dword [esp + 0x70], 0x40a
lea ebx, [esp + 0x70]
call fcn.00401340
test eax, eax
je 0x4020f5
push 0x40e930
mov edx, ebx
mov ecx, str.defLang
call fcn.00401c10
add esp, 4
test eax, eax
je 0x4020f5
mov eax, dword [esp + 0x70]
sub eax, 0x404
push 0
push 0x402110
push 0
je 0x4020e5
sub eax, 0xd
je 0x4020d9
sub eax, 0x3f3
je 0x4020cd
push 0x5017
jmp 0x4020ea
mov eax, dword [esp + 0x1c]
push 0x7727
push eax
jmp 0x4020ef
mov ecx, dword [esp + 0x1c]
push 0x2907
push ecx
jmp 0x4020ef
push 0x9e37
mov edx, dword [esp + 0x20]
push edx
call dword [sym.imp.USER32.dll_DialogBoxParamW]
mov ecx, dword [esp + 0x89c]
pop edi
pop esi
pop ebx
xor ecx, esp
xor eax, eax
call fcn.0040269c
mov esp, ebp
pop ebp
ret 0x10