Function at 0x41f2de
Capabilities:
Create process on windows

Disassembly:
push 0x74
mov eax, 0x4a1596
call fcn.00481105
mov edi, ecx
cmp dword [edi + 0x5f0], 0
je 0x41f57d
lea ebx, [edi + 0x5e0]
cmp dword [ebx + 0x14], 8
jb 0x41f309
mov eax, dword [ebx]
jmp 0x41f30b
mov eax, ebx
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004025df
and dword [ebp - 4], 0
sub esp, 0x1c
lea eax, [edi + 0x20]
mov esi, esp
mov dword [ebp - 0x5c], esp
push eax
call fcn.00402109
lea ecx, [ebp - 0x48]
call fcn.0041a0fd
add esp, 0x1c
mov byte [ebp - 4], 1
cmp dword [eax + 0x14], 8
jb 0x41f341
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.004025df
push 0
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 3
call fcn.00402a5a
push 0
call fcn.0047a88d
pop ecx
push eax
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x5c], edx
call fcn.0041a62e
pop ecx
mov byte [ebp - 4], 4
cmp dword [eax + 0x14], 8
jb 0x41f37c
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.004025df
xor esi, esi
push esi
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.00402a5a
lea eax, [edi + 0x11c]
cmp dword [eax + 0x14], 8
jb 0x41f3a5
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.004025df
lea eax, [ebp - 0x74]
push str.client_sign
push eax
lea edi, [ebp - 0x64]
mov byte [ebp - 4], 7
call fcn.00409fd1
lea ecx, [ebp - 0x78]
push str.m_nProductID
push ecx
mov edi, eax
mov byte [ebp - 4], 8
call fcn.00404174
lea ecx, [ebp - 0x6c]
push ecx
lea ecx, [ebp - 0x70]
push ecx
mov edi, eax
mov byte [ebp - 4], 9
call fcn.00404125
lea ecx, [ebp - 0x7c]
push str.installtime
push ecx
mov edi, eax
mov byte [ebp - 4], 0xa
call fcn.00404174
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x54]
push ecx
mov edi, eax
mov byte [ebp - 4], 0xb
call fcn.00404125
add esp, 0x28
mov eax, dword [ebp - 0x7c]
add eax, 0xfffffff0
call fcn.00402a23
mov eax, dword [ebp - 0x70]
add eax, 0xfffffff0
call fcn.00402a23
mov eax, dword [ebp - 0x78]
add eax, 0xfffffff0
call fcn.00402a23
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x74]
add eax, 0xfffffff0
call fcn.00402a23
push 1
lea eax, [ebp - 0x50]
push eax
mov eax, ebx
mov dword [ebp - 0x50], 0x3f
call fcn.00404295
lea edi, [ebp - 0x4c]
cmp eax, 0xffffffff
je 0x41f4a5
lea eax, [ebp - 0x5c]
push 0x4bdb70
push eax
call fcn.00404174
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x50]
push ecx
mov edi, eax
mov byte [ebp - 4], 0x11
call fcn.00404125
add esp, 0x10
lea edi, [ebp - 0x4c]
mov byte [ebp - 4], 0x12
call fcn.00401dea
mov eax, dword [ebp - 0x50]
add eax, 0xfffffff0
call fcn.00402a23
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x5c]
jmp 0x41f4e7
lea eax, [ebp - 0x50]
push 0x4bd2f8
push eax
call fcn.00404174
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x5c]
push ecx
mov edi, eax
mov byte [ebp - 4], 0x13
call fcn.00404125
add esp, 0x10
lea edi, [ebp - 0x4c]
mov byte [ebp - 4], 0x14
call fcn.00401dea
mov eax, dword [ebp - 0x5c]
add eax, 0xfffffff0
call fcn.00402a23
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x50]
add eax, 0xfffffff0
call fcn.00402a23
push 1
push esi
push esi
push dword [ebp - 0x4c]
push str.Open
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0
mov esi, eax
call fcn.0047a88d
pop ecx
push edx
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x5c], esp
push str.installpageopentime
call fcn.004029c1
call fcn.00416cd3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x5c], esp
push str.installpageopencode
call fcn.004029c1
mov ecx, esi
call fcn.00416bf1
mov eax, dword [ebp - 0x54]
add eax, 0xfffffff0
call fcn.00402a23
mov eax, dword [ebp - 0x6c]
add eax, 0xfffffff0
call fcn.00402a23
mov eax, dword [ebp - 0x68]
add eax, 0xfffffff0
call fcn.00402a23
mov eax, dword [ebp - 0x64]
add eax, 0xfffffff0
call fcn.00402a23
mov eax, dword [ebp - 0x4c]
add eax, 0xfffffff0
call fcn.00402a23
cmp esi, 0x20
setg al
jmp 0x41f57f
xor al, al
call fcn.00481188
ret