Function at 0x413fbd
Capabilities:
Create process on windows

Disassembly:
mov eax, 0x49880c
call fcn.00497330
sub esp, 0x170
push ebx
mov ebx, ecx
mov dword [ebp - 0x20], edx
push 0x10
pop ecx
mov eax, dword [ebx + 0x200]
lock or dword [eax], ecx
mov ecx, dword [edx + 0x38]
test ecx, ecx
je 0x413fec
mov eax, dword [ecx]
push ebx
call dword [eax + 4]
movzx eax, byte [ebx + 0x1b9]
lea ecx, [ebx + 0x20]
imul eax, eax, 0x18
push esi
push edi
xor edi, edi
mov dword [ebp - 0x54], edi
add eax, ecx
mov dword [ebp - 0x44], edi
push eax
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x40], edi
call fcn.00404378
lea eax, [ebp - 0x3c]
mov dword [ebp - 4], 1
push eax
mov ecx, ebx
call fcn.00410fcd
mov byte [ebp - 4], 2
cmp dword [ebp - 0x28], 8
push 0x40
pop eax
mov dword [ebp - 0xa4], eax
lea eax, [ebp - 0x3c]
cmovae eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x40], 8
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x54]
cmovae eax, dword [ebp - 0x54]
xor edx, edx
xor ecx, ecx
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0xa8], 0x3c
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0x9c], 0x4b4870
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x8c], 5
mov dword [ebp - 0x88], edi
call fcn.0040c8b0
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x1c], 0x63
push eax
mov edx, str.Launching
mov dword [ebp - 0x18], 5
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x14], str.C:BooCodeOffergateMultiSetup_ObfuscatedoglibOGLiboglib_serviceslauncher.cpp
mov dword [ebp - 0x10], str.ReplacementFor_Launch
call fcn.00414469
pop ecx
mov byte [ebp - 4], 3
lea esi, [ebp - 0x1c]
mov ecx, dword [0x4cb3dc]
push esi
push eax
mov edx, dword [ecx]
call dword [edx + 4]
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 2
call fcn.004045a0
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
push 1
lea ecx, [ebp - 0x114]
mov esi, eax
call fcn.0040c533
xor edx, edx
mov byte [ebp - 4], 4
xor ecx, ecx
cmp esi, 1
jne 0x414264
call fcn.0040c8b0
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x1c], 0x69
mov esi, str.C:BooCodeOffergateMultiSetup_ObfuscatedoglibOGLiboglib_serviceslauncher.cpp
mov dword [ebp - 0x18], 9
push eax
mov edx, str.Launch_waiting__
mov dword [ebp - 0x14], esi
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x10], str.ReplacementFor_Launch
call fcn.00414469
mov byte [ebp - 4], 5
mov ecx, eax
mov dword [esp], str.Cmd_line__
call fcn.00406efa
push eax
lea ecx, [ebp - 0xd8]
call fcn.00406923
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0xd8]
call fcn.0040e743
push eax
lea ecx, [ebp - 0xc0]
call fcn.00406923
mov byte [ebp - 4], 7
lea edx, [ebp - 0x1c]
mov ecx, dword [0x4cb3dc]
push edx
lea edx, [ebp - 0xc0]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0xc0]
call fcn.004045a0
lea ecx, [ebp - 0xd8]
call fcn.004045a0
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 4
call fcn.004045a0
mov dword [ebp - 0x24], edi
cmp dword [ebp - 0x70], edi
je 0x4141fd
push 0xffffffffffffffff
push dword [ebp - 0x70]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x70]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x4141f4
mov eax, dword [ebp - 0x24]
mov dword [ebx + 0x1f0], eax
push dword [ebp - 0x70]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
xor ecx, ecx
call fcn.0040c8b0
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x1c], 0x74
push eax
mov edx, str.Launch_finished__
mov dword [ebp - 0x18], 9
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x10], str.ReplacementFor_Launch
call fcn.00414469
pop ecx
mov byte [ebp - 4], 8
lea esi, [ebp - 0x1c]
mov ecx, dword [0x4cb3dc]
push esi
push eax
mov edx, dword [ecx]
call dword [edx + 4]
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 4
call fcn.004045a0
mov eax, dword [ebx + 0x200]
push 0x40
pop ecx
lock or dword [eax], ecx
push 0x20
pop edx
jmp 0x4143b5
mov eax, dword [ebp - 0x110]
mov dword [ebx + 0x1f0], eax
call fcn.0040c8b0
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x1c], 0x7c
mov esi, str.C:BooCodeOffergateMultiSetup_ObfuscatedoglibOGLiboglib_serviceslauncher.cpp
mov dword [ebp - 0x18], 1
push eax
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x10], str.ReplacementFor_Launch
call fcn.0040c5be
mov edi, eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x15c]
mov edx, dword [ebp - 0x110]
call fcn.0040c832
mov esi, eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xa
push eax
mov edx, str.Launch_error_for
lea ecx, [ebp - 0x17c]
call fcn.00414469
mov byte [ebp - 4], 0xb
mov ecx, eax
mov dword [esp], str.__last_error
call fcn.00406efa
push eax
lea ecx, [ebp - 0x6c]
call fcn.00406923
push esi
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0xc
push eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x12c]
call fcn.004144fb
push str.._Last_message:
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0xd
call fcn.00406efa
push eax
lea ecx, [ebp - 0xc0]
call fcn.00406923
push edi
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0xe
push eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0xd8]
call fcn.004144fb
mov byte [ebp - 4], 0xf
lea edx, [ebp - 0x1c]
mov ecx, dword [0x4cb3dc]
push edx
lea edx, [ebp - 0xd8]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0xd8]
call fcn.004045a0
lea ecx, [ebp - 0xc0]
call fcn.004045a0
lea ecx, [ebp - 0x12c]
call fcn.004045a0
lea ecx, [ebp - 0x6c]
call fcn.004045a0
lea ecx, [ebp - 0x17c]
call fcn.004045a0
lea ecx, [ebp - 0x15c]
call fcn.004045a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xf0]
call fcn.004045a0
mov eax, dword [ebx + 0x200]
push 0x20
pop edx
lock or dword [eax], edx
mov eax, dword [ebx + 0x200]
push 0xffffffffffffffef
pop ecx
lock and dword [eax], ecx
push edx
lea edx, [ebp - 0x3c]
lea ecx, [ebp - 0xf0]
call fcn.004144c0
pop ecx
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x10
push ecx
mov ecx, eax
call fcn.0040e743
push eax
lea ecx, [ebp - 0x144]
call fcn.00406923
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x12
call fcn.004045a0
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x114]
call fcn.0040c5e1
mov ecx, dword [ebp - 0x20]
mov byte [ebp - 4], 0x13
pop edi
pop esi
mov ecx, dword [ecx + 0x38]
test ecx, ecx
je 0x41442b
mov edx, dword [ecx]
push eax
lea eax, [ebp - 0x144]
push eax
push ebx
call dword [edx + 8]
lea ecx, [ebp - 0x15c]
call fcn.004045a0
lea ecx, [ebp - 0x144]
call fcn.004045a0
lea ecx, [ebp - 0x108]
call fcn.004045a0
lea ecx, [ebp - 0x3c]
call fcn.004045a0
lea ecx, [ebp - 0x54]
call fcn.004045a0
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
leave
ret