Function at 0x408290
Capabilities:
Create process on windows
Get memory capacity

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x50f92f
mov eax, dword fs:[0]
push eax
sub esp, 0x68
mov eax, dword [0x551aa8]
xor eax, esp
mov dword [esp + 0x60], eax
push ebx
push esi
push edi
mov eax, dword [0x551aa8]
xor eax, esp
push eax
lea eax, [esp + 0x78]
mov dword fs:[0], eax
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x30], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
cmp dword [esp + 0x40], 0
mov ebx, 1
ja 0x40836f
jb 0x4082fa
cmp dword [esp + 0x3c], 0x2faf0800
jae 0x40836f
test byte [0x56c888], bl
jne 0x40831a
or dword [0x56c888], ebx
call fcn.0040bb80
push 0x5107b0
call fcn.0050c11f
add esp, 4
mov edi, dword [0x56c860]
lea ecx, [esp + 0x10]
add edi, 0x414
push ecx
call fcn.00414580
add esp, 4
push 0
mov dword [esp + 0x84], 0
mov eax, dword [eax]
push 0
push eax
call dword [sym.imp.mfc100u.dll_AfxMessageBox]
lea ecx, [esp + 0x10]
mov dword [esp + 0x80], 0xffffffff
call dword [sym.imp.mfc100u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_cla]
push str.Warnning__Check_Available_Memory._You_need_atleast_800MB_Ram_free_to_play_the_game.
xor esi, esi
call fcn.00417260
add esp, 4
test byte [0x56c888], bl
jne 0x40838f
or dword [0x56c888], ebx
call fcn.0040bb80
push 0x5107b0
call fcn.0050c11f
add esp, 4
lea esi, [esp + 0x18]
mov eax, 0x56c808
call fcn.00409930
push str.DragonNest.exe
mov ecx, esi
mov dword [esp + 0x84], ebx
call dword [0x511830]
test byte [0x56c888], bl
jne 0x4083d1
or dword [0x56c888], ebx
call fcn.0040bb80
push 0x5107b0
call fcn.0050c11f
add esp, 4
lea esi, [esp + 0x10]
mov eax, 0x56c808
call fcn.00409910
push ebx
push 0
mov ecx, eax
mov byte [esp + 0x88], 2
call dword [sym.imp.mfc100u.dll_ATL::CSimpleStringT_wchar_t_1_::GetBuffer_1]
push eax
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc100u.dll_ATL::CSimpleStringT_wchar_t_1_::GetBuffer_1]
mov edx, dword [esp + 0x2c]
push eax
mov eax, dword [edx + 0x20]
push 0
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, esi
mov byte [esp + 0x80], bl
call dword [sym.imp.mfc100u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_cla]
test byte [0x56c888], bl
jne 0x40843d
or dword [0x56c888], ebx
call fcn.0040bb80
push 0x5107b0
call fcn.0050c11f
add esp, 4
mov edi, dword [0x56c85c]
mov dword [esp + 0x10], edi
test byte [0x56c888], bl
jne 0x408467
or dword [0x56c888], ebx
call fcn.0040bb80
push 0x5107b0
call fcn.0050c11f
add esp, 4
mov ecx, dword [0x56c858]
push ecx
push edi
push str.Check_Next_Version_Ver:_d__Server_Ver:_d
mov esi, 2
call fcn.00417260
add esp, 0xc
test edi, edi
jle 0x408630
test byte [0x56c888], bl
jne 0x4084a9
or dword [0x56c888], ebx
call fcn.0040bb80
push 0x5107b0
call fcn.0050c11f
add esp, 4
cmp edi, dword [0x56c858]
jle 0x408630
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc100u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov byte [esp + 0x80], 3
test byte [0x56c888], bl
jne 0x4084e7
or dword [0x56c888], ebx
call fcn.0040bb80
push 0x5107b0
call fcn.0050c11f
add esp, 4
lea esi, [esp + 0x28]
mov eax, 0x56c808
call fcn.00409930
mov edi, eax
mov byte [esp + 0x80], 4
test byte [0x56c888], bl
jne 0x40851f
or dword [0x56c888], ebx
call fcn.0040bb80
push 0x5107b0
call fcn.0050c11f
add esp, 4
lea esi, [esp + 0x24]
mov eax, 0x56c808
call fcn.004098f0
mov esi, eax
mov byte [esp + 0x80], 5
test byte [0x56c888], bl
jne 0x408557
or dword [0x56c888], ebx
call fcn.0040bb80
push 0x5107b0
call fcn.0050c11f
add esp, 4
mov edx, dword [esp + 0x10]
mov eax, dword [0x56c858]
mov ecx, dword [edi]
push edx
mov edx, dword [esi]
inc eax
push eax
push ecx
push edx
lea eax, [esp + 0x2c]
push str._s_s_d__d
push eax
call dword [sym.imp.mfc100u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::Format]
add esp, 0x18
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc100u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_cla]
lea ecx, [esp + 0x28]
mov byte [esp + 0x80], 3
call dword [sym.imp.mfc100u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_cla]
test byte [0x56c888], bl
jne 0x4085b8
or dword [0x56c888], ebx
call fcn.0040bb80
push 0x5107b0
call fcn.0050c11f
add esp, 4
lea esi, [esp + 0x14]
mov eax, 0x56c808
call fcn.00409930
push str.DnAutoUpdate.exe
mov ecx, esi
mov byte [esp + 0x84], 6
call dword [0x511830]
push 0
mov ecx, esi
call dword [sym.imp.mfc100u.dll_ATL::CSimpleStringT_wchar_t_1_::GetBuffer]
push eax
push str.Execute_AutoUpdate.exe__s
mov esi, 2
call fcn.00417260
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x28]
add esp, 8
push ebx
push 0
push ecx
mov ecx, dword [eax + 0x20]
push edx
push 0
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc100u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_cla]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x80], bl
call dword [sym.imp.mfc100u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_cla]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [esp + 0x20]
call dword [sym.imp.mfc100u.dll_CDialog::OnOK]
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc100u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_cla]
mov ecx, dword [esp + 0x78]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.0050bf32
mov esp, ebp
pop ebp
ret