Function at 0x41e120
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x534124
mov eax, dword fs:[0]
push eax
sub esp, 0x214
mov eax, dword [0x58a464]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x4c], ebx
call fcn.0044bd80
push 0xfffffffffffffff0
mov ecx, ebx
call fcn.0048cba0
mov edi, dword [sym.imp.USER32.dll_GetWindowLongW]
push eax
call edi
and eax, 0xff3effff
mov ecx, ebx
or eax, 0x6000000
push eax
push 0xfffffffffffffff0
call fcn.0048cba0
mov esi, dword [sym.imp.USER32.dll_SetWindowLongW]
push eax
call esi
push 0xffffffffffffffec
mov ecx, ebx
call fcn.0048cba0
push eax
call edi
and eax, 0xfffffff7
mov ecx, ebx
push eax
push 0xffffffffffffffec
call fcn.0048cba0
push eax
call esi
push 0x91
mov ecx, ebx
call fcn.00463890
lea esi, [ebx + 0x2c]
push str.winCtn
mov ecx, esi
mov dword [ebp - 0x44], esi
call fcn.00452670
push str.titleTabLt
mov ecx, esi
mov dword [ebx + 0x6c4], eax
call fcn.00452670
push str.mainTabLt
mov ecx, esi
mov dword [ebx + 0x68c], eax
call fcn.00452670
push str.defaultInstallBtn
mov ecx, esi
mov dword [ebx + 0x688], eax
call fcn.00452670
push str.customeInstallBtn
mov ecx, esi
mov dword [ebx + 0x690], eax
call fcn.00452670
push str.customeBtn
mov ecx, esi
mov dword [ebx + 0x694], eax
call fcn.00452670
push str.treatyBtn
mov ecx, esi
mov dword [ebx + 0x698], eax
call fcn.00452670
push str.backBtn
mov ecx, esi
mov dword [ebx + 0x69c], eax
call fcn.00452670
push str.treatyCb
mov ecx, esi
mov dword [ebx + 0x6a0], eax
call fcn.00452670
push str.chDirBtn
mov ecx, esi
mov dword [ebx + 0x6a8], eax
call fcn.00452670
push str.installDirEdit
mov ecx, esi
mov dword [ebx + 0x6ac], eax
call fcn.00452670
push str.openProduceBtn
mov ecx, esi
mov dword [ebx + 0x6b8], eax
call fcn.00452670
mov dword [ebx + 0x6a4], eax
push str.ableftBtn
mov ecx, esi
call fcn.00452670
push str.abrightBtn
mov ecx, esi
mov dword [ebx + 0x6b0], eax
call fcn.00452670
push str.titleGrpCtn
mov ecx, esi
mov dword [ebx + 0x6b4], eax
call fcn.00452670
push str.progressLb
mov ecx, esi
mov dword [ebx + 0x6c0], eax
call fcn.00452670
push str.createDSCb
mov ecx, esi
mov dword [ebx + 0x6bc], eax
call fcn.00452670
push str.createQSCb
mov ecx, esi
mov dword [ebx + 0x6c8], eax
call fcn.00452670
push str.progressAnLb
mov ecx, esi
mov dword [ebx + 0x6cc], eax
call fcn.00452670
push str.finishedLbl
mov ecx, esi
mov dword [ebx + 0x6d0], eax
call fcn.00452670
push str.installPrg
mov ecx, esi
mov dword [ebx + 0x6d4], eax
call fcn.00452670
push str.tipLbl
mov ecx, esi
mov dword [ebx + 0x6e4], eax
call fcn.00452670
push str.softNameLbl
mov ecx, esi
mov dword [ebx + 0x6e0], eax
call fcn.00452670
push str.installLogo
mov ecx, esi
mov dword [ebx + 0x6d8], eax
call fcn.00452670
mov ecx, dword [ebx + 0x6d8]
mov dword [ebx + 0x6dc], eax
test ecx, ecx
je 0x41e3c7
call fcn.00481bf0
mov ecx, dword [ebx + 0x6d8]
mov edi, eax
call fcn.0044f800
mov ecx, ebx
mov esi, eax
call fcn.0048cba0
push eax
call dword [sym.imp.USER32.dll_GetDC]
push edi
push esi
push 0x570798
lea esi, [ebx + 0x2c]
push esi
push eax
call fcn.00460e30
mov ecx, dword [ebx + 0x6d8]
add esp, 0x14
mov dword [ebp - 0x50], edx
mov edx, dword [ecx]
push eax
call dword [edx + 0x80]
mov ecx, dword [ebx + 0x6d8]
push 0x570798
mov eax, dword [ecx]
call dword [eax + 0x3c]
push str.bTitleLbl1
mov ecx, esi
call fcn.00452670
push str.bTitleLbl2
mov ecx, esi
mov dword [ebp - 0x20], eax
call fcn.00452670
push str.bTitleLbl3
mov ecx, esi
mov dword [ebp - 0x1c], eax
call fcn.00452670
mov dword [ebp - 0x18], eax
mov ecx, 3
lea eax, [ebp - 0x20]
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x48], eax
mov esi, dword [eax]
test esi, esi
je 0x41e459
mov ecx, esi
call fcn.00481bf0
mov ecx, esi
mov ebx, eax
call fcn.0044f800
mov ecx, dword [ebp - 0x4c]
mov edi, eax
call fcn.0048cba0
push eax
call dword [sym.imp.USER32.dll_GetDC]
push ebx
push edi
push 0x570798
push dword [ebp - 0x44]
push eax
call fcn.00460e30
mov edx, dword [esi]
add esp, 0x14
mov ecx, esi
push eax
call dword [edx + 0x80]
mov eax, dword [esi]
mov ecx, esi
push 0x570798
call dword [eax + 0x3c]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x50]
add eax, 4
sub ecx, 1
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x50], ecx
jne 0x41e402
push 0xb8
call fcn.004f04c4
mov esi, eax
mov dword [ebp - 0x44], esi
push 0xb8
push 0
push esi
mov dword [ebp - 4], 0
call fcn.004ad5f0
mov ebx, dword [ebp - 0x4c]
add esp, 0x10
mov ecx, esi
push 1
push 1
push 1
push 0x56e974
push 0x56e974
push 0x56e974
sub esp, 0x28
mov eax, esp
mov dword [eax], vtable.std::_Func_impl_class__lambda_3505f79a7c3738e13025ddda0bca1763___class_std::allocator_int___void__int__double__wchar_t_const__.0
mov dword [eax + 4], ebx
mov dword [eax + 0x24], eax
call fcn.004158a0
mov dword [ebp - 4], 0xffffffff
mov ecx, ebx
mov dword [ebx + 0x78c], eax
call fcn.004223b0
cmp dword [ebx + 0x760], 0
je 0x41e4e3
mov byte [ebx + 0x7b0], 1
jmp 0x41e4ea
mov byte [ebx + 0x7b0], 0
lea eax, [ebp - 0x40]
mov ecx, ebx
push eax
call fcn.00421810
mov dword [ebp - 4], 1
lea edx, [ebp - 0x40]
mov ecx, dword [ebx + 0x6b8]
cmp dword [ebp - 0x2c], 8
cmovae edx, dword [ebp - 0x40]
mov eax, dword [ecx]
push edx
call dword [eax + 0x3c]
mov ecx, ebx
call fcn.00463090
cmp byte [ebx + 0x7b0], 0
je 0x41e7da
push 0xffffffffffffffff
push 0x56e974
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x220], 4
mov dword [ebp - 0x21c], 0x93
call fcn.0044c800
push 0xffffffffffffffff
push str.InstalledPathTipWnd.xml
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 2
call fcn.0044c800
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6c]
push 0x17
xor eax, eax
mov dword [ebp - 0x58], 7
push str.InstalledPathTipWnd.xml
mov dword [ebp - 0x5c], 0
mov word [ebp - 0x6c], ax
call fcn.004065f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x28]
push 0x17
xor eax, eax
mov dword [ebp - 0x14], 7
push str.InstalledPathTipWnd.xml
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
call fcn.004065f0
push 1
sub esp, 8
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x6c]
call fcn.00422b50
push eax
push 0
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x28]
call fcn.00422ae0
mov byte [ebp - 4], 6
cmp dword [eax + 0x14], 8
jb 0x41e5e0
mov eax, dword [eax]
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x110]
call fcn.0044c800
mov eax, dword [ebp - 0x70]
cmp eax, 8
jb 0x41e609
inc eax
lea ecx, [ebp - 0x84]
push eax
push dword [ebp - 0x84]
call fcn.00406d50
xor eax, eax
mov dword [ebp - 0x70], 7
mov word [ebp - 0x84], ax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x74], 0
cmp eax, 8
jb 0x41e635
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00406d50
xor eax, eax
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x18], 0
cmp eax, 8
jb 0x41e65e
inc eax
lea ecx, [ebp - 0x6c]
push eax
push dword [ebp - 0x6c]
call fcn.00406d50
xor eax, eax
mov dword [ebp - 0x58], 7
mov dword [ebp - 0x5c], 0
mov word [ebp - 0x6c], ax
push eax
push eax
mov ecx, ebx
mov byte [ebp - 4], 7
call fcn.0048cba0
lea edx, [ebp - 0x220]
mov ecx, eax
call fcn.0044c440
add esp, 8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x110]
mov esi, eax
call fcn.0044c920
lea ecx, [ebp - 0x194]
call fcn.0044c920
lea ecx, [ebp - 0x218]
call fcn.0044c920
cmp esi, 1
jne 0x41e7a9
lea edi, [ebx + 0x750]
push 0x56f57c
mov edx, edi
lea ecx, [ebp - 0x6c]
call fcn.004172c0
push str.picture_repair_pc.exe
mov edx, eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x84]
call fcn.00417250
mov ecx, eax
lea esi, [ebx + 0x6f0]
add esp, 8
mov dword [ebp - 0x44], ecx
cmp esi, ecx
je 0x41e739
mov eax, dword [esi + 0x14]
cmp eax, 8
jb 0x41e712
inc eax
mov ecx, esi
push eax
push dword [esi]
call fcn.00406d50
mov ecx, dword [ebp - 0x44]
mov dword [esi + 0x14], 7
cmp dword [esi + 0x14], 8
mov dword [esi + 0x10], 0
jb 0x41e72a
mov eax, dword [esi]
jmp 0x41e72c
mov eax, esi
xor edx, edx
push ecx
mov ecx, esi
mov word [eax], dx
call fcn.004093c0
mov eax, dword [ebp - 0x70]
cmp eax, 8
jb 0x41e754
inc eax
lea ecx, [ebp - 0x84]
push eax
push dword [ebp - 0x84]
call fcn.00406d50
xor eax, eax
mov byte [ebp - 4], 1
mov word [ebp - 0x84], ax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x70], 7
mov dword [ebp - 0x74], 0
cmp eax, 8
jb 0x41e784
inc eax
lea ecx, [ebp - 0x6c]
push eax
push dword [ebp - 0x6c]
call fcn.00406d50
cmp dword [esi + 0x14], 8
jb 0x41e78c
mov esi, dword [esi]
cmp dword [edi + 0x14], 8
jb 0x41e794
mov edi, dword [edi]
push 1
push edi
push 0
push esi
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x41e7d1
test esi, esi
jne 0x41e7cc
cmp dword [ebx + 0x764], 8
lea eax, [ebx + 0x750]
jb 0x41e7be
mov eax, dword [eax]
push 1
push 1
push eax
mov ecx, ebx
call fcn.0041eb00
jmp 0x41e7da
cmp esi, 2
jne 0x41e7da
push 1
mov ecx, ebx
call fcn.004631d0
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x41e7ef
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00406d50
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004f0482
mov esp, ebp
pop ebp
ret