Function at 0x443ff0
Capabilities:
Check if file exists
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x52598c
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x585c
call fcn.004fe1a0
mov eax, dword [0x5a4aa8]
xor eax, esp
mov dword [esp + 0x5858], eax
push ebx
push esi
push edi
mov eax, dword [0x5a4aa8]
xor eax, esp
push eax
lea eax, [esp + 0x5870]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
mov esi, edx
test esi, esi
mov edi, ecx
mov dword [esp + 0x38], edi
mov dword [esp + 0x14], ebx
je 0x4446a8
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x444051
sub eax, edx
sar eax, 1
je 0x4446a8
call fcn.004e4d97
mov eax, dword [eax + 4]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x9c]
push 1
call eax
push 0x800
lea ecx, [esp + 0x1868]
push 0
push ecx
call fcn.004fd670
add esp, 0xc
push 0x800
lea edx, [esp + 0x68]
push 0
push edx
call fcn.004fd670
add esp, 0xc
push 0x2000
lea eax, [esp + 0x3868]
push 0
push eax
call fcn.004fd670
mov ecx, dword [edi + 0x14460]
add esp, 0xc
test ecx, ecx
je 0x444170
mov eax, esi
lea ebx, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x4440d1
sub eax, ebx
sar eax, 1
je 0x4440fb
push 0
push 0x56407c
push 0x400
lea edx, [esp + 0x70]
push edx
push esi
call fcn.00480880
jmp 0x444113
push 0x3ff
push esi
lea eax, [esp + 0x6c]
push 0x400
push eax
call fcn.004fa71b
add esp, 0x10
mov ebx, dword [esp + 0x14]
test ebx, ebx
mov ecx, dword [edi + 0x14460]
je 0x444153
mov eax, ebx
lea esi, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x444126
sub eax, esi
sar eax, 1
je 0x444153
push 0
push 0x56407c
push 0x1000
lea edx, [esp + 0x3870]
push edx
push ebx
call fcn.00480880
jmp 0x4441a0
push 0xfff
push ebx
lea eax, [esp + 0x386c]
push 0x1000
push eax
call fcn.004fa71b
add esp, 0x10
jmp 0x4441a0
push 0x3ff
push esi
lea ecx, [esp + 0x6c]
push 0x400
push ecx
call fcn.004fa71b
push 0xfff
push ebx
lea edx, [esp + 0x387c]
push 0x1000
push edx
call fcn.004fa71b
add esp, 0x20
lea eax, [esp + 0x64]
push eax
push str.Open_Users_Guide___s_
mov ecx, 0x649e50
call fcn.004918f0
xor eax, eax
push 0x800
push eax
lea ecx, [esp + 0x2874]
push ecx
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
call fcn.004fd670
add esp, 0x14
push 0x800
lea edx, [esp + 0x3068]
push 0
push edx
call fcn.004fd670
xor eax, eax
add esp, 0xc
push 0x10
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
lea eax, [esp + 0x48]
push eax
push 0x400
lea ecx, [esp + 0x3070]
push ecx
push 0x400
lea edx, [esp + 0x2878]
push edx
push 4
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x84]
push ecx
call fcn.004fb6fe
add esp, 0x24
push 0x800
lea edx, [esp + 0x868]
push 0
push edx
call fcn.004fd670
add esp, 0xc
lea eax, [esp + 0x3064]
push eax
lea ebx, [edi + 0x4d18c]
push ebx
push 0x535a74
lea edx, [esp + 0x870]
call fcn.00404380
add esp, 0xc
lea ecx, [esp + 0x44]
push str..zip
push ecx
call fcn.004f9f1e
add esp, 8
test eax, eax
jne 0x4445fd
lea edx, [esp + 0x64]
lea eax, [esp + 0x1c]
call fcn.00419e00
mov dword [esp + 0x5878], 0
add edi, 0x4d180
lea edx, [esp + 0x1c]
push edx
mov ecx, edi
mov dword [esp + 0x18], edi
call fcn.00416420
cmp dword [eax + 0x18], 8
jb 0x4442d2
mov eax, dword [eax + 4]
jmp 0x4442d5
add eax, 4
lea edx, [eax + 2]
jmp 0x4442e0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4442e0
sub eax, edx
sar eax, 1
mov esi, eax
mov dword [esp + 0x5878], 0xffffffff
cmp dword [esp + 0x34], 8
jb 0x444310
mov eax, dword [esp + 0x20]
push eax
call fcn.004da999
add esp, 4
xor eax, eax
cmp esi, eax
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], eax
mov word [esp + 0x20], ax
je 0x4443ab
lea edx, [esp + 0x64]
lea eax, [esp + 0x1c]
call fcn.00419e00
mov dword [esp + 0x5878], 1
lea ecx, [esp + 0x1c]
push ecx
mov ecx, edi
call fcn.00416420
cmp dword [eax + 0x18], 8
jb 0x44435a
mov eax, dword [eax + 4]
jmp 0x44435d
add eax, 4
push 0x3ff
push eax
lea edx, [esp + 0x186c]
push 0x400
push edx
call fcn.004fa71b
add esp, 0x10
mov dword [esp + 0x5878], 0xffffffff
lea esi, [esp + 0x1c]
call fcn.00418f90
lea eax, [esp + 0x1864]
push eax
push str.Users_guide_file_is_already_extracted___s_
mov ecx, 0x649e50
call fcn.004918f0
add esp, 8
jmp 0x44464d
xor ecx, ecx
lea edi, [esp + 0x864]
lea esi, [esp + 0x64]
call fcn.004a5510
test al, al
je 0x4445e0
push 0x800
lea ecx, [esp + 0x1068]
push 0
push ecx
call fcn.004fd670
mov esi, dword [esp + 0x44]
add esp, 0xc
lea edx, [esi + 0x4d98c]
push edx
mov eax, edi
push eax
push 0x535a74
lea edx, [esp + 0x1070]
call fcn.00404380
add esp, 0xc
mov ecx, edi
push ecx
push str.Extract_success_:___s_
mov ecx, 0x649e50
call fcn.004918f0
add esp, 8
lea edx, [esp + 0x1064]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4445c1
cmp byte [esi + 0x4e98c], 0
jne 0x444553
push 0x800
lea eax, [esp + 0x2068]
push 0
push eax
call fcn.004fd670
add esp, 0xc
lea ecx, [esp + 0x44]
push ecx
add esi, 0x4e18c
push esi
lea edx, [esp + 0x286c]
push edx
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x2074]
push 0x400
push ecx
call fcn.004fb911
push 0x800
mov edx, edi
push 0
push edx
call fcn.004fd670
add esp, 0x24
push esi
push ebx
push 0x535a74
mov edx, edi
call fcn.00404380
add esp, 0xc
xor ecx, ecx
lea esi, [esp + 0x2064]
call fcn.004a5510
test al, al
je 0x444534
mov eax, edi
push eax
push str.Extract_Common_Folder_success_:___s_
mov ecx, 0x649e50
call fcn.004918f0
add esp, 8
lea edx, [esp + 0x64]
lea eax, [esp + 0x1c]
call fcn.00419e00
mov dword [esp + 0x5878], 2
lea ecx, [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x18]
call fcn.00416420
push eax
lea edx, [esp + 0x1068]
call fcn.00405220
mov dword [esp + 0x5878], 0xffffffff
lea esi, [esp + 0x1c]
call fcn.00418f90
push 0x3ff
lea edx, [esp + 0x1068]
push edx
lea eax, [esp + 0x186c]
push 0x400
push eax
call fcn.004fa71b
add esp, 0x10
jmp 0x44464d
lea ecx, [esp + 0x2064]
push ecx
push str.Open_manual_fail_:_Extract_common_folder___s_
mov ecx, 0x649e50
call fcn.004918f0
add esp, 8
jmp 0x4446ba
lea edx, [esp + 0x64]
lea eax, [esp + 0x1c]
call fcn.00419e00
mov dword [esp + 0x5878], 3
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x1c]
push edx
call fcn.00416420
push eax
lea edx, [esp + 0x1068]
call fcn.00405220
mov dword [esp + 0x5878], 0xffffffff
lea esi, [esp + 0x1c]
call fcn.00418f90
push 0x3ff
lea eax, [esp + 0x1068]
push eax
lea ecx, [esp + 0x186c]
push 0x400
push ecx
call fcn.004fa71b
add esp, 0x10
jmp 0x44464d
lea edx, [esp + 0x1064]
push edx
push str.Open_manual_fail_:_File_not_found___s_
mov ecx, 0x649e50
call fcn.004918f0
add esp, 8
jmp 0x4446ba
push ebx
lea eax, [esp + 0x68]
push eax
push str.Open_manual_fail_:_Extract_file_fail___s______s_
mov ecx, 0x649e50
call fcn.004918f0
add esp, 0xc
jmp 0x4446ba
push 0x3ff
lea ecx, [esp + 0x68]
push ecx
lea edx, [esp + 0x186c]
push 0x400
push edx
call fcn.004fa71b
lea eax, [esp + 0x54]
push eax
lea ecx, [esp + 0x3078]
push ecx
lea edx, [esp + 0x287c]
push edx
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x84]
push ecx
push str.the_file_is_not_zip_file___s_____s____s____s____s_
mov ecx, 0x649e50
call fcn.004918f0
add esp, 0x28
push 1
push 0
lea edx, [esp + 0x386c]
push edx
lea eax, [esp + 0x1870]
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp eax, 0x20
jbe 0x444690
lea ecx, [esp + 0x1864]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov edx, 0x649e50
call fcn.004917b0
add esp, 4
call fcn.004e4d97
mov eax, dword [eax + 4]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x9c]
push 0xffffffffffffffff
call eax
jmp 0x4446ba
push str._Open_manual_fail_:_Invalid_File_Path__
mov ecx, 0x649e50
call fcn.004918f0
add esp, 4
mov ecx, dword [esp + 0x5870]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x5858]
xor ecx, esp
call fcn.004fa103
mov esp, ebp
pop ebp
ret 4