Function at 0x403f00
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x447e8b
mov eax, dword fs:[0]
push eax
sub esp, 0x2a0
mov eax, dword [0x4624c8]
xor eax, esp
mov dword [esp + 0x298], eax
push ebx
push esi
push edi
mov eax, dword [0x4624c8]
xor eax, esp
push eax
lea eax, [esp + 0x2b0]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0x18], edi
lea ebx, [edi + 4]
mov dword [esp + 0x10], 0
push 0x454278
push 0x45427c
mov ecx, ebx
mov dword [esp + 0x1c], ebx
call fcn.004198c0
lea ecx, [esp + 0x10]
call fcn.0041d910
test eax, eax
jne 0x4042c3
mov eax, 0x405
cmp word [esp + 0x10], ax
jb 0x4042c3
push str.IIF_NOOSCHECK
mov ecx, ebx
call fcn.004197f0
test al, al
je 0x403fb0
push str.Skipping_OS_check
push 0x454308
push 0x463614
call fcn.00419150
add esp, 0xc
jmp 0x403fbb
lea ecx, [edi + 0x234]
call fcn.00420fd0
push str.IIF_NODNCHECK
mov ecx, ebx
call fcn.004197f0
test al, al
je 0x403fe4
push str.Skipping_.NET_check
push 0x454308
push 0x463614
call fcn.00419150
add esp, 0xc
jmp 0x403fef
lea ecx, [edi + 0x234]
call fcn.004211f0
push 1
mov ecx, edi
call fcn.004087b0
call fcn.00403e40
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_IsWow64Process]
cmp dword [esp + 0x10], 1
mov ecx, edi
sete al
movzx eax, al
push eax
call fcn.00408700
lea ecx, [esp + 0x1c]
call fcn.0041b420
mov dword [esp + 0x2b8], 0
lea eax, [esp + 0x1c]
cmp dword [esp + 0x30], 8
cmovae eax, dword [esp + 0x1c]
push eax
push str.Package_folder_is__s
push 0x453cac
push 0x463614
call fcn.00419150
cmp dword [esp + 0x40], 8
lea edx, [esp + 0x2c]
push 0
cmovae edx, dword [esp + 0x30]
mov ecx, 0xc
push 0
call fcn.00421720
mov esi, eax
add esp, 0x18
test esi, esi
je 0x4040c5
push str.Error_extracting_packages._This_is_most_likely_caused_by_a_corrupted_installer_package
push 0x454110
push 0x463614
call fcn.00419150
add esp, 0xc
lea ecx, [esp + 0x4c]
push 0x1ff
push str.LPSS.cpp
push 0x453a78
push esi
call fcn.00402ee0
push 0x45f830
lea eax, [esp + 0x50]
push eax
call fcn.004337ab
cmp dword [esp + 0x30], 8
lea eax, [esp + 0x1c]
mov ecx, ebx
cmovae eax, dword [esp + 0x1c]
push eax
push str.IIF_PACKAGEPATH
call fcn.004198c0
push str.Package_information_
push 0x453cac
push 0x463614
call fcn.00419150
mov esi, dword [edi + 0x310]
add esp, 0xc
cmp esi, dword [edi + 0x314]
je 0x40428c
lea edi, [esi + 0x44]
lea esp, [esp]
mov eax, dword [edi + 0x60]
test eax, eax
jne 0x4041c5
push str.IIF_PACKAGEPATH
mov ecx, ebx
call fcn.00419790
push eax
lea eax, [esp + 0xa0]
push 0x104
push eax
call fcn.004319e1
add esp, 0xc
cmp dword [edi - 0x18], 8
jb 0x404148
mov eax, dword [edi - 0x2c]
jmp 0x40414b
lea eax, [edi - 0x2c]
push eax
lea eax, [esp + 0xa0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
cmp dword [edi - 4], 0
jne 0x404167
mov ebx, str._Not_installed_
jmp 0x404174
cmp dword [edi], 8
jb 0x404171
mov ebx, dword [edi - 0x14]
jmp 0x404174
lea ebx, [edi - 0x14]
cmp dword [edi + 0x78], 8
jb 0x40417f
mov eax, dword [edi + 0x64]
jmp 0x404182
lea eax, [edi + 0x64]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x9c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
mov ecx, 0x45447c
mov eax, 0x454484
cmove ecx, eax
push ecx
push ebx
push dword [esp + 0x18]
push str.__Type_MSI:_ID_s__Installed_version:__s__Extracted:__s
push 0x453cac
push 0x463614
call fcn.00419150
add esp, 0x18
jmp 0x40426c
cmp eax, 1
jne 0x404270
cmp dword [edi + 0x44], 8
jb 0x4041d9
mov eax, dword [edi + 0x30]
jmp 0x4041dc
lea eax, [edi + 0x30]
push eax
lea eax, [esp + 0x38]
mov ecx, ebx
push eax
call fcn.00419e20
cmp dword [eax + 0x14], 8
jb 0x4041f1
mov eax, dword [eax]
push eax
lea eax, [esp + 0xa0]
push 0x104
push eax
call fcn.004319e1
add esp, 0xc
cmp dword [esp + 0x48], 8
jb 0x40421a
push dword [esp + 0x34]
call fcn.004213f0
add esp, 4
lea eax, [esp + 0x9c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveArgsW]
cmp dword [edi + 0x78], 8
jb 0x404233
mov ebx, dword [edi + 0x64]
jmp 0x404236
lea ebx, [edi + 0x64]
lea eax, [esp + 0x9c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
mov ecx, 0x45447c
mov eax, 0x454484
cmove ecx, eax
push ecx
push ebx
push str.__Type_EXE:_ID_s__Extracted:__s
push 0x453cac
push 0x463614
call fcn.00419150
add esp, 0x14
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
add esi, 0xfc
add edi, 0xfc
cmp esi, dword [eax + 0x314]
jne 0x404110
cmp dword [esp + 0x30], 8
jb 0x40429f
push dword [esp + 0x1c]
call fcn.004213f0
add esp, 4
mov ecx, dword [esp + 0x2b0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x298]
xor ecx, esp
call fcn.00430d5f
mov esp, ebp
pop ebp
ret
push 0x1dc
push str.LPSS.cpp
push str.MSI_4.5_needed
push 0x64d
lea ecx, [esp + 0x5c]
call fcn.00402ee0
push 0x45f830
lea eax, [esp + 0x50]
push eax
call fcn.004337ab
int3