Function at 0x4067ae
Capabilities:
Create process on windows

Disassembly:
push 0x164
mov eax, 0x4249be
call fcn.0040f9de
mov esi, edx
mov edi, ecx
call fcn.004044a4
test al, al
je 0x4069a3
cmp byte [ebp + 0x14], 0
je 0x406813
mov ecx, edi
call fcn.0040ebe6
test al, al
jne 0x406813
push str.WT::CommonAppLogic::InstallUtils::Exec
push 0xa3
push str.WtCommonAppLogicInstallUtils.cpp
push ecx
push ecx
mov ecx, esp
push str.File_is_not_signed
call fcn.00403f49
lea ecx, [ebp - 0x9c]
call fcn.004082ed
mov dword [ebp - 4], 3
jmp 0x4069ee
push edi
mov edx, 0x4262fc
lea ecx, [ebp - 0x40]
call fcn.00403cf1
mov dword [ebp - 4], 4
mov edx, eax
push 0x22
lea ecx, [ebp - 0x28]
call fcn.0040368a
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x40]
call fcn.00402dad
cmp dword [ebp + 0xc], 0
je 0x4068a0
lea eax, [ebp - 0x111]
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0xb4]
call fcn.00405c51
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x40]
push eax
push 0x20
pop edx
call fcn.00406685
mov byte [ebp - 4], 8
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x40687b
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00402f79
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x40]
call fcn.00402dad
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xb4]
call fcn.00402dad
xor edx, edx
mov dword [ebp - 0x160], 0x44
xor eax, eax
mov dword [ebp - 0x15c], edx
inc eax
mov dword [ebp - 0x158], edx
mov word [ebp - 0x130], ax
xorps xmm0, xmm0
xor eax, eax
mov dword [ebp - 0x154], edx
mov dword [ebp - 0x150], edx
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x144], edx
mov dword [ebp - 0x140], edx
mov dword [ebp - 0x13c], edx
mov dword [ebp - 0x138], edx
mov dword [ebp - 0x134], 0x81
mov word [ebp - 0x12e], ax
movups xmmword [ebp - 0x12c], xmm0
cmp dword [esi + 0x10], edx
jne 0x406918
mov esi, edx
jmp 0x406920
cmp dword [esi + 0x14], 8
jb 0x406920
mov esi, dword [esi]
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0x170]
push ecx
lea ecx, [ebp - 0x160]
push ecx
push esi
push edx
push dword [ebp + 0x10]
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push edx
push edx
push edx
push eax
push edx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x40697b
push str.WT::CommonAppLogic::InstallUtils::Exec
push 0xc1
push str.WtCommonAppLogicInstallUtils.cpp
push ecx
push ecx
mov ecx, esp
push str.CreateProcessW_failed
call fcn.00403f49
lea ecx, [ebp - 0x9c]
call fcn.004082ed
mov byte [ebp - 4], 9
jmp 0x4069ee
push dword [ebp - 0x16c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp - 0x170]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00402dad
mov eax, esi
call fcn.0040f988
ret 0x10
push edi
mov edx, str.File_does_not_exist:
lea ecx, [ebp - 0x40]
call fcn.00403cf1
and dword [ebp - 4], 0
lea ecx, [ebp - 0x11c]
push ecx
mov ecx, eax
call fcn.00402c7a
push str.WT::CommonAppLogic::InstallUtils::Exec
push 0x9e
push str.WtCommonAppLogicInstallUtils.cpp
push dword [eax + 4]
lea ecx, [ebp - 0x9c]
push dword [eax]
call fcn.004083d0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x40]
call fcn.00402ca6
lea ecx, [ebp - 0x9c]
call fcn.00408838
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x110]
call fcn.00408236
push 0x42e4f0
lea eax, [ebp - 0x110]
push eax
call fcn.0041162d
int3