Function at 0x401d60
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x415c78
mov eax, dword fs:[0]
push eax
sub esp, 0x44
push ebx
push esi
push edi
mov eax, dword [0x41f00c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.00403e90
mov ebx, dword [ebp + 8]
cmp ebx, 1
jne 0x401de6
mov eax, dword [ebp + 0xc]
mov ecx, str._status
mov eax, dword [eax]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x401dc6
test dx, dx
je 0x401dc2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x401dc6
add eax, 4
add ecx, 4
test dx, dx
jne 0x401da0
xor eax, eax
jmp 0x401dcb
sbb eax, eax
or eax, 1
test eax, eax
jne 0x401de6
call fcn.004016b0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor edi, edi
lea esi, [edi + 1]
cmp ebx, esi
jle 0x401f20
mov eax, dword [ebp + 0xc]
push 1
push 0x41ba04
push dword [eax + esi*4]
call fcn.00408e2d
add esp, 0xc
test eax, eax
jne 0x401e42
mov eax, dword [ebp + 0xc]
push 7
push 0x41ba08
push dword [eax + esi*4]
call fcn.00408e2d
movzx ecx, byte [0x420a10]
add esp, 0xc
test eax, eax
mov eax, 1
cmove ecx, eax
inc esi
mov byte [0x420a10], cl
cmp ebx, esi
jg 0x401df3
jmp 0x401f26
cmp ebx, esi
jle 0x401f20
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x10], edi
call fcn.00402cd0
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], 0
call fcn.00401740
test edi, edi
js 0x401ef6
push 0x3c
lea eax, [ebp - 0x50]
mov edi, 0x80004005
push 0
push eax
call fcn.004065f0
mov eax, dword [ebp + 0xc]
add esp, 0xc
cmp byte [0x420a10], 0
mov ecx, str.__norestart
mov dword [ebp - 0x50], 0x3c
mov dword [ebp - 0x4c], 0x440
mov eax, dword [eax + esi*4]
mov dword [ebp - 0x40], eax
mov eax, str.__quiet__passive__norestart
cmove eax, ecx
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x44], str.open
mov dword [ebp - 0x38], 0x41b958
mov dword [ebp - 0x34], 0xa
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x401eed
push 0xffffffffffffffff
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
neg eax
sbb eax, eax
and edi, eax
inc esi
cmp ebx, esi
jg 0x401e67
lea ecx, [ebp - 0x14]
call fcn.00401c70
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x14]
push eax
push dword [eax]
lea eax, [ebp + 8]
push eax
call fcn.004023c0
push dword [ebp - 0x14]
call fcn.004043c2
add esp, 4
jmp 0x401fc5
mov cl, byte [0x420a10]
test cl, cl
jne 0x401fc5
push 0x41b958
call fcn.004037a0
push 0x41b95c
call fcn.004037a0
add esp, 8
cmp byte [0x420a10], 0
jne 0x401fc5
push str.usage:_ooxmlConvertInstaller.exe__options___installFile__...__installFile_
call fcn.004037a0
push 0x41b95c
call fcn.004037a0
add esp, 8
cmp byte [0x420a10], 0
jne 0x401fc5
push 0x41b958
call fcn.004037a0
push 0x41b95c
call fcn.004037a0
add esp, 8
cmp byte [0x420a10], 0
jne 0x401fc5
push str.options:
call fcn.004037a0
push 0x41b95c
call fcn.004037a0
add esp, 8
cmp byte [0x420a10], 0
jne 0x401fc5
push str.___silent___no_UI_is_displayed__fails_silently
call fcn.004037a0
push 0x41b95c
call fcn.004037a0
add esp, 8
xor eax, eax
mov ecx, 1
test edi, edi
cmovs eax, ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret