Function at 0x41e330
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5352f9
mov eax, dword fs:[0]
push eax
sub esp, 0x23c
mov eax, dword [0x58b464]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
call fcn.0044cea0
push 0xfffffffffffffff0
mov ecx, esi
call fcn.004672b0
mov ebx, dword [sym.imp.USER32.dll_GetWindowLongW]
push eax
call ebx
and eax, 0xff3effff
mov ecx, esi
or eax, 0x6000000
push eax
push 0xfffffffffffffff0
call fcn.004672b0
mov edi, dword [sym.imp.USER32.dll_SetWindowLongW]
push eax
call edi
push 0xffffffffffffffec
mov ecx, esi
call fcn.004672b0
push eax
call ebx
and eax, 0xfffffff7
mov ecx, esi
push eax
push 0xffffffffffffffec
call fcn.004672b0
push eax
call edi
push 0x91
mov ecx, esi
call fcn.00464900
lea ebx, [esi + 0x2c]
push str.winCtn
mov ecx, ebx
call fcn.00453710
push str.titleTabLt
mov ecx, ebx
mov dword [esi + 0x6c4], eax
call fcn.00453710
push str.mainTabLt
mov ecx, ebx
mov dword [esi + 0x68c], eax
call fcn.00453710
push str.defaultInstallBtn
mov ecx, ebx
mov dword [esi + 0x688], eax
call fcn.00453710
push str.customeInstallBtn
mov ecx, ebx
mov dword [esi + 0x690], eax
call fcn.00453710
push str.customeBtn
mov ecx, ebx
mov dword [esi + 0x694], eax
call fcn.00453710
push str.treatyBtn
mov ecx, ebx
mov dword [esi + 0x698], eax
call fcn.00453710
push str.backBtn
mov ecx, ebx
mov dword [esi + 0x69c], eax
call fcn.00453710
push str.treatyCb
mov ecx, ebx
mov dword [esi + 0x6a0], eax
call fcn.00453710
push str.chDirBtn
mov ecx, ebx
mov dword [esi + 0x6a8], eax
call fcn.00453710
push str.installDirEdit
mov ecx, ebx
mov dword [esi + 0x6ac], eax
call fcn.00453710
push str.openProduceBtn
mov ecx, ebx
mov dword [esi + 0x6b8], eax
call fcn.00453710
mov dword [esi + 0x6a4], eax
push str.ableftBtn
mov ecx, ebx
call fcn.00453710
push str.abrightBtn
mov ecx, ebx
mov dword [esi + 0x6b0], eax
call fcn.00453710
push str.titleGrpCtn
mov ecx, ebx
mov dword [esi + 0x6b4], eax
call fcn.00453710
push str.progressLb
mov ecx, ebx
mov dword [esi + 0x6c0], eax
call fcn.00453710
push str.createDSCb
mov ecx, ebx
mov dword [esi + 0x6bc], eax
call fcn.00453710
push str.createQSCb
mov ecx, ebx
mov dword [esi + 0x6c8], eax
call fcn.00453710
push str.progressAnLb
mov ecx, ebx
mov dword [esi + 0x6cc], eax
call fcn.00453710
push str.finishedLbl
mov ecx, ebx
mov dword [esi + 0x6d0], eax
call fcn.00453710
push str.installPrg
mov ecx, ebx
mov dword [esi + 0x6d4], eax
call fcn.00453710
push str.tipLbl
mov ecx, ebx
mov dword [esi + 0x6e4], eax
call fcn.00453710
push str.softNameLbl
mov ecx, ebx
mov dword [esi + 0x6e0], eax
call fcn.00453710
push str.installLogo
mov ecx, ebx
mov dword [esi + 0x6d8], eax
call fcn.00453710
mov ecx, dword [esi + 0x6d8]
mov dword [esi + 0x6dc], eax
test ecx, ecx
je 0x41e5d4
call fcn.00450a20
mov ecx, dword [esi + 0x6d8]
mov ebx, eax
call fcn.004508a0
mov ecx, esi
mov edi, eax
call fcn.004672b0
push eax
call dword [sym.imp.USER32.dll_GetDC]
push ebx
push edi
push 0x5717c0
lea ebx, [esi + 0x2c]
push ebx
push eax
call fcn.00461eb0
mov ecx, dword [esi + 0x6d8]
add esp, 0x14
mov dword [ebp - 0x90], edx
mov edx, dword [ecx]
push eax
call dword [edx + 0x80]
mov ecx, dword [esi + 0x6d8]
push 0x5717c0
mov eax, dword [ecx]
call dword [eax + 0x3c]
push str.bTitleLbl1
mov ecx, ebx
call fcn.00453710
push str.bTitleLbl2
mov ecx, ebx
mov dword [ebp - 0x20], eax
call fcn.00453710
push str.bTitleLbl3
mov ecx, ebx
mov dword [ebp - 0x1c], eax
call fcn.00453710
mov dword [ebp - 0x18], eax
mov ecx, 3
lea eax, [ebp - 0x20]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x74], eax
mov edi, dword [eax]
test edi, edi
je 0x41e671
mov ecx, edi
call fcn.00450a20
mov ecx, edi
mov ebx, eax
call fcn.004508a0
mov ecx, esi
mov edi, eax
call fcn.004672b0
push eax
call dword [sym.imp.USER32.dll_GetDC]
push ebx
push edi
push 0x5717c0
lea ecx, [esi + 0x2c]
push ecx
push eax
call fcn.00461eb0
mov edx, dword [ebp - 0x74]
add esp, 0x14
mov edi, dword [edx]
mov ecx, edi
push eax
mov edx, dword [edi]
call dword [edx + 0x80]
mov eax, dword [edi]
mov ecx, edi
push 0x5717c0
call dword [eax + 0x3c]
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x90]
add eax, 4
sub ecx, 1
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x90], ecx
jne 0x41e612
push 0xb8
call fcn.004f15e0
mov edi, eax
mov dword [ebp - 0x90], edi
push 0xb8
push 0
push edi
mov dword [ebp - 4], 0
call fcn.004ae720
add esp, 0x10
mov ecx, edi
push 1
push 1
push 1
push 0x56f9a4
push 0x56f9a4
push 0x56f9a4
sub esp, 0x28
mov eax, esp
mov dword [eax], vtable.std::_Func_impl_class__lambda_3505f79a7c3738e13025ddda0bca1763___class_std::allocator_int___void__int__double__wchar_t_const__.0
mov dword [eax + 4], esi
mov dword [eax + 0x24], eax
call fcn.00415ab0
mov dword [ebp - 4], 0xffffffff
mov ecx, esi
mov dword [esi + 0x78c], eax
call fcn.004226c0
cmp dword [esi + 0x760], 0
je 0x41e6fe
mov byte [esi + 0x7b0], 1
jmp 0x41e705
mov byte [esi + 0x7b0], 0
lea eax, [ebp - 0x70]
mov ecx, esi
push eax
call fcn.00421b20
mov dword [ebp - 4], 1
lea edx, [ebp - 0x70]
mov ecx, dword [esi + 0x6b8]
cmp dword [ebp - 0x5c], 8
cmovae edx, dword [ebp - 0x70]
mov eax, dword [ecx]
push edx
call dword [eax + 0x3c]
mov ecx, esi
call fcn.00464100
cmp byte [esi + 0x7b0], 0
je 0x41ec70
push 0x16
xor eax, eax
mov dword [ebp - 0x44], 7
push str.feizhuancompressor.exe
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x48], 0
mov word [ebp - 0x58], ax
call fcn.00406670
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x58]
cmp dword [ebp - 0x44], 8
cmovae ecx, dword [ebp - 0x58]
call fcn.0041ed90
test eax, eax
je 0x41e97d
push 0x1b
xor eax, eax
mov dword [ebp - 0x2c], 7
push 0x571ae8
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov word [ebp - 0x40], ax
call fcn.00406670
push 0xffffffffffffffff
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x240]
push 0x56f9a4
mov dword [ebp - 0x248], 4
mov dword [ebp - 0x244], 0x93
call fcn.0044d920
push 0xffffffffffffffff
push str.MessageBox1Wnd.xml
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0xb
call fcn.0044d920
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x8c]
push 0x12
xor eax, eax
mov dword [ebp - 0x78], 7
push str.MessageBox1Wnd.xml
mov dword [ebp - 0x7c], 0
mov word [ebp - 0x8c], ax
call fcn.00406670
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x28]
push 0x12
xor eax, eax
mov dword [ebp - 0x14], 7
push str.MessageBox1Wnd.xml
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
call fcn.00406670
push 1
sub esp, 8
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x8c]
call fcn.00422e60
push eax
push 0
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x28]
call fcn.00422df0
mov byte [ebp - 4], 0xf
cmp dword [eax + 0x14], 8
jb 0x41e86a
mov eax, dword [eax]
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x138]
call fcn.0044d920
mov eax, dword [ebp - 0x98]
cmp eax, 8
jb 0x41e896
inc eax
lea ecx, [ebp - 0xac]
push eax
push dword [ebp - 0xac]
call fcn.00406dd0
xor eax, eax
mov dword [ebp - 0x98], 7
mov word [ebp - 0xac], ax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x9c], 0
cmp eax, 8
jb 0x41e8c8
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00406dd0
xor eax, eax
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x18], 0
cmp eax, 8
jb 0x41e8f7
inc eax
lea ecx, [ebp - 0x8c]
push eax
push dword [ebp - 0x8c]
call fcn.00406dd0
xor eax, eax
mov dword [ebp - 0x78], 7
mov dword [ebp - 0x7c], 0
mov word [ebp - 0x8c], ax
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x40]
cmp dword [ebp - 0x2c], 8
mov ecx, esi
push 0x571b20
cmovae eax, dword [ebp - 0x40]
push eax
call fcn.004672b0
lea edx, [ebp - 0x248]
mov ecx, eax
call fcn.0044d560
add esp, 8
lea ecx, [ebp - 0x138]
call fcn.0044da40
lea ecx, [ebp - 0x1bc]
call fcn.0044da40
lea ecx, [ebp - 0x240]
call fcn.0044da40
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x41e974
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00406dd0
push 1
mov ecx, esi
call fcn.00464240
push 0xffffffffffffffff
push 0x56f9a4
lea ecx, [ebp - 0x240]
mov dword [ebp - 0x248], 4
mov dword [ebp - 0x244], 0x93
call fcn.0044d920
push 0xffffffffffffffff
push str.InstalledPathTipWnd.xml
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x11
call fcn.0044d920
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x28]
push 0x17
xor eax, eax
mov dword [ebp - 0x14], 7
push str.InstalledPathTipWnd.xml
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
call fcn.00406670
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x8c]
push 0x17
xor eax, eax
mov dword [ebp - 0x78], 7
push str.InstalledPathTipWnd.xml
mov dword [ebp - 0x7c], 0
mov word [ebp - 0x8c], ax
call fcn.00406670
push 1
sub esp, 8
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x28]
call fcn.00422e60
push eax
push 0
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x8c]
call fcn.00422df0
mov byte [ebp - 4], 0x15
cmp dword [eax + 0x14], 8
jb 0x41ea3f
mov eax, dword [eax]
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x138]
call fcn.0044d920
mov eax, dword [ebp - 0x98]
cmp eax, 8
jb 0x41ea6b
inc eax
lea ecx, [ebp - 0xac]
push eax
push dword [ebp - 0xac]
call fcn.00406dd0
xor eax, eax
mov dword [ebp - 0x98], 7
mov word [ebp - 0xac], ax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x9c], 0
cmp eax, 8
jb 0x41eaa3
inc eax
lea ecx, [ebp - 0x8c]
push eax
push dword [ebp - 0x8c]
call fcn.00406dd0
xor eax, eax
mov dword [ebp - 0x78], 7
mov word [ebp - 0x8c], ax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x7c], 0
cmp eax, 8
jb 0x41eacf
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00406dd0
xor eax, eax
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
push eax
push eax
mov ecx, esi
mov byte [ebp - 4], 0x16
call fcn.004672b0
lea edx, [ebp - 0x248]
mov ecx, eax
call fcn.0044d560
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x138]
mov edi, eax
call fcn.0044da40
lea ecx, [ebp - 0x1bc]
call fcn.0044da40
lea ecx, [ebp - 0x240]
call fcn.0044da40
cmp edi, 1
jne 0x41ec2a
lea ebx, [esi + 0x750]
push 0x5705bc
mov edx, ebx
lea ecx, [ebp - 0x40]
call fcn.004174d0
push str.feizhuancompressor.exe
mov edx, eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xac]
call fcn.00417460
mov ecx, eax
lea edi, [esi + 0x6f0]
add esp, 8
mov dword [ebp - 0x90], ecx
cmp edi, ecx
je 0x41ebb1
cmp dword [edi + 0x14], 8
jb 0x41eb8a
mov eax, dword [edi + 0x14]
mov ecx, edi
inc eax
push eax
push dword [edi]
call fcn.00406dd0
mov ecx, dword [ebp - 0x90]
mov dword [edi + 0x14], 7
cmp dword [edi + 0x14], 8
mov dword [edi + 0x10], 0
jb 0x41eba2
mov eax, dword [edi]
jmp 0x41eba4
mov eax, edi
xor edx, edx
push ecx
mov ecx, edi
mov word [eax], dx
call fcn.00409440
mov eax, dword [ebp - 0x98]
cmp eax, 8
jb 0x41ebcf
inc eax
lea ecx, [ebp - 0xac]
push eax
push dword [ebp - 0xac]
call fcn.00406dd0
xor eax, eax
mov byte [ebp - 4], 2
mov word [ebp - 0xac], ax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x98], 7
mov dword [ebp - 0x9c], 0
cmp eax, 8
jb 0x41ec05
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00406dd0
cmp dword [edi + 0x14], 8
jb 0x41ec0d
mov edi, dword [edi]
cmp dword [ebx + 0x14], 8
jb 0x41ec15
mov ebx, dword [ebx]
push 1
push ebx
push 0
push edi
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x41ec52
test edi, edi
jne 0x41ec4d
cmp dword [esi + 0x764], 8
lea eax, [esi + 0x750]
jb 0x41ec3f
mov eax, dword [eax]
push 1
push 1
push eax
mov ecx, esi
call fcn.0041efa0
jmp 0x41ec5b
cmp edi, 2
jne 0x41ec5b
push 1
mov ecx, esi
call fcn.00464240
mov eax, dword [ebp - 0x44]
cmp eax, 8
jb 0x41ec70
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00406dd0
mov eax, dword [ebp - 0x5c]
cmp eax, 8
jb 0x41ec85
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.00406dd0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004f159e
mov esp, ebp
pop ebp
ret