Function at 0x40ff60
Capabilities:
Check if file exists
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c3519
mov eax, dword fs:[0]
push eax
sub esp, 0x23c
mov eax, dword [0x4f93d4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
call fcn.004237c0
push 0xfffffffffffffff0
mov ecx, esi
call fcn.00464750
mov ebx, dword [sym.imp.USER32.dll_GetWindowLongW]
push eax
call ebx
and eax, 0xff3effff
mov ecx, esi
or eax, 0x6000000
push eax
push 0xfffffffffffffff0
call fcn.00464750
mov edi, dword [sym.imp.USER32.dll_SetWindowLongW]
push eax
call edi
push 0xffffffffffffffec
mov ecx, esi
call fcn.00464750
push eax
call ebx
and eax, 0xfffffff7
mov ecx, esi
push eax
push 0xffffffffffffffec
call fcn.00464750
push eax
call edi
push 0x91
mov ecx, esi
call fcn.0043b360
lea ebx, [esi + 0x2c]
push str.winCtn
mov ecx, ebx
call fcn.0042a0d0
push str.titleTabLt
mov ecx, ebx
mov dword [esi + 0x6c8], eax
call fcn.0042a0d0
push str.mainTabLt
mov ecx, ebx
mov dword [esi + 0x68c], eax
call fcn.0042a0d0
push str.defaultInstallBtn
mov ecx, ebx
mov dword [esi + 0x688], eax
call fcn.0042a0d0
push str.customeInstallBtn
mov ecx, ebx
mov dword [esi + 0x690], eax
call fcn.0042a0d0
push str.customeBtn
mov ecx, ebx
mov dword [esi + 0x694], eax
call fcn.0042a0d0
push str.treatyBtn
mov ecx, ebx
mov dword [esi + 0x698], eax
call fcn.0042a0d0
push str.backBtn
mov ecx, ebx
mov dword [esi + 0x69c], eax
call fcn.0042a0d0
push str.treatyCb
mov ecx, ebx
mov dword [esi + 0x6a0], eax
call fcn.0042a0d0
push str.serviceCb
mov ecx, ebx
mov dword [esi + 0x6a8], eax
call fcn.0042a0d0
push str.chDirBtn
mov ecx, ebx
mov dword [esi + 0x6ac], eax
call fcn.0042a0d0
push str.installDirEdit
mov ecx, ebx
mov dword [esi + 0x6b0], eax
call fcn.0042a0d0
mov dword [esi + 0x6bc], eax
push str.openProduceBtn
mov ecx, ebx
call fcn.0042a0d0
push str.ableftBtn
mov ecx, ebx
mov dword [esi + 0x6a4], eax
call fcn.0042a0d0
push str.abrightBtn
mov ecx, ebx
mov dword [esi + 0x6b4], eax
call fcn.0042a0d0
push str.titleGrpCtn
mov ecx, ebx
mov dword [esi + 0x6b8], eax
call fcn.0042a0d0
push str.progressLb
mov ecx, ebx
mov dword [esi + 0x6c4], eax
call fcn.0042a0d0
push str.createDSCb
mov ecx, ebx
mov dword [esi + 0x6c0], eax
call fcn.0042a0d0
push str.createQSCb
mov ecx, ebx
mov dword [esi + 0x6cc], eax
call fcn.0042a0d0
push str.progressAnLb
mov ecx, ebx
mov dword [esi + 0x6d0], eax
call fcn.0042a0d0
push str.finishedLbl
mov ecx, ebx
mov dword [esi + 0x6d4], eax
call fcn.0042a0d0
push str.installPrg
mov ecx, ebx
mov dword [esi + 0x6d8], eax
call fcn.0042a0d0
push str.tipLbl
mov ecx, ebx
mov dword [esi + 0x6ec], eax
call fcn.0042a0d0
push str.softNameLbl
mov ecx, ebx
mov dword [esi + 0x6e8], eax
call fcn.0042a0d0
push str.installLogo
mov ecx, ebx
mov dword [esi + 0x6dc], eax
call fcn.0042a0d0
push str.languageCombo
mov ecx, ebx
mov dword [esi + 0x6e0], eax
call fcn.0042a0d0
mov dword [esi + 0x6e4], eax
test eax, eax
je 0x4101ce
mov ecx, esi
call fcn.00414d70
mov ecx, dword [esi + 0x6dc]
test ecx, ecx
je 0x410233
call fcn.00459710
mov ecx, dword [esi + 0x6dc]
mov ebx, eax
call fcn.00427260
mov ecx, esi
mov edi, eax
call fcn.00464750
push eax
call dword [sym.imp.USER32.dll_GetDC]
push ebx
push edi
push 0x4e8d80
lea ebx, [esi + 0x2c]
push ebx
push eax
call fcn.00438910
mov ecx, dword [esi + 0x6dc]
add esp, 0x14
mov dword [ebp - 0x90], edx
mov edx, dword [ecx]
push eax
call dword [edx + 0x80]
mov ecx, dword [esi + 0x6dc]
push 0x4e8d80
mov eax, dword [ecx]
call dword [eax + 0x3c]
push str.bTitleLbl1
mov ecx, ebx
call fcn.0042a0d0
push str.bTitleLbl2
mov ecx, ebx
mov dword [ebp - 0x20], eax
call fcn.0042a0d0
push str.bTitleLbl3
mov ecx, ebx
mov dword [ebp - 0x1c], eax
call fcn.0042a0d0
mov dword [ebp - 0x18], eax
mov ecx, 3
lea eax, [ebp - 0x20]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x74], eax
mov edi, dword [eax]
test edi, edi
je 0x4102d0
mov ecx, edi
call fcn.00459710
mov ecx, edi
mov ebx, eax
call fcn.00427260
mov ecx, esi
mov edi, eax
call fcn.00464750
push eax
call dword [sym.imp.USER32.dll_GetDC]
push ebx
push edi
push 0x4e8d80
lea ecx, [esi + 0x2c]
push ecx
push eax
call fcn.00438910
mov edx, dword [ebp - 0x74]
add esp, 0x14
mov edi, dword [edx]
mov ecx, edi
push eax
mov edx, dword [edi]
call dword [edx + 0x80]
mov eax, dword [edi]
mov ecx, edi
push 0x4e8d80
call dword [eax + 0x3c]
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x90]
add eax, 4
sub ecx, 1
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x90], ecx
jne 0x410271
push 0xd0
call fcn.00491258
mov edi, eax
mov dword [ebp - 0x90], edi
push 0xd0
push 0
push edi
mov dword [ebp - 4], 0
call fcn.00479c70
add esp, 0x10
mov ecx, edi
push 1
push 1
push 1
push 0x4e77c0
push 0x4e77c0
push 0x4e77c0
sub esp, 0x28
mov eax, esp
mov dword [eax], vtable.std::_Func_impl_class__lambda_3505f79a7c3738e13025ddda0bca1763___class_std::allocator_int___void__int__double__wchar_t_const__.0
mov dword [eax + 4], esi
mov dword [eax + 0x24], eax
call fcn.0040a110
mov dword [ebp - 4], 0xffffffff
mov ecx, esi
mov dword [esi + 0x794], eax
call fcn.00413f80
cmp dword [esi + 0x768], 0
je 0x410379
cmp dword [esi + 0x76c], 8
lea eax, [esi + 0x758]
jb 0x410365
mov eax, dword [eax]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x410379
mov byte [esi + 0x7b8], 1
jmp 0x410380
mov byte [esi + 0x7b8], 0
lea eax, [ebp - 0x70]
mov ecx, esi
push eax
call fcn.004134b0
mov dword [ebp - 4], 1
lea edx, [ebp - 0x70]
mov ecx, dword [esi + 0x6bc]
cmp dword [ebp - 0x5c], 8
cmovae edx, dword [ebp - 0x70]
mov eax, dword [ecx]
push edx
call dword [eax + 0x3c]
mov ecx, esi
call fcn.0043ab60
cmp byte [esi + 0x7b8], 0
je 0x41094b
sub esp, 0x18
lea ebx, [esi + 0x758]
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 7
cmp dword [ecx + 0x14], 8
mov dword [ecx + 0x10], 0
jb 0x4103ee
mov eax, dword [ecx]
jmp 0x4103f0
mov eax, ecx
xor edx, edx
push 0xffffffffffffffff
push edx
push ebx
mov word [eax], dx
call fcn.00403270
lea ecx, [esi + 0x2c]
call fcn.0041bb80
mov ecx, dword [esi + 0x6e4]
add esp, 0x18
test ecx, ecx
je 0x410427
mov edx, dword [ecx + 0x690]
add ecx, 0x690
push 1
push 0
push eax
call dword [edx + 8]
push 0x13
xor eax, eax
mov dword [ebp - 0x44], 7
push 0x4e8460
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x48], 0
mov word [ebp - 0x58], ax
call fcn.00403170
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x58]
cmp dword [ebp - 0x44], 8
cmovae ecx, dword [ebp - 0x58]
call fcn.0040a520
test eax, eax
jne 0x4104a6
push 0xffffffffffffffff
push eax
push ebx
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x78], 7
mov dword [ebp - 0x7c], eax
mov word [ebp - 0x8c], ax
call fcn.00403270
mov eax, dword [ebp - 0x78]
cmp eax, 8
jb 0x41066f
inc eax
lea ecx, [ebp - 0x8c]
push eax
push dword [ebp - 0x8c]
call fcn.004017c0
jmp 0x41066f
cmp byte [0x4fdd60], 0
jne 0x410922
push 0x4e9130
lea ecx, [ebp - 0x40]
call fcn.00403010
push 0xffffffffffffffff
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x240]
push 0x4e77c0
mov dword [ebp - 0x248], 4
mov dword [ebp - 0x244], 0x93
call fcn.00424240
push 0xffffffffffffffff
push str.MessageBox1Wnd.xml
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x12
call fcn.00424240
push str.MessageBox1Wnd.xml
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x13
call fcn.00403010
mov edi, eax
push str.MessageBox1Wnd.xml
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x14
call fcn.00403010
mov ebx, eax
push 1
sub esp, 8
mov byte [ebp - 4], 0x15
mov ecx, edi
call fcn.00415280
push eax
push 0
lea eax, [ebp - 0x8c]
mov ecx, ebx
push eax
call fcn.00415210
mov byte [ebp - 4], 0x16
cmp dword [eax + 0x14], 8
jb 0x410556
mov eax, dword [eax]
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x138]
call fcn.00424240
mov eax, dword [ebp - 0x78]
cmp eax, 8
jb 0x41057f
inc eax
lea ecx, [ebp - 0x8c]
push eax
push dword [ebp - 0x8c]
call fcn.004017c0
xor eax, eax
mov dword [ebp - 0x78], 7
mov word [ebp - 0x8c], ax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x7c], 0
cmp eax, 8
jb 0x4105ab
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004017c0
xor eax, eax
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x18], 0
cmp eax, 8
jb 0x4105dd
inc eax
lea ecx, [ebp - 0xac]
push eax
push dword [ebp - 0xac]
call fcn.004017c0
xor eax, eax
mov dword [ebp - 0x98], 7
mov dword [ebp - 0x9c], 0
mov word [ebp - 0xac], ax
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x40]
cmp dword [ebp - 0x2c], 8
mov ecx, esi
push 0x4e9170
cmovae eax, dword [ebp - 0x40]
push eax
call fcn.00464750
lea edx, [ebp - 0x248]
mov ecx, eax
call fcn.00423e80
add esp, 8
lea ecx, [ebp - 0x138]
call fcn.00424360
lea ecx, [ebp - 0x1bc]
call fcn.00424360
lea ecx, [ebp - 0x240]
call fcn.00424360
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x410660
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.004017c0
push 1
mov ecx, esi
call fcn.0043aca0
lea ebx, [esi + 0x758]
cmp byte [0x4fdd60], 0
jne 0x410922
push 0xffffffffffffffff
push 0x4e77c0
lea ecx, [ebp - 0x240]
mov dword [ebp - 0x248], 4
mov dword [ebp - 0x244], 0x93
call fcn.00424240
push 0xffffffffffffffff
push str.InstalledPathTipWnd.xml
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x18
call fcn.00424240
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x8c]
push 0x17
xor eax, eax
mov dword [ebp - 0x78], 7
push str.InstalledPathTipWnd.xml
mov dword [ebp - 0x7c], 0
mov word [ebp - 0x8c], ax
call fcn.00403170
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x28]
push 0x17
xor eax, eax
mov dword [ebp - 0x14], 7
push str.InstalledPathTipWnd.xml
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
call fcn.00403170
push 1
sub esp, 8
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x8c]
call fcn.00415280
push eax
push 0
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x28]
call fcn.00415210
mov byte [ebp - 4], 0x1c
cmp dword [eax + 0x14], 8
jb 0x41073b
mov eax, dword [eax]
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x138]
call fcn.00424240
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x41075e
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.004017c0
xor eax, eax
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x30], 0
cmp eax, 8
jb 0x410787
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004017c0
xor eax, eax
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x18], 0
cmp eax, 8
jb 0x4107b6
inc eax
lea ecx, [ebp - 0x8c]
push eax
push dword [ebp - 0x8c]
call fcn.004017c0
xor eax, eax
mov dword [ebp - 0x78], 7
mov dword [ebp - 0x7c], 0
mov word [ebp - 0x8c], ax
push eax
push eax
mov ecx, esi
mov byte [ebp - 4], 0x1d
call fcn.00464750
lea edx, [ebp - 0x248]
mov ecx, eax
call fcn.00423e80
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x138]
mov edi, eax
call fcn.00424360
lea ecx, [ebp - 0x1bc]
call fcn.00424360
lea ecx, [ebp - 0x240]
call fcn.00424360
cmp edi, 1
jne 0x41090e
push 0x4e7d28
mov edx, ebx
lea ecx, [ebp - 0xac]
call fcn.00406500
push 0x4e8460
mov edx, eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x40]
call fcn.0040bd70
mov ecx, eax
lea edi, [esi + 0x6f8]
add esp, 8
mov dword [ebp - 0x90], ecx
cmp edi, ecx
je 0x410895
cmp dword [edi + 0x14], 8
jb 0x41086e
mov eax, dword [edi + 0x14]
mov ecx, edi
inc eax
push eax
push dword [edi]
call fcn.004017c0
mov ecx, dword [ebp - 0x90]
mov dword [edi + 0x14], 7
cmp dword [edi + 0x14], 8
mov dword [edi + 0x10], 0
jb 0x410886
mov eax, dword [edi]
jmp 0x410888
mov eax, edi
xor edx, edx
push ecx
mov ecx, edi
mov word [eax], dx
call fcn.004034c0
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x4108aa
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.004017c0
xor eax, eax
mov byte [ebp - 4], 2
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0
cmp eax, 8
jb 0x4108e0
inc eax
lea ecx, [ebp - 0xac]
push eax
push dword [ebp - 0xac]
call fcn.004017c0
cmp dword [edi + 0x14], 8
jb 0x4108e8
mov edi, dword [edi]
cmp dword [ebx + 0x14], 8
jb 0x4108f0
mov ebx, dword [ebx]
push 1
push ebx
push 0
push edi
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 1
mov ecx, esi
call fcn.0043aca0
jmp 0x410936
test edi, edi
je 0x410922
cmp edi, 2
jne 0x410936
push 1
mov ecx, esi
call fcn.0043aca0
jmp 0x410936
cmp dword [ebx + 0x14], 8
jb 0x41092a
mov ebx, dword [ebx]
push 1
push 1
push ebx
mov ecx, esi
call fcn.00410b90
mov eax, dword [ebp - 0x44]
cmp eax, 8
jb 0x41094b
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.004017c0
mov eax, dword [ebp - 0x5c]
cmp eax, 8
jb 0x410960
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.004017c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0049120e
mov esp, ebp
pop ebp
ret