Function at 0x420830
Capabilities:
Copy file
Create directory
Create process on windows
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4609dd
mov eax, dword fs:[0]
push eax
sub esp, 0xcfc
mov eax, dword [0x4735a8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
push 0x12
xor esi, esi
push str.is_stp_started_at
lea ecx, [ebp - 0xbb4]
mov dword [ebp - 0xcf8], eax
mov dword [ebp - 0xba0], 0xf
mov dword [ebp - 0xba4], esi
mov byte [ebp - 0xbb4], 0
call fcn.00407c70
push 0x103
lea ecx, [ebp - 0x43f]
push esi
push ecx
mov dword [ebp - 4], esi
mov byte [ebp - 0x440], 0
call fcn.0043a6a0
push 0x103
lea edx, [ebp - 0x647]
push esi
push edx
mov byte [ebp - 0x648], 0
call fcn.0043a6a0
push 0x104
lea eax, [ebp - 0x33c]
push esi
push eax
call fcn.0043a6a0
lea ecx, [ebp - 0xd08]
push ecx
push str.InstallByMsi
push str.SOFTWAREiNode
push 0x80000002
mov dword [ebp - 0xd08], esi
call fcn.00423ba0
add esp, 0x34
cmp dword [ebp - 0xd08], esi
je 0x420a88
push str.msi_install.
mov ebx, 0x325aa0
call fcn.00420320
push 0x104
lea edx, [ebp - 0x440]
push edx
push str.MsiSourceName
push str.SOFTWAREiNode
push 0x80000002
xor edi, edi
call fcn.00423c70
mov esi, eax
add esp, 0x18
test esi, esi
jne 0x420987
cmp edi, 0xa
jae 0x420987
push str.cant_get_source_path.
inc edi
call fcn.00420320
push 0x104
lea eax, [ebp - 0x440]
push eax
push str.MsiSourceName
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall94B78100_AF61_49F0_B708_8F35283907F9
push 0x80000002
call fcn.00423c70
add esp, 0x18
push 0x3e8
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
test esi, esi
je 0x420943
push 0x104
lea ecx, [ebp - 0x648]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x648]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4209a4
sub eax, edx
add eax, 0xfffffff7
push eax
lea edx, [ebp - 0x648]
push edx
lea eax, [ebp - 0x33c]
push eax
call fcn.00439a60
lea eax, [ebp - 0x33c]
add esp, 0xc
dec eax
mov edi, edi
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x4209d0
mov ecx, dword [str.iNodeSetup.msi]
mov edx, dword [0x465824]
mov dword [eax], ecx
mov ecx, dword [0x465828]
mov dword [eax + 4], edx
mov dx, word [0x46582c]
mov dword [eax + 8], ecx
mov cl, byte [0x46582e]
mov word [eax + 0xc], dx
lea edx, [ebp - 0x33c]
push edx
mov byte [eax + 0xe], cl
call fcn.00430130
add esp, 4
test eax, eax
jne 0x420a79
lea eax, [ebp - 0x440]
push eax
call fcn.00430130
add esp, 4
test eax, eax
je 0x420a67
push 0
lea ecx, [ebp - 0x33c]
push ecx
lea edx, [ebp - 0x440]
push edx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea eax, [ebp - 0x33c]
push eax
call fcn.00430130
add esp, 4
test eax, eax
jne 0x420aa0
push str.Cannot_use_setup_copy_msi_file__accessible_error.
call fcn.00420320
add esp, 4
jmp 0x421822
push str.Network_problem__cannot_access_source_file.
call fcn.00420320
add esp, 4
jmp 0x421822
push str.InstallScript_has_copy_msi_file.
call fcn.00420320
add esp, 4
jmp 0x420aa0
push 0x104
lea ecx, [ebp - 0x33c]
push ecx
push esi
mov ebx, 0x81650
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea edx, [ebp - 0x33c]
push 0x5c
mov ecx, 0x41
lea esi, [ebp - 0x33c]
lea edi, [ebp - 0x74c]
push edx
rep movsd dword es:[edi], dword [esi]
call fcn.0043ac10
lea ecx, [eax + 1]
lea esi, [ebp - 0x850]
add esp, 8
sub esi, ecx
nop
mov dl, byte [ecx]
mov byte [esi + ecx], dl
inc ecx
test dl, dl
jne 0x420ad0
push 1
xor edi, edi
push edi
push str.iNodeSetup
push 0x104
mov dword [ebp - 0xd00], edi
mov dword [ebp - 0xcfc], edi
push 0x474d20
mov byte [eax], 0
call fcn.00434ec0
add esp, 0x14
test eax, eax
jne 0x420b1a
mov eax, dword [ebp - 0xcf8]
mov dword [eax], 0x15f
jmp 0x421820
push 0x104
lea ecx, [ebp - 0x957]
push edi
push ecx
mov byte [ebp - 0x958], 0
call fcn.0043a6a0
push 0x465244
push 0x474d20
lea edx, [ebp - 0x958]
push 0x465478
push edx
call fcn.0043a71a
lea eax, [ebp - 0x958]
push eax
call fcn.00431420
lea ecx, [ebp - 0x74c]
push ecx
call fcn.00430130
mov esi, eax
add esp, 0x24
cmp esi, edi
je 0x420b8e
lea edx, [ebp - 0xcfc]
push edx
lea eax, [ebp - 0xd00]
push eax
lea ecx, [ebp - 0x74c]
push ecx
call fcn.004350f0
add esp, 0xc
jmp 0x420bb7
lea edx, [ebp - 0x74c]
push edx
call fcn.00420320
lea eax, [ebp - 0xcfc]
push eax
lea ecx, [ebp - 0xd00]
push ecx
lea edx, [ebp - 0x850]
push edx
call fcn.004350f0
add esp, 0x10
cmp eax, edi
je 0x421814
cmp dword [ebp - 0xd00], edi
jne 0x421814
cmp dword [ebp - 0xcfc], ebx
jbe 0x421814
push ebx
cmp esi, edi
mov edi, dword [ebp - 0xcf8]
push edi
push 0x474d20
je 0x420bf8
lea eax, [ebp - 0x850]
push eax
lea ecx, [ebp - 0x33c]
push ecx
jmp 0x420c04
lea edx, [ebp - 0x850]
push edx
push 0x464ebc
call fcn.00436170
add esp, 0x14
test eax, eax
je 0x421820
push str.Qt.7z
push 0x474d20
lea eax, [ebp - 0x134]
push 0x465478
push eax
call fcn.0043a71a
push 0x465784
push 0x474d20
lea ecx, [ebp - 0x238]
push 0x465478
push ecx
call fcn.0043a71a
lea edx, [ebp - 0x238]
push edx
call fcn.004301d0
mov ebx, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
add esp, 0x24
test eax, eax
jne 0x420c7e
push 0
lea eax, [ebp - 0x238]
push eax
call ebx
mov esi, eax
test esi, esi
je 0x421822
mov edi, dword [ebp - 0xcf8]
lea ecx, [ebp - 0x134]
push ecx
call fcn.00420320
lea edx, [ebp - 0x134]
push edx
call fcn.00430130
add esp, 8
test eax, eax
je 0x420e60
push 0x474d20
lea ecx, [ebp - 0xb7c]
call fcn.00407710
push 8
push str.7za.exe
lea ecx, [ebp - 0xb7c]
mov byte [ebp - 4], 1
call fcn.00412850
push 4
push str._x__
lea ecx, [ebp - 0xb7c]
call fcn.00412850
mov eax, 0x474d20
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x420ce1
sub eax, ecx
push eax
push 0x474d20
lea ecx, [ebp - 0xb7c]
call fcn.00412850
push 1
push 0x4655d0
lea ecx, [ebp - 0xb7c]
call fcn.00412850
push 5
push str.Qt.7z
lea ecx, [ebp - 0xb7c]
call fcn.00412850
push 1
push 0x46b3a8
lea ecx, [ebp - 0xb7c]
call fcn.00412850
push 4
push str.__o_
lea ecx, [ebp - 0xb7c]
call fcn.00412850
mov eax, 0x474d20
lea ecx, [eax + 1]
jmp 0x420d50
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x420d50
sub eax, ecx
push eax
push 0x474d20
lea ecx, [ebp - 0xb7c]
call fcn.00412850
push 1
push 0x46b3a8
lea ecx, [ebp - 0xb7c]
call fcn.00412850
push 3
push 0x465764
lea ecx, [ebp - 0xb7c]
call fcn.00412850
mov eax, dword [ebp - 0xb7c]
mov esi, 0x10
cmp dword [ebp - 0xb68], esi
jae 0x420da7
lea eax, [ebp - 0xb7c]
push eax
call fcn.00420320
mov dword [ebp - 0xb84], 0xf
mov dword [ebp - 0xb88], 0
mov byte [ebp - 0xb98], 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd04], esp
push 0x46575c
mov byte [ebp - 4], 2
call fcn.00407710
lea eax, [ebp - 0xb98]
push eax
lea ecx, [ebp - 0xb7c]
push ecx
call fcn.00437180
add esp, 0x24
test eax, eax
je 0x420e3e
mov eax, dword [ebp - 0xb98]
cmp dword [ebp - 0xb84], esi
jae 0x420e0f
lea eax, [ebp - 0xb98]
push eax
call fcn.00420320
mov eax, dword [ebp - 0xb98]
add esp, 4
cmp dword [ebp - 0xb84], esi
jae 0x420e2c
lea eax, [ebp - 0xb98]
push str.Everything_is_Ok
push eax
call fcn.0043ac40
add esp, 8
test eax, eax
jne 0x420e44
mov dword [edi], 0x70
lea ecx, [ebp - 0xb98]
call fcn.00407790
lea ecx, [ebp - 0xb7c]
mov byte [ebp - 4], 0
call fcn.00407790
jmp 0x420e65
mov esi, 0x10
push str.tool.7z
push 0x474d20
lea edx, [ebp - 0x134]
push 0x465478
push edx
call fcn.0043a71a
lea eax, [ebp - 0x134]
push eax
call fcn.00420320
lea ecx, [ebp - 0x134]
push ecx
call fcn.00430130
add esp, 0x18
test eax, eax
je 0x421059
push 0x474d20
lea ecx, [ebp - 0xb7c]
call fcn.00407710
push 8
push str.7za.exe
lea ecx, [ebp - 0xb7c]
mov byte [ebp - 4], 3
call fcn.00412850
push 4
push str._x__
lea ecx, [ebp - 0xb7c]
call fcn.00412850
mov eax, 0x474d20
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x420ee3
sub eax, ecx
push eax
push 0x474d20
lea ecx, [ebp - 0xb7c]
call fcn.00412850
push 1
push 0x4655d0
lea ecx, [ebp - 0xb7c]
call fcn.00412850
push 7
push str.tool.7z
lea ecx, [ebp - 0xb7c]
call fcn.00412850
push 1
push 0x46b3a8
lea ecx, [ebp - 0xb7c]
call fcn.00412850
push 4
push str.__o_
lea ecx, [ebp - 0xb7c]
call fcn.00412850
mov eax, 0x474d20
lea ecx, [eax + 1]
lea ecx, [ecx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x420f50
sub eax, ecx
push eax
push 0x474d20
lea ecx, [ebp - 0xb7c]
call fcn.00412850
push 1
push 0x46b3a8
lea ecx, [ebp - 0xb7c]
call fcn.00412850
push 3
push 0x465764
lea ecx, [ebp - 0xb7c]
call fcn.00412850
mov eax, dword [ebp - 0xb7c]
cmp dword [ebp - 0xb68], esi
jae 0x420fa2
lea eax, [ebp - 0xb7c]
push eax
call fcn.00420320
mov dword [ebp - 0xb84], 0xf
mov dword [ebp - 0xb88], 0
mov byte [ebp - 0xb98], 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd04], esp
push 0x46575c
mov byte [ebp - 4], 4
call fcn.00407710
lea edx, [ebp - 0xb98]
push edx
lea eax, [ebp - 0xb7c]
push eax
call fcn.00437180
add esp, 0x24
test eax, eax
je 0x421039
mov eax, dword [ebp - 0xb98]
cmp dword [ebp - 0xb84], esi
jae 0x42100a
lea eax, [ebp - 0xb98]
push eax
call fcn.00420320
mov eax, dword [ebp - 0xb98]
add esp, 4
cmp dword [ebp - 0xb84], esi
jae 0x421027
lea eax, [ebp - 0xb98]
push str.Everything_is_Ok
push eax
call fcn.0043ac40
add esp, 8
test eax, eax
jne 0x42103f
mov dword [edi], 0x70
lea ecx, [ebp - 0xb98]
call fcn.00407790
lea ecx, [ebp - 0xb7c]
mov byte [ebp - 4], 0
call fcn.00407790
push str.Data
push 0x474d20
lea ecx, [ebp - 0x238]
push 0x465478
push ecx
call fcn.0043a71a
lea edx, [ebp - 0x238]
push edx
call fcn.004301d0
add esp, 0x14
test eax, eax
jne 0x421099
push eax
lea eax, [ebp - 0x238]
push eax
call ebx
test eax, eax
je 0x4212db
push str.locations.xml
push 0x474d20
lea ecx, [ebp - 0x134]
push 0x465478
push ecx
call fcn.0043a71a
push str.locations.xml
push 0x474d20
lea edx, [ebp - 0x544]
push str._sDATA_s
push edx
call fcn.0043a71a
lea eax, [ebp - 0x134]
push eax
call fcn.00430130
add esp, 0x24
test eax, eax
je 0x4210f8
push 0
lea ecx, [ebp - 0x544]
push ecx
lea edx, [ebp - 0x134]
push edx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
push str.conn_cfg.ini
push 0x474d20
lea eax, [ebp - 0x134]
push 0x465478
push eax
call fcn.0043a71a
push str.conn_cfg.ini
push 0x474d20
lea ecx, [ebp - 0x544]
push str._sDATA_s
push ecx
call fcn.0043a71a
lea edx, [ebp - 0x134]
push edx
call fcn.00430130
add esp, 0x24
test eax, eax
je 0x421157
push 0
lea eax, [ebp - 0x544]
push eax
lea ecx, [ebp - 0x134]
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
push 0x474d20
lea edx, [ebp - 0xa5c]
push str._s
push edx
call fcn.0043a71a
add esp, 0xc
lea eax, [ebp - 0xcf4]
push eax
lea ecx, [ebp - 0xa5c]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edi, eax
cmp edi, 0xffffffff
jne 0x42119c
mov edx, dword [ebp - 0xcf8]
mov dword [edx], 0x164
jmp 0x421820
mov ebx, dword [sym.imp.KERNEL32.dll_CopyFileA]
test byte [ebp - 0xcf4], 0x10
jne 0x4212ad
push 0x104
lea eax, [ebp - 0x134]
push 0
push eax
call fcn.0043a6a0
lea ecx, [ebp - 0xcc8]
push str.cfg.xml
push ecx
call fcn.0043ac40
add esp, 0x14
test eax, eax
je 0x4212ad
lea edx, [ebp - 0xcc8]
push edx
lea eax, [ebp - 0x134]
push 0x46b3e4
push eax
call fcn.0043a71a
lea ecx, [ebp - 0x134]
push 0x2d
push ecx
call fcn.0043ab50
lea ecx, [eax + 1]
lea esi, [ebp - 0x544]
add esp, 0x14
sub esi, ecx
mov dl, byte [ecx]
mov byte [esi + ecx], dl
inc ecx
test dl, dl
jne 0x421212
mov byte [eax], dl
lea edx, [ebp - 0x134]
push edx
push 0x474d20
lea eax, [ebp - 0x238]
push str._sdata_s
push eax
call fcn.0043a71a
lea ecx, [ebp - 0x238]
push ecx
call fcn.004301d0
add esp, 0x14
test eax, eax
jne 0x42125c
push eax
lea edx, [ebp - 0x238]
push edx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea eax, [ebp - 0xcc8]
push eax
push 0x474d20
lea ecx, [ebp - 0x134]
push 0x465478
push ecx
call fcn.0043a71a
lea edx, [ebp - 0x544]
push edx
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0xb60]
push 0x465478
push ecx
call fcn.0043a71a
add esp, 0x20
push 0
lea edx, [ebp - 0xb60]
push edx
lea eax, [ebp - 0x134]
push eax
call ebx
lea ecx, [ebp - 0xcf4]
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4211a2
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edi, dword [ebp - 0xcf8]
mov ebx, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov esi, 0x10
push str.UrlCmdCustomCfg.7z
push 0x474d20
lea edx, [ebp - 0x134]
push 0x465478
push edx
call fcn.0043a71a
push str.UrlCmdCustomCfg
push 0x474d20
lea eax, [ebp - 0x238]
push 0x465478
push eax
call fcn.0043a71a
lea ecx, [ebp - 0x134]
push ecx
call fcn.00430130
add esp, 0x24
test eax, eax
je 0x421594
lea edx, [ebp - 0x238]
push edx
call fcn.004301d0
add esp, 4
test eax, eax
je 0x42135b
lea eax, [ebp - 0x238]
push 0x46556c
push eax
call fcn.004304a0
lea ecx, [ebp - 0x238]
push ecx
call fcn.00430760
add esp, 0xc
lea edx, [ebp - 0x238]
push edx
call fcn.004301d0
add esp, 4
test eax, eax
jne 0x42137c
push eax
lea eax, [ebp - 0x238]
push eax
call ebx
test eax, eax
jne 0x421393
lea ecx, [ebp - 0x238]
push ecx
call fcn.004301d0
add esp, 4
test eax, eax
je 0x4215a3
lea edx, [ebp - 0x134]
push edx
call fcn.00420320
lea eax, [ebp - 0x134]
push eax
call fcn.00430130
add esp, 8
test eax, eax
je 0x4215a3
push 0x474d20
lea ecx, [ebp - 0xb98]
call fcn.00407710
push 8
push str.7za.exe
lea ecx, [ebp - 0xb98]
mov byte [ebp - 4], 5
call fcn.00412850
push 4
push str._x__
lea ecx, [ebp - 0xb98]
call fcn.00412850
mov eax, 0x474d20
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4213f6
sub eax, ecx
push eax
push 0x474d20
lea ecx, [ebp - 0xb98]
call fcn.00412850
push 1
push 0x4655d0
lea ecx, [ebp - 0xb98]
call fcn.00412850
push 0x12
push str.UrlCmdCustomCfg.7z
lea ecx, [ebp - 0xb98]
call fcn.00412850
push 1
push 0x46b3a8
lea ecx, [ebp - 0xb98]
call fcn.00412850
push 4
push str.__o_
lea ecx, [ebp - 0xb98]
call fcn.00412850
mov eax, 0x474d20
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x421460
sub eax, ecx
push eax
push 0x474d20
lea ecx, [ebp - 0xb98]
call fcn.00412850
push 1
push 0x46b3a8
lea ecx, [ebp - 0xb98]
call fcn.00412850
push 3
push 0x465764
lea ecx, [ebp - 0xb98]
call fcn.00412850
mov eax, dword [ebp - 0xb98]
cmp dword [ebp - 0xb84], esi
jae 0x4214b2
lea eax, [ebp - 0xb98]
push eax
call fcn.00420320
mov dword [ebp - 0xb68], 0xf
mov dword [ebp - 0xb6c], 0
mov byte [ebp - 0xb7c], 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd04], esp
push 0x46575c
mov byte [ebp - 4], 6
call fcn.00407710
lea ecx, [ebp - 0xb7c]
push ecx
lea edx, [ebp - 0xb98]
push edx
call fcn.00437180
add esp, 0x24
test eax, eax
je 0x421549
mov eax, dword [ebp - 0xb7c]
cmp dword [ebp - 0xb68], esi
jae 0x42151a
lea eax, [ebp - 0xb7c]
push eax
call fcn.00420320
mov eax, dword [ebp - 0xb7c]
add esp, 4
cmp dword [ebp - 0xb68], esi
jae 0x421537
lea eax, [ebp - 0xb7c]
push str.Everything_is_Ok
push eax
call fcn.0043ac40
add esp, 8
test eax, eax
je 0x421578
push 0x16
push str.unpack_managecfg_fail_
lea ecx, [ebp - 0xb7c]
call fcn.00407c70
mov eax, dword [ebp - 0xb7c]
cmp dword [ebp - 0xb68], esi
jae 0x42156f
lea eax, [ebp - 0xb7c]
push eax
call fcn.00420320
add esp, 4
lea ecx, [ebp - 0xb7c]
call fcn.00407790
lea ecx, [ebp - 0xb98]
mov byte [ebp - 4], 0
call fcn.00407790
jmp 0x4215a3
lea eax, [ebp - 0x238]
push eax
call fcn.00430720
add esp, 4
push str.eadApxSvr.exe
push 0x474d20
lea ecx, [ebp - 0x134]
push 0x465478
push ecx
call fcn.0043a71a
lea edx, [ebp - 0x134]
push edx
call fcn.00430130
add esp, 0x14
test eax, eax
jne 0x4215dc
mov dword [edi], 0x163
jmp 0x421820
mov edi, dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0
push 0
push str._setUpdInfo
lea eax, [ebp - 0x134]
push eax
push 0
push 0
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x12c
call ebx
push str.eadApxSvr.exe
push str.waitCpd
xor esi, esi
call fcn.004391c0
add esp, 8
test eax, eax
jne 0x421646
lea ecx, [ecx]
cmp esi, 0x258
jae 0x421646
push 0x1f4
inc esi
call ebx
push str.eadApxSvr.exe
push str.waitCpd
call fcn.004391c0
add esp, 8
test eax, eax
je 0x421620
push 0
push 0
push str._exiteadclient
lea ecx, [ebp - 0x134]
push ecx
push 0
push 0
call edi
push 0x12c
call ebx
push str.eadApxSvr.exe
push str.waitCpd
xor esi, esi
call fcn.004391c0
add esp, 8
test eax, eax
jne 0x4216a6
jmp 0x421680
cmp esi, 0x258
jae 0x4216a6
push 0x1f4
inc esi
call ebx
push str.eadApxSvr.exe
push str.waitCpd
call fcn.004391c0
add esp, 8
test eax, eax
je 0x421680
push str.iNodeSetup.exe
push 0x474d20
lea edx, [ebp - 0x134]
push 0x465478
push edx
call fcn.0043a71a
lea eax, [ebp - 0x134]
push eax
call fcn.00430130
add esp, 0x14
test eax, eax
jne 0x4216e5
mov ecx, dword [ebp - 0xcf8]
mov dword [ecx], 0x165
jmp 0x421820
push 5
push 0
push 0
lea edx, [ebp - 0x134]
push edx
push 0
push 0
call edi
xor esi, esi
lea ebx, [ebx]
push str.iNodeSetup.exe
push str.waitSetup
call fcn.004391c0
add esp, 8
test eax, eax
je 0x421723
push 0x32
inc esi
call ebx
cmp esi, 0x258
jb 0x421700
push esi
lea eax, [ebp - 0x30]
push 0x46bd3c
push eax
call fcn.0043a71a
lea eax, [ebp - 0x30]
add esp, 0xc
lea edx, [eax + 1]
jmp 0x421740
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x421740
sub eax, edx
push eax
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0xbb4]
call fcn.00412850
mov eax, dword [ebp - 0xbb4]
mov edi, 0x10
cmp dword [ebp - 0xba0], edi
jae 0x421772
lea eax, [ebp - 0xbb4]
push eax
call fcn.00420320
push str.iNodeSetup.exe
push str.waitSetup
xor esi, esi
call fcn.004391c0
add esp, 0xc
test eax, eax
jne 0x4217ae
push 0x1f4
inc esi
call ebx
push str.iNodeSetup.exe
push str.waitSetup
call fcn.004391c0
add esp, 8
test eax, eax
je 0x421790
push edi
push str.is_stp_ended_at
lea ecx, [ebp - 0xbb4]
call fcn.00407c70
push esi
lea edx, [ebp - 0x30]
push 0x465674
push edx
call fcn.0043a71a
lea eax, [ebp - 0x30]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4217d7
sub eax, edx
push eax
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0xbb4]
call fcn.00412850
mov eax, dword [ebp - 0xbb4]
cmp dword [ebp - 0xba0], edi
jae 0x421804
lea eax, [ebp - 0xbb4]
push eax
call fcn.00420320
add esp, 4
mov esi, 1
jmp 0x421822
mov ecx, dword [ebp - 0xcf8]
mov dword [ecx], 0x160
xor esi, esi
mov eax, dword [0x474d18]
test eax, eax
je 0x421832
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
cmp dword [ebp - 0xba0], 0x10
jb 0x421852
mov edx, dword [ebp - 0xbb4]
push edx
call fcn.00439a51
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004396d4
mov esp, ebp
pop ebp
ret