Function at 0x427380
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x348
mov eax, dword [0x47c5a8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0x10]
push esi
push str.evnt_iNode_stpDamon
xor esi, esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [0x47dd18], eax
cmp eax, esi
je 0x427aee
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x344], eax
cmp eax, 0xb7
jne 0x42743c
mov eax, dword [0x47dd18]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x47dd18], esi
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov ecx, 0x804
cmp cx, ax
jne 0x427413
push 0x30
mov ecx, 0x46cf44
push ecx
mov eax, 0x46d674
push eax
push esi
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0043fe0a
mov esp, ebp
pop ebp
ret 0x10
mov eax, str.A_previous_instance_is_still_running.__nPlease_try_it_later.
mov ecx, str.iNode_Setup
push 0x30
push ecx
push eax
push esi
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0043fe0a
mov esp, ebp
pop ebp
ret 0x10
call fcn.0042c190
test eax, eax
jne 0x427468
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 0x804
cmp dx, ax
jne 0x427461
mov eax, 0x46d610
mov ecx, 0x46cf44
jmp 0x42741d
mov eax, str.You_do_not_have_administrative_privileges_on_this_computer__the_program_can_not_be_installed_
jmp 0x427418
push edi
push 0x105
lea eax, [ebp - 0x1b0]
push eax
push str.setup
mov dword [ebp - 0x348], esi
call fcn.00429c00
add esp, 0xc
test eax, eax
je 0x4274a7
lea edi, [ebp - 0x1b0]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x427493
mov cx, word [0x46d5a8]
mov word [edi], cx
jmp 0x4274c0
mov dx, word [0x46d5a4]
mov al, byte [0x46d5a6]
mov word [ebp - 0x1b0], dx
mov byte [ebp - 0x1ae], al
lea ecx, [ebp - 0x1b0]
push ecx
call fcn.00429b80
add esp, 4
push 0
push 0x100000
push edx
push eax
call fcn.00441410
mov esi, edx
push esi
mov edi, eax
push edi
lea edx, [ebp - 0x1b0]
push edx
lea eax, [ebp - 0x2b0]
push str.The__s_free_space_is__dM.
push eax
call fcn.00440e5a
lea ecx, [ebp - 0x2b0]
push ecx
call fcn.00425850
mov edx, edi
and edx, esi
add esp, 0x18
cmp edx, 0xffffffff
je 0x42754a
test esi, esi
jg 0x42754a
jl 0x427521
cmp edi, 0x12c
jae 0x42754a
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov ecx, 0x804
cmp cx, ax
jne 0x427540
mov eax, 0x46d550
mov ecx, 0x46cf44
jmp 0x427ae1
mov eax, str.The_sys_disk_must_have_at_least_300M_free_space_to_finish_the_setup.
jmp 0x427adc
push str.UpdateCusInfo.exe
push str.waitSetup
call fcn.0043f8f0
add esp, 8
test eax, eax
je 0x427abb
push str.UpdateCusInfo.e
push str.waitSetup
call fcn.0043f8f0
add esp, 8
test eax, eax
je 0x427abb
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0
push 0
push str.config_UxSms_start_auto
push 0x46d4c0
push str.open
push 0
call esi
push 0
push eax
lea edx, [ebp - 0x340]
push edx
call fcn.004257d0
push eax
lea eax, [ebp - 0x324]
push str.set_UxSms_start_auto__with_rtn
push eax
call fcn.00427330
add esp, 0x18
lea ecx, [ebp - 0x340]
call fcn.00407890
mov eax, dword [ebp - 0x324]
mov edi, 0x10
cmp dword [ebp - 0x310], edi
jae 0x4275e3
lea eax, [ebp - 0x324]
push eax
call fcn.00425850
add esp, 4
push 0
push 0
push str.start_UxSms
push 0x46d48c
push str.open
push 0
call esi
push 0
push eax
lea ecx, [ebp - 0x2cc]
push ecx
call fcn.004257d0
push eax
lea edx, [ebp - 0x340]
push str.start_service_UxSms__with_rtn
push edx
call fcn.00427330
add esp, 0x18
push eax
lea ecx, [ebp - 0x324]
call fcn.00407a10
lea ecx, [ebp - 0x340]
call fcn.00407890
lea ecx, [ebp - 0x2cc]
call fcn.00407890
mov eax, dword [ebp - 0x324]
cmp dword [ebp - 0x310], edi
jae 0x42765d
lea eax, [ebp - 0x324]
push eax
call fcn.00425850
push 1
push 0x47de24
push 0x47de28
push str.setup
call fcn.004335b0
add esp, 0x14
test eax, eax
je 0x427a03
push str.compare_password
call fcn.00425850
push 0x80
lea eax, [ebp - 0xa7]
push 0
push eax
mov byte [ebp - 0xa8], 0
call fcn.00440de0
add esp, 0x10
push ebx
lea ecx, [ebp - 0x308]
call fcn.00407810
cmp dword [ebp - 0x2f8], 0
jbe 0x427775
mov eax, dword [ebp - 0x308]
cmp dword [ebp - 0x2f4], edi
jae 0x4276d8
lea eax, [ebp - 0x308]
push eax
call fcn.00425850
mov eax, dword [ebp - 0x308]
add esp, 4
cmp dword [ebp - 0x2f4], edi
jae 0x4276f5
lea eax, [ebp - 0x308]
mov ecx, dword [ebp - 0x2f8]
push ecx
push eax
lea edx, [ebp - 0xa8]
push 0x80
push edx
call fcn.00435d60
add esp, 0x10
lea ecx, [ebp - 0xa8]
mov eax, 0x47de28
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x427740
test dl, dl
je 0x42773c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x427740
add eax, 2
add ecx, 2
test dl, dl
jne 0x427720
xor eax, eax
jmp 0x427745
sbb eax, eax
sbb eax, 0xffffffff
mov esi, 1
test eax, eax
je 0x427754
mov esi, dword [ebp - 0x348]
push 0x47de28
call fcn.00425850
lea eax, [ebp - 0xa8]
push eax
call fcn.00425850
add esp, 8
test esi, esi
jne 0x427962
push str.Begin_UnpackAndSetup
call fcn.00425850
add esp, 4
xor ebx, ebx
push ebx
push 0x426f50
xor eax, eax
push ebx
push 0x86
push ebx
mov dword [ebp - 0x2dc], ebx
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2ec], ebx
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x2e0], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.USER32.dll_CreateDialogParamA]
lea ecx, [ebp - 0x2dc]
push ecx
mov esi, eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov edi, dword [sym.imp.USER32.dll_GetWindowRect]
push eax
call edi
lea edx, [ebp - 0x2ec]
push edx
push esi
call edi
mov eax, dword [ebp - 0x2e4]
sub eax, dword [ebp - 0x2ec]
mov ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x2e8]
sub edx, dword [ebp - 0x2e0]
add ecx, eax
mov eax, dword [ebp - 0x2d0]
add eax, edx
mov dword [ebp - 0x2d0], eax
sub eax, dword [ebp - 0x2d8]
push 0x81
cdq
sub eax, edx
push ebx
sar eax, 1
push ebx
push eax
mov eax, dword [ebp - 0x2d4]
sub eax, ecx
cdq
sub eax, edx
sar eax, 1
push eax
push 0xffffffffffffffff
push esi
mov dword [ebp - 0x2dc], ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
push 5
push esi
call dword [sym.imp.USER32.dll_ShowWindow]
push esi
call dword [sym.imp.USER32.dll_UpdateWindow]
mov edi, dword [sym.imp.USER32.dll_GetMessageA]
push ebx
push ebx
push ebx
lea eax, [ebp - 0x340]
push eax
call edi
cmp eax, ebx
je 0x4278cf
mov ebx, dword [sym.imp.USER32.dll_IsDialogMessageA]
lea esp, [esp]
cmp eax, 0xffffffff
jne 0x427894
push str._handle_the_error_and_possibly_exit
call fcn.00425850
add esp, 4
jmp 0x4278bc
lea ecx, [ebp - 0x340]
push ecx
push esi
call ebx
test eax, eax
jne 0x4278bc
lea edx, [ebp - 0x340]
push edx
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x340]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
push 0
push 0
push 0
lea ecx, [ebp - 0x340]
push ecx
call edi
test eax, eax
jne 0x427880
push esi
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp dword [0x47deac], 0
je 0x4279f8
push str.Begin_UnpackAndSetup
call fcn.00425850
lea edx, [ebp - 0x344]
push edx
mov dword [ebp - 0x344], 0
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x4279f8
push str.install_failed_with_Err
lea ecx, [ebp - 0x2cc]
call fcn.00407810
mov eax, dword [ebp - 0x344]
push eax
lea ecx, [ebp - 0x24]
push 0x46cd0c
push ecx
call fcn.00440e5a
lea eax, [ebp - 0x24]
add esp, 0xc
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x427940
sub eax, edx
push eax
lea edx, [ebp - 0x24]
push edx
lea ecx, [ebp - 0x2cc]
call fcn.00413820
cmp dword [ebp - 0x2b8], 0x10
jmp 0x4279d6
push str.password_same_begin_auto_setup
call fcn.00425850
lea eax, [ebp - 0x344]
push eax
mov dword [ebp - 0x344], 0
call fcn.00425e30
add esp, 8
test eax, eax
jne 0x4279f8
push str.install_failed_with_Err
lea ecx, [ebp - 0x2cc]
call fcn.00407810
mov ecx, dword [ebp - 0x344]
push ecx
lea edx, [ebp - 0x24]
push 0x46cd0c
push edx
call fcn.00440e5a
lea eax, [ebp - 0x24]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4279b7
sub eax, edx
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00413820
cmp dword [ebp - 0x2b8], edi
mov eax, dword [ebp - 0x2cc]
jae 0x4279e4
lea eax, [ebp - 0x2cc]
push eax
call fcn.00425850
add esp, 4
lea ecx, [ebp - 0x2cc]
call fcn.00407890
lea ecx, [ebp - 0x308]
jmp 0x427a8c
lea ecx, [ebp - 0x344]
push ecx
mov dword [ebp - 0x344], 0
call fcn.00425e30
add esp, 4
test eax, eax
jne 0x427a91
push str.install_failed_with_Err
lea ecx, [ebp - 0x2cc]
call fcn.00407810
mov edx, dword [ebp - 0x344]
push edx
lea eax, [ebp - 0x24]
push 0x46cd0c
push eax
call fcn.00440e5a
lea eax, [ebp - 0x24]
add esp, 0xc
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x427a50
sub eax, edx
push eax
lea ecx, [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x2cc]
call fcn.00413820
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp - 0x2b8], edi
jae 0x427a7d
lea eax, [ebp - 0x2cc]
push eax
call fcn.00425850
add esp, 4
lea ecx, [ebp - 0x2cc]
call fcn.00407890
mov eax, dword [0x47dd18]
test eax, eax
je 0x427aa1
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.Exit_main
call fcn.00425850
add esp, 4
lea ecx, [ebp - 0x324]
call fcn.00407890
jmp 0x427aed
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 0x804
cmp dx, ax
jne 0x427ad7
mov eax, 0x46d3ac
mov ecx, 0x46cf44
jmp 0x427ae1
mov eax, str.A_previous_instance_is_still_running.__nPlease_try_it_later.
mov ecx, str.iNode_Setup
push 0x30
push ecx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.0043fe0a
mov esp, ebp
pop ebp
ret 0x10