Function at 0x41c780
Capabilities:
Copy file
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x314
mov eax, dword [0x4713e0]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov dword [0x474a60], 0
call fcn.0043b7b6
lea eax, [ebp - 0x104]
push eax
call fcn.0043b623
add esp, 4
lea ecx, [ebp - 0x84]
push ecx
call fcn.0043b6f1
add esp, 4
push 0
lea edx, [ebp - 0x310]
push edx
lea eax, [ebp - 0x30c]
push eax
push 0
call fcn.00424dc0
add esp, 0x10
push str._r_nSetup32_r_n
call fcn.004145f0
add esp, 4
mov ecx, dword [ebp - 0x310]
and ecx, 0xffff
movzx edx, cx
push edx
mov eax, dword [ebp - 0x310]
shr eax, 0x10
and eax, 0xffff
movzx ecx, ax
push ecx
mov edx, dword [ebp - 0x30c]
and edx, 0xffff
movzx eax, dx
push eax
mov ecx, dword [ebp - 0x30c]
shr ecx, 0x10
and ecx, 0xffff
movzx edx, cx
push edx
push str.Version__u._u._u._u_r_n
call fcn.004145f0
add esp, 0x14
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x104]
push ecx
push str.Start_at__s__s_r_n
call fcn.004145f0
add esp, 0xc
mov esi, dword [ebp - 0x310]
xor edi, edi
xor edx, edx
mov eax, dword [ebp - 0x30c]
mov cl, 0x20
call fcn.0043b260
or esi, eax
or edi, edx
mov dword [0x5ada38], esi
mov dword [0x5ada3c], edi
push 0x200
lea edx, [ebp - 0x304]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea eax, [ebp - 0x304]
push eax
push str.GetWindowsDirectory__s_r_n
call fcn.004145f0
add esp, 8
push 0x200
lea ecx, [ebp - 0x304]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryA]
lea edx, [ebp - 0x304]
push edx
push str.GetSystemWindowsDirectory__s_r_n
call fcn.004145f0
add esp, 8
push 0x400
push 0x5ad620
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x5ad620
push str.Running__s_r_n
call fcn.004145f0
add esp, 8
push 0x5c
push 0x5ad620
call fcn.0043a8c0
add esp, 8
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0
je 0x41c925
mov ecx, dword [ebp - 0x308]
add ecx, 1
mov dword [ebp - 0x308], ecx
mov edx, dword [ebp - 0x308]
mov byte [edx], 0
push 0x5ad620
push 0x5ad220
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.setup.cfg
push 0x5ad220
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x5ad620
push 0x5ace20
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.setup.pkg
push 0x5ace20
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push str._cfg:
push 0x5ada60
call fcn.00414420
add esp, 8
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0
je 0x41c9c3
mov eax, 1
imul ecx, eax, 5
mov edx, dword [ebp - 0x308]
movsx eax, byte [edx + ecx]
test eax, eax
je 0x41c9c3
mov ecx, dword [ebp - 0x308]
add ecx, 5
push ecx
push 0x5ad220
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x5ad220
push 0x5ada60
call fcn.0041f4e0
add esp, 8
push str._pck:
push 0x5ada60
call fcn.00414420
add esp, 8
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0
je 0x41ca21
mov edx, 1
imul eax, edx, 5
mov ecx, dword [ebp - 0x308]
movsx edx, byte [ecx + eax]
test edx, edx
je 0x41ca21
mov eax, dword [ebp - 0x308]
add eax, 5
push eax
push 0x5ace20
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x5ace20
push 0x5ada60
call fcn.0041f4e0
add esp, 8
push str._TheUnID:
push 0x5ada60
call fcn.00414420
add esp, 8
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0
je 0x41ca91
mov ecx, 1
imul edx, ecx, 9
mov eax, dword [ebp - 0x308]
movsx ecx, byte [eax + edx]
test ecx, ecx
je 0x41ca91
mov edx, dword [ebp - 0x308]
add edx, 9
push edx
push 0x5aca20
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x5aca20
push 0x5ada60
call fcn.0041f4e0
add esp, 8
push 0x5aca20
push str.Using_Uninstall_ID__s_r_n
call fcn.004145f0
add esp, 8
push str._uninst:
push 0x5ada60
call fcn.00414420
add esp, 8
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0
je 0x41cb22
mov eax, 1
shl eax, 3
mov ecx, dword [ebp - 0x308]
movsx edx, byte [ecx + eax]
test edx, edx
je 0x41cb22
mov eax, dword [ebp - 0x308]
add eax, 8
push eax
push 0x5ad220
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, 1
imul edx, ecx, 0
mov dword [ebp - 0x314], edx
cmp dword [ebp - 0x314], 0x400
jae 0x41caf9
jmp 0x41cafe
call fcn.0043920a
mov eax, dword [ebp - 0x314]
mov byte [eax + 0x5ace20], 0
push str.Using_UNINSTALL_r_n
call fcn.004145f0
add esp, 4
mov dword [0x474a6c], 1
push 0x5ace20
call fcn.00417b90
add esp, 4
push 0x5ad220
call fcn.00417b90
add esp, 4
cmp dword [0x474a6c], 0
je 0x41cb9f
push str..cfg
lea ecx, [ebp - 0x304]
push ecx
push str.STP_
call fcn.00417cb0
add esp, 0xc
push 0
lea edx, [ebp - 0x304]
push edx
push 0x5ad220
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x41cb80
mov dword [0x474a6c], 2
lea eax, [ebp - 0x304]
push eax
push 0x5ad220
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x5ad220
call fcn.00417b90
add esp, 4
push 0x5ad220
push str.Config_File__s_r_n
call fcn.004145f0
add esp, 8
mov dword [0x474a68], 0
push 0x5ace20
call fcn.004150e0
add esp, 4
test eax, eax
je 0x41cbf9
push 0x5ace20
call fcn.00402893
add esp, 4
mov dword [0x474a60], eax
cmp dword [0x474a60], 0
je 0x41cbf9
push 0x5ace20
push str.Using_Package__s_r_n
call fcn.004145f0
add esp, 8
push 0x5ad220
call fcn.004150e0
add esp, 4
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00439b24
mov esp, ebp
pop ebp
ret