Function at 0x4430e7
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x488
mov eax, dword [0x5f2e68]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
push edi
xor eax, eax
xor ebx, ebx
mov word [ebp - 0x474], bx
lea edi, [ebp - 0x472]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov word [ebp - 0x484], bx
xor eax, eax
lea edi, [ebp - 0x482]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x96c
mov edi, str..Installation.c
push edi
mov esi, str.edt12.dat
push esi
push ebx
call fcn.00493154
pop ecx
pop ecx
mov edx, 0x54f4b8
mov ecx, eax
call fcn.00434df1
cmp eax, ebx
pop ecx
pop ecx
mov dword [ebp - 0x460], eax
jne 0x443175
push esi
push ebx
call fcn.00493154
push eax
push str.:5:Install_FAILED:___s__could_not_be_opened_for_reading__Note_that_this_will_occur_once_during_a_spawned_installation.
call fcn.0042bd38
add esp, 0x10
or eax, 0xffffffff
jmp 0x4433a7
push eax
push 1
lea eax, [ebp - 0x474]
push 0x10
push eax
call fcn.00530e93
add esp, 0x10
cmp eax, 1
jae 0x4431c3
push esi
push ebx
call fcn.00493154
push eax
push str.:5:Install_FAILED:_fread___s___FAILED_
call fcn.0042bd38
mov ecx, dword [ebp - 0x460]
call fcn.00435239
push 0x10
lea eax, [ebp - 0x474]
push ebx
push eax
mov dword [ebp - 0x460], ebx
call fcn.005306b0
add esp, 0x1c
mov ecx, dword [ebp - 0x460]
call fcn.00435239
push 0x980
lea eax, [ebp - 0x484]
push edi
push eax
call fcn.004fb92f
add esp, 0xc
test eax, eax
jne 0x44323b
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x984
lea eax, [ebp - 0x484]
push edi
push eax
call fcn.004fb92f
add esp, 0xc
test eax, eax
jne 0x44323b
push str.:8:Installation_FAILED:_GetPAULATime___FAILED_
call fcn.0042b70b
cmp dword [ebp + 8], ebx
pop ecx
je 0x4433a4
push str.There_was_a_problem_accessing_your_TAMS_server._nThe_installation_cannot_continue._n_nPress_any_key_to_exit...
push str.__The_TAMS_server_could_not_be_accessed___
push ebx
push ebx
push ebx
push 1
call fcn.0043dc3e
add esp, 0x18
jmp 0x4433a4
sub esp, 0x10
lea esi, [ebp - 0x484]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004bef5c
movzx eax, word [ebp - 0x466]
lea esi, [ebp - 0x484]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x460], eax
movsd dword es:[edi], dword [esi]
call fcn.0041f802
lea esi, [ebp - 0x474]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x464], eax
movsd dword es:[edi], dword [esi]
call fcn.004f98b7
add esp, 0x10
test eax, eax
jne 0x4432e3
sub esp, 0x10
lea esi, [ebp - 0x474]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004f96f4
add esp, 0x10
push eax
sub esp, 0x10
lea esi, [ebp - 0x484]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004f96f4
add esp, 0x10
push eax
call fcn.004f9d9b
push eax
call fcn.0053146e
add esp, 0xc
cmp eax, 7
jg 0x4432e3
mov eax, dword [ebp - 0x460]
cmp dword [ebp - 0x464], eax
jne 0x4432e3
xor eax, eax
jmp 0x4433a7
push 0x4f
lea eax, [ebp - 0x5b]
push ebx
push eax
call fcn.005306b0
add esp, 0xc
push 0x3ff
lea eax, [ebp - 0x45b]
push ebx
push eax
mov byte [ebp - 0x45c], bl
call fcn.005306b0
add esp, 0xc
push 0x27
lea eax, [ebp - 0x5a]
push 0x21
push eax
mov byte [ebp - 0x5c], 0x2d
mov byte [ebp - 0x5b], 0x20
call fcn.005306b0
add esp, 0xc
push ebx
push str._ur3EZNuagxU___siggSU_HTm_umausos_fu
mov byte [ebp - 0x33], 0x20
mov byte [ebp - 0x32], 0x2d
mov byte [ebp - 0x31], bl
call fcn.004cf702
push eax
mov esi, 0x400
push 0x54f2e4
mov eax, esi
lea edi, [ebp - 0x45c]
call fcn.004ce4a3
push ebx
push str.t_ciY_Qje_Z_UxpHTlecprPj_POUoVmT_jNvV_WUzyeo6uxncUbMm0_3cHge_
call fcn.004cf702
push eax
push 0x54f2dc
mov eax, esi
call fcn.004ce4a3
push ebx
push str.t_gTQLcST_nKHhMtv_FO_
call fcn.004cf702
push eax
push 0x54f2dc
mov eax, esi
call fcn.004ce4a3
add esp, 0x30
cmp dword [ebp + 8], ebx
je 0x4433a4
mov eax, edi
push eax
push 0x54f4f0
lea eax, [ebp - 0x5c]
push eax
push ebx
push ebx
push ebx
push 1
call fcn.0043dc3e
add esp, 0x1c
xor eax, eax
inc eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005317e7
leave
ret