Function at 0x4273d0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x348
mov eax, dword [0x47c5a8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0x10]
push esi
push str.evnt_iNode_stpDamon
xor esi, esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [0x47dd18], eax
cmp eax, esi
je 0x427b3e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x344], eax
cmp eax, 0xb7
jne 0x42748c
mov eax, dword [0x47dd18]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x47dd18], esi
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov ecx, 0x804
cmp cx, ax
jne 0x427463
push 0x30
mov ecx, 0x46cf54
push ecx
mov eax, 0x46d684
push eax
push esi
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0043fe5a
mov esp, ebp
pop ebp
ret 0x10
mov eax, str.A_previous_instance_is_still_running.__nPlease_try_it_later.
mov ecx, str.iNode_Setup
push 0x30
push ecx
push eax
push esi
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0043fe5a
mov esp, ebp
pop ebp
ret 0x10
call fcn.0042c1e0
test eax, eax
jne 0x4274b8
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 0x804
cmp dx, ax
jne 0x4274b1
mov eax, 0x46d620
mov ecx, 0x46cf54
jmp 0x42746d
mov eax, str.You_do_not_have_administrative_privileges_on_this_computer__the_program_can_not_be_installed_
jmp 0x427468
push edi
push 0x105
lea eax, [ebp - 0x1b0]
push eax
push str.setup
mov dword [ebp - 0x348], esi
call fcn.00429c50
add esp, 0xc
test eax, eax
je 0x4274f7
lea edi, [ebp - 0x1b0]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4274e3
mov cx, word [0x46d5b8]
mov word [edi], cx
jmp 0x427510
mov dx, word [0x46d5b4]
mov al, byte [0x46d5b6]
mov word [ebp - 0x1b0], dx
mov byte [ebp - 0x1ae], al
lea ecx, [ebp - 0x1b0]
push ecx
call fcn.00429bd0
add esp, 4
push 0
push 0x100000
push edx
push eax
call fcn.00441460
mov esi, edx
push esi
mov edi, eax
push edi
lea edx, [ebp - 0x1b0]
push edx
lea eax, [ebp - 0x2b0]
push str.The__s_free_space_is__dM.
push eax
call fcn.00440eaa
lea ecx, [ebp - 0x2b0]
push ecx
call fcn.00425870
mov edx, edi
and edx, esi
add esp, 0x18
cmp edx, 0xffffffff
je 0x42759a
test esi, esi
jg 0x42759a
jl 0x427571
cmp edi, 0x12c
jae 0x42759a
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov ecx, 0x804
cmp cx, ax
jne 0x427590
mov eax, 0x46d560
mov ecx, 0x46cf54
jmp 0x427b31
mov eax, str.The_sys_disk_must_have_at_least_300M_free_space_to_finish_the_setup.
jmp 0x427b2c
push str.UpdateCusInfo.exe
push str.waitSetup
call fcn.0043f940
add esp, 8
test eax, eax
je 0x427b0b
push str.UpdateCusInfo.e
push str.waitSetup
call fcn.0043f940
add esp, 8
test eax, eax
je 0x427b0b
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0
push 0
push str.config_UxSms_start_auto
push 0x46d4d0
push str.open
push 0
call esi
push 0
push eax
lea edx, [ebp - 0x340]
push edx
call fcn.004257f0
push eax
lea eax, [ebp - 0x324]
push str.set_UxSms_start_auto__with_rtn
push eax
call fcn.00427380
add esp, 0x18
lea ecx, [ebp - 0x340]
call fcn.00407890
mov eax, dword [ebp - 0x324]
mov edi, 0x10
cmp dword [ebp - 0x310], edi
jae 0x427633
lea eax, [ebp - 0x324]
push eax
call fcn.00425870
add esp, 4
push 0
push 0
push str.start_UxSms
push 0x46d49c
push str.open
push 0
call esi
push 0
push eax
lea ecx, [ebp - 0x2cc]
push ecx
call fcn.004257f0
push eax
lea edx, [ebp - 0x340]
push str.start_service_UxSms__with_rtn
push edx
call fcn.00427380
add esp, 0x18
push eax
lea ecx, [ebp - 0x324]
call fcn.00407a10
lea ecx, [ebp - 0x340]
call fcn.00407890
lea ecx, [ebp - 0x2cc]
call fcn.00407890
mov eax, dword [ebp - 0x324]
cmp dword [ebp - 0x310], edi
jae 0x4276ad
lea eax, [ebp - 0x324]
push eax
call fcn.00425870
push 1
push 0x47de24
push 0x47de28
push str.setup
call fcn.00433600
add esp, 0x14
test eax, eax
je 0x427a53
push str.compare_password
call fcn.00425870
push 0x80
lea eax, [ebp - 0xa7]
push 0
push eax
mov byte [ebp - 0xa8], 0
call fcn.00440e30
add esp, 0x10
push ebx
lea ecx, [ebp - 0x308]
call fcn.00407810
cmp dword [ebp - 0x2f8], 0
jbe 0x4277c5
mov eax, dword [ebp - 0x308]
cmp dword [ebp - 0x2f4], edi
jae 0x427728
lea eax, [ebp - 0x308]
push eax
call fcn.00425870
mov eax, dword [ebp - 0x308]
add esp, 4
cmp dword [ebp - 0x2f4], edi
jae 0x427745
lea eax, [ebp - 0x308]
mov ecx, dword [ebp - 0x2f8]
push ecx
push eax
lea edx, [ebp - 0xa8]
push 0x80
push edx
call fcn.00435db0
add esp, 0x10
lea ecx, [ebp - 0xa8]
mov eax, 0x47de28
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x427790
test dl, dl
je 0x42778c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x427790
add eax, 2
add ecx, 2
test dl, dl
jne 0x427770
xor eax, eax
jmp 0x427795
sbb eax, eax
sbb eax, 0xffffffff
mov esi, 1
test eax, eax
je 0x4277a4
mov esi, dword [ebp - 0x348]
push 0x47de28
call fcn.00425870
lea eax, [ebp - 0xa8]
push eax
call fcn.00425870
add esp, 8
test esi, esi
jne 0x4279b2
push str.Begin_UnpackAndSetup
call fcn.00425870
add esp, 4
xor ebx, ebx
push ebx
push 0x426fa0
xor eax, eax
push ebx
push 0x86
push ebx
mov dword [ebp - 0x2dc], ebx
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2ec], ebx
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x2e0], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.USER32.dll_CreateDialogParamA]
lea ecx, [ebp - 0x2dc]
push ecx
mov esi, eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov edi, dword [sym.imp.USER32.dll_GetWindowRect]
push eax
call edi
lea edx, [ebp - 0x2ec]
push edx
push esi
call edi
mov eax, dword [ebp - 0x2e4]
sub eax, dword [ebp - 0x2ec]
mov ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x2e8]
sub edx, dword [ebp - 0x2e0]
add ecx, eax
mov eax, dword [ebp - 0x2d0]
add eax, edx
mov dword [ebp - 0x2d0], eax
sub eax, dword [ebp - 0x2d8]
push 0x81
cdq
sub eax, edx
push ebx
sar eax, 1
push ebx
push eax
mov eax, dword [ebp - 0x2d4]
sub eax, ecx
cdq
sub eax, edx
sar eax, 1
push eax
push 0xffffffffffffffff
push esi
mov dword [ebp - 0x2dc], ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
push 5
push esi
call dword [sym.imp.USER32.dll_ShowWindow]
push esi
call dword [sym.imp.USER32.dll_UpdateWindow]
mov edi, dword [sym.imp.USER32.dll_GetMessageA]
push ebx
push ebx
push ebx
lea eax, [ebp - 0x340]
push eax
call edi
cmp eax, ebx
je 0x42791f
mov ebx, dword [sym.imp.USER32.dll_IsDialogMessageA]
lea esp, [esp]
cmp eax, 0xffffffff
jne 0x4278e4
push str._handle_the_error_and_possibly_exit
call fcn.00425870
add esp, 4
jmp 0x42790c
lea ecx, [ebp - 0x340]
push ecx
push esi
call ebx
test eax, eax
jne 0x42790c
lea edx, [ebp - 0x340]
push edx
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x340]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
push 0
push 0
push 0
lea ecx, [ebp - 0x340]
push ecx
call edi
test eax, eax
jne 0x4278d0
push esi
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp dword [0x47deac], 0
je 0x427a48
push str.Begin_UnpackAndSetup
call fcn.00425870
lea edx, [ebp - 0x344]
push edx
mov dword [ebp - 0x344], 0
call fcn.00425e50
add esp, 8
test eax, eax
jne 0x427a48
push str.install_failed_with_Err
lea ecx, [ebp - 0x2cc]
call fcn.00407810
mov eax, dword [ebp - 0x344]
push eax
lea ecx, [ebp - 0x24]
push 0x46cd20
push ecx
call fcn.00440eaa
lea eax, [ebp - 0x24]
add esp, 0xc
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x427990
sub eax, edx
push eax
lea edx, [ebp - 0x24]
push edx
lea ecx, [ebp - 0x2cc]
call fcn.00413820
cmp dword [ebp - 0x2b8], 0x10
jmp 0x427a26
push str.password_same_begin_auto_setup
call fcn.00425870
lea eax, [ebp - 0x344]
push eax
mov dword [ebp - 0x344], 0
call fcn.00425e50
add esp, 8
test eax, eax
jne 0x427a48
push str.install_failed_with_Err
lea ecx, [ebp - 0x2cc]
call fcn.00407810
mov ecx, dword [ebp - 0x344]
push ecx
lea edx, [ebp - 0x24]
push 0x46cd20
push edx
call fcn.00440eaa
lea eax, [ebp - 0x24]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x427a07
sub eax, edx
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00413820
cmp dword [ebp - 0x2b8], edi
mov eax, dword [ebp - 0x2cc]
jae 0x427a34
lea eax, [ebp - 0x2cc]
push eax
call fcn.00425870
add esp, 4
lea ecx, [ebp - 0x2cc]
call fcn.00407890
lea ecx, [ebp - 0x308]
jmp 0x427adc
lea ecx, [ebp - 0x344]
push ecx
mov dword [ebp - 0x344], 0
call fcn.00425e50
add esp, 4
test eax, eax
jne 0x427ae1
push str.install_failed_with_Err
lea ecx, [ebp - 0x2cc]
call fcn.00407810
mov edx, dword [ebp - 0x344]
push edx
lea eax, [ebp - 0x24]
push 0x46cd20
push eax
call fcn.00440eaa
lea eax, [ebp - 0x24]
add esp, 0xc
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x427aa0
sub eax, edx
push eax
lea ecx, [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x2cc]
call fcn.00413820
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp - 0x2b8], edi
jae 0x427acd
lea eax, [ebp - 0x2cc]
push eax
call fcn.00425870
add esp, 4
lea ecx, [ebp - 0x2cc]
call fcn.00407890
mov eax, dword [0x47dd18]
test eax, eax
je 0x427af1
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.Exit_main
call fcn.00425870
add esp, 4
lea ecx, [ebp - 0x324]
call fcn.00407890
jmp 0x427b3d
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 0x804
cmp dx, ax
jne 0x427b27
mov eax, 0x46d3bc
mov ecx, 0x46cf54
jmp 0x427b31
mov eax, str.A_previous_instance_is_still_running.__nPlease_try_it_later.
mov ecx, str.iNode_Setup
push 0x30
push ecx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.0043fe5a
mov esp, ebp
pop ebp
ret 0x10