Function at 0x41d167
Capabilities:
Create process on windows
Create process suspended

Disassembly:
push 0xa0
mov eax, 0x44a946
call fcn.004386f7
mov dword [ebp - 0x48], ecx
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x4c], edi
push 0x406490
push 0x406275
push 9
push 4
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 1
call fcn.0043a7ab
mov ebx, 0x4676b0
push ebx
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 2
call fcn.0040620b
push ebx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 3
call fcn.0040620b
push 0x2c
lea eax, [ebp - 0x54]
push eax
mov eax, dword [ebp + 8]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
mov byte [ebp - 4], 4
call fcn.0040693a
add eax, 0x10
pop ecx
mov dword [esi], eax
call fcn.0041954e
mov eax, dword [ebp - 0x50]
mov esi, dword [ebp - 0x54]
add esp, 0xc
sub eax, esi
push 0x18
cdq
pop ecx
idiv ecx
cmp eax, 4
jb 0x41d4f0
cmp eax, 9
ja 0x41d4f0
mov ebx, edi
cmp esi, dword [ebp - 0x50]
je 0x41d252
lea edi, [ebp - 0x34]
cmp ebx, 9
jae 0x41d245
cmp dword [esi + 0x14], 8
jb 0x41d221
mov eax, dword [esi]
jmp 0x41d223
mov eax, esi
push eax
mov ecx, edi
call fcn.00409f9c
push dword [edi]
push ebx
push str.Parameter__1_d_____2_s__n
push str.CUninstallActions::LaunchApplication
push 4
call fcn.00405a24
add esp, 0x14
push 0x18
pop ecx
add esi, ecx
inc ebx
add edi, 4
cmp esi, dword [ebp - 0x50]
jne 0x41d212
xor edi, edi
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
call fcn.004065c3
mov eax, dword [ebp - 0x38]
cmp dword [eax - 0xc], 0
je 0x41d290
mov eax, dword [ebp - 0x14]
cmp dword [eax - 0xc], 0
je 0x41d298
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
call fcn.0040693a
add eax, 0x10
mov dword [esi], eax
mov esi, dword [ebp - 0x48]
pop ecx
mov ecx, esi
call fcn.0041bf94
test eax, eax
jne 0x41d29b
xor edi, edi
inc edi
jmp 0x41d533
mov esi, dword [ebp - 0x48]
lea ecx, [ebp - 0x38]
call fcn.00406ba7
mov ecx, dword [ebp - 0x28]
lea edx, [ebp - 0x38]
mov eax, dword [ecx - 0xc]
push edx
inc eax
push eax
push ecx
mov ecx, esi
call fcn.00420631
mov esi, dword [ebp - 0x38]
push esi
push str.strCmd___1_s__n
push str.CUninstallActions::LaunchApplication
push 4
call fcn.00405a24
push 0x44
pop ebx
push ebx
lea eax, [ebp - 0xac]
push edi
push eax
call fcn.00438dc0
mov dword [ebp - 0xac], ebx
mov eax, dword [esi - 0xc]
add esp, 0x1c
inc eax
push eax
lea ecx, [ebp - 0x38]
call fcn.00409996
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0xac]
push ecx
push edi
push edi
push 0x20
push edi
push edi
push edi
push eax
push edi
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x41d334
push str.CreateProcess_failed._n
push str.CUninstallActions::LaunchApplication
push 2
call fcn.00405a24
add esp, 0xc
lea ecx, [ebp - 0x38]
push 0xffffffffffffffff
call fcn.0041dfec
jmp 0x41d533
push str.CreateProcess_success._n
push str.CUninstallActions::LaunchApplication
push 4
call fcn.00405a24
add esp, 0xc
push 0x7f02
push dword [0x4690d0]
call dword [sym.imp.USER32.dll_LoadCursorW]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
push dword [ebp - 0x64]
mov dword [ebp - 0x40], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.APP_IGNOREEXITCODE
lea ecx, [ebp - 0x34]
call fcn.004069bd
push 0x64
pop ebx
mov dword [ebp - 0x3c], ebx
test eax, eax
jne 0x41d388
mov dword [ebp - 0x44], edi
jmp 0x41d3d8
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov esi, eax
call fcn.0040ce56
cmp esi, 0x102
je 0x41d388
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x41d3d8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.GetExitCodeProcess_failed.__0x_1_x___n
push str.CUninstallActions::LaunchApplication
push 2
call fcn.00405a24
add esp, 0x10
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or esi, 0xffffffff
push esi
lea ecx, [ebp - 0x38]
call fcn.0041dfec
push dword [ebp - 0x44]
push str.Launched_Process_ExitCode__0x_1_d_._n
push str.CUninstallActions::LaunchApplication
push 4
call fcn.00405a24
mov eax, dword [ebp - 0x40]
add esp, 0x10
test eax, eax
je 0x41d412
push eax
call dword [sym.imp.USER32.dll_SetCursor]
push str.APP_GETEXITCODE
lea ecx, [ebp - 0x34]
call fcn.004069bd
test eax, eax
jne 0x41d290
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x40], edi
cmp dword [eax - 0xc], 0
jne 0x41d437
mov ebx, edi
jmp 0x41d448
push 0xa
lea ecx, [ebp - 0x40]
push ecx
push eax
call fcn.0043a497
add esp, 0xc
mov ebx, eax
mov ecx, dword [ebp - 0x20]
cmp dword [ecx - 0xc], 0
je 0x41d463
push 0xa
lea eax, [ebp - 0x40]
push eax
push ecx
call fcn.0043a497
add esp, 0xc
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx - 0xc], 0
je 0x41d47d
push 0xa
lea eax, [ebp - 0x40]
push eax
push ecx
call fcn.0043a497
add esp, 0xc
mov esi, eax
cmp dword [ebp - 0x44], ebx
jne 0x41d49b
push str.Launched_Process_completed_successfully._n
push str.CUninstallActions::LaunchApplication
push 4
call fcn.00405a24
add esp, 0xc
jmp 0x41d290
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x44], eax
jne 0x41d4cf
push str.Launched_Process_Required_reboot._n
push str.CUninstallActions::LaunchApplication
push 4
call fcn.00405a24
pop ecx
pop ecx
mov ecx, esp
push str.SET_VARSIGNED__0x00000000_REBOOT_DIRECT___1
call fcn.00406234
mov ecx, dword [ebp - 0x48]
call fcn.0041edcf
jmp 0x41d290
test esi, esi
je 0x41d4e9
push str.Launched_Process_failed_something_error_return_FALSE_._n
push str.CUninstallActions::LaunchApplication
push 4
call fcn.00405a24
add esp, 0xc
jmp 0x41d533
push str.Launched_Process_failed_something_error_return_TRUE_._n
jmp 0x41d487
push ebx
lea ecx, [ebp - 0x3c]
call fcn.0040620b
push 0x57
mov byte [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
push dword [ebp + 8]
lea eax, [ebp - 0x3c]
push str.CUninstallActions::LaunchApplication_invalid_parameters.___s_
push eax
call fcn.00406ea6
mov esi, dword [ebp - 0x3c]
add esp, 0xc
push 0x10
push str.Internal_Error
push esi
push edi
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [esi - 0x10]
call fcn.00409a06
mov ecx, dword [ebp - 0x58]
lea ecx, [ecx - 0x10]
call fcn.00409a06
mov ecx, dword [ebp - 0x38]
lea ecx, [ecx - 0x10]
call fcn.00409a06
push 0x406490
push 9
push 4
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 1
call fcn.00438e50
lea ecx, [ebp - 0x54]
call fcn.004052ea
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00409a06
mov eax, edi
call fcn.004386a6
ret 4