Function at 0x40a850
Capabilities:
Accept command line arguments
Get common file path
Resume thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42f9d7
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1004
call fcn.00427f70
mov eax, dword [0x493224]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xfd0], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x38], str.x0yqqKwW4Fs8YxIwH9dcptNgzvQgYJ5dBHY9BljCjzujKU9SrKwJbs91kNIsy8UEchVHLdGI5W7pb53yO4vwAbeHzBgK8as7qHjRK2K7z4sxPm1GssXWlxtDIijBRbiWSgi4DsF2SUv23BbkpA20ktjv83uBH3AoBtspEaIa6j6hNddnbn9lETjp6Lhwd87x49EAiPduhNPQN2rEIY7fFM4OS80dHjbqdl4YdbzsoHcsrtJSsS2DR4iAICKIb1GVqofzgVgSo6uVPsvFhLl7XKK0Kpwdma9SyT20xPSXaPPi
push 0x400
lea eax, [ebp - 0x840]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0x898], str.mUuO6GmCsQQAeGT0pWWalyWwABgQ6y5pTjFTkwvJtvv1nkjb6bK7U5Vi1kfnqoEVoeTG57e7nralobm2EOi4h8xDy3UgHnHeMfxOXs4zGg7Vr01j
push 0x44
push 0
lea ecx, [ebp - 0x890]
push ecx
call fcn.0041b400
add esp, 0xc
mov dword [ebp - 0x844], str.SetupWizard.exe
lea edx, [ebp - 0x840]
mov dword [ebp - 0x848], edx
mov byte [ebp - 4], 1
lea eax, [ebp - 0xcb0]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea ecx, [ebp - 0xaa0]
push ecx
push 0
push 0x441e7c
lea edx, [ebp - 0xcb0]
push edx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
lea eax, [ebp - 0xaa0]
push eax
lea ecx, [ebp - 0xaa4]
call fcn.0040c060
lea ecx, [ebp - 0xaa4]
call fcn.0040c0e0
mov dword [ebp - 0x844], eax
lea ecx, [ebp - 0xaa4]
call fcn.00401d40
jmp 0x40a94f
mov dword [ebp - 4], 0
mov byte [ebp - 4], 3
push 1
push 0x40
push 0x20
mov ecx, dword [ebp - 0x848]
push ecx
lea ecx, [ebp - 0xd48]
call fcn.0040c170
mov dword [ebp - 0xfd4], eax
mov byte [ebp - 4], 4
mov dword [ebp - 0xcb4], str.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
push 2
push 0
lea ecx, [ebp - 0xd48]
call fcn.0040bf70
lea edx, [ebp - 0xf98]
push edx
lea ecx, [ebp - 0xd48]
call fcn.0040c000
mov dword [ebp - 0xfd8], eax
mov ecx, dword [ebp - 0xfd8]
call fcn.00406c80
mov dword [ebp - 0xcb8], eax
mov eax, dword [ebp - 0xcb8]
cdq
and edx, 0x3ff
add eax, edx
sar eax, 0xa
mov dword [ebp - 0xcb8], eax
push 0
push 0
lea ecx, [ebp - 0xd48]
call fcn.0040bf70
cmp dword [ebp - 0xcb8], 0x400
jge 0x40aaf5
push 1
push 0x40
push 0x20
mov eax, dword [ebp - 0x844]
push eax
lea ecx, [ebp - 0xe58]
call fcn.0040cea0
mov dword [ebp - 0xfdc], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xd48]
call fcn.0040c2d0
lea ecx, [ebp - 0xe58]
call fcn.0040d000
push 1
push 0x40
push 0xa
mov ecx, dword [ebp - 0x844]
push ecx
lea ecx, [ebp - 0xdd0]
call fcn.0040cea0
mov dword [ebp - 0xfe0], eax
mov byte [ebp - 4], 6
mov dword [ebp - 0xe60], 0
jmp 0x40aa6a
mov edx, dword [ebp - 0xe60]
add edx, 1
mov dword [ebp - 0xe60], edx
cmp dword [ebp - 0xe60], 0x400
jae 0x40aaae
mov dword [ebp - 0xe64], 0
jmp 0x40aa91
mov eax, dword [ebp - 0xe64]
add eax, 1
mov dword [ebp - 0xe64], eax
cmp dword [ebp - 0xe64], 0x400
jae 0x40aaac
push 0x441f34
call fcn.0041b826
add esp, 4
jmp 0x40aa82
jmp 0x40aa5b
mov ecx, dword [ebp - 0xcb8]
push ecx
lea ecx, [ebp - 0xdd0]
call fcn.0040bda0
lea ecx, [ebp - 0xdd0]
call fcn.0040d000
mov dword [ebp - 0xe5c], str.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
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xdd0]
call fcn.0040aed0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xe58]
call fcn.0040aed0
jmp 0x40ab01
mov edx, dword [ebp - 0x848]
mov dword [ebp - 0x844], edx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xd48]
call fcn.0040aea0
jmp 0x40ab2b
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x39]
call fcn.00404880
mov byte [ebp - 4], 8
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x39]
call fcn.00404b10
mov dword [ebp - 0xfe4], eax
mov byte [ebp - 4], 9
push 0x43291b
lea edx, [ebp - 0x30]
push edx
call fcn.0040faf0
add esp, 8
mov byte [ebp - 0xfe5], al
movzx eax, byte [ebp - 0xfe5]
test eax, eax
je 0x40ac6c
push 1
push 3
lea ecx, [ebp - 0xef0]
call fcn.00405fe0
mov dword [ebp - 0xfec], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xef0]
test ecx, ecx
je 0x40abb7
lea edx, [ebp - 0xef0]
add edx, 8
mov dword [ebp - 0xff0], edx
jmp 0x40abc1
mov dword [ebp - 0xff0], 0
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0xff0]
push ecx
call fcn.00407770
add esp, 8
mov dword [ebp - 0xff4], eax
lea edx, [ebp - 0x30]
push edx
mov eax, dword [ebp - 0xff4]
push eax
call fcn.00407a00
add esp, 8
lea ecx, [ebp - 0xfb4]
push ecx
lea ecx, [ebp - 0xef0]
call fcn.00406110
mov dword [ebp - 0xff8], eax
mov edx, dword [ebp - 0xff8]
mov dword [ebp - 0xffc], edx
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0xffc]
call fcn.004091b0
push eax
lea ecx, [ebp - 0xf0c]
call fcn.00404840
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xfb4]
call fcn.00403fd0
lea ecx, [ebp - 0xf0c]
call fcn.004091b0
push eax
call fcn.0041b8eb
add esp, 4
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0xf0c]
call fcn.00403fd0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xef0]
call fcn.00404fa0
push 4
call fcn.00419733
add esp, 4
mov dword [ebp - 0x1000], eax
mov eax, dword [ebp - 0x1000]
mov dword [ebp - 0xfbc], eax
cmp dword [ebp - 0xfbc], 0
je 0x40aca4
mov ecx, dword [ebp - 0xfbc]
call fcn.00401000
mov dword [ebp - 0x1004], eax
jmp 0x40acae
mov dword [ebp - 0x1004], 0
mov ecx, dword [ebp - 0x1004]
mov dword [ebp - 0xfb8], ecx
mov edx, dword [ebp - 0xfb8]
mov dword [ebp - 0x894], edx
mov eax, dword [ebp - 0x894]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x894]
mov eax, dword [edx]
call eax
mov byte [ebp - 0x1005], al
movzx ecx, byte [ebp - 0x1005]
test ecx, ecx
je 0x40adac
push 0x4957e0
lea edx, [ebp - 0x890]
push edx
push 0
push 0
push 5
push 0
push 0
push 0
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x848]
push ecx
mov edx, dword [ebp - 0xfd0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xfd0]
mov edx, dword [eax + 0x20]
call edx
mov dword [ebp - 0x100c], eax
mov eax, dword [ebp - 0x100c]
mov dword [ebp - 0xf7c], eax
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x4957e4]
push ecx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push 0x10002
mov edx, dword [0x4957ec]
push edx
mov eax, dword [0x4957e8]
push eax
call dword [sym.imp.KERNEL32.dll_ContinueDebugEvent]
push 0x60
push 0
lea ecx, [ebp - 0xf70]
push ecx
call fcn.0041b400
add esp, 0xc
mov dword [ebp - 0xf74], str.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
mov dword [ebp - 0xf78], str.HdG9iVJuMQ6tjoTfosHOqFksBmxIFtsHTg0YoSNmD0nqNqttkzVpEvmudqCe3bNHH6hcbaSD3gsHgfe8WSJUqVphgTHuLqReM4mQjYvIa8ewgsDrHtU84jLinPndLKGkRusWfogBCGqBA1ON4vDMCRUFJP4zf1VhDPdt9gX5zAJ4mcuQtdt
push 0x7918
lea edx, [ebp - 0xf70]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForDebugEvent]
push 0x64
mov eax, dword [0x4957e4]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [ebp - 0x894]
mov dword [ebp - 0xfc4], ecx
mov edx, dword [ebp - 0xfc4]
mov dword [ebp - 0xfc0], edx
cmp dword [ebp - 0xfc0], 0
je 0x40ade2
push 1
mov ecx, dword [ebp - 0xfc0]
call fcn.004049e0
mov dword [ebp - 0x1010], eax
jmp 0x40adec
mov dword [ebp - 0x1010], 0
push 0x4957e0
lea eax, [ebp - 0x890]
push eax
push 0
push 0
push 4
push 0
push 0
push 0
mov ecx, dword [ebp - 0x34]
push ecx
mov edx, dword [ebp - 0x848]
push edx
mov eax, dword [ebp - 0xfd0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xfd0]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x1014], eax
mov ecx, dword [ebp - 0x1014]
mov dword [ebp - 0xfc8], ecx
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x30]
call fcn.00403fd0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x39]
call fcn.004048b0
mov eax, dword [ebp - 0xfc8]
jmp 0x40ae80
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004195fb
mov esp, ebp
pop ebp
ret