Function at 0x40cad0
Capabilities:
Accept command line arguments
Get common file path
Resume thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43460b
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1074
call fcn.00420400
mov eax, dword [0x49f868]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xfcc], ecx
mov dword [ebp - 0x1054], str.dvFjqWUCwIroynHFIinWz3cz15I8ApLWPFgMrTECVDp0HoO9Uyq8mhSCsPEXYzgO1qOjwE7GafoQDYC7ou4jxsaWxLeYwHwvOVvtQanakQqTvXyt904e9BBs3FO3XrfdFheGO44XngMsal2gARWqmukAEM7oIF7gqxD9SHhBdG173ltytU2juyYoVQ2wOrMYiIbTI8G9APVPjmmu1Rn50WHul1LjV22QTM4R47qf9ODTE29kJrONsxa4eTMWoTxogEfIR7a9rgrSvblnCfXkDTwTOzOVaI4dMct0ai7EUdYKROr20SanogvlhyQ9PooXefd5avWaS97KrbXLBVysJCijAtPGGE7DiP44VYzg14I3LNvef0B9I27Gu4VIH61RXOP2APB6LG9Jl9zbva5yMApWt04nKz1kzfEB1Bjxz0oPC91H3WRQOqoJSUJVF03AiTRs15WHukzNcNiTKGHEbcxuenawoYzMd38A1eMO2XyTQPlro4DRPGpHsUo40PyDinkl3f7c4b0evFEAEhTJrYxYS1clJztsn2AnOwdcQbjKcqdb3X4QghtYe66WWWk5eEnHGCpi37Fd7VwC2cU8d2NsAzqjbnE0tilDDl20I62cAICUWwxMPS6erKgG3YrdEsuOhHrWhd59613C1VgplGYcHXranBhmb80fSR0PAtjifKQTlRHQyu4kCqyE5MdBlHThfekuuNLRVix3HmKR3A3vsanLgw7hv5fvC1f34M7ORRwy7x49id7NnsIE6tFCCVuCtn0kNzW94zBYBagc6goHwjzW7xsvE0BmkBpwddPPUHifW2Wj0Rglg8jSGfx9A8rPGcxur9woiTgy9lmjjodGAPOldOUX5TUob81AfwnBiWVY3bObSNXXH2w5GJdpTkGsk6IXPfiXKNvtxWxPDJ0d5VMO3CW0WOaV1772pjCTeflB3zCCM6kDdOne1VMUFmD9iylkeL2P5TVHuz3nOaHEz3qU4Xy6YvhUy4dCxLE6rfTLj3HmuxsTF2utsPb8lobtpG8VBxVYaw0wuGnkM8zd3jvqdtLnIKiwKJapInMKTRaotKHq0dHBfsMe5ExOBSufKT0raErC5cpvh5fjFm7kO82mDYRcYEwdO9YChPAJRhXFp4q3AsHPl6mabSfVow0wDO6KorfedI8qTGBF6Tu8kbqgg6aS76dfAxj6IOGRbCpIYQ1Cl4gOn8TgKIyTxJiTRKle7b78IyrlXoGh4dmrG5WFEon6kNwX4UaHBwEBCWjkgJQbNyMlMcq5R0XiA8K0MuHId9vDxC4b6xsnIdX8Bjo7mOx7dCx3eLpLcU3BhMF6Ax8rwbOFlU5pcvjVVn6G9V8BepTUE438BCdsxmF6y7WCv9qSlzn1S6effMRYCr51TOK2DxmN7FFpw9YROA1DmftXxTXd9kBi2jvhio7sdY7tvn4yAVoG6e5kKcp3mtohmqTPwtE0p4juR3FoHdwN9OL8NMAXn6c29A8PXgaByDyc1LKy3dc9aFE
mov dword [ebp - 4], 0
push 0x400
lea eax, [ebp - 0xc24]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x44
push 0
lea ecx, [ebp - 0xca0]
push ecx
call fcn.0041eed0
add esp, 0xc
mov dword [ebp - 0xfc0], str.SetupWizard.exe
lea edx, [ebp - 0xc24]
mov dword [ebp - 0xfc4], edx
mov byte [ebp - 4], 1
lea eax, [ebp - 0x424]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea ecx, [ebp - 0x21c]
push ecx
push 0
push 0x461344
lea edx, [ebp - 0x424]
push edx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
push 1
lea ecx, [ebp - 0xc2c]
call fcn.00404100
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0xc2c]
call fcn.0040b9a0
lea ecx, [ebp - 0xc2c]
call fcn.00401d90
mov dword [ebp - 0xfc0], eax
lea ecx, [ebp - 0xc2c]
call fcn.00401a80
jmp 0x40cbce
mov dword [ebp - 4], 0
jmp 0x40cbde
mov byte [ebp - 4], 3
push 1
lea ecx, [ebp - 0xd58]
call fcn.00410260
push 1
push 0x40
push 0x20
mov ecx, dword [ebp - 0xfc4]
push ecx
lea ecx, [ebp - 0xd58]
call fcn.0040ba90
mov dword [ebp - 0x1048], eax
mov byte [ebp - 4], 4
push 2
push 0
push 0
lea ecx, [ebp - 0xd58]
call fcn.00411c30
lea edx, [ebp - 0x1084]
push edx
lea ecx, [ebp - 0xd58]
call fcn.00412190
mov dword [ebp - 0x1024], eax
mov ecx, dword [ebp - 0x1024]
call fcn.004068f0
mov dword [ebp - 0x102c], eax
mov dword [ebp - 0x1028], edx
mov eax, dword [ebp - 0x102c]
mov dword [ebp - 0xfd0], eax
mov eax, dword [ebp - 0xfd0]
cdq
and edx, 0x3ff
add eax, edx
sar eax, 0xa
mov dword [ebp - 0xfd0], eax
push 0
push 0
push 0
lea ecx, [ebp - 0xd58]
call fcn.00411c30
cmp dword [ebp - 0xfd0], 0x400
jge 0x40cdb0
push 1
lea ecx, [ebp - 0xf58]
call fcn.004102a0
push 1
push 0x40
push 0x20
mov ecx, dword [ebp - 0xfc0]
push ecx
lea ecx, [ebp - 0xf58]
call fcn.0040bb90
mov dword [ebp - 0x1038], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xd58]
call fcn.004104b0
lea ecx, [ebp - 0xf58]
call fcn.004104e0
push 1
lea ecx, [ebp - 0xeb0]
call fcn.004102a0
push 1
push 0x40
push 0xa
mov edx, dword [ebp - 0xfc0]
push edx
lea ecx, [ebp - 0xeb0]
call fcn.0040bb90
mov dword [ebp - 0x1040], eax
mov byte [ebp - 4], 6
mov dword [ebp - 0xfd8], 0
jmp 0x40cd25
mov eax, dword [ebp - 0xfd8]
add eax, 1
mov dword [ebp - 0xfd8], eax
cmp dword [ebp - 0xfd8], 0x400
jae 0x40cd69
mov dword [ebp - 0xfdc], 0
jmp 0x40cd4c
mov ecx, dword [ebp - 0xfdc]
add ecx, 1
mov dword [ebp - 0xfdc], ecx
cmp dword [ebp - 0xfdc], 0x400
jae 0x40cd67
push 0x4630a4
call fcn.0041ff47
add esp, 4
jmp 0x40cd3d
jmp 0x40cd16
mov edx, dword [ebp - 0xfd0]
push edx
lea ecx, [ebp - 0xeb0]
call fcn.0040c3b0
lea ecx, [ebp - 0xeb0]
call fcn.004104e0
mov dword [ebp - 0x1050], str.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
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xeb0]
call fcn.0040c5f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xf58]
call fcn.0040c5f0
jmp 0x40cdbc
mov eax, dword [ebp - 0xfc4]
mov dword [ebp - 0xfc0], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xd58]
call fcn.0040c5c0
jmp 0x40cddf
mov dword [ebp - 4], 0
jmp 0x40cdef
lea ecx, [ebp - 0xc25]
call fcn.00406310
mov dword [ebp - 0x1030], eax
mov byte [ebp - 4], 8
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov dword [ebp - 0xfc8], eax
lea edx, [ebp - 0xc44]
push edx
lea ecx, [ebp - 0xc25]
call fcn.00407330
mov dword [ebp - 0x1034], eax
mov byte [ebp - 4], 9
push 0x460c99
lea eax, [ebp - 0xc44]
push eax
call fcn.0040b4a0
add esp, 8
mov byte [ebp - 0xfba], al
movzx ecx, byte [ebp - 0xfba]
test ecx, ecx
je 0x40cf5e
push 1
lea ecx, [ebp - 0xe08]
call fcn.00408a80
push 1
push 3
lea ecx, [ebp - 0xe08]
call fcn.00405ba0
mov dword [ebp - 0x103c], eax
mov byte [ebp - 4], 0xa
lea edx, [ebp - 0xe08]
test edx, edx
je 0x40ce96
lea eax, [ebp - 0xe08]
add eax, 0x10
mov dword [ebp - 0xfe4], eax
jmp 0x40cea0
mov dword [ebp - 0xfe4], 0
mov ecx, dword [ebp - 0xfc8]
push ecx
mov edx, dword [ebp - 0xfe4]
push edx
call fcn.00404ff0
add esp, 8
mov dword [ebp - 0x1020], eax
lea eax, [ebp - 0xc44]
push eax
mov ecx, dword [ebp - 0x1020]
push ecx
call fcn.00404d10
add esp, 8
lea edx, [ebp - 0x106c]
push edx
lea ecx, [ebp - 0xe08]
call fcn.0040aee0
mov dword [ebp - 0x1008], eax
mov eax, dword [ebp - 0x1008]
mov dword [ebp - 0x1018], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x1018]
call fcn.00408db0
push eax
lea ecx, [ebp - 0xc5c]
call fcn.004018d0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x106c]
call fcn.00401ad0
mov dword [ebp - 0x1044], str.Jmqx3uj0ucX5mdtqPn2M609pwIdGVGljRUIQqqVr5g22zLj6FCYixbp6VOnjrFwoughx3VulOUNcKFyQYyt0ugJkil5RGNNq7JfgolMAGJsnjy0t4kAg4FL93ndEsCx2eLbyHJKN6P3PPt4W99PoaGfg9CxmK6J4oR0X04vj2VygeJNrxk5
lea ecx, [ebp - 0xc5c]
call fcn.00408db0
push eax
call fcn.0041f119
add esp, 4
mov dword [ebp - 0xfc8], eax
lea ecx, [ebp - 0xc5c]
call fcn.00401ad0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xe08]
call fcn.00406b40
push 4
call fcn.0041c0b5
add esp, 4
mov dword [ebp - 0xff4], eax
mov ecx, dword [ebp - 0xff4]
mov dword [ebp - 0xfe0], ecx
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0xfe0], 0
je 0x40cfa6
mov ecx, dword [ebp - 0xfe0]
call fcn.00401a30
mov dword [ebp - 0xffc], eax
mov edx, dword [ebp - 0xffc]
mov dword [ebp - 0xfec], edx
jmp 0x40cfb0
mov dword [ebp - 0xfec], 0
mov eax, dword [ebp - 0xfec]
mov dword [ebp - 0x1004], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x1004]
mov dword [ebp - 0xfd4], ecx
mov edx, dword [ebp - 0xfd4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xfd4]
mov edx, dword [eax]
call edx
mov byte [ebp - 0xfb9], al
movzx eax, byte [ebp - 0xfb9]
test eax, eax
je 0x40d0a2
push 0x4a0ca8
lea ecx, [ebp - 0xca0]
push ecx
push 0
push 0
push 5
push 0
push 0
push 0
mov edx, dword [ebp - 0xfc8]
push edx
mov eax, dword [ebp - 0xfc4]
push eax
mov ecx, dword [ebp - 0xfcc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xfcc]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x100c], eax
mov ecx, dword [ebp - 0x100c]
mov dword [ebp - 0x104c], ecx
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [0x4a0cac]
push edx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push 0x10002
mov eax, dword [0x4a0cb4]
push eax
mov ecx, dword [0x4a0cb0]
push ecx
call dword [sym.imp.KERNEL32.dll_ContinueDebugEvent]
push 0x60
push 0
lea edx, [ebp - 0xfb8]
push edx
call fcn.0041eed0
add esp, 0xc
push 0x7918
lea eax, [ebp - 0xfb8]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForDebugEvent]
push 0x64
mov ecx, dword [0x4a0cac]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [ebp - 0xfd4]
mov dword [ebp - 0x1014], edx
mov eax, dword [ebp - 0x1014]
mov dword [ebp - 0xfe8], eax
cmp dword [ebp - 0xfe8], 0
je 0x40d0e4
push 1
mov ecx, dword [ebp - 0xfe8]
call fcn.00406de0
mov dword [ebp - 0x101c], eax
mov ecx, dword [ebp - 0x101c]
mov dword [ebp - 0xff0], ecx
jmp 0x40d0ee
mov dword [ebp - 0xff0], 0
push 0x4a0ca8
lea edx, [ebp - 0xca0]
push edx
push 0
push 0
push 4
push 0
push 0
push 0
mov eax, dword [ebp - 0xfc8]
push eax
mov ecx, dword [ebp - 0xfc4]
push ecx
mov edx, dword [ebp - 0xfcc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xfcc]
mov edx, dword [eax + 0x20]
call edx
mov dword [ebp - 0xff8], eax
mov eax, dword [ebp - 0xff8]
mov dword [ebp - 0x1000], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xc44]
call fcn.00401ad0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xc25]
call fcn.00408490
mov eax, dword [ebp - 0x1000]
jmp 0x40d18b
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e8d2
mov esp, ebp
pop ebp
ret