Function at 0x40d4e2
Capabilities:
Accept command line arguments

Disassembly:
mov eax, 0x4298e7
call fcn.0041f054
sub esp, 0x1fc
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
xor ebx, ebx
mov dword [ebp + 0x10], eax
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
push dword [ebp + 8]
mov eax, 0x436f48
mov dword [0x436fb8], 0x434e58
mov dword [0x436ee0], eax
push 0x434dc8
push eax
mov dword [0x436f48], 0x84
mov dword [0x436fac], 0x300
call fcn.0040f2ad
mov eax, 0x42c610
mov ecx, eax
test ecx, ecx
je 0x40d55b
push 0x10
push eax
push 0x436f38
call fcn.0041f100
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x436fcc], eax
mov esi, 0x435038
lea edi, [ebp - 0x30]
lea eax, [ebp - 0x30]
movsw word es:[edi], word [esi]
push eax
mov dword [ebp - 0x14], ebx
push dword [ebp + 0x10]
movsb byte es:[edi], byte [esi]
call fcn.0040d371
pop ecx
mov esi, eax
pop ecx
mov edi, 0x435030
cmp esi, ebx
je 0x40dffb
push 0xffffffffffffffff
push esi
call fcn.00403388
pop ecx
mov dword [ebp - 0x64], eax
pop ecx
lea eax, [ebp - 0x64]
lea ecx, [ebp - 0x2c]
push eax
mov dword [ebp - 4], ebx
call fcn.004088b9
push dword [ebp - 0x64]
mov byte [ebp - 4], 2
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push str.UnregServer
push esi
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x40d5e4
push ebx
push ebx
mov esi, 0x436f48
push 0x64
push esi
call fcn.0040e088
push ebx
push 1
push esi
call fcn.0040f62a
jmp 0x40d60d
push str.RegServer
push esi
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x40d614
push ebx
push 1
mov esi, 0x436f48
push 0x64
push esi
call fcn.0040e088
push ebx
push 1
push esi
call fcn.0040f4b1
mov edi, eax
jmp 0x40dfcb
call fcn.0040d433
cmp word [0x435030], bx
mov dword [ebp - 0x1c], eax
mov eax, edi
je 0x40d62e
inc eax
inc eax
cmp word [eax], bx
jne 0x40d627
sub eax, edi
push ebx
sar eax, 1
push eax
push edi
lea ecx, [ebp - 0x2c]
call fcn.0040a414
test eax, eax
jne 0x40d6d9
cmp dword [ebp - 0x1c], ebx
je 0x40d665
push ebx
push 1
mov esi, 0x436f48
push 0x64
push esi
call fcn.0040e088
push ebx
push 1
push esi
call fcn.0040f4b1
jmp 0x40d66a
mov esi, 0x436f48
lea ecx, [ebp + 0x13]
call fcn.0041aeea
push dword [0x42c4cc]
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0x2c]
mov byte [0x437048], bl
push 2
push eax
mov byte [0x43704c], 1
call fcn.0040faee
push ebx
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 3
call fcn.0040fc46
push dword [ebp - 0x68]
lea eax, [ebp - 0x1c4]
mov byte [ebp - 4], 4
push eax
call fcn.0040513b
mov edi, eax
lea ecx, [ebp - 0x1c4]
and edi, 0xffff
mov byte [ebp - 4], 3
call fcn.00410628
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x74]
jmp 0x40dfc6
cmp word [0x435010], bx
mov eax, 0x435010
je 0x40d6ee
inc eax
inc eax
cmp word [eax], bx
jne 0x40d6e7
mov ecx, 0x435010
push ebx
sub eax, ecx
sar eax, 1
push eax
push ecx
lea ecx, [ebp - 0x2c]
call fcn.0040a414
test eax, eax
jne 0x40d800
cmp dword [ebp - 0x1c], ebx
je 0x40d72c
push ebx
push 1
mov esi, 0x436f48
push 0x64
push esi
call fcn.0040e088
push ebx
push 1
push esi
call fcn.0040f4b1
mov edi, eax
jmp 0x40d734
mov edi, dword [ebp - 0x14]
mov esi, 0x436f48
lea ecx, [ebp + 0x13]
call fcn.0041aeea
push dword [0x42c4cc]
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0x2c]
mov byte [0x437048], bl
push 0x28
push eax
mov byte [0x43704c], 1
call fcn.0040faee
push 0x26
lea eax, [ebp - 0x74]
push 2
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.0040faee
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 6
call fcn.0040cb74
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x3c]
call fcn.0040d371
pop ecx
cmp eax, ebx
pop ecx
mov dword [ebp + 0x10], eax
je 0x40d7e8
push ebx
lea ecx, [ebp - 0x1c4]
call fcn.0040fc46
mov eax, dword [ebp + 0x10]
lea ecx, [ebp - 0x60]
inc eax
mov byte [ebp - 4], 7
push eax
call fcn.004088ea
push dword [eax + 0xc]
lea eax, [ebp - 0x1c4]
mov byte [ebp - 4], 8
push dword [ebp - 0x68]
push eax
call fcn.0040636b
mov edi, eax
lea ecx, [ebp - 0x60]
and edi, 0xffff
mov byte [ebp - 4], 7
call fcn.00408947
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 6
call fcn.00410628
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 5
call fcn.00408947
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x40]
jmp 0x40dfc6
cmp word [0x435008], bx
mov eax, 0x435008
je 0x40d815
inc eax
inc eax
cmp word [eax], bx
jne 0x40d80e
mov ecx, 0x435008
push ebx
sub eax, ecx
sar eax, 1
push eax
push ecx
lea ecx, [ebp - 0x2c]
call fcn.0040a414
test eax, eax
jne 0x40dcb3
cmp dword [ebp - 0x1c], ebx
je 0x40d856
push ebx
push 1
mov esi, 0x436f48
push 0x64
push esi
call fcn.0040e088
push ebx
push 1
push esi
call fcn.0040f4b1
mov edi, eax
mov dword [ebp - 0x14], edi
jmp 0x40d85e
mov edi, dword [ebp - 0x14]
mov esi, 0x436f48
lea ecx, [ebp + 0xb]
call fcn.0041aeea
push dword [0x42c4cc]
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0x2c]
mov byte [0x437048], 1
push 0x28
push eax
mov byte [0x43704c], 1
call fcn.0040faee
push 0x26
lea eax, [ebp - 0x60]
push 2
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.0040faee
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0xa
call fcn.0040cb74
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x70]
call fcn.0040d371
pop ecx
cmp eax, ebx
pop ecx
mov dword [ebp + 8], eax
mov dword [ebp - 0x18], 8
je 0x40d92a
push str.AppStart
push eax
call fcn.0040d3b2
pop ecx
cmp al, 1
pop ecx
jne 0x40d8dc
mov dword [ebp - 0x18], 1
push str.EndOfInstall
push dword [ebp + 8]
call fcn.0040d3b2
pop ecx
cmp al, 1
pop ecx
jne 0x40d8f6
mov dword [ebp - 0x18], 4
push str.AppMenu
push dword [ebp + 8]
call fcn.0040d3b2
pop ecx
cmp al, 1
pop ecx
jne 0x40d910
mov dword [ebp - 0x18], 8
push str.BeginInstall
push dword [ebp + 8]
call fcn.0040d3b2
pop ecx
cmp al, 1
pop ecx
jne 0x40d92a
mov dword [ebp - 0x18], 0x10
push str._afterreboot
push dword [ebp + 8]
call fcn.0040d3b2
pop ecx
cmp al, 1
pop ecx
jne 0x40da96
push dword [ebp + 0x10]
lea ecx, [ebp - 0x40]
call fcn.004088ea
push str._afterreboot
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0xb
call fcn.004088ea
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xc
call fcn.0040a47e
cmp dword [ebp - 0x94], ebx
jne 0x40d978
xor eax, eax
jmp 0x40d984
push dword [ebp - 0x94]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push ebx
push eax
push dword [ebp - 0x94]
lea ecx, [ebp - 0x40]
call fcn.0040a414
push eax
lea eax, [ebp - 0x50]
push ebx
push eax
lea ecx, [ebp - 0x40]
call fcn.0040faee
cmp dword [ebp - 0x44], ebx
mov byte [ebp - 4], 0xd
jne 0x40d9af
xor eax, eax
jmp 0x40d9b8
push dword [ebp - 0x44]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
inc eax
push eax
call fcn.0041f770
mov dword [ebp + 0x10], eax
mov eax, dword [ebp - 0x44]
cmp eax, ebx
pop ecx
mov dword [ebp - 0x18], eax
jne 0x40d9d1
xor edi, edi
jmp 0x40da00
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax + eax + 2]
mov dword [ebp + 8], eax
add eax, 3
and al, 0xfc
call fcn.0041f080
mov edi, esp
push ebx
push ebx
push dword [ebp + 8]
mov byte [edi], bl
push edi
push 0xffffffffffffffff
push dword [ebp - 0x18]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push edi
push dword [ebp + 0x10]
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x10
xor eax, eax
pop ecx
lea edi, [ebp - 0x204]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x208], 0x44
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], ebx
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x208]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push dword [ebp + 0x10]
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x40da5b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push dword [ebp + 0x10]
call fcn.0041bf5d
pop ecx
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0xd
call fcn.0040f9c2
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0xc
call fcn.00408947
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0xb
call fcn.00408947
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xa
call fcn.00408947
jmp 0x40dc4a
push str._reboot
push dword [ebp + 8]
call fcn.0040d3b2
pop ecx
cmp al, 1
pop ecx
jne 0x40dbdc
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x50], 0x42c3b0
push dword [ebp + 0x10]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0xf
call fcn.0040fa83
push str._reboot
lea ecx, [ebp - 0x40]
call fcn.004088ea
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.0040a47e
cmp dword [ebp - 0x34], ebx
jne 0x40daee
xor eax, eax
jmp 0x40daf7
push dword [ebp - 0x34]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push ebx
push eax
push dword [ebp - 0x34]
lea ecx, [ebp - 0x50]
call fcn.0040a414
push eax
lea eax, [ebp - 0x84]
push ebx
push eax
lea ecx, [ebp - 0x50]
call fcn.0040faee
mov dword [ebp + 0x10], ebx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x12
push eax
push 0x20006
push ebx
push str.SoftwareMicrosoftWindowsCurrentVersionRunOnce
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp + 8], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
jne 0x40db4f
lea ecx, [ebp + 0x10]
call fcn.004060b5
mov ecx, dword [ebp + 8]
cmp eax, ebx
mov dword [ebp + 0x10], ecx
je 0x40db62
push 0x10
push str.Error
push str.Unable_to_open_registry
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x84]
call fcn.0040cb74
mov eax, dword [ebp - 0x80]
push eax
mov dword [ebp + 8], eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
push dword [ebp + 8]
push 1
push ebx
push str.ISCheckForUpdate
push dword [ebp + 0x10]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
cmp eax, ebx
je 0x40dba7
push 0x10
push str.Error
push str.Unable_to_write_registry
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x11
call fcn.004060b5
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x10
call fcn.00408947
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xf
call fcn.00408947
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0xa
call fcn.00408947
jmp 0x40dc4d
cmp dword [ebp - 0x1c], ebx
je 0x40dbf8
push ebx
push 1
push 0x64
push esi
call fcn.0040e088
push ebx
push 1
push esi
call fcn.0040f4b1
mov dword [ebp - 0x14], eax
mov dword [ebp + 0x10], ebx
lea eax, [ebp + 0x10]
mov byte [ebp - 4], 0x14
push eax
push 0x434180
push 4
push ebx
push 0x42c620
call dword [sym.imp.ole32.dll_CoCreateInstance]
push dword [ebp - 0x18]
mov eax, dword [ebp + 0x10]
push dword [ebp - 0x54]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x5c]
and eax, 0xffff
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x10]
cmp eax, ebx
je 0x40dc3e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xa
mov esi, 0x436f48
mov edi, dword [ebp - 0x14]
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 9
call fcn.00408947
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x74]
jmp 0x40dfc6
cmp word [0x434eec], bx
mov eax, 0x434eec
je 0x40dcc8
inc eax
inc eax
cmp word [eax], bx
jne 0x40dcc1
mov ecx, 0x434eec
push ebx
sub eax, ecx
sar eax, 1
push eax
push ecx
lea ecx, [ebp - 0x2c]
call fcn.0040a414
test eax, eax
jne 0x40ddda
cmp dword [ebp - 0x1c], ebx
je 0x40dd06
push ebx
push 1
mov esi, 0x436f48
push 0x64
push esi
call fcn.0040e088
push ebx
push 1
push esi
call fcn.0040f4b1
mov edi, eax
jmp 0x40dd0e
mov edi, dword [ebp - 0x14]
mov esi, 0x436f48
lea ecx, [ebp + 0x13]
call fcn.0041aeea
push ebx
lea eax, [ebp + 0x10]
push 1
push eax
lea ecx, [ebp - 0x2c]
mov byte [0x437048], bl
mov byte [0x43704c], 1
mov dword [ebp + 0x10], 0x2c
call fcn.0040a414
cmp eax, dword [0x42c4cc]
mov dword [ebp + 0x10], eax
je 0x40dfcb
dec eax
lea ecx, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x60]
push 1
push eax
call fcn.0040faee
mov eax, dword [ebp + 0x10]
push dword [0x42c4cc]
inc eax
lea ecx, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x18
call fcn.0040faee
cmp dword [ebp - 0x34], ebx
mov byte [ebp - 4], 0x19
je 0x40ddc2
push dword [ebp - 0x34]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x40ddc2
push ebx
lea ecx, [ebp - 0x1c4]
call fcn.0040fc46
push dword [ebp - 0x34]
lea eax, [ebp - 0x1c4]
mov byte [ebp - 4], 0x1a
push dword [ebp - 0x54]
push eax
call fcn.00406523
mov edi, eax
lea ecx, [ebp - 0x1c4]
and edi, 0xffff
mov byte [ebp - 4], 0x19
call fcn.00410628
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x18
call fcn.00408947
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x60]
jmp 0x40dfc6
cmp word [0x434ee8], bx
mov eax, 0x434ee8
je 0x40ddef
inc eax
inc eax
cmp word [eax], bx
jne 0x40dde8
mov ecx, 0x434ee8
push ebx
sub eax, ecx
sar eax, 1
push eax
push ecx
lea ecx, [ebp - 0x2c]
call fcn.0040a414
test eax, eax
jne 0x40de9f
cmp dword [ebp - 0x1c], ebx
je 0x40de2b
push ebx
push 1
mov esi, 0x436f48
push 0x64
push esi
call fcn.0040e088
push ebx
push 1
push esi
call fcn.0040f4b1
jmp 0x40de30
mov esi, 0x436f48
lea ecx, [ebp + 0x13]
call fcn.0041aeea
push dword [0x42c4cc]
lea eax, [ebp - 0x60]
lea ecx, [ebp - 0x2c]
mov byte [0x437048], bl
push 1
push eax
mov byte [0x43704c], 1
call fcn.0040faee
push ebx
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x1b
call fcn.0040fc46
push dword [ebp - 0x54]
lea eax, [ebp - 0x1c4]
mov byte [ebp - 4], 0x1c
push eax
call fcn.004066cc
mov edi, eax
lea ecx, [ebp - 0x1c4]
and edi, 0xffff
mov byte [ebp - 4], 0x1b
call fcn.00410628
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x60]
jmp 0x40dfc6
cmp word [0x434ee0], bx
mov eax, 0x434ee0
je 0x40deb4
inc eax
inc eax
cmp word [eax], bx
jne 0x40dead
mov ecx, 0x434ee0
push ebx
sub eax, ecx
sar eax, 1
push eax
push ecx
lea ecx, [ebp - 0x2c]
call fcn.0040a414
test eax, eax
jne 0x40dfdc
cmp dword [ebp - 0x1c], ebx
je 0x40def2
push ebx
push 1
mov esi, 0x436f48
push 0x64
push esi
call fcn.0040e088
push ebx
push 1
push esi
call fcn.0040f4b1
mov edi, eax
jmp 0x40defa
mov edi, dword [ebp - 0x14]
mov esi, 0x436f48
lea ecx, [ebp + 0x13]
call fcn.0041aeea
push ebx
lea eax, [ebp + 0x10]
push 1
push eax
lea ecx, [ebp - 0x2c]
mov byte [0x437048], bl
mov byte [0x43704c], 1
mov dword [ebp + 0x10], 0x2c
call fcn.0040a414
cmp eax, dword [0x42c4cc]
mov dword [ebp + 0x10], eax
je 0x40dfcb
mov edi, eax
lea ecx, [ebp - 0x2c]
lea eax, [edi - 3]
push eax
lea eax, [ebp - 0x60]
push 3
push eax
call fcn.0040faee
push dword [0x42c4cc]
inc edi
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0x2c]
push edi
push eax
mov byte [ebp - 4], 0x1d
call fcn.0040faee
mov edi, eax
mov ecx, edi
mov byte [ebp - 4], 0x1e
call fcn.0040cb74
mov edi, dword [edi + 4]
push 0xa
push edi
call fcn.0040f9e9
pop ecx
mov edi, eax
pop ecx
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x74]
call fcn.00408947
push ebx
lea ecx, [ebp - 0x1c4]
call fcn.0040fc46
push edi
lea eax, [ebp - 0x1c4]
push dword [ebp - 0x54]
mov byte [ebp - 4], 0x1f
push eax
call fcn.00406de5
mov edi, eax
lea ecx, [ebp - 0x1c4]
and edi, 0xffff
mov byte [ebp - 4], 0x1d
call fcn.00410628
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x60]
call fcn.00408947
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.00408947
jmp 0x40e063
lea eax, [ebp - 0x30]
push eax
push esi
call fcn.0040d371
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
mov esi, eax
lea ecx, [ebp - 0x2c]
call fcn.00408947
jmp 0x40d589
push 1
mov esi, 0x436f48
pop eax
cmp eax, ebx
je 0x40e060
mov ecx, esi
call fcn.0040d326
push 1
push 4
push esi
call fcn.0040f330
lea ecx, [ebp + 8]
call fcn.0041aeea
mov edi, dword [sym.imp.USER32.dll_GetMessageA]
push ebx
push ebx
lea eax, [ebp - 0x90]
push ebx
push eax
call edi
test eax, eax
je 0x40e04f
lea eax, [ebp - 0x90]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
push ebx
push ebx
lea eax, [ebp - 0x90]
push ebx
push eax
jmp 0x40e030
push esi
call fcn.0040f3c5
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [ebp - 0x14]
push esi
call fcn.0040f401
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0xc]
lea esp, [ebp - 0x214]
mov eax, edi
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret 0x10