Function at 0x418410
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xeb8
mov eax, dword [0x458320]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov dword [ebp - 8], ecx
push 0x20a
push 0
lea eax, [ebp - 0x214]
push eax
call fcn.004266d0
add esp, 0xc
push 0x104
lea eax, [ebp - 0x214]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x418ac4
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
lea ecx, [ebp - 0x218]
call fcn.00401860
lea ecx, [ebp - 0x218]
call fcn.00401e30
test eax, eax
je 0x418ab9
lea ecx, [ebp - 0x218]
call fcn.00401930
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveExtensionW]
push 4
push 0
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x218]
call fcn.004191a0
push str.Inst
lea ecx, [ebp - 0x21c]
call fcn.00418d80
test eax, eax
je 0x4185fd
mov dword [ebp - 0x220], 0
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0
je 0x4185fd
cmp dword [ebp - 0x220], 2
jne 0x4185fd
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x228]
call fcn.00401860
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax + 4]
push ecx
lea ecx, [ebp - 0x22c]
call fcn.00401860
lea ecx, [ebp - 0x22c]
call fcn.00419290
movzx eax, al
test eax, eax
jne 0x4185da
push 0
push 0x44e560
lea ecx, [ebp - 0x22c]
call fcn.00418fd0
test eax, eax
jl 0x418564
mov eax, dword [ebp - 8]
mov dword [eax + 0x28], 1
push 0
push 0x44e55c
lea ecx, [ebp - 0x22c]
call fcn.00418fd0
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jl 0x4185da
mov eax, dword [ebp - 0x230]
add eax, 1
push eax
lea ecx, [ebp - 0x234]
push ecx
lea ecx, [ebp - 0x22c]
call fcn.00419160
push 0x20
lea ecx, [ebp - 0x234]
call fcn.004190a0
lea ecx, [ebp - 0x234]
call fcn.00401e30
test eax, eax
je 0x4185cf
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x218]
call fcn.00418d50
lea ecx, [ebp - 0x234]
call fcn.00401910
mov eax, dword [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea ecx, [ebp - 0x22c]
call fcn.00401910
lea ecx, [ebp - 0x228]
call fcn.00401910
push 0x44e558
push 0x44e550
lea ecx, [ebp - 0x218]
call fcn.00418de0
push 0x208
push 0
lea eax, [ebp - 0x43c]
push eax
call fcn.004266d0
add esp, 0xc
push 0x208
push 0
lea eax, [ebp - 0x644]
push eax
call fcn.004266d0
add esp, 0xc
push 0x208
push 0
lea eax, [ebp - 0x84c]
push eax
call fcn.004266d0
add esp, 0xc
push 0x208
push 0
lea eax, [ebp - 0xa54]
push eax
call fcn.004266d0
add esp, 0xc
mov eax, dword [ebp - 8]
mov dword [eax + 0x24], 0
mov eax, dword [ebp - 8]
add eax, 0x24
push eax
push 0x104
lea ecx, [ebp - 0xa54]
push ecx
push 0x104
lea edx, [ebp - 0x644]
push edx
push 0x104
lea eax, [ebp - 0x84c]
push eax
mov ecx, dword [ebp - 8]
push ecx
push 0x104
lea edx, [ebp - 0x43c]
push edx
push str._s__d__s__s__s__d
lea ecx, [ebp - 0x218]
call fcn.00401930
push eax
call fcn.00426679
add esp, 0x30
mov dword [ebp - 0xa58], eax
lea eax, [ebp - 0x43c]
mov dword [ebp - 0xa5c], eax
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
test ecx, ecx
je 0x4187b9
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x31
jne 0x418708
mov eax, dword [ebp - 8]
mov dword [eax + 8], 1
jmp 0x4187a5
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x32
jne 0x418725
mov eax, dword [ebp - 8]
mov dword [eax + 0xc], 1
jmp 0x4187a5
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x33
jne 0x41873f
mov eax, dword [ebp - 8]
mov dword [eax + 0x10], 1
jmp 0x4187a5
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x34
jne 0x418759
mov eax, dword [ebp - 8]
mov dword [eax + 0x14], 1
jmp 0x4187a5
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x35
jne 0x418773
mov eax, dword [ebp - 8]
mov dword [eax + 0x18], 1
jmp 0x4187a5
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x36
jne 0x41878d
mov eax, dword [ebp - 8]
mov dword [eax + 0x1c], 1
jmp 0x4187a5
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x37
jne 0x4187a5
mov eax, dword [ebp - 8]
mov dword [eax + 0x20], 1
mov eax, dword [ebp - 0xa5c]
add eax, 2
mov dword [ebp - 0xa5c], eax
jmp 0x4186da
mov eax, dword [ebp - 8]
cmp dword [eax + 8], 0
jne 0x418802
mov eax, dword [ebp - 8]
cmp dword [eax + 0xc], 0
jne 0x418802
mov eax, dword [ebp - 8]
cmp dword [eax + 0x10], 0
jne 0x418802
mov eax, dword [ebp - 8]
cmp dword [eax + 0x14], 0
jne 0x418802
mov eax, dword [ebp - 8]
cmp dword [eax + 0x18], 0
jne 0x418802
mov eax, dword [ebp - 8]
cmp dword [eax + 0x1c], 0
jne 0x418802
mov eax, dword [ebp - 8]
cmp dword [eax + 0x20], 0
jne 0x418802
mov eax, dword [ebp - 8]
mov dword [eax + 8], 1
xor eax, eax
mov word [ebp - 0xa4c], ax
cmp dword [ebp - 0xa58], 3
jne 0x4188e2
lea eax, [ebp - 0x84c]
mov dword [ebp - 0xa60], eax
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
test ecx, ecx
je 0x4188a8
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x41
jl 0x41884d
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x5a
jle 0x418885
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x61
jl 0x418869
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x7a
jle 0x418885
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x30
jl 0x418896
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x39
jg 0x418896
mov eax, dword [ebp - 0xa60]
add eax, 2
mov dword [ebp - 0xa60], eax
jmp 0x4188a3
xor eax, eax
mov ecx, dword [ebp - 0xa60]
mov word [ecx], ax
jmp 0x4188a8
jmp 0x418824
lea eax, [ebp - 0x84c]
push eax
call fcn.004265aa
add esp, 4
mov dword [ebp - 0xa64], eax
mov eax, dword [ebp - 0xa64]
cdq
sub eax, edx
sar eax, 1
shl eax, 1
cmp dword [ebp - 0xa64], eax
je 0x4188e2
xor eax, eax
mov ecx, dword [ebp - 0xa64]
mov word [ebp + ecx*2 - 0x84e], ax
push 0x208
push 0
lea eax, [ebp - 0xc6c]
push eax
call fcn.004266d0
add esp, 0xc
push 0x104
lea eax, [ebp - 0xc6c]
push eax
lea ecx, [ebp - 0x84c]
push ecx
call fcn.004265aa
add esp, 4
push eax
lea edx, [ebp - 0x84c]
push edx
mov ecx, dword [ebp - 8]
call fcn.00418ae0
test eax, eax
jne 0x418930
xor eax, eax
mov word [ebp - 0xc6c], ax
movzx eax, word [ebp - 0x644]
test eax, eax
jne 0x41897f
movzx eax, word [ebp - 0xc6c]
test eax, eax
je 0x41896a
push str.https:__hao.360.cn_
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.004019a0
lea eax, [ebp - 0xc6c]
push eax
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.00419260
jmp 0x41897a
push str.https:__hao.360.cn__installer
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.004019a0
jmp 0x418aae
lea eax, [ebp - 0x644]
mov dword [ebp - 0xc70], eax
mov eax, dword [ebp - 0xc70]
movzx ecx, word [eax]
cmp ecx, 0x68
je 0x4189a7
mov eax, dword [ebp - 0xc70]
movzx ecx, word [eax]
cmp ecx, 0x48
jne 0x4189b6
mov eax, dword [ebp - 0xc70]
add eax, 2
mov dword [ebp - 0xc70], eax
push 0x208
push 0
lea eax, [ebp - 0xe78]
push eax
call fcn.004266d0
add esp, 0xc
push 0x104
lea eax, [ebp - 0xe78]
push eax
mov ecx, dword [ebp - 0xc70]
push ecx
call fcn.004265aa
add esp, 4
push eax
mov edx, dword [ebp - 0xc70]
push edx
mov ecx, dword [ebp - 8]
call fcn.00418ae0
test eax, eax
je 0x418a41
mov eax, dword [ebp - 0xc70]
lea ecx, [ebp - 0x644]
cmp eax, ecx
jne 0x418a1d
push str.http:__
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.004019a0
jmp 0x418a2d
push str.https:__
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.004019a0
lea eax, [ebp - 0xe78]
push eax
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.00419260
jmp 0x418a51
push str.https:__hao.360.cn
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.004019a0
push 0x4531e4
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.00419260
movzx eax, word [ebp - 0xc6c]
test eax, eax
je 0x418a7e
lea eax, [ebp - 0xc6c]
push eax
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.00419260
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.00419050
lea eax, [ebp - 0xa54]
push eax
mov ecx, dword [ebp - 8]
call fcn.00418c80
test eax, eax
je 0x418a9e
jmp 0x418aae
push str.https:__hao.360.cn__installer
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.004019a0
lea ecx, [ebp - 0x21c]
call fcn.00401910
lea ecx, [ebp - 0x218]
call fcn.00401910
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004266be
mov esp, ebp
pop ebp
ret