Function at 0x4115be
Capabilities:
Accept command line arguments

Disassembly:
push 0x94
mov eax, 0x60b56e
call fcn.0042d958
mov dword [ebp - 0x38], ecx
xor ebx, ebx
and dword [ebp - 0x30], ebx
mov dword [ebp - 0x14], ebx
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
and dword [ebp - 0x20], ebx
lea ecx, [ebp - 0x20]
push ecx
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0x34], eax
test eax, eax
je 0x411647
call fcn.004c12ba
mov edi, eax
lea ecx, [ebp - 0x70]
push str._firstsetup
mov eax, dword [edi]
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], 7
mov esi, dword [eax + 0x98]
xor eax, eax
mov word [ebp - 0x70], ax
call fcn.00414483
lea eax, [ebp - 0x70]
mov dword [ebp - 4], ebx
push eax
push dword [ebp - 0x20]
inc ebx
mov ecx, esi
push dword [ebp - 0x34]
mov dword [ebp - 0x14], ebx
call dword [0x62c6dc]
mov ecx, edi
call esi
mov byte [ebp - 0x2a], 1
test al, al
jne 0x41164b
mov byte [ebp - 0x2a], 0
or dword [ebp - 4], 0xffffffff
test bl, 1
je 0x4116a3
mov eax, dword [ebp - 0x5c]
and ebx, 0xfffffffe
cmp eax, 8
jb 0x411692
mov ecx, dword [ebp - 0x70]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x14], ecx
cmp eax, 0x1000
jb 0x411689
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00415d5a
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
push eax
push ecx
call fcn.0042d678
pop ecx
pop ecx
and dword [ebp - 0x60], 0
xor eax, eax
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
cmp dword [ebp - 0x34], 0
je 0x411711
call fcn.004c12ba
mov edi, eax
lea ecx, [ebp - 0x88]
push str._allusers
mov eax, dword [edi]
and dword [ebp - 0x88], 0
and dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov esi, dword [eax + 0x98]
xor eax, eax
mov word [ebp - 0x88], ax
call fcn.00414483
lea eax, [ebp - 0x88]
mov dword [ebp - 4], 1
push eax
push dword [ebp - 0x20]
or ebx, 2
mov ecx, esi
push dword [ebp - 0x34]
mov dword [ebp - 0x14], ebx
call dword [0x62c6dc]
mov ecx, edi
call esi
mov byte [ebp - 0x29], 1
test al, al
jne 0x411715
mov byte [ebp - 0x29], 0
or dword [ebp - 4], 0xffffffff
test bl, 2
je 0x411773
mov eax, dword [ebp - 0x74]
cmp eax, 8
jb 0x41175c
mov ecx, dword [ebp - 0x88]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], ecx
cmp eax, 0x1000
jb 0x411753
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.00415d5a
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x24]
push eax
push ecx
call fcn.0042d678
pop ecx
pop ecx
xor ebx, ebx
mov dword [ebp - 0x74], 7
xor eax, eax
mov dword [ebp - 0x78], ebx
mov word [ebp - 0x88], ax
jmp 0x411775
xor ebx, ebx
cmp byte [ebp - 0x2a], 0
mov byte [ebp - 0x58], bl
mov byte [ebp - 0x54], bl
mov byte [ebp - 0x34], bl
je 0x411bcb
mov dword [ebp - 0x28], ebx
call fcn.004c12ba
mov edi, eax
lea ecx, [ebp - 0xa0]
push str.SoftwareMicrosoftOneDrive
mov eax, dword [edi]
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x8c], 7
mov esi, dword [eax + 0x38]
xor eax, eax
mov word [ebp - 0xa0], ax
call fcn.00414483
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 2
push eax
push ebx
push 0x6b6750
lea eax, [ebp - 0xa0]
mov ecx, esi
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [0x62c6dc]
mov ecx, edi
call esi
or dword [ebp - 4], 0xffffffff
mov esi, eax
mov ecx, dword [ebp - 0x8c]
cmp ecx, 8
jb 0x411837
mov eax, dword [ebp - 0xa0]
lea ecx, [ecx*2 + 2]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x24], eax
cmp ecx, 0x1000
jb 0x41182e
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.00415d5a
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
push ecx
push eax
call fcn.0042d678
pop ecx
pop ecx
push 7
xor eax, eax
mov dword [ebp - 0x90], ebx
mov word [ebp - 0xa0], ax
pop edx
mov dword [ebp - 0x8c], edx
test esi, esi
js 0x411869
cmp dword [ebp - 0x28], eax
jbe 0x411869
mov eax, 0x8004ee45
mov byte [ebp - 0x58], 1
mov dword [ebp - 0x30], eax
jmp 0x411929
mov dword [ebp - 0x1c], ebx
call fcn.004c12ba
mov edi, eax
lea ecx, [ebp - 0x50]
push str.SoftwareMicrosoftOneDrive
mov eax, dword [edi]
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], 7
mov esi, dword [eax + 0x38]
xor eax, eax
mov word [ebp - 0x50], ax
call fcn.00414483
lea eax, [ebp - 0x1c]
mov dword [ebp - 4], 3
push eax
push ebx
push 0x6b6750
lea eax, [ebp - 0x50]
mov ecx, esi
push eax
push reloc.WS2_32.dll_accept
call dword [0x62c6dc]
mov ecx, edi
call esi
or dword [ebp - 4], 0xffffffff
mov esi, eax
mov ecx, dword [ebp - 0x3c]
cmp ecx, 8
jb 0x411900
mov eax, dword [ebp - 0x50]
lea ecx, [ecx*2 + 2]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x24], eax
cmp ecx, 0x1000
jb 0x4118f7
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.00415d5a
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
push ecx
push eax
call fcn.0042d678
pop ecx
pop ecx
push 7
xor eax, eax
mov dword [ebp - 0x40], ebx
mov word [ebp - 0x50], ax
pop edx
mov dword [ebp - 0x3c], edx
test esi, esi
js 0x411926
cmp dword [ebp - 0x1c], eax
jbe 0x411926
mov eax, 0x8004ee45
mov byte [ebp - 0x54], 1
mov dword [ebp - 0x30], eax
jmp 0x411929
mov eax, dword [ebp - 0x30]
cmp byte [ebp - 0x29], 0
mov ecx, eax
je 0x4119dc
test eax, eax
js 0x4119ec
mov eax, dword [0x6b5c44]
lea ecx, [ebp - 0x50]
push str.SoftwareMicrosoftOneDrive
mov eax, dword [eax]
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], edx
mov esi, dword [eax + 0x40]
xor eax, eax
mov word [ebp - 0x50], ax
call fcn.00414483
push 0x6b6750
lea eax, [ebp - 0x50]
mov dword [ebp - 4], 4
push eax
mov ecx, esi
call dword [0x62c6dc]
mov ecx, dword [0x6b5c44]
call esi
or dword [ebp - 4], 0xffffffff
mov bl, al
mov ecx, dword [ebp - 0x3c]
cmp ecx, 8
jb 0x4119c5
mov eax, dword [ebp - 0x50]
lea ecx, [ecx*2 + 2]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x28], eax
cmp ecx, 0x1000
jb 0x4119bc
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00415d5a
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
push ecx
push eax
call fcn.0042d678
pop ecx
pop ecx
test bl, bl
je 0x411bcb
mov dword [ebp - 0x30], 0x8004ee45
xor ebx, ebx
mov byte [ebp - 0x34], 1
jmp 0x4119ec
mov byte [ebp - 0x34], bl
mov eax, ecx
mov dword [ebp - 0x30], eax
test ecx, ecx
jns 0x411bce
call fcn.004c12ba
mov edi, eax
mov eax, dword [edi]
mov esi, dword [eax + 0x11c]
mov ecx, esi
call dword [0x62c6dc]
mov ecx, edi
call esi
test al, al
je 0x411a18
mov edi, dword [0x6b5c44]
mov eax, dword [edi]
mov esi, dword [eax + 0x3c]
jmp 0x411a24
call fcn.004c12ba
mov edi, eax
mov eax, dword [edi]
mov esi, dword [eax + 0x2c]
mov ecx, esi
call dword [0x62c6dc]
mov ecx, edi
call esi
mov byte [ebp - 0x29], al
call fcn.004c12ba
mov edi, eax
mov eax, dword [edi]
mov esi, dword [eax + 0x120]
mov ecx, esi
call dword [0x62c6dc]
mov ecx, edi
call esi
test al, al
je 0x411a58
cmp byte [ebp - 0x29], 0
je 0x411ab0
call fcn.0040d123
test al, al
je 0x411ab0
call fcn.004c12ba
mov edi, eax
push 0
mov eax, dword [edi]
mov esi, dword [eax + 0xcc]
mov ecx, esi
call dword [0x62c6dc]
mov ecx, edi
call esi
test al, al
jne 0x411aa3
call fcn.004c12ba
mov edi, eax
push 1
mov eax, dword [edi]
mov esi, dword [eax + 0xcc]
mov ecx, esi
call dword [0x62c6dc]
mov ecx, edi
call esi
test al, al
je 0x411ab0
call fcn.004c937e
xor ebx, ebx
test al, al
setne bl
inc ebx
xor eax, eax
push eax
push 3
push eax
push ebx
push eax
push eax
push eax
push eax
mov eax, 0x6755b0
push eax
push eax
call fcn.0045e77f
mov esi, eax
mov eax, dword [ebp - 0x38]
cmp byte [eax + 0x79], 0
jne 0x411ad9
mov ecx, eax
call fcn.0040ed95
test esi, esi
js 0x411bcb
cmp ebx, 2
jne 0x411b27
call fcn.004197ff
mov byte [ebp - 0x38], al
lea eax, [ebp - 0x18]
push eax
call fcn.0045e3dd
push dword [ebp - 0x38]
mov dword [ebp - 4], 5
mov edi, dword [eax]
mov eax, dword [edi]
mov esi, dword [eax + 0xb8]
mov ecx, esi
call dword [0x62c6dc]
mov ecx, edi
call esi
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x411b27
call fcn.00415a55
xor ecx, ecx
mov eax, 0x676a10
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push eax
push eax
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push eax
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push eax
push 0x676a14
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push eax
push eax
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push eax
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push eax
push ecx
push ecx
push ecx
push eax
push ecx
push eax
push ecx
push ecx
push eax
push ecx
push eax
push dword [ebp - 0x34]
mov eax, 0x677a8c
mov edx, 0x65c
push dword [ebp - 0x54]
push dword [ebp - 0x58]
push eax
push eax
push eax
push ecx
push ecx
push str.Failure
push dword [ebp - 0x30]
mov ecx, str.d:dbs_shodct1105_210049_0cmd7clientonedriveProductStandaloneUpdater_standaloneupdaterlibStandaloneUpdater.cpp
push str.UserInitiatedUninstallIsSetBailoutFirstSetup
push 0x6755b0
push str.StandaloneUpdater::HandleUserInitiatedUninstall
call fcn.004074a8
mov eax, dword [ebp - 0x30]
call fcn.0042d907
ret