Function at 0x41b0c0
Capabilities:
Accept command line arguments
Create process on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x70
push ebx
push esi
push edi
push 0x41e1c0
lea ecx, [ebp - 8]
lea eax, [ebp + 4]
add eax, 0xfffffffc
push ecx
push eax
mov dword [ebp - 4], eax
call fcn.004207e0
mov dword [ebp - 8], eax
call fcn.00426210
push 0
call fcn.00427360
push 0
push 0
push 0x41d8a0
call fcn.00425880
call fcn.00562ec0
push str.main_init
push 5
call fcn.00424200
add esp, 0x24
mov dword [ebp - 0x1c], 1
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov edi, eax
lea eax, [ebp - 0x18]
push eax
push edi
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0x10], eax
test eax, eax
je 0x41b138
mov esi, dword [ebp - 0x18]
jmp 0x41b192
lea eax, [ebp - 0x14]
mov dword [ebp - 0xc], 0
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x14], 0
push eax
push 0
push 0
push edi
call fcn.00418d50
mov esi, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14]
lea eax, [eax + esi*2]
add eax, eax
push eax
call fcn.005414d5
mov ecx, eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x10], ecx
push eax
lea eax, [ecx + esi*4]
push eax
push ecx
push edi
call fcn.00418d50
mov esi, dword [ebp - 0xc]
add esp, 0x2c
dec esi
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], esi
push esi
push str.main_argc__d
push 5
call fcn.00424200
lea ebx, [esi*4 + 4]
add esp, 0xc
xor edi, edi
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x14], ebx
test esi, esi
jle 0x41b1df
mov eax, dword [ebp - 0x10]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push dword [eax + edi*4]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
inc edi
add ebx, eax
cmp edi, esi
jl 0x41b1b5
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0xc]
mov edi, dword [ebp - 0x14]
push edi
call fcn.005414d5
add esp, 4
mov dword [ebp - 0xc], eax
xor ecx, ecx
test esi, esi
jle 0x41b240
mov edx, dword [ebp - 0x10]
mov ecx, eax
sub ecx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x24], esi
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xc]
push 0
add ecx, ebx
mov dword [eax + edx], ecx
mov eax, edi
push 0
sub eax, ebx
push eax
push ecx
push 0xffffffffffffffff
push dword [edx]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, dword [ebp - 0x14]
add ebx, eax
add edx, 4
mov dword [ebp - 0x14], edx
sub esi, 1
jne 0x41b204
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x1c], 0
push dword [ebp - 0x10]
mov dword [eax + ecx*4], 0
je 0x41b258
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x41b260
call fcn.005414d0
add esp, 4
mov ebx, dword [ebp - 4]
lea eax, [ebp - 0x10]
push 0x41e1c0
push eax
push ebx
call fcn.004207e0
push eax
mov dword [ebp - 0x10], eax
call fcn.004319e0
push dword [ebp - 0x10]
call fcn.00423c70
mov eax, dword [ebp - 0x10]
push dword [eax]
push 0x5fd850
call fcn.004218a0
push 0x5fd850
call fcn.00423370
mov eax, dword [ebp - 0x10]
push dword [eax]
push 0x5fd84c
call fcn.004218a0
push dword [0x5fd850]
push str.main_app_name__s
push 5
call fcn.00424200
add esp, 0x34
push 0x56be20
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
push 0x8001
call dword [sym.imp.KERNEL32.dll_SetSearchPathMode]
call fcn.0041efe0
push str.main_local_conf
push 5
call fcn.00424200
mov eax, dword [0x60175c]
mov dword [0x6017a4], eax
mov eax, dword [0x601740]
mov dword [0x6017a0], eax
mov eax, dword [0x601768]
mov dword [0x60179c], eax
mov eax, dword [0x60174c]
mov dword [0x601798], eax
mov eax, dword [0x601760]
mov dword [0x601794], eax
mov eax, dword [0x601744]
mov dword [0x601790], eax
mov eax, dword [0x601764]
mov dword [0x60178c], eax
mov eax, dword [0x601748]
push str.main_log_preinit
push 5
mov dword [0x601788], eax
call fcn.00424200
call fcn.0041a800
push eax
push dword [ebp - 8]
call fcn.004218a0
push dword [ebp - 8]
call fcn.00421f20
mov eax, dword [ebp - 0xc]
add esp, 0x1c
add eax, 4
mov esi, eax
mov dword [ebp - 0x20], eax
mov eax, dword [esi]
test eax, eax
je 0x41beea
cmp byte [eax], 0x2d
jne 0x41bf2f
mov ecx, 0x56be48
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x41b3a0
test dl, dl
je 0x41b39c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x41b3a0
add eax, 2
add ecx, 2
test dl, dl
jne 0x41b380
xor ecx, ecx
jmp 0x41b3a5
sbb ecx, ecx
or ecx, 1
lea eax, [esi + 4]
test ecx, ecx
cmovne eax, esi
mov esi, eax
mov edi, esi
je 0x41bf2f
mov edx, dword [edi]
test edx, edx
je 0x41c32f
mov ecx, 0x56be4c
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41b3e8
test bl, bl
je 0x41b3e4
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41b3e8
add eax, 2
add ecx, 2
test bl, bl
jne 0x41b3c8
xor eax, eax
jmp 0x41b3ed
sbb eax, eax
or eax, 1
test eax, eax
je 0x41c32f
mov ecx, 0x56be50
mov eax, edx
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41b420
test bl, bl
je 0x41b41c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41b420
add eax, 2
add ecx, 2
test bl, bl
jne 0x41b400
xor eax, eax
jmp 0x41b425
sbb eax, eax
or eax, 1
test eax, eax
je 0x41c339
mov ecx, str.__uuid
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41b454
test bl, bl
je 0x41b450
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41b454
add eax, 2
add ecx, 2
test bl, bl
jne 0x41b434
xor eax, eax
jmp 0x41b459
sbb eax, eax
or eax, 1
test eax, eax
je 0x41c334
mov ecx, str.__beta
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41b488
test bl, bl
je 0x41b484
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41b488
add eax, 2
add ecx, 2
test bl, bl
jne 0x41b468
xor eax, eax
jmp 0x41b48d
sbb eax, eax
or eax, 1
mov esi, edi
test eax, eax
je 0x41bed9
mov ecx, str.__opt_in
mov eax, edx
nop
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41b4c0
test bl, bl
je 0x41b4bc
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41b4c0
add eax, 2
add ecx, 2
test bl, bl
jne 0x41b4a0
xor eax, eax
jmp 0x41b4c5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41b4eb
mov eax, dword [edi + 4]
lea esi, [edi + 4]
test eax, eax
je 0x41c32f
mov dword [0x6017ac], eax
mov dword [0x5fd7cc], 1
jmp 0x41bed9
mov ecx, 0x56be70
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41b512
test bl, bl
je 0x41b50e
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41b512
add eax, 2
add ecx, 2
test bl, bl
jne 0x41b4f2
xor eax, eax
jmp 0x41b517
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41b53d
mov eax, dword [edi + 4]
lea esi, [edi + 4]
test eax, eax
je 0x41c32f
mov dword [0x6017ac], eax
mov dword [0x5fd7d8], 1
jmp 0x41bed9
mov ecx, 0x56be7c
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41b564
test bl, bl
je 0x41b560
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41b564
add eax, 2
add ecx, 2
test bl, bl
jne 0x41b544
xor eax, eax
jmp 0x41b569
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41b58f
mov eax, dword [edi + 4]
lea esi, [edi + 4]
test eax, eax
je 0x41c32f
mov dword [0x6017ac], eax
mov dword [0x5fd7d0], 1
jmp 0x41bed9
mov ecx, str.__install_ui
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41b5b6
test bl, bl
je 0x41b5b2
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41b5b6
add eax, 2
add ecx, 2
test bl, bl
jne 0x41b596
xor eax, eax
jmp 0x41b5bb
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41b5eb
mov eax, dword [edi + 4]
lea esi, [edi + 4]
test eax, eax
je 0x41c32f
mov dword [0x6017ac], eax
mov dword [0x5fd7d0], 1
mov dword [0x5fd7e4], 1
jmp 0x41bed9
mov ecx, str.__check_peer
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41b612
test bl, bl
je 0x41b60e
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41b612
add eax, 2
add ecx, 2
test bl, bl
jne 0x41b5f2
xor eax, eax
jmp 0x41b617
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41b63d
mov eax, dword [edi + 4]
lea esi, [edi + 4]
test eax, eax
je 0x41c32f
mov dword [0x6017ac], eax
mov dword [0x5fd7ec], 1
jmp 0x41bed9
mov ecx, str.__start_service
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41b664
test bl, bl
je 0x41b660
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41b664
add eax, 2
add ecx, 2
test bl, bl
jne 0x41b644
xor eax, eax
jmp 0x41b669
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41b68f
mov eax, dword [edi + 4]
lea esi, [edi + 4]
test eax, eax
je 0x41c32f
mov dword [0x6017ac], eax
mov dword [0x5fd7f0], 1
jmp 0x41bed9
mov ecx, str.__stop_service
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41b6b6
test bl, bl
je 0x41b6b2
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41b6b6
add eax, 2
add ecx, 2
test bl, bl
jne 0x41b696
xor eax, eax
jmp 0x41b6bb
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41b6e1
mov eax, dword [edi + 4]
lea esi, [edi + 4]
test eax, eax
je 0x41c32f
mov dword [0x6017ac], eax
mov dword [0x5fd7f4], 1
jmp 0x41bed9
mov ecx, 0x56bec8
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41b708
test bl, bl
je 0x41b704
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41b708
add eax, 2
add ecx, 2
test bl, bl
jne 0x41b6e8
xor eax, eax
jmp 0x41b70d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41b722
mov dword [0x5fd7e8], 1
mov esi, edi
jmp 0x41bed9
mov ecx, 0x56bed8
mov eax, edx
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41b750
test bl, bl
je 0x41b74c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41b750
add eax, 2
add ecx, 2
test bl, bl
jne 0x41b730
xor eax, eax
jmp 0x41b755
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41b76a
mov dword [0x5fd7dc], 1
mov esi, edi
jmp 0x41bed9
mov ecx, str.__uninstall
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41b791
test bl, bl
je 0x41b78d
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41b791
add eax, 2
add ecx, 2
test bl, bl
jne 0x41b771
xor eax, eax
jmp 0x41b796
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41b7bc
mov eax, dword [edi + 4]
lea esi, [edi + 4]
test eax, eax
je 0x41c32f
mov dword [0x6017ac], eax
mov dword [0x5fd7d4], 1
jmp 0x41bed9
mov ecx, str.__debug
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41b7e3
test bl, bl
je 0x41b7df
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41b7e3
add eax, 2
add ecx, 2
test bl, bl
jne 0x41b7c3
xor eax, eax
jmp 0x41b7e8
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41b7fd
mov dword [0x5fd7e0], 1
mov esi, edi
jmp 0x41bed9
mov ecx, str.__dlg_pos
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41b824
test bl, bl
je 0x41b820
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41b824
add eax, 2
add ecx, 2
test bl, bl
jne 0x41b804
xor eax, eax
jmp 0x41b829
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41b915
lea esi, [edi + 4]
mov edi, dword [esi]
test edi, edi
je 0x41c32f
mov ecx, str.owner
mov eax, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x41b865
test dl, dl
je 0x41b861
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x41b865
add eax, 2
add ecx, 2
test dl, dl
jne 0x41b845
xor eax, eax
jmp 0x41b86a
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41b878
mov dword [0x5ed00c], eax
jmp 0x41bed9
mov ecx, 0x56bf0c
mov eax, edi
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x41b8a0
test dl, dl
je 0x41b89c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x41b8a0
add eax, 2
add ecx, 2
test dl, dl
jne 0x41b880
xor eax, eax
jmp 0x41b8a5
sbb eax, eax
or eax, 1
mov ebx, dword [ebp - 4]
test eax, eax
jne 0x41b8bb
mov dword [0x5ed00c], 1
jmp 0x41bedc
push fcn.0043cfb0
lea eax, [ebp - 0x24]
push eax
push ebx
call fcn.004207e0
push 1
push 0x56bf14
push edi
push eax
mov dword [ebp - 0x24], eax
call fcn.0043d0f0
mov edi, dword [eax]
push edi
call fcn.0043ce00
add esp, 0x20
cmp eax, 2
jne 0x41c32f
push dword [edi]
mov dword [0x5ed00c], eax
call fcn.00536e20
push dword [edi + 4]
mov dword [0x5fd800], eax
call fcn.00536e20
add esp, 8
mov dword [0x5fd804], eax
jmp 0x41bedc
mov ecx, str.__dlg_flavour
mov eax, edx
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41b940
test bl, bl
je 0x41b93c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41b940
add eax, 2
add ecx, 2
test bl, bl
jne 0x41b920
xor eax, eax
jmp 0x41b945
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41b9dc
mov eax, dword [edi + 4]
lea esi, [edi + 4]
test eax, eax
je 0x41c32f
mov edx, 0x56bf28
mov ecx, eax
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x41b982
test bl, bl
je 0x41b97e
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x41b982
add ecx, 2
add edx, 2
test bl, bl
jne 0x41b962
xor ecx, ecx
jmp 0x41b987
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x41b997
xor eax, eax
mov dword [0x5fd7c0], eax
jmp 0x41bed9
mov ecx, 0x56bf30
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x41b9c0
test dl, dl
je 0x41b9bc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x41b9c0
add eax, 2
add ecx, 2
test dl, dl
jne 0x41b9a0
xor eax, eax
jmp 0x41b9c5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41c32f
mov eax, 1
mov dword [0x5fd7c0], eax
jmp 0x41bed9
mov ecx, str.__dlg_txt_cult
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41ba03
test bl, bl
je 0x41b9ff
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41ba03
add eax, 2
add ecx, 2
test bl, bl
jne 0x41b9e3
xor eax, eax
jmp 0x41ba08
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41ba24
mov eax, dword [edi + 4]
lea esi, [edi + 4]
test eax, eax
je 0x41c32f
mov dword [0x5fd808], eax
jmp 0x41bed9
mov ecx, str.__dlg_language
mov eax, edx
nop dword [eax + eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41ba50
test bl, bl
je 0x41ba4c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41ba50
add eax, 2
add ecx, 2
test bl, bl
jne 0x41ba30
xor eax, eax
jmp 0x41ba55
sbb eax, eax
or eax, 1
test eax, eax
je 0x41ba0c
mov ecx, str.__dlg_bg_color
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41ba80
test bl, bl
je 0x41ba7c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41ba80
add eax, 2
add ecx, 2
test bl, bl
jne 0x41ba60
xor eax, eax
jmp 0x41ba85
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41baa1
mov eax, dword [edi + 4]
lea esi, [edi + 4]
test eax, eax
je 0x41c32f
mov dword [0x5fd80c], eax
jmp 0x41bed9
mov ecx, str.__dlg_btn_color
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41bac8
test bl, bl
je 0x41bac4
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41bac8
add eax, 2
add ecx, 2
test bl, bl
jne 0x41baa8
xor eax, eax
jmp 0x41bacd
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41bae9
mov eax, dword [edi + 4]
lea esi, [edi + 4]
test eax, eax
je 0x41c32f
mov dword [0x5fd810], eax
jmp 0x41bed9
mov ecx, str.__dlg_txt_color
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41bb10
test bl, bl
je 0x41bb0c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41bb10
add eax, 2
add ecx, 2
test bl, bl
jne 0x41baf0
xor eax, eax
jmp 0x41bb15
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41bb31
mov eax, dword [edi + 4]
lea esi, [edi + 4]
test eax, eax
je 0x41c32f
mov dword [0x5fd814], eax
jmp 0x41bed9
mov ecx, str.__dlg_app_name_color
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41bb58
test bl, bl
je 0x41bb54
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41bb58
add eax, 2
add ecx, 2
test bl, bl
jne 0x41bb38
xor eax, eax
jmp 0x41bb5d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41bb79
mov eax, dword [edi + 4]
lea esi, [edi + 4]
test eax, eax
je 0x41c32f
mov dword [0x5fd818], eax
jmp 0x41bed9
mov ecx, str.__dlg_app_name
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41bba0
test bl, bl
je 0x41bb9c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41bba0
add eax, 2
add ecx, 2
test bl, bl
jne 0x41bb80
xor eax, eax
jmp 0x41bba5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41bbc1
mov eax, dword [edi + 4]
lea esi, [edi + 4]
test eax, eax
je 0x41c32f
mov dword [0x5fd81c], eax
jmp 0x41bed9
mov ecx, str.__dlg_tos_link
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41bbe8
test bl, bl
je 0x41bbe4
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41bbe8
add eax, 2
add ecx, 2
test bl, bl
jne 0x41bbc8
xor eax, eax
jmp 0x41bbed
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41bc02
cmp dword [edi + 4], eax
lea esi, [edi + 4]
je 0x41c32f
jmp 0x41bed9
mov ecx, str.__dlg_logo_link
mov eax, edx
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41bc30
test bl, bl
je 0x41bc2c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41bc30
add eax, 2
add ecx, 2
test bl, bl
jne 0x41bc10
xor eax, eax
jmp 0x41bc35
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41bc51
mov eax, dword [edi + 4]
lea esi, [edi + 4]
test eax, eax
je 0x41c32f
mov dword [0x5fd820], eax
jmp 0x41bed9
mov ecx, str.__dlg_benefit_txt
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41bc78
test bl, bl
je 0x41bc74
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41bc78
add eax, 2
add ecx, 2
test bl, bl
jne 0x41bc58
xor eax, eax
jmp 0x41bc7d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41bc99
mov eax, dword [edi + 4]
lea esi, [edi + 4]
test eax, eax
je 0x41c32f
mov dword [0x5fd824], eax
jmp 0x41bed9
mov ecx, str.__dlg_benefit
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41bcc0
test bl, bl
je 0x41bcbc
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41bcc0
add eax, 2
add ecx, 2
test bl, bl
jne 0x41bca0
xor eax, eax
jmp 0x41bcc5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41bce1
mov eax, dword [edi + 4]
lea esi, [edi + 4]
test eax, eax
je 0x41c32f
mov dword [0x5fd828], eax
jmp 0x41bed9
mov ecx, str.__dlg_agree_btn
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41bd08
test bl, bl
je 0x41bd04
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41bd08
add eax, 2
add ecx, 2
test bl, bl
jne 0x41bce8
xor eax, eax
jmp 0x41bd0d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41bd29
mov eax, dword [edi + 4]
lea esi, [edi + 4]
test eax, eax
je 0x41c32f
mov dword [0x5fd838], eax
jmp 0x41bed9
mov ecx, str.__dlg_disagree_btn
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41bd50
test bl, bl
je 0x41bd4c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41bd50
add eax, 2
add ecx, 2
test bl, bl
jne 0x41bd30
xor eax, eax
jmp 0x41bd55
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41bd71
mov eax, dword [edi + 4]
lea esi, [edi + 4]
test eax, eax
je 0x41c32f
mov dword [0x5fd83c], eax
jmp 0x41bed9
mov ecx, str.__dlg_peer_txt
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41bd98
test bl, bl
je 0x41bd94
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41bd98
add eax, 2
add ecx, 2
test bl, bl
jne 0x41bd78
xor eax, eax
jmp 0x41bd9d
sbb eax, eax
or eax, 1
test eax, eax
je 0x41bd11
mov ecx, str.__dlg_not_peer_txt
mov eax, edx
nop dword [eax]
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41bdd0
test bl, bl
je 0x41bdcc
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41bdd0
add eax, 2
add ecx, 2
test bl, bl
jne 0x41bdb0
xor eax, eax
jmp 0x41bdd5
sbb eax, eax
or eax, 1
test eax, eax
je 0x41bd59
mov ecx, 0x56bda4
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41be00
test bl, bl
je 0x41bdfc
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41be00
add eax, 2
add ecx, 2
test bl, bl
jne 0x41bde0
xor eax, eax
jmp 0x41be05
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41be1a
mov dword [0x5fd830], 1
mov esi, edi
jmp 0x41bed9
mov ecx, str.__elevate
mov eax, edx
mov bl, byte [eax]
cmp bl, byte [ecx]
jne 0x41be41
test bl, bl
je 0x41be3d
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
jne 0x41be41
add eax, 2
add ecx, 2
test bl, bl
jne 0x41be21
xor eax, eax
jmp 0x41be46
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41be5b
mov dword [0x5fd834], 1
mov esi, edi
jmp 0x41bed9
mov eax, str.__campaign
mov cl, byte [edx]
cmp cl, byte [eax]
jne 0x41be80
test cl, cl
je 0x41be7c
mov cl, byte [edx + 1]
cmp cl, byte [eax + 1]
jne 0x41be80
add edx, 2
add eax, 2
test cl, cl
jne 0x41be60
xor eax, eax
jmp 0x41be85
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41c32f
mov edx, dword [edi + 4]
lea esi, [edi + 4]
test edx, edx
je 0x41c32f
mov ecx, edx
mov dword [0x5fd82c], edx
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41bea6
sub ecx, edi
cmp ecx, 0x32
ja 0x41c316
push str._a_z0_9___
call fcn.00422e40
push eax
push dword [0x5fd82c]
call fcn.004226b0
add esp, 0xc
test eax, eax
jne 0x41c310
mov ebx, dword [ebp - 4]
mov eax, dword [esi + 4]
add esi, 4
test eax, eax
jne 0x41b371
cmp dword [0x5fd7d8], 0
jne 0x41bf3a
cmp dword [0x5fd7d0], 0
jne 0x41bf3a
cmp dword [0x5fd7d4], 0
jne 0x41bf3a
cmp dword [0x5fd7ec], 0
jne 0x41bf3a
cmp dword [0x5fd7cc], 0
jne 0x41bf3a
cmp dword [0x5fd7f0], 0
jne 0x41bf3a
cmp dword [0x5fd7f4], 0
je 0x41c30b
jmp 0x41bf3a
cmp dword [esi], 0
jne 0x41c33e
jmp 0x41beea
push str.main_check_args
push 5
call fcn.00424200
mov eax, dword [0x6017ac]
add esp, 8
test eax, eax
je 0x41c384
cmp byte [eax], 0
je 0x41c384
push str.win___a_z0_9_.__
call fcn.00422e40
push eax
push dword [0x6017ac]
call fcn.004226b0
add esp, 0xc
test eax, eax
jne 0x41c37f
cmp dword [0x5fd834], eax
je 0x41c05b
call fcn.00431ac0
test eax, eax
jne 0x41c05b
push str.spawing_net_updater_in_elevated_mode
push 5
call fcn.00424200
push 0x3c
lea eax, [ebp - 0x70]
push 0
push eax
call fcn.0053f280
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x70], 0x3c
mov dword [ebp - 0x6c], 0x40
mov dword [ebp - 0x68], 0
push dword [eax]
mov dword [ebp - 0x64], 0x56bdd4
push ebx
call fcn.00420ea0
push dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x60], eax
call fcn.0043bb70
push eax
push ebx
call fcn.00420ea0
add esp, 0x28
mov eax, dword [eax]
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 5
mov dword [ebp - 0x50], 0
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
push eax
call fcn.0053b370
add esp, 4
test eax, eax
jne 0x41c03c
push str.failed_running_elevated_mode__m
push 3
call fcn.00424200
add esp, 8
or esi, 0xffffffff
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push dword [ebp - 0x38]
call fcn.00428d30
add esp, 4
mov esi, eax
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x5fd830], 0
je 0x41c0b8
push str.running_in_fast_mode
push 5
call fcn.00424200
add esp, 8
cmp dword [0x5fd7d0], 0
je 0x41c1d1
cmp dword [0x5fd7dc], 0
je 0x41c1d1
push str.main_install_rmt
push 5
call fcn.00424200
mov eax, dword [ebp - 8]
push str._temp
push dword [eax]
call fcn.004217a0
add esp, 0x10
test eax, eax
jne 0x41c343
jmp 0x41c175
cmp dword [0x5fd7d0], 0
je 0x41c1d1
cmp dword [0x5fd7e4], 0
je 0x41c073
push fcn.0043cfb0
lea eax, [ebp - 0x10]
push eax
push ebx
call fcn.004207e0
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call fcn.0043ce20
push str.spawing_net_updater_in_fast_mode
push 5
mov dword [ebp - 0x10], eax
call fcn.00424200
push 0
push 0x56bda4
push dword [ebp - 0x10]
call fcn.0043c820
mov eax, dword [ebp - 0x10]
add esp, 0x28
push 0
push 0
push 0
push 0
push 0
push 0
push dword [eax]
call fcn.0043bb70
add esp, 4
push eax
call fcn.00428240
push eax
call fcn.00428d30
mov esi, eax
add esp, 0x20
test esi, esi
je 0x41c35f
cmp esi, 1
je 0x41c35f
cmp esi, 2
je 0x41c35f
push esi
push 0x56c0d0
push ebx
call fcn.00420b40
push 1
push 0
push 0
push 1
push dword [eax]
push str.install_fast_failed
call fcn.00418b20
add esp, 0x24
jmp 0x41c073
mov eax, dword [ebp - 8]
push dword [eax]
push 0x5fd848
call fcn.004218a0
mov eax, dword [ebp - 8]
push str.luminati_temp
push dword [eax]
call fcn.004217a0
add esp, 0x10
test eax, eax
jne 0x41c27b
push 0x56a6d8
push str.luminati_temp_
push 0x5fd84c
call fcn.00421cf0
add esp, 0xc
mov eax, dword [0x5fd854]
test eax, eax
je 0x41c1d1
push eax
call fcn.005414d0
add esp, 4
mov dword [0x5fd854], 0
cmp dword [0x5fd7d8], 0
je 0x41c29a
mov eax, dword [0x5fd874]
test eax, eax
jne 0x41c21e
push dword [0x6017ac]
push ebx
call fcn.00420c10
push 0x5f
push 0x2e
push dword [eax]
call fcn.00421fb0
push eax
call fcn.00422110
push eax
push str.luminati_net_updater
push 0x56aaf4
push 0x5fd874
call fcn.00421930
add esp, 0x28
mov eax, dword [eax]
push eax
push ebx
call fcn.00420ea0
add esp, 8
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x30], 0x41e280
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
call dword [sym.imp.ADVAPI32.dll_StartServiceCtrlDispatcherW]
test eax, eax
jne 0x41c263
push eax
push eax
push eax
push 1
push eax
push str.start_invalid
call fcn.00418b20
add esp, 0x18
push str.main_service
push 5
call fcn.00424200
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 8]
push dword [eax]
push 0x5fd84c
call fcn.0041aa30
add esp, 8
test eax, eax
jne 0x41c378
jmp 0x41c1b5
push 1
push 4
call fcn.005414c5
push str.main_install
push 5
mov esi, eax
call fcn.00424200
push 0x4196a0
push esi
push 0x4196d0
mov dword [0x6017a8], 0x56c15c
call fcn.0041c3a0
add esp, 0x1c
call fcn.0042b350
cmp dword [0x601b40], 6
jl 0x41c2eb
push str.main_uninit
push 6
call fcn.00424200
add esp, 8
call fcn.004300d0
call fcn.0042bac0
call fcn.00560d30
call fcn.00564370
mov eax, dword [0x5fd7f8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.0041e950
mov edx, dword [0x5fd82c]
push edx
push str.invalid_campaign__s
push 2
call fcn.00541bde
add esp, 4
push eax
call fcn.0041a7d0
add esp, 0xc
call fcn.0041e950
call fcn.0041d780
call fcn.0041eea0
call fcn.0041e950
push 0
push dword [0x5fd84c]
push str.rmt_install_wrong_path
call fcn.0041ca60
add esp, 0xc
push 2
call fcn.00541795
push 1
push 0
push 0
push str.install_fast_ok
call fcn.00418f10
add esp, 0x10
push esi
call fcn.00541795
push 2
call fcn.00541795
mov eax, dword [0x6017ac]
push 1
push eax
push str.invalid_appid
call fcn.0041ca60
add esp, 0xc
push 3
call fcn.00541795
int3