Function at 0x411720
Capabilities:
Accept command line arguments
Create process on windows
Set current directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xf8
push ebx
push esi
push edi
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
mov eax, dword [ebp + 8]
push 0xf
pop edi
xor esi, esi
push edi
lea ecx, [ebp - 0x54]
mov dword [0x418a20], eax
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x4c], esi
call fcn.004071eb
push edi
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x10], esi
call fcn.004071eb
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0x24]
call fcn.0040af01
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.0040ad77
push dword [ebp - 0x24]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
mov dword [ebp - 0x3c], esi
push edi
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], esi
call fcn.004071eb
lea eax, [ebp - 0x3c]
push eax
push dword [0x418a20]
call fcn.0040c20c
push edi
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x40], esi
call fcn.0040b6b4
lea eax, [ebp - 0x48]
push eax
push str.___InstallEnd__
push str.___Install__UTF_8_
push dword [ebp - 0x3c]
call fcn.00411d4c
test al, al
jne 0x4117ec
push str.Cant_load_config_info
push esi
call fcn.0040e95a
push 1
pop esi
jmp 0x411d04
lea ecx, [ebp - 0x18]
call fcn.0040b17e
lea ecx, [ebp - 0x18]
call fcn.0040b13f
and byte [ebp + 0xb], 0
push 0x41857c
lea ecx, [ebp - 0x24]
call fcn.0040af01
mov ebx, eax
lea eax, [ebp - 0xc]
push 2
push eax
lea ecx, [ebp - 0x18]
call fcn.0040b07e
mov ebx, dword [ebx]
mov eax, dword [eax]
push ebx
push eax
call fcn.0040b410
push dword [ebp - 0xc]
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x24]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
test bl, bl
pop ecx
je 0x41187a
lea eax, [ebp - 0xc]
push 2
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp + 0xb], 1
call fcn.0040afa0
push eax
lea ecx, [ebp - 0x18]
call fcn.0040af62
push dword [ebp - 0xc]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
lea ecx, [ebp - 0x18]
call fcn.0040b17e
lea ecx, [ebp - 0x18]
call fcn.0040b13f
push edi
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], esi
call fcn.004071eb
cmp dword [ebp - 0x44], esi
je 0x4119fe
lea ecx, [ebp - 0x68]
call fcn.004023a7
lea eax, [ebp - 0x68]
mov edi, 0x414814
push eax
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x68], edi
call fcn.0040b707
test al, al
jne 0x4118c9
push str.Config_failed
push esi
call fcn.0040e95a
push 1
pop esi
jmp 0x411955
push str.Title
lea ecx, [ebp - 0xc]
call fcn.0040af01
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.0040bb3f
push dword [ebp - 0xc]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
lea ecx, [ebp - 0xc]
mov dword [esp], str.BeginPrompt
call fcn.0040af01
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.0040bb3f
push dword [ebp - 0xc]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
cmp dword [ebp - 0x8c], esi
pop ecx
je 0x411998
cmp byte [ebp + 0xb], 0
jne 0x411998
push 0x24
push dword [ebp - 0x24]
push dword [ebp - 0x90]
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
je 0x411998
push dword [ebp - 0x90]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x24]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
pop ecx
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x68], edi
call fcn.0040bd67
lea ecx, [ebp - 0x68]
call fcn.0040bd57
push dword [ebp - 0x30]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x48]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x3c]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x18]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x54]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
add esp, 0x14
jmp 0x411d27
push str.RunProgram
lea ecx, [ebp - 0xc]
call fcn.0040af01
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.0040bb3f
push eax
lea ecx, [ebp - 0x30]
call fcn.0040af62
push dword [ebp - 0xac]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0xc]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x90]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x24]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
add esp, 0x10
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x68], edi
call fcn.0040bd67
lea ecx, [ebp - 0x68]
call fcn.0040bd57
and byte [ebp - 0x78], 0
lea ecx, [ebp - 0x74]
call fcn.0040d08e
push dword [0x418428]
lea ecx, [ebp - 0x78]
call fcn.0040d04e
test al, al
jne 0x411a2f
push str.Can_not_create_temp_folder_archive
push esi
call fcn.0040e95a
push 1
pop esi
jmp 0x411cea
lea eax, [ebp - 0x74]
mov dword [ebp - 0xb0], esi
push eax
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0xb4], 0x414808
call fcn.0040c481
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00410f42
cmp eax, esi
je 0x411a92
cmp eax, 1
jne 0x411a7c
push str.Can_not_open_archive
push esi
call fcn.0040e95a
jmp 0x411a8a
cmp eax, 0x80004004
je 0x411a8a
push eax
push esi
call fcn.0040e972
push 1
pop esi
jmp 0x411cde
lea ecx, [ebp - 0xa0]
call fcn.0040d08e
lea eax, [ebp - 0xa0]
push eax
call fcn.0040cdb4
push dword [ebp - 0x74]
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
call edi
test eax, eax
jne 0x411ac0
push 1
pop esi
jmp 0x411cc6
cmp dword [ebp - 0x2c], esi
jne 0x411b0e
push str.setup.exe
lea ecx, [ebp - 0x30]
call fcn.0040c2e4
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.00411d30
push dword [eax]
call fcn.0040d6f6
push dword [ebp - 0xac]
mov bl, al
neg bl
sbb bl, bl
inc bl
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
test bl, bl
pop ecx
je 0x411b0e
push str.Can_not_find_setup.exe
push esi
call fcn.0040e95a
jmp 0x411ab8
lea eax, [ebp - 0x84]
lea ecx, [ebp - 0x24]
push eax
call fcn.0040728e
lea eax, [ebp - 0x24]
push eax
call fcn.0040dad9
push str.__T_
lea ecx, [ebp - 0xc]
call fcn.0040af01
lea eax, [ebp - 0x24]
lea ecx, [ebp - 0x30]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.0041061a
push dword [ebp - 0xc]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x24]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
pop ecx
push 0x418458
lea ecx, [ebp - 0xc]
call fcn.0040af01
lea eax, [ebp - 0x84]
lea ecx, [ebp - 0x30]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.0041061a
push dword [ebp - 0xc]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
cmp dword [ebp - 0x14], esi
pop ecx
je 0x411b99
push 0x20
lea ecx, [ebp - 0x30]
call fcn.00406db4
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x30]
push eax
call fcn.0040c001
lea eax, [ebp - 0x30]
mov dword [ebp - 0xf8], 0x44
push eax
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0xf4], esi
mov dword [ebp - 0xf0], esi
mov dword [ebp - 0xec], esi
mov dword [ebp - 0xcc], esi
mov word [ebp - 0xc6], si
mov dword [ebp - 0xc4], esi
call fcn.00411d30
push eax
push 0x418454
lea ecx, [ebp - 0xac]
call fcn.0040d0a6
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.0040d230
push dword [ebp - 0xac]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0xc]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
lea eax, [ebp - 0x94]
pop ecx
push eax
lea eax, [ebp - 0xf8]
push eax
push esi
push esi
push esi
push esi
push esi
push esi
push dword [ebp - 0x24]
push esi
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x411c99
push esi
call fcn.0040ea02
push dword [ebp - 0x24]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
push dword [ebp - 0xa0]
call edi
push dword [ebp - 0xa0]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x84]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
pop ecx
lea ecx, [ebp - 0x78]
call fcn.0040d069
push dword [ebp - 0x74]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x30]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x48]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x3c]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x18]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x54]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
add esp, 0x18
push 1
pop eax
jmp 0x411d29
push dword [ebp - 0x90]
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
call ebx
push dword [ebp - 0x24]
mov edi, dword [ebp - 0x94]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
cmp edi, esi
pop ecx
je 0x411cc6
push 0xffffffffffffffff
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push edi
call ebx
push dword [ebp - 0xa0]
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
push dword [ebp - 0xa0]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
push dword [ebp - 0x84]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
lea ecx, [ebp - 0x78]
call fcn.0040d069
push dword [ebp - 0x74]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x30]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
pop ecx
push dword [ebp - 0x48]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x3c]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x18]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x54]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
add esp, 0x10
mov eax, esi
pop edi
pop esi
pop ebx
leave
ret 0x10