Function at 0x401014
Capabilities:
Accept command line arguments
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x124
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov dword [0x41c198], eax
call fcn.004019fd
test al, al
jne 0x401042
mov edx, str.Unsupported_Windows_version
xor ecx, ecx
call fcn.0040b3fc
jmp 0x4018aa
lea ecx, [ebp - 0xc4]
call fcn.004036e8
lea ecx, [ebp - 0x1c]
call fcn.004036e8
lea ecx, [ebp - 0x90]
call fcn.004036e8
lea ecx, [ebp - 0x68]
call fcn.004036e8
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0x44]
call fcn.0040370b
lea eax, [ebp - 0x1c]
lea edx, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0x44]
call fcn.00403078
push dword [ebp - 0x44]
call fcn.0040327c
pop ecx
lea ecx, [ebp - 0xa8]
call fcn.004036e8
lea ecx, [ebp - 0xa8]
call fcn.004042fd
lea ecx, [ebp - 0x1c]
call fcn.00403b08
lea ecx, [ebp - 0x1c]
call fcn.00403abd
xor ebx, ebx
push 0x41854c
lea ecx, [ebp - 0x1c]
mov byte [ebp + 0xb], bl
call fcn.004032e8
test al, al
je 0x4010f1
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x1c]
add eax, 4
mov byte [ebp + 0xb], 1
push eax
call fcn.0040377c
lea ecx, [ebp - 0x1c]
call fcn.00403b08
lea ecx, [ebp - 0x1c]
call fcn.00403abd
lea ecx, [ebp - 0x9c]
call fcn.00403408
mov ecx, dword [ebp - 0xa8]
lea eax, [ebp - 0x9c]
push eax
push str.___InstallEnd__
mov edx, str.___Install__UTF_8_
call fcn.00401a83
test al, al
jne 0x401135
cmp byte [ebp + 0xb], bl
jne 0x40112d
mov edx, str.Cant_load_config_info
xor ecx, ecx
call fcn.0040b3fc
push 1
pop ebx
jmp 0x40192e
push 0x418514
lea ecx, [ebp - 0xb8]
call fcn.0040370b
lea ecx, [ebp - 0x38]
call fcn.004036e8
cmp dword [ebp - 0x98], ebx
mov edi, dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 0xac], 1
je 0x4013ce
lea ecx, [ebp - 0x28]
call fcn.004103a4
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x9c]
call fcn.00403c61
test al, al
jne 0x401199
cmp byte [ebp + 0xb], bl
jne 0x401191
mov edx, str.Config_failed
xor ecx, ecx
call fcn.0040b3fc
push 1
pop ebx
jmp 0x4012a3
push str.Title
lea ecx, [ebp - 0x10]
call fcn.0040370b
lea eax, [ebp - 0x10]
lea edx, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x44]
call fcn.00403f84
push dword [ebp - 0x10]
call fcn.0040327c
lea ecx, [ebp - 0x10]
mov dword [esp], str.BeginPrompt
call fcn.0040370b
lea eax, [ebp - 0x10]
lea edx, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x50]
call fcn.00403f84
push dword [ebp - 0x10]
call fcn.0040327c
lea ecx, [ebp - 0x10]
mov dword [esp], 0x4184c0
call fcn.0040370b
lea eax, [ebp - 0x10]
lea edx, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xd0]
call fcn.00403f84
push dword [ebp - 0x10]
call fcn.0040327c
pop ecx
mov edx, 0x4184bc
mov ecx, dword [ebp - 0xd0]
call fcn.00403329
test al, al
je 0x401227
mov byte [ebp - 0xac], bl
push str.Directory
lea ecx, [ebp - 0x10]
call fcn.0040370b
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x28]
call fcn.00403f55
push dword [ebp - 0x10]
mov esi, eax
call fcn.0040327c
cmp esi, ebx
pop ecx
jl 0x401263
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0xb8]
mov eax, dword [eax + esi*4]
add eax, 0xc
push eax
call fcn.004037e0
cmp dword [ebp - 0x4c], ebx
je 0x401302
cmp byte [ebp + 0xb], bl
jne 0x401302
push 0x24
push dword [ebp - 0x44]
push dword [ebp - 0x50]
push ebx
call edi
cmp eax, 6
je 0x401302
push dword [ebp - 0xd0]
call fcn.0040327c
push dword [ebp - 0x50]
call fcn.0040327c
push dword [ebp - 0x44]
call fcn.0040327c
add esp, 0xc
lea ecx, [ebp - 0x28]
call fcn.00401cf2
push dword [ebp - 0x38]
call fcn.0040327c
push dword [ebp - 0xb8]
call fcn.0040327c
push dword [ebp - 0x9c]
call fcn.0040327c
push dword [ebp - 0xa8]
call fcn.0040327c
push dword [ebp - 0x68]
call fcn.0040327c
push dword [ebp - 0x90]
call fcn.0040327c
push dword [ebp - 0x1c]
call fcn.0040327c
push dword [ebp - 0xc4]
call fcn.0040327c
add esp, 0x20
jmp 0x40196d
push str.RunProgram
lea ecx, [ebp - 0x10]
call fcn.0040370b
lea eax, [ebp - 0x10]
lea edx, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x5c]
call fcn.00403f84
push eax
lea ecx, [ebp - 0x38]
call fcn.004037e0
push dword [ebp - 0x5c]
call fcn.0040327c
push dword [ebp - 0x10]
call fcn.0040327c
pop ecx
pop ecx
push str.ExecuteFile
lea ecx, [ebp - 0x10]
call fcn.0040370b
lea eax, [ebp - 0x10]
lea edx, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x5c]
call fcn.00403f84
push eax
lea ecx, [ebp - 0x90]
call fcn.004037e0
push dword [ebp - 0x5c]
call fcn.0040327c
push dword [ebp - 0x10]
call fcn.0040327c
pop ecx
pop ecx
push str.ExecuteParameters
lea ecx, [ebp - 0x10]
call fcn.0040370b
lea eax, [ebp - 0x10]
lea edx, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x5c]
call fcn.00403f84
push eax
lea ecx, [ebp - 0x68]
call fcn.004037e0
push dword [ebp - 0x5c]
call fcn.0040327c
push dword [ebp - 0x10]
call fcn.0040327c
push dword [ebp - 0xd0]
call fcn.0040327c
push dword [ebp - 0x50]
call fcn.0040327c
push dword [ebp - 0x44]
call fcn.0040327c
add esp, 0x14
lea ecx, [ebp - 0x28]
call fcn.00401cf2
lea ecx, [ebp - 0x80]
mov byte [ebp - 0x84], bl
call fcn.004036e8
push dword [0x41c040]
lea ecx, [ebp - 0x84]
call fcn.00404a85
test al, al
jne 0x40140a
cmp byte [ebp + 0xb], bl
jne 0x401402
mov edx, str.Can_not_create_temp_folder_archive
xor ecx, ecx
call fcn.0040b3fc
push 1
pop ebx
jmp 0x401905
push 0x18
call fcn.00403255
cmp eax, ebx
pop ecx
je 0x401421
mov ecx, eax
call fcn.00401a33
mov esi, eax
jmp 0x401423
xor esi, esi
cmp esi, ebx
je 0x40142d
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, esi
call fcn.00408fa4
test eax, eax
je 0x401449
mov edx, str.Can_not_load_codecs
xor ecx, ecx
call fcn.0040b3fc
jmp 0x401545
lea eax, [ebp - 0x80]
lea ecx, [ebp - 0x74]
push eax
call fcn.0040374e
lea ecx, [ebp - 0x28]
mov byte [ebp - 1], bl
call fcn.004036e8
lea eax, [ebp - 0x28]
lea edx, [ebp - 0xa8]
push eax
lea eax, [ebp - 1]
push eax
lea eax, [ebp - 0x74]
push dword [ebp - 0xac]
mov ecx, esi
push eax
call fcn.00402553
cmp eax, ebx
je 0x4014ff
cmp byte [ebp + 0xb], bl
jne 0x4014e9
cmp eax, 1
je 0x401492
cmp byte [ebp - 1], bl
je 0x4014a2
push 8
lea edx, [ebp - 0x28]
pop ecx
call fcn.00405fef
mov eax, 0x80004005
cmp eax, 0x80004004
je 0x4014e9
cmp dword [ebp - 0x24], ebx
jne 0x4014ca
mov edx, eax
lea ecx, [ebp - 0x5c]
call fcn.00404355
push eax
lea ecx, [ebp - 0x28]
call fcn.004037e0
push dword [ebp - 0x5c]
call fcn.0040327c
pop ecx
push 7
lea ecx, [ebp - 0x5c]
pop edx
call fcn.00405e91
mov eax, dword [eax]
push 0x10
push eax
push dword [ebp - 0x28]
push ebx
call edi
push dword [ebp - 0x5c]
call fcn.0040327c
pop ecx
push dword [ebp - 0x28]
call fcn.0040327c
push dword [ebp - 0x74]
call fcn.0040327c
pop ecx
jmp 0x40183a
push dword [ebp - 0x28]
call fcn.0040327c
pop ecx
lea ecx, [ebp - 0xe0]
call fcn.004036e8
lea ecx, [ebp - 0xe0]
mov byte [ebp - 0xd4], 1
call fcn.00404877
mov ecx, dword [ebp - 0x74]
call fcn.00404869
test al, al
jne 0x401558
lea ecx, [ebp - 0xe0]
call fcn.00401976
push dword [ebp - 0x74]
call fcn.0040327c
pop ecx
cmp esi, ebx
je 0x401402
mov eax, dword [esi]
push esi
call dword [eax + 8]
jmp 0x401402
cmp dword [ebp - 0x8c], ebx
je 0x4016c3
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x44]
push eax
call fcn.0040374e
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x18], ebx
mov dword [ebp - 0x11c], 0x3c
mov dword [ebp - 0x118], 0x140
mov dword [ebp - 0x114], ebx
mov dword [ebp - 0x110], ebx
mov dword [ebp - 0x10c], eax
je 0x4015b5
lea ecx, [ebp - 0x68]
call fcn.00403893
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x68]
push eax
call fcn.004038eb
lea eax, [ebp - 0x68]
lea ecx, [ebp - 0x50]
push eax
call fcn.0040374e
mov eax, dword [ebp - 0x4c]
push 1
neg eax
sbb eax, eax
pop edi
and eax, dword [ebp - 0x50]
mov dword [ebp - 0x104], ebx
mov dword [ebp - 0x100], edi
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0x108], eax
lea eax, [ebp - 0x11c]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
cmp dword [ebp - 0xfc], 0x20
ja 0x4016ad
cmp byte [ebp + 0xb], bl
jne 0x401611
mov edx, str.Can_not_open_file
xor ecx, ecx
call fcn.0040b3fc
push dword [ebp - 0x50]
call fcn.0040327c
push dword [ebp - 0x44]
call fcn.0040327c
pop ecx
pop ecx
lea ecx, [ebp - 0xe0]
call fcn.00401976
push dword [ebp - 0x74]
call fcn.0040327c
cmp esi, ebx
pop ecx
je 0x401641
mov eax, dword [esi]
push esi
call dword [eax + 8]
lea ecx, [ebp - 0x84]
call fcn.00404b13
push dword [ebp - 0x80]
call fcn.0040327c
push dword [ebp - 0x38]
call fcn.0040327c
push dword [ebp - 0xb8]
call fcn.0040327c
push dword [ebp - 0x9c]
call fcn.0040327c
push dword [ebp - 0xa8]
call fcn.0040327c
push dword [ebp - 0x68]
call fcn.0040327c
push dword [ebp - 0x90]
call fcn.0040327c
push dword [ebp - 0x1c]
call fcn.0040327c
push dword [ebp - 0xc4]
call fcn.0040327c
add esp, 0x24
mov eax, edi
jmp 0x40196f
push dword [ebp - 0x50]
mov edi, dword [ebp - 0xe4]
call fcn.0040327c
push dword [ebp - 0x44]
jmp 0x4018cc
cmp dword [ebp - 0x34], ebx
jne 0x4016fb
push str.setup.exe
lea ecx, [ebp - 0x38]
call fcn.0040377c
mov ecx, dword [ebp - 0x38]
call fcn.004051dd
test al, al
jne 0x4016fb
cmp byte [ebp + 0xb], bl
jne 0x401827
mov edx, str.Can_not_find_setup.exe
xor ecx, ecx
call fcn.0040b3fc
jmp 0x401827
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0x44]
push eax
call fcn.0040374e
lea ecx, [ebp - 0x44]
call fcn.00405628
push str.__T_
lea ecx, [ebp - 0x10]
call fcn.0040370b
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0x38]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00403b87
push dword [ebp - 0x10]
call fcn.0040327c
push dword [ebp - 0x44]
call fcn.0040327c
pop ecx
lea eax, [ebp - 0x38]
pop ecx
push eax
lea ecx, [ebp - 0x50]
call fcn.0040374e
push 0x418368
lea ecx, [ebp - 0x10]
call fcn.0040370b
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0x38]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00403b87
push dword [ebp - 0x10]
call fcn.0040327c
cmp dword [ebp - 0x18], ebx
pop ecx
je 0x401789
lea ecx, [ebp - 0x38]
call fcn.0040388b
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x38]
push eax
call fcn.004038eb
lea eax, [ebp - 0x38]
lea edx, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x124], 0x44
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0xf8], ebx
mov word [ebp - 0xf2], bx
mov dword [ebp - 0xf0], ebx
call fcn.0040368d
push eax
lea ecx, [ebp - 0xd0]
call fcn.0040374e
push dword [ebp - 0x5c]
call fcn.0040327c
pop ecx
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x124]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push dword [ebp - 0xd0]
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x4018b2
cmp byte [ebp + 0xb], bl
jne 0x401812
lea ecx, [ebp - 0x50]
call fcn.00401c3c
push dword [ebp - 0xd0]
call fcn.0040327c
push dword [ebp - 0x50]
call fcn.0040327c
pop ecx
pop ecx
lea ecx, [ebp - 0xe0]
call fcn.00401976
push dword [ebp - 0x74]
call fcn.0040327c
cmp esi, ebx
pop ecx
je 0x401845
mov eax, dword [esi]
push esi
call dword [eax + 8]
lea ecx, [ebp - 0x84]
call fcn.00404b13
push dword [ebp - 0x80]
call fcn.0040327c
push dword [ebp - 0x38]
call fcn.0040327c
push dword [ebp - 0xb8]
call fcn.0040327c
push dword [ebp - 0x9c]
call fcn.0040327c
push dword [ebp - 0xa8]
call fcn.0040327c
push dword [ebp - 0x68]
call fcn.0040327c
push dword [ebp - 0x90]
call fcn.0040327c
push dword [ebp - 0x1c]
call fcn.0040327c
push dword [ebp - 0xc4]
call fcn.0040327c
add esp, 0x24
push 1
pop eax
jmp 0x40196f
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0xd0]
mov edi, dword [ebp - 0x2c]
call fcn.0040327c
push dword [ebp - 0x50]
call fcn.0040327c
pop ecx
cmp edi, ebx
pop ecx
je 0x4018e7
push 0xffffffffffffffff
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xe0]
call fcn.00401976
push dword [ebp - 0x74]
call fcn.0040327c
cmp esi, ebx
pop ecx
je 0x401905
mov eax, dword [esi]
push esi
call dword [eax + 8]
lea ecx, [ebp - 0x84]
call fcn.00404b13
push dword [ebp - 0x80]
call fcn.0040327c
push dword [ebp - 0x38]
call fcn.0040327c
push dword [ebp - 0xb8]
call fcn.0040327c
add esp, 0xc
push dword [ebp - 0x9c]
call fcn.0040327c
push dword [ebp - 0xa8]
call fcn.0040327c
push dword [ebp - 0x68]
call fcn.0040327c
push dword [ebp - 0x90]
call fcn.0040327c
push dword [ebp - 0x1c]
call fcn.0040327c
push dword [ebp - 0xc4]
call fcn.0040327c
add esp, 0x18
mov eax, ebx
pop edi
pop esi
pop ebx
leave
ret 0x10