Function at 0x409010
Capabilities:
Accept command line arguments
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42b72d
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0xff8
mov eax, dword [0x48d870]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xf78], ecx
mov dword [ebp - 4], 0
push 0x400
lea eax, [ebp - 0xc24]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x44
push 0
lea ecx, [ebp - 0xe08]
push ecx
call fcn.004160c0
add esp, 0xc
mov dword [ebp - 0xf60], str.SetupWizard.exe
mov dword [ebp - 0xfa8], str.PlWslPAgFF0dlufQJDnSaKgbwI6gA5b4sql9Xe8i1mxzW189A2seJItiKugd0o8W9LT8h0hoV5ewWfRIS0ruKnc0PepQYHEIUpfj3UqrbuIfNglW
lea edx, [ebp - 0xc24]
mov dword [ebp - 0xf64], edx
mov byte [ebp - 4], 1
lea eax, [ebp - 0x424]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea ecx, [ebp - 0x21c]
push ecx
push 0
push 0x43de14
lea edx, [ebp - 0x424]
push edx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
push 1
lea ecx, [ebp - 0xc2c]
call fcn.00409590
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0xc2c]
call fcn.0040b7a0
lea ecx, [ebp - 0xc2c]
call fcn.004034c0
mov dword [ebp - 0xf60], eax
lea ecx, [ebp - 0xc2c]
call fcn.0040b820
jmp 0x40910a
mov dword [ebp - 4], 0
jmp 0x40911a
mov byte [ebp - 4], 3
push 1
lea ecx, [ebp - 0xd14]
call fcn.004095e0
push 1
push 0x40
push 0x20
mov ecx, dword [ebp - 0xf64]
push ecx
lea ecx, [ebp - 0xd14]
call fcn.0040ba90
mov dword [ebp - 0xfb4], eax
mov byte [ebp - 4], 4
push 2
push 0
push 0
lea ecx, [ebp - 0xd14]
call fcn.0040b580
lea edx, [ebp - 0x1008]
push edx
lea ecx, [ebp - 0xd14]
call fcn.0040b6b0
mov dword [ebp - 0xf94], eax
mov ecx, dword [ebp - 0xf94]
call fcn.00403720
mov dword [ebp - 0xfa0], eax
mov dword [ebp - 0xf9c], edx
mov eax, dword [ebp - 0xfa0]
mov dword [ebp - 0xf68], eax
mov dword [ebp - 0xfd0], str.NxVKMLLTrJMk8ScwgEzqmBd5MttUkibKesYNVf127mkMnm2tP13Dt5TXXUXQs75xkNu7VutL3ub9mvqGczDfuM1nshIgDpEWom4iE74fM7UMPxt2ulhhwtbLnwnJCkqSTRrlSwAIwDIY1XBY2lYcyEQIy7bIBgfUv9pBoPCCb5mSBAxGlCQMABiYw3TAfQgf8XRRQYDtoUayJqoSbe3iyoAouOUzD3XIPaKhWDR0u92UYMz2ueNimNG0nrbOo1bOUx7pjeq0ujtPngM9oJsMNqlUPremtd4ESY4asYds9rz1qE7VfQoaHA7tbRb7nn51qkMSXR0uR5V446VJAG7cOpr5shGR1t4iqtxigCklNkPvHX0xcoa3OKxjpL3mLL7w1iGvMKDpMJ2HcQkV
mov eax, dword [ebp - 0xf68]
cdq
and edx, 0x3ff
add eax, edx
sar eax, 0xa
mov dword [ebp - 0xf68], eax
push 0
push 0
push 0
lea ecx, [ebp - 0xd14]
call fcn.0040b580
cmp dword [ebp - 0xf68], 0x400
jge 0x40930a
push 1
lea ecx, [ebp - 0xf58]
call fcn.00409650
push 1
push 0x40
push 0x20
mov ecx, dword [ebp - 0xf60]
push ecx
lea ecx, [ebp - 0xf58]
call fcn.0040c7d0
mov dword [ebp - 0xfbc], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xd14]
call fcn.0040bbf0
mov dword [ebp - 0xfa4], str.6OioPhib97wso61zneAJMIMiPkIglpj9nw8lsSOaHsXTwQEBEe8FQNuTlFhfLa39yQKSDMmL5XO44HEEbxy45aNn0Rm6r7dYgRUqYQvQM7JhW4v6doqsAbX2IjfWyWLgUsr8ztLFBG416t7fNOo6XOaCGGNbgs1vFmkR4FtYAMM2ruJoJJiWnBuli3AlLxIht8J9z0UW3SsdWL4MBQ3ErGSSgILdi7X028UgMDffyJoFB49CJHMzmIbmyqbL5eh7Mzi9PjvWXrqLmbs1eFJKL19kobgbmYz00vrurlCAns7Yf0O6VWhYSopOhi8Oox7WDN2DMAqccwD5hwtUuyUIqisiWtIytl5uaDnki4qUSrGvc96H3Qu8xhI4Sbk5vWcda5yvc3jLqQFPsopP1G8gMgEy1fgSGfjcTWEp7PCV3DOkClJ3645GlIbO0CWAJurO33AVfM2YAaP0FoK0zJhvoPmu0rT8qDnA1GPMgvt92OxhyDWws5fCx9yTlPJSouN8SIrFfShiA1OYbYCzpU4TTqwWBX7Bhwbgrt34K44VEaDho5VhQBp5XFgfx1NqG3ORcQQrMuLdQG3M1kRQR2wKJcaY8aBS78S3kcE6OOGU049sMWcHhzfsFAT2vDsT5yjYMrNeL0qt7IaFsRzly9YACDwS4DlL1VT18XhXYfVWpalbFOsrWaHsXtoHmqkekAiFHJyhi2s4jS483g8OmyYdur9ebfxmkFVxvbL2Y7B9soJ5bsGpoNXWqbPUvleDm15pffB2LujdFdTWzq6jnQmDvyLNv3FWEjQanqiTPsOSXS73JV8Jkbs8RKDBACfyrXcSYHFeOwGrCX565wn5XO9b9cpFjoq7Q8QKUAbqMwQM23vdYwgPIgRomyqXuHIF0Kq6H7MQiwxtSHfRO03EJxEl4Mk77TLFYylnyO4HlPjHYycWQMNlQc7qd86pnkgWN1PerJa7m64ipcjJlvsNzjrVe42IFnWHqnYnYsN5fa0JoiGTuwJ9aro6YkLBCOd1FpDMQymCH78mwzTgJ8pKhuCQsbWRhL1r2pnT3NywCfekpkuc9JoIj0k2V6XkUuEWvFHrDGKDr0cIdrB5hwj9XjACrgtR00F6j4nWwL6wk0hJgmPP5aNfN9nhCLrbcGdEExuRqpRrTmC28RrBxoWfa4LlElIntd8BK8zDNPtklPiFE5iFD1ch9p1Sde314BQ6RVuCT4tRlKdeXpXBmWprCptFuh38tdvxf8z8GYzq7XdGqCz6K9NMd4HbdVfcrHPtbYtsWgB4mX0vGNX6PE1jjfkxAc3906cIXPhOeqyykNbAEmAJFB3Y6E9FmELmrGCfT6rqMQwmK5giv4wljdkHtYbaPQdRP1RI15XQxDfW16a3o7NnHL0eMW1Bqwokt2vp6kdb90Dv2QIM1BmUwzfbX7qOhYrQNRM4LSvJ3Lw7aM2LHYSCmbVVMzGDw8N1Ie9hHLCLq9RU8OBLjQc9jlAG99W4Xqvjw6neSVoVn7rflnvu95vLCOR3St9c8Ma8YJxMnqLh0rRxTrluXLiqNmv0NV5jdGUIlC5rygLdjBAnEsngWlqEwLhUEFkP97yghyJkWsszhTSv6qn8Kq3EEP6y9AkjywpOTzBdg72zRoPMsPHmvYEijnS6WnmqLWoiPX5vt
lea ecx, [ebp - 0xf58]
call fcn.0040c930
push 1
lea ecx, [ebp - 0xeb0]
call fcn.00409650
push 1
push 0x40
push 0xa
mov edx, dword [ebp - 0xf60]
push edx
lea ecx, [ebp - 0xeb0]
call fcn.0040c7d0
mov dword [ebp - 0xfb0], eax
mov byte [ebp - 4], 6
mov dword [ebp - 0xf6c], 0
jmp 0x409275
mov eax, dword [ebp - 0xf6c]
add eax, 1
mov dword [ebp - 0xf6c], eax
cmp dword [ebp - 0xf6c], 0x400
jae 0x4092b9
mov dword [ebp - 0xf70], 0
jmp 0x40929c
mov ecx, dword [ebp - 0xf70]
add ecx, 1
mov dword [ebp - 0xf70], ecx
cmp dword [ebp - 0xf70], 0x400
jae 0x4092b7
push 0x43e604
call fcn.00416165
add esp, 4
jmp 0x40928d
jmp 0x409266
mov dword [ebp - 0xfb8], str.5Uo7PPlbLWWDj4IJ8EyOidYbB1SUsbaUjnzhQRK5Yl77H5816ak5gNFsVhxFICiBNj8n6DIThiOInA5Mxbk3vhk6FJMcEo1qaKATiAL7psP3BOfj
mov edx, dword [ebp - 0xf68]
push edx
lea ecx, [ebp - 0xeb0]
call fcn.0040b390
lea ecx, [ebp - 0xeb0]
call fcn.0040c930
mov dword [ebp - 0xfc0], str.MoMmybOFHKsQDHPtdnUJW9xsQW4TyN7olsyLkeK7TCoc8mWHPYehm3vCtyCpKhqWq13hATuJasEU6SOnLJYUfe50fpkCPmGYX13pQ5BypkA0gd9nmHoWVxvejoD03G3Lb8BGH8ymptbVTc7RgzPFLh0KzzDweOaQGCYHOKLFMhcITCjiuGTof6HIO9aINc73nnz0U3ENWe2RH5Nim1mrQ1K5CrKBKarptY4bQuxQa0Pol87SvdecfucypUDHEV8hzChRw0HEunrSrcceUwGY5m4BqcK6ECChx7gDSOqNRhnm
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xeb0]
call fcn.00409620
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xf58]
call fcn.00409620
jmp 0x409316
mov eax, dword [ebp - 0xf64]
mov dword [ebp - 0xf60], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xd14]
call fcn.004095b0
jmp 0x409339
mov dword [ebp - 4], 0
jmp 0x409349
lea ecx, [ebp - 0xc25]
call fcn.00401000
mov dword [ebp - 0xfcc], eax
mov byte [ebp - 4], 8
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov dword [ebp - 0xf74], eax
lea edx, [ebp - 0xc44]
push edx
lea ecx, [ebp - 0xc25]
call fcn.004011f0
mov dword [ebp - 0xfd8], eax
mov byte [ebp - 4], 9
push 0x43498a
lea eax, [ebp - 0xc44]
push eax
call fcn.0040fc70
add esp, 8
mov byte [ebp - 0xf59], al
movzx ecx, byte [ebp - 0xf59]
test ecx, ecx
je 0x4094c2
push 1
lea ecx, [ebp - 0xdc4]
call fcn.00401680
push 1
push 3
lea ecx, [ebp - 0xdc4]
call fcn.004028f0
mov dword [ebp - 0xfd4], eax
mov byte [ebp - 4], 0xa
lea edx, [ebp - 0xdc4]
test edx, edx
je 0x4093f0
lea eax, [ebp - 0xdc4]
add eax, 0x10
mov dword [ebp - 0xf7c], eax
jmp 0x4093fa
mov dword [ebp - 0xf7c], 0
mov ecx, dword [ebp - 0xf74]
push ecx
mov edx, dword [ebp - 0xf7c]
push edx
call fcn.004041a0
add esp, 8
mov dword [ebp - 0xf84], eax
lea eax, [ebp - 0xc44]
push eax
mov ecx, dword [ebp - 0xf84]
push ecx
call fcn.004044d0
add esp, 8
mov dword [ebp - 0xfc8], str.S70CxOj2rPGtRMGFHLwx9ctflaz7f03vIOwCEHaIRt5cveSzUv2kL8o4NsfzTDyz7TmnH5mPzWpRzWa7xodNYsEoVgusiOLBz5YL1RnXAC9l6oChqeSCR3psVGV80Fi0QI8IWlzvHVvWEVSlNs8rC8NjK3Pp7ecp7OH8XelDAtnxqLWQe8dWtnUIdKdGnpXJO3NVDBXf6pMfpdgCW93i9V2nq1rcO4iCBDdS6l2NzdiS8bqzTSnGVeK1E64jCMif7u4fS1e5MPnEjPKmhCE26S7iuDyUn3Mhxbdd8WFW98GBBbpDEYwmlnG1usrsM9F9n3W2mGqNWq76ekx8XBpAwQzC9OvJaCRmwriKgv9zltQP7FlCy1sqD9q7PuMQt9lugE4hEkVOqtiRML0XrzRnDUyNm6yzaXLxmUibLpjNR2Xuh02ci4nJOsDK1bpKnKbM9hrqivYag6cmApOdJqJu0Hm96qWTXOYaYTbthRWSaLjXHrIC5x4FdkP0vJCEhjQgKBFzK1J4NJAWHTzSkJ4eXfyXo309DafP2NGOcKdpEFmlCl0w9U4YeCgj3kFPi3sLamwgxaAgnj2zt4siYuSBpU6Xx6dXFq7imMT42eDHGxHcxJC9MkttP1HMI2QrmdiX7BhguazA9ECIGjafsfmaM1jjc0f5l0GF6DFBRiErGHwOpodlrFyPYKq04ioG9wp0Ro88CNYJbMj4VVI9LGLYgiHeplH6aoMjs0xit9mbt5lXeDP72WDyI3wxoDU1s1dCp8K2oa9GrSk038LngFDWIJQF7GebVBiGI6AKSTcpvsrmcadKmoLkKHG3d3jcKEnynsUH5Nxyd7HsPQBKWAKrNdponFnk4MXiPGWCFnRx3ceCnc9bcVs7kMOBXcJ21fRJDq8I6HV8i5lhqdoJ3WVp2O8FqF0lf7QBCBzqNWV520uA9vNBHvPzDKXAVWW2U4y1Pu2lhmp45YgqdjInCMu6S6metLvxGjxzEHTj0ekKJXgc874toP1Fv0CFMd5BfiOFN4g1phIGXsYoPGOxjOxO7Jgj4hEMmidM5WjxTWG89uYUFgCt6v4Mw4gNH8JagKQwpF0FtKIxRhcJnTx2gIGh761wx8U0gKQNiVN9RyYhDNmXmadNJyLCqV1ehnCIqOTsCJwnVfL2VL4RM6QiVp4NcJO6DJ4Uu3gbMkhqNIpVbIGOujiTNK7dhpJeKS8HT4d9vtmUfGdVfXWtw5rXo1hChCEmzLeitkRF8aG1bWMcIlv8l6xNAYAG9vOszWo0hhh28HNw0cb1Y19w4dsvGDIalQ4X12sgpJBn4b0tMeh5du5b7299YGbT5VMgBQx9bB5dqsr2kmvW6tQh9cCcGChTdBVAux8p6K0sE99w7qS4K0mz1kYvXHcimc67hkq9B6mHNskuiXPK52O2argkQDLswwPFcSeyRLYLQlFdfRRAn6aqQjiczlLYIEoEQqHYkOHDIe1elVSYjKOmvjW1W94OsRbHPTVGFJnvJtHerkYfMdhjXCqzkufGtIjsNkoUqP1gH50nEvSQGMuKQd2lwpJFM5BLnMWPOgKvYB4gohXxSQJ5yTfxRuSmDcvHeuPzS2RwOzpdJ5FBXmksfjVAzonSmWuqMAaBrmyPPIzwgNHp9EbgQVBJuJVMmpbVTdgptE2LfBhzPxaoPow09d2zHpTud1WzLGWlGjItI4peEBF9PW6F7xRNtfe560Q2ycLoNltrGnrgoEcTaHIHH1AeNxpuCRfACPkUuvVldori9y3w04hUOwxOn9xySnRbwNgDpjyV6t3SstRw0zM1XxKJ81RKpfvDffs1zTyldi1km0eBu9EMYoWYf9BtdDDTiF4vtjq5ODhzJqGKRjX8aUlgLW51E7wkdDQM8pyPje8xHObdjb8hBMbhfDkOUWgOlpPqcSfydb0KLbCOSCjB3dlFJHF0on2E2WS62Xo3xQDoGwWPEgyCWTfYFUMjCF7vy3HFIms3JT8fmSgQDtI1w5TA
lea edx, [ebp - 0xff0]
push edx
lea ecx, [ebp - 0xdc4]
call fcn.00402a30
mov dword [ebp - 0xf98], eax
mov eax, dword [ebp - 0xf98]
mov dword [ebp - 0xf80], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0xf80]
call fcn.00406360
push eax
lea ecx, [ebp - 0xc5c]
call fcn.00408750
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xff0]
call fcn.00407d30
lea ecx, [ebp - 0xc5c]
call fcn.00406360
push eax
call fcn.00416211
add esp, 4
mov dword [ebp - 0xf74], eax
mov dword [ebp - 0xfac], str.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
lea ecx, [ebp - 0xc5c]
call fcn.00407d30
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xdc4]
call fcn.00401650
push 0x48fe84
lea ecx, [ebp - 0xe08]
push ecx
push 0
push 0
push 4
push 0
push 0
push 0
mov edx, dword [ebp - 0xf74]
push edx
mov eax, dword [ebp - 0xf64]
push eax
mov ecx, dword [ebp - 0xf78]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf78]
mov eax, dword [edx + 0x38]
call eax
mov dword [ebp - 0xf88], eax
mov ecx, dword [ebp - 0xf88]
mov dword [ebp - 0xf8c], ecx
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xc44]
call fcn.00407d30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xc25]
call fcn.00401020
mov eax, dword [ebp - 0xf8c]
jmp 0x409569
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004136b5
mov esp, ebp
pop ebp
ret