Function at 0x4019d0
Capabilities:
Accept command line arguments
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x419e60
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], edi
call fcn.00403860
mov esi, dword [ebp + 8]
cmp esi, 1
jg 0x401a0d
mov dword [0x424d40], 1
call fcn.00401990
push edi
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push eax
push edi
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call fcn.00418add
cmp eax, edi
jne 0x401a5d
push str.MFC_Failed_to_initialize._n
mov ecx, 0x427148
call fcn.0040f976
push 4
mov ecx, 0x427148
call fcn.0040fd82
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x14]
call fcn.00402850
mov eax, dword [0x424d40]
mov byte [ebp - 4], 1
push eax
call fcn.00402ad0
add esp, 4
cmp eax, 1
jne 0x401b17
cmp esi, eax
jg 0x401c4e
mov ecx, dword [0x4215e8]
mov dword [ebp + 8], ecx
lea edx, [ebp - 0x1c]
mov byte [ebp - 4], 2
push edx
call fcn.00402ab0
add esp, 4
mov esi, eax
lea eax, [ebp - 0x18]
mov bl, 3
push 1
push eax
mov byte [ebp - 4], bl
call fcn.004026e0
add esp, 8
mov ecx, dword [esi]
mov eax, dword [eax]
push ecx
lea edx, [ebp + 8]
push eax
push edx
mov byte [ebp - 4], 4
call fcn.00411184
add esp, 0xc
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], bl
call fcn.004120dc
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 2
call fcn.004120dc
mov eax, dword [ebp + 8]
mov ecx, 0x427148
push eax
call fcn.0040f976
push 0xa
mov ecx, eax
call fcn.0040f7b4
push 0x401870
mov ecx, eax
call fcn.00401850
lea ecx, [ebp + 8]
mov byte [ebp - 4], 1
call fcn.004120dc
jmp 0x401c4e
cmp eax, 0xffffffff
je 0x401b32
push 8
call fcn.00401880
add esp, 4
lea ecx, [ebp - 0x14]
call fcn.00402890
cmp eax, edi
jne 0x401b62
push 4
call fcn.00401880
add esp, 4
call fcn.004019b0
lea ecx, [ebp - 0x14]
mov esi, eax
mov byte [ebp - 4], 0
call fcn.00402880
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 6
call fcn.00401880
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 4
cmp edi, 5
jge 0x401c44
push 0x3e8
call ebx
lea ecx, [ebp - 0x1c]
push ecx
call fcn.00403c30
add esp, 4
push str.Resource_version.ini
lea edx, [ebp + 8]
push eax
push edx
mov byte [ebp - 4], 5
call fcn.00412325
push eax
mov byte [ebp - 4], 6
call fcn.004022e0
add esp, 4
lea ecx, [ebp + 8]
mov esi, eax
mov byte [ebp - 4], 5
call fcn.004120dc
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 1
call fcn.004120dc
test esi, esi
je 0x401c74
mov eax, dword [0x424d40]
test eax, eax
je 0x401be3
push 0
call fcn.004035a0
add esp, 4
lea eax, [ebp - 0x1c]
push eax
call fcn.00403c30
add esp, 4
push str.MyIE9PostUpgrade.exe
lea ecx, [ebp + 8]
push eax
push ecx
mov byte [ebp - 4], 7
call fcn.00412325
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 9
call fcn.004120dc
lea edx, [ebp + 8]
push edx
call fcn.004022e0
add esp, 4
test eax, eax
je 0x401c38
mov eax, dword [ebp + 8]
push 0
push 0
push 0x424d3c
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 1
call fcn.004120dc
push 5
call fcn.00401880
add esp, 4
call fcn.004019b0
lea ecx, [ebp - 0x14]
mov esi, eax
mov byte [ebp - 4], 0
call fcn.00402880
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
inc edi
jmp 0x401b72