Function at 0x40b280
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xeb8
mov eax, dword [0x4483b0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov dword [ebp - 8], ecx
push 0x20a
push 0
lea eax, [ebp - 0x214]
push eax
call fcn.0041a970
add esp, 0xc
push 0x104
lea eax, [ebp - 0x214]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x40b877
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
lea ecx, [ebp - 0x218]
call fcn.0040bb00
lea ecx, [ebp - 0x218]
call fcn.0040c0e0
test eax, eax
je 0x40b86c
lea ecx, [ebp - 0x218]
call fcn.0040c090
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveExtensionW]
push 4
push 0
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x218]
call fcn.0040bfd0
push 0x4404b4
lea ecx, [ebp - 0x21c]
call fcn.0040bbb0
test eax, eax
je 0x40b449
mov dword [ebp - 0x220], 0
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0
je 0x40b449
cmp dword [ebp - 0x220], 2
jne 0x40b449
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x228]
call fcn.0040bb00
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax + 4]
push ecx
lea ecx, [ebp - 0x22c]
call fcn.0040bb00
lea ecx, [ebp - 0x22c]
call fcn.0040c100
movzx eax, al
test eax, eax
jne 0x40b426
push 0
push 0x4404b0
lea ecx, [ebp - 0x22c]
call fcn.0040be00
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jl 0x40b426
mov eax, dword [ebp - 0x230]
add eax, 1
push eax
lea ecx, [ebp - 0x234]
push ecx
lea ecx, [ebp - 0x22c]
call fcn.0040bf90
push 0x20
lea ecx, [ebp - 0x234]
call fcn.0040bed0
lea ecx, [ebp - 0x234]
call fcn.0040c0e0
test eax, eax
je 0x40b41b
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x218]
call fcn.0040bb50
lea ecx, [ebp - 0x234]
call fcn.0040ce70
mov eax, dword [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea ecx, [ebp - 0x22c]
call fcn.0040ce70
lea ecx, [ebp - 0x228]
call fcn.0040ce70
push 0x4404ac
push 0x4404a4
lea ecx, [ebp - 0x218]
call fcn.0040bc10
push 0x208
push 0
lea eax, [ebp - 0x43c]
push eax
call fcn.0041a970
add esp, 0xc
push 0x208
push 0
lea eax, [ebp - 0x644]
push eax
call fcn.0041a970
add esp, 0xc
push 0x208
push 0
lea eax, [ebp - 0x84c]
push eax
call fcn.0041a970
add esp, 0xc
push 0x208
push 0
lea eax, [ebp - 0xa54]
push eax
call fcn.0041a970
add esp, 0xc
mov eax, dword [ebp - 8]
mov dword [eax + 0x14], 0
mov eax, dword [ebp - 8]
add eax, 0x14
push eax
push 0x104
lea ecx, [ebp - 0xa54]
push ecx
push 0x104
lea edx, [ebp - 0x644]
push edx
push 0x104
lea eax, [ebp - 0x84c]
push eax
mov ecx, dword [ebp - 8]
push ecx
push 0x104
lea edx, [ebp - 0x43c]
push edx
push str._s__d__s__s__s__d
lea ecx, [ebp - 0x218]
call fcn.0040c090
push eax
call fcn.0041a91a
add esp, 0x30
mov dword [ebp - 0xa58], eax
lea eax, [ebp - 0x43c]
mov dword [ebp - 0xa5c], eax
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
test ecx, ecx
je 0x40b590
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x31
jne 0x40b54d
mov eax, dword [ebp - 8]
mov dword [eax + 8], 1
jmp 0x40b57f
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x32
jne 0x40b567
mov eax, dword [ebp - 8]
mov dword [eax + 0xc], 1
jmp 0x40b57f
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x33
jne 0x40b57f
mov eax, dword [ebp - 8]
mov dword [eax + 0x10], 1
mov eax, dword [ebp - 0xa5c]
add eax, 2
mov dword [ebp - 0xa5c], eax
jmp 0x40b526
mov eax, dword [ebp - 8]
cmp dword [eax + 8], 0
jne 0x40b5b5
mov eax, dword [ebp - 8]
cmp dword [eax + 0xc], 0
jne 0x40b5b5
mov eax, dword [ebp - 8]
cmp dword [eax + 0x10], 0
jne 0x40b5b5
mov eax, dword [ebp - 8]
mov dword [eax + 8], 1
xor eax, eax
mov word [ebp - 0xa4c], ax
cmp dword [ebp - 0xa58], 3
jne 0x40b695
lea eax, [ebp - 0x84c]
mov dword [ebp - 0xa60], eax
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
test ecx, ecx
je 0x40b65b
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x41
jl 0x40b600
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x5a
jle 0x40b638
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x61
jl 0x40b61c
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x7a
jle 0x40b638
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x30
jl 0x40b649
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x39
jg 0x40b649
mov eax, dword [ebp - 0xa60]
add eax, 2
mov dword [ebp - 0xa60], eax
jmp 0x40b656
xor eax, eax
mov ecx, dword [ebp - 0xa60]
mov word [ecx], ax
jmp 0x40b65b
jmp 0x40b5d7
lea eax, [ebp - 0x84c]
push eax
call fcn.0041a84b
add esp, 4
mov dword [ebp - 0xa64], eax
mov eax, dword [ebp - 0xa64]
cdq
sub eax, edx
sar eax, 1
shl eax, 1
cmp dword [ebp - 0xa64], eax
je 0x40b695
xor eax, eax
mov ecx, dword [ebp - 0xa64]
mov word [ebp + ecx*2 - 0x84e], ax
push 0x208
push 0
lea eax, [ebp - 0xc6c]
push eax
call fcn.0041a970
add esp, 0xc
push 0x104
lea eax, [ebp - 0xc6c]
push eax
lea ecx, [ebp - 0x84c]
push ecx
call fcn.0041a84b
add esp, 4
push eax
lea edx, [ebp - 0x84c]
push edx
mov ecx, dword [ebp - 8]
call fcn.0040b890
test eax, eax
jne 0x40b6e3
xor eax, eax
mov word [ebp - 0xc6c], ax
movzx eax, word [ebp - 0x644]
test eax, eax
jne 0x40b732
movzx eax, word [ebp - 0xc6c]
test eax, eax
je 0x40b71d
push str.https:__hao.360.cn_
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.0040bb80
lea eax, [ebp - 0xc6c]
push eax
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.0040c0b0
jmp 0x40b72d
push str.https:__hao.360.cn__installer
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.0040bb80
jmp 0x40b861
lea eax, [ebp - 0x644]
mov dword [ebp - 0xc70], eax
mov eax, dword [ebp - 0xc70]
movzx ecx, word [eax]
cmp ecx, 0x68
je 0x40b75a
mov eax, dword [ebp - 0xc70]
movzx ecx, word [eax]
cmp ecx, 0x48
jne 0x40b769
mov eax, dword [ebp - 0xc70]
add eax, 2
mov dword [ebp - 0xc70], eax
push 0x208
push 0
lea eax, [ebp - 0xe78]
push eax
call fcn.0041a970
add esp, 0xc
push 0x104
lea eax, [ebp - 0xe78]
push eax
mov ecx, dword [ebp - 0xc70]
push ecx
call fcn.0041a84b
add esp, 4
push eax
mov edx, dword [ebp - 0xc70]
push edx
mov ecx, dword [ebp - 8]
call fcn.0040b890
test eax, eax
je 0x40b7f4
mov eax, dword [ebp - 0xc70]
lea ecx, [ebp - 0x644]
cmp eax, ecx
jne 0x40b7d0
push str.http:__
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.0040bb80
jmp 0x40b7e0
push str.https:__
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.0040bb80
lea eax, [ebp - 0xe78]
push eax
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.0040c0b0
jmp 0x40b804
push 0x4403d0
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.0040bb80
push 0x4403cc
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.0040c0b0
movzx eax, word [ebp - 0xc6c]
test eax, eax
je 0x40b831
lea eax, [ebp - 0xc6c]
push eax
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.0040c0b0
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.0040be80
lea eax, [ebp - 0xa54]
push eax
mov ecx, dword [ebp - 8]
call fcn.0040ba30
test eax, eax
je 0x40b851
jmp 0x40b861
push str.https:__hao.360.cn__installer
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.0040bb80
lea ecx, [ebp - 0x21c]
call fcn.0040ce70
lea ecx, [ebp - 0x218]
call fcn.0040ce70
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041a95f
mov esp, ebp
pop ebp
ret