Function at 0x411358
Capabilities:
Accept command line arguments
Create process on windows
Set current directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xf8
push ebx
push esi
push edi
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
mov eax, dword [ebp + 8]
push 0xf
pop edi
xor esi, esi
push edi
lea ecx, [ebp - 0x54]
mov dword [0x418a20], eax
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x4c], esi
call fcn.004071bc
push edi
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x10], esi
call fcn.004071bc
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0x24]
call fcn.0040aebd
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.0040ad37
push dword [ebp - 0x24]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
mov dword [ebp - 0x3c], esi
push edi
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], esi
call fcn.004071bc
lea eax, [ebp - 0x3c]
push eax
push dword [0x418a20]
call fcn.0040c094
push edi
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x40], esi
call fcn.0040b628
lea eax, [ebp - 0x48]
push eax
push str.___InstallEnd__
push str.___Install__UTF_8_
push dword [ebp - 0x3c]
call fcn.00411984
test al, al
jne 0x411424
push str.Cant_load_config_info
push esi
call fcn.0040e6f6
push 1
pop esi
jmp 0x41193c
lea ecx, [ebp - 0x18]
call fcn.0040b128
lea ecx, [ebp - 0x18]
call fcn.0040b0ed
and byte [ebp + 0xb], 0
push 0x41857c
lea ecx, [ebp - 0x24]
call fcn.0040aebd
mov ebx, eax
lea eax, [ebp - 0xc]
push 2
push eax
lea ecx, [ebp - 0x18]
call fcn.0040b02c
mov ebx, dword [ebx]
mov eax, dword [eax]
push ebx
push eax
call fcn.0040b3a7
push dword [ebp - 0xc]
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x24]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
test bl, bl
pop ecx
je 0x4114b2
lea eax, [ebp - 0xc]
push 2
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp + 0xb], 1
call fcn.0040af5c
push eax
lea ecx, [ebp - 0x18]
call fcn.0040af1e
push dword [ebp - 0xc]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
lea ecx, [ebp - 0x18]
call fcn.0040b128
lea ecx, [ebp - 0x18]
call fcn.0040b0ed
push edi
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], esi
call fcn.004071bc
cmp dword [ebp - 0x44], esi
je 0x411636
lea ecx, [ebp - 0x68]
call fcn.004023ec
lea eax, [ebp - 0x68]
mov edi, 0x414814
push eax
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x68], edi
call fcn.0040b67b
test al, al
jne 0x411501
push str.Config_failed
push esi
call fcn.0040e6f6
push 1
pop esi
jmp 0x41158d
push str.Title
lea ecx, [ebp - 0xc]
call fcn.0040aebd
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.0040b9c8
push dword [ebp - 0xc]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
lea ecx, [ebp - 0xc]
mov dword [esp], str.BeginPrompt
call fcn.0040aebd
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.0040b9c8
push dword [ebp - 0xc]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
cmp dword [ebp - 0x8c], esi
pop ecx
je 0x4115d0
cmp byte [ebp + 0xb], 0
jne 0x4115d0
push 0x24
push dword [ebp - 0x24]
push dword [ebp - 0x90]
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
je 0x4115d0
push dword [ebp - 0x90]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x24]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
pop ecx
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x68], edi
call fcn.0040bbf0
lea ecx, [ebp - 0x68]
call fcn.0040bbe0
push dword [ebp - 0x30]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x48]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x3c]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x18]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x54]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
add esp, 0x14
jmp 0x41195f
push str.RunProgram
lea ecx, [ebp - 0xc]
call fcn.0040aebd
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.0040b9c8
push eax
lea ecx, [ebp - 0x30]
call fcn.0040af1e
push dword [ebp - 0xac]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0xc]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x90]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x24]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
add esp, 0x10
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x68], edi
call fcn.0040bbf0
lea ecx, [ebp - 0x68]
call fcn.0040bbe0
and byte [ebp - 0x78], 0
lea ecx, [ebp - 0x74]
call fcn.0040ce85
push dword [0x418428]
lea ecx, [ebp - 0x78]
call fcn.0040ce45
test al, al
jne 0x411667
push str.Can_not_create_temp_folder_archive
push esi
call fcn.0040e6f6
push 1
pop esi
jmp 0x411922
lea eax, [ebp - 0x74]
mov dword [ebp - 0xb0], esi
push eax
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0xb4], 0x414808
call fcn.0040c2fb
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00410bd4
cmp eax, esi
je 0x4116ca
cmp eax, 1
jne 0x4116b4
push str.Can_not_open_archive
push esi
call fcn.0040e6f6
jmp 0x4116c2
cmp eax, 0x80004004
je 0x4116c2
push eax
push esi
call fcn.0040e70e
push 1
pop esi
jmp 0x411916
lea ecx, [ebp - 0xa0]
call fcn.0040ce85
lea eax, [ebp - 0xa0]
push eax
call fcn.0040cbb7
push dword [ebp - 0x74]
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
call edi
test eax, eax
jne 0x4116f8
push 1
pop esi
jmp 0x4118fe
cmp dword [ebp - 0x2c], esi
jne 0x411746
push str.setup.exe
lea ecx, [ebp - 0x30]
call fcn.0040c165
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.00411968
push dword [eax]
call fcn.0040d4c2
push dword [ebp - 0xac]
mov bl, al
neg bl
sbb bl, bl
inc bl
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
test bl, bl
pop ecx
je 0x411746
push str.Can_not_find_setup.exe
push esi
call fcn.0040e6f6
jmp 0x4116f0
lea eax, [ebp - 0x84]
lea ecx, [ebp - 0x24]
push eax
call fcn.0040725f
lea eax, [ebp - 0x24]
push eax
call fcn.0040d899
push str.__T_
lea ecx, [ebp - 0xc]
call fcn.0040aebd
lea eax, [ebp - 0x24]
lea ecx, [ebp - 0x30]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004102eb
push dword [ebp - 0xc]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x24]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
pop ecx
push 0x418458
lea ecx, [ebp - 0xc]
call fcn.0040aebd
lea eax, [ebp - 0x84]
lea ecx, [ebp - 0x30]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004102eb
push dword [ebp - 0xc]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
cmp dword [ebp - 0x14], esi
pop ecx
je 0x4117d1
push 0x20
lea ecx, [ebp - 0x30]
call fcn.00406d85
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x30]
push eax
call fcn.0040be94
lea eax, [ebp - 0x30]
mov dword [ebp - 0xf8], 0x44
push eax
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0xf4], esi
mov dword [ebp - 0xf0], esi
mov dword [ebp - 0xec], esi
mov dword [ebp - 0xcc], esi
mov word [ebp - 0xc6], si
mov dword [ebp - 0xc4], esi
call fcn.00411968
push eax
push 0x418454
lea ecx, [ebp - 0xac]
call fcn.0040ce9d
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.0040d019
push dword [ebp - 0xac]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0xc]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
lea eax, [ebp - 0x94]
pop ecx
push eax
lea eax, [ebp - 0xf8]
push eax
push esi
push esi
push esi
push esi
push esi
push esi
push dword [ebp - 0x24]
push esi
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x4118d1
push esi
call fcn.0040e793
push dword [ebp - 0x24]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
push dword [ebp - 0xa0]
call edi
push dword [ebp - 0xa0]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x84]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
pop ecx
lea ecx, [ebp - 0x78]
call fcn.0040ce60
push dword [ebp - 0x74]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x30]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x48]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x3c]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x18]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x54]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
add esp, 0x18
push 1
pop eax
jmp 0x411961
push dword [ebp - 0x90]
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
call ebx
push dword [ebp - 0x24]
mov edi, dword [ebp - 0x94]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
cmp edi, esi
pop ecx
je 0x4118fe
push 0xffffffffffffffff
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push edi
call ebx
push dword [ebp - 0xa0]
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
push dword [ebp - 0xa0]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
push dword [ebp - 0x84]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
lea ecx, [ebp - 0x78]
call fcn.0040ce60
push dword [ebp - 0x74]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x30]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
pop ecx
push dword [ebp - 0x48]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x3c]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x18]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x54]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
add esp, 0x10
mov eax, esi
pop edi
pop esi
pop ebx
leave
ret 0x10