Function at 0x4183e0
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xeb8
mov eax, dword [0x458320]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov dword [ebp - 8], ecx
push 0x20a
push 0
lea eax, [ebp - 0x214]
push eax
call fcn.004263e0
add esp, 0xc
push 0x104
lea eax, [ebp - 0x214]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x418a6e
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
lea ecx, [ebp - 0x218]
call fcn.00401860
lea ecx, [ebp - 0x218]
call fcn.00401e30
test eax, eax
je 0x418a63
lea ecx, [ebp - 0x218]
call fcn.00401930
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveExtensionW]
push 4
push 0
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x218]
call fcn.00419140
push str.Inst
lea ecx, [ebp - 0x21c]
call fcn.00418d20
test eax, eax
je 0x4185cd
mov dword [ebp - 0x220], 0
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0
je 0x4185cd
cmp dword [ebp - 0x220], 2
jne 0x4185cd
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x228]
call fcn.00401860
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax + 4]
push ecx
lea ecx, [ebp - 0x22c]
call fcn.00401860
lea ecx, [ebp - 0x22c]
call fcn.00419230
movzx eax, al
test eax, eax
jne 0x4185aa
push 0
push 0x44e550
lea ecx, [ebp - 0x22c]
call fcn.00418f70
test eax, eax
jl 0x418534
mov eax, dword [ebp - 8]
mov dword [eax + 0x24], 1
push 0
push 0x44e54c
lea ecx, [ebp - 0x22c]
call fcn.00418f70
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jl 0x4185aa
mov eax, dword [ebp - 0x230]
add eax, 1
push eax
lea ecx, [ebp - 0x234]
push ecx
lea ecx, [ebp - 0x22c]
call fcn.00419100
push 0x20
lea ecx, [ebp - 0x234]
call fcn.00419040
lea ecx, [ebp - 0x234]
call fcn.00401e30
test eax, eax
je 0x41859f
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x218]
call fcn.00418cf0
lea ecx, [ebp - 0x234]
call fcn.00401910
mov eax, dword [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea ecx, [ebp - 0x22c]
call fcn.00401910
lea ecx, [ebp - 0x228]
call fcn.00401910
push 0x44e548
push 0x44e540
lea ecx, [ebp - 0x218]
call fcn.00418d80
push 0x208
push 0
lea eax, [ebp - 0x43c]
push eax
call fcn.004263e0
add esp, 0xc
push 0x208
push 0
lea eax, [ebp - 0x644]
push eax
call fcn.004263e0
add esp, 0xc
push 0x208
push 0
lea eax, [ebp - 0x84c]
push eax
call fcn.004263e0
add esp, 0xc
push 0x208
push 0
lea eax, [ebp - 0xa54]
push eax
call fcn.004263e0
add esp, 0xc
mov eax, dword [ebp - 8]
mov dword [eax + 0x20], 0
mov eax, dword [ebp - 8]
add eax, 0x20
push eax
push 0x104
lea ecx, [ebp - 0xa54]
push ecx
push 0x104
lea edx, [ebp - 0x644]
push edx
push 0x104
lea eax, [ebp - 0x84c]
push eax
mov ecx, dword [ebp - 8]
push ecx
push 0x104
lea edx, [ebp - 0x43c]
push edx
push str._s__d__s__s__s__d
lea ecx, [ebp - 0x218]
call fcn.00401930
push eax
call fcn.00426389
add esp, 0x30
mov dword [ebp - 0xa58], eax
lea eax, [ebp - 0x43c]
mov dword [ebp - 0xa5c], eax
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
test ecx, ecx
je 0x41876c
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x31
jne 0x4186d8
mov eax, dword [ebp - 8]
mov dword [eax + 8], 1
jmp 0x418758
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x32
jne 0x4186f2
mov eax, dword [ebp - 8]
mov dword [eax + 0xc], 1
jmp 0x418758
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x33
jne 0x41870c
mov eax, dword [ebp - 8]
mov dword [eax + 0x10], 1
jmp 0x418758
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x34
jne 0x418726
mov eax, dword [ebp - 8]
mov dword [eax + 0x14], 1
jmp 0x418758
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x35
jne 0x418740
mov eax, dword [ebp - 8]
mov dword [eax + 0x18], 1
jmp 0x418758
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x36
jne 0x418758
mov eax, dword [ebp - 8]
mov dword [eax + 0x1c], 1
mov eax, dword [ebp - 0xa5c]
add eax, 2
mov dword [ebp - 0xa5c], eax
jmp 0x4186aa
mov eax, dword [ebp - 8]
cmp dword [eax + 8], 0
jne 0x4187ac
mov eax, dword [ebp - 8]
cmp dword [eax + 0xc], 0
jne 0x4187ac
mov eax, dword [ebp - 8]
cmp dword [eax + 0x10], 0
jne 0x4187ac
mov eax, dword [ebp - 8]
cmp dword [eax + 0x14], 0
jne 0x4187ac
mov eax, dword [ebp - 8]
cmp dword [eax + 0x18], 0
jne 0x4187ac
mov eax, dword [ebp - 8]
cmp dword [eax + 0x1c], 0
jne 0x4187ac
mov eax, dword [ebp - 8]
mov dword [eax + 8], 1
xor eax, eax
mov word [ebp - 0xa4c], ax
cmp dword [ebp - 0xa58], 3
jne 0x41888c
lea eax, [ebp - 0x84c]
mov dword [ebp - 0xa60], eax
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
test ecx, ecx
je 0x418852
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x41
jl 0x4187f7
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x5a
jle 0x41882f
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x61
jl 0x418813
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x7a
jle 0x41882f
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x30
jl 0x418840
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x39
jg 0x418840
mov eax, dword [ebp - 0xa60]
add eax, 2
mov dword [ebp - 0xa60], eax
jmp 0x41884d
xor eax, eax
mov ecx, dword [ebp - 0xa60]
mov word [ecx], ax
jmp 0x418852
jmp 0x4187ce
lea eax, [ebp - 0x84c]
push eax
call fcn.004262ba
add esp, 4
mov dword [ebp - 0xa64], eax
mov eax, dword [ebp - 0xa64]
cdq
sub eax, edx
sar eax, 1
shl eax, 1
cmp dword [ebp - 0xa64], eax
je 0x41888c
xor eax, eax
mov ecx, dword [ebp - 0xa64]
mov word [ebp + ecx*2 - 0x84e], ax
push 0x208
push 0
lea eax, [ebp - 0xc6c]
push eax
call fcn.004263e0
add esp, 0xc
push 0x104
lea eax, [ebp - 0xc6c]
push eax
lea ecx, [ebp - 0x84c]
push ecx
call fcn.004262ba
add esp, 4
push eax
lea edx, [ebp - 0x84c]
push edx
mov ecx, dword [ebp - 8]
call fcn.00418a80
test eax, eax
jne 0x4188da
xor eax, eax
mov word [ebp - 0xc6c], ax
movzx eax, word [ebp - 0x644]
test eax, eax
jne 0x418929
movzx eax, word [ebp - 0xc6c]
test eax, eax
je 0x418914
push str.https:__hao.360.cn_
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.004019a0
lea eax, [ebp - 0xc6c]
push eax
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.00419200
jmp 0x418924
push str.https:__hao.360.cn__installer
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.004019a0
jmp 0x418a58
lea eax, [ebp - 0x644]
mov dword [ebp - 0xc70], eax
mov eax, dword [ebp - 0xc70]
movzx ecx, word [eax]
cmp ecx, 0x68
je 0x418951
mov eax, dword [ebp - 0xc70]
movzx ecx, word [eax]
cmp ecx, 0x48
jne 0x418960
mov eax, dword [ebp - 0xc70]
add eax, 2
mov dword [ebp - 0xc70], eax
push 0x208
push 0
lea eax, [ebp - 0xe78]
push eax
call fcn.004263e0
add esp, 0xc
push 0x104
lea eax, [ebp - 0xe78]
push eax
mov ecx, dword [ebp - 0xc70]
push ecx
call fcn.004262ba
add esp, 4
push eax
mov edx, dword [ebp - 0xc70]
push edx
mov ecx, dword [ebp - 8]
call fcn.00418a80
test eax, eax
je 0x4189eb
mov eax, dword [ebp - 0xc70]
lea ecx, [ebp - 0x644]
cmp eax, ecx
jne 0x4189c7
push str.http:__
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.004019a0
jmp 0x4189d7
push str.https:__
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.004019a0
lea eax, [ebp - 0xe78]
push eax
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.00419200
jmp 0x4189fb
push str.https:__hao.360.cn
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.004019a0
push 0x453194
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.00419200
movzx eax, word [ebp - 0xc6c]
test eax, eax
je 0x418a28
lea eax, [ebp - 0xc6c]
push eax
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.00419200
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.00418ff0
lea eax, [ebp - 0xa54]
push eax
mov ecx, dword [ebp - 8]
call fcn.00418c20
test eax, eax
je 0x418a48
jmp 0x418a58
push str.https:__hao.360.cn__installer
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.004019a0
lea ecx, [ebp - 0x21c]
call fcn.00401910
lea ecx, [ebp - 0x218]
call fcn.00401910
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004263ce
mov esp, ebp
pop ebp
ret