Function at 0x41323b
Capabilities:
Accept command line arguments

Disassembly:
push ebp
lea ebp, [esp - 0x1a8]
sub esp, 0x228
mov eax, dword [0x459310]
xor eax, ebp
mov dword [ebp + 0x1a4], eax
push ebx
push esi
mov esi, dword [ebp + 0x1b0]
push edi
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push 0x443d44
push 0x64
push esi
mov ebx, 0x4593c0
push 0x458830
mov ecx, ebx
mov dword [ebp - 0x7c], eax
call fcn.0040e41b
and dword [0x459614], 0
mov esi, 0x4464ac
lea edi, [ebp + 0x19c]
lea eax, [ebp + 0x19c]
movsd dword es:[edi], dword [esi]
push eax
push dword [ebp - 0x7c]
movsw word es:[edi], word [esi]
call fcn.0040e3d8
test eax, eax
pop ecx
pop ecx
mov dword [ebp - 0x74], eax
je 0x41336b
mov esi, dword [sym.imp.MSVCR80.dll__wcsnicmp]
mov edi, dword [sym.imp.MSVCR80.dll_wcslen]
push str.unregserver
call edi
push eax
push str.unregserver
push dword [ebp - 0x74]
call esi
add esp, 0x10
test eax, eax
je 0x413473
push str.unregsvr
call edi
push eax
push str.unregsvr
push dword [ebp - 0x74]
call esi
add esp, 0x10
test eax, eax
je 0x413473
push str.regserver
call edi
push eax
push str.regserver
push dword [ebp - 0x74]
call esi
add esp, 0x10
test eax, eax
je 0x413463
push str.regsvr
call edi
push eax
push str.regsvr
push dword [ebp - 0x74]
call esi
add esp, 0x10
test eax, eax
je 0x413463
push str.service
call edi
push eax
push str.service
push dword [ebp - 0x74]
call esi
add esp, 0x10
test eax, eax
je 0x4133f9
lea eax, [ebp + 0x19c]
push eax
push dword [ebp - 0x74]
call fcn.0040e3d8
test eax, eax
pop ecx
pop ecx
mov dword [ebp - 0x74], eax
jne 0x4132be
and dword [ebp - 0x74], 0
mov esi, 0x20019
push esi
push str.AppID
push SysReAllocString
lea ecx, [ebp - 0x74]
call fcn.0040d88f
mov edi, eax
test edi, edi
je 0x41347f
lea ecx, [ebp - 0x78]
call fcn.00419470
push 0x4593f0
lea eax, [ebp - 0x78]
push str._s_is_not_able_to_open_HKEY_CLASSES_ROOT.
push eax
call fcn.0041b950
add esp, 0xc
lea ecx, [ebp - 0x78]
call fcn.004195a0
push eax
push 1
push 0x2ff
push str..NBService.cpp
push ebx
call fcn.0040e4bd
add esp, 0x14
lea ecx, [ebp - 0x78]
call fcn.00419480
lea ecx, [ebp - 0x74]
call fcn.0040d82a
mov eax, edi
mov ecx, dword [ebp + 0x1a4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0043bc78
add ebp, 0x1a8
leave
ret 0x10
mov ecx, ebx
call fcn.0040f6e2
test eax, eax
je 0x413457
mov ecx, ebx
call fcn.0040e650
test eax, eax
je 0x413457
lea ecx, [ebp - 0x74]
call fcn.00419470
push 0x4593f0
lea eax, [ebp - 0x74]
push str._s_is_already_installed_and_running._Please_uninstall_before_installing_it_again.
push eax
call fcn.0041b950
add esp, 0xc
lea ecx, [ebp - 0x74]
call fcn.004195a0
push eax
push 3
push 0x2ed
push str..NBService.cpp
push ebx
call fcn.0040e4bd
add esp, 0x14
lea ecx, [ebp - 0x74]
call fcn.00419480
xor eax, eax
jmp 0x4133df
xor eax, eax
inc eax
push eax
mov dword [0x459614], eax
push eax
jmp 0x413467
push 0
push 1
mov ecx, ebx
call fcn.00412eda
jmp 0x4133df
mov ecx, ebx
call fcn.00413204
jmp 0x4133df
and dword [ebp - 0x7c], 0
push esi
push str.0B0A4A53_FEA7_4693_89EE_926A445E3A36
push dword [ebp - 0x74]
lea ecx, [ebp - 0x7c]
call fcn.0040d88f
mov esi, eax
test esi, esi
je 0x4134f5
lea ecx, [ebp - 0x78]
call fcn.00419470
push 0x4593f0
lea eax, [ebp - 0x78]
push str._s_is_not_able_to_open_registry.
push eax
call fcn.0041b950
add esp, 0xc
lea ecx, [ebp - 0x78]
call fcn.004195a0
push eax
push 1
push 0x309
push str..NBService.cpp
push ebx
call fcn.0040e4bd
add esp, 0x14
lea ecx, [ebp - 0x78]
call fcn.00419480
lea ecx, [ebp - 0x7c]
call fcn.0040d82a
lea ecx, [ebp - 0x74]
call fcn.0040d82a
mov eax, esi
jmp 0x4133df
and word [ebp - 0x70], 0
push 0x208
lea eax, [ebp - 0x6e]
push 0
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
lea eax, [ebp - 0x80]
push eax
push str.LocalService
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x80], 0x104
call fcn.0040d8c4
test eax, eax
jne 0x413537
mov dword [0x459614], 1
mov ecx, ebx
call fcn.004123e2
mov esi, dword [0x459600]
jmp 0x4134de