Function at 0x410285
Capabilities:
Accept command line arguments
Check os version
Create process on windows
Set current directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x204
mov eax, dword [ebp + 8]
push ebx
mov dword [0x421768], eax
push esi
lea eax, [ebp - 0x204]
push edi
push eax
mov dword [ebp - 0x204], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
xor ebx, ebx
test eax, eax
jne 0x4102ba
xor al, al
jmp 0x4102c4
cmp dword [ebp - 0x1f4], 2
sete al
mov byte [0x42176c], al
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push 0xf
lea ecx, [ebp - 0xe8]
pop edi
mov dword [ebp - 0xe8], ebx
push edi
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], ebx
call fcn.00406077
push edi
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
call fcn.00406077
push edi
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], ebx
call fcn.00406077
push edi
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ebx
call fcn.00406077
mov esi, dword [sym.imp.KERNEL32.dll_GetCommandLineW]
call esi
push eax
lea ecx, [ebp - 0x28]
call fcn.00408dd9
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00408b7b
push dword [ebp - 0x28]
call fcn.0040966b
pop ecx
mov dword [ebp - 0xc0], ebx
push edi
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], ebx
call fcn.00406077
lea eax, [ebp - 0xc0]
push eax
push dword [0x421768]
call fcn.0040a156
lea ecx, [ebp - 0x1c]
call fcn.00409096
lea ecx, [ebp - 0x1c]
call fcn.0040905b
push 0x41eb6c
lea ecx, [ebp - 0x28]
mov byte [ebp + 0xb], bl
call fcn.00408dd9
mov edi, eax
lea eax, [ebp - 0x10]
push 2
push eax
lea ecx, [ebp - 0x1c]
call fcn.00408f73
push dword [edi]
push dword [eax]
call fcn.004093c0
push dword [ebp - 0x10]
mov edi, eax
call fcn.0040966b
push dword [ebp - 0x28]
call fcn.0040966b
pop ecx
cmp edi, ebx
pop ecx
jne 0x410421
lea eax, [ebp - 0x10]
push 2
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp + 0xb], 1
call fcn.00408ea3
push eax
lea ecx, [ebp - 0x1c]
call fcn.00408e3a
push dword [ebp - 0x10]
call fcn.0040966b
pop ecx
lea ecx, [ebp - 0x1c]
call fcn.00409096
lea ecx, [ebp - 0x1c]
call fcn.0040905b
mov edi, 0x41eb64
lea ecx, [ebp - 0xf4]
push edi
call fcn.00408dd9
lea ecx, [ebp - 0x3c]
call fcn.00402346
mov dword [ebp - 0x3c], 0x419530
call esi
push eax
lea ecx, [ebp - 0x28]
call fcn.00408dd9
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00408c1e
push dword [ebp - 0x28]
call fcn.0040966b
pop ecx
mov byte [ebp - 2], bl
push 1
mov byte [ebp - 0x80], 1
pop eax
cmp dword [ebp - 0x34], eax
mov dword [ebp - 0x84], eax
jle 0x410505
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x84]
push 2
mov esi, dword [eax + ecx*4]
lea eax, [ebp - 0x10]
push eax
mov ecx, esi
call fcn.00408f73
push 0x41eb5c
push dword [eax]
call fcn.004093c0
push dword [ebp - 0x10]
mov dword [ebp - 0xdc], eax
call fcn.0040966b
cmp dword [ebp - 0xdc], ebx
pop ecx
jne 0x4104f0
lea eax, [ebp - 0x28]
push 2
push eax
mov ecx, esi
call fcn.00408ea3
push eax
lea ecx, [ebp - 0xf4]
call fcn.00408e3a
push dword [ebp - 0x28]
call fcn.0040966b
pop ecx
lea eax, [ebp - 0xf4]
push eax
call fcn.0040b90a
mov byte [ebp + 0xb], 1
mov byte [ebp - 0x80], bl
mov byte [ebp - 2], 1
inc dword [ebp - 0x84]
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x34]
jl 0x41047b
call fcn.004112b0
test al, al
jne 0x41053d
cmp byte [ebp + 0xb], bl
jne 0x41051e
push str.You_are_trying_to_start_the_setup_on_a_Windows_operating_system__that_unfortunately_does_not_support_all_functions_required_for_correct_operation_of_the_product._The_installation_cannot_continue._The_supported_operating_systems_are_Windows_2000_SP4__Update_Rollup_Pack_and_higher.
push ebx
call fcn.0040d0ba
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0x419530
call fcn.004094cc
lea ecx, [ebp - 0x3c]
call fcn.004094a8
push 1
pop ebx
jmp 0x41104e
push 0xf
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
call fcn.00409455
lea eax, [ebp - 0x60]
push eax
push str.___InstallEnd__
push str.___Install__UTF_8_
push dword [ebp - 0xc0]
call fcn.00411129
test al, al
jne 0x410588
cmp byte [ebp + 0xb], bl
jne 0x41057d
push str.Unable_to_extract_the_setup_contents._If_you_want_to_continue_the_setup_or_update_process__make_sure_you_have_the_Administrator_rights.__cant_load_config_info_
push ebx
call fcn.0040d0ba
push dword [ebp - 0x60]
call fcn.0040966b
pop ecx
jmp 0x41051e
push edi
lea ecx, [ebp - 0x9c]
call fcn.00408dd9
push 0xf
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
call fcn.00406077
cmp dword [ebp - 0x5c], ebx
je 0x41088b
lea ecx, [ebp - 0x108]
call fcn.00402346
lea eax, [ebp - 0x108]
mov edi, 0x419948
push eax
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x108], edi
call fcn.00409807
test al, al
jne 0x4105f2
cmp byte [ebp + 0xb], bl
jne 0x4105ea
push str.Config_failed
push ebx
call fcn.0040d0ba
push 1
pop ebx
jmp 0x410715
push str.Title
lea ecx, [ebp - 0x10]
call fcn.00408dd9
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00409b44
push dword [ebp - 0x10]
call fcn.0040966b
lea ecx, [ebp - 0x10]
mov dword [esp], str.BeginPrompt
call fcn.00408dd9
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00409b44
push dword [ebp - 0x10]
call fcn.0040966b
lea ecx, [ebp - 0x10]
mov dword [esp], 0x41e790
call fcn.00408dd9
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.00409b44
push dword [ebp - 0x10]
call fcn.0040966b
mov dword [esp], 0x41e788
push dword [ebp - 0x114]
call fcn.004093c0
test eax, eax
jne 0x41068d
mov byte [ebp - 0x80], bl
push str.Directory
lea ecx, [ebp - 0x10]
call fcn.00408dd9
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.00409b0e
push dword [ebp - 0x10]
mov esi, eax
call fcn.0040966b
cmp esi, ebx
pop ecx
jl 0x4106d1
mov eax, dword [ebp - 0xfc]
lea ecx, [ebp - 0x9c]
mov eax, dword [eax + esi*4]
add eax, 0xc
push eax
call fcn.00408e3a
cmp dword [ebp - 0x50], ebx
je 0x41076b
cmp byte [ebp + 0xb], bl
jne 0x41076b
push 0x24
push dword [ebp - 0x28]
push dword [ebp - 0x54]
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
je 0x41076b
push dword [ebp - 0x114]
call fcn.0040966b
push dword [ebp - 0x54]
call fcn.0040966b
push dword [ebp - 0x28]
call fcn.0040966b
add esp, 0xc
lea ecx, [ebp - 0x108]
mov dword [ebp - 0x108], edi
call fcn.004094cc
lea ecx, [ebp - 0x108]
call fcn.004094a8
push dword [ebp - 0x48]
call fcn.0040966b
push dword [ebp - 0x9c]
call fcn.0040966b
push dword [ebp - 0x60]
call fcn.0040966b
add esp, 0xc
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0x419530
call fcn.004094cc
lea ecx, [ebp - 0x3c]
call fcn.004094a8
jmp 0x41104e
push str.RunProgram
lea ecx, [ebp - 0x10]
call fcn.00408dd9
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.00409b44
push eax
lea ecx, [ebp - 0x48]
call fcn.00408e3a
push dword [ebp - 0x120]
call fcn.0040966b
push dword [ebp - 0x10]
call fcn.0040966b
pop ecx
pop ecx
push str.ExecuteFile
lea ecx, [ebp - 0x10]
call fcn.00408dd9
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.00409b44
push eax
lea ecx, [ebp - 0x90]
call fcn.00408e3a
push dword [ebp - 0x120]
call fcn.0040966b
push dword [ebp - 0x10]
call fcn.0040966b
pop ecx
pop ecx
push str.ExecuteParameters
lea ecx, [ebp - 0x10]
call fcn.00408dd9
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00409b44
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.0040b0a3
push eax
lea ecx, [ebp - 0xb4]
call fcn.00408e3a
push dword [ebp - 0x120]
call fcn.0040966b
push dword [ebp - 0xcc]
call fcn.0040966b
push dword [ebp - 0x10]
call fcn.0040966b
push dword [ebp - 0x114]
call fcn.0040966b
push dword [ebp - 0x54]
call fcn.0040966b
push dword [ebp - 0x28]
call fcn.0040966b
add esp, 0x18
lea ecx, [ebp - 0x108]
mov dword [ebp - 0x108], edi
call fcn.004094cc
lea ecx, [ebp - 0x108]
call fcn.004094a8
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0xa8]
push eax
call fcn.004060d0
push dword [ebp - 0xa8]
call fcn.004092d3
push str._hide
lea ecx, [ebp - 0x28]
call fcn.00408dd9
lea eax, [ebp - 0x28]
push ebx
push eax
lea ecx, [ebp - 0xa8]
call fcn.00408ff5
cmp eax, 0xffffffff
jne 0x4108fc
push str._script_file
lea ecx, [ebp - 0x10]
call fcn.00408dd9
lea eax, [ebp - 0x10]
push ebx
push eax
lea ecx, [ebp - 0xa8]
call fcn.00408ff5
push dword [ebp - 0x10]
cmp eax, 0xffffffff
setne byte [ebp - 1]
call fcn.0040966b
cmp byte [ebp - 1], bl
pop ecx
mov byte [ebp - 1], bl
je 0x410900
mov byte [ebp - 1], 1
push dword [ebp - 0x28]
call fcn.0040966b
cmp byte [ebp - 1], bl
pop ecx
je 0x410911
mov byte [ebp - 0x80], bl
lea ecx, [ebp - 0x78]
mov byte [ebp - 0x7c], bl
call fcn.0040aeec
push dword [0x41e468]
lea ecx, [ebp - 0x7c]
call fcn.0040aeac
test al, al
jne 0x410947
cmp byte [ebp + 0xb], bl
jne 0x410b79
push str.Unable_to_extract_the_setup_contents._If_you_want_to_continue_the_setup_or_update_process__make_sure_you_have_the_Administrator_rights.__can_not_create_temp_folder_archive_
push ebx
call fcn.0040d0ba
jmp 0x410b79
push 0x1c
call fcn.00409645
mov esi, eax
pop ecx
cmp esi, ebx
je 0x41096a
lea ecx, [esi + 8]
mov dword [esi + 4], ebx
call fcn.004112f3
mov dword [esi], 0x41993c
mov edi, esi
jmp 0x41096c
xor edi, edi
cmp edi, ebx
je 0x410976
mov eax, dword [edi]
push edi
call dword [eax + 4]
mov ecx, edi
call fcn.0040da65
test eax, eax
je 0x410991
push str.Can_not_load_codecs
push ebx
call fcn.0040d0ba
jmp 0x410b6f
push 0xf
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x128], ebx
mov dword [ebp - 0x12c], 0x419930
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
call fcn.00406077
cmp byte [ebp - 2], bl
je 0x4109ca
lea eax, [ebp - 0xf4]
lea ecx, [ebp - 0x6c]
push eax
call fcn.00408e3a
jmp 0x4109ef
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040a3b5
push eax
lea ecx, [ebp - 0x6c]
call fcn.00408e3a
push dword [ebp - 0xcc]
call fcn.0040966b
pop ecx
push 0xf
lea ecx, [ebp - 0x54]
mov byte [ebp - 1], bl
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], ebx
call fcn.00406077
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 1]
push eax
lea eax, [ebp - 0x12c]
push dword [ebp - 0x80]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0xc0]
push eax
push edi
call fcn.0040faee
cmp eax, ebx
je 0x410acd
cmp byte [ebp + 0xb], bl
jne 0x410ac5
cmp eax, 1
je 0x410a43
cmp byte [ebp - 1], bl
je 0x410a6b
lea eax, [ebp - 0xcc]
push 8
push eax
call fcn.0040bc2a
push eax
lea ecx, [ebp - 0x54]
call fcn.00408e3a
push dword [ebp - 0xcc]
call fcn.0040966b
pop ecx
mov eax, 0x80004005
cmp eax, 0x80004004
je 0x410ac5
cmp dword [ebp - 0x50], ebx
push 7
jne 0x410a9e
lea eax, [ebp - 0xcc]
push eax
call fcn.0040bc2a
mov eax, dword [eax]
push 0x10
push eax
push str.Unknown_extraction_error__probably_out_of_memory_
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
push dword [ebp - 0xcc]
jmp 0x410abf
lea eax, [ebp - 0xcc]
push eax
call fcn.0040bc2a
mov eax, dword [eax]
push 0x10
push eax
push dword [ebp - 0x54]
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
push dword [ebp - 0xcc]
call fcn.0040966b
pop ecx
push dword [ebp - 0x54]
jmp 0x410e2c
push dword [ebp - 0x54]
call fcn.0040966b
cmp byte [ebp - 2], bl
pop ecx
je 0x410b2c
push dword [ebp - 0x6c]
call fcn.0040966b
cmp edi, ebx
pop ecx
je 0x410aee
mov eax, dword [edi]
push edi
call dword [eax + 8]
lea ecx, [ebp - 0x7c]
call fcn.0040aec7
push dword [ebp - 0x78]
call fcn.0040966b
push dword [ebp - 0xa8]
call fcn.0040966b
push dword [ebp - 0x48]
call fcn.0040966b
push dword [ebp - 0x9c]
call fcn.0040966b
push dword [ebp - 0x60]
call fcn.0040966b
add esp, 0x14
jmp 0x41074f
lea ecx, [ebp - 0xd8]
call fcn.0040aeec
lea eax, [ebp - 0xd8]
push eax
call fcn.0040ac14
push dword [ebp - 0x78]
mov esi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
call esi
test eax, eax
jne 0x410bb7
push dword [ebp - 0xd8]
call esi
push dword [ebp - 0xd8]
call fcn.0040966b
push dword [ebp - 0x6c]
call fcn.0040966b
pop ecx
pop ecx
cmp edi, ebx
je 0x410b79
mov eax, dword [edi]
push edi
call dword [eax + 8]
lea ecx, [ebp - 0x7c]
call fcn.0040aec7
push dword [ebp - 0x78]
call fcn.0040966b
push dword [ebp - 0xa8]
call fcn.0040966b
push dword [ebp - 0x48]
call fcn.0040966b
push dword [ebp - 0x9c]
call fcn.0040966b
push dword [ebp - 0x60]
call fcn.0040966b
add esp, 0x14
jmp 0x41051e
cmp dword [ebp - 0x8c], ebx
je 0x410c9e
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00409fef
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x18], ebx
mov dword [ebp - 0x168], 0x3c
mov dword [ebp - 0x164], 0x140
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x158], eax
je 0x410c10
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0xb4]
push eax
call fcn.00409eac
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00409fef
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x150], ebx
neg eax
sbb eax, eax
mov dword [ebp - 0x14c], 1
and eax, dword [ebp - 0x54]
mov dword [ebp - 0x130], ebx
mov dword [ebp - 0x154], eax
lea eax, [ebp - 0x168]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
cmp dword [ebp - 0x148], 0x20
ja 0x410c82
cmp byte [ebp + 0xb], bl
jne 0x410c6c
push str.Can_not_open_file
push ebx
call fcn.0040d0ba
push dword [ebp - 0x54]
call fcn.0040966b
push dword [ebp - 0x28]
call fcn.0040966b
pop ecx
jmp 0x410e1d
push dword [ebp - 0x54]
mov esi, dword [ebp - 0x130]
call fcn.0040966b
push dword [ebp - 0x28]
call fcn.0040966b
pop ecx
jmp 0x410efc
cmp dword [ebp - 0x44], ebx
jne 0x410cfa
push str.setup.exe
lea ecx, [ebp - 0x48]
call fcn.0040a224
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00409fef
push dword [eax]
call fcn.0040b4de
push dword [ebp - 0xcc]
neg al
sbb al, al
inc al
mov byte [ebp - 1], al
call fcn.0040966b
cmp byte [ebp - 1], bl
pop ecx
je 0x410cfa
cmp byte [ebp + 0xb], bl
jne 0x410e1e
push str.Can_not_find_setup.exe
push ebx
call fcn.0040d0ba
jmp 0x410e1e
lea eax, [ebp - 0x6c]
lea ecx, [ebp - 0x28]
push eax
call fcn.004060d0
lea eax, [ebp - 0x28]
push eax
call fcn.0040b90a
push str.__T_
lea ecx, [ebp - 0x10]
call fcn.00408dd9
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0040ee61
push dword [ebp - 0x10]
call fcn.0040966b
push dword [ebp - 0x28]
call fcn.0040966b
pop ecx
pop ecx
push 0x41e494
lea ecx, [ebp - 0x10]
call fcn.00408dd9
lea eax, [ebp - 0x6c]
lea ecx, [ebp - 0x48]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0040ee61
push dword [ebp - 0x10]
call fcn.0040966b
cmp dword [ebp - 0x18], ebx
pop ecx
je 0x410d7f
push 0x20
lea ecx, [ebp - 0x48]
call fcn.00408e78
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x48]
push eax
call fcn.00409eac
lea eax, [ebp - 0x48]
mov dword [ebp - 0x170], 0x44
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xcc]
push eax
mov dword [ebp - 0x16c], ebx
mov dword [ebp - 0x168], ebx
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x144], ebx
mov word [ebp - 0x13e], bx
mov dword [ebp - 0x13c], ebx
call fcn.0040b0a3
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.00409fef
push dword [ebp - 0xcc]
call fcn.0040966b
pop ecx
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x170]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push dword [ebp - 0x114]
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x410edf
cmp byte [ebp + 0xb], bl
jne 0x410e12
push ebx
call fcn.0040d157
push dword [ebp - 0x114]
call fcn.0040966b
pop ecx
push dword [ebp - 0xd8]
call esi
push dword [ebp - 0xd8]
call fcn.0040966b
push dword [ebp - 0x6c]
call fcn.0040966b
pop ecx
cmp edi, ebx
pop ecx
je 0x410e45
mov eax, dword [edi]
push edi
call dword [eax + 8]
lea ecx, [ebp - 0x7c]
call fcn.0040aec7
push dword [ebp - 0x78]
call fcn.0040966b
push dword [ebp - 0xa8]
call fcn.0040966b
push dword [ebp - 0x48]
call fcn.0040966b
push dword [ebp - 0x9c]
call fcn.0040966b
push dword [ebp - 0x60]
call fcn.0040966b
add esp, 0x14
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0x419530
call fcn.004094cc
lea ecx, [ebp - 0x3c]
call fcn.004094a8
push dword [ebp - 0xf4]
call fcn.0040966b
push dword [ebp - 0xc0]
call fcn.0040966b
push dword [ebp - 0xb4]
call fcn.0040966b
push dword [ebp - 0x90]
call fcn.0040966b
push dword [ebp - 0x1c]
call fcn.0040966b
push dword [ebp - 0xe8]
call fcn.0040966b
add esp, 0x18
push 1
pop eax
jmp 0x411092
push dword [ebp - 0x120]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x114]
mov esi, dword [ebp - 0x124]
call fcn.0040966b
cmp esi, ebx
pop ecx
je 0x410ff7
push 0xffffffffffffffff
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp + 8]
mov dword [ebp + 8], ebx
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
push esi
mov dword [ebp - 0xdc], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0xdc], ebx
je 0x410f54
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0xd8]
call fcn.0041129b
push dword [ebp - 0x6c]
call fcn.0040966b
cmp edi, ebx
pop ecx
je 0x410f75
mov eax, dword [edi]
push edi
call dword [eax + 8]
jmp 0x410f75
lea ecx, [ebp - 0xd8]
call fcn.0041129b
push dword [ebp - 0x6c]
call fcn.0040966b
cmp edi, ebx
pop ecx
je 0x410f72
mov eax, dword [edi]
push edi
call dword [eax + 8]
push 1
pop esi
lea ecx, [ebp - 0x7c]
call fcn.00411099
push dword [ebp - 0xa8]
call fcn.0040966b
push dword [ebp - 0x48]
call fcn.0040966b
push dword [ebp - 0x9c]
call fcn.0040966b
push dword [ebp - 0x60]
call fcn.0040966b
add esp, 0x10
lea ecx, [ebp - 0x3c]
call fcn.00408cf6
push dword [ebp - 0xf4]
call fcn.0040966b
push dword [ebp - 0xc0]
call fcn.0040966b
push dword [ebp - 0xb4]
call fcn.0040966b
push dword [ebp - 0x90]
call fcn.0040966b
push dword [ebp - 0x1c]
call fcn.0040966b
push dword [ebp - 0xe8]
call fcn.0040966b
add esp, 0x18
mov eax, esi
jmp 0x411092
lea ecx, [ebp - 0xd8]
call fcn.0041129b
push dword [ebp - 0x6c]
call fcn.0040966b
cmp edi, ebx
pop ecx
je 0x411015
mov eax, dword [edi]
push edi
call dword [eax + 8]
lea ecx, [ebp - 0x7c]
call fcn.00411099
push dword [ebp - 0xa8]
call fcn.0040966b
push dword [ebp - 0x48]
call fcn.0040966b
push dword [ebp - 0x9c]
call fcn.0040966b
push dword [ebp - 0x60]
call fcn.0040966b
add esp, 0x10
lea ecx, [ebp - 0x3c]
call fcn.00408cf6
push dword [ebp - 0xf4]
call fcn.0040966b
push dword [ebp - 0xc0]
call fcn.0040966b
push dword [ebp - 0xb4]
call fcn.0040966b
push dword [ebp - 0x90]
call fcn.0040966b
push dword [ebp - 0x1c]
call fcn.0040966b
push dword [ebp - 0xe8]
call fcn.0040966b
add esp, 0x18
mov eax, ebx
pop edi
pop esi
pop ebx
leave
ret 0x10