Function at 0x41c4a0
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x21c
mov eax, dword [0x47a42c]
xor eax, ebp
mov dword [ebp - 4], eax
push str.CheckRebootAtom
push str._ws__
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x218], 0
call fcn.00420880
add esp, 8
call fcn.00412dc0
cmp eax, 2
je 0x41c502
cmp eax, 3
je 0x41c502
xor eax, eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00428a27
mov esp, ebp
pop ebp
ret
push esi
push str.reboot_request_flag_is_detected
call fcn.00420880
push 0
push str.reboot_request_flag_found
push 1
push 0xe33
push 0x460280
call fcn.00418730
add esp, 0x18
lea eax, [ebp - 0x21c]
push eax
push 0x7e3
push dword [0x47c094]
call fcn.00419af0
test eax, eax
jns 0x41c564
push 0
push str.Failed_to_load_IDS_REBOOT_NEEDED2.
push eax
push 4
push 0xe36
push 0x460280
call fcn.004188c0
add esp, 0x18
jmp 0x41c71c
lea eax, [ebp - 0x214]
push eax
push dword [0x47c2b8]
call fcn.004264a0
mov ecx, dword [ebp - 0x214]
add esp, 8
test ecx, ecx
jne 0x41c5a0
lea eax, [ebp - 0x214]
push eax
push 0xc739
push dword [0x47c094]
call fcn.00419af0
mov ecx, dword [ebp - 0x214]
test eax, eax
jns 0x41c5c5
push 0
push str.Failed_to_load_product_name.
push eax
push 4
push 0xe39
push 0x460280
call fcn.004188c0
add esp, 0x18
jmp 0x41c71c
push ecx
push dword [ebp - 0x21c]
lea eax, [ebp - 0x218]
push eax
call fcn.004285e0
add esp, 0xc
test eax, eax
jns 0x41c604
push dword [ebp - 0x214]
push str.Failed_to_set_display_with_product_name:__S
push eax
push 4
push 0xe3c
push 0x460280
call fcn.004188c0
add esp, 0x18
jmp 0x41c71c
cmp dword [0x47bc5c], 0
je 0x41c703
push str.install_a_windows_service__so_the_installation_uninstallation_action_can_be_continued_after_reboot
call fcn.00420880
add esp, 4
push 0
push 2
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
push str.FortiClientInstallerService
call fcn.00417360
push 0x20a
mov esi, eax
lea eax, [ebp - 0x210]
push 0
push eax
call fcn.0042b800
add esp, 0x1c
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push str.InstallService___returned__d__err_d__cmd_s
lea eax, [ebp - 0x210]
push 0x104
push eax
call fcn.00410d00
lea eax, [ebp - 0x210]
push eax
call fcn.00420880
add esp, 0x1c
cmp dword [0x47bc64], 0
je 0x41c6a7
push str.this_is_a_scheduled_setup__reboot_now
call fcn.00420880
add esp, 4
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00422610
jmp 0x41c71c
push 1
push 0
push 0
push pe_nt_image_headers32
call fcn.00422af0
push str.prompt_logged_on_user_s__to_reboot
call fcn.00420880
push dword [ebp - 0x218]
push dword [ebp - 0x214]
call fcn.00416290
mov esi, eax
push esi
push str.PromptRebootW___returned__d
call fcn.00420880
add esp, 0x24
cmp esi, 1
jne 0x41c6ee
call fcn.00422610
jmp 0x41c71c
push 1
push 0
push 0
push 0x154
call fcn.00422af0
add esp, 0x10
jmp 0x41c71c
push 0x10010
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, dword [ebp - 0x218]
pop esi
test eax, eax
je 0x41c72d
push eax
call fcn.00428900
mov eax, dword [ebp - 0x21c]
test eax, eax
je 0x41c73d
push eax
call fcn.00428900
mov eax, dword [ebp - 0x214]
test eax, eax
je 0x41c74d
push eax
call fcn.00428900
mov ecx, dword [ebp - 4]
mov eax, 1
xor ecx, ebp
call fcn.00428a27
mov esp, ebp
pop ebp
ret