Function at 0x4183f0
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xeb8
mov eax, dword [0x458320]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov dword [ebp - 8], ecx
push 0x20a
push 0
lea eax, [ebp - 0x214]
push eax
call fcn.004266b0
add esp, 0xc
push 0x104
lea eax, [ebp - 0x214]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x418aa4
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
lea ecx, [ebp - 0x218]
call fcn.00401860
lea ecx, [ebp - 0x218]
call fcn.00401e30
test eax, eax
je 0x418a99
lea ecx, [ebp - 0x218]
call fcn.00401930
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveExtensionW]
push 4
push 0
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x218]
call fcn.00419180
push str.Inst
lea ecx, [ebp - 0x21c]
call fcn.00418d60
test eax, eax
je 0x4185dd
mov dword [ebp - 0x220], 0
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0
je 0x4185dd
cmp dword [ebp - 0x220], 2
jne 0x4185dd
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x228]
call fcn.00401860
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax + 4]
push ecx
lea ecx, [ebp - 0x22c]
call fcn.00401860
lea ecx, [ebp - 0x22c]
call fcn.00419270
movzx eax, al
test eax, eax
jne 0x4185ba
push 0
push 0x44e560
lea ecx, [ebp - 0x22c]
call fcn.00418fb0
test eax, eax
jl 0x418544
mov eax, dword [ebp - 8]
mov dword [eax + 0x28], 1
push 0
push 0x44e55c
lea ecx, [ebp - 0x22c]
call fcn.00418fb0
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jl 0x4185ba
mov eax, dword [ebp - 0x230]
add eax, 1
push eax
lea ecx, [ebp - 0x234]
push ecx
lea ecx, [ebp - 0x22c]
call fcn.00419140
push 0x20
lea ecx, [ebp - 0x234]
call fcn.00419080
lea ecx, [ebp - 0x234]
call fcn.00401e30
test eax, eax
je 0x4185af
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x218]
call fcn.00418d30
lea ecx, [ebp - 0x234]
call fcn.00401910
mov eax, dword [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea ecx, [ebp - 0x22c]
call fcn.00401910
lea ecx, [ebp - 0x228]
call fcn.00401910
push 0x44e558
push 0x44e550
lea ecx, [ebp - 0x218]
call fcn.00418dc0
push 0x208
push 0
lea eax, [ebp - 0x43c]
push eax
call fcn.004266b0
add esp, 0xc
push 0x208
push 0
lea eax, [ebp - 0x644]
push eax
call fcn.004266b0
add esp, 0xc
push 0x208
push 0
lea eax, [ebp - 0x84c]
push eax
call fcn.004266b0
add esp, 0xc
push 0x208
push 0
lea eax, [ebp - 0xa54]
push eax
call fcn.004266b0
add esp, 0xc
mov eax, dword [ebp - 8]
mov dword [eax + 0x24], 0
mov eax, dword [ebp - 8]
add eax, 0x24
push eax
push 0x104
lea ecx, [ebp - 0xa54]
push ecx
push 0x104
lea edx, [ebp - 0x644]
push edx
push 0x104
lea eax, [ebp - 0x84c]
push eax
mov ecx, dword [ebp - 8]
push ecx
push 0x104
lea edx, [ebp - 0x43c]
push edx
push str._s__d__s__s__s__d
lea ecx, [ebp - 0x218]
call fcn.00401930
push eax
call fcn.00426659
add esp, 0x30
mov dword [ebp - 0xa58], eax
lea eax, [ebp - 0x43c]
mov dword [ebp - 0xa5c], eax
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
test ecx, ecx
je 0x418799
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x31
jne 0x4186e8
mov eax, dword [ebp - 8]
mov dword [eax + 8], 1
jmp 0x418785
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x32
jne 0x418705
mov eax, dword [ebp - 8]
mov dword [eax + 0xc], 1
jmp 0x418785
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x33
jne 0x41871f
mov eax, dword [ebp - 8]
mov dword [eax + 0x10], 1
jmp 0x418785
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x34
jne 0x418739
mov eax, dword [ebp - 8]
mov dword [eax + 0x14], 1
jmp 0x418785
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x35
jne 0x418753
mov eax, dword [ebp - 8]
mov dword [eax + 0x18], 1
jmp 0x418785
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x36
jne 0x41876d
mov eax, dword [ebp - 8]
mov dword [eax + 0x1c], 1
jmp 0x418785
mov eax, dword [ebp - 0xa5c]
movzx ecx, word [eax]
cmp ecx, 0x37
jne 0x418785
mov eax, dword [ebp - 8]
mov dword [eax + 0x20], 1
mov eax, dword [ebp - 0xa5c]
add eax, 2
mov dword [ebp - 0xa5c], eax
jmp 0x4186ba
mov eax, dword [ebp - 8]
cmp dword [eax + 8], 0
jne 0x4187e2
mov eax, dword [ebp - 8]
cmp dword [eax + 0xc], 0
jne 0x4187e2
mov eax, dword [ebp - 8]
cmp dword [eax + 0x10], 0
jne 0x4187e2
mov eax, dword [ebp - 8]
cmp dword [eax + 0x14], 0
jne 0x4187e2
mov eax, dword [ebp - 8]
cmp dword [eax + 0x18], 0
jne 0x4187e2
mov eax, dword [ebp - 8]
cmp dword [eax + 0x1c], 0
jne 0x4187e2
mov eax, dword [ebp - 8]
cmp dword [eax + 0x20], 0
jne 0x4187e2
mov eax, dword [ebp - 8]
mov dword [eax + 8], 1
xor eax, eax
mov word [ebp - 0xa4c], ax
cmp dword [ebp - 0xa58], 3
jne 0x4188c2
lea eax, [ebp - 0x84c]
mov dword [ebp - 0xa60], eax
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
test ecx, ecx
je 0x418888
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x41
jl 0x41882d
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x5a
jle 0x418865
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x61
jl 0x418849
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x7a
jle 0x418865
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x30
jl 0x418876
mov eax, dword [ebp - 0xa60]
movzx ecx, word [eax]
cmp ecx, 0x39
jg 0x418876
mov eax, dword [ebp - 0xa60]
add eax, 2
mov dword [ebp - 0xa60], eax
jmp 0x418883
xor eax, eax
mov ecx, dword [ebp - 0xa60]
mov word [ecx], ax
jmp 0x418888
jmp 0x418804
lea eax, [ebp - 0x84c]
push eax
call fcn.0042658a
add esp, 4
mov dword [ebp - 0xa64], eax
mov eax, dword [ebp - 0xa64]
cdq
sub eax, edx
sar eax, 1
shl eax, 1
cmp dword [ebp - 0xa64], eax
je 0x4188c2
xor eax, eax
mov ecx, dword [ebp - 0xa64]
mov word [ebp + ecx*2 - 0x84e], ax
push 0x208
push 0
lea eax, [ebp - 0xc6c]
push eax
call fcn.004266b0
add esp, 0xc
push 0x104
lea eax, [ebp - 0xc6c]
push eax
lea ecx, [ebp - 0x84c]
push ecx
call fcn.0042658a
add esp, 4
push eax
lea edx, [ebp - 0x84c]
push edx
mov ecx, dword [ebp - 8]
call fcn.00418ac0
test eax, eax
jne 0x418910
xor eax, eax
mov word [ebp - 0xc6c], ax
movzx eax, word [ebp - 0x644]
test eax, eax
jne 0x41895f
movzx eax, word [ebp - 0xc6c]
test eax, eax
je 0x41894a
push str.https:__hao.360.cn_
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.004019a0
lea eax, [ebp - 0xc6c]
push eax
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.00419240
jmp 0x41895a
push str.https:__hao.360.cn__installer
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.004019a0
jmp 0x418a8e
lea eax, [ebp - 0x644]
mov dword [ebp - 0xc70], eax
mov eax, dword [ebp - 0xc70]
movzx ecx, word [eax]
cmp ecx, 0x68
je 0x418987
mov eax, dword [ebp - 0xc70]
movzx ecx, word [eax]
cmp ecx, 0x48
jne 0x418996
mov eax, dword [ebp - 0xc70]
add eax, 2
mov dword [ebp - 0xc70], eax
push 0x208
push 0
lea eax, [ebp - 0xe78]
push eax
call fcn.004266b0
add esp, 0xc
push 0x104
lea eax, [ebp - 0xe78]
push eax
mov ecx, dword [ebp - 0xc70]
push ecx
call fcn.0042658a
add esp, 4
push eax
mov edx, dword [ebp - 0xc70]
push edx
mov ecx, dword [ebp - 8]
call fcn.00418ac0
test eax, eax
je 0x418a21
mov eax, dword [ebp - 0xc70]
lea ecx, [ebp - 0x644]
cmp eax, ecx
jne 0x4189fd
push str.http:__
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.004019a0
jmp 0x418a0d
push str.https:__
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.004019a0
lea eax, [ebp - 0xe78]
push eax
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.00419240
jmp 0x418a31
push str.https:__hao.360.cn
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.004019a0
push 0x4531e4
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.00419240
movzx eax, word [ebp - 0xc6c]
test eax, eax
je 0x418a5e
lea eax, [ebp - 0xc6c]
push eax
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.00419240
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.00419030
lea eax, [ebp - 0xa54]
push eax
mov ecx, dword [ebp - 8]
call fcn.00418c60
test eax, eax
je 0x418a7e
jmp 0x418a8e
push str.https:__hao.360.cn__installer
mov ecx, dword [ebp - 8]
add ecx, 4
call fcn.004019a0
lea ecx, [ebp - 0x21c]
call fcn.00401910
lea ecx, [ebp - 0x218]
call fcn.00401910
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0042669e
mov esp, ebp
pop ebp
ret