Function at 0x450710
Capabilities:
Access peb ldr_data
Get ntdll base address
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4c5a18
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x68
mov eax, dword [0x4f5b3c]
push esi
mov esi, ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x74], 0
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], eax
mov dword [esp + 4], eax
mov dword [esp + 0xc], eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x74], 4
call fcn.004af28a
lea ecx, [esp + 0x30]
mov byte [esp + 0x74], 5
call fcn.004af28a
lea ecx, [esp + 0x44]
mov byte [esp + 0x74], 6
call fcn.004af28a
push str.unstall.log
lea eax, [esp + 0xc]
push 0x4ff318
push eax
mov byte [esp + 0x80], 7
call fcn.004a9e68
mov eax, dword [eax]
lea ecx, [esp + 0x14]
push eax
mov byte [esp + 0x78], 8
call fcn.004a9d5c
lea ecx, [esp + 8]
mov byte [esp + 0x74], 7
call fcn.004a9c1f
lea ecx, [esi + 0x20]
push ecx
lea ecx, [esp + 0x14]
call fcn.004a9d0c
add esi, 0x1c
lea ecx, [esp + 0x18]
push esi
call fcn.004a9d0c
lea ecx, [esp + 0x10]
call fcn.00436630
mov edx, dword [esp + 0x14]
push 0
push 0
push edx
lea ecx, [esp + 0x64]
call fcn.004af2ff
test eax, eax
je 0x450ba5
mov eax, dword [esp + 0x18]
push 0
push 0
push eax
lea ecx, [esp + 0x50]
call fcn.004af2ff
test eax, eax
je 0x450ba5
mov ecx, dword [esp + 0x10]
push 0
push 0x1001
push ecx
lea ecx, [esp + 0x3c]
call fcn.004af2ff
test eax, eax
je 0x450ba5
push ebx
push 0x4fc5e4
lea ecx, [esp + 0x10]
call fcn.004a9c8d
push str.OVERWRITEFILE:_yes_n
lea ecx, [esp + 0x38]
mov byte [esp + 0x7c], 9
call fcn.004af472
lea edx, [esp + 8]
lea ecx, [esp + 0x5c]
push edx
call fcn.004af4e2
test eax, eax
je 0x450ace
push edi
lea ecx, [esp + 0xc]
call fcn.004a76eb
lea ecx, [esp + 0xc]
call fcn.004a777a
mov eax, dword [esp + 0xc]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x45089d
mov eax, dword [esp + 0x10]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x450ab7
push str.zch_
lea ecx, [esp + 0x14]
call fcn.004a9faf
jmp 0x450ab7
movsx ecx, byte [eax]
push ecx
call fcn.00476011
add esp, 4
test eax, eax
je 0x450963
mov edx, dword [esp + 0x10]
mov eax, dword [edx - 8]
test eax, eax
je 0x4508fb
lea eax, [esp + 0x10]
push 0x4eedbc
lea ecx, [esp + 0x28]
push eax
push ecx
call fcn.004a9e68
mov eax, dword [eax]
lea ecx, [esp + 0x38]
push eax
mov byte [esp + 0x80], 0xa
call fcn.004af472
lea ecx, [esp + 0x24]
mov byte [esp + 0x7c], 9
call fcn.004a9c1f
lea ecx, [esp + 0x10]
call fcn.004a9baa
lea edx, [esp + 0x28]
push 4
push edx
lea ecx, [esp + 0x14]
call fcn.004a70e4
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x80], 0xb
call fcn.004a9d0c
lea ecx, [esp + 0x28]
mov byte [esp + 0x7c], 9
call fcn.004a9c1f
lea eax, [esp + 0x2c]
push 7
push eax
lea ecx, [esp + 0x14]
call fcn.004a7219
mov eax, dword [eax]
push str.REBOOT:
push eax
call fcn.004751e6
add esp, 8
lea ecx, [esp + 0x2c]
test eax, eax
sete bl
call fcn.004a9c1f
test bl, bl
jne 0x450ab7
jmp 0x450971
push str.zch_
lea ecx, [esp + 0x14]
call fcn.004a9faf
push str.__UI
lea ecx, [esp + 0x10]
call fcn.004a7309
mov edi, eax
test edi, edi
jge 0x45099d
push str.__group
lea ecx, [esp + 0x10]
call fcn.004a7309
mov edi, eax
test edi, edi
jl 0x450a69
mov eax, dword [esp + 0xc]
lea esi, [edi + 2]
cmp esi, dword [eax - 8]
jge 0x4509f6
mov al, byte [esi + eax]
cmp al, 0x22
jne 0x4509c8
inc esi
lea ecx, [esp + 0xc]
push esi
push 0x4ee4f8
call fcn.004a7317
mov esi, eax
test esi, esi
jl 0x4509ef
jmp 0x4509e3
cmp al, 0x20
je 0x4509f6
cmp al, 0xa
je 0x4509f6
push esi
push str.zch
lea ecx, [esp + 0x14]
call fcn.004a7317
cmp eax, esi
je 0x4509f6
mov eax, dword [esp + 0xc]
inc esi
cmp esi, dword [eax - 8]
jl 0x4509a9
jmp 0x4509f6
mov ecx, dword [esp + 0xc]
mov esi, dword [ecx - 8]
mov edx, esi
lea eax, [esp + 0x30]
sub edx, edi
lea ecx, [esp + 0xc]
push edx
push edi
push eax
call fcn.004a7107
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x80], 0xc
call fcn.004a9d0c
lea ecx, [esp + 0x30]
mov byte [esp + 0x7c], 9
call fcn.004a9c1f
mov eax, dword [esp + 0xc]
cmp esi, dword [eax - 8]
jge 0x450a51
cmp byte [esi + eax], 0x20
jne 0x450a51
mov ecx, dword [esp + 0x14]
push 0x4ef0a0
push ecx
lea ecx, [esp + 0x14]
call fcn.004a6f81
jmp 0x450971
mov edx, dword [esp + 0x14]
push 0x4fc5e4
push edx
lea ecx, [esp + 0x14]
call fcn.004a6f81
jmp 0x450971
lea eax, [esp + 0x34]
push 0xb
push eax
lea ecx, [esp + 0x14]
call fcn.004a7219
mov eax, dword [eax]
push str.DEFAULTDIR:
push eax
call fcn.004751e6
add esp, 8
lea ecx, [esp + 0x34]
test eax, eax
sete bl
call fcn.004a9c1f
test bl, bl
je 0x450aa9
push str._noaskdrive__noaskdir
lea ecx, [esp + 0x10]
call fcn.004a9faf
lea ecx, [esp + 0xc]
push ecx
lea ecx, [esp + 0x14]
call fcn.004a9feb
lea edx, [esp + 0xc]
lea ecx, [esp + 0x60]
push edx
call fcn.004af4e2
test eax, eax
jne 0x45085e
pop edi
mov eax, dword [esp + 0xc]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x450b0c
lea ecx, [esp + 0xc]
push 0x4eedbc
lea edx, [esp + 0x34]
push ecx
push edx
call fcn.004a9e68
mov eax, dword [eax]
lea ecx, [esp + 0x34]
push eax
mov byte [esp + 0x7c], 0xd
call fcn.004af472
lea ecx, [esp + 0x30]
mov byte [esp + 0x78], 9
call fcn.004a9c1f
push str.________SAVED_UNINSTALL_CONFIG_________n
lea ecx, [esp + 0x38]
call fcn.004af472
lea eax, [esp + 8]
lea ecx, [esp + 0x48]
push eax
call fcn.004af4e2
test eax, eax
je 0x450b72
mov bl, 0xe
lea ecx, [esp + 8]
push 0x4eedbc
lea edx, [esp + 0x34]
push ecx
push edx
call fcn.004a9e68
mov eax, dword [eax]
lea ecx, [esp + 0x34]
push eax
mov byte [esp + 0x7c], bl
call fcn.004af472
lea ecx, [esp + 0x30]
mov byte [esp + 0x78], 9
call fcn.004a9c1f
lea eax, [esp + 8]
lea ecx, [esp + 0x48]
push eax
call fcn.004af4e2
test eax, eax
jne 0x450b2e
lea ecx, [esp + 0x5c]
call fcn.004af62f
lea ecx, [esp + 0x34]
call fcn.004af62f
lea ecx, [esp + 0x48]
call fcn.004af62f
lea ecx, [esp + 0x18]
call fcn.00436630
lea ecx, [esp + 0xc]
mov byte [esp + 0x78], 7
call fcn.004a9c1f
pop ebx
lea ecx, [esp + 0x44]
mov byte [esp + 0x74], 6
call fcn.004af2bc
lea ecx, [esp + 0x30]
mov byte [esp + 0x74], 5
call fcn.004af2bc
lea ecx, [esp + 0x58]
mov byte [esp + 0x74], 4
call fcn.004af2bc
lea ecx, [esp + 0xc]
mov byte [esp + 0x74], 3
call fcn.004a9c1f
lea ecx, [esp + 4]
mov byte [esp + 0x74], 2
call fcn.004a9c1f
lea ecx, [esp + 0x18]
mov byte [esp + 0x74], 1
call fcn.004a9c1f
lea ecx, [esp + 0x10]
mov byte [esp + 0x74], 0
call fcn.004a9c1f
lea ecx, [esp + 0x14]
mov dword [esp + 0x74], 0xffffffff
call fcn.004a9c1f
mov ecx, dword [esp + 0x6c]
pop esi
mov dword fs:[0], ecx
add esp, 0x74
ret