Function at 0x489b1d
Capabilities:
Access peb ldr_data
Get graphical window text
Get kernel32 base address
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x50b6b8
mov eax, dword fs:[0]
push eax
sub esp, 0x38
push ebx
push esi
push edi
mov eax, dword [0x5ff740]
xor eax, esp
push eax
lea eax, [esp + 0x48]
mov dword fs:[0], eax
mov edi, ecx
call fcn.0040a7b7
call fcn.004bf17c
fld qword [0x5d1230]
mov eax, dword [eax + 0xc]
push ecx
push ecx
fstp qword [esp]
push 0x1ac
push dword [edi + 0x20]
lea ecx, [edi + 0x2a0]
mov edx, eax
call fcn.0040c1ff
push 1
push 0x1b2
push 0x238
xor esi, esi
push esi
push esi
mov ecx, edi
call fcn.004bf3f0
push esi
mov ecx, edi
call fcn.004c1eef
call fcn.004bf17c
push 0x64
call fcn.00437107
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 1
mov esi, 0x80
push esi
push dword [edi + 0x20]
call ebx
call fcn.004bf17c
push 0x64
call fcn.00437107
push eax
push 0
push esi
push dword [edi + 0x20]
call ebx
mov esi, 0x5afd90
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
mov ebx, str.RESOURCESTRING
push ebx
call fcn.0040253b
and dword [esp + 0x58], 0
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push str.IDS_SUBMIT_FEEEDBACK
call fcn.0040253b
or dword [esp + 0x5c], 0xffffffff
lea eax, [esp + 0x30]
push eax
call fcn.00406ef3
mov dword [esp + 0x18], eax
push 0x5c1f60
mov dword [esp + 0x54], 1
call fcn.0040704e
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x50], 2
push dword [esp + 0x18]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.00402130
add esp, 0xc
mov byte [esp + 0x50], 3
push dword [eax]
mov ecx, edi
call fcn.004bf38e
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.0040285b
or dword [esp + 0x50], 0xffffffff
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.0040285b
call fcn.0048a434
lea ecx, [esp + 0x30]
call fcn.004c92aa
push esi
push ecx
mov dword [esp + 0x58], 4
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040253b
push ecx
mov byte [esp + 0x5c], 5
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x5c68c8
call fcn.0040253b
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x60], 4
call fcn.00406ef3
push eax
mov byte [esp + 0x54], 6
push dword [esp + 0x3c]
lea ecx, [esp + 0x38]
call fcn.004c96e8
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.0040285b
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040253b
push ecx
mov byte [esp + 0x5c], 7
mov ecx, esp
mov dword [esp + 0x34], esp
push str.IDS_BTN_CANCEL
call fcn.0040253b
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x60], 4
call fcn.00406ef3
push eax
mov byte [esp + 0x54], 8
push dword [esp + 0x3c]
lea ecx, [esp + 0x38]
call fcn.004c96e8
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.0040285b
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040253b
push ecx
mov byte [esp + 0x5c], 9
mov ecx, esp
mov dword [esp + 0x34], esp
push str.IDS_VIEW_ATTACHED_LOG
call fcn.0040253b
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x60], 4
call fcn.00406ef3
push eax
mov byte [esp + 0x54], 0xa
push dword [esp + 0x3c]
lea ecx, [esp + 0x38]
call fcn.004c96e8
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.0040285b
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040253b
push ecx
mov byte [esp + 0x5c], 0xb
mov ecx, esp
mov dword [esp + 0x34], esp
push str.IDS_PREVIEW_FEEDBACK
call fcn.0040253b
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x60], 4
call fcn.00406ef3
push eax
mov byte [esp + 0x54], 0xc
push dword [esp + 0x3c]
lea ecx, [esp + 0x38]
call fcn.004c96e8
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.0040285b
lea ecx, [edi + 0x39c]
test ecx, ecx
je 0x489e2f
cmp dword [ecx + 0x20], 0
je 0x489e2f
push 1
push 0x1c
push 0x78
push 0x186
push 0x1ab
call fcn.004bf3f0
cmp dword [esp + 0x38], 0
jg 0x489e1e
call fcn.004be614
mov eax, dword [esp + 0x34]
push dword [eax]
lea ecx, [edi + 0x39c]
call fcn.004bf38e
lea ecx, [edi + 0x56c]
test ecx, ecx
je 0x489e6d
cmp dword [ecx + 0x20], 0
je 0x489e6d
push 1
push 0x1c
push 0x78
push 0x186
push 0x12c
call fcn.004bf3f0
cmp dword [esp + 0x38], 1
jle 0x489e19
mov eax, dword [esp + 0x34]
push dword [eax + 4]
lea ecx, [edi + 0x56c]
call fcn.004bf38e
cmp dword [0x60a9dc], 0xb
push 0x23
pop eax
jne 0x489e7c
push 0x32
pop eax
lea ecx, [edi + 0x2b4]
test ecx, ecx
je 0x489ebd
cmp dword [ecx + 0x20], 0
je 0x489ebd
push 1
push 0x1c
add eax, 0x78
push eax
push 0x186
push 0x15
call fcn.004bf3f0
cmp dword [esp + 0x38], 3
jle 0x489e19
mov eax, dword [esp + 0x34]
push dword [eax + 0xc]
lea ecx, [edi + 0x2b4]
call fcn.004bf38e
lea ecx, [edi + 0x484]
test ecx, ecx
je 0x489f0c
cmp dword [ecx + 0x20], 0
je 0x489f0c
push 1
push 0x1c
push 0x78
push 0x186
push 0x94
call fcn.004bf3f0
cmp dword [esp + 0x38], 2
jle 0x489e19
mov eax, dword [esp + 0x34]
push dword [eax + 8]
lea ecx, [edi + 0x484]
call fcn.004bf38e
push 0
lea ecx, [edi + 0x484]
call fcn.004bf430
push 0x15e
mov ecx, edi
call fcn.004bf278
push 0x15f
mov ecx, edi
mov dword [edi + 0x65c], eax
call fcn.004bf278
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
mov dword [edi + 0x660], eax
call fcn.0040253b
push ecx
mov byte [esp + 0x5c], 0xd
mov ecx, esp
mov dword [esp + 0x34], esp
push str.IDS_YES
call fcn.0040253b
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x60], 4
call fcn.00406ef3
mov byte [esp + 0x50], 0xe
push dword [eax]
mov ecx, dword [edi + 0x65c]
call fcn.004bf38e
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.0040285b
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040253b
push ecx
mov byte [esp + 0x5c], 0xf
mov ecx, esp
mov dword [esp + 0x34], esp
push str.IDS_NO
call fcn.0040253b
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x60], 4
call fcn.00406ef3
mov byte [esp + 0x50], 0x10
push dword [eax]
mov ecx, dword [edi + 0x660]
call fcn.004bf38e
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.0040285b
mov eax, dword [edi + 0x65c]
push 0
push 1
push 0xf1
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [edi + 0x89c], 0
jle 0x48a008
lea ecx, [edi + 0x890]
call fcn.004cc93b
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040253b
push ecx
mov byte [esp + 0x5c], 0x11
mov ecx, esp
mov dword [esp + 0x34], esp
push str.IDS_SELECT_PRBTYPE
call fcn.0040253b
lea eax, [esp + 0x2c]
push eax
mov byte [esp + 0x60], 4
call fcn.00406ef3
mov byte [esp + 0x50], 0x12
mov eax, dword [eax]
lea ecx, [edi + 0x890]
push 0x5b0b80
mov dword [esp + 0x28], eax
call fcn.004ccb16
push dword [esp + 0x24]
mov ecx, eax
call fcn.00402719
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.0040285b
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040253b
push ecx
mov byte [esp + 0x5c], 0x13
mov ecx, esp
mov dword [esp + 0x34], esp
push str.IDS_ALLERRORFIXED
call fcn.0040253b
lea eax, [esp + 0x2c]
push eax
mov byte [esp + 0x60], 4
call fcn.00406ef3
mov byte [esp + 0x50], 0x14
mov eax, dword [eax]
push 0x5b0d34
lea ecx, [edi + 0x890]
mov dword [esp + 0x28], eax
call fcn.004ccb16
push dword [esp + 0x24]
mov ecx, eax
call fcn.00402719
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.0040285b
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040253b
push ecx
mov byte [esp + 0x5c], 0x15
mov ecx, esp
mov dword [esp + 0x34], esp
push str.IDS_PRB_DOWNLOADING
call fcn.0040253b
lea eax, [esp + 0x2c]
push eax
mov byte [esp + 0x60], 4
call fcn.00406ef3
mov byte [esp + 0x50], 0x16
mov eax, dword [eax]
push 0x5bfeac
lea ecx, [edi + 0x890]
mov dword [esp + 0x28], eax
call fcn.004ccb16
push dword [esp + 0x24]
mov ecx, eax
call fcn.00402719
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.0040285b
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040253b
push ecx
mov byte [esp + 0x5c], 0x17
mov ecx, esp
mov dword [esp + 0x34], esp
push str.IDS_PRB_INSTALLING
call fcn.0040253b
lea eax, [esp + 0x2c]
push eax
mov byte [esp + 0x60], 4
call fcn.00406ef3
mov byte [esp + 0x50], 0x18
mov eax, dword [eax]
push 0x5c385c
lea ecx, [edi + 0x890]
mov dword [esp + 0x28], eax
call fcn.004ccb16
push dword [esp + 0x24]
mov ecx, eax
call fcn.00402719
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.0040285b
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040253b
push ecx
mov byte [esp + 0x5c], 0x19
mov ecx, esp
mov dword [esp + 0x34], esp
push str.IDS_PRB_UNDERSTAND
call fcn.0040253b
lea eax, [esp + 0x2c]
push eax
mov byte [esp + 0x60], 4
call fcn.00406ef3
mov byte [esp + 0x50], 0x1a
mov eax, dword [eax]
push 0x5bfea0
lea ecx, [edi + 0x890]
mov dword [esp + 0x28], eax
call fcn.004ccb16
push dword [esp + 0x24]
mov ecx, eax
call fcn.00402719
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.0040285b
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040253b
push ecx
mov byte [esp + 0x5c], 0x1b
mov ecx, esp
mov dword [esp + 0x34], esp
push str.IDS_PRB_REGISTRING_PRODUCT
call fcn.0040253b
lea eax, [esp + 0x2c]
push eax
mov byte [esp + 0x60], 4
call fcn.00406ef3
mov byte [esp + 0x50], 0x1c
mov eax, dword [eax]
push str.597E4_A2_
lea ecx, [edi + 0x890]
mov dword [esp + 0x28], eax
call fcn.004ccb16
push dword [esp + 0x24]
mov ecx, eax
call fcn.00402719
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.0040285b
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040253b
push ecx
mov byte [esp + 0x5c], 0x1d
mov ecx, esp
mov dword [esp + 0x30], esp
push str.IDS_GENERAL_FEEDBACK
call fcn.0040253b
lea eax, [esp + 0x34]
push eax
mov byte [esp + 0x60], 4
call fcn.00406ef3
mov byte [esp + 0x50], 0x1e
mov ebx, dword [eax]
push str.6VC
lea ecx, [edi + 0x890]
call fcn.004ccb16
push ebx
mov ecx, eax
call fcn.00402719
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x28]
add ecx, 0xfffffff0
call fcn.0040285b
push esi
lea ecx, [esp + 0x18]
call fcn.0040253b
push esi
lea ecx, [esp + 0x14]
mov byte [esp + 0x54], 0x1f
call fcn.0040253b
mov byte [esp + 0x50], 0x20
mov eax, dword [edi + 0x89c]
xor ebx, ebx
cmp eax, ebx
jle 0x48a36f
xor esi, esi
cmp eax, ebx
jle 0x48a36f
lea ecx, [esp + 0x14]
call fcn.00402639
lea ecx, [esp + 0x10]
call fcn.00402639
push esi
lea eax, [esp + 0x18]
push 0x5b2754
push eax
call fcn.00402a1d
add esp, 0xc
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x18]
lea ecx, [edi + 0x890]
call fcn.004cc99a
push dword [esp + 0x10]
push esi
push 0x14a
push dword [edi + 0x7d4]
call dword [sym.imp.USER32.dll_SendMessageW]
inc esi
cmp esi, dword [edi + 0x89c]
jl 0x48a317
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push ebx
push ebx
push 0x14e
push dword [edi + 0x7d4]
call esi
lea ecx, [edi + 0x664]
push ebx
call fcn.004bf430
lea ecx, [edi + 0x6b8]
push ebx
call fcn.004bf430
lea ecx, [edi + 0x70c]
push ebx
call fcn.004bf430
push ebx
lea ecx, [edi + 0x664]
call fcn.004bf472
push ebx
lea ecx, [edi + 0x6b8]
call fcn.004bf472
push ebx
lea ecx, [edi + 0x70c]
call fcn.004bf472
push ebx
push 0x190
push 0xc5
push dword [edi + 0x780]
call esi
push 0x258
push ebx
push 0x435
push dword [edi + 0x828]
call esi
push edi
call fcn.0048be49
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.0040285b
or dword [esp + 0x50], 0xffffffff
lea ecx, [esp + 0x30]
call fcn.004c9586
xor eax, eax
inc eax
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret