Function at 0x44cc9b
Capabilities:
Accept command line arguments

Disassembly:
push 0x1c4
mov eax, 0x4740a5
call fcn.00459c76
mov esi, vtable.AdditionalParams.0
push 0x4a7e08
mov dword [ebp - 0x14c], 0x4a7e00
mov dword [0x4a7e00], esi
mov byte [0x4a7e04], 1
mov byte [0x4a7e05], 1
mov byte [0x4a7e06], 1
call fcn.0044c096
xor ebx, ebx
mov dword [ebp - 4], ebx
push 0x4a7e64
mov dword [0x4a7e00], 0x496818
mov dword [0x4a7e5c], esi
mov byte [0x4a7e60], 1
mov byte [0x4a7e61], 1
mov byte [0x4a7e62], 1
call fcn.0044c096
mov dword [0x4a7e5c], 0x496804
mov esi, 0x4a7ed0
mov dword [0x4a7ec0], ebx
mov dword [0x4a7ec8], ebx
mov byte [0x4a7ecc], 1
call fcn.0040de92
mov esi, 0x4a7eec
call fcn.0040de92
mov esi, 0x4a7f08
call fcn.0040de92
mov esi, 0x4a7f24
call fcn.0040de92
mov esi, 0x4a7f40
call fcn.0040de92
mov esi, 0x4a7f5c
call fcn.0040de92
mov edi, 0x47eef4
push edi
mov esi, 0x4a7f78
mov byte [ebp - 4], 7
call fcn.004095a2
push edi
mov esi, 0x4a7f94
mov byte [ebp - 4], 8
call fcn.004095a2
push edi
mov esi, 0x4a7fb0
mov byte [ebp - 4], 9
call fcn.004095a2
mov esi, 0x4a7fcc
call fcn.00409ed9
push str.Path
mov byte [ebp - 4], 0xb
push str.SystemCurrentControlSetControlSession_ManagerEnvironment
push reloc.WS2_32.dll_bind
lea ecx, [ebp - 0x16c]
mov byte [0x4a7fe8], bl
mov dword [0x4a7fec], ebx
call fcn.0040b91c
add esp, 0xc
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0xc
call fcn.0044ba07
push ebx
push 1
lea esi, [ebp - 0x16c]
mov byte [ebp - 4], 0xe
call fcn.004095f2
cmp dword [ebp - 0x18], 8
mov edx, dword [ebp - 0x2c]
jae 0x44cdff
lea edx, [ebp - 0x2c]
lea eax, [ebp - 0x188]
push eax
call fcn.004099a9
pop ecx
push 0xffffffffffffffff
push ebx
push eax
mov ecx, 0x4a7f5c
mov byte [ebp - 4], 0xf
call fcn.00409207
push ebx
push 1
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 0xe
call fcn.0040940a
call fcn.004498ef
test eax, eax
je 0x44ce68
push 0x478064
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x44ce63
call fcn.004496a8
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xfffffff6
add eax, 0x15
jmp 0x44ce7a
push 0x1f
pop eax
jmp 0x44ce7a
call fcn.004496a8
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xfffffff6
add eax, 0x14
push ebx
mov ecx, 0x4a7e08
mov dword [0x4a7fec], eax
mov dword [0x4a7ec0], ebx
mov dword [0x4a7ec8], ebx
call fcn.0044c0de
call fcn.0044da15
cmp byte [0x4a7ecc], bl
jne 0x44cfde
lea eax, [ebp - 0x140]
push eax
call fcn.0040277a
push 1
lea eax, [ebp - 0x140]
mov byte [ebp - 4], 0x10
call fcn.004029a5
lea eax, [ebp - 0x140]
push str.install
mov esi, eax
mov dword [ebp - 0x150], eax
call fcn.004029d0
push str.global
push str.errorscope
mov eax, esi
mov byte [ebp - 4], 0x11
call fcn.00402aa5
mov eax, esi
push str.params
mov dword [ebp - 0x144], eax
call fcn.004029d0
mov byte [ebp - 4], 0x12
cmp dword [0x4a7f58], 0x10
mov eax, dword [0x4a7f44]
jae 0x44cf1a
mov eax, 0x4a7f44
push eax
push str.B1_UID
lea ecx, [ebp - 0x140]
call fcn.0044f4d0
pop ecx
pop ecx
lea esi, [ebp - 0x140]
mov byte [ebp - 4], 0x11
call fcn.00402ad6
mov eax, esi
push str.package
mov dword [ebp - 0x144], eax
call fcn.004029d0
push str.register_uid
push str.name
mov eax, esi
mov byte [ebp - 4], 0x13
call fcn.00402aa5
call fcn.004498de
push str._B1_UID_
mov ecx, esi
push str.reg_sz
test eax, eax
je 0x44cf7f
push str.HKEY_LOCAL_MACHINE_REG_ROOT_NAME_UID
jmp 0x44cf84
push str.HKEY_CURRENT_USER_REG_ROOT_NAME_UID
call fcn.0044f012
add esp, 0xc
lea esi, [ebp - 0x140]
mov byte [ebp - 4], 0x11
call fcn.00402ad6
mov byte [ebp - 4], 0x10
call fcn.00402ad6
lea eax, [ebp - 0x1d0]
push eax
call fcn.0043f556
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0x58]
dec eax
push eax
push dword [ebp - 0x74]
lea ebx, [ebp - 0x1d0]
call fcn.0044008a
mov eax, ebx
push eax
mov byte [ebp - 4], 0x10
call fcn.0044c431
mov byte [ebp - 4], 0xe
call fcn.00401136
xor ebx, ebx
call fcn.004441e2
push ebx
mov edi, eax
call fcn.00455635
mov dword [ebp - 0x148], eax
pop ecx
lea eax, [ebp - 0x148]
push eax
mov dword [ebp - 0x144], edx
call fcn.0045905d
pop ecx
push 9
mov esi, eax
pop ecx
lea eax, [ebp - 0x30]
rep movsd dword es:[edi], dword [esi]
call fcn.0043b39a
mov eax, 0x4a7e00
call fcn.00459cf9
ret