Function at 0x44c9c0
Capabilities:
Accept command line arguments
Check if file exists
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4aada5
mov eax, dword fs:[0]
push eax
mov eax, 0x1780
call fcn.004894c0
mov eax, dword [0x4e412c]
xor eax, ebp
mov dword [ebp - 0x20], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1764], ecx
mov dword [ebp - 0x1760], 0
call fcn.00448ea0
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x800000
jle 0x44cb47
mov eax, dword [0x4c292c]
mov dword [ebp - 0xe94], eax
push 0x204
push 0
lea ecx, [ebp - 0xe90]
push ecx
call fcn.004886d0
add esp, 0xc
mov edx, dword [0x4c29d8]
mov dword [ebp - 0xc8c], edx
push 0x204
push 0
lea eax, [ebp - 0xc88]
push eax
call fcn.004886d0
add esp, 0xc
mov ecx, dword [0x542d28]
mov edx, dword [ecx]
push edx
lea eax, [ebp - 0xe94]
push eax
call fcn.00488f19
add esp, 8
push str.64.exe
push 0x2e
lea ecx, [ebp - 0xe94]
push ecx
call fcn.00403720
add esp, 8
push eax
call fcn.00488f19
add esp, 8
lea edx, [ebp - 0xe94]
push edx
lea eax, [ebp - 0xc8c]
push eax
call fcn.00488f19
add esp, 8
mov dword [ebp - 0xa28], 1
jmp 0x44cabf
mov ecx, dword [ebp - 0xa28]
add ecx, 1
mov dword [ebp - 0xa28], ecx
mov edx, dword [ebp - 0xa28]
cmp edx, dword [0x542d20]
jge 0x44cb02
push 0x4c29ec
lea eax, [ebp - 0xc8c]
push eax
call fcn.00488eef
add esp, 8
mov ecx, dword [ebp - 0xa28]
mov edx, dword [0x542d28]
mov eax, dword [edx + ecx*4]
push eax
lea ecx, [ebp - 0xc8c]
push ecx
call fcn.00488eef
add esp, 8
jmp 0x44cab0
lea edx, [ebp - 0xa74]
push edx
call dword [0x4e56c4]
lea eax, [ebp - 0xa84]
push eax
lea ecx, [ebp - 0xa74]
push ecx
push 0
push 0
push 0x220
push 0
push 0
push 0
lea edx, [ebp - 0xc8c]
push edx
push 0
call dword [0x4e566c]
xor eax, eax
jmp 0x44d3b4
lea ecx, [ebp - 0xe98]
call fcn.0041e140
mov dword [ebp - 4], 0
mov eax, dword [0x537674]
push eax
lea ecx, [ebp - 0x1738]
call fcn.00440310
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1738]
push ecx
lea ecx, [ebp - 0xe98]
call fcn.00440290
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1738]
call fcn.0041e0b0
lea ecx, [ebp - 0xe98]
call fcn.00403760
lea ecx, [ebp - 0xe98]
call fcn.0044dcb0
push 0x4c29f0
push str..hlp
lea ecx, [ebp - 0xe98]
call fcn.00411d80
lea edx, [ebp - 0xe98]
push edx
mov ecx, dword [ebp - 0x1764]
add ecx, 0xc0
call fcn.0047cad9
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe98]
call fcn.0041e0b0
lea ecx, [ebp - 0xa24]
call fcn.0044d900
mov dword [ebp - 4], 2
lea eax, [ebp - 0xa24]
push eax
mov ecx, dword [ebp - 0x1764]
call fcn.00483cf7
push 0x4c2a0c
push 0
push 0x1f0001
call dword [0x4e5708]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x44ccd5
cmp dword [ebp - 0x9f4], 0
je 0x44cc41
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x1c]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x44cce7
mov dword [ebp - 0xe9c], 0
lea edx, [ebp - 0xe9c]
push edx
push 0x44d3d0
call dword [sym.imp.USER32.dll_EnumWindows]
cmp dword [ebp - 0xe9c], 0
je 0x44cc98
push 0xfffffffffffffff0
mov eax, dword [ebp - 0xe9c]
push eax
call dword [0x4e5798]
and eax, 0x10000000
je 0x44cc8b
push 1
mov ecx, dword [ebp - 0xe9c]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [ebp - 0xe9c]
push edx
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [ebp - 0x1c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x173c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa24]
call fcn.0044d960
mov eax, dword [ebp - 0x173c]
jmp 0x44d3b4
push str.UserInstClass
push 0
push 0
call dword [0x4e5668]
mov dword [ebp - 0x1c], eax
push 0
call fcn.00484feb
test eax, eax
jne 0x44cd27
push 0xffffffffffffffff
push 0
push 0x67
call fcn.00441260
add esp, 0xc
mov dword [ebp - 0x1740], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa24]
call fcn.0044d960
mov eax, dword [ebp - 0x1740]
jmp 0x44d3b4
mov ecx, dword [ebp - 0x1764]
call fcn.0044e330
call fcn.00473730
lea ecx, [ebp - 0x9e8]
call fcn.00412610
mov byte [ebp - 4], 3
push 0x400
push 0x400
lea ecx, [ebp - 0x9e8]
call fcn.00401740
push eax
push 0
call dword [0x4e56ac]
push 0xffffffffffffffff
lea ecx, [ebp - 0x9e8]
call fcn.00403b60
push 0x5c
lea ecx, [ebp - 0x9e8]
call fcn.004121b0
push eax
lea edx, [ebp - 0x1744]
push edx
lea ecx, [ebp - 0x9e8]
call fcn.00421a70
mov dword [ebp - 0x1768], eax
mov eax, dword [ebp - 0x1768]
mov dword [ebp - 0x176c], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x176c]
push ecx
lea ecx, [ebp - 0x9e8]
call fcn.004014b0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1744]
call fcn.00412630
lea ecx, [ebp - 0x9e8]
call fcn.00401510
push eax
call dword [0x4e5714]
movzx edx, word [ebp - 0x9fc]
test edx, edx
jle 0x44cdf7
mov ax, word [ebp - 0x9fc]
push eax
mov ecx, 0x5376f0
call fcn.0044d8c0
cmp dword [ebp - 0x9f8], 0
je 0x44ce10
mov ecx, dword [ebp - 0x1764]
mov dword [ecx + 0xa8], 1
lea ecx, [ebp - 0xa00]
call fcn.00412750
movzx edx, al
test edx, edx
jne 0x44cf04
push 0x5c
lea ecx, [ebp - 0xa00]
call fcn.004121b0
mov dword [ebp - 0xea0], eax
cmp dword [ebp - 0xea0], 0
jl 0x44ce91
mov eax, dword [ebp - 0xea0]
add eax, 1
push eax
lea ecx, [ebp - 0x174c]
push ecx
lea ecx, [ebp - 0xa00]
call fcn.00412200
mov dword [ebp - 0x1770], eax
mov edx, dword [ebp - 0x1770]
mov dword [ebp - 0x1774], edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x1760]
or eax, 1
mov dword [ebp - 0x1760], eax
mov ecx, dword [ebp - 0x1774]
mov dword [ebp - 0x1778], ecx
jmp 0x44ce9d
lea edx, [ebp - 0xa00]
mov dword [ebp - 0x1778], edx
mov eax, dword [ebp - 0x1778]
mov dword [ebp - 0x1748], eax
mov ecx, dword [ebp - 0x1748]
push ecx
lea ecx, [ebp - 0xea4]
call fcn.00403ac0
mov dword [ebp - 4], 7
mov edx, dword [ebp - 0x1760]
and edx, 1
je 0x44cedf
and dword [ebp - 0x1760], 0xfffffffe
lea ecx, [ebp - 0x174c]
call fcn.00412630
lea ecx, [ebp - 0xea4]
call fcn.00401510
push eax
mov ecx, 0x5376f0
call fcn.0044d8e0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xea4]
call fcn.00412630
cmp dword [ebp - 0x9f0], 0
je 0x44cf1d
mov eax, dword [ebp - 0x1764]
mov dword [eax + 0xb0], 1
cmp dword [ebp - 0x9ec], 0
je 0x44cf36
mov ecx, dword [ebp - 0x1764]
mov dword [ecx + 0xb4], 1
mov edx, dword [ebp - 0x1764]
cmp dword [edx + 0xb0], 0
je 0x44d2fb
mov eax, dword [ebp - 0x1764]
cmp dword [eax + 0xb4], 0
jne 0x44d2fb
lea ecx, [ebp - 0x14c4]
push ecx
push 0x104
call dword [0x4e5690]
mov ecx, 0x5376f0
call fcn.00411a20
test eax, eax
je 0x44cf8e
mov ecx, 0x5376f0
call fcn.00411a20
mov dword [ebp - 0x177c], eax
jmp 0x44cf98
mov dword [ebp - 0x177c], str.Setup.ini
mov edx, dword [ebp - 0x177c]
push edx
lea ecx, [ebp - 0x14c8]
call fcn.00403ae0
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x14c8]
push eax
lea ecx, [ebp - 0x14c4]
push ecx
push 0x4c2a58
lea edx, [ebp - 0x9e8]
push edx
call fcn.00403f50
add esp, 0x10
mov word [ebp - 0x10ac], 0
push 0x206
push 0
lea eax, [ebp - 0x10aa]
push eax
call fcn.004886d0
add esp, 0xc
mov word [ebp - 0x12b4], 0
push 0x206
push 0
lea ecx, [ebp - 0x12b2]
push ecx
call fcn.004886d0
add esp, 0xc
push 0x4c2a64
push 0x104
lea edx, [ebp - 0x10ac]
push edx
push 0x2b
lea ecx, [ebp - 0x9e8]
call fcn.00401510
push eax
call fcn.0041e2f0
add esp, 0x14
push str.UinsExec.exe
push 0x104
lea eax, [ebp - 0x12b4]
push eax
push 0x13
lea ecx, [ebp - 0x9e8]
call fcn.00401510
push eax
call fcn.0041e2f0
add esp, 0x14
lea ecx, [ebp - 0x12b8]
call fcn.00412610
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x12b8]
push ecx
lea edx, [ebp - 0x10ac]
push edx
lea eax, [ebp - 0x12b4]
push eax
call fcn.0044d410
add esp, 0xc
test eax, eax
je 0x44d2dd
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0x14d0]
call fcn.00403ae0
mov byte [ebp - 4], 0xa
push 0x4c2a84
lea ecx, [ebp - 0x14cc]
call fcn.00403ae0
mov byte [ebp - 4], 0xb
push 0
lea ecx, [ebp - 0x14d0]
call fcn.00403860
movzx ecx, ax
cmp ecx, 0x22
jne 0x44d130
push 1
push 0x4c2a88
lea ecx, [ebp - 0x14d0]
call fcn.004465f0
add eax, 1
push eax
lea edx, [ebp - 0x1750]
push edx
lea ecx, [ebp - 0x14d0]
call fcn.00412200
mov dword [ebp - 0x1780], eax
mov eax, dword [ebp - 0x1780]
mov dword [ebp - 0x1784], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x1784]
push ecx
lea ecx, [ebp - 0x14cc]
call fcn.00411d60
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1750]
call fcn.00412630
jmp 0x44d18f
push 0
push 0x4c2a8c
lea ecx, [ebp - 0x14d0]
call fcn.004465f0
add eax, 1
push eax
lea edx, [ebp - 0x1754]
push edx
lea ecx, [ebp - 0x14d0]
call fcn.00412200
mov dword [ebp - 0x1788], eax
mov eax, dword [ebp - 0x1788]
mov dword [ebp - 0x178c], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x178c]
push ecx
lea ecx, [ebp - 0x14cc]
call fcn.00411d60
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1754]
call fcn.00412630
push 0x4c2a90
lea ecx, [ebp - 0x14cc]
call fcn.00403740
lea edx, [ebp - 0x14cc]
push edx
lea ecx, [ebp - 0x12b8]
call fcn.00411d60
push 0x10
push 0
lea eax, [ebp - 0x16ec]
push eax
call fcn.004886d0
add esp, 0xc
push 0x44
push 0
lea ecx, [ebp - 0x1734]
push ecx
call fcn.004886d0
add esp, 0xc
mov dword [ebp - 0x1734], 0x44
push 0x4c2aa4
call dword [0x4e5714]
lea edx, [ebp - 0x16dc]
push edx
push 0x208
call dword [0x4e5690]
lea eax, [ebp - 0x16ec]
push eax
lea ecx, [ebp - 0x1734]
push ecx
lea edx, [ebp - 0x16dc]
push edx
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x12b8]
call fcn.004014f0
add eax, 1
push eax
lea ecx, [ebp - 0x12b8]
call fcn.00401740
push eax
push 0
call dword [0x4e566c]
test eax, eax
je 0x44d25e
mov eax, dword [ebp - 0x16e8]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x16ec]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xffffffffffffffff
lea ecx, [ebp - 0x12b8]
call fcn.00403b60
mov dword [ebp - 0x1758], 0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x14cc]
call fcn.00412630
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x14d0]
call fcn.00412630
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x12b8]
call fcn.00412630
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x14c8]
call fcn.00412630
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x9e8]
call fcn.00412630
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa24]
call fcn.0044d960
mov eax, dword [ebp - 0x1758]
jmp 0x44d3b4
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x12b8]
call fcn.00412630
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x14c8]
call fcn.00412630
push 0x4c2aa8
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x44d31a
mov edx, dword [ebp - 0x1764]
mov dword [edx + 0xac], 1
mov eax, dword [ebp - 0x1764]
mov ecx, dword [eax + 0x50]
mov dword [ebp - 0x10], ecx
push 0
lea ecx, [ebp - 0x9e4]
call fcn.0044e5a0
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x1764]
lea eax, [ebp - 0x9e4]
mov dword [edx + 0x20], eax
lea ecx, [ebp - 0x9e4]
call fcn.0044f5a0
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x1c]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1764]
mov ecx, dword [ebp - 0x10]
mov dword [eax + 0x50], ecx
mov dword [ebp - 0x175c], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x9e4]
call fcn.0044dc00
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x9e8]
call fcn.00412630
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa24]
call fcn.0044d960
mov eax, dword [ebp - 0x175c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x20]
xor ecx, ebp
call fcn.00488550
mov esp, ebp
pop ebp
ret