Function at 0x48dc7a
Capabilities:
Accept command line arguments
Set current directory

Disassembly:
push 0x34
mov eax, 0x517777
call fcn.004db273
mov edi, ecx
xor ebx, ebx
lea ecx, [edi + 0x1c]
push 3
mov byte [ebp - 0xd], bl
call fcn.0049bd45
mov ecx, edi
mov esi, eax
call fcn.00490ad4
test esi, esi
je 0x48dd4f
push dword [eax]
add esi, 4
mov ecx, esi
call fcn.00406ef1
test eax, eax
jne 0x48dcc4
mov ecx, edi
call fcn.00490260
jmp 0x48e2fa
lea ecx, [edi + 0x30]
push esi
call fcn.004923be
mov ecx, esi
call fcn.004974f5
mov ecx, edi
call fcn.00490ad4
lea ecx, [ebp - 0x18]
push dword [eax]
call fcn.0040d859
lea eax, [ebp - 0x18]
mov dword [ebp - 4], ebx
push eax
lea ecx, [edi + 0x130]
call fcn.0048d1b7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.0040d05a
mov edx, dword [esi]
lea eax, [edi + 4]
mov ecx, dword [eax]
sub ecx, 0x10
mov dword [ebp - 0x18], ecx
lea esi, [edx - 0x10]
cmp esi, ecx
je 0x48dd49
cmp dword [ecx + 0xc], ebx
jl 0x48dd3e
mov eax, dword [esi]
cmp eax, dword [ecx]
jne 0x48dd3b
mov ecx, esi
call fcn.00406f9b
mov ecx, dword [ebp - 0x18]
mov esi, eax
call fcn.0040d570
lea eax, [esi + 0x10]
mov dword [edi + 4], eax
jmp 0x48dd49
lea eax, [edi + 4]
push dword [edx - 0xc]
mov ecx, eax
push edx
call fcn.0040d7d9
mov byte [ebp - 0xd], 1
jmp 0x48dd58
lea ecx, [edi + 0x30]
push eax
call fcn.004923be
mov edx, dword [edi + 0x28]
lea eax, [edi + 0xa4]
mov ecx, dword [eax]
sub ecx, 0x10
mov dword [ebp - 0x18], ecx
lea esi, [edx - 0x10]
cmp esi, ecx
je 0x48dda8
cmp dword [ecx + 0xc], ebx
jl 0x48dd9d
mov eax, dword [esi]
cmp eax, dword [ecx]
jne 0x48dd97
mov ecx, esi
call fcn.00406f9b
mov ecx, dword [ebp - 0x18]
mov esi, eax
call fcn.0040d570
lea eax, [esi + 0x10]
mov dword [edi + 0xa4], eax
jmp 0x48dda8
lea eax, [edi + 0xa4]
push dword [edx - 0xc]
mov ecx, eax
push edx
call fcn.0040d7d9
cmp byte [0x5805ec], 0
je 0x48de82
lea ecx, [ebp - 0x18]
call fcn.0040cd94
mov esi, str.Full_command_line:
mov dword [ebp - 4], 1
push esi
call fcn.004e07a4
pop ecx
push eax
push esi
lea ecx, [ebp - 0x18]
call fcn.00410e44
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov esi, eax
test esi, esi
je 0x48ddf7
push esi
call fcn.004e07a4
pop ecx
push eax
push esi
lea ecx, [ebp - 0x18]
call fcn.00410e44
lea eax, [ebp - 0x18]
mov ecx, 0x5805b8
push eax
call fcn.004a24eb
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 2
call fcn.0040d05a
or dword [ebp - 4], 0xffffffff
cmp byte [0x5805ec], 0
je 0x48de82
lea ecx, [ebp - 0x18]
call fcn.0040cd94
mov dword [ebp - 4], 3
mov esi, dword [edi + 0x28]
push str.Command_line_to_pass_to_MSI:
call fcn.004e07a4
pop ecx
push eax
push str.Command_line_to_pass_to_MSI:
lea ecx, [ebp - 0x18]
call fcn.00410e44
test esi, esi
je 0x48de61
push esi
call fcn.004e07a4
pop ecx
push eax
push esi
lea ecx, [ebp - 0x18]
call fcn.00410e44
lea eax, [ebp - 0x18]
mov ecx, 0x5805b8
push eax
call fcn.004a24eb
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 4
call fcn.0040d05a
or dword [ebp - 4], 0xffffffff
lea esi, [edi + 0x90]
lea ecx, [edi + 0x178]
push esi
call fcn.00496754
mov edx, esi
lea ecx, [ebp - 0x18]
call fcn.00479020
mov dword [ebp - 4], 5
push dword [eax]
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.0040d05a
lea esi, [edi + 0x30]
mov ecx, esi
call fcn.00492707
mov dword [ebp - 0x18], eax
test eax, eax
je 0x48df04
lea ecx, [edi + 0x104]
push ecx
lea ecx, [ebp + 8]
call fcn.00406ff4
xor ebx, ebx
lea ecx, [ebp + 8]
mov dword [ebp - 4], 6
push ecx
push dword [ebp - 0x18]
mov ecx, edi
call fcn.00490a9b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040d05a
lea eax, [ebx + 1]
jmp 0x48e2fa
mov dword [edi + 0x264], esi
mov dword [ebp - 4], 7
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x40], 0x5444e8
mov dword [ebp - 0x40], 0x544640
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 4], 8
test byte [edi + 0x74], 2
je 0x48dff1
lea eax, [ebp - 0x40]
mov ecx, edi
push eax
call fcn.0048e33f
lea eax, [ebp - 0x40]
push eax
lea ecx, [edi + 0x1f4]
call fcn.004889f5
mov eax, dword [edi]
push ecx
mov ecx, edi
mov dword [ebp - 0x18], esp
mov esi, esp
call dword [eax + 0x24]
push eax
mov ecx, esi
call fcn.00406ff4
mov byte [ebp - 4], 9
lea ecx, [edi + 0x30]
mov byte [ebp - 4], 8
call fcn.00492508
lea ecx, [edi + 0x1f4]
call fcn.00488625
push eax
lea ecx, [edi + 0x30]
call fcn.00495082
mov edx, dword [edi + 0x250]
lea eax, [edi + 0x10c]
mov ecx, dword [eax]
sub ecx, 0x10
mov dword [ebp - 0x18], ecx
lea esi, [edx - 0x10]
cmp esi, ecx
je 0x48dfe3
cmp dword [ecx + 0xc], ebx
jl 0x48dfd8
mov eax, dword [esi]
cmp eax, dword [ecx]
jne 0x48dfd2
mov ecx, esi
call fcn.00406f9b
mov ecx, dword [ebp - 0x18]
mov esi, eax
call fcn.0040d570
lea eax, [esi + 0x10]
mov dword [edi + 0x10c], eax
jmp 0x48dfe3
lea eax, [edi + 0x10c]
push dword [edx - 0xc]
mov ecx, eax
push edx
call fcn.0040d7d9
lea eax, [edi + 0x23c]
mov ecx, edi
push eax
call fcn.0049012d
push 6
lea ecx, [edi + 0x1c]
call fcn.0049bd45
mov esi, eax
test esi, esi
je 0x48e010
push 1
lea ecx, [edi + 0x1f4]
call fcn.0048849d
jmp 0x48e04c
push 7
lea ecx, [edi + 0x1c]
call fcn.0049bd45
mov esi, eax
test esi, esi
je 0x48e024
push 1
jmp 0x48e041
push 8
lea ecx, [edi + 0x1c]
call fcn.0049bd45
mov esi, eax
test esi, esi
je 0x48e04c
push ebx
lea ecx, [edi + 0x1f4]
call fcn.0048849d
push ebx
lea ecx, [edi + 0x1f4]
call fcn.00488571
cmp byte [ebp + 8], 0
je 0x48e061
mov dword [edi + 0xc0], 3
jmp 0x48e2e5
lea ecx, [edi + 0x1f4]
call fcn.0048846b
test al, al
mov byte [edi + 0x1e8], al
mov ecx, edi
sete byte [0x57db1c]
call fcn.0048e385
push str.Advinst_
lea ecx, [ebp - 0x24]
call fcn.0040d859
lea eax, [ebp + 8]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [edi + 0x30]
call fcn.004927da
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x24]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.00410e44
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xe
call fcn.0040d05a
push dword [ebp - 0x24]
call fcn.0049c67c
test esi, esi
jne 0x48e0ed
cmp byte [0x5805a4], 0
je 0x48e0ed
mov dl, 1
mov dword [edi + 0xc0], 3
mov ecx, 0xcc
call fcn.0048998e
jmp 0x48e176
mov ecx, edi
call fcn.0048f481
push ecx
push ebx
mov esi, 0xdc
lea ecx, [edi + 0x178]
push esi
call fcn.0049685e
test byte [edi + 0x74], 2
je 0x48e132
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x541e90
mov ecx, edi
push esi
mov byte [ebp - 4], 0xe
push eax
mov dword [ebp - 0x1c], 0x541e78
mov dword [ebp - 0x18], edi
call fcn.0048e966
mov ecx, edi
call fcn.0048e47b
test al, al
jne 0x48e2d9
test byte [edi + 0x74], 4
je 0x48e17e
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0x541e90
mov ecx, edi
push 0x8a
mov byte [ebp - 4], 0xe
push eax
mov dword [ebp - 0x20], 0x541e80
mov dword [ebp - 0x1c], edi
call fcn.0048e966
cmp byte [ebp - 0x18], 0
je 0x48e17e
xor ebx, ebx
inc ebx
jmp 0x48e2d9
mov ecx, edi
call fcn.0048e63e
cmp byte [ebp - 0xd], 0
jne 0x48e1a4
mov ecx, edi
call fcn.004901b4
test al, al
je 0x48e1a4
mov ecx, edi
call fcn.00490260
mov ebx, eax
jmp 0x48e2d9
mov ecx, edi
call fcn.0048e69a
lea eax, [edi + 0x28]
push eax
lea ecx, [ebp - 0x14]
call fcn.00406ff4
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0x14]
cmp dword [eax - 0xc], 0
jne 0x48e26a
mov edx, dword [edi + 0x204]
lea ecx, [eax - 0x10]
mov dword [ebp + 8], ecx
lea esi, [edx - 0x10]
cmp esi, ecx
je 0x48e20b
cmp dword [ecx + 0xc], ebx
jl 0x48e1ff
mov eax, dword [esi]
cmp eax, dword [ecx]
jne 0x48e1ff
mov ecx, esi
call fcn.00406f9b
mov ecx, dword [ebp + 8]
mov esi, eax
call fcn.0040d570
lea eax, [esi + 0x10]
mov dword [ebp - 0x14], eax
jmp 0x48e20b
push dword [edx - 0xc]
lea ecx, [ebp - 0x14]
push edx
call fcn.0040d7d9
push ebx
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0x18]
call fcn.0049718b
pop ecx
mov byte [ebp - 4], 0x23
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
mov dword [ebp + 8], ecx
lea esi, [edx - 0x10]
cmp esi, ecx
je 0x48e25e
cmp dword [ecx + 0xc], ebx
jl 0x48e252
mov eax, dword [esi]
cmp eax, dword [ecx]
jne 0x48e252
mov ecx, esi
call fcn.00406f9b
mov ecx, dword [ebp + 8]
mov esi, eax
call fcn.0040d570
lea eax, [esi + 0x10]
mov dword [ebp - 0x14], eax
jmp 0x48e25e
push dword [edx - 0xc]
lea ecx, [ebp - 0x14]
push edx
call fcn.0040d7d9
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x22
call fcn.0040d05a
lea ecx, [edi + 0x184]
call fcn.004964fa
mov eax, dword [edi + 0x22c]
mov ecx, edi
mov dword [edi + 0xc0], eax
mov al, byte [edi + 0x230]
mov byte [edi + 0xc4], al
lea eax, [ebp - 0x14]
push eax
call fcn.0048e9a7
mov ecx, edi
mov ebx, eax
call fcn.00491320
mov byte [ebp - 4], 0x27
lea eax, [edi + 0x30]
mov dword [ebp - 0x30], 0x541e90
mov ecx, edi
mov byte [ebp - 4], 0x22
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x30]
push 0x10a
push eax
mov dword [ebp - 0x30], 0x541e70
call fcn.0048e966
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xe
call fcn.0040d05a
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 8
call fcn.0040d05a
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 0x2a
call fcn.00491d22
or dword [ebp - 4], 0xffffffff
mov eax, ebx
call fcn.004db23c
ret 4