Function at 0x44f610
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x491d58
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
xor edi, edi
mov dword [esp + 0xc], 1
mov dword [esp + 0x4c], edi
mov dword [esp + 0x48], edi
mov dword [esp + 0x58], edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x10], edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x18], edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x44], edi
mov dword [esp + 0x40], edi
mov esi, dword [esp + 0x60]
push esi
push str.command_line__s_n
mov byte [esp + 0x60], 1
call fcn.00430350
lea eax, [esp + 0x1c]
push eax
push esi
call fcn.00402de0
mov ebx, eax
add esp, 0x10
cmp ebx, edi
je 0x44fdd9
xor ecx, ecx
cmp dword [esp + 0x64], edi
mov dword [esp + 0x28], edi
sete cl
mov dword [esp + 0x24], edi
mov edi, ecx
cmp edi, dword [esp + 0x14]
jge 0x44fbae
push ebp
lea ebp, [edi + 1]
mov esi, dword [ebx + edi*4]
mov ecx, esi
mov al, byte [ecx]
cmp al, 0x2d
mov edx, str._startup
jne 0x44f6d3
test al, al
je 0x44f6dd
mov al, byte [ecx + 1]
add ecx, 1
add edx, 1
cmp al, byte [edx]
je 0x44f6c2
movsx eax, byte [ecx]
movsx edx, byte [edx]
sub eax, edx
jne 0x44f6f2
mov dword [esp + 0x10], 0
mov dword [esp + 0x30], 1
jmp 0x44fb58
cmp ebp, dword [esp + 0x18]
jge 0x44f74e
mov ecx, esi
mov al, byte [ecx]
cmp al, 0x2d
mov edx, str._delay
jne 0x44f716
test al, al
je 0x44f720
mov al, byte [ecx + 1]
add ecx, 1
add edx, 1
cmp al, byte [edx]
je 0x44f705
movsx edx, byte [edx]
movsx eax, byte [ecx]
sub eax, edx
jne 0x44f74e
mov ecx, dword [ebx + edi*4 + 4]
add edi, 1
add ebp, 1
cmp byte [ecx], 0
mov eax, ecx
je 0x44f739
add eax, 1
cmp byte [eax], 0
jne 0x44f731
sub eax, ecx
push eax
push ecx
call fcn.0044ded0
add esp, 8
mov dword [esp + 0x34], eax
jmp 0x44fb58
mov ecx, esi
mov al, byte [ecx]
cmp al, 0x2d
mov edx, str._quit
jne 0x44f771
jmp 0x44f760
test al, al
je 0x44f77b
mov al, byte [ecx + 1]
add ecx, 1
add edx, 1
cmp al, byte [edx]
je 0x44f760
movsx eax, byte [ecx]
movsx ecx, byte [edx]
sub eax, ecx
jne 0x44f790
push 0
mov dword [esp + 0x14], 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x44fb58
mov ecx, esi
mov al, byte [ecx]
cmp al, 0x2d
mov edx, str._debug
jne 0x44f7b1
lea ecx, [ecx]
test al, al
je 0x44f7bb
mov al, byte [ecx + 1]
add ecx, 1
add edx, 1
cmp al, byte [edx]
je 0x44f7a0
movsx edx, byte [edx]
movsx eax, byte [ecx]
sub eax, edx
jne 0x44f7c5
call fcn.004305b0
jmp 0x44fb58
cmp ebp, dword [esp + 0x18]
jge 0x44f870
push str._connect
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44f809
mov eax, dword [ebx + edi*4 + 4]
add edi, 1
push eax
add ebp, 1
mov dword [esp + 0x14], 1
mov dword [esp + 0x30], eax
call section..text
add esp, 4
mov dword [esp + 0x28], eax
jmp 0x44fb58
push str._config
push esi
call fcn.00402f60
add esp, 8
test eax, eax
je 0x44f82d
push str._ini
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44f870
xor eax, eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x3c], eax
mov eax, dword [ebx + edi*4 + 4]
add edi, 1
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x60], 2
add ebp, 1
call fcn.00476510
mov ecx, dword [esp + 0x40]
push ecx
call fcn.0044cfd0
add esp, 4
lea ecx, [esp + 0x3c]
mov byte [esp + 0x5c], 1
call fcn.00476730
jmp 0x44fb58
push str._host
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44f88c
call fcn.00435590
jmp 0x44fb58
cmp ebp, dword [esp + 0x18]
jge 0x44f99f
push str._filename
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44f8cb
mov eax, 1
add edi, eax
mov edx, dword [ebx + edi*4]
push edx
lea ecx, [esp + 0x50]
add ebp, eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
call fcn.00476510
jmp 0x44fb58
push str._path
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44f900
mov eax, 1
add edi, eax
add ebp, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
mov eax, dword [ebx + edi*4]
push eax
lea ecx, [esp + 0x50]
call fcn.00476510
jmp 0x44fb58
push str._parentpath
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44f93b
mov ecx, dword [ebx + edi*4 + 4]
add edi, 1
push ecx
lea ecx, [esp + 0x50]
add ebp, 1
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 2
call fcn.00476510
jmp 0x44fb58
push str._search
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44f972
mov edx, dword [ebx + edi*4 + 4]
add edi, 1
push edx
lea ecx, [esp + 0x50]
add ebp, 1
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], eax
call fcn.00476510
jmp 0x44fb58
push str._select
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44f99f
mov eax, dword [ebx + edi*4 + 4]
add edi, 1
add ebp, 1
mov dword [esp + 0x10], 1
mov dword [esp + 0x20], eax
jmp 0x44fb58
push str._choose_language
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44f9be
mov dword [esp + 0x38], 1
jmp 0x44fb58
push str._choose_volumes
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44f9dd
mov dword [esp + 0x24], 1
jmp 0x44fb58
push str._uninstall
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44fa12
call fcn.004686c0
call fcn.00468c40
call fcn.00468f50
call fcn.00469260
call fcn.00469720
call fcn.00447fd0
jmp 0x44fb58
push str._install_start_menu_shortcuts
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44fa2e
call fcn.0046bee0
jmp 0x44fb58
push str._uninstall_start_menu_shortcuts
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44fa4a
call fcn.004686c0
jmp 0x44fb58
push str._install_quick_launch_shortcut
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44fa66
call fcn.0046c0d0
jmp 0x44fb58
push str._uninstall_quick_launch_shortcut
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44fa82
call fcn.00468c40
jmp 0x44fb58
push str._install_desktop_shortcut
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44fa9e
call fcn.0046c2a0
jmp 0x44fb58
push str._uninstall_desktop_shortcut
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44faba
call fcn.00468f50
jmp 0x44fb58
push str._install_folder_context_menu
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44fad6
call fcn.0046c450
jmp 0x44fb58
push str._uninstall_folder_context_menu
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44faef
call fcn.00469260
jmp 0x44fb58
push str._install_run_on_system_startup
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44fb08
call fcn.00469620
jmp 0x44fb58
push str._uninstall_run_on_system_startup
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44fb21
call fcn.00469720
jmp 0x44fb58
push str._enable_update_notification
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44fb3c
mov byte [0x4aa549], 1
jmp 0x44fb53
push str._disable_update_notification
push esi
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x44fb58
mov byte [0x4aa549], al
call fcn.00448a80
add edi, 1
add ebp, 1
cmp edi, dword [esp + 0x18]
jl 0x44f6b2
cmp dword [esp + 0x24], 0
pop ebp
je 0x44fb7a
mov dword [0x4a95f0], 1
cmp dword [esp + 0xc], 0
je 0x44fd41
cmp dword [esp + 0x10], 2
jne 0x44fbae
mov esi, dword [esp + 0x4c]
test esi, esi
je 0x44fc79
push esi
call section..text
add esp, 4
test eax, eax
je 0x44fbb2
push esi
call fcn.0044ef60
add esp, 4
mov esi, dword [esp + 0x4c]
test esi, esi
je 0x44fc79
cmp byte [esi], 0
mov eax, esi
je 0x44fbc9
add eax, 1
cmp byte [eax], 0
jne 0x44fbc1
sub eax, esi
je 0x44fc79
cmp dword [esp + 0x10], 0
je 0x44fc7b
push esi
push str.search_string:__s_n
call fcn.00430350
add esp, 8
push 0x20000
lea ecx, [esp + 0x44]
call fcn.004762c0
mov ecx, dword [esp + 0x44]
mov byte [ecx], 0x22
mov edx, dword [esp + 0x44]
mov byte [edx + 1], 0
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x4c]
add eax, 0xffffffff
push eax
add ecx, 1
push ecx
push edx
call fcn.0044ef90
mov eax, dword [esp + 0x50]
push eax
push str.search_long_path_name:__s_n
call fcn.00430350
mov ecx, dword [esp + 0x58]
add ecx, 1
push ecx
call fcn.00443270
add esp, 0x18
test eax, eax
je 0x44fc5c
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x44]
add edx, 0xffffffff
push edx
add eax, 1
push eax
call fcn.00441b20
add esp, 8
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
push 0x49c414
push ecx
push edx
call fcn.00438fc0
mov esi, dword [esp + 0x50]
add esp, 0xc
jmp 0x44fc7b
xor esi, esi
mov eax, dword [esp + 0x24]
test eax, eax
je 0x44fceb
lea ecx, [esp + 0x30]
push ecx
lea edx, [esp + 0x30]
push edx
lea ecx, [esp + 0x30]
push ecx
lea edx, [esp + 0x30]
push edx
push 0x15
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x24]
push edx
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x54]
push ecx
push eax
push edx
call fcn.00475f70
mov eax, dword [esp + 0x90]
mov ecx, dword [0x4aa134]
mov edx, dword [esp + 0x58]
add esp, 0x28
push esi
push eax
mov eax, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x34]
push edx
mov edx, dword [esp + 0x34]
push eax
mov eax, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x54]
push eax
push ecx
push edx
jmp 0x44fd01
mov eax, dword [esp + 0x68]
push esi
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00453a20
push eax
call fcn.004568b0
add esp, 0x2c
cmp dword [esp + 0x1c], 0
mov dword [esp + 0x18], eax
je 0x44fd75
mov ecx, dword [esp + 0x1c]
cmp byte [ecx], 0
mov eax, ecx
je 0x44fd2d
add eax, 1
cmp byte [eax], 0
jne 0x44fd25
sub eax, ecx
je 0x44fd75
mov ecx, dword [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.00452550
jmp 0x44fd75
cmp dword [esp + 0x2c], 0
je 0x44fd75
cmp dword [0x4aa6a0], 0
jne 0x44fd75
mov eax, dword [esp + 0x30]
test eax, eax
push 0
je 0x44fd6d
mov edx, dword [0x4a95c4]
push eax
push 3
push edx
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x44fd75
call fcn.0042c080
add esp, 4
cmp dword [esp + 0x34], 0
je 0x44fda0
mov eax, dword [esp + 0x18]
test eax, eax
push 0
push 0
je 0x44fd93
mov eax, dword [eax + 0x48]
push 0x40d
push eax
jmp 0x44fdca
mov eax, dword [0x4a95c4]
push 0x403
push eax
jmp 0x44fdca
cmp dword [esp + 0x20], 0
je 0x44fdd0
mov eax, dword [esp + 0x18]
test eax, eax
push 0
push 0
je 0x44fdbe
mov eax, dword [eax + 0x48]
push 0x40e
push eax
jmp 0x44fdca
mov ecx, dword [0x4a95c4]
push 0x404
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
push ebx
call fcn.00402f40
add esp, 4
lea ecx, [esp + 0x40]
mov byte [esp + 0x58], 0
call fcn.00476730
lea ecx, [esp + 0x48]
mov dword [esp + 0x58], 0xffffffff
call fcn.00476730
mov ecx, dword [esp + 0x50]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x50
ret