Function at 0x44b5b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x49072f
mov eax, dword fs:[0]
push eax
mov eax, 0x10170
call fcn.004754c0
mov eax, dword [0x4b1ae0]
xor eax, esp
mov dword [esp + 0x1016c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4b1ae0]
xor eax, esp
push eax
lea eax, [esp + 0x10184]
mov dword fs:[0], eax
xor ebx, ebx
mov ebp, ecx
mov dword [esp + 0x50], ebx
call fcn.00414ce0
add eax, 0x58
cmp dword [eax + 0x14], ebx
je 0x44b6c8
lea eax, [esp + 0x178]
mov dword [esp + 0x16c], eax
neg eax
and eax, 3
lea ecx, [esp + eax + 0x178]
lea edx, [esp + 0x10178]
mov dword [esp + 0x13c], ebx
mov dword [esp + 0x140], ebx
mov dword [esp + 0x14c], ebx
mov dword [esp + 0x150], ebx
mov dword [esp + 0x154], ebx
mov dword [esp + 0x15c], ebx
mov dword [esp + 0x10178], ebx
mov dword [esp + 0x1017c], ebx
mov dword [esp + 0x170], ecx
mov dword [esp + 0x174], edx
mov dword [esp + 0x1018c], ebx
call fcn.00414ce0
add eax, 0x58
cmp dword [eax + 0x18], 0x10
jb 0x44b689
mov eax, dword [eax + 4]
jmp 0x44b68c
add eax, 4
push eax
lea ecx, [esp + 0x140]
call fcn.0044e1b0
push 1
push ebx
push str.bundles_list
lea ecx, [esp + 0x148]
call fcn.0044d190
cmp eax, ebx
jne 0x44b6cf
lea ecx, [esp + 0x16c]
mov dword [esp + 0x1018c], 0xffffffff
call fcn.0044c880
xor al, al
jmp 0x44c327
mov byte [ebp + 0x39], 1
mov dword [esp + 0x100], 0xf
mov dword [esp + 0xfc], ebx
mov byte [esp + 0xec], bl
mov edi, dword [eax + 0x18]
mov byte [esp + 0x1018c], 1
cmp edi, ebx
je 0x44c2c8
nop
mov esi, dword [edi]
cmp esi, ebx
jne 0x44b70b
mov esi, 0x4b3418
mov eax, esi
mov dword [esp + 0xc8], 0xf
mov dword [esp + 0xc4], ebx
mov byte [esp + 0xb4], bl
lea ecx, [eax + 1]
lea esp, [esp]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x44b730
sub eax, ecx
push eax
push esi
lea ecx, [esp + 0xb8]
call fcn.0040b5a0
push 0x495048
lea eax, [esp + 0xb4]
push eax
lea ecx, [esp + 0x3c]
push ecx
mov byte [esp + 0x10198], 2
call fcn.0040bd80
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x3c]
mov byte [esp + 0x10198], 3
call fcn.0040b280
cmp dword [esp + 0x4c], 0x10
mov byte [esp + 0x1018c], 2
jb 0x44b799
mov edx, dword [esp + 0x38]
push edx
call fcn.00473948
add esp, 4
push 9
push str.html_page
lea ecx, [esp + 0x60]
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], ebx
mov byte [esp + 0x64], bl
call fcn.0040b5a0
lea eax, [esp + 0x58]
push eax
push edi
lea ecx, [esp + 0xd4]
push ecx
mov ecx, ebp
mov byte [esp + 0x10198], 4
call fcn.00449ae0
mov esi, 0x10
mov byte [esp + 0x1018c], 6
cmp dword [esp + 0x70], esi
jb 0x44b7f6
mov edx, dword [esp + 0x5c]
push edx
call fcn.00473948
add esp, 4
mov dword [esp + 0x70], 0xf
mov dword [esp + 0x6c], ebx
mov byte [esp + 0x5c], bl
cmp dword [esp + 0xe0], ebx
je 0x44b869
push str.bundles_
call fcn.0042be90
push eax
lea eax, [esp + 0x9c]
push eax
call fcn.0040bd80
or dword [esp + 0x5c], 1
lea ecx, [esp + 0xd8]
push ecx
push eax
lea edx, [esp + 0x48]
push edx
mov byte [esp + 0x101a4], 7
call fcn.0040be40
or dword [esp + 0x68], 2
push eax
mov dword [esp + 0x101a8], 8
call fcn.0042a3d0
add esp, 0x1c
mov byte [esp + 0x33], 1
test al, al
je 0x44b86d
mov byte [esp + 0x33], bl
test byte [esp + 0x50], 2
je 0x44b89c
and dword [esp + 0x50], 0xfffffffd
cmp dword [esp + 0x4c], esi
jb 0x44b88c
mov eax, dword [esp + 0x38]
push eax
call fcn.00473948
add esp, 4
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
test byte [esp + 0x50], 1
mov dword [esp + 0x1018c], 6
je 0x44b8cc
and dword [esp + 0x50], 0xfffffffe
cmp dword [esp + 0xac], esi
jb 0x44b8cc
mov ecx, dword [esp + 0x98]
push ecx
call fcn.00473948
add esp, 4
cmp byte [esp + 0x33], bl
je 0x44b935
cmp dword [esp + 0xe4], esi
jb 0x44b8eb
mov edx, dword [esp + 0xd0]
push edx
call fcn.00473948
add esp, 4
mov dword [esp + 0xe4], 0xf
mov dword [esp + 0xe0], ebx
mov byte [esp + 0xd0], bl
mov byte [esp + 0x1018c], 1
cmp dword [esp + 0xc8], esi
jb 0x44b925
mov eax, dword [esp + 0xb4]
push eax
call fcn.00473948
add esp, 4
mov dword [esp + 0xc8], 0xf
jmp 0x44c2af
lea ecx, [esp + 0xb0]
push ecx
mov ecx, ebp
call fcn.0044aa80
mov esi, eax
mov dword [esp + 0x74], esi
cmp esi, ebx
jne 0x44b9a5
cmp dword [esp + 0xe4], 0x10
jb 0x44b968
mov edx, dword [esp + 0xd0]
push edx
call fcn.00473948
add esp, 4
cmp dword [esp + 0xc8], 0x10
mov esi, 0xf
mov dword [esp + 0xe4], esi
mov dword [esp + 0xe0], ebx
mov byte [esp + 0xd0], bl
mov byte [esp + 0x1018c], 1
jb 0x44c2a8
mov eax, dword [esp + 0xb4]
push eax
jmp 0x44c2a0
push 4
push str.text
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.0040b5a0
lea ecx, [esp + 0x14]
push ecx
push edi
lea edx, [esp + 0x3c]
push edx
mov ecx, ebp
mov byte [esp + 0x10198], 9
call fcn.00449ae0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esi + 0x48]
mov byte [esp + 0x10198], 0xa
call fcn.0040b380
cmp dword [esp + 0x4c], 0x10
jb 0x44ba07
mov eax, dword [esp + 0x38]
push eax
call fcn.00473948
add esp, 4
cmp dword [esp + 0x2c], 0x10
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
mov byte [esp + 0x1018c], 6
jb 0x44ba33
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00473948
add esp, 4
push 3
push 0x4999dc
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.0040b5a0
lea edx, [esp + 0x14]
push edx
push edi
lea eax, [esp + 0x3c]
push eax
mov ecx, ebp
mov byte [esp + 0x10198], 0xb
call fcn.00449ae0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esi + 0x84]
mov byte [esp + 0x10198], 0xc
call fcn.0040b380
cmp dword [esp + 0x4c], 0x10
jb 0x44ba98
mov ecx, dword [esp + 0x38]
push ecx
call fcn.00473948
add esp, 4
cmp dword [esp + 0x2c], 0x10
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
mov byte [esp + 0x1018c], 6
jb 0x44bac4
mov edx, dword [esp + 0x18]
push edx
call fcn.00473948
add esp, 4
push 0xc
push str.command_line
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.0040b5a0
lea eax, [esp + 0x14]
push eax
push edi
lea ecx, [esp + 0x3c]
push ecx
mov ecx, ebp
mov byte [esp + 0x10198], 0xd
call fcn.00449ae0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esi + 0xa0]
mov byte [esp + 0x10198], 0xe
call fcn.0040b380
cmp dword [esp + 0x4c], 0x10
jb 0x44bb29
mov edx, dword [esp + 0x38]
push edx
call fcn.00473948
add esp, 4
cmp dword [esp + 0x2c], 0x10
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
mov byte [esp + 0x1018c], 6
jb 0x44bb55
mov eax, dword [esp + 0x18]
push eax
call fcn.00473948
add esp, 4
push 8
push str.exe_name
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.0040b5a0
lea ecx, [esp + 0x14]
push ecx
push edi
lea edx, [esp + 0x3c]
push edx
mov ecx, ebp
mov byte [esp + 0x10198], 0xf
call fcn.00449ae0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esi + 0xc0]
mov byte [esp + 0x10198], 0x10
call fcn.0040b380
cmp dword [esp + 0x4c], 0x10
jb 0x44bbba
mov eax, dword [esp + 0x38]
push eax
call fcn.00473948
add esp, 4
cmp dword [esp + 0x2c], 0x10
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
mov byte [esp + 0x1018c], 6
jb 0x44bbe6
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00473948
add esp, 4
push 0xe
push str.wait_processes
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.0040b5a0
lea edx, [esp + 0x14]
push edx
push edi
lea eax, [esp + 0x3c]
push eax
mov ecx, ebp
mov byte [esp + 0x10198], 0x11
call fcn.00449ae0
push eax
mov ecx, esi
mov byte [esp + 0x10190], 0x12
call fcn.00451130
cmp dword [esp + 0x4c], 0x10
jb 0x44bc44
mov ecx, dword [esp + 0x38]
push ecx
call fcn.00473948
add esp, 4
cmp dword [esp + 0x2c], 0x10
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
mov byte [esp + 0x1018c], 6
jb 0x44bc70
mov edx, dword [esp + 0x18]
push edx
call fcn.00473948
add esp, 4
push 9
push str.html_page
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.0040b5a0
lea eax, [esp + 0x14]
push eax
push edi
lea ecx, [esp + 0x3c]
push ecx
mov ecx, ebp
mov byte [esp + 0x10198], 0x13
call fcn.00449ae0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esi + 0xf8]
mov byte [esp + 0x10198], 0x14
call fcn.0040b380
cmp dword [esp + 0x4c], 0x10
jb 0x44bcd5
mov edx, dword [esp + 0x38]
push edx
call fcn.00473948
add esp, 4
cmp dword [esp + 0x2c], 0x10
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
mov byte [esp + 0x1018c], 6
jb 0x44bd01
mov eax, dword [esp + 0x18]
push eax
call fcn.00473948
add esp, 4
push 8
push str.no_offer
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.0040b5a0
lea ecx, [esp + 0x14]
push ecx
push edi
lea edx, [esp + 0x3c]
push edx
mov ecx, ebp
mov byte [esp + 0x10198], 0x15
call fcn.00449ae0
mov ecx, dword [eax + 0x14]
push 1
push 0x494b50
push ecx
push ebx
mov ecx, eax
mov byte [esp + 0x1019c], 0x16
call fcn.0040a190
test eax, eax
sete al
mov byte [esi + 0x11d], al
mov byte [esi + 8], al
cmp dword [esp + 0x4c], 0x10
jb 0x44bd78
mov edx, dword [esp + 0x38]
push edx
call fcn.00473948
add esp, 4
cmp dword [esp + 0x2c], 0x10
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
mov byte [esp + 0x1018c], 6
jb 0x44bda4
mov eax, dword [esp + 0x18]
push eax
call fcn.00473948
add esp, 4
push 0xb
push str.checkbox_id
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.0040b5a0
lea ecx, [esp + 0x14]
push ecx
push edi
lea edx, [esp + 0x3c]
push edx
mov ecx, ebp
mov byte [esp + 0x10198], 0x17
call fcn.00449ae0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esi + 0xc]
mov byte [esp + 0x10198], 0x18
call fcn.0040b380
cmp dword [esp + 0x4c], 0x10
jb 0x44be06
mov eax, dword [esp + 0x38]
push eax
call fcn.00473948
add esp, 4
cmp dword [esp + 0x2c], 0x10
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
mov byte [esp + 0x1018c], 6
jb 0x44be32
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00473948
add esp, 4
push 7
push str.version
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.0040b5a0
lea edx, [esp + 0x14]
push edx
push edi
lea eax, [esp + 0x3c]
push eax
mov ecx, ebp
mov byte [esp + 0x10198], 0x19
call fcn.00449ae0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esi + 0x120]
mov byte [esp + 0x10198], 0x1a
call fcn.0040b380
cmp dword [esp + 0x4c], 0x10
jb 0x44be97
mov ecx, dword [esp + 0x38]
push ecx
call fcn.00473948
add esp, 4
cmp dword [esp + 0x2c], 0x10
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
mov byte [esp + 0x1018c], 6
jb 0x44bec3
mov edx, dword [esp + 0x18]
push edx
call fcn.00473948
add esp, 4
push 0x13
push str.conflicting_bundles
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.0040b5a0
lea eax, [esp + 0x14]
push eax
push edi
lea ecx, [esp + 0x3c]
push ecx
mov ecx, ebp
mov byte [esp + 0x10198], 0x1b
call fcn.00449ae0
push eax
mov ecx, esi
mov byte [esp + 0x10190], 0x1c
call fcn.00451760
cmp dword [esp + 0x4c], 0x10
jb 0x44bf21
mov edx, dword [esp + 0x38]
push edx
call fcn.00473948
add esp, 4
cmp dword [esp + 0x2c], 0x10
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
mov byte [esp + 0x1018c], 6
jb 0x44bf4d
mov eax, dword [esp + 0x18]
push eax
call fcn.00473948
add esp, 4
push 0x13
push str.show_before_install
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.0040b5a0
lea ecx, [esp + 0x14]
push ecx
push edi
lea edx, [esp + 0x128]
push edx
mov ecx, ebp
mov byte [esp + 0x10198], 0x1d
call fcn.00449ae0
cmp dword [esp + 0x2c], 0x10
mov byte [esp + 0x1018c], 0x1f
jb 0x44bfa6
mov eax, dword [esp + 0x18]
push eax
call fcn.00473948
add esp, 4
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], ebx
mov byte [esp + 0x18], bl
cmp dword [esp + 0x134], ebx
je 0x44bfc3
mov byte [esi + 5], 1
push str.show_as_checkbox
lea ecx, [esp + 0x5c]
call fcn.0040b8c0
lea ecx, [esp + 0x58]
push ecx
push edi
lea edx, [esp + 0x10c]
push edx
mov ecx, ebp
mov byte [esp + 0x10198], 0x20
call fcn.00449ae0
cmp dword [esp + 0x70], 0x10
mov byte [esp + 0x1018c], 0x22
jb 0x44c00a
mov eax, dword [esp + 0x5c]
push eax
call fcn.00473948
add esp, 4
mov dword [esp + 0x70], 0xf
mov dword [esp + 0x6c], ebx
mov byte [esp + 0x5c], bl
cmp dword [esp + 0x118], ebx
je 0x44c033
push esi
mov ecx, ebp
call fcn.004499a0
test al, al
jne 0x44c033
mov byte [esi + 4], 1
push str.install_order
lea ecx, [esp + 0x7c]
call fcn.0040b8c0
lea ecx, [esp + 0x78]
push ecx
push edi
lea edx, [esp + 0x3c]
push edx
mov ecx, ebp
mov byte [esp + 0x10198], 0x23
call fcn.00449ae0
push eax
mov byte [esp + 0x10190], 0x24
call fcn.0042a590
add esp, 4
cmp dword [esp + 0x4c], 0x10
mov dword [esp + 0x54], eax
jb 0x44c084
mov eax, dword [esp + 0x38]
push eax
call fcn.00473948
add esp, 4
cmp dword [esp + 0x90], 0x10
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
mov byte [esp + 0x1018c], 0x22
jb 0x44c0b3
mov ecx, dword [esp + 0x7c]
push ecx
call fcn.00473948
add esp, 4
mov edx, dword [esp + 0x54]
push str.need_admin
lea ecx, [esp + 0x7c]
mov dword [esi + 0x64], edx
call fcn.0040b8c0
lea eax, [esp + 0x78]
push eax
push edi
lea ecx, [esp + 0x3c]
push ecx
mov ecx, ebp
mov byte [esp + 0x10198], 0x25
call fcn.00449ae0
push eax
mov byte [esp + 0x10190], 0x26
call fcn.0042a590
add esp, 4
cmp dword [esp + 0x4c], 0x10
mov dword [esp + 0x54], eax
jb 0x44c10b
mov edx, dword [esp + 0x38]
push edx
call fcn.00473948
add esp, 4
cmp dword [esp + 0x90], 0x10
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
mov byte [esp + 0x1018c], 0x22
jb 0x44c13a
mov eax, dword [esp + 0x7c]
push eax
call fcn.00473948
add esp, 4
mov ecx, dword [esp + 0x54]
mov dword [esi + 0xbc], ecx
push str.close_browsers
lea ecx, [esp + 0x18]
call fcn.0040b8c0
lea edx, [esp + 0x14]
push edx
push edi
lea eax, [esp + 0x80]
push eax
mov ecx, ebp
mov byte [esp + 0x10198], 0x27
call fcn.00449ae0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esi + 0x68]
mov byte [esp + 0x10198], 0x28
call fcn.0040b380
cmp dword [esp + 0x90], 0x10
jb 0x44c19a
mov ecx, dword [esp + 0x7c]
push ecx
call fcn.00473948
add esp, 4
cmp dword [esp + 0x2c], 0x10
mov dword [esp + 0x90], 0xf
mov dword [esp + 0x8c], ebx
mov byte [esp + 0x7c], bl
mov byte [esp + 0x1018c], 0x22
jb 0x44c1cc
mov edx, dword [esp + 0x18]
push edx
call fcn.00473948
add esp, 4
mov ecx, esi
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], ebx
mov byte [esp + 0x18], bl
call fcn.004508c0
test al, al
je 0x44c1f4
lea eax, [esp + 0x74]
push eax
lea ecx, [ebp + 0x1c]
call fcn.00422220
cmp dword [esp + 0x11c], 0x10
jb 0x44c20e
mov ecx, dword [esp + 0x108]
push ecx
call fcn.00473948
add esp, 4
cmp dword [esp + 0x138], 0x10
mov esi, 0xf
mov dword [esp + 0x11c], esi
mov dword [esp + 0x118], ebx
mov byte [esp + 0x108], bl
jb 0x44c242
mov edx, dword [esp + 0x124]
push edx
call fcn.00473948
add esp, 4
cmp dword [esp + 0xe4], 0x10
mov dword [esp + 0x138], esi
mov dword [esp + 0x134], ebx
mov byte [esp + 0x124], bl
jb 0x44c271
mov eax, dword [esp + 0xd0]
push eax
call fcn.00473948
add esp, 4
cmp dword [esp + 0xc8], 0x10
mov dword [esp + 0xe4], esi
mov dword [esp + 0xe0], ebx
mov byte [esp + 0xd0], bl
mov byte [esp + 0x1018c], 1
jb 0x44c2a8
mov ecx, dword [esp + 0xb4]
push ecx
call fcn.00473948
add esp, 4
mov dword [esp + 0xc8], esi
mov edi, dword [edi + 0x2c]
mov dword [esp + 0xc4], ebx
mov byte [esp + 0xb4], bl
cmp edi, ebx
jne 0x44b700
mov eax, dword [ebp + 0x50]
cmp eax, ebx
je 0x44c2db
push 1
dec eax
push eax
lea ecx, [ebp + 0x3c]
call fcn.0040a990
cmp dword [esp + 0x100], 0x10
jb 0x44c2f5
mov edx, dword [esp + 0xec]
push edx
call fcn.00473948
add esp, 4
lea ecx, [esp + 0x16c]
mov dword [esp + 0x100], 0xf
mov dword [esp + 0xfc], ebx
mov byte [esp + 0xec], bl
mov dword [esp + 0x1018c], 0xffffffff
call fcn.0044c880
mov al, 1
mov ecx, dword [esp + 0x10184]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1016c]
xor ecx, esp
call fcn.00474468
add esp, 0x1017c
ret