Function at 0x489010
Capabilities:
Accept command line arguments
Check if file exists
Create process on windows
Set current directory

Disassembly:
mov eax, 0x1364
call fcn.00589c60
mov eax, dword [0x63727c]
xor eax, esp
mov dword [esp + 0x1360], eax
mov edx, dword [esp + 0x1374]
mov ecx, dword [esp + 0x1370]
mov eax, dword [esp + 0x136c]
push ebx
mov ebx, dword [esp + 0x136c]
push ebp
push esi
push edx
push ecx
push eax
push ebx
mov dword [esp + 0x44], ebx
call fcn.00558c74
call fcn.005589b2
xor ebp, ebp
push ebp
mov dword [eax + 0x10], str.FileRecovery
call dword [sym.imp.ole32.dll_OleInitialize]
push 7
call sub.CrashReport.dll_Ordinal_1_1
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
cmp dword [esp + 0x30], 2
mov esi, eax
jl 0x4890a8
mov ecx, dword [esi + 4]
push str._install
push ecx
call fcn.005893a6
add esp, 8
test eax, eax
jne 0x4890a8
lea eax, [ebp + 1]
jmp 0x489785
cmp dword [esp + 0x30], 3
jl 0x4890df
mov edx, dword [esi + 4]
push str._preview_wmplayer
push edx
call fcn.005893a6
add esp, 8
test eax, eax
jne 0x4890df
mov eax, dword [esi + 8]
push 0xa
push ebp
push eax
call fcn.00589633
push eax
push ebx
call fcn.00487fc0
add esp, 0x14
jmp 0x489785
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
push 1
call dword [sym.imp.Register.dll_SetDelayDays]
push ebp
push ebp
push ebp
push 0x5d3bb8
call dword [sym.imp.Register.dll_AutoCheckLogin]
add esp, 0x14
push 0xc
push str.Glarysoft_File_Recovery
mov ecx, 0x6391ec
call fcn.0047ee00
mov ecx, 0x6391ec
call fcn.0047ea30
test eax, eax
jne 0x48914c
mov ecx, 0x6391ec
call fcn.0047ec60
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x48914c
mov ecx, 0x6391ec
call fcn.0047ec60
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
or eax, 0xffffffff
jmp 0x489785
call fcn.00481580
push str.user32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
cmp eax, ebp
je 0x489186
push str.ChangeWindowMessageFilter
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
cmp esi, ebp
je 0x489186
mov ecx, dword [0x638f7c]
push 1
push ecx
call esi
push 1
push 0x111
call esi
push edi
push 0x1088
mov dword [esp + 0x40], ebp
call fcn.0053e6be
add esp, 4
cmp eax, ebp
je 0x4891ac
push ebp
mov ecx, eax
call fcn.00484360
mov edi, eax
mov dword [esp + 0x28], eax
jmp 0x4891b2
xor edi, edi
mov dword [esp + 0x28], edi
push 0x206
lea eax, [esp + 0x116e]
xor edx, edx
push ebp
push eax
mov word [esp + 0x1174], dx
call fcn.00586030
add esp, 0xc
push 0x208
lea ecx, [esp + 0x116c]
push ecx
push ebp
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea edx, [esp + 0x1168]
push 0x5c
push edx
mov esi, 0x5e2d4c
call fcn.00588a63
lea ecx, [eax + 2]
add esp, 8
sub ecx, esi
movzx eax, word [esi]
mov word [ecx + esi], ax
add esi, 2
cmp ax, bp
jne 0x489202
lea eax, [esp + 0x1168]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea ecx, [esp + 0x14]
push ecx
mov ecx, edi
mov dword [esp + 0x28], ebp
mov dword [esp + 0x18], ebp
call fcn.00486f90
lea edx, [esp + 0x24]
push edx
mov ecx, edi
call fcn.00486ed0
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov edx, dword [esp + 0x24]
mov eax, dword [eax + 0x10]
push edx
call eax
push 0xe8
call fcn.0053e6be
mov esi, eax
add esp, 4
cmp esi, ebp
je 0x489294
mov edi, dword [esp + 0x14]
push ebp
lea ecx, [esp + 0x24]
call dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SObjectDefaultRegister::constructor_void_]
push eax
push 0x5e2d38
push ebx
push edi
mov ecx, esi
call dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SApplication::constructor_struct_SOUI::IRenderFactory___struct_HINSTANCE_____wchar_t_const___struct_SOUI::ISystemObjectRegister_const___int_]
mov edi, dword [esp + 0x28]
mov dword [esi], vtable.SOUI::SApplication.1.0
mov dword [esi + 4], vtable.SOUI::SApplication.0
jmp 0x489296
xor esi, esi
mov dword [0x638fc0], esi
call dword [sym.imp.soui.dll_public:_static_int___cdecl_SOUI::SSkinObjBase::GetClassType_void_]
cmp eax, 2
jne 0x4892af
lea ecx, [esi + 4]
call fcn.004871c0
mov esi, dword [0x638fc0]
call dword [sym.imp.soui.dll_public:_static_int___cdecl_SOUI::SWindow::GetClassType_void_]
cmp eax, 1
jne 0x4892c8
lea ecx, [esi + 4]
call fcn.00487210
mov esi, dword [0x638fc0]
call dword [sym.imp.soui.dll_public:_static_int___cdecl_SOUI::SSkinObjBase::GetClassType_void_]
cmp eax, 2
jne 0x4892e1
lea ecx, [esi + 4]
call fcn.00487260
mov esi, dword [0x638fc0]
call dword [sym.imp.soui.dll_public:_static_int___cdecl_SOUI::SCheckBox::GetClassType_void_]
cmp eax, 1
jne 0x4892fa
lea ecx, [esi + 4]
call fcn.004872b0
mov esi, dword [0x638fc0]
call dword [sym.imp.soui.dll_public:_static_int___cdecl_SOUI::SImageWnd::GetClassType_void_]
cmp eax, 1
jne 0x489313
lea ecx, [esi + 4]
call fcn.00487300
mov esi, dword [0x638fc0]
call dword [sym.imp.soui.dll_public:_static_int___cdecl_SOUI::SWindow::GetClassType_void_]
cmp eax, 1
jne 0x48932c
lea ecx, [esi + 4]
call fcn.00487350
mov esi, dword [0x638fc0]
call dword [sym.imp.soui.dll_public:_static_int___cdecl_SOUI::SMCListView::GetClassType_void_]
cmp eax, 1
jne 0x489345
lea ecx, [esi + 4]
call fcn.004873a0
mov esi, dword [0x638fc0]
call dword [sym.imp.soui.dll_public:_static_int___cdecl_SOUI::SStatic::GetClassType_void_]
cmp eax, 1
jne 0x48935e
lea ecx, [esi + 4]
call fcn.004873f0
mov esi, dword [0x638fc0]
call dword [sym.imp.soui.dll_public:_static_int___cdecl_SOUI::SWindow::GetClassType_void_]
cmp eax, 1
jne 0x489377
lea ecx, [esi + 4]
call fcn.00487440
mov esi, dword [0x638fc0]
call dword [sym.imp.soui.dll_public:_static_int___cdecl_SOUI::SWindow::GetClassType_void_]
cmp eax, 1
jne 0x489390
lea ecx, [esi + 4]
call fcn.00487490
mov esi, dword [0x638fc0]
call dword [sym.imp.soui.dll_public:_static_int___cdecl_SOUI::SActiveX::GetClassType_void_]
cmp eax, 1
jne 0x4893a9
lea ecx, [esi + 4]
call fcn.004874e0
mov esi, dword [0x638fc0]
call dword [sym.imp.soui.dll_public:_static_int___cdecl_SOUI::STileView::GetClassType_void_]
cmp eax, 1
jne 0x4893c2
lea ecx, [esi + 4]
call fcn.00487530
push 8
call fcn.0053e6be
add esp, 4
cmp eax, ebp
je 0x4893db
mov ecx, eax
call fcn.0046eac0
mov esi, eax
jmp 0x4893dd
xor esi, esi
mov ecx, dword [0x638fc0]
push esi
call dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SApplication::SetRealWndHandler_struct_SOUI::IRealWndHandler__]
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
push str.soui_sys_resource.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
cmp esi, ebp
je 0x48944b
lea ecx, [esp + 0x10]
push ecx
push ebp
mov dword [esp + 0x18], ebp
call dword [sym.imp.soui.dll_int___cdecl_SOUI::CreateResProvider_enum_SOUI::BUILTIN_RESTYPE__struct_IObjRef___]
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
add esp, 8
push ebp
push esi
call eax
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, dword [0x638fc0]
call dword [sym.imp.soui.dll_public:_unsigned_int___thiscall_SOUI::SApplication::LoadSystemNamedResource_struct_SOUI::IResProvider__]
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, dword [esp + 0x10]
cmp ecx, ebp
je 0x48944b
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, edi
mov dword [esp + 0x1c], ebp
call fcn.004870b0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov dword [esp + 0x40], ebp
mov dword [esp + 0x48], str.uires.zip
mov dword [esp + 0x58], ebp
mov dword [esp + 0x54], 0x5d3001
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
push ebp
lea edx, [esp + 0x44]
push edx
call eax
mov ecx, dword [0x638fc0]
push 1
push 0xb4
push 0x5dc960
call dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SApplication::InitXmlNamedID_struct_SOUI::TNAMEDVALUE_int__const___int__int_]
mov ecx, dword [esp + 0x18]
push str.uidef:xml_init
push ecx
mov ecx, dword [0x638fc0]
add ecx, 0x10
call dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SResProviderMgr::AddResProvider_struct_SOUI::IResProvider___wchar_t_const__]
lea ecx, [esp + 0xfe4]
mov dword [esp + 0x1c], ebp
call fcn.0042a180
lea edx, [esp + 0x1c]
push edx
mov ecx, edi
call fcn.00487020
mov eax, dword [esp + 0x1c]
cmp eax, ebp
je 0x48950f
mov ecx, dword [0x638fc0]
push eax
call dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SApplication::SetTranslator_struct_SOUI::ITranslatorMgr__]
push ebp
push ebp
lea ecx, [esp + 0xfec]
call fcn.0042a220
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
lea edx, [esp + 0xfe4]
push edx
call eax
lea ecx, [esp + 0x10a0]
call dword [sym.imp.utilities.dll_public:_void___thiscall_pugi::xml_document::constructor_void_]
push str.LAYOUT
push str.XML_MESSAGE
lea ecx, [esp + 0x10a8]
push ecx
mov ecx, dword [0x638fc0]
call dword [sym.imp.soui.dll_public:_int___thiscall_SOUI::SApplication::LoadXmlDocment_class_pugi::xml_document___wchar_t_const___wchar_t_const__]
test eax, eax
je 0x489562
push ebp
push str.SOUI
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x10ac]
call dword [sym.imp.utilities.dll_public:_class_pugi::xml_node___thiscall_pugi::xml_node::child_wchar_t_const___bool_]
mov eax, dword [eax]
push eax
call dword [sym.imp.soui.dll_int___cdecl_SOUI::SetMsgTemplate_class_pugi::xml_node_]
add esp, 4
lea ecx, [esp + 0x10a0]
call dword [sym.imp.utilities.dll_public:_void___thiscall_pugi::xml_document::destructor_void_]
push ebp
call fcn.00557678
add esp, 4
call fcn.004882c0
test eax, eax
je 0x489595
push ebp
push ebp
push ebp
push ebp
push ebp
push 0x488ed0
call fcn.00541fd3
jmp 0x4897d7
call fcn.005400b4
cmp eax, ebp
jne 0x4895a8
push 0x80004005
call fcn.00401020
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
mov edi, eax
add edi, 0x10
mov dword [esp + 0x2c], edi
call fcn.005400b4
cmp eax, ebp
jne 0x4895cd
push 0x80004005
call fcn.00401020
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
mov ebx, 0x10000
mov dword [esp + 0x10], ebx
mov edx, dword [edi - 8]
mov ecx, 1
sub ecx, dword [edi - 4]
mov esi, eax
add esi, 0x10
sub edx, 0x8000
or ecx, edx
mov dword [esp + 0x30], esi
jge 0x48960f
push 0x8000
lea ecx, [esp + 0x30]
call fcn.00403200
mov edi, dword [esp + 0x2c]
mov ebp, dword [sym.imp.Config.dll_Ordinal_11]
lea eax, [esp + 0x10]
push eax
push edi
push 0
push str.UpdateFile
push 0x5d2de4
push reloc.OLEAUT32.dll_SysReAllocString
call ebp
mov dword [esp + 0x28], ebx
mov edx, dword [esi - 8]
mov ecx, 1
sub ecx, dword [esi - 4]
sub edx, 0x8000
add esp, 0x18
or ecx, edx
mov dword [esp + 0x20], eax
jge 0x489660
push 0x8000
lea ecx, [esp + 0x34]
call fcn.00403200
mov esi, dword [esp + 0x30]
lea eax, [esp + 0x10]
push eax
push esi
push 0
push str.UpdateVer
push 0x5d2de4
push reloc.OLEAUT32.dll_SysReAllocString
call ebp
mov eax, dword [edi - 8]
push eax
push edi
call fcn.00588dab
add esp, 0x20
test eax, eax
jl 0x489977
cmp eax, dword [edi - 8]
jg 0x489977
mov dword [edi - 0xc], eax
xor ecx, ecx
mov word [edi + eax*2], cx
mov eax, dword [esi - 8]
push eax
push esi
call fcn.00588dab
add esp, 8
test eax, eax
jl 0x489977
cmp eax, dword [esi - 8]
jg 0x489977
xor edx, edx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], dx
cmp dword [esp + 0x20], edx
jne 0x48979f
push edi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x48979f
lea eax, [esp + 0x20]
push eax
call fcn.00488bf0
mov eax, dword [eax]
push 0x64
push 0x24
push eax
push str.2302007
push 0
call fcn.00428100
add esp, 0x18
cmp eax, 6
lea ecx, [esp + 0x20]
sete bl
call fcn.00401400
test bl, bl
je 0x48979f
push 1
push 0
push 0
push edi
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [esp + 0x30]
call fcn.00401400
lea ecx, [esp + 0x2c]
call fcn.00401400
lea ecx, [esp + 0xfe4]
call fcn.0042a000
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x489755
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x489764
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x489773
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x24]
test ecx, ecx
je 0x489782
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
xor eax, eax
pop edi
mov ecx, dword [esp + 0x136c]
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00584447
add esp, 0x1364
ret 0x10
lea eax, [esi - 0x10]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4897bb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [edi - 0x10]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4897d7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
call fcn.005589b2
mov ecx, dword [esp + 0x38]
mov dword [eax + 8], ecx
push str.LAYOUT:XML_BEGIN
lea ecx, [esp + 0xbd8]
call fcn.00406470
push 0
lea ecx, [esp + 0xbd8]
call dword [sym.imp.soui.dll_public_virtual:_int___thiscall_SOUI::SHostDialog::DoModal_struct_HWND____]
cmp eax, 1
jne 0x4898e8
mov ecx, 0x639200
call fcn.0042ae60
push 0
push 0x483d60
mov ecx, 0x639210
call fcn.0048d5c0
lea ecx, [esp + 0x5c]
call fcn.004515e0
push 3
lea edx, [esp + 0xf84]
push edx
lea ecx, [esp + 0x64]
call fcn.00449d80
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [esp + 0x70]
call dword [sym.imp.soui.dll_public:_struct_HWND______thiscall_SOUI::SHostWnd::Create_struct_HWND_____int__int__int__int_]
push 0
push 0
push pe_nt_image_headers32
lea ecx, [esp + 0x2a4]
call dword [sym.imp.soui.dll_public:_long_int___thiscall_SOUI::CSimpleWnd::SendMessageW_unsigned_int__unsigned_int__long_int_]
mov eax, dword [esp + 0x2a4]
push eax
lea ecx, [esp + 0x29c]
call dword [sym.imp.soui.dll_public:_int___thiscall_SOUI::CSimpleWnd::CenterWindow_struct_HWND____]
push 1
lea ecx, [esp + 0x29c]
call dword [sym.imp.soui.dll_public:_int___thiscall_SOUI::CSimpleWnd::ShowWindow_int_]
mov ecx, dword [esp + 0x2a4]
push ecx
mov ecx, 0x6391ec
call fcn.0047ebc0
mov edx, dword [esp + 0x2a4]
mov ecx, dword [0x638fc0]
push edx
call dword [sym.imp.soui.dll_public:_int___thiscall_SOUI::SApplication::Run_struct_HWND____]
mov ecx, 0x639200
mov edi, eax
call fcn.0042a4a0
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x639200
call fcn.0042aea0
lea ecx, [esp + 0x5c]
call fcn.00450460
jmp 0x4898ec
mov edi, dword [esp + 0x3c]
lea ecx, [esp + 0xbd4]
call fcn.00404600
mov ecx, dword [0x638fc0]
test ecx, ecx
je 0x48990a
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
lea ecx, [esp + 0xfe4]
call fcn.0042a000
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x489925
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x489934
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x489943
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
mov ecx, dword [esp + 0x24]
test ecx, ecx
je 0x489952
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
mov esi, dword [esp + 0x28]
test esi, esi
je 0x48996a
mov ecx, esi
call fcn.004850a0
push esi
call fcn.0053e6ed
add esp, 4
call dword [sym.imp.ole32.dll_OleUninitialize]
mov eax, edi
jmp 0x489784
push 0x80070057
call fcn.00401020
int3