Function at 0x462440
Capabilities:
Check if file exists
Check mutex on windows
Create directory
Delete directory
Delete file
Get geographical location

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x148a8
call fcn.0046f7a0
mov eax, dword [0x4b06f0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 8]
push edi
push str.Begin...
mov dword [ebp - 0x1488c], ebx
call fcn.004699e0
add esp, 4
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 0x14868], 0
call fcn.00447e20
mov dword [ebp - 0x14878], eax
xor eax, eax
push str.RICHED20.DLL
mov dword [ebp - 0x1487c], 0
mov dword [ebp - 0x14880], eax
mov dword [0x4b6514], esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x14888], eax
xor eax, eax
push 0x1fe
push eax
mov word [ebp - 0xbb4], ax
lea eax, [ebp - 0xbb2]
push eax
call fcn.0046fe20
xor eax, eax
push 0x1fe
push eax
mov word [ebp - 0x9b4], ax
lea eax, [ebp - 0x9b2]
push eax
call fcn.0046fe20
xor eax, eax
push 0x1fe
push eax
mov word [ebp - 0x11c4], ax
lea eax, [ebp - 0x11c2]
push eax
call fcn.0046fe20
xor eax, eax
push 0x3fe
push eax
mov word [ebp - 0x19d4], ax
lea eax, [ebp - 0x19d2]
push eax
call fcn.0046fe20
call fcn.0043c520
call fcn.0045ce40
push ebx
push 0x1f40
push 0x4c02f8
call fcn.00470452
push 0x4c02f8
push str.WinMain____CmdLine:__s
call fcn.004699e0
add esp, 0x44
push 0
push 0
push 0x498c90
push 0x498c98
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x4625e1
push 0x809
push 0x100
lea eax, [ebp - 0x11c4]
push eax
push 0x2c9
push dword [0x4b6514]
call fcn.00467850
push 0x809
push 0x200
lea eax, [ebp - 0x19d4]
push eax
push 0x2c8
push dword [0x4b6514]
call fcn.00467850
add esp, 0x28
lea eax, [ebp - 0x11c4]
push 0x40
push eax
lea eax, [ebp - 0x19d4]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push str.WinMain____Help_____mode_parameter
call fcn.004699e0
add esp, 4
xor eax, eax
jmp 0x46643c
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push eax
call fcn.0046fe20
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x498c90
push str.LANG
push 0x4c02f8
call fcn.0043c170
mov ebx, dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
add esp, 0x20
mov esi, dword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
test eax, eax
jne 0x462656
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x498c90
push str.LANG:
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x4626be
lea eax, [ebp - 0x20c]
push eax
call ebx
lea eax, [ebp - 0x20c]
push eax
call esi
lea eax, [ebp - 0x20c]
push eax
call fcn.00470df9
add esp, 4
mov word [0x4b6508], ax
test ax, ax
jne 0x4626ad
push 0
call fcn.0043d740
add esp, 4
test eax, eax
je 0x4626a7
lea eax, [ebp - 0x20c]
push eax
call fcn.0043c470
add esp, 4
mov word [0x4b6508], ax
jmp 0x4626ad
mov ax, word [0x4b6508]
movzx eax, ax
push eax
push str.WinMain____Language_parameter:__d
call fcn.004699e0
add esp, 8
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x498c90
push str.CMDLINE:
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x46271f
lea eax, [ebp - 0x20c]
push eax
call ebx
lea eax, [ebp - 0x20c]
push eax
call esi
lea eax, [ebp - 0x20c]
push eax
push 0x1f40
push 0x4c4178
call fcn.00470452
push 0x4c4178
push str.WinMain____CMDLINE_parameter:__s
call fcn.004699e0
add esp, 0x14
xor eax, eax
push 0x4c
push eax
mov word [ebp - 0x464], ax
lea eax, [ebp - 0x462]
push eax
call fcn.0046fe20
add esp, 0xc
lea eax, [ebp - 0x3bec]
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
test eax, eax
lea eax, [ebp - 0x464]
jne 0x46276f
movdqu xmm0, xmmword [ebp - 0x3bec]
push 0x27
push eax
sub esp, 0x10
mov eax, esp
movdqu xmmword [eax], xmm0
call fcn.0043d140
add esp, 0x18
jmp 0x46277f
push str.A6E044B8_6C25_48fc_806B_002A9582C81F
push 0x27
push eax
call fcn.00470452
add esp, 0xc
mov ebx, dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x464]
push eax
push 0x4cb028
push 0x4cff60
call ebx
push 0x4cff60
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4627c6
push 2
push 0x4cff60
call fcn.00467bd0
push eax
push 0x4cff60
push str.WinMain____Remove_folder__s___d_
call fcn.004699e0
add esp, 0x14
push 0
push 0x4cff60
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push 0x4cff60
test eax, eax
jne 0x4627f0
push str.WinMain____Error_create_directory___s__
call fcn.004699e0
add esp, 8
xor eax, eax
jmp 0x46643c
push str.WinMain____TempPathFCW_s
call fcn.004699e0
call fcn.0045d5b0
push 0x2a
lea eax, [ebp - 0xc328]
mov dword [ebp - 0x14898], 0
xorps xmm0, xmm0
mov dword [ebp - 0x14894], 0
push 0
push eax
movdqu xmmword [ebp - 0x148a8], xmm0
mov dword [ebp - 0x14890], 0
mov dword [ebp - 0xc32c], 0
call fcn.0046fe20
push 0x208
lea eax, [ebp - 0x12644]
mov dword [ebp - 0x12650], 0
xorps xmm0, xmm0
push 0
push eax
movq qword [ebp - 0x1264c], xmm0
call fcn.0046fe20
push 0x2454
lea eax, [ebp - 0x1242c]
mov dword [ebp - 0x1243c], 0
push 0
push eax
mov dword [ebp - 0x12438], 0
mov dword [ebp - 0x12434], 0
mov dword [ebp - 0x12430], 0
call fcn.0046fe20
push 0x208
lea eax, [ebp - 0xffcc]
mov dword [ebp - 0xffd8], 0
xorps xmm0, xmm0
push 0
push eax
movq qword [ebp - 0xffd4], xmm0
call fcn.0046fe20
push 0x2450
lea eax, [ebp - 0xfdb4]
mov dword [ebp - 0xfdc4], 0
push 0
push eax
mov dword [ebp - 0xfdc0], 0
mov dword [ebp - 0xfdbc], 0
mov dword [ebp - 0xfdb8], 0
call fcn.0046fe20
add esp, 0x44
mov dword [ebp - 0x14864], 0
lea eax, [ebp - 0x14860]
push 0x2210
push 0
push eax
call fcn.0046fe20
push 0x220
lea eax, [ebp - 0xc788]
mov dword [ebp - 0xc78c], 0
push 0
push eax
call fcn.0046fe20
push 0x219
lea eax, [ebp - 0xd124]
mov dword [ebp - 0xd128], 0
push 0
push eax
call fcn.0046fe20
push 0x838
lea eax, [ebp - 0xd960]
mov dword [ebp - 0xd964], 0
push 0
push eax
call fcn.0046fe20
xor eax, eax
push 0x50
push eax
mov word [ebp - 0x7f74], ax
lea eax, [ebp - 0x7f72]
push eax
call fcn.0046fe20
push 0x4333
lea eax, [ebp - 0x7f22]
push 0
push eax
call fcn.0046fe20
add esp, 0x48
push 0x4ce908
call fcn.0043d5d0
add esp, 4
test eax, eax
jne 0x4629f9
push str.setup.cfg
push 0x4cff60
push str._s_s
push 0x104
push 0x4ce908
call fcn.0046f31e
push 0x4ce908
push 0x498edc
push 0x88
push dword [0x4b6514]
call fcn.0043bcd0
add esp, 0x24
push 0x4ce908
call fcn.0045dc80
mov edi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
add esp, 4
cmp word [0x4b6758], 0
je 0x462a59
push 0x4b6758
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x14880], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x462a59
push 0x4b6758
push str.WinMain____Project_already_in_memory___s_
call fcn.004699e0
add esp, 8
mov dword [0x4b0524], 0xb7
jmp 0x4661bb
push 0
push 0
push 0x498c90
push str.NORESUME
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x462a8f
push str.WinMain____Resume_mode_disabled_by_parameter
mov dword [0x4b8f78], 0
call fcn.004699e0
add esp, 4
lea eax, [ebp - 0x464]
push eax
push 0x4b6758
call fcn.00470c8b
add esp, 8
test eax, eax
je 0x462ad3
cmp dword [0x4b8f78], 0
je 0x462ad3
push 0x4b6758
push 0x4cb028
push 0x4d0168
call ebx
push 0x4b6758
push 0x4d0168
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x462ae4
push 0x4b6758
push 0x4cff60
push 0x4d0168
call ebx
push 0x4d0168
call fcn.0043b210
add esp, 4
test eax, eax
jne 0x462b50
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
push eax
push 0x4d0168
push str.WinMain____Error_create_directory___s____d_
mov dword [ebp - 0x14868], eax
call fcn.004699e0
add esp, 0xc
cmp dword [ebp - 0x14868], 0xb7
je 0x462b46
push 2
push 0x4d0168
call fcn.00467bd0
push eax
push 0x4d0168
push str.WinMain____Remove_folder__s___d_
call fcn.004699e0
add esp, 0x14
jmp 0x4661c1
mov dword [ebp - 0x14868], 0
push 0x4d0168
push str.WinMain____DataPath:__s
call fcn.004699e0
push str.Binary.tmp
push 0x4cff60
push str._s_s
push 0x4d0370
call dword [sym.imp.USER32.dll_wsprintfW]
push 0x4d0370
call fcn.0045c230
add esp, 0x1c
push 1
push 0
push 0x4d0780
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov ecx, dword [0x4b6514]
test eax, eax
cmovne ecx, eax
push ecx
push eax
push 0x4d0780
push str.WinMain____LoadLibrary__s____d__hInstRes:__d_
mov dword [0x4b6518], ecx
call fcn.004699e0
add esp, 0x10
cmp word [0x4b67a6], 0
jne 0x462be3
push 0x100
push 0x4b6548
push str.ProductName
push dword [0x4b6514]
call fcn.0046a080
add esp, 0x10
jmp 0x462bfa
push 0x4b67a6
push 0x100
push 0x4b6548
call fcn.00470452
add esp, 0xc
push 0x4b6548
push str.WinMain____Title:__s
call fcn.004699e0
push 0
push 0
push 0x498c90
push str.INFO
push 0x4c02f8
call fcn.0043c170
add esp, 0x1c
test eax, eax
je 0x462dee
push str.Language_s__available:_n_n
push 0x200
push 0x4c7ff8
call fcn.0046ef44
mov ecx, dword [0x4ca5f0]
mov eax, 0x2a4b80c9
mov edi, dword [0x4ca5ec]
add esp, 0xc
sub ecx, edi
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x462d33
xor ebx, ebx
test eax, eax
je 0x462daf
xor esi, esi
jmp 0x462c80
push dword [esi + edi + 0x3058]
lea eax, [ebp - 0x20c]
push str._d__
push 0x104
push eax
call fcn.0046f31e
lea eax, [ebp - 0x20c]
push eax
push 0x200
push 0x4c7ff8
call fcn.0046ef44
add esp, 0x1c
lea eax, [ebp - 0x20c]
push 0x104
push eax
mov eax, dword [0x4ca5ec]
push 2
push dword [esi + eax + 0x3058]
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
lea eax, [ebp - 0x20c]
push eax
push 0x200
push 0x4c7ff8
call fcn.0046ef44
push 0x49913c
push 0x200
push 0x4c7ff8
call fcn.0046ef44
mov ecx, dword [0x4ca5f0]
lea esi, [esi + 0x306c]
mov edi, dword [0x4ca5ec]
mov eax, 0x2a4b80c9
sub ecx, edi
inc ebx
imul ecx
add esp, 0x18
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jb 0x462c80
jmp 0x462daf
push dword [0x4be97c]
lea eax, [ebp - 0x20c]
push 0x499140
push 0x104
push eax
call fcn.0046f31e
lea eax, [ebp - 0x20c]
push eax
push 0x200
push 0x4c7ff8
call fcn.0046ef44
add esp, 0x1c
lea eax, [ebp - 0x20c]
push 0x104
push eax
push 2
push dword [0x4be97c]
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
lea eax, [ebp - 0x20c]
push eax
push 0x200
push 0x4c7ff8
call fcn.0046ef44
push 0x49913c
push 0x200
push 0x4c7ff8
call fcn.0046ef44
add esp, 0x18
push 0x809
push 0x100
lea eax, [ebp - 0x11c4]
push eax
push 0x2c9
push dword [0x4b6518]
call fcn.00467850
add esp, 0x14
lea eax, [ebp - 0x11c4]
push 0x40
push eax
push 0x4c7ff8
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x4663bf
push 0
push 0
push 0x498c90
push 0x499148
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x462e24
push str.WinMain____DialogInRun_mode_
mov dword [0x4b7888], 1
call fcn.004699e0
add esp, 4
push 0
push 0
push 0x498c90
push 0x48d7e8
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x462e5a
push str.WinMain____Silent_mode_parameter
mov dword [0x4b6540], 1
call fcn.004699e0
add esp, 4
push 0
push 0
push 0x498c90
push str.NOBALLOON
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x462e90
push str.WinMain____No_balloon_parameter
mov dword [0x4b7884], 0
call fcn.004699e0
add esp, 4
push 0
push 0
push 0x498c90
push str.FULLSILENT
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x462eda
push str.WinMain____Full_Silent_mode_parameter
mov dword [0x4b6540], 1
mov dword [0x4b7884], 0
mov dword [0x4b78bc], 0
call fcn.004699e0
add esp, 4
push 0
push 0
push 0x498c90
push 0x49929c
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x462f10
push str.WinMain____Force_to_Download_parameter
mov dword [0x4b650c], 1
call fcn.004699e0
add esp, 4
push 0
push 0
push 0x498c90
push str.NOLICENSE
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x462f46
push str.WinMain____No_license_parameter
mov dword [0x4b7874], 0
call fcn.004699e0
add esp, 4
push 0
push 0
push 0x498c90
push str.NOTOOLBAR
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x462f7c
push str.WinMain____No_Toolbar_parameter
mov dword [0x4bf9f0], 0
call fcn.004699e0
add esp, 4
push 0
push 0
push 0x498c90
push str.NORMALSTATUS
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x462faf
push str.WinMain____NORMALSTATUS_parameter
mov byte [0x4b97a0], 1
call fcn.004699e0
add esp, 4
push 0
push 0
push 0x498c90
push str.SMALLSTATUS
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x462fe2
push str.WinMain____SMALLSATUS_parameter
mov byte [0x4b97a0], 0
call fcn.004699e0
add esp, 4
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x499468
push str.HWNDSTATUS:
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x463028
lea eax, [ebp - 0x20c]
push eax
call fcn.00440580
push eax
push str.WinMain____HWNDSTATUS:__d
mov dword [0x4b6530], eax
call fcn.004699e0
add esp, 0xc
push 0
push 0
push 0x498c90
push str.NOLU
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x463065
push str.WinMain____NOLU_parameter:_LiveUpdate_Disabled_
mov byte [0x4b7600], 0
mov dword [0x4b6510], 1
call fcn.004699e0
add esp, 4
push 0
push 0
push 0x498c90
push str.NOGA
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x46309b
push str.WinMain____NOGA_parameter:_Google_Analytics_Disabled_
mov dword [0x4be998], 0
call fcn.004699e0
add esp, 4
xor edi, edi
push edi
push edi
push 0x498c90
push str.GA_REG
push 0x4c02f8
mov dword [ebp - 0x14874], edi
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x4630d8
mov edi, 1
push str.WinMain____GA_REG_parameter:_Google_Analytics_in_Registry_
mov dword [ebp - 0x14874], edi
call fcn.004699e0
add esp, 4
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x498c90
push str.SCRIPT:
push 0x4c02f8
call fcn.0043c170
mov ebx, dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
add esp, 0x14
test eax, eax
je 0x463160
lea eax, [ebp - 0x20c]
push eax
call ebx
lea eax, [ebp - 0x20c]
push eax
call esi
lea eax, [ebp - 0x20c]
push eax
push 0x104
push 0x4b8f7c
call fcn.00470452
push 0x4b8f7c
call fcn.0043d5d0
mov ecx, dword [0x4b8f74]
test eax, eax
mov eax, 1
cmovne ecx, eax
push ecx
push 0x4b8f7c
push str.WinMain____ScriptFile:__s___d_
mov dword [0x4b8f74], ecx
call fcn.004699e0
add esp, 0x1c
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x498c90
push 0x499688
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x463240
lea eax, [ebp - 0x20c]
push eax
call ebx
lea eax, [ebp - 0x20c]
push eax
call esi
lea eax, [ebp - 0x20c]
push eax
push str.WinMain____Params_X:__s
call fcn.004699e0
add esp, 8
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
je 0x4631ed
push 0x4cae20
push 0x104
push 0x4b8108
call fcn.00470452
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
push 0x4b8108
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x463206
lea eax, [ebp - 0x20c]
push eax
push 0x104
push 0x4b8108
call fcn.00470452
add esp, 0xc
push 0x4b8108
push str.WinMain____TgdFolder:__s
call fcn.004699e0
add esp, 8
mov dword [0x4b8f5c], 0
mov dword [0x4b7854], 0
mov dword [0x4b8f58], 0
mov dword [0x4b7858], 0
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x498c90
push str.CUSTOMEREXP
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x463304
mov ecx, 0x48f734
lea eax, [ebp - 0x20c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x46329c
test dx, dx
je 0x463298
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x46329c
add eax, 4
add ecx, 4
test dx, dx
jne 0x463276
xor eax, eax
jmp 0x4632a1
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4632aa
lea ebx, [eax + 1]
jmp 0x4632ef
mov ecx, 0x49398c
lea eax, [ebp - 0x20c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4632db
test dx, dx
je 0x4632d7
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4632db
add eax, 4
add ecx, 4
test dx, dx
jne 0x4632b5
xor ecx, ecx
jmp 0x4632e0
sbb ecx, ecx
or ecx, 1
mov eax, dword [0x4b78c0]
test ecx, ecx
mov ebx, 1
cmove eax, ebx
push eax
push str.WinMain____Params:_CUSTOMEREXP:__d
mov dword [0x4b78c0], eax
call fcn.004699e0
add esp, 8
jmp 0x463309
mov ebx, 1
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x498c90
push str.AVQMSG
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x4633c8
mov ecx, 0x48f734
lea eax, [ebp - 0x20c]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x463366
test dx, dx
je 0x463362
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x463366
add eax, 4
add ecx, 4
test dx, dx
jne 0x463340
xor eax, eax
jmp 0x46336b
sbb eax, eax
or eax, 1
test eax, eax
je 0x4633b5
mov ecx, 0x49398c
lea eax, [ebp - 0x20c]
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4633a6
test dx, dx
je 0x4633a2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4633a6
add eax, 4
add ecx, 4
test dx, dx
jne 0x463380
xor ecx, ecx
jmp 0x4633ab
sbb ecx, ecx
or ecx, 1
mov eax, dword [0x4b78d0]
test ecx, ecx
cmove eax, ebx
push eax
push str.WinMain____Params:_AVQMSG:__d
mov dword [0x4b78d0], eax
call fcn.004699e0
add esp, 8
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x498c90
push str.RUNAPPATEND
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x463488
mov ecx, 0x48f734
lea eax, [ebp - 0x20c]
mov edi, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x463426
test dx, dx
je 0x463422
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x463426
add eax, 4
add ecx, 4
test dx, dx
jne 0x463400
xor eax, eax
jmp 0x46342b
sbb eax, eax
or eax, 1
test eax, eax
je 0x463475
mov ecx, 0x49398c
lea eax, [ebp - 0x20c]
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x463466
test dx, dx
je 0x463462
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x463466
add eax, 4
add ecx, 4
test dx, dx
jne 0x463440
xor ecx, ecx
jmp 0x46346b
sbb ecx, ecx
or ecx, 1
mov eax, dword [0x4b78c8]
test ecx, ecx
cmove eax, ebx
push eax
push str.WinMain____Params:_RUNAPPATEND:__d
mov dword [0x4b78c8], eax
call fcn.004699e0
add esp, 8
push 0
push 0
push 0x498c90
push str.VERYSILENT
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x463509
push str.WinMain____Very_Silent_mode_parameter
mov dword [0x4b6540], 1
mov dword [0x4b7884], 0
mov dword [0x4b78bc], 0
call fcn.004699e0
add esp, 4
cmp word [0x4c4178], 0
je 0x4634f2
push 0x499874
push 0x1f40
push 0x4c4178
call fcn.0046ef44
jmp 0x463506
push 0x49987c
push 0x1f40
push 0x4c4178
call fcn.00470452
add esp, 0xc
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x498c90
push str.DIR
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x463573
lea eax, [ebp - 0x20c]
push eax
push 0x104
push 0x4b8728
call fcn.00470452
push 0x104
push 0x4b8728
call fcn.00460070
add esp, 0x14
push 0x4b8728
call esi
lea eax, [ebp - 0x20c]
push eax
push str.WinMain____Params_DIR:__s
call fcn.004699e0
add esp, 8
push 0
push 0
push 0x498c90
push str.NOREBOOT
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x4635d6
push str.WinMain____NOREBOOT_parameter
call fcn.004699e0
add esp, 4
cmp word [0x4c4178], 0
je 0x4635bf
push str.__NOREBOOT
push 0x1f40
push 0x4c4178
call fcn.0046ef44
jmp 0x4635d3
push str._NOREBOOT
push 0x1f40
push 0x4c4178
call fcn.00470452
add esp, 0xc
call fcn.0043d7e0
cmp dword [0x4b8f6c], 0
mov ebx, eax
je 0x4635ef
test ebx, ebx
jne 0x4635ef
lea esi, [eax + 1]
jmp 0x4635f1
xor esi, esi
push esi
push str.WinMain____NeedToRunAsAdmin:__d
mov dword [ebp - 0x1487c], esi
call fcn.004699e0
add esp, 8
test esi, esi
jne 0x4661b5
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x66c], ax
lea eax, [ebp - 0x66a]
push eax
call fcn.0046fe20
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xfc4], ax
lea eax, [ebp - 0xfc2]
push eax
call fcn.0046fe20
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x15d4], ax
lea eax, [ebp - 0x15d2]
push eax
call fcn.0046fe20
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push eax
call fcn.0046fe20
push 0x4bfc22
lea eax, [ebp - 0x66c]
push 0x104
push eax
call fcn.00470452
push 0x104
lea eax, [ebp - 0x15d4]
push eax
push 0x104
lea eax, [ebp - 0xfc4]
push eax
lea eax, [ebp - 0x66c]
push 0x104
push eax
call fcn.0043dbc0
add esp, 0x54
cmp dword [0x4be998], esi
jne 0x46372c
test edi, edi
jne 0x46372c
cmp word [ebp - 0x66c], di
je 0x463fda
cmp dword [0x4b6510], edi
jne 0x463fda
push 0x4999a0
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
lea eax, [ebp - 0x66c]
push 0x4999a0
push eax
lea eax, [ebp - 0x414]
push eax
mov eax, dword [sym.imp.SHLWAPI.dll_PathCombineW]
call eax
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430a80
add esp, 8
jmp 0x463fda
push 0x104
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x14870], 1
push eax
push str.GAclientID
push 0x4beba8
push closesocket
call fcn.00430ca0
mov edi, eax
add esp, 0x14
test edi, edi
jne 0x463788
push 0x104
lea eax, [ebp - 0x20c]
push eax
push str.GAclientID
push 0x4beba8
push closesocket
call fcn.00430ca0
mov edi, eax
add esp, 0x14
test edi, edi
je 0x4637dc
lea ecx, [ebp - 0x20c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x463791
sub ecx, edx
sar ecx, 1
lea esi, [ecx + 1]
cmp esi, 0x3fffffff
jle 0x4637af
xor eax, eax
jmp 0x4637ca
add esi, esi
mov eax, esi
call fcn.00470be0
mov eax, esp
lea ecx, [ebp - 0x20c]
push 3
push esi
push ecx
push eax
call fcn.0045c170
push eax
lea eax, [ebp - 0x7f22]
push 0x27
push eax
call fcn.004703fd
add esp, 0xc
push 0x4999a0
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x414]
push eax
mov eax, dword [sym.imp.SHLWAPI.dll_PathCombineW]
call eax
cmp dword [ebp - 0x14874], 0
je 0x463a3c
lea eax, [ebp - 0x14870]
push eax
push 0x4999a0
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.00430c20
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x414]
push 0x104
push eax
call fcn.00470452
mov esi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x414]
add esp, 0x1c
push 0x4999a0
push eax
call esi
push 0x29
lea eax, [ebp - 0x7f74]
push eax
push str.TrackingId
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ca0
add esp, 0x14
test eax, eax
jne 0x4638ad
push 0x4bedb0
lea eax, [ebp - 0x7f74]
push 0x29
push eax
call fcn.00470452
push 0x104
push 0x4bedb0
push 1
push str.TrackingId
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ff0
add esp, 0x24
push 0x65
lea eax, [ebp - 0x62f5]
push eax
push str.ProductName
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ca0
add esp, 0x14
test eax, eax
jne 0x463908
push 0x4befb8
lea eax, [ebp - 0x62f5]
push 0x65
push eax
call fcn.00470452
push 0x51
push 0x4befb8
push 1
push str.ProductName
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ff0
add esp, 0x24
push 0x65
lea eax, [ebp - 0x622b]
push eax
push str.ProductVersion
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ca0
add esp, 0x14
test eax, eax
jne 0x463963
push 0x4bf060
lea eax, [ebp - 0x622b]
push 0x65
push eax
call fcn.00470452
push 0x51
push 0x4bf060
push 1
push str.ProductVersion
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ff0
add esp, 0x24
push str.Campaign
lea eax, [ebp - 0x414]
push eax
call esi
push 0x65
lea eax, [ebp - 0x5b57]
push eax
push 0x4999d4
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ca0
push 0x65
lea eax, [ebp - 0x5f59]
push eax
push str.Name
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ca0
push 0x104
lea eax, [ebp - 0x6161]
push eax
push str.Content
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ca0
push 0x65
lea eax, [ebp - 0x5e8f]
push eax
push str.Source
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ca0
add esp, 0x50
lea eax, [ebp - 0x5dc5]
push 0x33
push eax
push str.Medium
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ca0
push 0x104
lea eax, [ebp - 0x5d5f]
push eax
push str.Keyword
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ca0
add esp, 0x28
jmp 0x463ed1
push 1
push 0x4999a0
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.004310e0
add esp, 0x10
lea eax, [ebp - 0x414]
cmp word [0x4bedb0], 0
je 0x463a88
push 0x104
push 0x4bedb0
push 1
push str.TrackingId
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x463a9b
push str.TrackingId
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
push 0x4bedb0
lea eax, [ebp - 0x7f74]
push 0x29
push eax
call fcn.00470452
add esp, 0xc
cmp dword [0x4bf05c], 0
jne 0x463b11
cmp word [0x4befb8], 0
lea eax, [ebp - 0x414]
je 0x463ae8
push 0x51
push 0x4befb8
push 1
push str.ProductName
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x463afb
push str.ProductName
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
push 0x4befb8
lea eax, [ebp - 0x62f5]
push 0x65
push eax
call fcn.00470452
add esp, 0xc
cmp dword [0x4bf104], 0
jne 0x463b71
cmp word [0x4bf060], 0
lea eax, [ebp - 0x414]
je 0x463b48
push 0x51
push 0x4bf060
push 1
push str.ProductVersion
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x463b5b
push str.ProductVersion
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
push 0x4bf060
lea eax, [ebp - 0x622b]
push 0x65
push eax
call fcn.00470452
add esp, 0xc
push str.Campaign
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
cmp word [0x4bf91a], 0
lea eax, [ebp - 0x414]
je 0x463bb1
push 0x65
push 0x4bf91a
push 1
push 0x4999d4
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x463bc4
push 0x4999d4
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
cmp word [0x4bf518], 0
lea eax, [ebp - 0x414]
je 0x463bf2
push 0x65
push 0x4bf518
push 1
push str.Name
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x463c05
push str.Name
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
cmp word [0x4bf310], 0
lea eax, [ebp - 0x414]
je 0x463c36
push 0x104
push 0x4bf310
push 1
push str.Content
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x463c49
push str.Content
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
cmp word [0x4bf5e2], 0
lea eax, [ebp - 0x414]
je 0x463c77
push 0x65
push 0x4bf5e2
push 1
push str.Source
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x463c8a
push str.Source
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
cmp word [0x4bf6ac], 0
lea eax, [ebp - 0x414]
je 0x463cb8
push 0x33
push 0x4bf6ac
push 1
push str.Medium
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x463ccb
push str.Medium
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
cmp word [0x4bf712], 0
lea eax, [ebp - 0x414]
je 0x463cfc
push 0x104
push 0x4bf712
push 1
push str.Keyword
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x463d0f
push str.Keyword
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
cmp word [0x4bf91a], 0
lea eax, [ebp - 0x414]
je 0x463d3d
push 0x65
push 0x4bf91a
push 1
push 0x4999d4
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x463d50
push 0x4999d4
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
push 0x4bf91a
lea eax, [ebp - 0x5b57]
push 0x65
push eax
call fcn.00470452
push 0x4bf712
lea eax, [ebp - 0x5d5f]
push 0x104
push eax
call fcn.00470452
push 0x4bf6ac
lea eax, [ebp - 0x5dc5]
push 0x33
push eax
call fcn.00470452
push 0x4bf518
lea eax, [ebp - 0x5f59]
push 0x65
push eax
call fcn.00470452
push 0x4bf5e2
lea eax, [ebp - 0x5e8f]
push 0x65
push eax
call fcn.00470452
xor eax, eax
push 0x50
push eax
mov word [ebp - 0xc2fc], ax
lea eax, [ebp - 0xc2fa]
push eax
call fcn.0046fe20
add esp, 0x48
lea eax, [ebp - 0xc2aa]
push 0x4333
push 0
push eax
call fcn.0046fe20
xor eax, eax
push 0x1ffe
push eax
mov word [ebp - 0x3bdc], ax
lea eax, [ebp - 0x3bda]
push eax
call fcn.0046fe20
lea eax, [ebp - 0x5b57]
push eax
lea eax, [ebp - 0x9edf]
push 0x65
push eax
call fcn.00470452
lea eax, [ebp - 0x5d5f]
push eax
lea eax, [ebp - 0xa0e7]
push 0x104
push eax
call fcn.00470452
lea eax, [ebp - 0x5dc5]
push eax
lea eax, [ebp - 0xa14d]
push 0x33
push eax
call fcn.00470452
lea eax, [ebp - 0x5f59]
push eax
lea eax, [ebp - 0xa2e1]
push 0x65
push eax
call fcn.00470452
add esp, 0x48
lea eax, [ebp - 0x5e8f]
push eax
lea eax, [ebp - 0xa217]
push 0x65
push eax
call fcn.00470452
add esp, 0xc
lea eax, [ebp - 0x3bdc]
push 0x1000
push eax
lea eax, [ebp - 0xc2fc]
push eax
call fcn.004443c0
cmp word [ebp - 0x3bdc], 0
je 0x463eb8
push 0x104
lea eax, [ebp - 0x3bdc]
push eax
push 1
push str.Params
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x463ed1
push str.Params
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
cmp dword [ebp - 0x14870], 0
je 0x463fda
push 0x4bf108
lea eax, [ebp - 0x711f]
push 0x104
push eax
call fcn.00470452
push str.appview
lea eax, [ebp - 0x7efb]
push 0x1e
push eax
call fcn.00470452
add esp, 0x18
cmp dword [0x4be99c], 0
jne 0x463f38
lea eax, [ebp - 0x7f74]
push eax
push 0x4be9a0
call fcn.004449a0
lea eax, [ebp - 0x7f22]
push eax
push str.GAParams.UniqueId:__s
call fcn.00469d40
add esp, 8
test edi, edi
jne 0x463fda
cmp word [0x4beba8], di
je 0x463fda
cmp byte [ebp - 0x7f22], 0
je 0x463fda
lea ecx, [ebp - 0x7f22]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x463f63
sub ecx, edx
lea esi, [ecx + 1]
cmp esi, 0x3fffffff
jle 0x463f7b
xor eax, eax
jmp 0x463f95
lea eax, [esi + esi]
call fcn.00470be0
mov eax, esp
lea ecx, [ebp - 0x7f22]
push 3
push esi
push ecx
push eax
call fcn.00431390
push eax
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.00470452
add esp, 0xc
lea eax, [ebp - 0x20c]
push 0x104
push eax
push 1
push str.GAClientID
push 0x4beba8
test ebx, ebx
je 0x463fcd
push closesocket
jmp 0x463fd2
push closesocket
call fcn.00430ff0
add esp, 0x18
call fcn.0045fc60
mov dword [0x4b6520], eax
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x1bdc], ax
lea eax, [ebp - 0x1bda]
push eax
call fcn.0046fe20
add esp, 0xc
lea eax, [ebp - 0x1bdc]
push str.IAMCu.dll
push 0x4d0578
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [0x4bf9fc], 0
je 0x46403d
cmp dword [ebp - 0x14878], 0
je 0x46403d
lea eax, [ebp - 0x1bdc]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x4b6524], eax
xor eax, eax
mov byte [ebp - 0x14874], 0
push 0x206
push eax
mov word [ebp - 0x13cc], ax
lea eax, [ebp - 0x13ca]
push eax
call fcn.0046fe20
mov eax, dword [0x4bf9f0]
add esp, 0xc
test eax, eax
je 0x4640d1
push str.TBI.exe
push 0x4cff60
lea eax, [ebp - 0x13cc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
call fcn.004279f0
cmp dword [0x4c8840], 0
mov byte [ebp - 0x14874], al
jne 0x4640c7
push 0x4c8866
push 0x4c8850
push dword [ebp - 0x14874]
call fcn.004274e0
add esp, 0xc
test eax, eax
jne 0x4640c3
lea eax, [ebp - 0x13cc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4640c7
xor eax, eax
jmp 0x4640cc
mov eax, 1
mov dword [0x4bf9f0], eax
push eax
push str.WinMain____Toolbar:__d
call fcn.004699e0
push 0
push 0x4bf9e4
push dword [0x4b6514]
call fcn.0043adc0
mov ecx, eax
add esp, 0x14
mov dword [0x4b651c], ecx
test ecx, ecx
jne 0x464141
push 0x4c02f0
push str._BVRP_PSA
push 0x4ce2f0
call fcn.0042ca80
add esp, 0xc
mov dword [0x4b6538], eax
test eax, eax
jne 0x464139
push 0x4c02f0
push str._BV69_FCW_
push 0x4ce2f0
call fcn.0042ca80
add esp, 0xc
mov dword [0x4b6538], eax
mov ecx, dword [0x4b651c]
jmp 0x464146
mov eax, dword [0x4b6538]
cmp word [0x4b8108], 0
je 0x464159
cmp dword [0x4b7858], 0
je 0x4641d5
test ecx, ecx
jne 0x46417a
test eax, eax
jne 0x46417a
push 0x4ce700
push 0x104
push 0x4b8108
call fcn.00470452
add esp, 0xc
jmp 0x4641d5
push str.A6E044B8_6C25_48fc_806B_002A9582C81F
push 0x4b6758
call fcn.00470c8b
add esp, 8
test eax, eax
je 0x4641c0
cmp dword [0x4b8f78], 0
je 0x4641c0
push 0x4b6758
push 0x4cb028
push 0x4b8108
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push str.7B28E39C_883C_4f49_ABFB_5D16796F2DD9
push 0x4b8108
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x4641d5
push str.7B28E39C_883C_4f49_ABFB_5D16796F2DD9
push 0x4cff60
push 0x4b8108
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x104
push 0x4b7af0
call fcn.00460070
add esp, 8
push 0x4b7af0
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
push 0x4b7af0
test eax, eax
je 0x46420d
push 0x4b8108
push 0x4d0b90
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
jmp 0x464218
push 0x4d0b90
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x4d0b90
push str.WinMain____ExeFile:__s
call fcn.004699e0
xor ebx, ebx
add esp, 8
cmp dword [0x4b6540], ebx
mov esi, 2
setne bl
cmp dword [0x4b7864], 0
mov edi, dword [sym.imp.USER32.dll_MessageBoxW]
je 0x464300
cmp dword [0x4b6540], 0
jne 0x464300
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4b6518]
mov dword [ebp - 0x148a8], eax
mov eax, dword [0x4ca5ec]
push 0x4ca5ec
mov eax, dword [ecx + eax + 0x3058]
lea ecx, [ebp - 0x14898]
mov dword [ebp - 0x148a4], eax
call fcn.0045bff0
mov ecx, dword [0x4b7868]
mov eax, dword [0x4be980]
neg ecx
mov dword [ebp - 0x1489c], eax
mov eax, dword [0x4b7898]
sbb ecx, ecx
and ecx, 8
neg eax
sbb eax, eax
xor edx, edx
and eax, 4
or ecx, eax
cmp dword [0x4b7894], edx
mov eax, esi
cmovne eax, edx
or ecx, eax
lea eax, [ebp - 0x148a8]
push eax
push edx
mov dword [ebp - 0x148a0], ecx
call fcn.00429da0
mov ebx, eax
push ebx
push str.WinMain____Dialog_choiceLang:__d
call fcn.004699e0
add esp, 0x10
cmp ebx, 1
jne 0x465bc9
push dword [ebp - 0x1489c]
call fcn.0045c1b0
add esp, 4
cmp byte [0x4b7600], 0
je 0x4643d3
push dword [0x4b760c]
imul eax, dword [0x4be980], 0x306c
lea ecx, [ebp - 0x14868]
push dword [0x4b7608]
push ecx
push 0x4ce2f0
add eax, 0x2a3e
add eax, dword [0x4ca5ec]
push eax
call fcn.00445f00
mov ecx, eax
add esp, 0x14
test ecx, ecx
je 0x4643bf
cmp dword [0x4b7618], 0
je 0x4643ad
cmp dword [0x4b6540], 0
jne 0x4643ad
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4ca5ec]
push dword [ecx + eax + 0x3058]
lea eax, [ebp - 0x9b4]
push 0x100
push eax
push 0x2ca
push dword [0x4b6518]
call fcn.00467850
add esp, 0x14
lea eax, [ebp - 0x9b4]
push 0x40024
push 0x4c92e0
push eax
push 0
call edi
xor ecx, ecx
cmp eax, 6
sete cl
test ecx, ecx
jne 0x4643d3
cmp dword [0x4b7610], ecx
jne 0x4661b5
jmp 0x4643cc
cmp dword [0x4b7614], 0
jne 0x465bf5
mov byte [0x4b7600], 0
cmp dword [0x4b788c], 0
je 0x464500
mov ecx, dword [0x4b61b4]
mov eax, 0x14d843bf
sub ecx, dword [0x4b61b0]
xor esi, esi
imul ecx
mov dword [ebp - 0x1486c], esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x465c6f
xor edi, edi
lea ecx, [ecx]
test esi, esi
jne 0x4644fa
mov eax, dword [0x4b61b0]
add eax, 0x200
add eax, edi
push eax
push str.WinMain____Platform:__s
call fcn.004699e0
mov eax, dword [0x4b61b0]
add eax, 0x400
add eax, edi
push str.Win32
push eax
call fcn.00470c8b
add esp, 0x10
test eax, eax
jne 0x46445a
xor ecx, ecx
cmp dword [0x4b61a4], ecx
sete cl
jmp 0x464482
mov eax, dword [0x4b61b0]
add eax, 0x400
add eax, edi
push str.Win64
push eax
call fcn.00470c8b
add esp, 8
mov ecx, 1
test eax, eax
cmove ecx, dword [0x4b61a4]
push ecx
push str.WinMain____ProcArchitecture:_Continue:__d
mov dword [ebp - 0x14870], ecx
call fcn.004699e0
mov esi, dword [ebp - 0x14870]
add esp, 8
test esi, esi
je 0x4644bd
mov eax, dword [0x4b61b0]
push dword [ebp - 0x1486c]
add eax, 0x600
add eax, edi
push eax
call fcn.0043b030
add esp, 8
mov esi, eax
mov ecx, dword [0x4b61b4]
mov eax, 0x14d843bf
sub ecx, dword [0x4b61b0]
add edi, 0x624
inc dword [ebp - 0x1486c]
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x1486c], eax
jb 0x464410
test esi, esi
je 0x465c69
mov esi, 2
nop
cmp dword [0x4b786c], 0
je 0x464625
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x498c90
push 0x499c2c
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
jne 0x46455b
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x498c90
push str._PASSWORD:
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x4645bf
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
push 0xffffffffffffffff
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0xc320]
push 0x11
push eax
call fcn.00470a11
add esp, 0x10
lea eax, [ebp - 0x20c]
mov ecx, 0x4b6fc6
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4645b6
test dx, dx
je 0x4645b2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4645b6
add eax, 4
add ecx, 4
test dx, dx
jne 0x464590
xor eax, eax
jmp 0x4645bb
sbb eax, eax
or eax, 1
test eax, eax
je 0x464625
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4b6518]
mov dword [ebp - 0xc32c], eax
mov eax, dword [0x4ca5ec]
mov eax, dword [ecx + eax + 0x3058]
mov ecx, dword [0x4b7898]
neg ecx
mov dword [ebp - 0xc328], eax
mov eax, esi
sbb ecx, ecx
xor edx, edx
and ecx, 4
cmp dword [0x4b7894], edx
cmovne eax, edx
or ecx, eax
lea eax, [ebp - 0xc32c]
push eax
push edx
mov dword [ebp - 0xc324], ecx
call fcn.0042b1c0
mov ebx, eax
push ebx
push str.WinMain____Dialog_password:__d
call fcn.004699e0
add esp, 0x10
cmp ebx, 3
je 0x46423a
cmp ebx, 1
je 0x46463b
test ebx, ebx
jne 0x465bc9
mov edi, ebx
mov dword [ebp - 0x1486c], edi
cmp dword [0x4b7870], 0
je 0x464a70
cmp dword [0x4b6540], 0
jne 0x464a70
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4b6518]
mov dword [ebp - 0x14864], eax
mov eax, dword [0x4ca5ec]
push 0x4d0988
push 0x104
mov eax, dword [ecx + eax + 0x3058]
mov dword [ebp - 0x14860], eax
lea eax, [ebp - 0x14858]
push eax
call fcn.00470452
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4ca5ec]
add ecx, 0x836
add eax, ecx
push eax
lea eax, [ebp - 0x14650]
push 0x800
push eax
call fcn.00470452
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4ca5ec]
add eax, 0x1836
add eax, ecx
push eax
lea eax, [ebp - 0x13650]
push 0x800
push eax
call fcn.00470452
add esp, 0x24
mov dword [ebp - 0x1485c], 8
cmp dword [0x4b7878], 0
jne 0x46470f
mov eax, dword [0x4b7870]
cmp eax, 2
jne 0x46478a
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4b6518]
mov dword [ebp - 0xc78c], eax
mov eax, dword [0x4ca5ec]
push 0x4b8728
push 0x104
mov eax, dword [ecx + eax + 0x3058]
mov dword [ebp - 0xc788], eax
mov eax, dword [0x4b78c0]
mov dword [ebp - 0xc578], eax
mov eax, dword [0x4b78c4]
mov dword [ebp - 0xc574], eax
mov eax, dword [0x4b78c8]
mov dword [ebp - 0xc570], eax
mov eax, dword [0x4b78cc]
mov dword [ebp - 0xc56c], eax
lea eax, [ebp - 0xc780]
push eax
call fcn.00470452
mov eax, dword [0x4b7870]
add esp, 0xc
mov dword [ebp - 0xc784], 0x20
cmp eax, 1
mov eax, dword [0x4b6518]
push 0x4ca5ec
jne 0x464910
mov dword [ebp - 0x12650], eax
mov eax, dword [0x4be980]
imul ecx, eax, 0x306c
mov dword [ebp - 0x1243c], eax
mov eax, dword [0x4ca5ec]
mov eax, dword [ecx + eax + 0x3058]
lea ecx, [ebp - 0x12438]
mov dword [ebp - 0x1264c], eax
call fcn.0045bff0
mov eax, dword [0x4b78d8]
mov dword [ebp - 0x12420], eax
mov eax, dword [0x4b78dc]
mov dword [ebp - 0x1241c], eax
mov eax, dword [0x4b7878]
mov dword [ebp - 0x1242c], eax
lea eax, [ebp - 0x14864]
push 0x2214
push eax
lea eax, [ebp - 0x12418]
push eax
call fcn.0046f7d0
mov eax, dword [0x4b78d0]
lea esi, [ebp - 0xc78c]
mov ecx, 0x89
lea edi, [ebp - 0x10204]
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x12428], eax
mov eax, dword [0x4b78d4]
mov dword [ebp - 0x12424], eax
mov eax, dword [0x4b78e0]
mov dword [ebp - 0xffe0], eax
mov eax, dword [0x4b78e4]
push 0x4b8314
mov dword [ebp - 0xffdc], eax
lea eax, [ebp - 0x12644]
push 0x104
push eax
call fcn.00470452
mov edx, dword [ebp - 0x12648]
test ebx, ebx
mov ecx, dword [0x4b7898]
mov eax, 1
cmovne edx, eax
mov esi, 2
neg ecx
mov eax, esi
sbb ecx, ecx
xor edi, edi
and ecx, 4
cmp dword [0x4b7894], edi
cmovne eax, edi
or ecx, eax
lea eax, [ebp - 0x12650]
push eax
or edx, ecx
push edi
mov dword [ebp - 0x12648], edx
call fcn.0042b5b0
mov ebx, eax
push ebx
push str.WinMain____Dialog_Welcome:__d
call fcn.004699e0
add esp, 0x28
cmp ebx, 1
je 0x4648c8
cmp ebx, 3
je 0x4648c8
cmp ebx, 0xd
jne 0x464b07
mov eax, dword [ebp - 0x12428]
mov dword [0x4b78d0], eax
cmp dword [ebp - 0x1242c], edi
je 0x464a6a
lea eax, [ebp - 0x101f8]
push eax
push 0x104
push 0x4b8728
call fcn.00470452
mov eax, dword [ebp - 0xfff0]
mov dword [0x4b78c0], eax
mov eax, dword [ebp - 0xffe8]
mov dword [0x4b78c8], eax
jmp 0x464a67
mov dword [ebp - 0xffd8], eax
mov eax, dword [0x4be980]
imul ecx, eax, 0x306c
mov dword [ebp - 0xfdc4], eax
mov eax, dword [0x4ca5ec]
mov eax, dword [ecx + eax + 0x3058]
lea ecx, [ebp - 0xfdc0]
mov dword [ebp - 0xffd4], eax
call fcn.0045bff0
mov eax, dword [0x4b78d8]
mov dword [ebp - 0xfdac], eax
mov eax, dword [0x4b78dc]
mov dword [ebp - 0xfda8], eax
lea eax, [ebp - 0x14864]
push 0x2214
push eax
lea eax, [ebp - 0xfda4]
push eax
call fcn.0046f7d0
mov eax, dword [0x4b78d0]
lea esi, [ebp - 0xc78c]
mov ecx, 0x89
lea edi, [ebp - 0xdb90]
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xfdb4], eax
mov eax, dword [0x4b78d4]
mov dword [ebp - 0xfdb0], eax
mov eax, dword [0x4b78e0]
mov dword [ebp - 0xd96c], eax
mov eax, dword [0x4b78e4]
push 0x4b8314
mov dword [ebp - 0xd968], eax
lea eax, [ebp - 0xffcc]
push 0x104
push eax
call fcn.00470452
mov edx, dword [ebp - 0xffd0]
test ebx, ebx
mov ecx, dword [0x4b7898]
mov eax, 1
cmovne edx, eax
mov esi, 2
neg ecx
mov eax, esi
sbb ecx, ecx
xor edi, edi
and ecx, 4
cmp dword [0x4b7894], edi
cmovne eax, edi
or ecx, eax
lea eax, [ebp - 0xffd8]
push eax
or edx, ecx
push edi
mov dword [ebp - 0xffd0], edx
call fcn.0042bd10
mov ebx, eax
push ebx
push str.WinMain____Dialog_Welcome2:__d
call fcn.004699e0
add esp, 0x28
cmp ebx, 1
je 0x464a30
cmp ebx, 3
je 0x464a30
cmp ebx, 0xd
jne 0x464b07
lea eax, [ebp - 0xdb84]
push eax
push 0x104
push 0x4b8728
call fcn.00470452
mov eax, dword [ebp - 0xd97c]
mov dword [0x4b78c0], eax
mov eax, dword [ebp - 0xd974]
mov dword [0x4b78c8], eax
mov eax, dword [ebp - 0xfdb4]
mov dword [0x4b78d0], eax
add esp, 0xc
mov edi, dword [ebp - 0x1486c]
cmp ebx, 0xd
jne 0x464b07
cmp dword [0x4b7870], 1
mov eax, dword [ebp - 0x1243c]
push 0x4d0370
je 0x464a93
mov eax, dword [ebp - 0xfdc4]
push eax
mov dword [0x4be980], eax
call fcn.0045c890
mov eax, dword [0x4b6518]
add esp, 8
test eax, eax
je 0x464acc
cmp eax, dword [0x4b6514]
je 0x464acc
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push eax
push 0x4d0780
push str.WinMain____unload__s___d
call fcn.004699e0
add esp, 0xc
push 1
push 0
push 0x4d0780
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov ecx, dword [0x4b6514]
test eax, eax
cmovne ecx, eax
push ecx
push eax
push 0x4d0780
push str.WinMain____LoadLibrary__s____d__hInstRes:__d_
mov dword [0x4b6518], ecx
call fcn.004699e0
add esp, 0x10
mov ebx, edi
jmp 0x464643
cmp ebx, 3
je 0x464500
cmp ebx, 1
je 0x464b20
test ebx, ebx
jne 0x465bc9
lea ecx, [ecx]
cmp dword [0x4b7874], 0
je 0x464bd5
cmp dword [0x4b6540], 0
jne 0x464bd5
cmp dword [0x4b7870], 0
jne 0x464bd5
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4b6518]
mov dword [ebp - 0x14864], eax
mov eax, dword [0x4ca5ec]
push 0x4d0988
push 0x104
mov eax, dword [ecx + eax + 0x3058]
mov dword [ebp - 0x14860], eax
lea eax, [ebp - 0x14858]
push eax
call fcn.00470452
mov edx, dword [ebp - 0x1485c]
test ebx, ebx
mov ecx, dword [0x4b7898]
mov eax, 1
cmovne edx, eax
neg ecx
mov eax, esi
sbb ecx, ecx
xor edi, edi
and ecx, 4
cmp dword [0x4b7894], edi
cmovne eax, edi
or ecx, eax
lea eax, [ebp - 0x14864]
push eax
or edx, ecx
push edi
mov dword [ebp - 0x1485c], edx
call fcn.0042ad20
mov ebx, eax
push ebx
push str.WinMain____Dialog_license:__d
call fcn.004699e0
add esp, 0x1c
cmp ebx, 3
je 0x465bea
cmp ebx, 1
je 0x464beb
test ebx, ebx
jne 0x465bc9
xor eax, eax
push 0xa0
push eax
mov word [ebp - 0x7b4], ax
lea eax, [ebp - 0x7b2]
push eax
call fcn.0046fe20
xor eax, eax
push 0xa0
push eax
mov word [ebp - 0x710], ax
lea eax, [ebp - 0x70e]
push eax
call fcn.0046fe20
lea eax, [ebp - 0x7b4]
push 0x51
push eax
call fcn.00430890
lea eax, [ebp - 0x710]
push 0x51
push eax
call fcn.00430f50
lea eax, [ebp - 0x7b4]
push eax
push str.WinMain____CompanyName:__s
call fcn.004699e0
lea eax, [ebp - 0x710]
push eax
push str.WinMain____UserName:__s
call fcn.004699e0
add esp, 0x38
mov dword [ebp - 0x14870], 0
mov edi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
mov al, byte [0x4bf9e8]
cmp al, 1
je 0x464c99
cmp al, 2
je 0x464c99
cmp al, 3
je 0x464c99
cmp dword [0x4bf9ec], 0
jne 0x464c99
cmp dword [0x4bf9f4], 0
je 0x464f9c
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x498c90
push 0x499dbc
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
jne 0x464ceb
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x498c90
push str._SERIAL:
push 0x4c02f8
call fcn.0043c170
add esp, 0x14
test eax, eax
je 0x464d68
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
lea ecx, [ebp - 0x20c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x464d01
sub ecx, edx
sar ecx, 1
inc ecx
cmp ecx, 0x3fffffff
jg 0x464d4d
lea edi, [ecx + ecx]
mov eax, edi
call fcn.00470be0
mov esi, esp
test esi, esi
je 0x464d4d
push 0
push 0
push edi
push esi
push 0xffffffffffffffff
lea eax, [ebp - 0x20c]
mov byte [esi], 0
push eax
push 0
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
neg eax
sbb eax, eax
and eax, esi
jmp 0x464d4f
xor eax, eax
push eax
push 0x104
push 0x4bfa00
call fcn.004703fd
mov edi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
add esp, 0xc
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xdbc], ax
lea eax, [ebp - 0xdba]
push eax
call fcn.0046fe20
add esp, 0xc
lea eax, [ebp - 0xfc4]
push eax
push 0x4cb640
lea eax, [ebp - 0xdbc]
push eax
call edi
lea eax, [ebp - 0x15d4]
push eax
lea eax, [ebp - 0xdbc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0xdbc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x464dea
push 3
lea eax, [ebp - 0xdbc]
push 0x10000000
push eax
call fcn.0043a890
push eax
lea eax, [ebp - 0xdbc]
push eax
push str.AddAccessRights__s____d
call fcn.004699e0
add esp, 0x18
jmp 0x464e16
cmp dword [0x4b618c], 0
je 0x464e16
lea eax, [ebp - 0xfc4]
push eax
push 0x23
call fcn.0043b450
push eax
lea eax, [ebp - 0xfc4]
push eax
push str.CreateFreeDirectory__s____d
call fcn.004699e0
add esp, 0x14
lea eax, [ebp - 0xdbc]
push eax
call fcn.0043b210
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xc538], ax
lea eax, [ebp - 0xc536]
push eax
call fcn.0046fe20
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.00430a40
push 0x4bfc08
lea eax, [ebp - 0xc538]
push 0x104
push eax
call fcn.00470452
push 0x104
lea eax, [ebp - 0xc538]
push eax
push 1
push 0x499e4c
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.00430ff0
push 0x104
lea eax, [ebp - 0xdbc]
push eax
push 1
push 0x499e5c
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.00430ff0
add esp, 0x54
lea eax, [ebp - 0x66c]
push 0x104
push 0x4b8108
push 1
push str.MainPath
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
cmp byte [0x4bf9e8], 1
jne 0x464f04
push 0x27
push 0x4c0058
push 1
push str.Guid
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x464f9c
cmp byte [0x4bf9e8], 3
jne 0x464f9c
mov ecx, 0x4c882a
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x464f20
sub ecx, edx
lea edi, [ecx + 1]
cmp edi, 0x3fffffff
jg 0x464f61
lea eax, [edi + edi]
call fcn.00470be0
mov esi, esp
test esi, esi
je 0x464f61
push edi
push esi
push 0xffffffffffffffff
xor eax, eax
push 0x4c882a
push eax
push 3
mov word [esi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
neg eax
sbb eax, eax
and eax, esi
jmp 0x464f63
xor eax, eax
push eax
lea eax, [ebp - 0xc538]
push 0x104
push eax
call fcn.00470452
push 0x104
lea eax, [ebp - 0xc538]
push eax
push 1
push str.SerialId
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.00430ff0
add esp, 0x24
xor esi, esi
cmp byte [0x4bf9e8], 1
jne 0x4651ce
push 0x574
lea eax, [ebp - 0xcd04]
mov dword [ebp - 0xcd08], esi
push esi
push eax
call fcn.0046fe20
lea eax, [ebp - 0xcd00]
push eax
push 0x4c0058
call fcn.004407e0
add esp, 0x14
cmp dword [ebp - 0x14870], esi
je 0x464ffd
movdqu xmm0, xmmword [ebp - 0xcd00]
push 0x4bfa00
sub esp, 0x10
mov eax, esp
movdqu xmmword [eax], xmm0
call fcn.00432dc0
add esp, 0x14
cmp dword [0x4bfe48], esi
je 0x465028
movdqu xmm0, xmmword [ebp - 0xcd00]
sub esp, 0x10
mov eax, esp
movdqu xmmword [eax], xmm0
call fcn.00432e90
mov esi, eax
add esp, 0x10
test esi, esi
jne 0x4653fb
imul edx, dword [0x4be980], 0x306c
mov ecx, dword [0x4b6518]
cmp dword [0x4bfe44], 0
mov dword [ebp - 0xcd08], ecx
mov ecx, dword [0x4ca5ec]
sete al
inc al
mov ecx, dword [edx + ecx + 0x3058]
mov dword [ebp - 0xcd04], ecx
mov ecx, dword [0x4b7898]
neg ecx
mov byte [ebp - 0xccf0], al
mov eax, 0x400
sbb ecx, ecx
xor edx, edx
and ecx, 0x800
cmp dword [0x4b7894], edx
cmovne eax, edx
or ecx, eax
or ecx, dword [0x4bfe4c]
mov dword [ebp - 0xccef], ecx
test ebx, ebx
je 0x4650a1
or ecx, 0x200
mov dword [ebp - 0xccef], ecx
push ecx
push str.WinMain____SNV3Info.uiDlgOption:__d
call fcn.004699e0
mov al, byte [0x4c00a6]
mov byte [ebp - 0xcceb], al
movzx eax, al
push eax
push eax
push str.WinMain____SNV3Info.byProductCode:__d___x_
call fcn.004699e0
mov al, byte [0x4bfe2b]
mov byte [ebp - 0xcce9], al
mov al, byte [0x4bfe2c]
mov byte [ebp - 0xccea], al
mov al, byte [0x4c00a7]
mov byte [ebp - 0xcce8], al
mov al, byte [0x4c00a8]
mov byte [ebp - 0xcce6], al
mov al, byte [0x4bfe2e]
mov byte [ebp - 0xcce7], al
lea eax, [ebp - 0x7b4]
push eax
lea eax, [ebp - 0xc8d4]
push 0x51
push eax
call fcn.00470452
lea eax, [ebp - 0x710]
push eax
lea eax, [ebp - 0xc832]
push 0x51
push eax
call fcn.00470452
push 0x4bfe50
lea eax, [ebp - 0xcadc]
push 0x104
push eax
call fcn.00470452
push 0x4bfa00
lea eax, [ebp - 0xcce4]
push 0x104
push eax
call fcn.004703fd
add esp, 0x44
lea eax, [ebp - 0xcbe0]
push 0x4bfb04
push 0x104
push eax
call fcn.004703fd
add esp, 0xc
cmp dword [0x4b6540], 0
jne 0x4651ac
lea eax, [ebp - 0xcd08]
push eax
push 0
call fcn.00431db0
mov ebx, eax
push ebx
push str.WinMain____Dialog_SerialV3:__d
call fcn.004699e0
add esp, 0x10
cmp ebx, 3
je 0x465be0
cmp ebx, 1
je 0x4651ac
test ebx, ebx
jne 0x465bc9
lea eax, [ebp - 0xcd08]
push eax
call fcn.00432f50
add esp, 4
test eax, eax
je 0x465cd5
lea eax, [ebp - 0xcce4]
jmp 0x4653e8
cmp byte [0x4bf9e8], 3
jne 0x4653fb
push 0x775
lea eax, [ebp - 0xcf04]
mov dword [ebp - 0xcf08], esi
push 0
push eax
call fcn.0046fe20
push 0x4c882a
lea eax, [ebp - 0xcf00]
push 0xf
push eax
call fcn.004703fd
add esp, 0x18
cmp dword [ebp - 0x14870], esi
je 0x465228
lea eax, [ebp - 0xcf00]
push eax
lea eax, [ebp - 0x66c]
push eax
call fcn.00434740
add esp, 8
cmp dword [0x4c8618], esi
je 0x465250
lea eax, [ebp - 0xcf00]
push eax
lea eax, [ebp - 0x66c]
push eax
call fcn.00434790
mov esi, eax
add esp, 8
test esi, esi
jne 0x4653fb
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4b6518]
cmp dword [0x4c8614], 0
mov dword [ebp - 0xcf08], eax
mov eax, dword [0x4ca5ec]
mov eax, dword [ecx + eax + 0x3058]
mov ecx, dword [0x4b7898]
mov dword [ebp - 0xcf04], eax
sete al
inc al
neg ecx
mov byte [ebp - 0xcef1], al
mov eax, 0x400
sbb ecx, ecx
xor edx, edx
and ecx, 0x800
cmp dword [0x4b7894], edx
cmovne eax, edx
or ecx, eax
or ecx, dword [0x4c861c]
mov dword [ebp - 0xcef0], ecx
test ebx, ebx
je 0x4652c7
or ecx, 0x200
mov dword [ebp - 0xcef0], ecx
lea eax, [ebp - 0x7b4]
push eax
lea eax, [ebp - 0xc8d3]
push 0x51
push eax
call fcn.00470452
lea eax, [ebp - 0x710]
push eax
lea eax, [ebp - 0xc831]
push 0x51
push eax
call fcn.00470452
push 0x4c8622
lea eax, [ebp - 0xcadb]
push 0x104
push eax
call fcn.00470452
push 0x4bfa00
lea eax, [ebp - 0xceeb]
push 0x104
push eax
call fcn.004703fd
push 0x4bfb04
lea eax, [ebp - 0xcde7]
push 0x104
push eax
call fcn.004703fd
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0xcce3]
push 0x104
push eax
call fcn.00470452
add esp, 0x48
lea eax, [ebp - 0x66c]
push eax
push str.WinMain____AQTOOLSINFO.szProductKey:__s
call fcn.004699e0
push 0x4c882a
push str.WinMain____AQTOOLSSERIALV5.szSerialID:__s
call fcn.00469d40
add esp, 0x10
cmp dword [0x4b6540], 0
jne 0x4653ae
lea eax, [ebp - 0xcf08]
push eax
push 0
call fcn.00433ad0
mov ebx, eax
push ebx
push str.WinMain____Dialog_SerialV5_d
call fcn.004699e0
add esp, 0x10
cmp ebx, 3
je 0x465be0
cmp ebx, 1
je 0x4653ae
test ebx, ebx
jne 0x465bc9
lea eax, [ebp - 0xceeb]
push eax
push str.WinMain____SNV5Info.szSerial:__s
call fcn.00469d40
lea eax, [ebp - 0xceeb]
push eax
lea eax, [ebp - 0x66c]
push 0x4c882a
push eax
call fcn.00434840
add esp, 0x14
test eax, eax
je 0x465cd5
lea eax, [ebp - 0xceeb]
push eax
push 0x104
push 0x4bfa00
call fcn.004703fd
add esp, 0xc
cmp dword [0x4bf9ec], 0
je 0x4656db
test esi, esi
jne 0x4656db
cmp dword [0x4c00ac], esi
je 0x4654d2
cmp dword [ebp - 0x14878], esi
jne 0x4654d2
cmp dword [0x4b6540], esi
jne 0x465d63
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4ca5ec]
push dword [ecx + eax + 0x3058]
lea eax, [ebp - 0xbb4]
push 0x100
push eax
push 0x258
push dword [0x4b6518]
call fcn.00467850
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4ca5ec]
push dword [ecx + eax + 0x3058]
lea eax, [ebp - 0x9b4]
push 0x100
push eax
push 0x2c3
push dword [0x4b6518]
call fcn.00467850
add esp, 0x28
jmp 0x4654a0
push 0x25
lea eax, [ebp - 0xbb4]
push eax
lea eax, [ebp - 0x9b4]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
je 0x465bc9
push 0
call fcn.0041a8d0
mov dword [ebp - 0x14878], eax
test eax, eax
je 0x4654a0
mov ecx, 0x4bfa00
lea edx, [ecx + 1]
lea ebx, [ebx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4654e0
sub ecx, edx
lea edi, [ecx + 1]
cmp edi, 0x3fffffff
jg 0x465521
lea eax, [edi + edi]
call fcn.00470be0
mov esi, esp
test esi, esi
je 0x465521
push edi
push esi
push 0xffffffffffffffff
xor eax, eax
push 0x4bfa00
push eax
push 3
mov word [esi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
neg eax
sbb eax, eax
and eax, esi
jmp 0x465523
xor eax, eax
push eax
lea eax, [ebp - 0x66c]
push eax
call fcn.0041a990
mov edx, 0x4bfa00
mov dword [ebp - 0x14884], eax
lea esi, [edx + 1]
mov edi, edi
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x465540
sub edx, esi
lea edi, [edx + 1]
cmp edi, 0x3fffffff
jg 0x465581
lea eax, [edi + edi]
call fcn.00470be0
mov esi, esp
test esi, esi
je 0x465581
push edi
push esi
push 0xffffffffffffffff
xor eax, eax
push 0x4bfa00
push eax
push 3
mov word [esi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
neg eax
sbb eax, eax
and eax, esi
jmp 0x465583
xor eax, eax
push dword [ebp - 0x14884]
push eax
lea eax, [ebp - 0x66c]
push eax
push str.WinMain____ActivProd_SetSerialNumber__s___s____d
call fcn.004699e0
add esp, 0x10
lea eax, [ebp - 0x66c]
push 0
push 0
push 1
push 0
push 0
push 0
push 0xfffffffffffffffe
push closesocket
push 0
push eax
call fcn.0041aa80
mov esi, eax
lea eax, [ebp - 0x66c]
push esi
push 0
push eax
push str.WinMain____ActivProdEx__s___d____d
call fcn.004699e0
add esp, 0x10
test esi, esi
jne 0x4656db
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4ca5ec]
push dword [ecx + eax + 0x3058]
lea eax, [ebp - 0xbb4]
push 0x100
push eax
push 0x258
push dword [0x4b6518]
call fcn.00467850
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4ca5ec]
push dword [ecx + eax + 0x3058]
lea eax, [ebp - 0x9b4]
push 0x100
push eax
push 0x2c2
push dword [0x4b6518]
call fcn.00467850
mov ecx, 0x4bfa00
add esp, 0x28
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x465650
sub ecx, edx
lea edi, [ecx + 1]
cmp edi, 0x3fffffff
jg 0x465691
lea eax, [edi + edi]
call fcn.00470be0
mov esi, esp
test esi, esi
je 0x465691
push edi
push esi
push 0xffffffffffffffff
xor eax, eax
push 0x4bfa00
push eax
push 3
mov word [esi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
neg eax
sbb eax, eax
and eax, esi
jmp 0x465693
xor eax, eax
push 0x4b6548
push eax
lea eax, [ebp - 0x9b4]
push eax
lea eax, [ebp - 0x19d4]
push 0x200
push eax
call fcn.0046f31e
add esp, 0x14
lea eax, [ebp - 0xbb4]
push 0
push eax
lea eax, [ebp - 0x19d4]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0x14870], 1
jmp 0x464c6c
cmp dword [0x4bf9f0], 0
je 0x465865
push 0x236
lea eax, [ebp - 0xc564]
push 0
push eax
call fcn.0046fe20
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4b6518]
mov dword [ebp - 0xc568], eax
mov eax, dword [0x4ca5ec]
push 0x4c8850
push 0xb
mov eax, dword [ecx + eax + 0x3058]
mov ecx, dword [0x4b7898]
mov dword [ebp - 0xc564], eax
neg ecx
mov eax, dword [0x4c8840]
mov dword [ebp - 0xc554], eax
sbb ecx, ecx
mov eax, dword [0x4c884c]
xor edx, edx
mov dword [ebp - 0xc55c], eax
and ecx, 4
mov eax, dword [0x4c8848]
cmp dword [0x4b7894], edx
mov dword [ebp - 0xc558], eax
mov eax, dword [0x4c8844]
mov dword [ebp - 0xc560], eax
mov eax, 2
cmovne eax, edx
or ecx, eax
lea eax, [ebp - 0xc550]
or dword [ebp - 0xc332], ecx
push eax
call fcn.00470452
mov edi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0xc53a]
add esp, 0x18
push str.Toolbar.bmp
push 0x4cff60
push eax
call edi
cmp dword [0x4b6540], 0
jne 0x4657d2
lea eax, [ebp - 0xc568]
push eax
push 0
call fcn.00427400
mov ebx, eax
push ebx
push str.WinMain____Dialog_Toolbar:__d
call fcn.004699e0
add esp, 0x10
cmp ebx, 1
jne 0x465bc9
cmp dword [ebp - 0xc560], 0
je 0x46586b
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4ca5ec]
push dword [ecx + eax + 0x3058]
lea eax, [ebp - 0x19d4]
push 0x200
push eax
push 0x2c7
push dword [0x4b6518]
call fcn.00467850
push 1
lea eax, [ebp - 0x19d4]
push eax
push 0x4c92e0
push dword [0x4b6518]
call fcn.00441d00
push dword [ebp - 0xc558]
lea eax, [ebp - 0x13cc]
push dword [ebp - 0xc55c]
push dword [ebp - 0x14874]
push 0x4c8850
push eax
push 0
call fcn.00427d30
push 0
push 0
push 0
push dword [0x4b6518]
call fcn.00441d00
add esp, 0x4c
jmp 0x46586b
mov edi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [0x4bf9f4], 0
je 0x465ac2
push 0x736
lea eax, [ebp - 0xcec8]
push 0
push eax
call fcn.0046fe20
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4b6518]
mov dword [ebp - 0xcecc], eax
mov eax, dword [0x4ca5ec]
mov eax, dword [ecx + eax + 0x3058]
mov dword [ebp - 0xcec8], eax
mov al, byte [0x4c8a71]
mov byte [ebp - 0xccc4], al
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0xccc3]
push 0x104
push eax
call fcn.00470452
push 0xffffffffffffffff
lea eax, [ebp - 0xfc4]
push eax
lea eax, [ebp - 0xc9db]
push 0x20
push eax
call fcn.00470a11
push 0xffffffffffffffff
lea eax, [ebp - 0x15d4]
push eax
lea eax, [ebp - 0xc99b]
push 0x20
push eax
call fcn.00470a11
push 0x10
push 0x20
lea eax, [ebp - 0xc7db]
push eax
movzx eax, byte [0x4bfe2a]
push eax
call fcn.004734da
add esp, 0x48
lea eax, [ebp - 0xc95b]
push 0xffffffffffffffff
push 0x4b6548
push 0x20
push eax
call fcn.00470a11
push 0x4bfc08
lea eax, [ebp - 0xca1b]
push 0x20
push eax
call fcn.00470452
lea eax, [ebp - 0x7b4]
push eax
lea eax, [ebp - 0xca7b]
push 0x20
push eax
call fcn.00470452
lea eax, [ebp - 0x710]
push eax
lea eax, [ebp - 0xcabb]
push 0x20
push eax
call fcn.00470452
mov ecx, 0x4bfa00
add esp, 0x34
lea edx, [ecx + 1]
jmp 0x465980
mov al, byte [ecx]
inc ecx
test al, al
jne 0x465980
sub ecx, edx
lea edi, [ecx + 1]
cmp edi, 0x3fffffff
jg 0x4659c1
lea eax, [edi + edi]
call fcn.00470be0
mov esi, esp
test esi, esi
je 0x4659c1
push edi
push esi
push 0xffffffffffffffff
xor eax, eax
push 0x4bfa00
push eax
push 3
mov word [esi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
neg eax
sbb eax, eax
and eax, esi
jmp 0x4659c3
xor eax, eax
push eax
lea eax, [ebp - 0xc89b]
push 0x40
push eax
call fcn.00470452
push 0x4c94c6
lea eax, [ebp - 0xc91b]
push 0x20
push eax
call fcn.00470452
push 0xa
push 0x10
lea eax, [ebp - 0xca3b]
push eax
movzx eax, byte [0x4bfe2c]
push eax
call fcn.004734da
mov al, byte [0x4bfe2d]
mov byte [ebp - 0xc797], al
mov eax, dword [0x4c8c84]
mov dword [ebp - 0xc796], eax
lea eax, [ebp - 0xc8db]
push 0x20
push eax
movzx eax, byte [0x4bfe2b]
push eax
call fcn.0042e890
push 0x4c8a7c
lea eax, [ebp - 0xcec4]
push 0x100
push eax
call fcn.00470452
add esp, 0x40
push str.WinMain____before_OLRDisplay
call fcn.004699e0
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xc538], ax
lea eax, [ebp - 0xc536]
push eax
call fcn.0046fe20
mov edi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0xc538]
add esp, 0x10
push str.OLRegistu.dll
push 0x4d0578
push eax
call edi
xor eax, eax
cmp dword [0x4b6540], eax
sete al
push eax
lea eax, [ebp - 0xc538]
push eax
lea eax, [ebp - 0xcecc]
push eax
push 0
call fcn.0042e8d0
mov ebx, eax
push ebx
push str.WinMain____Dialog_OLRv3:__d
call fcn.004699e0
add esp, 0x18
cmp ebx, 1
je 0x465ac2
cmp ebx, 3
jne 0x465bc9
cmp dword [0x4b7878], 0
je 0x465baf
cmp dword [0x4b7870], 0
jne 0x465baf
cmp dword [0x4b6540], 0
jne 0x465baf
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4b6518]
mov dword [ebp - 0xc78c], eax
mov eax, dword [0x4ca5ec]
push 0x4b8728
push 0x104
mov eax, dword [ecx + eax + 0x3058]
mov dword [ebp - 0xc788], eax
mov eax, dword [0x4b78c0]
mov dword [ebp - 0xc578], eax
mov eax, dword [0x4b78c4]
mov dword [ebp - 0xc574], eax
lea eax, [ebp - 0xc780]
push eax
call fcn.00470452
mov eax, dword [0x4b78c8]
test ebx, ebx
mov edx, dword [ebp - 0xc784]
mov ecx, dword [0x4b7898]
mov dword [ebp - 0xc570], eax
mov eax, dword [0x4b78cc]
mov dword [ebp - 0xc56c], eax
mov eax, 1
cmovne edx, eax
neg ecx
mov eax, 2
sbb ecx, ecx
xor esi, esi
and ecx, 4
cmp dword [0x4b7894], esi
cmovne eax, esi
or ecx, eax
lea eax, [ebp - 0xc78c]
push eax
or edx, ecx
push esi
mov dword [ebp - 0xc784], edx
call fcn.0042a210
mov ebx, eax
push ebx
push str.WinMain____Dialog_license:__d
call fcn.004699e0
add esp, 0x1c
cmp ebx, 1
je 0x465d72
cmp ebx, 3
je 0x464c72
cmp ebx, 1
je 0x465da1
test ebx, ebx
je 0x465da1
mov dword [ebp - 0x14868], 0x4c7
jmp 0x4661b5
mov esi, 2
jmp 0x464b20
mov edi, dword [ebp - 0x1486c]
jmp 0x464643
push 0
push 0x100
lea eax, [ebp - 0x9b4]
push eax
push dword [ebp - 0x14868]
call fcn.0045cb50
add esp, 0x10
test eax, eax
je 0x4661b5
cmp dword [0x4b6540], 0
jne 0x4661b5
cmp dword [0x4b7624], 0
push 8
push 0
je 0x465c65
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4ca5ec]
add eax, 0x2a3e
add eax, ecx
push eax
lea eax, [ebp - 0x9b4]
push eax
push 0x4c92e0
push 0
call fcn.0045dae0
add esp, 0x18
jmp 0x4661b5
push 0
jmp 0x465c4a
mov edi, dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [0x4b6540], 0
mov dword [ebp - 0x14868], 0xa
jne 0x4661b5
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4ca5ec]
push dword [ecx + eax + 0x3058]
lea eax, [ebp - 0x9b4]
push 0x100
push eax
push 0x25f
push dword [0x4b6518]
call fcn.00467850
add esp, 0x14
lea eax, [ebp - 0x9b4]
push 0x40010
push 0x4c92e0
push eax
push 0
call edi
jmp 0x4661b5
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4ca5ec]
push dword [ecx + eax + 0x3058]
lea eax, [ebp - 0xbb4]
push 0x100
push eax
push 0x258
push dword [0x4b6518]
call fcn.00467850
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4ca5ec]
push dword [ecx + eax + 0x3058]
lea eax, [ebp - 0x9b4]
push 0x100
push eax
push 0x2bf
push dword [0x4b6518]
call fcn.00467850
add esp, 0x28
lea eax, [ebp - 0xbb4]
push 0
push eax
lea eax, [ebp - 0x9b4]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0x14868], 0xd
jmp 0x4661b5
mov dword [ebp - 0x14868], 0x4cd
jmp 0x4661b5
lea eax, [ebp - 0xc780]
push eax
push 0x104
push 0x4b8728
call fcn.00470452
mov eax, dword [ebp - 0xc578]
add esp, 0xc
mov dword [0x4b78c0], eax
mov eax, dword [ebp - 0xc570]
mov dword [0x4b78c8], eax
push 0x4c4178
push str.WinMain____CmdExeLine:__s
call fcn.004699e0
push 0x2df
push 0
push 0x4ca2f8
call fcn.0046fe20
mov eax, dword [0x4b6518]
add esp, 0x14
mov ecx, dword [0x4ca5f0]
mov esi, dword [0x4ca5ec]
sub ecx, esi
mov dword [ebp - 0xd128], eax
mov eax, 0x2a4b80c9
imul ecx
mov dword [0x4ca2f8], 0
sar edx, 0xb
mov eax, edx
mov dword [0x4ca361], 0x40002
shr eax, 0x1f
mov dword [0x4ca3ca], 0x40001
mov dword [0x4ca433], 0x40008
mov dword [0x4ca49c], 0x40004
mov dword [0x4ca505], 0x10
mov dword [0x4ca56e], 0xffffffff
add eax, edx
je 0x465e4f
imul eax, dword [0x4be980], 0x306c
mov eax, dword [eax + esi + 0x3058]
mov dword [ebp - 0xd124], eax
jmp 0x465e59
mov dword [ebp - 0xd124], 0x809
mov ecx, dword [0x4b7898]
neg ecx
push str.PackImages_
sbb ecx, ecx
xor eax, eax
and ecx, 2
cmp dword [0x4b7894], eax
push 0x4cff60
sete al
or ecx, eax
mov al, byte [0x4b97a0]
or dword [ebp - 0xd120], ecx
mov byte [ebp - 0xd114], al
mov eax, dword [0x4b8f4c]
mov dword [ebp - 0xd11c], eax
mov eax, dword [0x4b8f50]
mov dword [ebp - 0xd118], eax
lea eax, [ebp - 0xd113]
push eax
call edi
lea eax, [ebp - 0xd128]
push eax
push 0
call fcn.00442220
push dword [0x4b0524]
mov dword [0x4b652c], eax
push dword [ebp - 0x14868]
push str.WinMain____Error:__d___ExitCode:__d
call fcn.004699e0
add esp, 0x14
cmp dword [ebp - 0x14868], 0
jne 0x4660c0
cmp dword [0x4b0524], 0
jne 0x4660c0
imul ecx, dword [0x4be980], 0x306c
mov eax, dword [0x4b6518]
mov dword [ebp - 0xd964], eax
mov eax, dword [0x4ca5ec]
push 0x4b8314
push 0x104
mov eax, dword [ecx + eax + 0x3058]
mov dword [ebp - 0xd960], eax
lea eax, [ebp - 0xd958]
push eax
call fcn.00470452
lea eax, [ebp - 0xd750]
push 0x104
push eax
call fcn.00462080
push 0x4b8b38
lea eax, [ebp - 0xd548]
push 0x104
push eax
call fcn.00470452
mov eax, dword [0x4b8f48]
add esp, 0x20
cmp dword [0x4b787c], 0
mov dword [ebp - 0xd138], eax
mov eax, dword [0x4b78c8]
mov dword [ebp - 0xd134], eax
je 0x46601f
cmp dword [0x4b6540], 0
jne 0x46601f
cmp byte [0x4b7600], 0
je 0x465f9a
push 0x4b73f8
jmp 0x465faf
cmp dword [0x4b7858], 0
je 0x465faa
push 0x48d8a4
jmp 0x465faf
push 0x4b8108
lea eax, [ebp - 0xd340]
push 0x104
push eax
call fcn.00470452
mov eax, dword [0x4b78e0]
add esp, 0xc
mov dword [ebp - 0xd130], eax
mov ecx, 2
mov eax, dword [0x4b78e4]
mov dword [ebp - 0xd12c], eax
mov eax, dword [0x4b7898]
neg eax
sbb eax, eax
xor edx, edx
and eax, 4
cmp dword [0x4b7894], edx
cmovne ecx, edx
or eax, ecx
or dword [ebp - 0xd95c], eax
lea eax, [ebp - 0xd964]
push eax
push edx
call fcn.0042a770
mov ebx, eax
push ebx
push str.WinMain____Dialog_Finish:__d
call fcn.004699e0
add esp, 0x10
jmp 0x4660c0
test eax, eax
je 0x4660c0
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xc538], ax
lea eax, [ebp - 0xc536]
push eax
call fcn.0046fe20
add esp, 0xc
lea eax, [ebp - 0xd750]
push eax
lea eax, [ebp - 0xc538]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0xc538]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
mov eax, dword [ebp - 0xd138]
cmp eax, 2
jne 0x466089
lea eax, [ebp - 0xd548]
push eax
lea eax, [ebp - 0xd750]
push eax
call fcn.0043b560
add esp, 8
jmp 0x4660c0
push 0
push 0
push 1
test eax, eax
lea eax, [ebp - 0xc538]
push 0
jne 0x4660a2
push str.open
jmp 0x4660a7
push str.Runas
push eax
lea eax, [ebp - 0xd548]
push eax
lea eax, [ebp - 0xd750]
push eax
push 0
call fcn.00466f10
add esp, 0x24
cmp ebx, 1
je 0x4660db
mov eax, dword [ebp - 0x14868]
test ebx, ebx
mov ecx, 0x4c7
cmovne eax, ecx
mov dword [ebp - 0x14868], eax
cmp dword [0x4be998], 0
je 0x4661b5
cmp dword [ebp - 0x14868], 0
jne 0x4661b5
cmp dword [0x4b0524], 0
jne 0x4661b5
cmp dword [0x4b7870], 0
je 0x4661b5
cmp dword [0x4b78d4], 0
jne 0x4661b5
cmp dword [0x4b6540], 0
jne 0x4661b5
push str.event
lea eax, [ebp - 0x7efb]
push 0x1e
push eax
call fcn.00470452
push 0x4bf108
lea eax, [ebp - 0x7ebb]
push 0x1e
push eax
call fcn.00470452
push str.AvanquestMessage
lea eax, [ebp - 0x7d8d]
push 0x1e
push eax
call fcn.00470452
add esp, 0x24
lea eax, [ebp - 0x7b85]
cmp dword [0x4b78d0], 0
je 0x46617b
push str.Tick
jmp 0x466180
push str.Untick
push 0x104
push eax
call fcn.00470452
add esp, 0xc
lea eax, [ebp - 0x797d]
push 0x48d8a4
push 0x1f
push eax
call fcn.00470452
add esp, 0xc
lea eax, [ebp - 0x7f74]
push eax
push 0x4be9a0
call fcn.004449a0
mov edi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x4d0370
call fcn.0043d5d0
add esp, 4
test eax, eax
je 0x4661dd
push 0x4d0370
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [0x4b651c]
test eax, eax
je 0x4661ed
push eax
call dword [sym.imp.KERNEL32.dll_FreeResource]
mov eax, dword [ebp - 0x14888]
test eax, eax
je 0x4661fa
push eax
call edi
mov eax, dword [0x4b6524]
test eax, eax
je 0x466206
push eax
call edi
mov eax, dword [0x4b6520]
test eax, eax
je 0x46624b
push str.ISnuiShutdown
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x466223
call eax
jmp 0x466235
push str.ISnuiShutdown
push str.Function__s_failed_
call fcn.00469d40
add esp, 8
push dword [0x4b6520]
call edi
push eax
push str.WinMain____unload_NewUI___d
call fcn.004699e0
add esp, 8
mov eax, dword [0x4b6518]
test eax, eax
je 0x466272
cmp eax, dword [0x4b6514]
je 0x466272
push eax
call edi
push eax
push 0x4d0780
push str.WinMain____unload__s___d
call fcn.004699e0
add esp, 0xc
call dword [sym.imp.ole32.dll_CoUninitialize]
mov esi, dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
push 0x4cff60
call esi
test eax, eax
je 0x4662a8
push 2
push 0x4cff60
call fcn.00467bd0
push eax
push 0x4cff60
push str.WinMain____Remove_folder__s___d_
call fcn.004699e0
add esp, 0x14
push 0x4d0168
call esi
test eax, eax
je 0x4662eb
cmp dword [0x4b8f78], 0
je 0x4662c9
push 0x4d0168
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x4662d8
push 2
push 0x4d0168
call fcn.00467bd0
add esp, 8
push eax
push 0x4d0168
push str.WinMain____Remove_folder__s___d_
call fcn.004699e0
add esp, 0xc
cmp dword [0x4b7854], 0
je 0x466336
push 0x4b8108
call esi
test eax, eax
je 0x466336
push 0x4ce700
push 0x4b8108
call fcn.00470c8b
add esp, 8
test eax, eax
je 0x466336
push 2
push 0x4b8108
call fcn.00467bd0
push eax
push 0x4b8108
push str.WinMain____Remove_folder__s___d_
call fcn.004699e0
add esp, 0x14
jmp 0x466348
push 0x4b8108
push str.WinMain____the_folder__s_will_not_be_removed_
call fcn.004699e0
add esp, 8
cmp dword [ebp - 0x1487c], 0
je 0x46638a
push 0
lea eax, [ebp - 0x14868]
push eax
push dword [ebp + 0x14]
push 0
push str.Runas
push 0x48d8a4
push dword [ebp - 0x1488c]
push 0x4ce2f0
push 0
call fcn.00466f10
add esp, 0x24
test eax, eax
jne 0x46638a
call ebx
mov dword [ebp - 0x14868], eax
mov eax, dword [ebp - 0x14880]
test eax, eax
je 0x46639b
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x4b0524]
test eax, eax
mov ecx, dword [ebp - 0x14868]
cmovne ecx, eax
push ecx
push str.WinMain____End__x_
mov dword [ebp - 0x14868], ecx
call fcn.004699e0
add esp, 8
mov eax, dword [ebp - 0xfdc0]
mov esi, dword [ebp - 0x14868]
test eax, eax
je 0x4663f6
push eax
call fcn.0046e740
add esp, 4
mov dword [ebp - 0xfdc0], 0
mov dword [ebp - 0xfdbc], 0
mov dword [ebp - 0xfdb8], 0
mov eax, dword [ebp - 0x12438]
test eax, eax
je 0x466427
push eax
call fcn.0046e740
add esp, 4
mov dword [ebp - 0x12438], 0
mov dword [ebp - 0x12434], 0
mov dword [ebp - 0x12430], 0
mov ecx, dword [ebp - 0x14898]
test ecx, ecx
je 0x46643a
push ecx
call fcn.0046e740
add esp, 4
mov eax, esi
lea esp, [ebp - 0x148b4]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0046f33a
mov esp, ebp
pop ebp
ret 0x10