Function at 0x4412f0
Capabilities:
Check if file exists
Check mutex on windows
Create directory
Delete directory
Get geographical location

Disassembly:
push ebp
mov ebp, esp
mov eax, 0xa390
call fcn.00467dc0
mov eax, dword [0x4cd724]
xor eax, ebp
mov dword [ebp - 4], eax
push str.Begin...
call fcn.00456a00
add esp, 4
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 0x17b8], 0
mov dword [ebp - 0xe4c], 0
call fcn.00420440
mov dword [ebp - 0x17bc], eax
mov dword [ebp - 0x17b4], 0
mov dword [ebp - 0x634], 0
mov eax, dword [ebp + 8]
mov dword [0x4d2e1c], eax
push str.RICHED20.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x1c90], eax
xor ecx, ecx
mov word [ebp - 0x410], cx
push 0x1fe
push 0
lea edx, [ebp - 0x40e]
push edx
call fcn.004677c0
add esp, 0xc
xor eax, eax
mov word [ebp - 0xe48], ax
push 0x1fe
push 0
lea ecx, [ebp - 0xe46]
push ecx
call fcn.004677c0
add esp, 0xc
xor edx, edx
mov word [ebp - 0x14a0], dx
push 0x1fe
push 0
lea eax, [ebp - 0x149e]
push eax
call fcn.004677c0
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0xc40], cx
push 0x3fe
push 0
lea edx, [ebp - 0xc3e]
push edx
call fcn.004677c0
add esp, 0xc
call fcn.00409f90
call fcn.00446770
mov eax, dword [ebp + 0x10]
push eax
push 0x1f40
push 0x4dabe0
call fcn.0046a10d
add esp, 0xc
push 0x4dabe0
push str.WinMain____CmdLine_s
call fcn.00456a00
add esp, 8
push 0
push 0
push 0x4b5294
push 0x4b529c
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
je 0x4414ab
push 0x809
push 0x100
lea ecx, [ebp - 0x14a0]
push ecx
push 0x2c9
mov edx, dword [0x4d2e1c]
push edx
call fcn.00449970
add esp, 0x14
push 0x809
push 0x200
lea eax, [ebp - 0xc40]
push eax
push 0x2c8
mov ecx, dword [0x4d2e1c]
push ecx
call fcn.00449970
add esp, 0x14
push 0x40
lea edx, [ebp - 0x14a0]
push edx
lea eax, [ebp - 0xc40]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0x4b52a0
call fcn.00456a00
add esp, 4
xor eax, eax
jmp 0x4447c2
xor ecx, ecx
mov word [ebp - 0x1708], cx
push 0x206
push 0
lea edx, [ebp - 0x1706]
push edx
call fcn.004677c0
add esp, 0xc
push 0x104
lea eax, [ebp - 0x1708]
push eax
push 0x4b52e8
push str.LANG:
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
je 0x441563
lea ecx, [ebp - 0x1708]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
lea edx, [ebp - 0x1708]
push edx
call dword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
lea eax, [ebp - 0x1708]
push eax
call fcn.0046aa00
add esp, 4
mov word [0x4da1b4], ax
movzx ecx, word [0x4da1b4]
test ecx, ecx
jne 0x44154e
push 0
call fcn.00409bc0
add esp, 4
test eax, eax
je 0x44154e
lea edx, [ebp - 0x1708]
push edx
call fcn.0040fd50
add esp, 4
mov word [0x4da1b4], ax
movzx eax, word [0x4da1b4]
push eax
push str.WinMain____Language_parameter:__d
call fcn.00456a00
add esp, 8
push 0x104
lea ecx, [ebp - 0x1708]
push ecx
push 0x4b5354
push str.CMDLINE:
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
je 0x4415cf
lea edx, [ebp - 0x1708]
push edx
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
lea eax, [ebp - 0x1708]
push eax
call dword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
lea ecx, [ebp - 0x1708]
push ecx
push 0x1f40
push 0x4dea60
call fcn.0046a10d
add esp, 0xc
push 0x4dea60
push str.WinMain____CMDLINE_parameter:__s
call fcn.00456a00
add esp, 8
xor edx, edx
mov word [ebp - 0x1500], dx
push 0x4c
push 0
lea eax, [ebp - 0x14fe]
push eax
call fcn.004677c0
add esp, 0xc
lea ecx, [ebp - 0x62c]
push ecx
call dword [sym.imp.ole32.dll_CoCreateGuid]
test eax, eax
jne 0x441637
push 0x27
lea edx, [ebp - 0x1500]
push edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x62c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x628]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x624]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x620]
mov dword [eax + 0xc], edx
call fcn.0040bc70
add esp, 0x18
jmp 0x44164d
push 0x4b53a8
push 0x27
lea eax, [ebp - 0x1500]
push eax
call fcn.0046a10d
add esp, 0xc
lea ecx, [ebp - 0x1500]
push ecx
push 0x4e4950
push 0x4e3500
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4e3500
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4416a1
push 2
push 0x4e3500
call fcn.00455e50
add esp, 8
mov dword [ebp - 0xe4c], eax
mov edx, dword [ebp - 0xe4c]
push edx
push 0x4e3500
push 0x4b53f8
call fcn.00456a00
add esp, 0xc
push 0
push 0x4e3500
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x4416cb
push 0x4e3500
push str.WinMain____Error_create_directory___s__
call fcn.00456a00
add esp, 8
xor eax, eax
jmp 0x4447c2
push 0x4e3500
push str.WinMain____TempPathFCW_s
call fcn.00456a00
add esp, 8
call fcn.00446220
mov dword [ebp - 0x61c], 0
mov dword [ebp - 0xe7c], 0
push 0x2a
push 0
lea eax, [ebp - 0xe78]
push eax
call fcn.004677c0
add esp, 0xc
mov dword [ebp - 0x1a80], 0
push 0x214
push 0
lea ecx, [ebp - 0x1a7c]
push ecx
call fcn.004677c0
add esp, 0xc
mov dword [ebp - 0x1a74], 1
mov dword [ebp - 0x129c], 0
xor edx, edx
mov dword [ebp - 0x1298], edx
mov dword [ebp - 0x1294], edx
push 0x4da9d8
call fcn.0040cfa0
add esp, 4
test eax, eax
jne 0x44179a
push str.setup.cfg
push 0x4e3500
push 0x4b54d8
push 0x104
push 0x4da9d8
call fcn.00467d96
add esp, 0x14
push 0x4da9d8
push 0x4b54e4
push 0x88
mov eax, dword [0x4d2e1c]
push eax
call fcn.00408630
add esp, 0x10
push 0x4da9d8
call fcn.00444a50
add esp, 4
movzx ecx, word [0x4d3660]
test ecx, ecx
je 0x4417fa
push 0x4d3660
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x634], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x4417fa
push 0x4d3660
push str.WinMain____Project_already_in_memory___s_
call fcn.00456a00
add esp, 8
mov dword [0x4cd5d4], 0xb7
jmp 0x444544
push 0
push 0
push 0x4b5554
push str.NORESUME
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
je 0x441830
mov dword [0x4d4db4], 0
push str.WinMain____Resume_mode_disabled_by_parameter
call fcn.00456a00
add esp, 4
lea edx, [ebp - 0x1500]
push edx
push 0x4d3660
call fcn.0046b42e
add esp, 8
test eax, eax
je 0x441878
cmp dword [0x4d4db4], 0
je 0x441878
push 0x4d3660
push 0x4e4950
push 0x4e3708
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4d3660
push 0x4e3708
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x44188d
push 0x4d3660
push 0x4e3500
push 0x4e3708
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4e3708
call fcn.0040d2e0
add esp, 4
test eax, eax
jne 0x441913
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x17b8], eax
mov eax, dword [ebp - 0x17b8]
push eax
push 0x4e3708
push str.WinMain____Error_create_directory___s____d_
call fcn.00456a00
add esp, 0xc
cmp dword [ebp - 0x17b8], 0xb7
je 0x441909
push 2
push 0x4e3708
call fcn.00455e50
add esp, 8
mov dword [ebp - 0xe4c], eax
mov ecx, dword [ebp - 0xe4c]
push ecx
push 0x4e3708
push 0x4b5618
call fcn.00456a00
add esp, 0xc
jmp 0x444544
mov dword [ebp - 0x17b8], 0
push 0x4e3708
push str.WinMain____DataPath_s
call fcn.00456a00
add esp, 8
call fcn.00447da0
push 1
push 0
push 0x4e2ae8
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov dword [ebp - 0x14ac], eax
cmp dword [ebp - 0x14ac], 0
je 0x441956
mov edx, dword [ebp - 0x14ac]
mov dword [0x4d1ddc], edx
jmp 0x441960
mov eax, dword [0x4d2e1c]
mov dword [0x4d1ddc], eax
mov ecx, dword [0x4d1ddc]
push ecx
mov edx, dword [ebp - 0x14ac]
push edx
push 0x4e2ae8
push str.WinMain____LoadLibrary__s____d__hInstRes_d_
call fcn.00456a00
add esp, 0x10
movzx eax, word [0x4d36ae]
test eax, eax
jne 0x4419ab
push 0x100
push 0x4da1c0
push 0x4b56ec
mov ecx, dword [0x4d2e1c]
push ecx
call fcn.004574d0
add esp, 0x10
jmp 0x4419c2
push 0x4d36ae
push 0x100
push 0x4da1c0
call fcn.0046a10d
add esp, 0xc
push 0x4da1c0
push str.WinMain____Title_s
call fcn.00456a00
add esp, 8
push 0
push 0
push 0x4b572c
push str.INFO
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
je 0x441c09
xor edx, edx
mov word [ebp - 0x2098], dx
push 0x206
push 0
lea eax, [ebp - 0x2096]
push eax
call fcn.004677c0
add esp, 0xc
push str.Language_s__available:_n_n
push 0x200
push 0x4e2ef8
call fcn.00467c81
add esp, 0xc
mov ecx, 0x4e7830
call fcn.00408940
test eax, eax
jbe 0x441b20
mov dword [ebp - 0x209c], 0
jmp 0x441a5a
mov ecx, dword [ebp - 0x209c]
add ecx, 1
mov dword [ebp - 0x209c], ecx
mov ecx, 0x4e7830
call fcn.00408940
cmp dword [ebp - 0x209c], eax
jae 0x441b1b
mov edx, dword [ebp - 0x209c]
push edx
mov ecx, 0x4e7830
call fcn.004087b0
mov eax, dword [eax + 0x410]
push eax
push str._d__
push 0x104
lea ecx, [ebp - 0x2098]
push ecx
call fcn.00467d96
add esp, 0x10
lea edx, [ebp - 0x2098]
push edx
push 0x200
push 0x4e2ef8
call fcn.00467c81
add esp, 0xc
push 0x104
lea eax, [ebp - 0x2098]
push eax
push 2
mov ecx, dword [ebp - 0x209c]
push ecx
mov ecx, 0x4e7830
call fcn.004087b0
mov edx, dword [eax + 0x410]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
lea eax, [ebp - 0x2098]
push eax
push 0x200
push 0x4e2ef8
call fcn.00467c81
add esp, 0xc
push 0x4b5780
push 0x200
push 0x4e2ef8
call fcn.00467c81
add esp, 0xc
jmp 0x441a4b
jmp 0x441ba4
mov ecx, dword [0x4da18c]
push ecx
push 0x4b5784
push 0x104
lea edx, [ebp - 0x2098]
push edx
call fcn.00467d96
add esp, 0x10
lea eax, [ebp - 0x2098]
push eax
push 0x200
push 0x4e2ef8
call fcn.00467c81
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x2098]
push ecx
push 2
mov edx, dword [0x4da18c]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
lea eax, [ebp - 0x2098]
push eax
push 0x200
push 0x4e2ef8
call fcn.00467c81
add esp, 0xc
push 0x4b578c
push 0x200
push 0x4e2ef8
call fcn.00467c81
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x1e90], cx
push 0x1fe
push 0
lea edx, [ebp - 0x1e8e]
push edx
call fcn.004677c0
add esp, 0xc
push 0x809
push 0x100
lea eax, [ebp - 0x1e90]
push eax
push 0x2c9
mov ecx, dword [0x4d1ddc]
push ecx
call fcn.00449970
add esp, 0x14
push 0x40
lea edx, [ebp - 0x1e90]
push edx
push 0x4e2ef8
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, dword [ebp - 0x17b8]
jmp 0x4447c2
push 0
push 0
push 0x4b5790
push str.WITHPROGRESS
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
je 0x441c3f
mov dword [0x4d455c], 1
push str.WinMain____DialogInRun_mode_
call fcn.00456a00
add esp, 4
push 0
push 0
push 0x4b57f0
push 0x4b57f8
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
je 0x441c75
mov dword [0x4e7814], 1
push str.WinMain____Silent_mode_parameter
call fcn.00456a00
add esp, 4
push 0
push 0
push 0x4b5854
push 0x4b57fc
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
je 0x441cab
mov dword [0x4d4558], 0
push str.WinMain____No_balloon_parameter
call fcn.00456a00
add esp, 4
push 0
push 0
push 0x4b58a0
push str.FULLSILENT
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
je 0x441ceb
mov dword [0x4e7814], 1
mov dword [0x4d4558], 0
push str.WinMain____Full_Silent_mode_parameter
call fcn.00456a00
add esp, 4
push 0
push 0
push 0x4b590c
push 0x4b5914
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
je 0x441d21
mov dword [0x4e7820], 1
push str.WinMain____Force_to_Download_parameter
call fcn.00456a00
add esp, 4
push 0
push 0
push 0x4b5970
push str.NOLICENSE
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
je 0x441d57
mov dword [0x4d4550], 0
push str.WinMain____No_license_parameter
call fcn.00456a00
add esp, 4
push 0
push 0
push 0x4b59e0
push str.NOTOOLBAR
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
je 0x441d8d
mov dword [0x4d199d], 0
push str.WinMain____No_Toolbar_parameter
call fcn.00456a00
add esp, 4
push 0
push 0
push 0x4b5a28
push str.NORMALSTATUS
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
je 0x441dc0
mov byte [0x4d53d4], 1
push str.WinMain____NORMALSTATUS_parameter
call fcn.00456a00
add esp, 4
push 0
push 0
push 0x4b5a94
push str.SMALLSTATUS
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
je 0x441df3
mov byte [0x4d53d4], 0
push str.WinMain____SMALLSATUS_parameter
call fcn.00456a00
add esp, 4
push 0
push 0
push 0x4b5b00
push str.NOLU
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
je 0x441e33
mov dword [0x4d4300], 0
mov dword [0x4e7824], 1
push str.WinMain____NOLU_parameter:_LiveUpdate_Disabled_
call fcn.00456a00
add esp, 4
push 0
push 0
push 0x4b5b68
push str.NOGA
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
je 0x441e69
mov dword [0x4d1de0], 0
push str.WinMain____NOGA_parameter:_Google_Analytics_Disabled_
call fcn.00456a00
add esp, 4
mov dword [ebp - 0x630], 0
push 0
push 0
push 0x4b5bec
push str.GA_REG
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
je 0x441ea9
mov dword [ebp - 0x630], 1
push str.WinMain____GA_REG_parameter:_Google_Analytics_in_Registry_
call fcn.00456a00
add esp, 4
push 0x104
lea eax, [ebp - 0x1708]
push eax
push 0x4b5c80
push 0x4b5c88
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
je 0x441f91
lea ecx, [ebp - 0x1708]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
lea edx, [ebp - 0x1708]
push edx
call dword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
lea eax, [ebp - 0x1708]
push eax
push str.WinMain____Params_X:__s
call fcn.00456a00
add esp, 8
lea ecx, [ebp - 0x1708]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
je 0x441f3e
push 0x4e4338
push 0x104
push 0x4d4b88
call fcn.0046a10d
add esp, 0xc
lea edx, [ebp - 0x1708]
push edx
push 0x4d4b88
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x441f57
lea eax, [ebp - 0x1708]
push eax
push 0x104
push 0x4d4b88
call fcn.0046a10d
add esp, 0xc
push 0x4d4b88
push str.WinMain____TgdFolder_s
call fcn.00456a00
add esp, 8
mov dword [0x4d4d98], 0
mov dword [0x4d4544], 0
mov dword [0x4d4d94], 0
mov dword [0x4d4548], 0
call fcn.0040c3a0
mov dword [ebp - 0x1c8c], eax
cmp dword [0x4d4da8], 0
je 0x441fba
cmp dword [ebp - 0x1c8c], 0
jne 0x441fba
mov dword [ebp - 0xa338], 1
jmp 0x441fc4
mov dword [ebp - 0xa338], 0
mov ecx, dword [ebp - 0xa338]
mov dword [ebp - 0x17b4], ecx
mov edx, dword [ebp - 0x17b4]
push edx
push str.WinMain____bNeedToRunAsAdmin_d
call fcn.00456a00
add esp, 8
cmp dword [ebp - 0x17b4], 0
je 0x441ff7
jmp 0x444544
xor eax, eax
mov word [ebp - 0x840], ax
push 0x206
push 0
lea ecx, [ebp - 0x83e]
push ecx
call fcn.004677c0
add esp, 0xc
xor edx, edx
mov word [ebp - 0x1290], dx
push 0x206
push 0
lea eax, [ebp - 0x128e]
push eax
call fcn.004677c0
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x210], cx
push 0x206
push 0
lea edx, [ebp - 0x20e]
push edx
call fcn.004677c0
add esp, 0xc
xor eax, eax
mov word [ebp - 0x1c88], ax
push 0x206
push 0
lea ecx, [ebp - 0x1c86]
push ecx
call fcn.004677c0
add esp, 0xc
push 0x4d1bcf
push 0x104
lea edx, [ebp - 0x840]
push edx
call fcn.0046a10d
add esp, 0xc
push 0x104
lea eax, [ebp - 0x210]
push eax
push 0x104
lea ecx, [ebp - 0x1290]
push ecx
push 0x104
lea edx, [ebp - 0x840]
push edx
call fcn.0040cbb0
add esp, 0x18
cmp dword [0x4d1de0], 0
jne 0x4420ce
cmp dword [ebp - 0x630], 0
je 0x44290a
call fcn.004040e0
mov dword [ebp - 0x6438], eax
mov dword [ebp - 0x6434], 0
mov dword [ebp - 0x20a4], 1
xor eax, eax
mov word [ebp - 0x6430], ax
push 0x50
push 0
lea ecx, [ebp - 0x642e]
push ecx
call fcn.004677c0
add esp, 0xc
push 0x4333
push 0
lea edx, [ebp - 0x63de]
push edx
call fcn.004677c0
add esp, 0xc
push 0x208
lea eax, [ebp - 0x1708]
push eax
push 0x4b5d48
push 0x4d1fec
push closesocket
call fcn.00437ca0
add esp, 0x14
mov dword [ebp - 0x6434], eax
cmp dword [ebp - 0x6434], 0
jne 0x44217a
push 0x208
lea ecx, [ebp - 0x1708]
push ecx
push str.GAclientID
push 0x4d1fec
push closesocket
call fcn.00437ca0
add esp, 0x14
mov dword [ebp - 0x6434], eax
cmp dword [ebp - 0x6434], 0
je 0x442236
lea edx, [ebp - 0x1708]
mov dword [ebp - 0x20a8], edx
cmp dword [ebp - 0x20a8], 0
jne 0x4421a8
mov dword [ebp - 0xa33c], 0
jmp 0x44221e
mov eax, dword [ebp - 0x20a8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
mov dword [ebp - 0x20a0], eax
cmp dword [ebp - 0x20a0], 0x3fffffff
jle 0x4421d6
mov dword [ebp - 0xa340], 0
jmp 0x442212
mov eax, dword [ebp - 0x20a0]
shl eax, 1
call fcn.0046d420
mov dword [ebp - 0xa344], esp
mov ecx, dword [ebp - 0x6438]
push ecx
mov edx, dword [ebp - 0x20a0]
shl edx, 1
push edx
mov eax, dword [ebp - 0x20a8]
push eax
mov ecx, dword [ebp - 0xa344]
push ecx
call fcn.004234b0
mov dword [ebp - 0xa340], eax
mov edx, dword [ebp - 0xa340]
mov dword [ebp - 0xa33c], edx
mov eax, dword [ebp - 0xa33c]
push eax
push 0x27
lea ecx, [ebp - 0x63de]
push ecx
call fcn.00469f5d
add esp, 0xc
push 0x4b5d78
lea edx, [ebp - 0x840]
push edx
lea eax, [ebp - 0x1c88]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [ebp - 0x630], 0
je 0x4423bb
lea ecx, [ebp - 0x20a4]
push ecx
push 0x4b5d80
lea edx, [ebp - 0x840]
push edx
push closesocket
call fcn.00437df0
add esp, 0x10
lea eax, [ebp - 0x840]
push eax
push 0x104
lea ecx, [ebp - 0x1c88]
push ecx
call fcn.0046a10d
add esp, 0xc
push 0x4b5d88
lea edx, [ebp - 0x1c88]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0x52
lea eax, [ebp - 0x6430]
push eax
push 0x4b5d90
lea ecx, [ebp - 0x1c88]
push ecx
push closesocket
call fcn.00437ca0
add esp, 0x14
push 0x4b5cf4
lea edx, [ebp - 0x1c88]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0xca
lea eax, [ebp - 0x4013]
push eax
push 0x4b5da8
lea ecx, [ebp - 0x1c88]
push ecx
push closesocket
call fcn.00437ca0
add esp, 0x14
push 0xca
lea edx, [ebp - 0x4415]
push edx
push 0x4b5db0
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437ca0
add esp, 0x14
push 0x208
lea ecx, [ebp - 0x461d]
push ecx
push 0x4b5dbc
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437ca0
add esp, 0x14
push 0xca
lea eax, [ebp - 0x434b]
push eax
push 0x4b5dcc
lea ecx, [ebp - 0x1c88]
push ecx
push closesocket
call fcn.00437ca0
add esp, 0x14
push 0x66
lea edx, [ebp - 0x4281]
push edx
push 0x4b5ddc
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437ca0
add esp, 0x14
push 0x208
lea ecx, [ebp - 0x421b]
push ecx
push 0x4b5dec
push 0x4d1fec
push closesocket
call fcn.00437ca0
add esp, 0x14
jmp 0x44274b
push 1
push 0x4b5dfc
lea edx, [ebp - 0x840]
push edx
push closesocket
call fcn.00437b50
add esp, 0x10
movzx eax, word [0x4d21f4]
test eax, eax
je 0x442408
push 0x104
push 0x4d21f4
push 1
push 0x4b5e04
lea ecx, [ebp - 0x1c88]
push ecx
push closesocket
call fcn.00437a20
add esp, 0x18
jmp 0x442421
push 0x4b5e1c
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437c30
add esp, 0xc
push str.Campaign
lea eax, [ebp - 0x1c88]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
movzx ecx, word [0x4d2d52]
test ecx, ecx
je 0x442465
push 0x104
push 0x4d2d52
push 1
push 0x4b5e48
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a20
add esp, 0x18
jmp 0x44247e
push 0x4b5e50
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437c30
add esp, 0xc
movzx ecx, word [0x4d2950]
test ecx, ecx
je 0x4424b0
push 0x104
push 0x4d2950
push 1
push 0x4b5e58
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a20
add esp, 0x18
jmp 0x4424c9
push str.Name
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437c30
add esp, 0xc
movzx ecx, word [0x4d2748]
test ecx, ecx
je 0x4424fb
push 0x104
push 0x4d2748
push 1
push 0x4b5e70
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a20
add esp, 0x18
jmp 0x442514
push str.Content
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437c30
add esp, 0xc
movzx ecx, word [0x4d2a1a]
test ecx, ecx
je 0x442546
push 0x104
push 0x4d2a1a
push 1
push 0x4b5e90
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a20
add esp, 0x18
jmp 0x44255f
push str.Source
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437c30
add esp, 0xc
movzx ecx, word [0x4d2ae4]
test ecx, ecx
je 0x442591
push 0x104
push 0x4d2ae4
push 1
push 0x4b5eb0
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a20
add esp, 0x18
jmp 0x4425aa
push str.Medium
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437c30
add esp, 0xc
movzx ecx, word [0x4d2b4a]
test ecx, ecx
je 0x4425dc
push 0x104
push 0x4d2b4a
push 1
push 0x4b5ed0
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a20
add esp, 0x18
jmp 0x4425f5
push str.Keyword
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437c30
add esp, 0xc
movzx ecx, word [0x4d2d52]
test ecx, ecx
je 0x442627
push 0x104
push 0x4d2d52
push 1
push 0x4b5ef0
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a20
add esp, 0x18
jmp 0x442640
push 0x4b5ef8
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437c30
add esp, 0xc
push 0x4d2d52
push 0x65
lea ecx, [ebp - 0x4013]
push ecx
call fcn.0046a10d
add esp, 0xc
push 0x4d2b4a
push 0x104
lea edx, [ebp - 0x421b]
push edx
call fcn.0046a10d
add esp, 0xc
push 0x4d2ae4
push 0x33
lea eax, [ebp - 0x4281]
push eax
call fcn.0046a10d
add esp, 0xc
push 0x4d2950
push 0x65
lea ecx, [ebp - 0x4415]
push ecx
call fcn.0046a10d
add esp, 0xc
push 0x4d2a1a
push 0x65
lea edx, [ebp - 0x434b]
push edx
call fcn.0046a10d
add esp, 0xc
xor eax, eax
mov word [ebp - 0x8440], ax
push 0x1ffe
push 0
lea ecx, [ebp - 0x843e]
push ecx
call fcn.004677c0
add esp, 0xc
push 0x1000
lea edx, [ebp - 0x8440]
push edx
lea eax, [ebp - 0x6430]
push eax
call fcn.0041b290
movzx ecx, word [ebp - 0x8440]
test ecx, ecx
je 0x44271c
push 0x104
lea edx, [ebp - 0x8440]
push edx
push 1
push 0x4b5f00
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437a20
add esp, 0x18
jmp 0x442735
push str.Params
lea ecx, [ebp - 0x1c88]
push ecx
push closesocket
call fcn.00437c30
add esp, 0xc
push 0x4d21f4
push 0x29
lea edx, [ebp - 0x6430]
push edx
call fcn.0046a10d
add esp, 0xc
cmp dword [ebp - 0x20a4], 0
je 0x442908
push 0x4d23fc
push 0x65
lea eax, [ebp - 0x47b1]
push eax
call fcn.0046a10d
add esp, 0xc
push 0x4d249e
push 0x65
lea ecx, [ebp - 0x46e7]
push ecx
call fcn.0046a10d
add esp, 0xc
push 0x4d2540
push 0x104
lea edx, [ebp - 0x55db]
push edx
call fcn.0046a10d
add esp, 0xc
push str.appview
push 0x1e
lea eax, [ebp - 0x63b7]
push eax
call fcn.0046a10d
add esp, 0xc
lea ecx, [ebp - 0x6430]
push ecx
push 0x4d1de4
call fcn.0041b920
lea edx, [ebp - 0x63de]
push edx
push str.GAParams.UniqueId_s
call fcn.00456e30
add esp, 8
cmp dword [ebp - 0x6434], 0
jne 0x442908
movzx eax, word [0x4d1fec]
test eax, eax
je 0x442908
movsx ecx, byte [ebp - 0x63de]
test ecx, ecx
je 0x442908
lea edx, [ebp - 0x63de]
mov dword [ebp - 0x643c], edx
cmp dword [ebp - 0x643c], 0
jne 0x442824
mov dword [ebp - 0xa348], 0
jmp 0x442898
mov eax, dword [ebp - 0x643c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x20a0], eax
cmp dword [ebp - 0x20a0], 0x3fffffff
jle 0x442852
mov dword [ebp - 0xa34c], 0
jmp 0x44288c
mov eax, dword [ebp - 0x20a0]
shl eax, 1
call fcn.0046d420
mov dword [ebp - 0xa350], esp
mov ecx, dword [ebp - 0x6438]
push ecx
mov edx, dword [ebp - 0x20a0]
push edx
mov eax, dword [ebp - 0x643c]
push eax
mov ecx, dword [ebp - 0xa350]
push ecx
call fcn.0041f5f0
mov dword [ebp - 0xa34c], eax
mov edx, dword [ebp - 0xa34c]
mov dword [ebp - 0xa348], edx
mov eax, dword [ebp - 0xa348]
push eax
push 0x104
lea ecx, [ebp - 0x1708]
push ecx
call fcn.0046a10d
add esp, 0xc
cmp dword [ebp - 0x1c8c], 0
je 0x4428e3
push 0x104
lea edx, [ebp - 0x1708]
push edx
push 1
push 0x4b5f48
push 0x4d1fec
push closesocket
call fcn.00437a20
add esp, 0x18
jmp 0x442908
push 0x104
lea eax, [ebp - 0x1708]
push eax
push 1
push str.GAClientID
push 0x4d1fec
push closesocket
call fcn.00437a20
add esp, 0x18
jmp 0x442964
movzx ecx, word [ebp - 0x840]
test ecx, ecx
je 0x442964
cmp dword [0x4e7824], 0
jne 0x442964
push 0x4b5f78
lea edx, [ebp - 0x840]
push edx
push closesocket
call fcn.00437c30
add esp, 0xc
push 0x4b5f80
lea eax, [ebp - 0x840]
push eax
lea ecx, [ebp - 0x1c88]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437bf0
add esp, 8
call fcn.004478b0
mov dword [0x4da1a8], eax
xor eax, eax
mov word [ebp - 0x618], ax
push 0x206
push 0
lea ecx, [ebp - 0x616]
push ecx
call fcn.004677c0
add esp, 0xc
push str.IAMCu.dll
push 0x4e32f8
lea edx, [ebp - 0x618]
push edx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [0x4d19a9], 0
je 0x4429c8
cmp dword [ebp - 0x17bc], 0
je 0x4429c8
lea eax, [ebp - 0x618]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x4da1a4], eax
push 0
push 0x4da1b0
mov ecx, dword [0x4d2e1c]
push ecx
call fcn.00408590
add esp, 0xc
mov dword [0x4da1ac], eax
cmp dword [0x4da1ac], 0
jne 0x442a08
push 0x4da1b8
push str._BV69_FCW_
push 0x4da5c8
call fcn.004181a0
add esp, 0xc
mov dword [0x4e781c], eax
movzx edx, word [0x4d4b88]
test edx, edx
je 0x442a20
cmp dword [0x4d4548], 0
je 0x442aa6
cmp dword [0x4da1ac], 0
jne 0x442a32
cmp dword [0x4e781c], 0
je 0x442a8f
push 0x4b5fa8
push 0x4d3660
call fcn.0046b42e
add esp, 8
test eax, eax
je 0x442a78
cmp dword [0x4d4db4], 0
je 0x442a78
push 0x4d3660
push 0x4e4950
push 0x4d4b88
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4b5ff8
push 0x4d4b88
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x442a8d
push str.7B28E39C_883C_4f49_ABFB_5D16796F2DD9
push 0x4e3500
push 0x4d4b88
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
jmp 0x442aa6
push 0x4da3c0
push 0x104
push 0x4d4b88
call fcn.0046a10d
add esp, 0xc
push 0x104
push 0x4d4570
call fcn.00446fc0
add esp, 8
push 0x4d4570
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
je 0x442ade
push 0x4d4570
push 0x4d4b88
push 0x4e28e0
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
jmp 0x442aee
push 0x4d4570
push 0x4e28e0
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x4e28e0
push str.WinMain____ExeFile_s
call fcn.00456a00
add esp, 8
cmp dword [0x4d4300], 0
je 0x442c49
push str.__NOLU
push 0x1f40
push 0x4dabe0
call fcn.00467c81
add esp, 0xc
mov eax, dword [0x4d4308]
push eax
mov ecx, dword [0x4d4304]
push ecx
lea edx, [ebp - 0x17b8]
push edx
push 0x4da5c8
push 0x4d3ef0
call fcn.00422940
add esp, 0x14
mov dword [0x4d4300], eax
cmp dword [0x4d4300], 0
je 0x442bf5
cmp dword [0x4d4314], 0
je 0x442bcb
cmp dword [0x4e7814], 0
jne 0x442bcb
mov eax, dword [0x4da190]
push eax
mov ecx, 0x4e7830
call fcn.004087b0
mov ecx, dword [eax + 0x410]
push ecx
push 0x100
lea edx, [ebp - 0xe48]
push edx
push 0x2ca
mov eax, dword [0x4d1ddc]
push eax
call fcn.00449970
add esp, 0x14
push 0x40024
push 0x4d2e20
lea ecx, [ebp - 0xe48]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
xor edx, edx
cmp eax, 6
sete dl
mov dword [0x4d4300], edx
cmp dword [0x4d4300], 0
je 0x442be0
jmp 0x4444d6
cmp dword [0x4d430c], 0
je 0x442bf3
jmp 0x444544
jmp 0x442c49
cmp dword [0x4d4310], 0
je 0x442c49
push 0x100
lea eax, [ebp - 0xe48]
push eax
mov ecx, dword [ebp - 0x17b8]
push ecx
call fcn.00449780
add esp, 0xc
test eax, eax
je 0x442c3f
cmp dword [0x4e7814], 0
jne 0x442c3f
push 0x40010
push 0x4d2e20
lea edx, [ebp - 0xe48]
push edx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x444544
mov byte [ebp - 0x14a5], 0
xor eax, eax
mov word [ebp - 0x1088], ax
push 0x206
push 0
lea ecx, [ebp - 0x1086]
push ecx
call fcn.004677c0
add esp, 0xc
cmp dword [0x4d199d], 0
je 0x442cf4
push str.TBI.exe
push 0x4e3500
lea edx, [ebp - 0x1088]
push edx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
call fcn.00401870
mov byte [ebp - 0x14a5], al
cmp dword [0x4d1068], 0
jne 0x442cde
push 0x4d108e
push 0x4d1078
movzx eax, byte [ebp - 0x14a5]
push eax
call fcn.00401a50
add esp, 0xc
test eax, eax
jne 0x442cd2
lea ecx, [ebp - 0x1088]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x442cde
mov dword [ebp - 0xa354], 0
jmp 0x442ce8
mov dword [ebp - 0xa354], 1
mov edx, dword [ebp - 0xa354]
mov dword [0x4d199d], edx
mov eax, dword [0x4d199d]
push eax
push str.WinMain____Toolbar_d
call fcn.00456a00
add esp, 8
cmp dword [0x4d4560], 0
je 0x442ebf
mov dword [ebp - 0x8448], 0
mov dword [ebp - 0x8444], 0
mov ecx, 0x4cf968
call fcn.0040ff50
cmp dword [ebp - 0x8444], eax
jae 0x442e48
cmp dword [ebp - 0x8448], 0
jne 0x442e48
mov ecx, dword [ebp - 0x8444]
push ecx
mov ecx, 0x4cf968
call fcn.0040ff70
add eax, 0x200
push eax
push str.WinMain____Platform:__s
call fcn.00456a00
add esp, 8
push str.Win32
mov edx, dword [ebp - 0x8444]
push edx
mov ecx, 0x4cf968
call fcn.0040ff70
add eax, 0x400
push eax
call fcn.0046b42e
add esp, 8
test eax, eax
jne 0x442dab
xor eax, eax
cmp dword [0x4cf82c], 0
sete al
mov dword [ebp - 0x8448], eax
jmp 0x442deb
push str.Win64
mov ecx, dword [ebp - 0x8444]
push ecx
mov ecx, 0x4cf968
call fcn.0040ff70
add eax, 0x400
push eax
call fcn.0046b42e
add esp, 8
test eax, eax
jne 0x442de1
mov edx, dword [0x4cf82c]
mov dword [ebp - 0x8448], edx
jmp 0x442deb
mov dword [ebp - 0x8448], 1
mov eax, dword [ebp - 0x8448]
push eax
push str.WinMain____ProcArchitecture:_Continue_d
call fcn.00456a00
add esp, 8
cmp dword [ebp - 0x8448], 0
je 0x442e34
mov ecx, dword [ebp - 0x8444]
push ecx
mov edx, dword [ebp - 0x8444]
push edx
mov ecx, 0x4cf968
call fcn.0040ff70
add eax, 0x600
push eax
call fcn.0040f820
add esp, 8
mov dword [ebp - 0x8448], eax
mov eax, dword [ebp - 0x8444]
add eax, 1
mov dword [ebp - 0x8444], eax
jmp 0x442d28
cmp dword [ebp - 0x8448], 0
jne 0x442ebf
mov dword [ebp - 0x17b8], 0xa
cmp dword [0x4e7814], 0
jne 0x442eb5
mov ecx, dword [0x4da190]
push ecx
mov ecx, 0x4e7830
call fcn.004087b0
mov edx, dword [eax + 0x410]
push edx
push 0x100
lea eax, [ebp - 0xe48]
push eax
push 0x25f
mov ecx, dword [0x4d1ddc]
push ecx
call fcn.00449970
add esp, 0x14
push 0x40010
push 0x4d2e20
lea edx, [ebp - 0xe48]
push edx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x444544
cmp dword [0x4d454c], 0
je 0x443037
mov dword [ebp - 0x844c], 1
xor eax, eax
mov word [ebp - 0x8658], ax
push 0x206
push 0
lea ecx, [ebp - 0x8656]
push ecx
call fcn.004677c0
add esp, 0xc
push 0x104
lea edx, [ebp - 0x8658]
push edx
push 0x4b61ac
push 0x4b61b4
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
jne 0x442f43
push 0x104
lea eax, [ebp - 0x8658]
push eax
push 0x4b61cc
push str._PASSWORD:
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
je 0x442f8c
lea ecx, [ebp - 0x8658]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
push 0x10
lea edx, [ebp - 0x8658]
push edx
push 0x11
lea eax, [ebp - 0xe70]
push eax
call fcn.0046aa21
add esp, 0x10
push 0x4d3ece
lea ecx, [ebp - 0x8658]
push ecx
call fcn.0046d324
add esp, 8
test eax, eax
jne 0x442f8c
mov dword [ebp - 0x844c], 0
cmp dword [ebp - 0x844c], 0
je 0x443037
mov edx, dword [0x4d1ddc]
mov dword [ebp - 0xe7c], edx
mov eax, dword [0x4da190]
push eax
mov ecx, 0x4e7830
call fcn.004087b0
mov ecx, dword [eax + 0x410]
mov dword [ebp - 0xe78], ecx
mov edx, dword [0x4d4568]
neg edx
sbb edx, edx
and edx, 0xfffffffe
add edx, 2
mov dword [ebp - 0xe74], edx
mov eax, dword [0x4d456c]
neg eax
sbb eax, eax
and eax, 4
or eax, dword [ebp - 0xe74]
mov dword [ebp - 0xe74], eax
lea ecx, [ebp - 0xe7c]
push ecx
push 0
call fcn.00414c00
add esp, 8
mov dword [ebp - 0x61c], eax
mov edx, dword [ebp - 0x61c]
push edx
push str.WinMain____Dialog_password_d
call fcn.00456a00
add esp, 8
cmp dword [ebp - 0x61c], 1
je 0x443037
mov dword [ebp - 0x17b8], 0x4c7
jmp 0x444544
cmp dword [0x4d4550], 0
je 0x443105
cmp dword [0x4e7814], 0
jne 0x443105
mov eax, dword [0x4d1ddc]
mov dword [ebp - 0x1a80], eax
mov ecx, dword [0x4da190]
push ecx
mov ecx, 0x4e7830
call fcn.004087b0
mov edx, dword [eax + 0x410]
mov dword [ebp - 0x1a7c], edx
push 0x4e2cf0
push 0x104
lea eax, [ebp - 0x1a70]
push eax
call fcn.0046a10d
add esp, 0xc
cmp dword [ebp - 0x61c], 0
je 0x4430a5
mov dword [ebp - 0x1a78], 1
mov ecx, dword [0x4d4568]
neg ecx
sbb ecx, ecx
and ecx, 0xfffffffe
add ecx, 2
or ecx, dword [ebp - 0x1a78]
mov dword [ebp - 0x1a78], ecx
mov edx, dword [0x4d456c]
neg edx
sbb edx, edx
and edx, 4
or edx, dword [ebp - 0x1a78]
mov dword [ebp - 0x1a78], edx
lea eax, [ebp - 0x1a80]
push eax
push 0
call fcn.00414030
add esp, 8
mov dword [ebp - 0x61c], eax
mov ecx, dword [ebp - 0x61c]
push ecx
push str.WinMain____Dialog_license_d
call fcn.00456a00
add esp, 8
cmp dword [ebp - 0x61c], 3
jne 0x443115
jmp 0x442ebf
cmp dword [ebp - 0x61c], 1
je 0x44313b
cmp dword [ebp - 0x61c], 0
je 0x44313b
mov dword [ebp - 0x17b8], 0x4c7
jmp 0x444544
xor edx, edx
mov word [ebp - 0x17b0], dx
push 0xa0
push 0
lea eax, [ebp - 0x17ae]
push eax
call fcn.004677c0
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x1868], cx
push 0xa0
push 0
lea edx, [ebp - 0x1866]
push edx
call fcn.004677c0
add esp, 0xc
push 0x51
lea eax, [ebp - 0x17b0]
push eax
call fcn.00438710
add esp, 8
push 0x51
lea ecx, [ebp - 0x1868]
push ecx
call fcn.004387a0
add esp, 8
lea edx, [ebp - 0x17b0]
push edx
push str.WinMain____CompanyName_s
call fcn.00456a00
add esp, 8
lea eax, [ebp - 0x1868]
push eax
push str.WinMain____UserName_s
call fcn.00456a00
add esp, 8
mov dword [ebp - 0xc44], 0
movzx ecx, byte [0x4d1998]
cmp ecx, 1
je 0x443207
movzx edx, byte [0x4d1998]
cmp edx, 2
je 0x443207
movzx eax, byte [0x4d1998]
cmp eax, 3
je 0x443207
cmp dword [0x4d1999], 0
jne 0x443207
cmp dword [0x4d19a1], 0
je 0x44350a
xor ecx, ecx
mov word [ebp - 0x8a68], cx
push 0x206
push 0
lea edx, [ebp - 0x8a66]
push edx
call fcn.004677c0
add esp, 0xc
push 0x104
lea eax, [ebp - 0x8a68]
push eax
push 0x4b62c8
push 0x4b62d0
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
jne 0x443278
push 0x104
lea ecx, [ebp - 0x8a68]
push ecx
push 0x4b62e4
push str._SERIAL:
push 0x4dabe0
call fcn.0040af30
add esp, 0x14
test eax, eax
je 0x443340
lea edx, [ebp - 0x8a68]
push edx
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
call fcn.004040e0
mov dword [ebp - 0x8a74], eax
lea eax, [ebp - 0x8a68]
mov dword [ebp - 0x8a70], eax
cmp dword [ebp - 0x8a70], 0
jne 0x4432b1
mov dword [ebp - 0xa358], 0
jmp 0x443327
mov ecx, dword [ebp - 0x8a70]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
mov dword [ebp - 0x8a6c], eax
cmp dword [ebp - 0x8a6c], 0x3fffffff
jle 0x4432df
mov dword [ebp - 0xa35c], 0
jmp 0x44331b
mov eax, dword [ebp - 0x8a6c]
shl eax, 1
call fcn.0046d420
mov dword [ebp - 0xa360], esp
mov edx, dword [ebp - 0x8a74]
push edx
mov eax, dword [ebp - 0x8a6c]
shl eax, 1
push eax
mov ecx, dword [ebp - 0x8a70]
push ecx
mov edx, dword [ebp - 0xa360]
push edx
call fcn.004234b0
mov dword [ebp - 0xa35c], eax
mov eax, dword [ebp - 0xa35c]
mov dword [ebp - 0xa358], eax
mov ecx, dword [ebp - 0xa358]
push ecx
push 0x104
push 0x4d19ad
call fcn.00469f5d
add esp, 0xc
xor edx, edx
mov word [ebp - 0x8860], dx
push 0x206
push 0
lea eax, [ebp - 0x885e]
push eax
call fcn.004677c0
add esp, 0xc
lea ecx, [ebp - 0x1290]
push ecx
push 0x4e69d0
lea edx, [ebp - 0x8860]
push edx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x8860]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov dword [ebp - 0xe4c], 0
lea edx, [ebp - 0x8860]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4433e0
push 3
push 0x10000000
lea eax, [ebp - 0x8860]
push eax
call fcn.0040c880
add esp, 0xc
mov dword [ebp - 0xe4c], eax
mov ecx, dword [ebp - 0xe4c]
push ecx
lea edx, [ebp - 0x8860]
push edx
push str.AddAccessRights__s____d
call fcn.00456a00
add esp, 0xc
jmp 0x44341b
cmp dword [0x4cf80c], 0
je 0x44341b
lea eax, [ebp - 0x1290]
push eax
push 0x23
call fcn.0040ca90
add esp, 8
mov dword [ebp - 0xe4c], eax
mov ecx, dword [ebp - 0xe4c]
push ecx
lea edx, [ebp - 0x1290]
push edx
push str.CreateFreeDirectory__s____d
call fcn.00456a00
add esp, 0xc
lea eax, [ebp - 0x8860]
push eax
call fcn.0040d2e0
add esp, 4
lea ecx, [ebp - 0x840]
push ecx
push closesocket
call fcn.004379c0
add esp, 8
push 0x1a
push 0x4d1bb5
push 1
push 0x4b6368
lea edx, [ebp - 0x840]
push edx
push closesocket
call fcn.00437a20
add esp, 0x18
push 0x208
lea eax, [ebp - 0x8860]
push eax
push 1
push 0x4b6378
lea ecx, [ebp - 0x840]
push ecx
push closesocket
call fcn.00437a20
add esp, 0x18
push 0x208
push 0x4d4b88
push 1
push 0x4b638c
lea edx, [ebp - 0x840]
push edx
push closesocket
call fcn.00437a20
add esp, 0x18
movzx eax, byte [0x4d1998]
cmp eax, 1
jne 0x4434dc
push 0x4e
push 0x4d1940
push 1
push 0x4b63a0
lea ecx, [ebp - 0x840]
push ecx
push closesocket
call fcn.00437a20
add esp, 0x18
jmp 0x44350a
movzx edx, byte [0x4d1998]
cmp edx, 3
jne 0x44350a
push 0xf
push 0x4d14c2
push 1
push 0x4b63ac
lea eax, [ebp - 0x840]
push eax
push closesocket
call fcn.00437a20
add esp, 0x18
mov dword [ebp - 0x14a4], 0
movzx ecx, byte [0x4d1998]
cmp ecx, 1
jne 0x4438ae
mov dword [ebp - 0x8ff0], 0
push 0x574
push 0
lea edx, [ebp - 0x8fec]
push edx
call fcn.004677c0
add esp, 0xc
lea eax, [ebp - 0x8fe8]
push eax
push 0x4d1940
call fcn.0040ba40
add esp, 8
cmp dword [ebp - 0xc44], 0
je 0x443596
push 0x4d19ad
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x8fe8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x8fe4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x8fe0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x8fdc]
mov dword [ecx + 0xc], eax
call fcn.0044e100
add esp, 0x14
cmp dword [0x4d1730], 0
je 0x4435d5
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x8fe8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x8fe4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x8fe0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x8fdc]
mov dword [ecx + 0xc], eax
call fcn.0044df60
add esp, 0x10
mov dword [ebp - 0x14a4], eax
cmp dword [ebp - 0x14a4], 0
jne 0x4438a9
mov ecx, dword [0x4d1ddc]
mov dword [ebp - 0x8ff0], ecx
mov edx, dword [0x4da190]
push edx
mov ecx, 0x4e7830
call fcn.004087b0
mov eax, dword [eax + 0x410]
mov dword [ebp - 0x8fec], eax
mov ecx, dword [0x4d172c]
neg ecx
sbb ecx, ecx
add ecx, 2
mov byte [ebp - 0x8fd8], cl
mov edx, dword [0x4d1734]
mov dword [ebp - 0x8fd7], edx
mov eax, dword [0x4d4568]
neg eax
sbb eax, eax
and eax, 0xfffffc00
add eax, 0x400
or eax, dword [ebp - 0x8fd7]
mov dword [ebp - 0x8fd7], eax
mov ecx, dword [0x4d456c]
neg ecx
sbb ecx, ecx
and ecx, 0x800
or ecx, dword [ebp - 0x8fd7]
mov dword [ebp - 0x8fd7], ecx
cmp dword [ebp - 0x61c], 0
je 0x443680
mov edx, dword [ebp - 0x8fd7]
or edx, 0x200
mov dword [ebp - 0x8fd7], edx
mov eax, dword [ebp - 0x8fd7]
push eax
push str.WinMain____SNV3Info.uiDlgOption_d
call fcn.00456a00
add esp, 8
mov cl, byte [0x4d198e]
mov byte [ebp - 0x8fd3], cl
movzx edx, byte [ebp - 0x8fd3]
push edx
movzx eax, byte [ebp - 0x8fd3]
push eax
push str.WinMain____SNV3Info.byProductCode_d___x_
call fcn.00456a00
add esp, 0xc
mov cl, byte [0x4d1dd8]
mov byte [ebp - 0x8fd1], cl
mov dl, byte [0x4d1dd9]
mov byte [ebp - 0x8fd2], dl
mov al, byte [0x4d198f]
mov byte [ebp - 0x8fd0], al
mov cl, byte [0x4d1990]
mov byte [ebp - 0x8fce], cl
mov dl, byte [0x4d1ddb]
mov byte [ebp - 0x8fcf], dl
lea eax, [ebp - 0x17b0]
push eax
push 0x51
lea ecx, [ebp - 0x8bbc]
push ecx
call fcn.0046a10d
add esp, 0xc
lea edx, [ebp - 0x1868]
push edx
push 0x51
lea eax, [ebp - 0x8b1a]
push eax
call fcn.0046a10d
add esp, 0xc
push 0x4d1738
push 0x104
lea ecx, [ebp - 0x8dc4]
push ecx
call fcn.0046a10d
add esp, 0xc
push 0x4d19ad
push 0x104
lea edx, [ebp - 0x8fcc]
push edx
call fcn.00469f5d
add esp, 0xc
push 0x4d1ab1
push 0x104
lea eax, [ebp - 0x8ec8]
push eax
call fcn.00469f5d
add esp, 0xc
cmp dword [0x4e7814], 0
jne 0x4437dd
lea ecx, [ebp - 0x8ff0]
push ecx
push 0
call fcn.0044dc70
add esp, 8
mov dword [ebp - 0x61c], eax
mov edx, dword [ebp - 0x61c]
push edx
push str.WinMain____Dialog_SerialV3_d
call fcn.00456a00
add esp, 8
cmp dword [ebp - 0x61c], 3
jne 0x4437b7
jmp 0x443037
cmp dword [ebp - 0x61c], 1
je 0x4437dd
cmp dword [ebp - 0x61c], 0
je 0x4437dd
mov dword [ebp - 0x17b8], 0x4c7
jmp 0x444544
lea eax, [ebp - 0x8ff0]
push eax
call fcn.0044ddf0
add esp, 4
test eax, eax
jne 0x443890
mov ecx, dword [0x4da190]
push ecx
mov ecx, 0x4e7830
call fcn.004087b0
mov edx, dword [eax + 0x410]
push edx
push 0x100
lea eax, [ebp - 0x410]
push eax
push 0x258
mov ecx, dword [0x4d1ddc]
push ecx
call fcn.00449970
add esp, 0x14
mov edx, dword [0x4da190]
push edx
mov ecx, 0x4e7830
call fcn.004087b0
mov eax, dword [eax + 0x410]
push eax
push 0x100
lea ecx, [ebp - 0xe48]
push ecx
push 0x2bf
mov edx, dword [0x4d1ddc]
push edx
call fcn.00449970
add esp, 0x14
push 0
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0xe48]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0x17b8], 0xd
jmp 0x444544
lea edx, [ebp - 0x8fcc]
push edx
push 0x104
push 0x4d19ad
call fcn.00469f5d
add esp, 0xc
jmp 0x443bb4
movzx eax, byte [0x4d1998]
cmp eax, 3
jne 0x443bb4
mov dword [ebp - 0x9770], 0
push 0x775
push 0
lea ecx, [ebp - 0x976c]
push ecx
call fcn.004677c0
add esp, 0xc
push 0x4d14c2
push 0xf
lea edx, [ebp - 0x9768]
push edx
call fcn.00469f5d
add esp, 0xc
cmp dword [ebp - 0xc44], 0
je 0x443913
lea eax, [ebp - 0x9768]
push eax
lea ecx, [ebp - 0x840]
push ecx
call fcn.004501f0
add esp, 8
cmp dword [0x4d12b0], 0
je 0x443936
lea edx, [ebp - 0x9768]
push edx
push 0x4d1bcf
call fcn.0044fff0
add esp, 8
mov dword [ebp - 0x14a4], eax
cmp dword [ebp - 0x14a4], 0
jne 0x443bb4
mov eax, dword [0x4d1ddc]
mov dword [ebp - 0x9770], eax
mov ecx, dword [0x4da190]
push ecx
mov ecx, 0x4e7830
call fcn.004087b0
mov edx, dword [eax + 0x410]
mov dword [ebp - 0x976c], edx
mov eax, dword [0x4d12ac]
neg eax
sbb eax, eax
add eax, 2
mov byte [ebp - 0x9759], al
mov ecx, dword [0x4d12b4]
mov dword [ebp - 0x9758], ecx
mov edx, dword [0x4d4568]
neg edx
sbb edx, edx
and edx, 0xfffffc00
add edx, 0x400
or edx, dword [ebp - 0x9758]
mov dword [ebp - 0x9758], edx
mov eax, dword [0x4d456c]
neg eax
sbb eax, eax
and eax, 0x800
or eax, dword [ebp - 0x9758]
mov dword [ebp - 0x9758], eax
cmp dword [ebp - 0x61c], 0
je 0x4439e0
mov ecx, dword [ebp - 0x9758]
or ecx, 0x200
mov dword [ebp - 0x9758], ecx
lea edx, [ebp - 0x17b0]
push edx
push 0x51
lea eax, [ebp - 0x913b]
push eax
call fcn.0046a10d
add esp, 0xc
lea ecx, [ebp - 0x1868]
push ecx
push 0x51
lea edx, [ebp - 0x9099]
push edx
call fcn.0046a10d
add esp, 0xc
push 0x4d12ba
push 0x104
lea eax, [ebp - 0x9343]
push eax
call fcn.0046a10d
add esp, 0xc
push 0x4d19ad
push 0x104
lea ecx, [ebp - 0x9753]
push ecx
call fcn.00469f5d
add esp, 0xc
push 0x4d1ab1
push 0x104
lea edx, [ebp - 0x964f]
push edx
call fcn.00469f5d
add esp, 0xc
push 0x4d1bcf
push 0x104
lea eax, [ebp - 0x954b]
push eax
call fcn.0046a10d
add esp, 0xc
cmp dword [0x4e7814], 0
jne 0x443ade
lea ecx, [ebp - 0x9770]
push ecx
push 0
call fcn.0044fdd0
add esp, 8
mov dword [ebp - 0x61c], eax
mov edx, dword [ebp - 0x61c]
push edx
push str.WinMain____Dialog_SerialV5_d
call fcn.00456a00
add esp, 8
cmp dword [ebp - 0x61c], 3
jne 0x443ab8
jmp 0x443037
cmp dword [ebp - 0x61c], 1
je 0x443ade
cmp dword [ebp - 0x61c], 0
je 0x443ade
mov dword [ebp - 0x17b8], 0x4c7
jmp 0x444544
lea eax, [ebp - 0x9753]
push eax
push 0x4d14c2
push 0x4d1bcf
call fcn.00450170
add esp, 0xc
test eax, eax
jne 0x443b9b
mov ecx, dword [0x4da190]
push ecx
mov ecx, 0x4e7830
call fcn.004087b0
mov edx, dword [eax + 0x410]
push edx
push 0x100
lea eax, [ebp - 0x410]
push eax
push 0x258
mov ecx, dword [0x4d1ddc]
push ecx
call fcn.00449970
add esp, 0x14
mov edx, dword [0x4da190]
push edx
mov ecx, 0x4e7830
call fcn.004087b0
mov eax, dword [eax + 0x410]
push eax
push 0x100
lea ecx, [ebp - 0xe48]
push ecx
push 0x2bf
mov edx, dword [0x4d1ddc]
push edx
call fcn.00449970
add esp, 0x14
push 0
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0xe48]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0x17b8], 0xd
jmp 0x444544
lea edx, [ebp - 0x9753]
push edx
push 0x104
push 0x4d19ad
call fcn.00469f5d
add esp, 0xc
cmp dword [0x4d1999], 0
je 0x443fe4
cmp dword [ebp - 0x14a4], 0
jne 0x443fe4
call fcn.004040e0
mov dword [ebp - 0x977c], eax
mov dword [ebp - 0x9780], 0
cmp dword [0x4d07fc], 0
je 0x443cd8
cmp dword [ebp - 0x17bc], 0
jne 0x443cd8
cmp dword [0x4e7814], 0
je 0x443c1a
mov dword [ebp - 0x17b8], 0x4cd
jmp 0x444544
mov eax, dword [0x4da190]
push eax
mov ecx, 0x4e7830
call fcn.004087b0
mov ecx, dword [eax + 0x410]
push ecx
push 0x100
lea edx, [ebp - 0x410]
push edx
push 0x258
mov eax, dword [0x4d1ddc]
push eax
call fcn.00449970
add esp, 0x14
mov ecx, dword [0x4da190]
push ecx
mov ecx, 0x4e7830
call fcn.004087b0
mov edx, dword [eax + 0x410]
push edx
push 0x100
lea eax, [ebp - 0xe48]
push eax
push 0x2c3
mov ecx, dword [0x4d1ddc]
push ecx
call fcn.00449970
add esp, 0x14
cmp dword [ebp - 0x17bc], 0
jne 0x443cd8
push 0x25
lea edx, [ebp - 0x410]
push edx
lea eax, [ebp - 0xe48]
push eax
mov ecx, dword [ebp - 0x9780]
push ecx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
jne 0x443cc9
mov dword [ebp - 0x17b8], 0x4c7
jmp 0x444544
push 0
call fcn.0048ac70
mov dword [ebp - 0x17bc], eax
jmp 0x443c88
mov dword [ebp - 0x9784], 0x4d19ad
cmp dword [ebp - 0x9784], 0
jne 0x443cf7
mov dword [ebp - 0xa364], 0
jmp 0x443d6b
mov edx, dword [ebp - 0x9784]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x9774], eax
cmp dword [ebp - 0x9774], 0x3fffffff
jle 0x443d25
mov dword [ebp - 0xa368], 0
jmp 0x443d5f
mov eax, dword [ebp - 0x9774]
shl eax, 1
call fcn.0046d420
mov dword [ebp - 0xa36c], esp
mov eax, dword [ebp - 0x977c]
push eax
mov ecx, dword [ebp - 0x9774]
push ecx
mov edx, dword [ebp - 0x9784]
push edx
mov eax, dword [ebp - 0xa36c]
push eax
call fcn.0041f5f0
mov dword [ebp - 0xa368], eax
mov ecx, dword [ebp - 0xa368]
mov dword [ebp - 0xa364], ecx
mov edx, dword [ebp - 0xa364]
push edx
lea eax, [ebp - 0x840]
push eax
call fcn.0048ad30
mov dword [ebp - 0xe4c], eax
mov dword [ebp - 0x9784], 0x4d19ad
cmp dword [ebp - 0x9784], 0
jne 0x443da3
mov dword [ebp - 0xa370], 0
jmp 0x443e17
mov ecx, dword [ebp - 0x9784]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x9774], eax
cmp dword [ebp - 0x9774], 0x3fffffff
jle 0x443dd1
mov dword [ebp - 0xa374], 0
jmp 0x443e0b
mov eax, dword [ebp - 0x9774]
shl eax, 1
call fcn.0046d420
mov dword [ebp - 0xa378], esp
mov edx, dword [ebp - 0x977c]
push edx
mov eax, dword [ebp - 0x9774]
push eax
mov ecx, dword [ebp - 0x9784]
push ecx
mov edx, dword [ebp - 0xa378]
push edx
call fcn.0041f5f0
mov dword [ebp - 0xa374], eax
mov eax, dword [ebp - 0xa374]
mov dword [ebp - 0xa370], eax
mov ecx, dword [ebp - 0xe4c]
push ecx
mov edx, dword [ebp - 0xa370]
push edx
lea eax, [ebp - 0x840]
push eax
push str.WinMain____ActivProd_SetSerialNumber__s___s____d
call fcn.00456a00
add esp, 0x10
push 1
push 0
push 0
push 0
push 0xfffffffffffffffe
push closesocket
mov ecx, dword [ebp - 0x9780]
push ecx
lea edx, [ebp - 0x840]
push edx
call fcn.0048ae20
mov dword [ebp - 0xe4c], eax
mov eax, dword [ebp - 0xe4c]
push eax
mov ecx, dword [ebp - 0x9780]
push ecx
lea edx, [ebp - 0x840]
push edx
push str.WinMain____ActivProdEx__s___d____d
call fcn.00456a00
add esp, 0x10
cmp dword [ebp - 0xe4c], 0
jne 0x443fe4
mov eax, dword [0x4da190]
push eax
mov ecx, 0x4e7830
call fcn.004087b0
mov ecx, dword [eax + 0x410]
push ecx
push 0x100
lea edx, [ebp - 0x410]
push edx
push 0x258
mov eax, dword [0x4d1ddc]
push eax
call fcn.00449970
add esp, 0x14
mov ecx, dword [0x4da190]
push ecx
mov ecx, 0x4e7830
call fcn.004087b0
mov edx, dword [eax + 0x410]
push edx
push 0x100
lea eax, [ebp - 0xe48]
push eax
push 0x2c2
mov ecx, dword [0x4d1ddc]
push ecx
call fcn.00449970
add esp, 0x14
mov dword [ebp - 0x9784], 0x4d19ad
cmp dword [ebp - 0x9784], 0
jne 0x443f1d
mov dword [ebp - 0xa37c], 0
jmp 0x443f91
mov edx, dword [ebp - 0x9784]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x9774], eax
cmp dword [ebp - 0x9774], 0x3fffffff
jle 0x443f4b
mov dword [ebp - 0xa380], 0
jmp 0x443f85
mov eax, dword [ebp - 0x9774]
shl eax, 1
call fcn.0046d420
mov dword [ebp - 0xa384], esp
mov eax, dword [ebp - 0x977c]
push eax
mov ecx, dword [ebp - 0x9774]
push ecx
mov edx, dword [ebp - 0x9784]
push edx
mov eax, dword [ebp - 0xa384]
push eax
call fcn.0041f5f0
mov dword [ebp - 0xa380], eax
mov ecx, dword [ebp - 0xa380]
mov dword [ebp - 0xa37c], ecx
push 0x4da1c0
mov edx, dword [ebp - 0xa37c]
push edx
lea eax, [ebp - 0xe48]
push eax
push 0x200
lea ecx, [ebp - 0xc40]
push ecx
call fcn.00467d96
add esp, 0x14
push 0
lea edx, [ebp - 0x410]
push edx
lea eax, [ebp - 0xc40]
push eax
mov ecx, dword [ebp - 0x9780]
push ecx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0xc44], 1
jmp 0x4431cd
cmp dword [0x4d199d], 0
je 0x4441d6
mov dword [ebp - 0x99c8], 0
push 0x236
push 0
lea edx, [ebp - 0x99c4]
push edx
call fcn.004677c0
add esp, 0xc
mov eax, dword [0x4d1ddc]
mov dword [ebp - 0x99c8], eax
mov ecx, dword [0x4da190]
push ecx
mov ecx, 0x4e7830
call fcn.004087b0
mov edx, dword [eax + 0x410]
mov dword [ebp - 0x99c4], edx
mov eax, dword [0x4d1068]
mov dword [ebp - 0x99b4], eax
mov ecx, dword [0x4d1074]
mov dword [ebp - 0x99bc], ecx
mov edx, dword [0x4d1070]
mov dword [ebp - 0x99b8], edx
mov eax, dword [0x4d106c]
mov dword [ebp - 0x99c0], eax
mov ecx, dword [0x4d4568]
neg ecx
sbb ecx, ecx
and ecx, 0xfffffffe
add ecx, 2
or ecx, dword [ebp - 0x9792]
mov dword [ebp - 0x9792], ecx
mov edx, dword [0x4d456c]
neg edx
sbb edx, edx
and edx, 4
or edx, dword [ebp - 0x9792]
mov dword [ebp - 0x9792], edx
push 0x4d1078
push 0xb
lea eax, [ebp - 0x99b0]
push eax
call fcn.0046a10d
add esp, 0xc
push str.Toolbar.bmp
push 0x4e3500
lea ecx, [ebp - 0x999a]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [0x4e7814], 0
jne 0x44411a
lea edx, [ebp - 0x99c8]
push edx
push 0
call fcn.00401810
add esp, 8
mov dword [ebp - 0x61c], eax
mov eax, dword [ebp - 0x61c]
push eax
push str.WinMain____Dialog_Toolbar_d
call fcn.00456a00
add esp, 8
cmp dword [ebp - 0x61c], 1
je 0x44411a
mov dword [ebp - 0x17b8], 0x4c7
jmp 0x444544
cmp dword [ebp - 0x99c0], 0
je 0x4441d6
mov dword [ebp - 0x99cc], 0
mov ecx, dword [0x4da190]
push ecx
mov ecx, 0x4e7830
call fcn.004087b0
mov edx, dword [eax + 0x410]
push edx
push 0x200
lea eax, [ebp - 0xc40]
push eax
push 0x2c7
mov ecx, dword [0x4d1ddc]
push ecx
call fcn.00449970
add esp, 0x14
push 1
lea edx, [ebp - 0xc40]
push edx
push 0x4d2e20
mov eax, dword [0x4d1ddc]
push eax
call fcn.004144c0
add esp, 0x10
mov dword [ebp - 0x99d0], eax
mov ecx, dword [ebp - 0x99b8]
push ecx
mov edx, dword [ebp - 0x99bc]
push edx
movzx eax, byte [ebp - 0x14a5]
push eax
push 0x4d1078
lea ecx, [ebp - 0x1088]
push ecx
mov edx, dword [ebp - 0x99cc]
push edx
call fcn.00401db0
add esp, 0x18
push 0
push 0
push 0
mov eax, dword [0x4d1ddc]
push eax
call fcn.004144c0
add esp, 0x10
mov dword [ebp - 0x99d0], eax
cmp dword [0x4d19a1], 0
je 0x4444d6
call fcn.004040e0
mov dword [ebp - 0xa32c], eax
mov dword [ebp - 0xa328], 0
push 0x736
push 0
lea ecx, [ebp - 0xa324]
push ecx
call fcn.004677c0
add esp, 0xc
mov edx, dword [0x4d1ddc]
mov dword [ebp - 0xa328], edx
mov eax, dword [0x4da190]
push eax
mov ecx, 0x4e7830
call fcn.004087b0
mov ecx, dword [eax + 0x410]
mov dword [ebp - 0xa324], ecx
mov dl, byte [0x4d0e51]
mov byte [ebp - 0xa120], dl
lea eax, [ebp - 0x840]
push eax
push 0x104
lea ecx, [ebp - 0xa11f]
push ecx
call fcn.0046a10d
add esp, 0xc
push 0x1f
lea edx, [ebp - 0x1290]
push edx
push 0x20
lea eax, [ebp - 0x9e37]
push eax
call fcn.0046aa21
add esp, 0x10
push 0x1f
lea ecx, [ebp - 0x210]
push ecx
push 0x20
lea edx, [ebp - 0x9df7]
push edx
call fcn.0046aa21
add esp, 0x10
push 0x10
push 0x20
lea eax, [ebp - 0x9c37]
push eax
movzx ecx, byte [0x4d1dd7]
push ecx
call fcn.0046d03e
add esp, 0x10
push 0x1f
push 0x4da1c0
push 0x20
lea edx, [ebp - 0x9db7]
push edx
call fcn.0046aa21
add esp, 0x10
push 0x4d1bb5
push 0x20
lea eax, [ebp - 0x9e77]
push eax
call fcn.0046a10d
add esp, 0xc
lea ecx, [ebp - 0x17b0]
push ecx
push 0x20
lea edx, [ebp - 0x9ed7]
push edx
call fcn.0046a10d
add esp, 0xc
lea eax, [ebp - 0x1868]
push eax
push 0x20
lea ecx, [ebp - 0x9f17]
push ecx
call fcn.0046a10d
add esp, 0xc
mov dword [ebp - 0xa330], 0x4d19ad
cmp dword [ebp - 0xa330], 0
jne 0x444329
mov dword [ebp - 0xa388], 0
jmp 0x44439d
mov edx, dword [ebp - 0xa330]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x99d4], eax
cmp dword [ebp - 0x99d4], 0x3fffffff
jle 0x444357
mov dword [ebp - 0xa38c], 0
jmp 0x444391
mov eax, dword [ebp - 0x99d4]
shl eax, 1
call fcn.0046d420
mov dword [ebp - 0xa390], esp
mov eax, dword [ebp - 0xa32c]
push eax
mov ecx, dword [ebp - 0x99d4]
push ecx
mov edx, dword [ebp - 0xa330]
push edx
mov eax, dword [ebp - 0xa390]
push eax
call fcn.0041f5f0
mov dword [ebp - 0xa38c], eax
mov ecx, dword [ebp - 0xa38c]
mov dword [ebp - 0xa388], ecx
mov edx, dword [ebp - 0xa388]
push edx
push 0x40
lea eax, [ebp - 0x9cf7]
push eax
call fcn.0046a10d
add esp, 0xc
push 0x4d3006
push 0x20
lea ecx, [ebp - 0x9d77]
push ecx
call fcn.0046a10d
add esp, 0xc
push 0xa
push 0x10
lea edx, [ebp - 0x9e97]
push edx
movzx eax, byte [0x4d1dd9]
push eax
call fcn.0046d03e
add esp, 0x10
mov cl, byte [0x4d1dda]
mov byte [ebp - 0x9bf3], cl
mov edx, dword [0x4d1062]
mov dword [ebp - 0x9bf2], edx
push 0x20
lea eax, [ebp - 0x9d37]
push eax
movzx cx, byte [0x4d1dd8]
movzx edx, cx
push edx
call fcn.004344f0
add esp, 0xc
push 0x4d0e5a
push 0x100
lea eax, [ebp - 0xa320]
push eax
call fcn.0046a10d
add esp, 0xc
push str.WinMain____before_OLRDisplay
call fcn.00456a00
add esp, 4
xor ecx, ecx
mov word [ebp - 0x9be0], cx
push 0x206
push 0
lea edx, [ebp - 0x9bde]
push edx
call fcn.004677c0
add esp, 0xc
push str.OLRegistu.dll
push 0x4e32f8
lea eax, [ebp - 0x9be0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
xor ecx, ecx
cmp dword [0x4e7814], 0
sete cl
push ecx
lea edx, [ebp - 0x9be0]
push edx
lea eax, [ebp - 0xa328]
push eax
push 0
call fcn.00434f20
add esp, 0x10
mov dword [ebp - 0x61c], eax
mov ecx, dword [ebp - 0x61c]
push ecx
push str.WinMain____Dialog_OLRv3_d
call fcn.00456a00
add esp, 8
cmp dword [ebp - 0x61c], 1
je 0x4444d6
cmp dword [ebp - 0x61c], 3
je 0x4444d6
mov dword [ebp - 0x17b8], 0x4c7
jmp 0x444544
mov edx, dword [0x4d1ddc]
mov dword [ebp - 0x129c], edx
mov eax, dword [0x4da190]
push eax
mov ecx, 0x4e7830
call fcn.004087b0
mov ecx, dword [eax + 0x410]
mov dword [ebp - 0x1298], ecx
xor edx, edx
cmp dword [0x4d4568], 0
sete dl
or edx, dword [ebp - 0x1294]
mov dword [ebp - 0x1294], edx
mov eax, dword [0x4d456c]
neg eax
sbb eax, eax
and eax, 2
or eax, dword [ebp - 0x1294]
mov dword [ebp - 0x1294], eax
lea ecx, [ebp - 0x129c]
push ecx
push 0
call fcn.00415a30
add esp, 8
mov dword [0x4da1a0], eax
cmp dword [0x4da1ac], 0
je 0x44455a
mov edx, dword [0x4da1ac]
push edx
call dword [sym.imp.KERNEL32.dll_FreeResource]
cmp dword [ebp - 0x1c90], 0
je 0x444570
mov eax, dword [ebp - 0x1c90]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [0x4da1a4], 0
je 0x444586
mov ecx, dword [0x4da1a4]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [0x4da1a8], 0
je 0x4445eb
push str.ISnuiShutdown
mov edx, dword [0x4da1a8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xa334], eax
cmp dword [ebp - 0xa334], 0
je 0x4445b8
call dword [ebp - 0xa334]
jmp 0x4445c5
push str.Function_nuiShutdown_failed_
call fcn.00456a00
add esp, 4
mov eax, dword [0x4da1a8]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp - 0xe4c], eax
mov ecx, dword [ebp - 0xe4c]
push ecx
push str.WinMain____unload_NewUI___d
call fcn.00456a00
add esp, 8
cmp dword [0x4d1ddc], 0
je 0x44462d
mov edx, dword [0x4d1ddc]
cmp edx, dword [0x4d2e1c]
je 0x44462d
mov eax, dword [0x4d1ddc]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp - 0xe4c], eax
mov ecx, dword [ebp - 0xe4c]
push ecx
push 0x4e2ae8
push str.WinMain____unload__s___d
call fcn.00456a00
add esp, 0xc
call dword [sym.imp.ole32.dll_CoUninitialize]
push 0x4e3500
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x444670
push 2
push 0x4e3500
call fcn.00455e50
add esp, 8
mov dword [ebp - 0xe4c], eax
mov edx, dword [ebp - 0xe4c]
push edx
push 0x4e3500
push 0x4b6728
call fcn.00456a00
add esp, 0xc
push 0x4e3708
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x4446c9
cmp dword [0x4d4db4], 0
je 0x44469b
push 0x4e3708
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov dword [ebp - 0xe4c], eax
jmp 0x4446b0
push 2
push 0x4e3708
call fcn.00455e50
add esp, 8
mov dword [ebp - 0xe4c], eax
mov eax, dword [ebp - 0xe4c]
push eax
push 0x4e3708
push 0x4b6770
call fcn.00456a00
add esp, 0xc
cmp dword [0x4d4544], 0
je 0x444727
push 0x4d4b88
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x444727
push 0x4da3c0
push 0x4d4b88
call fcn.0046b42e
add esp, 8
test eax, eax
je 0x444727
push 2
push 0x4d4b88
call fcn.00455e50
add esp, 8
mov dword [ebp - 0xe4c], eax
mov ecx, dword [ebp - 0xe4c]
push ecx
push 0x4d4b88
push str.WinMain____Remove_folder__s___d_
call fcn.00456a00
add esp, 0xc
jmp 0x444739
push 0x4d4b88
push str.WinMain____the_folder__s_will_not_be_removed_
call fcn.00456a00
add esp, 8
cmp dword [ebp - 0x17b4], 0
je 0x44477e
push 0
lea edx, [ebp - 0x17b8]
push edx
mov eax, dword [ebp + 0x14]
push eax
push 0
push str.Runas
push 0x4b686c
mov ecx, dword [ebp + 0x10]
push ecx
push 0x4da5c8
push 0
call fcn.00454880
add esp, 0x24
test eax, eax
jne 0x44477e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x17b8], eax
cmp dword [ebp - 0x634], 0
je 0x444794
mov edx, dword [ebp - 0x634]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x4cd5d4], 0
je 0x4447a8
mov eax, dword [0x4cd5d4]
mov dword [ebp - 0x17b8], eax
mov ecx, dword [ebp - 0x17b8]
push ecx
push str.WinMain____End__x_
call fcn.00456a00
add esp, 8
mov eax, dword [ebp - 0x17b8]
lea esp, [ebp - 0xa390]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004677af
mov esp, ebp
pop ebp
ret 0x10