Function at 0x446055
Capabilities:
Accept command line arguments
Check for sandbox username or hostname
Check for time delay via gettickcount
Check if file exists
Contain obfuscated stackstrings
Copy file
Create process on windows
Delete file
Get file attributes
Get hostname
Move file
Parse pe header
Print debug messages
Resolve function by parsing pe exports
Set current directory
Set environment variable
Set registry value
Terminate process
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4e4b38
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x3724
call fcn.004c27c0
mov eax, dword [0x526f10]
xor eax, esp
mov dword [esp + 0x3720], eax
push ebx
push esi
push edi
mov eax, dword [0x526f10]
xor eax, esp
push eax
lea eax, [esp + 0x3738]
mov dword fs:[0], eax
lea eax, [esp + 0x2d4]
xor esi, esi
mov dword [esp + 0x44], esi
push eax
mov dword [esp + 0x68], ecx
mov dword [esp + 0x2d8], 8
mov dword [esp + 0x2dc], 0xff
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov ecx, dword [esp + 0x64]
call fcn.004b6294
mov ebx, 0x4eda54
push ebx
lea ecx, [esp + 0x64]
call fcn.004247ec
push ebx
lea ecx, [esp + 0x60]
mov dword [esp + 0x3744], esi
call fcn.004247ec
push ebx
lea ecx, [esp + 0x78]
mov byte [esp + 0x3744], 1
call fcn.004247ec
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x3744], 2
call fcn.0046ca80
pop ecx
lea ecx, [esp + 0x4c]
call fcn.00422487
mov byte [esp + 0x3740], 4
mov edi, dword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea eax, [esp + 0x50]
push eax
mov dword [esp + 0x7c], esi
call edi
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x2d0]
push eax
mov dword [esp + 0x38], esi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x58], esi
mov dword [esp + 0x44], esi
call fcn.0046ca80
pop ecx
push eax
mov ecx, 0x52cfb8
mov byte [esp + 0x3744], 5
call fcn.00424830
mov byte [esp + 0x3740], 4
mov ecx, dword [esp + 0x2d0]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x2b8]
push eax
call fcn.0046ca80
pop ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x3740], 6
call edi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
mov eax, dword [esp + 0x28]
push dword [eax]
push str.Loader:__s__CmdLine_s
push ecx
call fcn.0046da40
add esp, 0x10
call fcn.00444eb6
pop ecx
mov byte [esp + 0x3740], 4
mov ecx, dword [esp + 0x2b8]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str._CEK_
mov edi, 0x400
call fcn.004247ec
lea eax, [esp + 0x1dc]
push eax
mov ecx, edi
call fcn.00473d00
mov byte [esp + 0x3748], 7
mov eax, dword [eax]
mov eax, dword [eax - 0xc]
add esp, 4
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
push str.Loader:_CEK:_Len_d
push ecx
call fcn.0046da40
add esp, 0xc
call fcn.00444eb6
pop ecx
mov byte [esp + 0x3740], 4
mov ecx, dword [esp + 0x1d8]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
push 1
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x52cbf0], eax
cmp dword [esp + 0x2c], esi
je 0x4472c6
xor eax, eax
inc eax
cmp dword [esp + 0x50], eax
mov dword [esp + 0x24], eax
jle 0x4472c6
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x2c]
push ecx
lea edi, [eax + ecx*4]
mov ecx, esp
mov dword [esp + 0x3c], esp
push dword [edi]
call fcn.004247ec
call fcn.00444ee6
mov dword [esp], 0x4fcb3c
call fcn.004bba40
pop ecx
push eax
push str._ExeFile:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
jne 0x4462cb
push 0x4fcb3c
call fcn.004bba40
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x18]
jmp 0x4472ae
push str._Confirm
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x4462ea
mov dword [esp + 0x48], 1
jmp 0x4472b4
push str._Quiet
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x44630c
or dword [esp + 0x40], 2
mov dword [0x5294a0], esi
jmp 0x4472b4
push str._AllUsers
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x44635f
mov dword [esp + 0x54], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.0046c860
test eax, eax
je 0x4473bc
call fcn.0046ca30
test eax, eax
jne 0x4472b4
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Admin_rights_required
jmp 0x4473d7
push str._ErrorsOnly
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x446380
mov dword [0x5294a0], 1
jmp 0x4472b4
push str._Wait
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x44639c
or dword [esp + 0x40], 1
jmp 0x4472b4
push 0x4fcc08
call fcn.004bba40
pop ecx
push eax
push str._Password:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44728f
push 0x4fcc2c
call fcn.004bba40
pop ecx
push eax
push str._Password
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44728f
push 0x4fcc68
call fcn.004bba40
pop ecx
push eax
push str._Properties:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
jne 0x446762
push str._Properties_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xf10]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 8
push dword [0x5294a0]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xf10]
push eax
call fcn.004457c6
add esp, 0x10
lea eax, [esp + 0xf04]
call fcn.00485920
lea ecx, [esp + 0x28]
call fcn.00422487
lea ecx, [esp + 0x20]
call fcn.00422487
lea ecx, [esp + 0x6c]
call fcn.00422487
push 0x4fcc68
mov byte [esp + 0x3744], 0xb
call fcn.004bba40
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x144]
call fcn.004247ec
lea eax, [esp + 0x2dc]
push eax
mov byte [esp + 0x3744], 0xc
call fcn.004309f5
mov byte [esp + 0x3740], 0xd
mov dword [esp + 0x150], esi
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 0x4fc518
lea edi, [esp + 0x158]
call fcn.004247ec
push ecx
mov byte [esp + 0x3748], 0xe
lea eax, [esp + 0x148]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x1e8]
push eax
mov byte [esp + 0x374c], 0xd
call fcn.00471790
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x3744], 0xf
call fcn.00424830
mov byte [esp + 0x3740], 0xd
mov ecx, dword [esp + 0x1e0]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
push 0x3d
lea ecx, [esp + 0x30]
call fcn.00426e76
mov edi, eax
cmp edi, 0xffffffff
je 0x4465e3
push edi
lea eax, [esp + 0x1ec]
push eax
lea ecx, [esp + 0x30]
call fcn.004249db
mov byte [esp + 0x3740], 0x10
call fcn.00424932
push eax
lea ecx, [esp + 0x24]
call fcn.00424830
mov byte [esp + 0x3740], 0xd
mov ecx, dword [esp + 0x1e8]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], esi
je 0x4465e3
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x70]
call fcn.00424830
push esi
lea ecx, [esp + 0x70]
lea eax, [edi + 1]
push ecx
call fcn.00424883
lea eax, [esp + 0x6c]
push eax
push ecx
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x2e8]
push eax
call fcn.00430a46
pop ecx
mov ecx, eax
call fcn.00424830
cmp dword [esp + 0x150], 0xffffffff
jne 0x4464d2
mov eax, dword [esp + 0x2f4]
mov eax, dword [eax]
lea edi, [esp + 0x2dc]
lea esi, [esp + 0x80]
call fcn.0042bccf
jmp 0x4466d1
lea esi, [esp + 0x80]
call fcn.00430cf5
push eax
lea ecx, [esp + 0x108]
call fcn.004247d7
mov byte [esp + 0x3740], 0x11
call fcn.00430cf5
add eax, 4
push eax
lea ecx, [esp + 0x20]
call fcn.004247d7
push str.Branding
lea eax, [esp + 0x108]
mov byte [esp + 0x3744], 0x12
call fcn.0042486f
test eax, eax
je 0x4473e8
lea edi, [esp + 0x104]
call fcn.0042b755
push dword [eax]
lea eax, [esp + 0x200]
push str.CAMEYO__s
push eax
call fcn.0046da40
mov esi, dword [esp + 0x28]
mov eax, dword [eax]
add esp, 0xc
push esi
push eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov ecx, dword [esp + 0x1fc]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [esi - 0x10]
call fcn.0042201a
mov byte [esp + 0x3740], 0xd
mov ecx, dword [esp + 0x104]
add ecx, 0xfffffff0
call fcn.0042201a
lea esi, [esp + 0x80]
call fcn.0042bce5
mov eax, dword [esp + 0x2f4]
lea edi, [esp + 0x2dc]
lea esi, [esp + 0xb0]
call fcn.0042bccf
mov edi, esi
lea esi, [esp + 0x80]
call fcn.0042e8bb
test al, al
je 0x446612
lea eax, [esp + 0x2dc]
push eax
mov byte [esp + 0x3744], 0xc
call fcn.004307c1
mov ecx, dword [esp + 0x140]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x6c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x28]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0xf04]
mov byte [esp + 0x3740], 4
call fcn.0042795c
jmp 0x446ef9
push str._SafeMode
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x4467ae
push str._SafeMode_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov edi, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
push 0x4efe18
push str.CAMEYO_LEGACYREG
call edi
push str.Disk
push str.CAMEYO_VIRTMODE
call edi
push 0x4efd5c
push str.CAMEYO_EARLYINJECTION
call edi
jmp 0x4472b4
push 0x4fcd84
call fcn.004bba40
pop ecx
push eax
push str._Services:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
jne 0x446822
push dword [edi]
lea ecx, [esp + 0x11c]
call fcn.004247ec
push 0x4fcd84
mov byte [esp + 0x3744], 0x13
call fcn.004bba40
pop ecx
push esi
lea ecx, [esp + 0x11c]
push ecx
call fcn.00424883
push dword [esp + 0x118]
push str.CAMEYO_SERVICES
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov byte [esp + 0x3740], 4
mov ecx, dword [esp + 0x118]
jmp 0x447285
push str._Register
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x4473fc
push str._Stop
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x4474ad
push str._Remove
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44e3d3
push str._RemoveSelf
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44e3d3
push str._Remove:Proc
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x4475d0
push str._Remove:Reg
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x4477b8
push str._LearnStreaming
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44e1f2
push 0x4fd33c
call fcn.004bba40
pop ecx
push eax
push str._LearnStreaming:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44e1f2
push str._UpdateBasicSettings
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x4468fe
mov dword [esp + 0x34], 1
jmp 0x4472b4
push str._Repackage
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x4479bf
push str._CreateDiff
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44e039
push 0x4fd560
call fcn.004bba40
pop ecx
push eax
push str._CreateDiff:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44e039
push str._exec
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x447b9b
push 0x4fd5a4
call fcn.004bba40
pop ecx
push eax
push str._Patch
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44daed
push 0x4fd5bc
call fcn.004bba40
pop ecx
push eax
push str._InstSandbox
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44daed
push str._ShowStreaming
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x447d60
push str._Break
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x447e42
push str._Unbreak
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x448565
push str._Integrate
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44d6b9
push str._Integrate:once
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44d6b9
push str._FullIntegrate
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44d6b9
push str._Unintegrate
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x448d90
push str._CreateShortcuts
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44d02d
push 0x4fe080
call fcn.004bba40
pop ecx
push eax
push str._CreateShortcuts:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44d02d
push str._Perf
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x448df8
push str._ExtractLog
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x4491fe
push str._ExtractAll
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44944a
push str._AutoUpdateXml
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44952b
push str._Info
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44967e
push str._Sandbox
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x449733
push 0x4fe350
call fcn.004bba40
pop ecx
push eax
push str._AddSandbox:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x449936
push 0x4fe3b8
call fcn.004bba40
pop ecx
push eax
push str._GetProperty:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x449c2e
push str._SaveProperties
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44ce5d
push str._SaveAllProperties
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44ce5d
push str._InfoLog
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x449e48
push str._Ini
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44cd34
push str._ShowIni
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44cd34
push str._ExtractIni
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44a04a
push str._csv
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44a1df
push str._EngineVer
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44a5b0
push str._ChangeLoader
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x446c17
mov eax, dword [esp + 0x24]
inc eax
cmp dword [esp + 0x50], eax
jg 0x44a6f1
push str._ChangeEngine
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x446c38
mov eax, dword [esp + 0x24]
inc eax
cmp dword [esp + 0x50], eax
jg 0x44aa1b
push str._ChangeIni
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x446c59
mov eax, dword [esp + 0x24]
inc eax
cmp dword [esp + 0x50], eax
jg 0x44adb3
push str._TestAutoUpdate
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x446c7c
mov eax, dword [esp + 0x24]
add eax, 5
cmp dword [esp + 0x50], eax
jg 0x44af6c
push str._Debug
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44b07b
push str._ForceMenu
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x446cb1
mov dword [esp + 0x78], 1
jmp 0x4472b4
push str._ShowTree
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44b0bc
push str._RegDump
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44b188
push str._SetFileFlags
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x446d00
mov eax, dword [esp + 0x24]
add eax, 2
cmp dword [esp + 0x50], eax
jg 0x44b303
push str._DbgZip:
call fcn.004bbaea
pop ecx
push eax
push str._DbgZip:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44b514
push str._DbgNow
call fcn.004bbaea
pop ecx
push eax
push str._DbgNow
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44b554
push str._Vintegrate
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44cbb5
push 0x4fee18
call fcn.004bba40
pop ecx
push eax
push str._Vintegrate:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44cbb5
push str._VintegrateRecursive
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44cbb5
push 0x4fee70
call fcn.004bba40
pop ecx
push eax
push str._VintegrateRecursive:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44cbb5
push str._Vunintegrate
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44b642
push str._Vmanager
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44b7ef
push 0x4fef30
call fcn.004bba40
pop ecx
push eax
push str._ProcessList
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44b89c
push 0x4ff0b8
call fcn.004bba40
pop ecx
push eax
push str._WaitFor
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44bc0d
push str._GfxSvr
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x446e84
call fcn.0042fef2
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x401
mov edi, 0x52cf50
call fcn.0048b180
mov dword [esp], 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x403
call fcn.0048b180
mov dword [esp], 0x493e0
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4472b4
push 0x4ff0e8
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x446f00
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.open
xor ebx, ebx
call fcn.004247ec
push esi
push ecx
mov dword [esp + 0x374c], 0x170
mov ecx, esp
mov dword [esp + 0x44], esp
push str._Troubleshoot
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x71
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d7
mov edi, esi
mov dword [esp + 0x3750], 4
call fcn.0046c4e0
add esp, 0x10
mov ebx, 0x4eda54
xor esi, esi
jmp 0x4472b4
push str._Troubleshoot
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44bcce
push str._AutoUpdate
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44bcf4
push str._VirtRegSyncExport
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44bd89
push str._StartStreaming
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44bdf1
push str._JumpTo
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44be0f
push str._SvcRegister
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44beae
push str._SvcStart
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44bfb7
push str._SvcRegisterStart
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44c072
push str._SvcStop
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44c1d3
push str._SvcRemove
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44c290
push 0x4ff4e8
call fcn.004bba40
pop ecx
push eax
push str._ScmDirectInit:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44c34e
push str._AuthCheck
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44caa5
push str._AuthCheck:Force
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44caa5
push str._RepoSync
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x44704c
mov eax, dword [esp + 0x24]
inc eax
cmp dword [esp + 0x50], eax
jg 0x44c3f6
push str._MergeRegistry
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44c4ce
push str._OpenFile
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x447083
mov eax, dword [esp + 0x24]
inc eax
cmp dword [esp + 0x50], eax
jg 0x44c5c6
push dword [edi]
lea ecx, [esp + 0xf0]
call fcn.004247ec
push esi
push ecx
mov dword [esp + 0x3748], 0x18c
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x4ec4c8
call fcn.004247ec
push ecx
mov esi, esp
mov byte [esp + 0x374c], 0x8d
mov dword [esp + 0x20], esp
push 0x5c
push ecx
lea eax, [esp + 0x100]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d7
push esi
call fcn.0046dd70
add esp, 0xc
mov byte [esp + 0x374c], 0x8c
call fcn.00471cc0
xor esi, esi
add esp, 0xc
cmp eax, esi
je 0x44712d
push 0x4f88ac
push ecx
lea eax, [esp + 0xf4]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x258]
push eax
call fcn.0046dad0
or dword [esp + 0x50], 4
pop ecx
pop ecx
call fcn.0042486f
mov byte [esp + 0x33], 1
test eax, eax
je 0x447132
mov byte [esp + 0x33], 0
test byte [esp + 0x44], 4
je 0x44714d
mov ecx, dword [esp + 0x250]
and dword [esp + 0x44], 0xfffffffb
add ecx, 0xfffffff0
call fcn.0042201a
cmp byte [esp + 0x33], 0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
jne 0x44c98e
mov eax, dword [esp + 0x30]
push dword [eax]
call fcn.004247ec
lea eax, [esp + 0x188]
push eax
call fcn.00473440
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x78]
mov byte [esp + 0x3744], 0x92
call fcn.00424830
mov byte [esp + 0x3740], 0x8c
mov ecx, dword [esp + 0x184]
add ecx, 0xfffffff0
call fcn.0042201a
call fcn.00445ffa
test eax, eax
je 0x447265
cmp dword [esp + 0x50], 1
jle 0x447265
cmp dword [esp + 0x50], 2
jne 0x447216
push 0x4f88ac
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [edi]
call fcn.004247ec
lea eax, [esp + 0x260]
push eax
call fcn.0046dad0
pop ecx
pop ecx
mov byte [esp + 0x3744], 0x93
or dword [esp + 0x48], 8
call fcn.0042486f
test eax, eax
jne 0x447216
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push dword [edi]
call fcn.004247ec
call fcn.004700f0
pop ecx
mov byte [esp + 0x33], 1
cmp eax, esi
jne 0x44721b
mov byte [esp + 0x33], 0
mov dword [esp + 0x3740], 0x18c
test byte [esp + 0x44], 8
je 0x447241
mov ecx, dword [esp + 0x258]
and dword [esp + 0x44], 0xfffffff7
add ecx, 0xfffffff0
call fcn.0042201a
cmp byte [esp + 0x33], 0
je 0x44724f
push str.PackageEditor.exe
jmp 0x44726a
call fcn.0040b6d8
test eax, eax
mov eax, str.Packager64.exe
jne 0x447262
mov eax, str.Packager.exe
push eax
jmp 0x44726a
push 0x4f6da4
lea ecx, [esp + 0x60]
call fcn.00424845
mov dword [esp + 0x3740], 4
mov ecx, dword [esp + 0xec]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x4472b4
push str._Password_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x4fcc08
call fcn.004bba40
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x4c]
push eax
call fcn.00424845
inc dword [esp + 0x24]
mov eax, dword [esp + 0x24]
cmp eax, dword [esp + 0x50]
jl 0x446273
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x1030]
push eax
call fcn.00484a40
push 0xffffffffffffffff
mov dword [esp + 0x3744], 0x194
push dword [esp + 0x44]
lea eax, [esp + 0x7c]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
push ecx
mov byte [esp + 0x3750], 0x95
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d7
push ecx
mov byte [esp + 0x3754], 0x96
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d7
mov byte [esp + 0x3754], 0x97
push dword [esp + 0x8c]
lea eax, [esp + 0x30]
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x1040]
push eax
mov byte [esp + 0x3760], 0x94
call fcn.00438170
add esp, 0x20
cmp eax, 2
jne 0x44e70b
call fcn.00445680
push esi
push dword [0x52cf5c]
push str.Application_is_now_integrated_into_your_system
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
lea eax, [esp + 0x1024]
call fcn.00485920
lea eax, [esp + 0x1024]
mov dword [esp + 0x3740], 4
call fcn.0042795c
jmp 0x44744b
call fcn.0046c8b0
test eax, eax
jne 0x4473e1
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Elevation_failed
call fcn.004247ec
call fcn.004456fd
push esi
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.License_required.
jmp 0x4473d7
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
mov esi, 0x52cf50
push esi
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x447432
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_obtain_INI_info_from_resource_
jmp 0x4473d7
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
mov ecx, esi
call fcn.00437254
pop ecx
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x74]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x5c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x60]
add ecx, 0xfffffff0
call fcn.0042201a
xor eax, eax
mov ecx, dword [esp + 0x3738]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3720]
xor ecx, esp
call fcn.004bb182
mov esp, ebp
pop ebp
ret
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
push 0x52cf50
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x4474e0
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x52cfa8
call fcn.004247d7
push ecx
mov byte [esp + 0x3748], 0x14
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x52cfb8
call fcn.004247d7
push ecx
mov byte [esp + 0x374c], 0x15
mov ecx, esp
mov dword [esp + 0x44], esp
push 0x52cfac
call fcn.004247d7
push ecx
mov byte [esp + 0x3750], 0x16
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x52cf5c
call fcn.004247d7
mov byte [esp + 0x3750], 4
call fcn.0044077d
add esp, 0x10
cmp eax, esi
je 0x447576
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52cf5c]
push str.Cannot_stop_application__s
push eax
call fcn.0046da40
add esp, 0xc
jmp 0x4473dc
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.__Stopped_successfully
call fcn.004247ec
call fcn.00444ee6
pop ecx
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x74]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x5c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x60]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, esi
jmp 0x447489
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
push 0x52cf50
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x447603
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
mov eax, dword [0x52cfac]
cmp dword [eax - 0xc], esi
jne 0x44762a
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52cf5c]
push str.Cannot_obtain_base_dir_for__s
jmp 0x447568
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
mov edi, 0x52cfac
push edi
call fcn.004247d7
call fcn.004700f0
pop ecx
cmp eax, esi
jne 0x447675
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52cf5c]
push str.Application_is_not_deployed_on_this_machine:__s
push eax
call fcn.0046da40
add esp, 0xc
call fcn.0044574c
pop ecx
pop ecx
push 5
jmp 0x4473e2
cmp dword [esp + 0x48], esi
je 0x447698
push 3
push dword [0x52cf5c]
push str.Do_you_want_to_stop_the_application_
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x44e49e
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x52cf5c]
push str.Removing_processes:__s
push eax
call fcn.0046da40
add esp, 0xc
call fcn.00444ee6
pop ecx
lea ecx, [esp + 0x144]
call fcn.00422487
push 0x4ebfa0
mov byte [esp + 0x3744], 0x1d
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push esi
push esi
push 1
lea eax, [esp + 0x150]
push eax
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x52cfa8
call fcn.004247d7
push ecx
mov byte [esp + 0x375c], 0x1e
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x52cfb8
call fcn.004247d7
push ecx
mov byte [esp + 0x3760], 0x1f
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x52cfb4
call fcn.004247d7
push ecx
mov byte [esp + 0x3764], 0x20
mov ecx, esp
mov dword [esp + 0x40], esp
push edi
call fcn.004247d7
push ecx
mov byte [esp + 0x3768], 0x21
mov ecx, esp
mov dword [esp + 0xa0], esp
push 0x52cf5c
call fcn.004247d7
mov byte [esp + 0x3768], 0x1d
call fcn.00440b82
add esp, 0x24
mov ecx, esp
mov dword [esp + 0x14], esp
push str.__Stopped_successfully
call fcn.004247ec
call fcn.00444ee6
pop ecx
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52cf5c]
push str.Application__s_stopped_successfully
push eax
call fcn.0046da40
add esp, 0xc
call fcn.0044574c
pop ecx
pop ecx
mov ecx, dword [esp + 0x144]
jmp 0x44e6fe
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
push 0x52cf50
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x4477eb
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
mov eax, dword [0x52cfac]
cmp dword [eax - 0xc], esi
jne 0x447807
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
jmp 0x44761a
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
mov edi, 0x52cfac
push edi
call fcn.004247d7
call fcn.004700f0
pop ecx
cmp eax, esi
jne 0x447835
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
jmp 0x447653
cmp dword [esp + 0x48], esi
je 0x447858
push 3
push dword [0x52cf5c]
push str.Do_you_want_to_remove_the_applications_registry_
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x44e49e
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x52cf5c]
push str.Removing_registry:__s
push eax
call fcn.0046da40
add esp, 0xc
call fcn.00444ee6
pop ecx
lea ecx, [esp + 0x14c]
call fcn.00422487
push 0x4ebfa0
mov byte [esp + 0x3744], 0x22
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push esi
push 1
push esi
lea eax, [esp + 0x158]
push eax
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x52cfa8
call fcn.004247d7
push ecx
mov byte [esp + 0x375c], 0x23
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x52cfb8
call fcn.004247d7
push ecx
mov byte [esp + 0x3760], 0x24
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x52cfb4
call fcn.004247d7
push ecx
mov byte [esp + 0x3764], 0x25
mov ecx, esp
mov dword [esp + 0x40], esp
push edi
call fcn.004247d7
push ecx
mov byte [esp + 0x3768], 0x26
mov ecx, esp
mov dword [esp + 0xa0], esp
push 0x52cf5c
call fcn.004247d7
mov byte [esp + 0x3768], 0x22
call fcn.00440b82
add esp, 0x24
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x52cf5c]
push str.SoftwareVOS_s
push eax
call fcn.0046da40
add esp, 0xc
mov edx, SysReAllocStringLen
call fcn.0046eb20
pop ecx
cmp eax, esi
je 0x447974
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52cf5c]
push str.Registry_could_not_be_emptied_for__s
jmp 0x447568
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.__Registry_removed_successfully
call fcn.004247ec
call fcn.00444ee6
pop ecx
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52cf5c]
push str.Application__ss_registry_removed_successfully
push eax
call fcn.0046da40
add esp, 0xc
call fcn.0044574c
pop ecx
pop ecx
mov ecx, dword [esp + 0x14c]
jmp 0x44e6fe
lea ecx, [esp + 0x20]
call fcn.00422487
lea ecx, [esp + 0x40]
call fcn.00422487
mov byte [esp + 0x3740], 0x2f
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x50], ecx
jle 0x4479f9
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x24]
call fcn.00424845
jmp 0x447a07
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x24]
call fcn.00424830
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..new.exe
call fcn.004247ec
push ecx
mov byte [esp + 0x3748], 0x30
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x194]
push eax
mov byte [esp + 0x374c], 0x2f
call fcn.0046dc00
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x3744], 0x31
call fcn.00424830
mov byte [esp + 0x3740], 0x2f
mov ecx, dword [esp + 0x18c]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
call fcn.00470b40
mov edi, dword [esp + 0x44]
mov ebx, dword [esp + 0x24]
pop ecx
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x40]
jne 0x447aba
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d7
jmp 0x4473dc
push dword [esp + 0x34]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d7
call fcn.0043fc47
pop ecx
pop ecx
mov dword [esp + 0x34], eax
cmp eax, esi
jne 0x447b47
push dword [0x5294a0]
lea eax, [esp + 0x44]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x26c]
push eax
call fcn.0046dd70
add esp, 8
mov byte [esp + 0x3748], 0x32
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Successfully_repackaged_into:__s
push ecx
call fcn.0046da40
add esp, 0xc
call fcn.0044574c
pop ecx
pop ecx
mov ecx, dword [esp + 0x260]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [edi - 0x10]
call fcn.0042201a
lea ecx, [ebx - 0x10]
jmp 0x44e701
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esp + 0x34], 0x10
push dword [0x5294a0]
jne 0x447b6c
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Application_not_deployed_on_this_machine._Nothing_to_repackage.
jmp 0x4473d7
push dword [esp + 0x38]
lea eax, [esp + 0x304]
push eax
call fcn.004749f0
add esp, 4
mov byte [esp + 0x3748], 0x33
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Could_not_repackage:__s
push ecx
jmp 0x447569
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x24]
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push dword [eax + edx*4]
call fcn.004247ec
lea eax, [esp + 0x198]
push eax
call fcn.00473440
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x78]
mov byte [esp + 0x3744], 0x3a
call fcn.00424830
push eax
lea ecx, [esp + 0x60]
call fcn.00424830
push eax
lea ecx, [esp + 0xf8]
call fcn.004247d7
mov byte [esp + 0x3740], 0x3c
mov ecx, dword [esp + 0x194]
add ecx, 0xfffffff0
call fcn.0042201a
push 1
lea eax, [esp + 0x26c]
push eax
lea ecx, [esp + 0xfc]
call fcn.004249db
push 0x4f76dc
push eax
call fcn.00424ae5
pop ecx
pop ecx
mov ecx, dword [esp + 0x268]
add ecx, 0xfffffff0
mov byte [esp + 0x33], al
call fcn.0042201a
cmp byte [esp + 0x33], 0
lea ecx, [esp + 0x5c]
je 0x447c48
push 1
push 0x22
jmp 0x447c4b
push esi
push 0x20
call fcn.00426e76
mov edi, eax
cmp edi, 0xffffffff
je 0x447cbf
push edi
lea eax, [esp + 0x1a0]
push eax
lea ecx, [esp + 0x64]
call fcn.004249db
push 0x4f75c8
mov byte [esp + 0x3744], 0x3d
call fcn.0043d90d
push eax
lea ecx, [esp + 0x60]
call fcn.00424830
mov byte [esp + 0x3740], 0x3c
mov ecx, dword [esp + 0x19c]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
lea ecx, [esp + 0x78]
lea eax, [edi + 1]
push ecx
call fcn.00424883
lea eax, [esp + 0x74]
call fcn.00424932
push eax
lea ecx, [esp + 0x78]
call fcn.00424830
jmp 0x447ce4
push 0x4f75c8
lea eax, [esp + 0xf8]
call fcn.0043d90d
push eax
lea ecx, [esp + 0x60]
call fcn.00424830
push ebx
lea ecx, [esp + 0x78]
call fcn.00424845
xor ecx, ecx
lea eax, [esp + 0x5c]
call fcn.0042b79e
movzx eax, ax
cmp ax, 0x25
jne 0x447d03
lea eax, [esp + 0x5c]
push eax
call fcn.0047d7b0
pop ecx
push ecx
lea eax, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x274]
push eax
call fcn.0047e540
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x60]
mov byte [esp + 0x3744], 0x3e
call fcn.00424830
mov ecx, dword [esp + 0x270]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3740], 4
mov ecx, dword [esp + 0xf4]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x4472c6
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.ShowStreaming:
call fcn.004247ec
call fcn.00444ee6
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x8e0]
push eax
call fcn.00484a40
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x374c], 0x4c
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x4d
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3754], 0x4e
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d7
push 2
push ecx
mov byte [esp + 0x375c], 0x4f
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x8f0]
push eax
mov byte [esp + 0x3760], 0x4c
call fcn.00438170
add esp, 0x20
lea ecx, [esp + 0x8d4]
call fcn.00436d67
lea eax, [esp + 0x8d4]
call fcn.00485920
mov byte [esp + 0x3740], 4
lea eax, [esp + 0x8d4]
call fcn.0042795c
jmp 0x44758d
lea ecx, [esp + 0x20]
call fcn.00422487
mov byte [esp + 0x3740], 0x50
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x50], ecx
jle 0x447e73
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x24]
call fcn.00424845
jmp 0x447e81
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x24]
call fcn.00424830
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..break
call fcn.004247ec
push ecx
mov byte [esp + 0x3748], 0x51
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x60]
push eax
mov byte [esp + 0x374c], 0x50
call fcn.0046dc00
add esp, 0xc
push 1
push esi
push ecx
mov byte [esp + 0x374c], 0x52
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x418]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0x53
push dword [0x5294a0]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x418]
push eax
call fcn.004457c6
add esp, 0x10
cmp dword [esp + 0x494], esi
jne 0x447f3a
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_load_containers_
jmp 0x4473d7
push ecx
lea eax, [esp + 0x5c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
call fcn.0046f7d0
pop ecx
push dword [esp + 0x58]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x447f7b
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x60]
push str.Cant_empty__s
jmp 0x447568
mov esi, dword [esp + 0x58]
call fcn.004701d0
test eax, eax
jne 0x447fa3
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x60]
push str.Cant_create__s
jmp 0x447568
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov ebx, 0x4ebfa0
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x374c], 0x54
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtApp.ini
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x55
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d7
mov byte [esp + 0x3750], 0x53
call fcn.0046d300
add esp, 8
mov byte [esp + 0x3748], 0x56
mov ecx, esp
mov dword [esp + 0x1c], esp
mov esi, str.Main
push esi
call fcn.004247ec
push 3
pop ecx
lea edi, [esp + 0x414]
mov byte [esp + 0x3748], 0x53
call fcn.00486e30
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x374c], 0x57
mov ecx, esp
mov dword [esp + 0x44], esp
push str.AppVirtDll.dll
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x58
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d7
mov byte [esp + 0x3750], 0x53
call fcn.0046d300
add esp, 8
mov byte [esp + 0x3748], 0x59
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247ec
push 2
pop ecx
lea edi, [esp + 0x414]
mov byte [esp + 0x3748], 0x53
call fcn.00486e30
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x374c], 0x5a
mov ecx, esp
mov dword [esp + 0x44], esp
push str.AppVirtDll64.dll
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x5b
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d7
mov byte [esp + 0x3750], 0x53
call fcn.0046d300
add esp, 8
mov byte [esp + 0x3748], 0x5c
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247ec
push 8
pop ecx
lea edi, [esp + 0x414]
mov byte [esp + 0x3748], 0x53
call fcn.00486e30
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x374c], 0x5d
mov ecx, esp
mov dword [esp + 0x44], esp
push str.StubExe.exe
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x5e
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d7
mov byte [esp + 0x3750], 0x53
call fcn.0046d300
add esp, 8
mov byte [esp + 0x3748], 0x5f
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247ec
push 9
pop ecx
lea edi, [esp + 0x414]
mov byte [esp + 0x3748], 0x53
call fcn.00486e30
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x374c], 0x60
mov ecx, esp
mov dword [esp + 0x44], esp
push str.StubExe64.exe
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x61
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d7
mov byte [esp + 0x3750], 0x53
call fcn.0046d300
add esp, 8
mov byte [esp + 0x3748], 0x62
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247ec
push 0xa
pop ecx
lea edi, [esp + 0x414]
mov byte [esp + 0x3748], 0x53
call fcn.00486e30
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x374c], 0x63
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtFiles.db
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x64
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d7
mov byte [esp + 0x3750], 0x53
call fcn.0046d300
add esp, 8
mov byte [esp + 0x3748], 0x65
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247ec
push 4
pop ecx
lea edi, [esp + 0x414]
mov byte [esp + 0x3748], 0x53
call fcn.00486e30
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x374c], 0x66
mov ecx, esp
mov dword [esp + 0x44], esp
push str.SandboxCfg.db
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x67
mov ecx, esp
lea eax, [esp + 0x68]
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d7
mov byte [esp + 0x3750], 0x53
call fcn.0046d300
add esp, 8
mov byte [esp + 0x3748], 0x68
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247ec
push 5
pop ecx
lea edi, [esp + 0x414]
mov byte [esp + 0x3748], 0x53
call fcn.00486e30
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x374c], 0x69
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtReg.export
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x6a
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d7
mov byte [esp + 0x3750], 0x53
call fcn.0046d300
add esp, 8
mov byte [esp + 0x3748], 0x6b
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247ec
push 6
pop ecx
lea edi, [esp + 0x414]
mov byte [esp + 0x3748], 0x53
call fcn.00486e30
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x374c], 0x6c
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtReg.dat
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x6d
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d7
mov byte [esp + 0x3750], 0x53
call fcn.0046d300
add esp, 8
mov byte [esp + 0x3748], 0x6e
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247ec
push 0xb
pop ecx
lea edi, [esp + 0x414]
mov byte [esp + 0x3748], 0x53
call fcn.00486e30
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x374c], 0x6f
mov ecx, esp
mov dword [esp + 0x44], esp
push str.SysDllSubdirs.txt
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x70
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d7
mov byte [esp + 0x3750], 0x53
call fcn.0046d300
add esp, 8
mov byte [esp + 0x3748], 0x71
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247ec
push 7
pop ecx
lea edi, [esp + 0x414]
mov byte [esp + 0x3748], 0x53
call fcn.00486e30
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x374c], 0x72
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtFiles.vfc
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x73
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d7
mov byte [esp + 0x3750], 0x53
call fcn.0046d300
add esp, 8
mov byte [esp + 0x3748], 0x74
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247ec
mov byte [esp + 0x3748], 0x53
xor ecx, ecx
inc ecx
lea edi, [esp + 0x414]
call fcn.00486e30
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x60]
push 0x4fda94
push eax
call fcn.0046da40
add esp, 0xc
call fcn.0044574c
pop ecx
pop ecx
push 0
jmp 0x4473e2
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.Unbreak:
call fcn.004247ec
call fcn.00444ee6
mov ecx, esp
mov dword [esp + 0x14], esp
push str..break
call fcn.004247ec
push ecx
mov byte [esp + 0x3748], 0x75
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x78]
push eax
mov byte [esp + 0x374c], 4
call fcn.0046dc00
add esp, 0xc
mov byte [esp + 0x3740], 0x76
push dword [esp + 0x70]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x4485eb
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x78]
push str.Dir_doesnt_exist:__s
jmp 0x447568
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x44]
call fcn.004247d7
mov edi, str..old
push edi
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x1ac]
push eax
mov byte [esp + 0x374c], 0x77
call fcn.00424a3b
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x1a4]
add ecx, 0xfffffff0
call fcn.0042201a
push edi
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x280]
push eax
call fcn.00424a3b
add esp, 0xc
push dword [eax]
push dword [esp + 0x44]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov ecx, dword [esp + 0x278]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.0042201a
test bl, bl
je 0x448687
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_rename_myself_to_.old
jmp 0x4473d7
push edi
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x1b4]
push eax
call fcn.00424a3b
mov eax, dword [eax]
add esp, 0xc
push esi
push dword [esp + 0x44]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [esp + 0x1ac]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.0042201a
test bl, bl
je 0x4486dd
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_copy_myself
jmp 0x4473d7
push 1
push ecx
mov dword [esp + 0x18], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov dword [esp + 0x108], esi
push 0x4ebfa0
lea ebx, [esp + 0x10c]
lea esi, [esp + 0x164]
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x78
mov ecx, esp
mov dword [esp + 0x24], esp
push str.VirtApp.ini
call fcn.004247ec
push ecx
mov byte [esp + 0x3754], 0x79
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d7
mov byte [esp + 0x3754], 0x77
call fcn.0046d300
add esp, 0xc
mov edi, esi
call fcn.0046e1d0
pop ecx
pop ecx
cmp eax, 0xffffffff
je 0x448d79
xor edi, edi
cmp dword [esp + 0xfc], edi
je 0x448d79
push dword [esp + 0xfc]
mov ecx, dword [esp + 0x158]
lea eax, [esp + 0x38]
push eax
call fcn.0046df30
mov byte [esp + 0x3748], 0x7a
push dword [esp + 0x15c]
call fcn.004bc235
add esp, 0xc
push 1
push 1
push ecx
lea eax, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x388]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0x7b
push dword [0x5294a0]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x388]
push eax
call fcn.004457c6
add esp, 0x10
cmp dword [esp + 0x404], edi
jne 0x448814
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_begin_to_update_resource
jmp 0x4473d7
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
mov esi, str.Main
push esi
call fcn.004247ec
mov byte [esp + 0x3744], 0x7c
mov eax, dword [esp + 0x38]
mov eax, dword [eax - 0xc]
add eax, eax
push edi
push eax
lea ecx, [esp + 0x40]
call fcn.00424f59
push eax
lea eax, [esp + 0x38c]
push eax
mov byte [esp + 0x3754], 0x7b
call fcn.004862f0
cmp eax, edi
je 0x448873
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_update_INI_resource
jmp 0x4473d7
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247ec
push 0
push 2
push ecx
mov byte [esp + 0x3750], 0x7d
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
mov ebx, 0x4ebfa0
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3758], 0x7e
mov ecx, esp
mov dword [esp + 0x50], esp
push str.AppVirtDll.dll
call fcn.004247ec
push ecx
mov byte [esp + 0x375c], 0x7f
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
mov byte [esp + 0x375c], 0x7d
call fcn.0046d300
add esp, 0xc
lea eax, [esp + 0x38c]
push eax
mov byte [esp + 0x3754], 0x7b
call fcn.00486650
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247ec
push 0
push 8
push ecx
mov byte [esp + 0x3750], 0x80
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3758], 0x81
mov ecx, esp
mov dword [esp + 0x50], esp
push str.AppVirtDll64.dll
call fcn.004247ec
push ecx
mov byte [esp + 0x375c], 0x82
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
mov byte [esp + 0x375c], 0x80
call fcn.0046d300
add esp, 0xc
lea eax, [esp + 0x38c]
push eax
mov byte [esp + 0x3754], 0x7b
call fcn.00486650
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247ec
push 0
push 9
push ecx
mov byte [esp + 0x3750], 0x83
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3758], 0x84
mov ecx, esp
mov dword [esp + 0x50], esp
push str.StubExe.exe
call fcn.004247ec
push ecx
mov byte [esp + 0x375c], 0x85
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
mov byte [esp + 0x375c], 0x83
call fcn.0046d300
add esp, 0xc
lea eax, [esp + 0x38c]
push eax
mov byte [esp + 0x3754], 0x7b
call fcn.00486650
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247ec
push 0
push 0xa
push ecx
mov byte [esp + 0x3750], 0x86
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3758], 0x87
mov ecx, esp
mov dword [esp + 0x50], esp
push str.StubExe64.exe
call fcn.004247ec
push ecx
mov byte [esp + 0x375c], 0x88
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
mov byte [esp + 0x375c], 0x86
call fcn.0046d300
add esp, 0xc
lea eax, [esp + 0x38c]
push eax
mov byte [esp + 0x3754], 0x7b
call fcn.00486650
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247ec
push 0x4000
push 4
push ecx
mov byte [esp + 0x3750], 0x89
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3758], 0x8a
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtFiles.db
call fcn.004247ec
push ecx
mov byte [esp + 0x375c], 0x8b
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
mov byte [esp + 0x375c], 0x89
call fcn.0046d300
add esp, 0xc
lea eax, [esp + 0x38c]
push eax
mov byte [esp + 0x3754], 0x7b
call fcn.00486650
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247ec
push 0x4000
push 5
push ecx
mov byte [esp + 0x3750], 0x8c
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3758], 0x8d
mov ecx, esp
mov dword [esp + 0x50], esp
push str.SandboxCfg.db
call fcn.004247ec
push ecx
mov byte [esp + 0x375c], 0x8e
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
mov byte [esp + 0x375c], 0x8c
call fcn.0046d300
add esp, 0xc
lea eax, [esp + 0x38c]
push eax
mov byte [esp + 0x3754], 0x7b
call fcn.00486650
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247ec
mov byte [esp + 0x3744], 0x8f
push 0x4000
push 0xb
push ecx
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3758], 0x90
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtReg.dat
call fcn.004247ec
push ecx
mov byte [esp + 0x375c], 0x91
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
mov byte [esp + 0x375c], 0x8f
call fcn.0046d300
add esp, 0xc
lea eax, [esp + 0x38c]
push eax
mov byte [esp + 0x3754], 0x7b
call fcn.00486650
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247ec
push 0
push 7
push ecx
mov byte [esp + 0x3750], 0x92
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3758], 0x93
mov ecx, esp
mov dword [esp + 0x50], esp
push str.SysDllSubdirs.txt
call fcn.004247ec
push ecx
mov byte [esp + 0x375c], 0x94
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
mov byte [esp + 0x375c], 0x92
call fcn.0046d300
add esp, 0xc
lea eax, [esp + 0x38c]
push eax
mov byte [esp + 0x3754], 0x7b
call fcn.00486650
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247ec
push 0x4000
push 1
push ecx
mov byte [esp + 0x3750], 0x95
mov edi, esp
mov dword [esp + 0x24], esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3758], 0x96
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtFiles.vfc
call fcn.004247ec
push ecx
mov byte [esp + 0x375c], 0x97
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
mov byte [esp + 0x375c], 0x95
call fcn.0046d300
add esp, 0xc
lea eax, [esp + 0x38c]
push eax
mov byte [esp + 0x3754], 0x7b
call fcn.00486650
lea eax, [esp + 0x37c]
call fcn.00485920
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
test eax, eax
je 0x448d6a
push str.Could_not_commit_resource
jmp 0x4473d7
push str.Success
call fcn.004247ec
jmp 0x448557
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_load_VirtApp.ini
jmp 0x4473d7
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
mov edi, 0x52cf50
push edi
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x448dc4
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
push edi
call fcn.0043c200
pop ecx
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52cf5c]
push str._s_is_no_longer_integrated.
push eax
call fcn.0046da40
add esp, 0xc
call fcn.0044574c
pop ecx
pop ecx
jmp 0x4473e1
lea ecx, [esp + 0x20]
call fcn.00422487
lea ecx, [esp + 0x34]
call fcn.00422487
mov byte [esp + 0x3740], 0xc3
mov edi, dword [esp + 0x24]
or dword [esp + 0x28], 0xffffffff
lea eax, [edi + 1]
cmp dword [esp + 0x50], eax
jle 0x448e35
mov eax, dword [esp + 0x2c]
push dword [eax + edi*4 + 4]
lea ecx, [esp + 0x24]
call fcn.00424845
lea eax, [edi + 2]
cmp dword [esp + 0x50], eax
jle 0x448e4e
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4]
lea ecx, [esp + 0x38]
call fcn.00424845
lea ecx, [esp + 0x280]
call fcn.00422487
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x3744], 0xc4
call fcn.004247d7
push ecx
mov byte [esp + 0x3744], 0xc5
lea eax, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
push 0x52cf50
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x448eab
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
push 1
push esi
push ecx
lea eax, [esp + 0x54]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xe80]
push eax
call fcn.00484a40
lea edi, [esp + 0xe74]
mov byte [esp + 0x3740], 0xc6
call fcn.0042a2b9
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x34]
cmp dword [eax - 0xc], esi
je 0x448f08
push esi
push 0x80
push 4
push esi
push 3
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [esp + 0x28], eax
push 1
push 1
push 1
lea eax, [esp + 0x28c]
push eax
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x52cfa8
call fcn.004247d7
push ecx
mov byte [esp + 0x375c], 0xc7
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x52cfb8
call fcn.004247d7
push ecx
mov byte [esp + 0x3760], 0xc8
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x52cfb4
call fcn.004247d7
push ecx
mov byte [esp + 0x3764], 0xc9
mov ecx, esp
mov dword [esp + 0x9c], esp
push 0x52cfac
call fcn.004247d7
push ecx
mov byte [esp + 0x3768], 0xca
mov ecx, esp
mov dword [esp + 0x8c], esp
push 0x52cf5c
call fcn.004247d7
mov byte [esp + 0x3768], 0xc6
call fcn.00440b82
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0x28
call edi
push esi
push 2
mov dword [esp + 0x74], eax
push 0x52cf50
lea eax, [esp + 0xe80]
push eax
push dword [esp + 0x2c]
call fcn.0043480c
add esp, 0x14
cmp eax, esi
je 0x448fea
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Failed_BasicDeploy_
jmp 0x4473d7
call edi
sub eax, dword [esp + 0x6c]
mov dword [esp + 0x6c], eax
call edi
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], esi
je 0x4490a5
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0xcb
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x4f6da4
call fcn.004247ec
push ecx
mov byte [esp + 0x3754], 0xcc
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247ec
push 2
push ecx
mov byte [esp + 0x375c], 0xcd
lea eax, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x94], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xe90]
push eax
mov byte [esp + 0x3760], 0xc6
call fcn.00438170
add esp, 0x20
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d7
call fcn.004740f0
pop ecx
pop ecx
cmp eax, esi
jne 0x4490a5
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x44907b
call edi
push ecx
mov edi, eax
sub edi, dword [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x52cfa8
call fcn.004247d7
push ecx
mov byte [esp + 0x3748], 0xce
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x52cfb8
call fcn.004247d7
push ecx
mov byte [esp + 0x374c], 0xcf
mov ecx, esp
mov dword [esp + 0x44], esp
push 0x52cfac
call fcn.004247d7
push ecx
mov byte [esp + 0x3750], 0xd0
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x52cf5c
call fcn.004247d7
mov byte [esp + 0x3750], 0xc6
call fcn.0044077d
add esp, 0x10
lea ecx, [esp + 0x54]
call fcn.00422487
lea ecx, [esp + 0x1b4]
mov eax, 0x100
push ecx
mov byte [esp + 0x3744], 0xd1
push eax
lea ecx, [esp + 0x5c]
mov dword [esp + 0x1bc], eax
call fcn.004224c3
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push 0xffffffffffffffff
lea ecx, [esp + 0x58]
call fcn.00424afa
push edi
push dword [esp + 0x70]
lea eax, [esp + 0x164]
push dword [esp + 0x5c]
push dword [0x52cf5c]
push str._s__s__d_d_r_n
push eax
call fcn.0046da40
add esp, 0x18
mov byte [esp + 0x3740], 0xd2
push dword [esp + 0x15c]
lea ecx, [esp + 0x28c]
call fcn.00426182
mov byte [esp + 0x3740], 0xd3
mov edi, dword [esp + 0x28]
cmp edi, 0xffffffff
je 0x4491df
push 2
push esi
push esi
push edi
mov dword [esp + 0x1cc], esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [esp + 0x288]
mov ecx, dword [eax - 0xc]
push esi
lea edx, [esp + 0x1c0]
push edx
push ecx
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [0x5294a0]
lea eax, [esp + 0x160]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d7
jmp 0x448dec
push ecx
mov dword [esp + 0x14], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..Packager.log
call fcn.004247ec
push ecx
mov byte [esp + 0x374c], 0xd4
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d7
push edi
mov byte [esp + 0x3750], 4
call fcn.0046dc00
lea eax, [esp + 0xd0]
add esp, 0xc
push eax
call fcn.0046d010
add esp, 4
mov byte [esp + 0x3744], 0xd5
lea eax, [esp + 0xc4]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
call fcn.00470b40
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov dword [esp + 0x44], esi
call fcn.004247d7
lea eax, [esp + 0x970]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0xd6
push dword [0x5294a0]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x970]
push eax
call fcn.004457c6
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0xd7
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3754], 0xd8
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d7
push 2
push ecx
mov byte [esp + 0x375c], 0xd9
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x980]
push eax
mov byte [esp + 0x3760], 0xd6
call fcn.00438170
add esp, 0x20
lea edi, [esp + 0x964]
call fcn.0042a2b9
mov ebx, eax
cmp ebx, esi
je 0x4493ee
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0046cb70
mov byte [esp + 0x3748], 0xda
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.LogsPackager.log
call fcn.004247ec
push ebx
mov byte [esp + 0x374c], 0xd6
call fcn.00427e4b
add esp, 0xc
cmp eax, esi
jne 0x44939f
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_extract_Packager.log_
jmp 0x4473d7
push dword [esp + 0xc0]
mov dword [esp + 0x38], 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Packager.log
call fcn.004247ec
lea eax, [esp + 0x298]
push eax
call fcn.0046d010
pop ecx
pop ecx
push dword [eax]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov ecx, dword [esp + 0x290]
add ecx, 0xfffffff0
call fcn.0042201a
call fcn.00483dd0
xor esi, esi
jmp 0x449410
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
push str.Loader__ExtractLog_:_OpenVfc_failed__LE_d
push ecx
call fcn.0046da40
add esp, 0xc
call fcn.00444eb6
pop ecx
lea eax, [esp + 0x964]
call fcn.00485920
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xc8]
cmp dword [esp + 0x40], esi
je 0x449440
push str.Success:__s
jmp 0x448de3
push str.Failed_saving__s
jmp 0x448de3
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
mov ebx, 0x52cf50
push ebx
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x44947e
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x850]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0xdb
push dword [0x5294a0]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x850]
push eax
call fcn.004457c6
lea edi, [esp + 0x854]
call fcn.0042a2b9
push 1
push 2
push ebx
mov ecx, edi
push ecx
push eax
call fcn.0043480c
mov edi, eax
add esp, 0x24
lea eax, [esp + 0x844]
call fcn.00485920
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
cmp edi, esi
jne 0x449519
push dword [0x52cfac]
push str.Success:_n_s
jmp 0x448de3
push str.Failed_extracting.
push eax
call fcn.0046da40
pop ecx
pop ecx
jmp 0x448dec
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
mov esi, 0x52cf50
push esi
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x44955f
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
lea eax, [esp + 0x1c4]
push eax
call fcn.0049aa20
pop ecx
mov byte [esp + 0x3740], 0xdc
push dword [eax]
lea ecx, [esp + 0x29c]
call fcn.00426182
mov byte [esp + 0x3740], 0xde
mov ecx, dword [esp + 0x1c4]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x298]
mov edi, dword [eax - 0xc]
push eax
push ecx
mov dword [esp + 0x18], esp
mov ebx, esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov esi, str..xml
push esi
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0xdf
mov eax, esp
mov dword [esp + 0x24], esp
push eax
call fcn.0046ca80
pop ecx
push ebx
mov byte [esp + 0x3754], 0xde
call fcn.0046dc00
add esp, 0xc
call fcn.0046e410
pop ecx
pop ecx
push dword [0x5294a0]
push ecx
mov dword [esp + 0x18], esp
test eax, eax
je 0x44966a
mov ecx, esp
push esi
call fcn.004247ec
push ecx
mov byte [esp + 0x374c], 0xe0
mov eax, esp
mov dword [esp + 0x20], esp
push eax
call fcn.0046ca80
pop ecx
lea eax, [esp + 0x1d8]
push eax
mov byte [esp + 0x3750], 0xde
call fcn.0046dc00
add esp, 8
mov byte [esp + 0x3748], 0xe1
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Success:_n_s
push ecx
call fcn.0046da40
add esp, 0xc
call fcn.0044574c
pop ecx
pop ecx
mov ecx, dword [esp + 0x1cc]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x44855e
mov eax, esp
push str.Failed_extracting.
push eax
call fcn.0046da40
pop ecx
pop ecx
jmp 0x448557
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x38]
call fcn.004247d7
mov byte [esp + 0x3740], 0xe2
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x50], ecx
jle 0x4496b2
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x38]
call fcn.00424845
push 1
push esi
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x1300]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0xe3
push dword [0x5294a0]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x1300]
push eax
call fcn.004457c6
push esi
lea eax, [esp + 0x1308]
push eax
lea eax, [esp + 0x2b8]
push eax
call fcn.0044585f
add esp, 0x1c
push esi
push str.Info
push dword [esp + 0x2a8]
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x4473e1
push str._Sandbox_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
push 0x52cf50
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x449771
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x38]
call fcn.004247d7
mov byte [esp + 0x3740], 0xe4
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x50], ecx
jle 0x4497a5
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x38]
call fcn.00424845
push 1
push esi
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xd60]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0xe5
push dword [0x5294a0]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xd60]
push eax
call fcn.004457c6
add esp, 0x10
cmp dword [esp + 0xddc], esi
jne 0x449817
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.FAILED_LOADING_CONTAINERS_
jmp 0x4473d7
lea eax, [esp + 0xd54]
push eax
lea eax, [esp + 0x1d8]
push eax
call fcn.00445be6
pop ecx
pop ecx
mov byte [esp + 0x3740], 0xe6
mov ecx, dword [esp + 0x1d4]
mov eax, dword [ecx - 0xc]
cmp eax, 0x800
jge 0x449853
push esi
push str.Sandbox
push ecx
jmp 0x449727
push ecx
push ecx
mov dword [esp + 0x18], esp
mov edi, esp
push ecx
add eax, eax
mov ecx, esp
mov dword [esp + 0x1c], esp
mov ebx, str..sandbox.txt
push ebx
mov dword [esp + 0x2c], eax
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0xe7
mov eax, esp
mov dword [esp + 0x24], esp
push eax
call fcn.0046ca80
pop ecx
push edi
mov byte [esp + 0x3754], 0xe6
call fcn.0046dc00
mov edi, dword [esp + 0x30]
add esp, 0xc
call fcn.0046e410
add esp, 4
mov ecx, esp
mov dword [esp + 0x14], esp
push str.open
call fcn.004247ec
push 1
push ecx
mov byte [esp + 0x374c], 0xe8
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
xor edi, edi
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0xe9
mov eax, esp
mov dword [esp + 0x48], esp
push ecx
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
mov dword [esp + 0x34], eax
call fcn.004247ec
push ecx
mov byte [esp + 0x3758], 0xea
mov eax, esp
mov dword [esp + 0x90], esp
push eax
call fcn.0046ca80
mov eax, dword [esp + 0x38]
pop ecx
push eax
mov byte [esp + 0x375c], 0xe9
call fcn.0046dc00
add esp, 0xc
mov ebx, esi
mov byte [esp + 0x3750], 0xe6
call fcn.0046c4e0
add esp, 0x10
xor esi, esi
jmp 0x4473e1
push str._AddSandbox_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x4fe350
call fcn.004bba40
mov edx, dword [esp + 0x28]
pop ecx
mov ecx, dword [esp + 0x2c]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x2ac]
call fcn.004247ec
push 1
push esi
push ecx
mov byte [esp + 0x374c], 0xeb
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xa90]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0xec
push dword [0x5294a0]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xa90]
push eax
call fcn.004457c6
add esp, 0x10
cmp dword [esp + 0xb0c], esi
jne 0x4499dc
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44980d
lea eax, [esp + 0x35c]
push eax
call fcn.00426eaa
push ebx
lea ecx, [esp + 0x168]
mov byte [esp + 0x3744], 0xed
call fcn.004247ec
lea eax, [esp + 0x164]
push eax
lea eax, [esp + 0x360]
push eax
push ecx
mov byte [esp + 0x374c], 0xee
lea eax, [esp + 0x2b4]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
call fcn.00481440
add esp, 0xc
cmp eax, esi
jne 0x449a4f
push dword [0x5294a0]
lea eax, [esp + 0x168]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x447aaf
push 0xffffffffffffffff
xor esi, esi
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0xef
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3754], 0xf0
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247ec
push 2
push ecx
mov byte [esp + 0x375c], 0xf1
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xaa0]
push eax
mov byte [esp + 0x3760], 0xee
call fcn.00438170
add esp, 0x20
push 6
pop ecx
push dword [0x52cfd0]
xor eax, eax
mov dword [esp + 0x344], esi
lea edi, [esp + 0x348]
rep stosd dword es:[edi], eax
push ecx
mov dword [esp + 0x18], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.SandboxCfg.db
call fcn.004247ec
push edi
mov ecx, esi
call fcn.0047ec10
pop ecx
pop ecx
lea ecx, [esp + 0x348]
call fcn.00478d20
pop ecx
pop ecx
lea esi, [esp + 0x80]
lea edi, [esp + 0x35c]
call fcn.0044ea96
lea esi, [esp + 0x374]
lea edi, [esp + 0x35c]
call fcn.004432cf
mov esi, eax
mov eax, dword [esp + 0x80]
test eax, eax
je 0x449b40
cmp eax, dword [esi]
je 0x449b45
call fcn.004bbc61
mov eax, dword [esp + 0x84]
cmp eax, dword [esi + 4]
je 0x449bf7
lea esi, [esp + 0x80]
call fcn.00426f23
push eax
lea ecx, [esp + 0x20]
call fcn.004247d7
mov byte [esp + 0x3740], 0xf2
call fcn.00426f23
mov edi, dword [eax + 4]
mov eax, edi
lea esi, [esp + 0x1dc]
call fcn.0047b000
push ecx
mov byte [esp + 0x3744], 0xf3
mov esi, dword [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x14], esp
push dword [eax]
push esi
push str.Setting___s__s
push ecx
call fcn.0046da40
add esp, 0x10
call fcn.00444eb6
pop ecx
mov ecx, dword [esp + 0x1dc]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x340]
push edi
push eax
xor eax, eax
mov edx, esi
call fcn.0047b060
pop ecx
pop ecx
lea ecx, [esi - 0x10]
mov byte [esp + 0x3740], 0xee
call fcn.0042201a
lea esi, [esp + 0x80]
call fcn.0044eab2
jmp 0x449b1c
mov ebx, dword [esp + 0x340]
lea eax, [esp + 0x340]
push eax
call fcn.0048ef30
lea eax, [esp + 0xa84]
call fcn.00485920
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Done
jmp 0x448d6f
push str._GetProperty_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x4fe3b8
call fcn.004bba40
mov edx, dword [esp + 0x28]
pop ecx
mov ecx, dword [esp + 0x2c]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x2b4]
call fcn.004247ec
push 1
push esi
push ecx
mov byte [esp + 0x374c], 0xf4
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x11e0]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0xf5
push dword [0x5294a0]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x11e0]
push eax
call fcn.004457c6
add esp, 0x10
lea ecx, [esp + 0x16c]
call fcn.00422487
lea eax, [esp + 0x318]
push eax
mov byte [esp + 0x3744], 0xf6
call fcn.0042b7e0
lea eax, [esp + 0x16c]
push eax
push ecx
mov byte [esp + 0x3748], 0xf7
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Main
call fcn.004247ec
push 3
lea edi, [esp + 0x11e0]
call fcn.00486c90
mov ecx, dword [esp + 0x16c]
mov eax, dword [ecx - 0xc]
cmp eax, esi
jne 0x449d1e
push 6
jmp 0x4473e2
lea edx, [esp + 0x318]
push edx
push eax
push ecx
call fcn.00475aa0
mov eax, dword [esp + 0x33c]
mov eax, dword [eax]
add esp, 0xc
lea edi, [esp + 0x318]
lea esi, [esp + 0x80]
call fcn.0042bccf
mov eax, dword [esp + 0x330]
lea esi, [esp + 0xb0]
call fcn.0042bccf
mov edi, esi
lea esi, [esp + 0x80]
call fcn.0042b930
test al, al
je 0x44766e
xor ebx, ebx
lea esi, [esp + 0x80]
call fcn.00430cf5
push dword [eax]
lea eax, [esp + 0x2b4]
call fcn.0042486f
test eax, eax
jne 0x449e01
call fcn.00430cf5
add eax, 4
push dword [eax]
lea ecx, [esp + 0xe0]
call fcn.00426182
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
cmp eax, 0xffffffff
je 0x449df2
mov ecx, dword [esp + 0xdc]
push ebx
mov dword [esp + 0x178], ebx
mov edx, dword [ecx - 0xc]
lea esi, [esp + 0x178]
push esi
push edx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x449df2
mov eax, dword [esp + 0x174]
mov ecx, dword [esp + 0xdc]
cmp eax, dword [ecx - 0xc]
je 0x449e42
mov ecx, dword [esp + 0xdc]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x80]
call fcn.0042b924
mov eax, dword [esp + 0x330]
lea edi, [esp + 0x318]
lea esi, [esp + 0xb0]
call fcn.0042bccf
mov edi, esi
lea esi, [esp + 0x80]
call fcn.0042b930
test al, al
jne 0x449d77
jmp 0x44766e
push ebx
jmp 0x4473e2
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x38]
call fcn.004247d7
mov byte [esp + 0x3740], 0xfe
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x50], ecx
jle 0x449e7c
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x38]
call fcn.00424845
push 1
push esi
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x730]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0xff
push dword [0x5294a0]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x730]
push eax
call fcn.004457c6
add esp, 0x10
cmp dword [esp + 0x7ac], esi
jne 0x449ee9
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44980d
push 1
lea eax, [esp + 0x728]
push eax
lea eax, [esp + 0x114]
push eax
call fcn.0044585f
add esp, 0xc
push str._n_nSandboxing:_n_n
lea ecx, [esp + 0x110]
mov dword [esp + 0x3744], 0x100
call fcn.0042b513
lea eax, [esp + 0x724]
push eax
lea eax, [esp + 0x1e8]
push eax
call fcn.00445be6
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x110]
mov byte [esp + 0x3744], 1
call fcn.0042485a
mov byte [esp + 0x3740], 0
mov ecx, dword [esp + 0x1e4]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x10c]
mov eax, dword [ecx - 0xc]
push ecx
push ecx
mov dword [esp + 0x18], esp
mov edi, esp
push ecx
add eax, eax
mov ecx, esp
mov dword [esp + 0x1c], esp
mov ebx, str..txt
push ebx
mov dword [esp + 0x2c], eax
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 2
mov eax, esp
mov dword [esp + 0x24], esp
push eax
call fcn.0046ca80
pop ecx
push edi
mov byte [esp + 0x3754], 0
call fcn.0046dc00
mov edi, dword [esp + 0x30]
add esp, 0xc
call fcn.0046e410
pop ecx
pop ecx
push esi
push str.Package_info
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 3
mov eax, esp
mov dword [esp + 0x24], esp
push eax
call fcn.0046ca80
pop ecx
lea eax, [esp + 0x1fc]
push eax
mov byte [esp + 0x3754], 0
call fcn.0046dc00
add esp, 0xc
mov byte [esp + 0x3748], 4
push dword [eax]
lea eax, [esp + 0x184]
push str.Saved_in:__s
push eax
call fcn.0046da40
add esp, 0xc
push dword [eax]
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [esp + 0x178]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x1ec]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x4473e1
lea ecx, [esp + 0x10]
call fcn.00422487
lea ecx, [esp + 0x128]
mov dword [esp + 0x3740], 0x109
call fcn.00422487
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x3744], 0xa
call fcn.004247d7
mov byte [esp + 0x3740], 0xb
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x50], ecx
jle 0x44a0a6
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x4c]
call fcn.00424845
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..ini
call fcn.004247ec
push ecx
mov byte [esp + 0x3748], 0xc
lea eax, [esp + 0x50]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x128]
push eax
mov byte [esp + 0x374c], 0xb
call fcn.0046dc00
add esp, 8
mov byte [esp + 0x3744], 0xd
lea eax, [esp + 0x124]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d7
call fcn.00470b40
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x54]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xfa0]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0xe
push dword [0x5294a0]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xfa0]
push eax
call fcn.004457c6
add esp, 0x10
cmp dword [esp + 0x101c], esi
jne 0x44a176
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44980d
lea eax, [esp + 0x128]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Main
call fcn.004247ec
push 3
lea edi, [esp + 0xfa0]
call fcn.00486c90
mov ecx, dword [esp + 0x128]
mov eax, dword [ecx - 0xc]
cmp eax, esi
jne 0x44a1bd
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44742b
push ecx
push ecx
lea edi, [eax + eax]
lea eax, [esp + 0x128]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
call fcn.0046e410
jmp 0x448df1
push str.AppID_ShortDesc_FriendlyName_Category_DownloadUrl_IconUrl_Version_BuildUid_Size_PopularityIndex_n
lea ecx, [esp + 0x6c]
call fcn.004247ec
mov dword [esp + 0x3740], 0x10f
lea ecx, [esp + 0x28]
mov dword [esp + 0x130], esi
mov dword [esp + 0x29c], esi
call fcn.00422487
push 1
push esi
push ecx
mov byte [esp + 0x374c], 0x10
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x1540]
push eax
call fcn.00484a40
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x374c], 0x11
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x12
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3754], 0x13
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d7
push 2
push ecx
mov byte [esp + 0x375c], 0x14
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x1550]
push eax
mov byte [esp + 0x3760], 0x11
call fcn.00438170
mov esi, 0x4f1fd8
push esi
lea eax, [esp + 0x2e4]
push 0x52cf5c
push eax
call fcn.00424a3b
add esp, 0x2c
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x3744], 0x15
call fcn.0042485a
mov byte [esp + 0x3740], 0x11
mov ecx, dword [esp + 0x2c0]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
lea ecx, [esp + 0x6c]
call fcn.0042b513
push esi
push 0x52cf68
lea eax, [esp + 0x2d0]
push eax
call fcn.00424a3b
add esp, 0xc
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x3744], 0x16
call fcn.0042485a
mov byte [esp + 0x3740], 0x11
mov ecx, dword [esp + 0x2c8]
add ecx, 0xfffffff0
call fcn.0042201a
push str.Productivity_
lea ecx, [esp + 0x6c]
call fcn.0042b513
mov ebx, dword [esp + 0x24]
lea eax, [ebx + 1]
cmp dword [esp + 0x50], eax
mov edi, 0x4fe680
jle 0x44a375
mov eax, dword [esp + 0x2c]
push dword [eax + ebx*4 + 4]
lea ebx, [esp + 0x6c]
push edi
call fcn.004277b3
mov ebx, dword [esp + 0x2c]
pop ecx
pop ecx
jmp 0x44a383
push str._Download_URL_here__
lea ecx, [esp + 0x6c]
call fcn.0042b513
lea eax, [ebx + 2]
cmp dword [esp + 0x50], eax
jle 0x44a3a1
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4]
lea ebx, [esp + 0x6c]
push edi
call fcn.004277b3
pop ecx
pop ecx
jmp 0x44a3af
push str._Icon_here__
lea ecx, [esp + 0x6c]
call fcn.0042b513
push esi
lea eax, [esp + 0x1f8]
push 0x52cf70
push eax
call fcn.00424a3b
add esp, 0xc
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x3744], 0x17
call fcn.0042485a
mov byte [esp + 0x3740], 0x11
mov ecx, dword [esp + 0x1f4]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
lea eax, [esp + 0x1fc]
push 0x52cfa0
push eax
call fcn.00424a3b
add esp, 0xc
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x3744], 0x18
call fcn.0042485a
mov byte [esp + 0x3740], 0x11
mov ecx, dword [esp + 0x1f8]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push eax
lea edi, [esp + 0x2a4]
lea esi, [esp + 0x138]
call fcn.0046ca80
pop ecx
call fcn.00470a40
pop ecx
push dword [esp + 0x130]
lea eax, [esp + 0x270]
push 0x4eec28
push eax
call fcn.0046da40
add esp, 0xc
push 0x4f1fd8
push eax
lea eax, [esp + 0x20c]
push eax
mov byte [esp + 0x374c], 0x19
call fcn.00424a3b
add esp, 0xc
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x3744], 0x1a
call fcn.0042485a
mov ecx, dword [esp + 0x204]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3740], 0x11
mov ecx, dword [esp + 0x26c]
add ecx, 0xfffffff0
call fcn.0042201a
push 0x4efd5c
lea ecx, [esp + 0x6c]
call fcn.0042b513
mov eax, dword [esp + 0x24]
add eax, 3
cmp dword [esp + 0x50], eax
jle 0x44a4ee
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4]
lea ecx, [esp + 0x2c]
call fcn.00424845
jmp 0x44a556
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..csv
call fcn.004247ec
push ecx
mov byte [esp + 0x3748], 0x1b
mov eax, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.0046ca80
pop ecx
lea eax, [esp + 0x214]
push eax
mov byte [esp + 0x374c], 0x11
call fcn.0046dc00
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x3744], 0x1c
call fcn.00424830
mov byte [esp + 0x3740], 0x11
mov ecx, dword [esp + 0x20c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x68]
mov eax, dword [ecx - 0xc]
push ecx
push ecx
lea edi, [eax + eax]
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d7
call fcn.0046e410
pop ecx
pop ecx
push dword [0x5294a0]
push ecx
mov dword [esp + 0x18], esp
test eax, eax
jne 0x44a59f
mov eax, esp
lea ecx, [esp + 0x30]
push ecx
push str.Could_not_save_to
push eax
call fcn.00424a90
jmp 0x44756e
mov ecx, esp
lea eax, [esp + 0x30]
push eax
call fcn.004247d7
jmp 0x448557
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x10c0]
push eax
call fcn.00484a40
mov dword [esp + 0x3740], 0x11d
cmp dword [esp + 0x113c], esi
jne 0x44a5f7
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x447f30
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x52cf5c]
push str._s.AppVirtDll.dll
push eax
call fcn.0046da40
lea eax, [esp + 0x124]
add esp, 0xc
push eax
call fcn.0046d110
add esp, 4
mov byte [esp + 0x3744], 0x1e
lea eax, [esp + 0x118]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
push ecx
mov byte [esp + 0x3748], 0x1f
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Main
call fcn.004247ec
push 2
pop ecx
lea edi, [esp + 0x10bc]
mov byte [esp + 0x3748], 0x1e
call fcn.00486e30
push dword [0x5294a0]
lea eax, [esp + 0x118]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x2cc]
push eax
call fcn.0048f8a0
add esp, 4
mov byte [esp + 0x3748], 0x20
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.EngineVersion_s
push ecx
call fcn.0046da40
add esp, 0xc
call fcn.0044574c
pop ecx
pop ecx
mov byte [esp + 0x3740], 0x1e
mov ecx, dword [esp + 0x2c4]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
lea eax, [esp + 0x118]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
call fcn.00470b40
jmp 0x448df2
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
call fcn.004247d7
push 0x2e
lea ecx, [esp + 0x2c]
mov dword [esp + 0x3744], 0x121
call fcn.0043d8e8
push eax
lea eax, [esp + 0x218]
push eax
lea ecx, [esp + 0x30]
call fcn.004249db
push str..new.exe
push eax
lea eax, [esp + 0x9c]
push eax
mov byte [esp + 0x374c], 0x22
call fcn.00424a3b
add esp, 0xc
mov byte [esp + 0x3740], 0x24
mov ecx, dword [esp + 0x214]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x278]
call fcn.004247ec
push esi
mov byte [esp + 0x3744], 0x25
push dword [esp + 0x98]
push dword [esp + 0x27c]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x44a7c0
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x9c]
push dword [esp + 0x34]
push str.Cant_copy__s_to__s
push eax
call fcn.0046da40
add esp, 0x10
jmp 0x4473dc
push dword [esp + 0x94]
push dword [esp + 0x2c]
call fcn.0043db09
pop ecx
pop ecx
xor esi, esi
inc esi
push esi
push 0
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x580]
push eax
call fcn.00484a40
push esi
push esi
push ecx
mov byte [esp + 0x374c], 0x26
lea eax, [esp + 0xa0]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x1150]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0x27
push dword [0x5294a0]
lea eax, [esp + 0x50]
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x580]
push eax
call fcn.004457c6
add esp, 0x10
lea eax, [esp + 0x38]
lea ecx, [esp + 0x5e4]
call fcn.0044e9a8
jmp 0x44a978
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.CEChangeEngine.tmp
call fcn.004247ec
lea eax, [esp + 0xd8]
push eax
call fcn.0046d110
add esp, 4
mov byte [esp + 0x3744], 0x28
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
lea esi, [esp + 0x3c]
mov byte [esp + 0x3744], 0x29
call fcn.00426f23
push ecx
add eax, 0x2c
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
call fcn.00426f23
mov byte [esp + 0x3748], 0x28
mov ecx, dword [eax + 0x28]
lea edi, [esp + 0x57c]
call fcn.00486e30
test eax, eax
jne 0x44a9d4
call fcn.00426f23
push ecx
add eax, 0x2c
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
push 0x4000
mov byte [esp + 0x3748], 0x2a
call fcn.00426f23
push dword [eax + 0x28]
lea eax, [esp + 0xe0]
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x1154]
push eax
mov byte [esp + 0x3754], 0x28
call fcn.00486650
test eax, eax
jne 0x44aa00
push ecx
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
call fcn.00470b40
pop ecx
mov byte [esp + 0x3740], 0x27
mov ecx, dword [esp + 0xd4]
add ecx, 0xfffffff0
call fcn.0042201a
call fcn.0044ea20
lea eax, [esp + 0x304]
lea ecx, [esp + 0x5e4]
call fcn.0044e9bd
mov edi, eax
lea esi, [esp + 0x38]
call fcn.00424d79
test al, al
jne 0x44a866
lea eax, [esp + 0x574]
call fcn.00485920
lea eax, [esp + 0x1144]
call fcn.00485920
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x9c]
push str.Successfully_changed_Loader:__s
jmp 0x44854e
push dword [0x5294a0]
call fcn.00426f23
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push dword [eax + 0x2c]
lea esi, [esp + 0x44]
call fcn.00426f23
push dword [eax + 0x28]
push str.Cannot_read_container__d__s_to_file
push edi
jmp 0x44a7b3
push dword [0x5294a0]
lea esi, [esp + 0x3c]
call fcn.00426f23
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push dword [eax + 0x2c]
jmp 0x44a9ed
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x24]
call fcn.004247d7
push 0x2e
lea ecx, [esp + 0x24]
mov dword [esp + 0x3744], 0x12b
call fcn.0043d8e8
push eax
lea eax, [esp + 0x220]
push eax
lea ecx, [esp + 0x28]
call fcn.004249db
push str..new.exe
push eax
lea eax, [esp + 0xd4]
push eax
mov byte [esp + 0x374c], 0x2c
call fcn.00424a3b
add esp, 0xc
mov byte [esp + 0x3740], 0x2e
mov ecx, dword [esp + 0x21c]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0xc8]
call fcn.004247ec
push esi
mov byte [esp + 0x3744], 0x2f
push dword [esp + 0xd0]
push dword [esp + 0x28]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x44aad9
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xd4]
push dword [esp + 0x2c]
jmp 0x44a7ad
push 1
push 1
push ecx
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x4f0]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0x30
push dword [0x5294a0]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x4f0]
push eax
call fcn.004457c6
add esp, 0x10
cmp dword [esp + 0x56c], esi
jne 0x44ab4f
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_open_PeContainer
jmp 0x4473d7
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
mov esi, str.Main
push esi
call fcn.004247ec
push 0
push 2
push ecx
mov byte [esp + 0x3750], 0x31
lea eax, [esp + 0xd4]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x4f4]
push eax
mov byte [esp + 0x3754], 0x30
call fcn.00486650
test eax, eax
je 0x44abb1
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEDLL
jmp 0x4473d7
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247ec
push 0
push 8
push ecx
mov byte [esp + 0x3750], 0x32
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d7
push edi
call fcn.0047b4c0
pop ecx
pop ecx
lea eax, [esp + 0x4f4]
push eax
mov byte [esp + 0x3754], 0x30
call fcn.00486650
test eax, eax
je 0x44ac1d
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEDLL64
jmp 0x4473d7
lea ecx, [esp + 0x170]
call fcn.00422487
lea ecx, [esp + 0x138]
call fcn.00422487
lea eax, [esp + 0x170]
push eax
push ecx
mov byte [esp + 0x3748], 0x34
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247ec
push 3
lea edi, [esp + 0x4f0]
call fcn.00486c90
test eax, eax
je 0x44ac7b
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_Read_PeContainer_PECONTAINER_INI
jmp 0x4473d7
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
lea eax, [esp + 0xcc]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
lea ebx, [esp + 0x144]
call fcn.004247d7
push edi
call fcn.0048f8a0
add esp, 4
mov byte [esp + 0x3748], 0x35
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.EngineVersion
call fcn.004247ec
push ecx
mov byte [esp + 0x374c], 0x36
lea eax, [esp + 0x17c]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d7
mov byte [esp + 0x374c], 0x34
call fcn.00472130
pop ecx
pop ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247ec
push 0x4000
push 3
pop esi
push ecx
mov byte [esp + 0x374c], 0x37
mov eax, ebx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d7
mov ecx, esi
lea ebx, [esp + 0x4f0]
mov byte [esp + 0x374c], 0x34
call fcn.00486430
test eax, eax
je 0x44ad45
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_Add_PeContainerStr_PECONTAINER_INI
jmp 0x4473d7
lea eax, [esp + 0x4e4]
call fcn.00485920
push dword [0x5294a0]
lea eax, [esp + 0xc8]
push ecx
mov dword [esp + 0x18], esp
mov esi, esp
push dword [esp + 0xd4]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x2b4]
push eax
call fcn.0048f8a0
pop ecx
pop ecx
mov byte [esp + 0x374c], 0x38
push dword [eax]
push str.Successfully_changed_to_Engine__s._nNew_package_saved_in:_n_s
push esi
call fcn.0046da40
add esp, 0x10
call fcn.0044574c
pop ecx
pop ecx
mov ecx, dword [esp + 0x2a4]
jmp 0x44965d
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x24]
call fcn.004247d7
push 0x2e
lea ecx, [esp + 0x24]
mov dword [esp + 0x3744], 0x139
call fcn.0043d8e8
push eax
lea eax, [esp + 0x228]
push eax
lea ecx, [esp + 0x28]
call fcn.004249db
push str..new.exe
push eax
lea eax, [esp + 0xac]
push eax
mov byte [esp + 0x374c], 0x3a
call fcn.00424a3b
add esp, 0xc
mov byte [esp + 0x3740], 0x3c
mov ecx, dword [esp + 0x224]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x280]
call fcn.004247ec
push esi
mov byte [esp + 0x3744], 0x3d
push dword [esp + 0xa8]
push dword [esp + 0x28]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x44ae71
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xac]
push dword [esp + 0x2c]
jmp 0x44a7ad
push 1
push 1
push ecx
lea eax, [esp + 0xb0]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x7c0]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0x3e
push dword [0x5294a0]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x7c0]
push eax
call fcn.004457c6
add esp, 0x10
cmp dword [esp + 0x83c], esi
jne 0x44aee2
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44ab45
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.Main
call fcn.004247ec
push esi
push 3
push ecx
mov byte [esp + 0x3750], 0x3f
lea eax, [esp + 0x28c]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x7c4]
push eax
mov byte [esp + 0x3754], 0x3e
call fcn.00486650
cmp eax, esi
je 0x44af42
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEINI
jmp 0x4473d7
lea eax, [esp + 0x7b4]
call fcn.00485920
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xac]
push str.Successfully_changed_INI._nNew_package_saved_in:_n_s
jmp 0x448de3
lea esi, [esp + 0x15c4]
call fcn.004337e8
mov dword [esp + 0x3740], 0x140
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x24]
push dword [edi + esi*4 + 4]
lea ecx, [esp + 0x1610]
call fcn.00424845
push dword [edi + esi*4 + 8]
lea ecx, [esp + 0x15e8]
call fcn.00424845
push dword [edi + esi*4 + 0xc]
lea ecx, [esp + 0x15e0]
call fcn.00424845
push eax
lea ecx, [esp + 0x15d4]
call fcn.00424830
push dword [edi + esi*4 + 0x10]
lea ecx, [esp + 0x1618]
call fcn.00424845
push dword [edi + esi*4 + 0x14]
lea ecx, [esp + 0x1614]
call fcn.00424845
lea eax, [esp + 0x172c]
push eax
lea edi, [esp + 0x15c8]
call fcn.00499610
lea eax, [esp + 0x172c]
push eax
mov byte [esp + 0x3744], 0x41
call fcn.004997b0
test eax, eax
je 0x44b060
xor esi, esi
mov eax, 0x4feb70
cmp dword [esp + 0x172c], esi
jne 0x44b02a
mov eax, 0x4feb78
push dword [esp + 0x1738]
push dword [esp + 0x1738]
push eax
lea eax, [esp + 0x238]
push str.Need_to_update:__s_nVersion:__s_nBuildUID:__s_n
push eax
call fcn.0046da40
add esp, 0x14
push esi
push str.Server_test:
push dword [esp + 0x234]
jmp 0x449727
push 0
push str.Server_test:
push str.Failed
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 1
jmp 0x4473e2
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
mov edi, 0x52cf50
push edi
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x44b0af
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
push esi
mov ecx, edi
call fcn.0043a2c4
jmp 0x44758c
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x6a0]
push eax
call fcn.00484a40
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x374c], 0x142
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x43
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3754], 0x44
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d7
push 2
push ecx
mov byte [esp + 0x375c], 0x45
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x6b0]
push eax
mov byte [esp + 0x3760], 0x42
call fcn.00438170
add esp, 0x20
lea ecx, [esp + 0x694]
call fcn.00436d93
lea eax, [esp + 0x694]
call fcn.00485920
mov dword [esp + 0x3740], 4
lea eax, [esp + 0x694]
jmp 0x447e38
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xc40]
push eax
call fcn.00484a40
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x374c], 0x146
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x47
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3754], 0x48
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d7
push 2
push ecx
mov byte [esp + 0x375c], 0x49
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xc50]
push eax
mov byte [esp + 0x3760], 0x46
call fcn.00438170
add esp, 0x20
push esi
push esi
push esi
push ecx
mov eax, esp
mov dword [esp + 0x20], esp
push eax
xor ecx, ecx
call fcn.0047eff0
pop ecx
mov ecx, esi
call fcn.00497ca0
add esp, 0x10
lea eax, [esp + 0xc34]
call fcn.00485920
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
mov edi, 0x52cf50
push edi
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x44b287
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.Cannot_obtain_INI_info_from_resource_
call fcn.004247ec
call fcn.00444eb6
pop ecx
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push str.MountVirtReg
push eax
call fcn.0046da40
pop ecx
pop ecx
call fcn.00444eb6
mov eax, esp
mov dword [esp + 0x14], esp
push str._____________
push eax
call fcn.0046da40
pop ecx
pop ecx
call fcn.00444eb6
pop ecx
mov ecx, edi
call fcn.0042af6b
mov edi, eax
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
cmp edi, esi
jne 0x44b2de
push str.Cannot_mount_virtual_registry
call fcn.004247ec
call fcn.00444eb6
jmp 0x44b2eb
push ebx
call fcn.004247ec
push edi
call fcn.00445cd3
pop ecx
pop ecx
mov dword [esp + 0x3740], 4
lea eax, [esp + 0xc34]
jmp 0x447e38
mov eax, dword [esp + 0x2c]
mov edi, dword [esp + 0x24]
push dword [eax + edi*4 + 4]
lea ecx, [esp + 0x15c]
call fcn.004247ec
mov dword [esp + 0x3740], 0x14a
mov eax, dword [esp + 0x2c]
push dword [eax + edi*4 + 8]
lea ecx, [esp + 0x9c]
call fcn.004247ec
push 0x10
mov byte [esp + 0x3744], 0x4b
push esi
push dword [esp + 0x160]
call fcn.004bfb5f
add esp, 8
mov edi, eax
mov eax, esp
mov dword [esp + 0x14], esp
push dword [esp + 0x9c]
push edi
push str.SetFileFlags:__0x_x____s_
push eax
call fcn.0046da40
add esp, 0x10
call fcn.00444eb6
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xcd0]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0x4c
push dword [0x5294a0]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xcd0]
push eax
call fcn.004457c6
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x4d
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3754], 0x4e
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d7
push 2
push ecx
mov byte [esp + 0x375c], 0x4f
mov ecx, esp
lea eax, [esp + 0x34]
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xce0]
push eax
mov byte [esp + 0x3760], 0x4c
call fcn.00438170
call fcn.00478f10
mov ebx, 0x52c7a4
mov eax, ebx
call fcn.0048df40
mov eax, dword [esp + 0xb8]
push esi
call fcn.004795c0
add esp, 0x24
push ecx
mov dword [esp + 0x14], esp
cmp eax, esi
je 0x44b4c1
mov eax, dword [eax + 0x24]
mov dword [eax], edi
mov ecx, esp
push dword [0x52c7a4]
call fcn.004247ec
mov ecx, ebx
call fcn.004794f0
pop ecx
cmp eax, esi
je 0x44b4ab
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xa0]
push edi
push str.Success:_n__x___s
push eax
call fcn.0046da40
add esp, 0x10
call fcn.0044574c
pop ecx
jmp 0x44b4dd
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push str._SetFileFlags:_could_not_save_tree
push eax
call fcn.0046da40
pop ecx
pop ecx
jmp 0x44b4d8
mov eax, esp
push dword [esp + 0x9c]
push str._SetFileFlags:_could_not_find__s
push eax
call fcn.0046da40
add esp, 0xc
call fcn.00444eb6
pop ecx
mov eax, ebx
call fcn.0048df50
lea eax, [esp + 0xcc4]
mov byte [esp + 0x3740], 0x4b
call fcn.0042795c
mov ecx, dword [esp + 0x98]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x158]
jmp 0x44e6fe
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.DbgZip
call fcn.004247ec
call fcn.00444ee6
mov dword [esp], str._DbgZip:
call fcn.004bbaea
mov edx, dword [esp + 0x28]
pop ecx
mov ecx, dword [esp + 0x2c]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x64]
call fcn.00424845
jmp 0x4472c6
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xa00]
push eax
call fcn.00484a40
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x374c], 0x150
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x51
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3754], 0x52
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247ec
push 2
push ecx
mov byte [esp + 0x375c], 0x53
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xa10]
push eax
mov byte [esp + 0x3760], 0x50
call fcn.00438170
add esp, 0x20
push dword [0x5294a0]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xa00]
push eax
call fcn.004457c6
push dword [esp + 0x64]
lea edx, [esp + 0xa08]
mov ecx, 0x52cf50
call fcn.0043c07c
add esp, 0x14
mov dword [esp + 0x3740], 4
lea eax, [esp + 0x9f4]
jmp 0x447e38
push 1
xor edi, edi
push edi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x1270]
push eax
call fcn.00484a40
push 0xffffffffffffffff
push edi
push ecx
mov dword [esp + 0x374c], 0x15a
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x5b
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3754], 0x5c
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d7
push 2
push ecx
mov byte [esp + 0x375c], 0x5d
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x1280]
push eax
mov byte [esp + 0x3760], 0x5a
call fcn.00438170
add esp, 0x20
lea esi, [esp + 0xb0]
call fcn.0048bb50
mov byte [esp + 0x3740], 0x5e
mov dword [esp + 0x34], edi
jmp 0x44b794
push dword [0x52cf5c]
lea eax, [esp + 0x2b08]
push eax
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x44b794
mov dword [esp + 0x20], edi
cmp dword [esp + 0x2700], edi
jbe 0x44b794
mov ebx, dword [esp + 0x20]
shl ebx, 3
lea esi, [esp + ebx + 0x2704]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [esi], eax
je 0x44b783
test byte [esp + ebx + 0x2708], 3
je 0x44b783
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x52cfac
call fcn.004247d7
push ecx
mov byte [esp + 0x3748], 0x5f
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x52cf5c
call fcn.004247d7
mov byte [esp + 0x3748], 0x5e
mov ebx, dword [esi]
call fcn.0044063f
pop ecx
pop ecx
xor edi, edi
inc dword [esp + 0x20]
mov eax, dword [esp + 0x20]
cmp eax, dword [esp + 0x2700]
jb 0x44b724
push 1
lea eax, [esp + 0x22e0]
push eax
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0x40]
call fcn.0048b870
test eax, eax
jne 0x44b6fe
push edi
push edi
push edi
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
lea eax, [esp + 0xb0]
call fcn.0048bb70
lea eax, [esp + 0x1264]
mov dword [esp + 0x3740], 4
call fcn.0042795c
xor esi, esi
jmp 0x44758d
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x1420]
push eax
call fcn.00484a40
push 0xffffffffffffffff
mov dword [esp + 0x3744], 0x160
push dword [esp + 0x44]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x61
mov ecx, esp
mov dword [esp + 0x24], esp
push str._Vintegrate_
call fcn.004247ec
push ecx
mov byte [esp + 0x3754], 0x62
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d7
push esi
push ecx
mov byte [esp + 0x375c], 0x63
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x1430]
push eax
mov byte [esp + 0x3760], 0x60
call fcn.00438170
add esp, 0x20
call fcn.00445680
jmp 0x4473e1
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push str._ProcessList:all
push dword [eax + ecx*4]
call fcn.004bb834
mov edi, eax
neg edi
pop ecx
sbb edi, edi
pop ecx
lea esi, [esp + 0xb0]
inc edi
call fcn.0048bb50
mov dword [esp + 0x3740], 0x164
and dword [esp + 0x20], 0
lea ecx, [esp + 0x44]
call fcn.00422487
xor eax, eax
test edi, edi
sete al
mov byte [esp + 0x3740], 0x65
mov dword [esp + 0x34], eax
jmp 0x44bbb6
lea eax, [esp + 0x20dc]
push eax
lea eax, [esp + 0x2c0]
push str._AppID_ws_n
push eax
call fcn.0046da40
add esp, 0xc
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x3744], 0x66
call fcn.0042485a
mov byte [esp + 0x3740], 0x65
mov ecx, dword [esp + 0x2bc]
add ecx, 0xfffffff0
call fcn.0042201a
push dword [esp + 0x18b8]
lea eax, [esp + 0x238]
push str.____SerialId:__d_n
push eax
call fcn.0046da40
add esp, 0xc
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x3744], 0x67
call fcn.0042485a
mov byte [esp + 0x3740], 0x65
mov ecx, dword [esp + 0x234]
add ecx, 0xfffffff0
call fcn.0042201a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x1cd0]
mov esi, 0x3e8
xor edx, edx
mov ecx, esi
div ecx
push eax
lea eax, [esp + 0x288]
push str.____Started:__d_sec_ago_n
push eax
call fcn.0046da40
add esp, 0xc
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x3744], 0x68
call fcn.0042485a
mov byte [esp + 0x3740], 0x65
mov ecx, dword [esp + 0x284]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x1cd4]
xor edx, edx
div esi
push eax
lea eax, [esp + 0x240]
push str.____Blocking_buffering:__d_sec_n
push eax
call fcn.0046da40
add esp, 0xc
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x3744], 0x69
call fcn.0042485a
mov byte [esp + 0x3740], 0x65
mov ecx, dword [esp + 0x23c]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x2ac]
push str.____Processes:_n
push eax
call fcn.0046da40
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x3744], 0x6a
call fcn.0042485a
mov byte [esp + 0x3740], 0x65
mov ecx, dword [esp + 0x2ac]
add ecx, 0xfffffff0
call fcn.0042201a
and dword [esp + 0x48], 0
cmp dword [esp + 0x1cd8], 0
jbe 0x44bbb6
push ebx
lea ecx, [esp + 0xb0]
call fcn.004247ec
mov byte [esp + 0x3740], 0x6b
mov edi, dword [esp + 0x48]
lea edi, [esp + edi*8 + 0x1cdc]
push dword [edi]
lea esi, [esp + 0xb0]
call fcn.0046c2c0
pop ecx
test eax, eax
jne 0x44bab2
push 0x4f08b8
mov ecx, esi
call fcn.00424845
push 0x5c
push ecx
lea eax, [esp + 0xb4]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x294]
push eax
call fcn.0046dd70
add esp, 0xc
mov byte [esp + 0x3740], 0x6c
push dword [eax]
lea eax, [esp + 0x248]
push dword [edi]
push str._______wd:__ws
push eax
call fcn.0046da40
add esp, 0x10
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x3744], 0x6d
call fcn.0042485a
mov ecx, dword [esp + 0x244]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3740], 0x6b
mov ecx, dword [esp + 0x28c]
add ecx, 0xfffffff0
call fcn.0042201a
mov esi, dword [esp + 0x48]
mov eax, dword [esp + esi*8 + 0x1ce0]
test eax, eax
je 0x44bb7f
push eax
lea eax, [esp + 0x250]
push str._0x_x_
push eax
call fcn.0046da40
add esp, 0xc
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x3744], 0x6e
call fcn.0042485a
mov byte [esp + 0x3740], 0x6b
mov ecx, dword [esp + 0x24c]
add ecx, 0xfffffff0
call fcn.0042201a
push 0x4ec4c4
lea ecx, [esp + 0x48]
call fcn.0042b513
mov byte [esp + 0x3740], 0x65
mov ecx, dword [esp + 0xac]
add ecx, 0xfffffff0
call fcn.0042201a
inc esi
mov dword [esp + 0x48], esi
cmp esi, dword [esp + 0x1cd8]
jb 0x44ba73
push dword [esp + 0x34]
lea eax, [esp + 0x18b8]
push eax
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0x2c]
call fcn.0048b870
test eax, eax
jne 0x44b8f7
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
cmp dword [esp + 0x28], eax
jne 0x44bc04
push str.No_active_virtual_apps
call fcn.004247ec
call fcn.0044574c
pop ecx
pop ecx
jmp 0x44b074
lea eax, [esp + 0x4c]
jmp 0x44a5a5
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
push 0x52cf50
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x44bc40
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
lea esi, [esp + 0xb0]
call fcn.0048bb50
mov dword [esp + 0x3740], 0x16f
and dword [esp + 0x34], 0
jmp 0x44bc77
push dword [0x52cf5c]
lea eax, [esp + 0x3530]
push eax
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44bca7
push 1
lea eax, [esp + 0x2d08]
push eax
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0x40]
call fcn.0048b870
test eax, eax
jne 0x44bc5e
lea eax, [esp + 0xb0]
call fcn.0048bb70
jmp 0x44855e
push 0x2bc
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0xb0]
mov dword [esp + 0x3740], 4
call fcn.0048bb70
jmp 0x44bc40
lea eax, [esp + 0x2cc]
push eax
mov eax, dword [esp + 0x68]
mov eax, dword [eax + 0x44]
call fcn.00431637
lea eax, [esp + 0x2cc]
push eax
call fcn.00431774
jmp 0x4473e1
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.AutoUpdate
call fcn.004247ec
call fcn.00444ee6
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
mov edi, 0x52cf50
push edi
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x44bd3d
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x52cf98]
push str.AutoUpdate_s
push eax
call fcn.0046da40
add esp, 0xc
call fcn.00444ee6
mov ecx, 0x52cf98
mov dword [esp], str.https:__online.cameyo.com
call fcn.00424845
push str.0000
mov ecx, 0x52cf9c
call fcn.00424845
mov ecx, edi
call fcn.0049b420
jmp 0x44758d
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.VirtRegSyncExport
call fcn.004247ec
call fcn.00444ee6
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
push 0x52cf50
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x44bdd1
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
call fcn.00442071
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
push str.VirtRegSyncExport:_bRet_d
push ecx
call fcn.0046da40
add esp, 0xc
jmp 0x447587
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.StartStreaming:AppIDSkype
call fcn.004247ec
call fcn.00427668
pop ecx
jmp 0x44758c
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
push 0x52cf50
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x44be42
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.open
xor ebx, ebx
call fcn.004247ec
push esi
push ecx
mov dword [esp + 0x374c], 0x172
mov eax, esp
mov dword [esp + 0x20], esp
push dword [0x52cfac]
xor edi, edi
push str._select___s_
push eax
call fcn.0046da40
add esp, 8
mov byte [esp + 0x3750], 0x73
mov ecx, esp
mov dword [esp + 0x48], esp
push str.explorer.exe
call fcn.004247ec
mov dword [esp + 0x3750], 4
call fcn.0046c4e0
add esp, 0x10
jmp 0x44b7e8
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.SvcRegister
call fcn.004247ec
call fcn.00444ee6
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
mov edi, 0x52cf50
push edi
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x44bef7
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
mov ecx, edi
call fcn.0042af6b
mov ebx, eax
cmp ebx, esi
jne 0x44bf1b
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_mount_virtual_registry
jmp 0x4473d7
call fcn.00478f10
push dword [0x5294a0]
push ebx
push edi
call fcn.00423ab0
add esp, 0xc
push dword [0x5294a0]
mov edi, eax
cmp edi, esi
jne 0x44bf4a
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Success
jmp 0x44bf5b
cmp edi, 5
jne 0x44bf69
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_services_to_register
call fcn.004247ec
call fcn.0044574c
pop ecx
pop ecx
jmp 0x44bfb1
lea eax, [esp + 0x258]
push edi
push eax
call fcn.004749f0
add esp, 4
mov dword [esp + 0x3748], 0x174
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Failed_registering_services:__s
push ecx
call fcn.0046da40
add esp, 0xc
call fcn.0044574c
pop ecx
pop ecx
mov ecx, dword [esp + 0x254]
add ecx, 0xfffffff0
call fcn.0042201a
push edi
jmp 0x4473e2
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.SvcStart
call fcn.004247ec
call fcn.00444ee6
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
mov edi, 0x52cf50
push edi
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x44c000
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
mov ecx, edi
call fcn.00424302
push dword [0x5294a0]
mov edi, eax
cmp edi, esi
je 0x44bf3c
cmp edi, 5
jne 0x44c02d
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_services_to_start
jmp 0x44bf5b
lea eax, [esp + 0x298]
push edi
push eax
call fcn.004749f0
add esp, 4
mov dword [esp + 0x3748], 0x175
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Failed_starting_services:__s
push ecx
call fcn.0046da40
add esp, 0xc
call fcn.0044574c
pop ecx
pop ecx
mov ecx, dword [esp + 0x294]
jmp 0x44bfa9
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.SvcRegisterStart
call fcn.004247ec
call fcn.00444ee6
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
mov edi, 0x52cf50
push edi
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x44c0bb
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
mov ecx, edi
call fcn.0042af6b
mov ebx, eax
cmp ebx, esi
jne 0x44c0da
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44bf11
call fcn.00478f10
push dword [0x5294a0]
push ebx
push edi
call fcn.00423ab0
add esp, 0xc
mov ebx, str.Failed_registering_services:__s
cmp eax, 5
jne 0x44c119
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_services_to_register
call fcn.004247ec
call fcn.0044574c
pop ecx
pop ecx
jmp 0x44c172
cmp eax, esi
je 0x44c172
push dword [0x5294a0]
push eax
lea eax, [esp + 0x264]
push eax
call fcn.004749f0
add esp, 4
mov dword [esp + 0x3748], 0x176
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push ebx
push ecx
call fcn.0046da40
add esp, 0xc
call fcn.0044574c
pop ecx
pop ecx
mov dword [esp + 0x3740], 4
mov ecx, dword [esp + 0x25c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, edi
call fcn.00424302
push dword [0x5294a0]
mov edi, eax
cmp edi, esi
je 0x44bf3c
cmp edi, 5
je 0x44bf4f
lea eax, [esp + 0x2b8]
push edi
push eax
call fcn.004749f0
add esp, 4
mov dword [esp + 0x3748], 0x177
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push ebx
push ecx
call fcn.0046da40
add esp, 0xc
call fcn.0044574c
pop ecx
pop ecx
mov ecx, dword [esp + 0x2b4]
jmp 0x44bfa9
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.SvcStop
call fcn.004247ec
call fcn.00444ee6
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
mov edi, 0x52cf50
push edi
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x44c21c
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
push esi
mov ecx, edi
call fcn.00423ea2
mov edi, eax
pop ecx
push dword [0x5294a0]
cmp edi, esi
je 0x44bf3c
cmp edi, 5
jne 0x44c24b
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_services_to_stop
jmp 0x44bf5b
lea eax, [esp + 0x268]
push edi
push eax
call fcn.004749f0
add esp, 4
mov dword [esp + 0x3748], 0x178
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Failed_stopping_services:__s
push ecx
call fcn.0046da40
add esp, 0xc
call fcn.0044574c
pop ecx
pop ecx
mov ecx, dword [esp + 0x264]
jmp 0x44bfa9
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.SvcRemove
call fcn.004247ec
call fcn.00444ee6
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
mov edi, 0x52cf50
push edi
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x44c2d9
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
push 1
mov ecx, edi
call fcn.00423ea2
mov edi, eax
pop ecx
push dword [0x5294a0]
cmp edi, esi
je 0x44bf3c
cmp edi, 5
jne 0x44c309
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_services_to_remove
jmp 0x44bf5b
lea eax, [esp + 0x1f4]
push edi
push eax
call fcn.004749f0
add esp, 4
mov dword [esp + 0x3748], 0x179
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Failed_removing_services:__s
push ecx
call fcn.0046da40
add esp, 0xc
call fcn.0044574c
pop ecx
pop ecx
mov ecx, dword [esp + 0x1f0]
jmp 0x44bfa9
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.ScmDirectInit
call fcn.004247ec
call fcn.00444ee6
mov dword [esp], 0x4ff4e8
call fcn.004bba40
mov edx, dword [esp + 0x28]
pop ecx
mov ecx, dword [esp + 0x2c]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x204]
call fcn.004247ec
push ecx
mov dword [esp + 0x3744], 0x17a
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
mov ebx, 0x52cf50
push ebx
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x44c3cb
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
push ecx
lea eax, [esp + 0x204]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
mov edi, 0x52cfe8
call fcn.004247d7
call fcn.0042a9a3
pop ecx
mov edi, ebx
call fcn.004246e4
jmp 0x4473e1
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.RepoSync
call fcn.004247ec
call fcn.00444ee6
mov eax, dword [esp + 0x30]
pop ecx
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x16c]
call fcn.004247ec
lea eax, [esp + 0x4b4]
push eax
mov dword [esp + 0x3744], 0x17b
call fcn.00426eaa
lea eax, [esp + 0x49c]
push eax
mov byte [esp + 0x3744], 0x7c
call fcn.00426eaa
lea eax, [esp + 0x4cc]
push eax
mov byte [esp + 0x3744], 0x7d
call fcn.00426eaa
push esi
lea eax, [esp + 0x4d0]
push eax
lea eax, [esp + 0x4a4]
push eax
lea eax, [esp + 0x4c0]
push eax
push ecx
mov byte [esp + 0x3754], 0x7e
lea eax, [esp + 0x17c]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d7
push ecx
mov byte [esp + 0x3758], 0x7f
lea eax, [esp + 0x180]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d7
mov byte [esp + 0x3758], 0x7e
call fcn.0043c39a
add esp, 0x18
push eax
jmp 0x4473e2
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.MergeRegistry
call fcn.004247ec
call fcn.00444ee6
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
mov edi, 0x52cf50
push edi
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x44c517
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
push edi
call fcn.0043d695
pop ecx
mov edi, eax
lea eax, [esp + 0x208]
push edi
push eax
call fcn.004749f0
add esp, 4
mov ecx, esp
mov dword [esp + 0x3744], 0x180
mov dword [esp + 0x14], esp
push dword [eax]
push edi
push str.Loader_MergeRegistry___d__s_
push ecx
call fcn.0046da40
add esp, 0x10
call fcn.00444eb6
pop ecx
mov dword [esp + 0x3740], 4
mov ecx, dword [esp + 0x208]
add ecx, 0xfffffff0
call fcn.0042201a
push dword [0x5294a0]
cmp edi, esi
je 0x44bf3c
lea eax, [esp + 0x214]
push edi
push eax
call fcn.004749f0
add esp, 4
mov dword [esp + 0x3748], 0x181
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Failed:__s
push ecx
call fcn.0046da40
add esp, 0xc
call fcn.0044574c
pop ecx
pop ecx
mov ecx, dword [esp + 0x210]
jmp 0x44bfa9
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.OpenFile
call fcn.004247ec
call fcn.00444ee6
mov eax, dword [esp + 0x30]
pop ecx
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x128]
call fcn.004247ec
push ecx
mov dword [esp + 0x3744], 0x182
lea eax, [esp + 0x128]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x21c]
push eax
call fcn.0046dad0
pop ecx
pop ecx
mov edi, eax
mov byte [esp + 0x3740], 0x83
call fcn.0042e551
push eax
lea ecx, [esp + 0x24]
call fcn.004247d7
mov byte [esp + 0x3740], 0x85
mov ecx, dword [esp + 0x218]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], esi
jne 0x44c673
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.File_has_no_extension
jmp 0x4473d7
lea ebx, [esp + 0x20]
call fcn.0044e8b8
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
push 0x52cf50
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x44c6af
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
xor esi, esi
mov dword [esp + 0x148], esi
push 0x3b
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x52d024
lea edi, [esp + 0x154]
call fcn.004247d7
lea eax, [esp + 0x98]
push eax
call fcn.00471640
add esp, 0xc
or ebx, 0xffffffff
mov byte [esp + 0x3740], 0x86
cmp dword [esp + 0x148], ebx
je 0x44c868
mov eax, dword [esp + 0x90]
cmp dword [eax - 0xc], esi
jne 0x44c718
mov byte [esp + 0x3740], 0x85
lea ecx, [eax - 0x10]
call fcn.0042201a
jmp 0x44c6b8
push 0x3e
push ecx
lea eax, [esp + 0x98]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
mov dword [esp + 0xac], esi
lea edi, [esp + 0xac]
call fcn.004247d7
lea eax, [esp + 0xd8]
push eax
call fcn.00471640
add esp, 0xc
mov byte [esp + 0x3740], 0x87
cmp dword [esp + 0xa0], ebx
je 0x44c7a3
push 0x3e
push ecx
lea eax, [esp + 0x98]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x124]
push eax
call fcn.00471640
add esp, 0xc
mov byte [esp + 0x3740], 0x88
cmp dword [esp + 0xa0], ebx
jne 0x44c7c9
mov ecx, dword [esp + 0x11c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0xd0]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3740], 0x85
mov ecx, dword [esp + 0x90]
add ecx, 0xfffffff0
jmp 0x44c711
mov dword [esp + 0x160], esi
push 0x2c
push ecx
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
lea edi, [esp + 0x16c]
call fcn.004247d7
lea eax, [esp + 0xd0]
push eax
call fcn.00471640
add esp, 0xc
mov byte [esp + 0x3740], 0x89
cmp dword [esp + 0x160], ebx
je 0x44c854
mov eax, dword [esp + 0xc8]
cmp dword [eax - 0xc], esi
jne 0x44c82c
mov byte [esp + 0x3740], 0x88
lea ecx, [eax - 0x10]
call fcn.0042201a
jmp 0x44c7d0
push dword [esp + 0x20]
lea eax, [esp + 0xcc]
call fcn.0042486f
test eax, eax
je 0x44c89a
mov byte [esp + 0x3740], 0x88
mov ecx, dword [esp + 0xc8]
add ecx, 0xfffffff0
jmp 0x44c825
mov ecx, dword [esp + 0xc8]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x44c794
mov byte [esp + 0x3740], 0x85
mov ecx, dword [esp + 0x90]
add ecx, 0xfffffff0
call fcn.0042201a
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x28]
push str.Application_does_not_handle_this_type_of_files:__s
jmp 0x447568
lea eax, [esp + 0x11c]
push eax
lea ecx, [esp + 0x4c]
call fcn.004247d7
mov byte [esp + 0x3740], 0x8a
push dword [esp + 0x124]
lea eax, [esp + 0x4c]
push 0x4fb9fc
push eax
call fcn.0042b528
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [esp + 0x4c]
push str.OpenFile:_executing:__s
push eax
call fcn.0046da40
add esp, 0xc
call fcn.00444eb6
pop ecx
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
push dword [esp + 0x48]
lea eax, [esp + 0x224]
push str._exec__s
push eax
call fcn.0046da40
mov eax, dword [eax]
add esp, 0xc
push esi
push esi
push eax
push dword [esp + 0x24]
push esi
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [esp + 0x220]
xor ebx, ebx
cmp eax, 0x20
setg bl
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x228]
push ebx
push eax
call fcn.00474ad0
pop ecx
pop ecx
mov edi, eax
mov byte [esp + 0x3740], 0x8b
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
push dword [edi]
push str.OpenFile:_bExecOK_s__LE_d
push ecx
call fcn.0046da40
add esp, 0x10
call fcn.00444eb6
pop ecx
mov ecx, dword [esp + 0x228]
add ecx, 0xfffffff0
call fcn.0042201a
test ebx, ebx
jne 0x44855e
call esi
jmp 0x44c4c8
push str.Cameyo.exe__UpgradePkg_
call fcn.004247ec
call fcn.00444ee6
pop ecx
lea ecx, [esp + 0xe4]
call fcn.00422487
mov byte [esp + 0x3740], 0x8e
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4]
lea ecx, [esp + 0x104]
call fcn.004247ec
push ecx
mov byte [esp + 0x3744], 0x8f
lea eax, [esp + 0x104]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
call fcn.004700f0
pop ecx
cmp eax, esi
jne 0x44ca0d
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x108]
push str._s_not_found
jmp 0x447568
push esi
lea eax, [esp + 0xe8]
push eax
push ecx
lea eax, [esp + 0x10c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
push ecx
mov byte [esp + 0x3750], 0x90
mov eax, esp
mov dword [esp + 0x24], esp
push eax
call fcn.0046ca80
pop ecx
mov byte [esp + 0x3750], 0x8f
call fcn.00442388
add esp, 0x10
push dword [0x5294a0]
cmp eax, esi
jne 0x44ca72
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xec]
push 0x4fda94
jmp 0x448de3
push eax
lea eax, [esp + 0x318]
push eax
call fcn.004749f0
add esp, 4
mov byte [esp + 0x3748], 0x91
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xec]
push dword [eax]
push str._s:__s
push ecx
jmp 0x44a7b3
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.AuthCheck
call fcn.004247ec
call fcn.00444ee6
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
mov esi, 0x52cf50
push esi
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x44caee
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
call fcn.00433621
xor edi, edi
mov dword [esp + 0x1c], eax
cmp eax, edi
je 0x44cb9e
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push str._AuthCheck:Force
push dword [eax + ecx*4]
call fcn.004bb834
pop ecx
pop ecx
lea eax, [esp + 0x230]
push eax
push ecx
mov dword [esp + 0x18], esp
mov ebx, esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.AuthToken.dat
mov dword [esp + 0x240], edi
call fcn.004247ec
push ebx
mov ecx, edi
call fcn.0047ec10
pop ecx
pop ecx
mov ecx, dword [esp + 0x24]
mov edx, esi
call fcn.00432d38
push dword [0x5294a0]
mov esi, eax
push ecx
mov dword [esp + 0x18], esp
test esi, esi
je 0x44cb73
mov ecx, esp
push str.Allowed_to_run_this_package
call fcn.004247ec
jmp 0x44cb88
mov eax, esp
push 0x52d030
push str.Denied:_n
push eax
call fcn.00424a90
add esp, 0xc
call fcn.0044574c
neg esi
sbb esi, esi
pop ecx
and esi, 0xffffffef
pop ecx
add esi, 0x11
jmp 0x4473e1
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_authentication_server_specified_in_this_package
jmp 0x4473d7
push str.Vintegrate:
lea ecx, [esp + 0x114]
call fcn.004247ec
mov dword [esp + 0x3740], 0x154
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
lea edi, [eax + ecx*4]
push str._VintegrateRecursive
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44cc0d
push 0x4fee70
call fcn.004bba40
pop ecx
push eax
push str._VintegrateRecursive:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
jne 0x44cc1e
push str.VintegrateRecursive:
lea ecx, [esp + 0x114]
call fcn.00424845
push str._Windows_Explorer.exe
lea ecx, [esp + 0xec]
call fcn.004247ec
mov byte [esp + 0x3740], 0x55
mov edi, dword [edi]
push 0x3a
push edi
call fcn.004bc598
pop ecx
pop ecx
cmp eax, esi
je 0x44cc57
add eax, 2
push eax
lea ecx, [esp + 0xec]
call fcn.00424845
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x1390]
push eax
call fcn.00484a40
push 0xffffffffffffffff
mov byte [esp + 0x3744], 0x56
push dword [esp + 0x44]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov eax, esp
mov byte [esp + 0x3750], 0x57
mov dword [esp + 0x24], esp
lea ecx, [esp + 0xf8]
push ecx
lea ecx, [esp + 0x124]
push ecx
push eax
call fcn.0042c64c
add esp, 8
mov byte [esp + 0x3754], 0x58
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d7
push esi
push ecx
mov byte [esp + 0x375c], 0x59
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x13a0]
push eax
mov byte [esp + 0x3760], 0x56
call fcn.00438170
add esp, 0x20
lea eax, [esp + 0x1384]
mov byte [esp + 0x3740], 0x55
call fcn.0042795c
mov ecx, dword [esp + 0xe8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x110]
jmp 0x44e6fe
lea ecx, [esp + 0x20]
call fcn.00422487
lea ecx, [esp + 0xf0]
mov dword [esp + 0x3740], 0x105
call fcn.00422487
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x68]
mov byte [esp + 0x3744], 6
call fcn.004247d7
mov byte [esp + 0x3740], 7
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x50], ecx
jle 0x44cd90
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x68]
call fcn.00424845
push 1
push esi
push ecx
lea eax, [esp + 0x70]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xdf0]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 8
push dword [0x5294a0]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xdf0]
push eax
call fcn.004457c6
add esp, 0x10
cmp dword [esp + 0xe6c], esi
jne 0x44cdfc
push str.FAILED_LOADING_CONTAINERS__n
lea ebx, [esp + 0x24]
call fcn.004277b3
pop ecx
xor esi, esi
lea eax, [esp + 0xf0]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Main
call fcn.004247ec
push 3
lea edi, [esp + 0xdf0]
call fcn.00486c90
mov eax, dword [esp + 0xf0]
cmp dword [eax - 0xc], esi
jne 0x44ce3d
push str.Cannot_obtain_INI_info_from_resource__n
lea ecx, [esp + 0x24]
call fcn.0042bd32
lea eax, [esp + 0xf0]
push eax
lea ecx, [esp + 0x24]
call fcn.0042534e
push esi
push 0x4f083c
push dword [esp + 0x28]
jmp 0x449727
push str._SaveProperties_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea ecx, [esp + 0x28]
call fcn.00422487
mov byte [esp + 0x3740], 0xf8
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push str._SaveAllProperties
push dword [eax + ecx*4]
call fcn.004bb834
mov edi, eax
mov eax, dword [esp + 0x30]
neg edi
sbb edi, edi
pop ecx
inc edi
pop ecx
cmp dword [eax - 0xc], esi
jne 0x44cf0b
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..xml
call fcn.004247ec
push ecx
mov byte [esp + 0x3748], 0xf9
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x240]
push eax
mov byte [esp + 0x374c], 0xf8
call fcn.0046dc00
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x3744], 0xfa
call fcn.00424830
mov byte [esp + 0x3740], 0xf8
mov ecx, dword [esp + 0x238]
add ecx, 0xfffffff0
call fcn.0042201a
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xb20]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0xfb
push dword [0x5294a0]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xb20]
push eax
call fcn.004457c6
add esp, 0x10
cmp dword [esp + 0xb9c], esi
jne 0x44cf78
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44980d
sub esp, 0x90
mov eax, esp
mov dword [esp + 0xa0], esp
lea ecx, [esp + 0xba4]
push ecx
push eax
call fcn.0044e790
push edi
push ecx
mov byte [esp + 0x37d8], 0xfc
lea eax, [esp + 0xe4]
mov ecx, esp
mov dword [esp + 0xac], esp
push eax
call fcn.004247d7
push ecx
mov byte [esp + 0x37dc], 0xfd
lea eax, [esp + 0xc4]
mov ecx, esp
mov dword [esp + 0xd4], esp
push eax
call fcn.004247d7
mov byte [esp + 0x37dc], 0xfb
call fcn.0042b19f
add esp, 0x9c
cmp eax, esi
jne 0x44d006
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x30]
push str.Cannot_save_into:__s
jmp 0x447568
lea eax, [esp + 0xb14]
call fcn.00485920
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x30]
push str.Properties_exported_to:_n_s
jmp 0x448de3
lea eax, [esp + 0x20]
push eax
call fcn.0046cb70
mov byte [esp + 0x3744], 0xa7
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
lea edi, [eax + ecx*4]
mov dword [esp], 0x4fe080
call fcn.004bba40
pop ecx
push eax
push str._CreateShortcuts:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
jne 0x44d08c
push dword [edi]
lea ecx, [esp + 0x24]
call fcn.00424845
push 0x4fe080
call fcn.004bba40
pop ecx
push esi
lea ecx, [esp + 0x24]
push ecx
call fcn.00424883
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
push 0x52cf50
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x44d0bf
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x14b0]
push eax
call fcn.00484a40
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x374c], 0xa8
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0xa9
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3754], 0xaa
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247ec
push 2
push ecx
mov byte [esp + 0x375c], 0xab
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x14c0]
push eax
mov byte [esp + 0x3760], 0xa8
call fcn.00438170
add esp, 0x20
push 0x52cf60
lea ecx, [esp + 0x68]
call fcn.004247d7
lea eax, [esp + 0x6c]
push eax
push 0x4f1fd8
lea eax, [esp + 0x84]
mov byte [esp + 0x3748], 0xac
push eax
lea ecx, [esp + 0x70]
mov dword [esp + 0x78], esi
call fcn.0042b6a2
jmp 0x44d67d
lea ecx, [esp + 0x28]
call fcn.00422487
lea ecx, [esp + 0x24]
call fcn.00422487
lea ecx, [esp + 0x2c]
call fcn.00422487
lea ecx, [esp + 0x40]
call fcn.00422487
push 0x3e
push ecx
mov byte [esp + 0x3748], 0xb1
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
mov dword [esp + 0x94], esi
lea edi, [esp + 0x94]
call fcn.004247d7
lea eax, [esp + 0x248]
push eax
call fcn.00471640
add esp, 0xc
mov byte [esp + 0x3740], 0xb2
call fcn.00424932
push eax
lea ecx, [esp + 0x2c]
call fcn.00424830
mov byte [esp + 0x3740], 0xb1
mov ecx, dword [esp + 0x240]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0x88], 0xffffffff
je 0x44d61e
push 0x3e
push ecx
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x250]
push eax
call fcn.00471640
add esp, 0xc
mov byte [esp + 0x3740], 0xb3
call fcn.00424932
push eax
lea ecx, [esp + 0x28]
call fcn.00424830
mov byte [esp + 0x3740], 0xb1
mov ecx, dword [esp + 0x248]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0x88], 0xffffffff
je 0x44d61e
push 0x3e
push ecx
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x184]
push eax
call fcn.00471640
add esp, 0xc
mov byte [esp + 0x3740], 0xb4
call fcn.00424932
push eax
lea ecx, [esp + 0x30]
call fcn.00424830
mov byte [esp + 0x3740], 0xb1
mov ecx, dword [esp + 0x17c]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0x88], 0xffffffff
jne 0x44d2f7
push ebx
lea ecx, [esp + 0x30]
call fcn.00424845
jmp 0x44d352
push 0x3e
push ecx
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
lea edi, [esp + 0x94]
call fcn.004247d7
lea eax, [esp + 0x188]
push eax
call fcn.00471640
add esp, 0xc
mov byte [esp + 0x3740], 0xb5
call fcn.00424932
push eax
lea ecx, [esp + 0x44]
call fcn.00424830
mov byte [esp + 0x3740], 0xb1
mov ecx, dword [esp + 0x180]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0x88], 0xffffffff
jne 0x44d366
push ebx
lea ecx, [esp + 0x44]
call fcn.00424845
push dword [esp + 0x28]
lea eax, [esp + 0xdc]
push str._exec___s_
push eax
call fcn.0046da40
add esp, 0xc
mov byte [esp + 0x3740], 0xb6
mov eax, dword [esp + 0x24]
cmp dword [eax - 0xc], esi
je 0x44d3b2
push 0x4f41e4
lea ecx, [esp + 0xdc]
call fcn.0042b513
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0xdc]
call fcn.0042485a
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
push ecx
mov edi, esp
mov byte [esp + 0x3748], 0xb7
mov dword [esp + 0x1c], esp
push 0x5c
push ecx
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d7
push edi
call fcn.0046dd70
lea eax, [esp + 0x140]
add esp, 0xc
push eax
mov byte [esp + 0x374c], 0xb6
call fcn.0042ab2a
add esp, 0xc
push esi
push esi
push esi
push ecx
mov byte [esp + 0x3750], 0xb8
lea eax, [esp + 0x13c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x118]
push esi
push eax
call fcn.0047e910
add esp, 0x14
mov byte [esp + 0x3744], 0xb9
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x4ebfa0
call fcn.004247ec
push ecx
mov eax, esp
mov byte [esp + 0x3748], 0xba
mov dword [esp + 0x1c], esp
push str..lnk
lea ecx, [esp + 0x38]
push ecx
push eax
call fcn.00424a3b
add esp, 8
mov byte [esp + 0x374c], 0xbb
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d7
lea edi, [esp + 0x194]
mov byte [esp + 0x374c], 0xb9
call fcn.0046d300
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x188]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
lea eax, [esp + 0x10c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
call fcn.004700f0
pop ecx
cmp eax, esi
je 0x44d4dd
lea eax, [esp + 0x108]
jmp 0x44d4f7
push esi
lea ecx, [esp + 0x194]
call fcn.004247ec
mov byte [esp + 0x3740], 0xbc
or dword [esp + 0x44], 2
mov eax, dword [eax]
push esi
push ecx
mov dword [esp + 0x24], eax
lea eax, [esp + 0x48]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d7
push ecx
mov dword [esp + 0x374c], 0xbd
lea eax, [esp + 0xe4]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d7
push ecx
mov byte [esp + 0x3750], 0xbe
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x48], esp
push eax
call fcn.004247d7
push ecx
mov byte [esp + 0x3754], 0xbf
mov dword [esp + 0x8c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x90], esp
push 0x4ebfa0
call fcn.004247ec
push ecx
mov eax, esp
mov byte [esp + 0x375c], 0xc0
mov dword [esp + 0x50], esp
push str..lnk
lea ecx, [esp + 0x4c]
push ecx
push eax
call fcn.00424a3b
add esp, 8
mov byte [esp + 0x3760], 0xc1
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x68], esp
push eax
call fcn.004247d7
mov byte [esp + 0x3760], 0xbf
call fcn.0046d300
mov ecx, dword [esp + 0x3c]
add esp, 0xc
mov byte [esp + 0x3754], 0xbc
call fcn.00498930
add esp, 0x14
mov dword [esp + 0x3740], 0xb9
test byte [esp + 0x44], 2
je 0x44d5f1
mov ecx, dword [esp + 0x190]
and dword [esp + 0x44], 0xfffffffd
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x108]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x12c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0xd8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x40]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x2c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x28]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3740], 0xac
mov ecx, dword [esp + 0x7c]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x6c]
push eax
push 0x4f1fd8
lea eax, [esp + 0x84]
push eax
lea ecx, [esp + 0x70]
call fcn.0042b6a2
cmp dword [esp + 0x6c], 0xffffffff
jne 0x44d18f
mov byte [esp + 0x3740], 0xac
mov ecx, dword [esp + 0x7c]
add ecx, 0xfffffff0
call fcn.0042201a
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52cf5c]
push str.Shortcuts_created_for__s.
jmp 0x448de3
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
call fcn.004247d7
mov byte [esp + 0x3740], 0x98
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
lea edi, [eax + ecx*4]
push str._FullIntegrate
push dword [edi]
mov dword [esp + 0x50], edi
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x44d87a
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
push 0x52cf50
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x44d727
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
push dword [esp + 0x54]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x52cf5c
call fcn.004247d7
lea eax, [esp + 0x100]
push eax
call fcn.00442332
add esp, 8
mov byte [esp + 0x3744], 0x99
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x4ebfa0
call fcn.004247ec
push ecx
mov byte [esp + 0x3748], 0x9a
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x52cf5c]
push str._s.host.exe
push eax
call fcn.0046da40
add esp, 8
mov byte [esp + 0x374c], 0x9b
lea eax, [esp + 0x104]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d7
lea edi, [esp + 0x1a4]
mov byte [esp + 0x374c], 0x99
call fcn.0046d300
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x3744], 0x9c
call fcn.00424830
mov byte [esp + 0x3740], 0x99
mov ecx, dword [esp + 0x198]
add ecx, 0xfffffff0
call fcn.0042201a
mov esi, dword [esp + 0xf8]
call fcn.004701d0
test eax, eax
jne 0x44d809
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_create_virtual_repository
jmp 0x4473d7
lea eax, [esp + 0x1a0]
push eax
call fcn.0046ca80
mov eax, dword [eax]
pop ecx
push 0
push dword [esp + 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [esp + 0x1a0]
neg eax
sbb al, al
inc al
add ecx, 0xfffffff0
mov byte [esp + 0x33], al
call fcn.0042201a
cmp byte [esp + 0x33], 0
je 0x44d85d
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_copy_executable_to_repository
jmp 0x4473d7
mov byte [esp + 0x3740], 0x98
mov ecx, dword [esp + 0xf8]
add ecx, 0xfffffff0
call fcn.0042201a
mov edi, dword [esp + 0x48]
xor esi, esi
push 1
push esi
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xbb0]
push eax
call fcn.00484a40
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x374c], 0x9d
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x9e
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3754], 0x9f
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247ec
push 2
push ecx
mov byte [esp + 0x375c], 0xa0
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
lea eax, [esp + 0xbc0]
push eax
mov byte [esp + 0x3760], 0x9d
call fcn.00438170
push str._Integrate:once
push dword [edi]
call fcn.004bb834
add esp, 0x28
test eax, eax
jne 0x44da5a
push ebx
lea ecx, [esp + 0xa0]
call fcn.004247ec
push esi
push esi
push esi
push ecx
mov byte [esp + 0x3750], 0xa1
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Registered
lea edi, [esp + 0xb0]
call fcn.004247ec
mov byte [esp + 0x3750], 0xa2
push dword [0x52cf5c]
lea eax, [esp + 0x1bc]
push str.SoftwareVOS_s
push eax
call fcn.0046da40
add esp, 8
mov byte [esp + 0x3754], 0xa3
or dword [esp + 0x58], 1
mov ecx, esp
mov dword [esp + 0x28], esp
push str.Integrated
push eax
push ecx
call fcn.00424a3b
add esp, 0xc
mov dword [esp + 0x3754], 0xa4
call fcn.0047e010
push eax
mov byte [esp + 0x3758], 0xa5
call fcn.0046e520
add esp, 0x18
cmp eax, esi
je 0x44d9ce
mov eax, dword [esp + 0x9c]
cmp dword [eax - 0xc], esi
je 0x44d9ce
mov bl, 1
jmp 0x44d9d0
xor bl, bl
mov dword [esp + 0x3740], 0xa1
test byte [esp + 0x44], 1
je 0x44d9f1
mov ecx, dword [esp + 0x1a8]
add ecx, 0xfffffff0
call fcn.0042201a
test bl, bl
je 0x44da43
push str.Success
lea eax, [esp + 0xa0]
call fcn.0042486f
push ecx
test eax, eax
mov dword [esp + 0x14], esp
mov eax, esp
jne 0x44da28
push str._Integrate:once:_already_registered_successfully._Quitting.
push eax
call fcn.0046da40
pop ecx
pop ecx
call fcn.00444eb6
jmp 0x448df2
push dword [esp + 0xa0]
push str._Integrate:once:_already_attempted_registration_before__but_failed:__s._Trying_integration_again.
push eax
call fcn.0046da40
add esp, 0xc
call fcn.00444eb6
pop ecx
mov byte [esp + 0x3740], 0x9d
mov ecx, dword [esp + 0x9c]
add ecx, 0xfffffff0
call fcn.0042201a
xor eax, eax
cmp dword [esp + 0x54], esi
push esi
setne al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.AllUsers
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0xa6
mov eax, esp
mov dword [esp + 0x24], esp
push dword [0x52cf5c]
push str.SoftwareVOS_s
push eax
call fcn.0046da40
add esp, 0xc
push SysReAllocStringLen
mov byte [esp + 0x3754], 0x9d
call fcn.0046ea20
add esp, 0x14
push dword [esp + 0x54]
lea edx, [esp + 0xba8]
mov ecx, 0x52cf50
call fcn.0043c07c
pop ecx
lea eax, [esp + 0xba4]
call fcn.00485920
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52cf5c]
push str._s_is_now_integrated_into_your_system.
jmp 0x448de3
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.0046c860
test eax, eax
jne 0x44db67
mov eax, dword [esp + 0x2c]
push esi
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push dword [eax]
call fcn.004247ec
push edi
call fcn.00473440
add esp, 4
mov byte [esp + 0x374c], 0x3f
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d7
mov ecx, esi
xor edx, edx
mov byte [esp + 0x374c], 4
call fcn.0046c650
add esp, 0xc
cmp eax, esi
jne 0x4473e1
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x4473d2
call fcn.0046ca30
test eax, eax
jne 0x44db82
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x446355
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
lea edi, [eax + ecx*4]
push 0x4fd5a4
mov dword [esp + 0x4c], edi
call fcn.004bba40
pop ecx
push eax
push str._Patch
push dword [edi]
call fcn.004be056
add esp, 0xc
mov edi, eax
neg edi
lea eax, [esp + 0x18]
sbb edi, edi
push eax
lea ecx, [esp + 0x68]
inc edi
call fcn.004247d7
push ecx
mov byte [esp + 0x3744], 0x40
mov ecx, esp
mov dword [esp + 0x14], esp
push str..new.exe
call fcn.004247ec
push ecx
mov byte [esp + 0x3748], 0x41
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x94]
push eax
mov byte [esp + 0x374c], 0x40
call fcn.0046dc00
add esp, 0xc
mov byte [esp + 0x3740], 0x42
push dword [esp + 0x8c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [esp + 0x48]
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push dword [eax]
call fcn.004247ec
lea eax, [esp + 0xe4]
push eax
call fcn.00473440
pop ecx
pop ecx
push 1
push esi
push ecx
mov byte [esp + 0x374c], 0x43
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x610]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0x44
push dword [0x5294a0]
cmp dword [esp + 0x690], esi
jne 0x44dc96
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x20]
push str.Cannot_load_newly_created_package__s
jmp 0x447568
push 1
push ecx
lea eax, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x610]
push eax
call fcn.004457c6
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x45
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ec
push ecx
mov byte [esp + 0x3754], 0x46
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d7
push 2
push ecx
mov byte [esp + 0x375c], 0x47
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x620]
push eax
mov byte [esp + 0x3760], 0x44
call fcn.00438170
push dword [0x52cf5c]
lea eax, [esp + 0xcc]
push dword [0x52cfac]
push str._sAppVirtDll__s.dll
push eax
call fcn.0046da40
add esp, 0x2c
mov byte [esp + 0x3744], 0x48
lea eax, [esp + 0xac]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
call fcn.00426d68
pop ecx
cmp eax, esi
je 0x44ddcf
push dword [0x5294a0]
cmp eax, 0x11
jne 0x44dd91
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str.MsiTrackerStart:_Insufficient_permissions_
push eax
call fcn.0046da40
pop ecx
pop ecx
jmp 0x4473dc
cmp eax, 0x12
jne 0x44dda4
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str.MsiTrackerStart:_Cant_access_services.exe._32_64_bit_mismatch_
jmp 0x44dd84
push eax
lea eax, [esp + 0x31c]
push eax
call fcn.004749f0
add esp, 4
mov byte [esp + 0x3748], 0x49
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.MsiTrackerStart:_Failed:__s
jmp 0x447b95
push dword [esp + 0xe0]
lea eax, [esp + 0x1b4]
push str._exec__s
push eax
call fcn.0046da40
mov eax, dword [eax]
add esp, 0xc
push esi
push esi
push eax
push dword [esp + 0x24]
push esi
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [esp + 0x1b0]
xor ebx, ebx
cmp eax, 0x20
setg bl
add ecx, 0xfffffff0
call fcn.0042201a
cmp ebx, esi
je 0x44de61
cmp edi, esi
je 0x44de29
push 1
push 0x4ec4c8
push str.Installation_launched_in_virtual_mode..._nWhen_installation_is_done__click_OK_and_Cameyo_will_turn_it_into_a_virtual_package._nInstallation_will_not_truly_install_anything_on_your_hard_drive__it_is_simulated_.
jmp 0x44de34
push esi
push 0x4ec4c8
push str.When_installation_is_done__click_OK.
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
jne 0x44de61
push ecx
lea eax, [esp + 0xac]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
call fcn.00426def
pop ecx
push 0x14
jmp 0x4473e2
push ecx
lea eax, [esp + 0xac]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
call fcn.00426def
pop ecx
cmp eax, esi
je 0x44dedc
push dword [0x5294a0]
cmp eax, 0x11
jne 0x44de9b
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str.MsiTrackerStop:_Insufficient_permissions_
jmp 0x44dd84
cmp eax, 0x12
jne 0x44deb1
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str.MsiTrackerStop:_Cant_access_services.exe._32_64_bit_mismatch_
jmp 0x44dd84
push eax
lea eax, [esp + 0x308]
push eax
call fcn.004749f0
add esp, 4
mov byte [esp + 0x3748], 0x4a
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.MsiTrackerStop:_Failed:__s
jmp 0x447b95
cmp ebx, esi
jne 0x44defe
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xe8]
push str.Failed_executing__s
jmp 0x447568
mov ebx, dword [esp + 0x64]
cmp edi, esi
je 0x44dfc3
call fcn.0042fef2
push 0x407
mov edi, 0x52cf50
call fcn.0048b180
pop ecx
push esi
push dword [esp + 0x90]
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x8c]
jne 0x44df4b
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x447aaf
push dword [esp + 0x34]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d7
call fcn.0043fc47
pop ecx
pop ecx
mov dword [esp + 0x34], eax
cmp eax, esi
je 0x44dfb8
push dword [esp + 0x8c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esp + 0x34], 0x10
push dword [0x5294a0]
jne 0x44df91
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x447b62
push dword [esp + 0x38]
lea eax, [esp + 0x344]
push eax
call fcn.004749f0
add esp, 4
mov byte [esp + 0x3748], 0x4b
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x447b8e
push 0x404
call fcn.0048b180
pop ecx
lea eax, [esp + 0x604]
call fcn.00485920
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x94]
push 0x4fda94
push eax
call fcn.0046da40
add esp, 0xc
call fcn.0044574c
pop ecx
pop ecx
mov ecx, dword [esp + 0xa8]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x604]
mov byte [esp + 0x3740], 0x43
call fcn.0042795c
mov ecx, dword [esp + 0xe0]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x8c]
add ecx, 0xfffffff0
jmp 0x447b3a
lea ecx, [esp + 0x28]
call fcn.00422487
lea ecx, [esp + 0x54]
call fcn.00422487
mov byte [esp + 0x3740], 0x35
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
lea edi, [eax + ecx*4]
push str._CreateDiff
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x44e080
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
call fcn.00424830
jmp 0x44e09a
push 0x4fd560
call fcn.004bba40
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x2c]
call fcn.00424845
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..mod
call fcn.004247ec
push ecx
mov byte [esp + 0x3748], 0x36
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x1c0]
push eax
mov byte [esp + 0x374c], 0x35
call fcn.0046dc00
add esp, 0xc
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x3744], 0x37
call fcn.00424830
mov byte [esp + 0x3740], 0x35
mov ecx, dword [esp + 0x1b8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ebx, dword [esp + 0x54]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
call edi
push esi
push ebx
push dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x54]
jne 0x44e138
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x447aaf
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d7
call fcn.0043fc47
pop ecx
pop ecx
mov dword [esp + 0x64], eax
cmp eax, esi
jne 0x44e1af
push dword [0x5294a0]
lea eax, [esp + 0x58]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x1cc]
push eax
call fcn.0046dd70
add esp, 8
mov byte [esp + 0x3748], 0x38
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Successfully_repackaged_into:__s
push ecx
call fcn.0046da40
add esp, 0xc
call fcn.0044574c
pop ecx
pop ecx
mov ecx, dword [esp + 0x1c0]
jmp 0x44e383
push ebx
call edi
cmp dword [esp + 0x64], 0x10
push dword [0x5294a0]
jne 0x44e1cb
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x447b62
push dword [esp + 0x68]
lea eax, [esp + 0x340]
push eax
call fcn.004749f0
add esp, 4
mov byte [esp + 0x3748], 0x39
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x447b8e
lea ecx, [esp + 0x28]
call fcn.00422487
lea ecx, [esp + 0x54]
call fcn.00422487
mov byte [esp + 0x3740], 0x28
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
lea edi, [eax + ecx*4]
push str._LearnStreaming
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x44e239
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
call fcn.00424830
jmp 0x44e253
push 0x4fd33c
call fcn.004bba40
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x2c]
call fcn.00424845
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..new.exe
call fcn.004247ec
push ecx
mov byte [esp + 0x3748], 0x29
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x1d0]
push eax
mov byte [esp + 0x374c], 0x28
call fcn.0046dc00
add esp, 0xc
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x3744], 0x2a
call fcn.00424830
mov byte [esp + 0x3740], 0x28
mov ecx, dword [esp + 0x1c8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ebx, dword [esp + 0x54]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
call edi
push esi
push ebx
push dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x54]
jne 0x44e2f1
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x447aaf
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247d7
push ecx
mov byte [esp + 0x3748], 0x2b
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
mov byte [esp + 0x3748], 0x28
call fcn.004401de
pop ecx
pop ecx
mov dword [esp + 0x1c], eax
cmp eax, esi
jne 0x44e39c
push dword [0x5294a0]
lea eax, [esp + 0x58]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d7
lea eax, [esp + 0x1dc]
push eax
call fcn.0046dd70
add esp, 8
mov byte [esp + 0x3748], 0x2c
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Successfully_learned_streaming_into:__s
push ecx
call fcn.0046da40
add esp, 0xc
call fcn.0044574c
pop ecx
pop ecx
mov ecx, dword [esp + 0x1d0]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [ebx - 0x10]
call fcn.0042201a
mov ecx, dword [esp + 0x28]
jmp 0x44e6fe
push ebx
call edi
push dword [0x5294a0]
lea eax, [esp + 0x310]
push dword [esp + 0x20]
push eax
call fcn.004749f0
add esp, 4
mov byte [esp + 0x3748], 0x2d
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Could_not_learn_streaming:__s
jmp 0x447b95
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push str._RemoveSelf
push dword [eax + ecx*4]
call fcn.004bb834
mov ebx, eax
neg ebx
sbb ebx, ebx
add esp, 4
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
inc ebx
call fcn.004247d7
push 0x52cf50
call fcn.0042a24e
pop ecx
pop ecx
test al, al
jne 0x44e424
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44742b
mov eax, dword [0x52cfac]
cmp dword [eax - 0xc], esi
jne 0x44e440
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
jmp 0x44761a
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
mov edi, 0x52cfac
push edi
call fcn.004247d7
call fcn.004700f0
pop ecx
cmp eax, esi
jne 0x44e47f
cmp ebx, esi
je 0x44e46d
call fcn.00470c10
test eax, eax
jne 0x4473e1
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
jmp 0x447653
cmp dword [esp + 0x48], esi
je 0x44e4a6
push 3
push dword [0x52cf5c]
push str.Do_you_want_to_remove_the_application_and_all_of_its_settings__files_
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
je 0x44e4a6
push 0x14
pop esi
jmp 0x44758d
push esi
lea eax, [esp + 0x138]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.AllUsers
mov dword [esp + 0x144], esi
call fcn.004247ec
push ecx
mov byte [esp + 0x3750], 0x17
mov eax, esp
mov dword [esp + 0x24], esp
push dword [0x52cf5c]
push str.SoftwareVOS_s
push eax
call fcn.0046da40
add esp, 0xc
push SysReAllocStringLen
mov byte [esp + 0x3754], 4
call fcn.0046e7a0
add esp, 0x14
cmp eax, esi
je 0x44e557
cmp dword [esp + 0x134], esi
je 0x44e557
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.0046c860
test eax, eax
jne 0x44e53c
call fcn.0046c8b0
test eax, eax
jne 0x4473e1
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x4473d2
call fcn.0046ca30
test eax, eax
jne 0x44e557
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x446355
push 0x52cf50
call fcn.0043c200
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x52cf5c]
push str.Removing__s
push eax
call fcn.0046da40
add esp, 0xc
call fcn.00444ee6
pop ecx
lea ecx, [esp + 0x13c]
call fcn.00422487
push 0x4ebfa0
mov byte [esp + 0x3744], 0x18
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push 1
push 1
push 1
lea eax, [esp + 0x148]
push eax
push dword [0x5294a0]
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x52cfa8
call fcn.004247d7
push ecx
mov byte [esp + 0x375c], 0x19
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x52cfb8
call fcn.004247d7
push ecx
mov byte [esp + 0x3760], 0x1a
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x52cfb4
call fcn.004247d7
push ecx
mov byte [esp + 0x3764], 0x1b
mov ecx, esp
mov dword [esp + 0x40], esp
push edi
call fcn.004247d7
push ecx
mov byte [esp + 0x3768], 0x1c
mov ecx, esp
mov dword [esp + 0xa0], esp
push 0x52cf5c
call fcn.004247d7
mov byte [esp + 0x3768], 0x18
call fcn.00440b82
add esp, 0x24
mov ecx, esp
mov dword [esp + 0x14], esp
push edi
call fcn.004247d7
call fcn.00470130
pop ecx
cmp eax, esi
je 0x44e66b
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52cf5c]
push str.Base_dir_could_not_be_emptied_for__s
jmp 0x447568
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x52cf5c]
push str.SoftwareVOS_s
push eax
call fcn.0046da40
add esp, 0xc
mov edx, SysReAllocStringLen
call fcn.0046eb20
pop ecx
cmp eax, esi
je 0x44e6a7
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
jmp 0x447964
cmp ebx, esi
je 0x44e6b8
call fcn.00470c10
test eax, eax
jne 0x4473e1
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.__Removed_successfully
call fcn.004247ec
call fcn.00444ee6
pop ecx
push dword [0x5294a0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52cf5c]
push str.Application__s_removed_successfully
push eax
call fcn.0046da40
add esp, 0xc
call fcn.0044574c
pop ecx
pop ecx
mov ecx, dword [esp + 0x13c]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x44758d
cmp dword [0x52cbf0], esi
je 0x44e742
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x52cf98]
push str.CLoaderApp:_waiting_for_LoaderCanQuit__AutoUpdate_s_
push eax
call fcn.0046da40
add esp, 0xc
call fcn.00444eb6
pop ecx
push 0xffffffffffffffff
push dword [0x52cbf0]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.CLoaderApp:_done._Bye_
call fcn.004247ec
call fcn.00444eb6
mov eax, dword [0x5294b0]
pop ecx
cmp eax, 0xa2c2a
je 0x4473e1
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
push str.CLoaderApp:_ExecWait:_g_LoaderExitCode_d
push ecx
call fcn.0046da40
add esp, 0xc
call fcn.00444eb6
pop ecx
push dword [0x5294b0]
jmp 0x4473e2