Function at 0x44aecd
Capabilities:
Accept command line arguments
Check for sandbox username or hostname
Check for time delay via gettickcount
Check if file exists
Contain obfuscated stackstrings
Copy file
Create process on windows
Delete file
Get file attributes
Get hostname
Move file
Parse pe header
Print debug messages
Resolve function by parsing pe exports
Set current directory
Set environment variable
Set registry value
Terminate process
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4fe9f7
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x372c
call fcn.004d91c0
mov eax, dword [0x5470b0]
xor eax, esp
mov dword [esp + 0x3728], eax
push ebx
push esi
push edi
mov eax, dword [0x5470b0]
xor eax, esp
push eax
lea eax, [esp + 0x3740]
mov dword fs:[0], eax
lea eax, [esp + 0x2d8]
xor esi, esi
mov dword [esp + 0x44], esi
push eax
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x2dc], 8
mov dword [esp + 0x2e0], 0xff
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov ecx, dword [esp + 0x58]
call fcn.004cce65
mov ebx, 0x507cec
push ebx
lea ecx, [esp + 0x68]
call fcn.004247f5
push ebx
lea ecx, [esp + 0x60]
mov dword [esp + 0x374c], esi
call fcn.004247f5
push ebx
lea ecx, [esp + 0x78]
mov byte [esp + 0x374c], 1
call fcn.004247f5
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x374c], 2
call fcn.00474150
pop ecx
lea ecx, [esp + 0x4c]
call fcn.00422487
mov byte [esp + 0x3748], 4
mov edi, dword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea eax, [esp + 0x50]
push eax
mov dword [esp + 0x7c], esi
call edi
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x2d4]
push eax
mov dword [esp + 0x38], esi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x58], esi
mov dword [esp + 0x44], esi
call fcn.00474150
pop ecx
push eax
mov ecx, 0x54d570
mov byte [esp + 0x374c], 5
call fcn.00424839
mov byte [esp + 0x3748], 4
mov ecx, dword [esp + 0x2d4]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x2bc]
push eax
call fcn.00474150
pop ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x3748], 6
call edi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
mov eax, dword [esp + 0x28]
push dword [eax]
push str.Loader:__s__CmdLine_s
push ecx
call fcn.00475230
add esp, 0x10
call fcn.00449a8e
pop ecx
mov byte [esp + 0x3748], 4
mov ecx, dword [esp + 0x2bc]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str._CEK_
mov edi, 0x400
call fcn.004247f5
lea eax, [esp + 0x1e0]
push eax
mov ecx, edi
call fcn.0047b4f0
mov byte [esp + 0x3750], 7
mov eax, dword [eax]
mov eax, dword [eax - 0xc]
add esp, 4
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
push str.Loader:_CEK:_Len_d
push ecx
call fcn.00475230
add esp, 0xc
call fcn.00449a8e
pop ecx
mov byte [esp + 0x3748], 4
mov ecx, dword [esp + 0x1dc]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
push 1
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x54d180], eax
cmp dword [esp + 0x2c], esi
je 0x44c166
xor eax, eax
inc eax
cmp dword [esp + 0x50], eax
mov dword [esp + 0x24], eax
jle 0x44c166
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x2c]
push ecx
lea edi, [eax + ecx*4]
mov ecx, esp
mov dword [esp + 0x3c], esp
push dword [edi]
call fcn.004247f5
call fcn.00449abe
mov dword [esp], 0x5181a0
call fcn.004d1dc0
pop ecx
push eax
push str._ExeFile:
push dword [edi]
call fcn.004d4826
add esp, 0xc
test eax, eax
jne 0x44b143
push 0x5181a0
call fcn.004d1dc0
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x18]
jmp 0x44c14e
push str._Confirm
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
jne 0x44b162
mov dword [esp + 0x48], 1
jmp 0x44c154
push str._Quiet
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
jne 0x44b184
or dword [esp + 0x40], 2
mov dword [0x549380], esi
jmp 0x44c154
push str._AllUsers
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
jne 0x44b1d7
mov dword [esp + 0x54], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.00473f30
test eax, eax
je 0x44c289
call fcn.00474100
test eax, eax
jne 0x44c154
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Admin_rights_required
jmp 0x44c2a4
push str._ErrorsOnly
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
jne 0x44b1f8
mov dword [0x549380], 1
jmp 0x44c154
push str._Wait
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
jne 0x44b214
or dword [esp + 0x40], 1
jmp 0x44c154
push 0x51826c
call fcn.004d1dc0
pop ecx
push eax
push str._Password:
push dword [edi]
call fcn.004d4826
add esp, 0xc
test eax, eax
je 0x44c12f
push 0x518290
call fcn.004d1dc0
pop ecx
push eax
push str._Password
push dword [edi]
call fcn.004d4826
add esp, 0xc
test eax, eax
je 0x44c12f
push 0x5182cc
call fcn.004d1dc0
pop ecx
push eax
push str._Properties:
push dword [edi]
call fcn.004d4826
add esp, 0xc
test eax, eax
jne 0x44b5da
push str._Properties_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xf18]
push eax
call fcn.0048c620
mov byte [esp + 0x3748], 8
push dword [0x549380]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xf18]
push eax
call fcn.0044a39e
add esp, 0x10
lea eax, [esp + 0xf0c]
call fcn.0048d500
lea ecx, [esp + 0x28]
call fcn.00422487
lea ecx, [esp + 0x20]
call fcn.00422487
lea ecx, [esp + 0x6c]
call fcn.00422487
push 0x5182cc
mov byte [esp + 0x374c], 0xb
call fcn.004d1dc0
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x144]
call fcn.004247f5
lea eax, [esp + 0x2e0]
push eax
mov byte [esp + 0x374c], 0xc
call fcn.0043300d
mov byte [esp + 0x3748], 0xd
mov dword [esp + 0x150], esi
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 0x517ab0
lea edi, [esp + 0x158]
call fcn.004247f5
push ecx
mov byte [esp + 0x3750], 0xe
lea eax, [esp + 0x148]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x1ec]
push eax
mov byte [esp + 0x3754], 0xd
call fcn.00478f80
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x374c], 0xf
call fcn.00424839
mov byte [esp + 0x3748], 0xd
mov ecx, dword [esp + 0x1e4]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
push 0x3d
lea ecx, [esp + 0x30]
call fcn.0042944a
mov edi, eax
cmp edi, 0xffffffff
je 0x44b45b
push edi
lea eax, [esp + 0x1f0]
push eax
lea ecx, [esp + 0x30]
call fcn.004249e4
mov byte [esp + 0x3748], 0x10
call fcn.0042493b
push eax
lea ecx, [esp + 0x24]
call fcn.00424839
mov byte [esp + 0x3748], 0xd
mov ecx, dword [esp + 0x1ec]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], esi
je 0x44b45b
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x70]
call fcn.00424839
push esi
lea ecx, [esp + 0x70]
lea eax, [edi + 1]
push ecx
call fcn.0042488c
lea eax, [esp + 0x6c]
push eax
push ecx
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x2ec]
push eax
call fcn.0043305e
pop ecx
mov ecx, eax
call fcn.00424839
cmp dword [esp + 0x150], 0xffffffff
jne 0x44b34a
mov eax, dword [esp + 0x2f8]
mov eax, dword [eax]
lea edi, [esp + 0x2e0]
lea esi, [esp + 0x88]
call fcn.0042e244
jmp 0x44b549
lea esi, [esp + 0x88]
call fcn.0042de83
push eax
lea ecx, [esp + 0x108]
call fcn.004247e0
mov byte [esp + 0x3748], 0x11
call fcn.0042de83
add eax, 4
push eax
lea ecx, [esp + 0x20]
call fcn.004247e0
push str.Branding
lea eax, [esp + 0x108]
mov byte [esp + 0x374c], 0x12
call fcn.00424878
test eax, eax
je 0x44c2b5
lea edi, [esp + 0x104]
call fcn.0042dcb4
push dword [eax]
lea eax, [esp + 0x204]
push str.CAMEYO__s
push eax
call fcn.00475230
mov esi, dword [esp + 0x28]
mov eax, dword [eax]
add esp, 0xc
push esi
push eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov ecx, dword [esp + 0x200]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [esi - 0x10]
call fcn.0042201a
mov byte [esp + 0x3748], 0xd
mov ecx, dword [esp + 0x104]
add ecx, 0xfffffff0
call fcn.0042201a
lea esi, [esp + 0x88]
call fcn.004335d4
mov eax, dword [esp + 0x2f8]
lea edi, [esp + 0x2e0]
lea esi, [esp + 0xb0]
call fcn.0042e244
mov edi, esi
lea esi, [esp + 0x88]
call fcn.00430e2f
test al, al
je 0x44b48a
lea eax, [esp + 0x2e0]
push eax
mov byte [esp + 0x374c], 0xc
call fcn.00432dd9
mov ecx, dword [esp + 0x140]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x6c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x28]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0xf0c]
mov byte [esp + 0x3748], 4
call fcn.00429e54
jmp 0x44bd8f
push str._SafeMode
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
jne 0x44b626
push str._SafeMode_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov edi, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
push 0x50a0d0
push str.CAMEYO_LEGACYREG
call edi
push str.Disk
push str.CAMEYO_VIRTMODE
call edi
push 0x50a014
push str.CAMEYO_EARLYINJECTION
call edi
jmp 0x44c154
push 0x5183e8
call fcn.004d1dc0
pop ecx
push eax
push str._Services:
push dword [edi]
call fcn.004d4826
add esp, 0xc
test eax, eax
jne 0x44b6a2
push dword [edi]
lea ecx, [esp + 0x11c]
call fcn.004247f5
push 0x5183e8
mov byte [esp + 0x374c], 0x13
call fcn.004d1dc0
pop ecx
push esi
lea ecx, [esp + 0x11c]
push ecx
call fcn.0042488c
push dword [esp + 0x118]
push str.CAMEYO_SERVICES
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov byte [esp + 0x3748], 4
mov ecx, dword [esp + 0x118]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x44c154
push str._Register
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x44c2c9
push str._Stop
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x44c37a
push str._Remove
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x453310
push str._RemoveSelf
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x453310
push str._Remove:Proc
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x44c49d
push str._Remove:Reg
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x44c685
push str._LearnStreaming
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x45312f
push 0x51899c
call fcn.004d1dc0
pop ecx
push eax
push str._LearnStreaming:
push dword [edi]
call fcn.004d4826
add esp, 0xc
test eax, eax
je 0x45312f
push str._UpdateBasicSettings
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
jne 0x44b77e
mov dword [esp + 0x34], 1
jmp 0x44c154
push str._Repackage
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x44c88c
push str._CreateDiff
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x452f76
push 0x518bc0
call fcn.004d1dc0
pop ecx
push eax
push str._CreateDiff:
push dword [edi]
call fcn.004d4826
add esp, 0xc
test eax, eax
je 0x452f76
push str._exec
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x44ca68
push 0x518c04
call fcn.004d1dc0
pop ecx
push eax
push str._Patch
push dword [edi]
call fcn.004d4826
add esp, 0xc
test eax, eax
je 0x452a2a
push 0x518c1c
call fcn.004d1dc0
pop ecx
push eax
push str._InstSandbox
push dword [edi]
call fcn.004d4826
add esp, 0xc
test eax, eax
je 0x452a2a
push str._ShowStreaming
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x44cc2d
push str._Break
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x44cd0f
push str._Unbreak
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x44d432
push str._Integrate
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x4525f6
push str._Integrate:once
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x4525f6
push str._FullIntegrate
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x4525f6
push str._Unintegrate
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x44dc5d
push str._CreateShortcuts
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x451f6a
push 0x5196e0
call fcn.004d1dc0
pop ecx
push eax
push str._CreateShortcuts:
push dword [edi]
call fcn.004d4826
add esp, 0xc
test eax, eax
je 0x451f6a
push str._Perf
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x44dcc5
push str._ExtractLog
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x44e0cb
push str._ExtractAll
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x44e317
push str._AutoUpdateXml
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x44e3f8
push str._Info
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x44e54b
push str._Sandbox
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x44e600
push 0x5199b0
call fcn.004d1dc0
pop ecx
push eax
push str._AddSandbox:
push dword [edi]
call fcn.004d4826
add esp, 0xc
test eax, eax
je 0x44e803
push 0x519a18
call fcn.004d1dc0
pop ecx
push eax
push str._GetProperty:
push dword [edi]
call fcn.004d4826
add esp, 0xc
test eax, eax
je 0x44eafb
push str._SaveProperties
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x451d9a
push str._SaveAllProperties
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x451d9a
push str._InfoLog
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x44ed15
push str._Ini
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x451c71
push str._ShowIni
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x451c71
push str._ExtractIni
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x44ef17
push str._csv
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x44f0ac
push str._EngineVer
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x44f47d
push str._ChangeLoader
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
jne 0x44ba97
mov eax, dword [esp + 0x24]
inc eax
cmp dword [esp + 0x50], eax
jg 0x44f5be
push str._ChangeEngine
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
jne 0x44bab8
mov eax, dword [esp + 0x24]
inc eax
cmp dword [esp + 0x50], eax
jg 0x44f8e8
push str._ChangeIni
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
jne 0x44bad9
mov eax, dword [esp + 0x24]
inc eax
cmp dword [esp + 0x50], eax
jg 0x44fc80
push str._TestAutoUpdate
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
jne 0x44bafc
mov eax, dword [esp + 0x24]
add eax, 5
cmp dword [esp + 0x50], eax
jg 0x44fe39
push str._Debug
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x451c32
push str._DbgNow
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x451c32
push str._ForceMenu
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
jne 0x44bb47
mov dword [esp + 0x78], 1
jmp 0x44c154
push str._ShowTree
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x44ff48
push str._RegDump
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x450014
push str._SetFileFlags
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
jne 0x44bb96
mov eax, dword [esp + 0x24]
add eax, 2
cmp dword [esp + 0x50], eax
jg 0x45018f
push str._DbgZip:
call fcn.004d1e6a
pop ecx
push eax
push str._DbgZip:
push dword [edi]
call fcn.004d4826
add esp, 0xc
test eax, eax
je 0x4503a0
push str._DbgNow
call fcn.004d1e6a
pop ecx
push eax
push str._DbgNow
push dword [edi]
call fcn.004d4826
add esp, 0xc
test eax, eax
je 0x4503e0
push str._Vintegrate
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x451ab3
push 0x51a478
call fcn.004d1dc0
pop ecx
push eax
push str._Vintegrate:
push dword [edi]
call fcn.004d4826
add esp, 0xc
test eax, eax
je 0x451ab3
push str._VintegrateRecursive
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x451ab3
push 0x51a4d0
call fcn.004d1dc0
pop ecx
push eax
push str._VintegrateRecursive:
push dword [edi]
call fcn.004d4826
add esp, 0xc
test eax, eax
je 0x451ab3
push str._Vunintegrate
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x4504ce
push str._Vmanager
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x45067b
push 0x51a590
call fcn.004d1dc0
pop ecx
push eax
push str._ProcessList
push dword [edi]
call fcn.004d4826
add esp, 0xc
test eax, eax
je 0x450728
push 0x51a718
call fcn.004d1dc0
pop ecx
push eax
push str._WaitFor
push dword [edi]
call fcn.004d4826
add esp, 0xc
test eax, eax
je 0x450a99
push str._GfxSvr
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
jne 0x44bd1a
call fcn.004324f8
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x401
mov edi, 0x54d508
call fcn.00492d60
mov dword [esp], 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x403
call fcn.00492d60
mov dword [esp], 0x493e0
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x44c154
push 0x51a748
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
jne 0x44bd96
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.open
xor ebx, ebx
call fcn.004247f5
push esi
push ecx
mov dword [esp + 0x3754], 0x177
mov ecx, esp
mov dword [esp + 0x44], esp
push str._Troubleshoot
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x78
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247e0
mov edi, esi
mov dword [esp + 0x3758], 4
call fcn.00473bb0
add esp, 0x10
mov ebx, 0x507cec
xor esi, esi
jmp 0x44c154
push str._Troubleshoot
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x450b5a
push str._AutoUpdate
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x450b80
push str._VirtRegSyncExport
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x450c15
push str._AppServer
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x450c7d
push str._StartStreaming
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x450d12
push str._JumpTo
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x450d30
push str._SvcRegister
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x450dcf
push str._SvcStart
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x450ed8
push str._SvcRegisterStart
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x450f93
push str._SvcStop
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x4510f4
push str._SvcRemove
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x4511b1
push 0x51aba0
call fcn.004d1dc0
pop ecx
push eax
push str._ScmDirectInit:
push dword [edi]
call fcn.004d4826
add esp, 0xc
test eax, eax
je 0x45126f
push str._AuthCheck
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x4519a3
push str._AuthCheck:Force
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x4519a3
push str._RepoSync
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
jne 0x44bef8
mov eax, dword [esp + 0x24]
inc eax
cmp dword [esp + 0x50], eax
jg 0x451317
push str._MergeRegistry
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x4513ef
push str._OpenFile
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
jne 0x44bf2f
mov eax, dword [esp + 0x24]
inc eax
cmp dword [esp + 0x50], eax
jg 0x4514e7
push dword [edi]
lea ecx, [esp + 0xf0]
call fcn.004247f5
push esi
push ecx
mov dword [esp + 0x3750], 0x194
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x5065d0
call fcn.004247f5
push ecx
mov esi, esp
mov byte [esp + 0x3754], 0x95
mov dword [esp + 0x20], esp
push 0x5c
push ecx
lea eax, [esp + 0x100]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247e0
push esi
call fcn.00475560
add esp, 0xc
mov byte [esp + 0x3754], 0x94
call fcn.004794b0
xor esi, esi
add esp, 0xc
cmp eax, esi
je 0x44bfd9
push 0x513e44
push ecx
lea eax, [esp + 0xf4]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x188]
push eax
call fcn.004752c0
or dword [esp + 0x50], 4
pop ecx
pop ecx
call fcn.00424878
mov byte [esp + 0x33], 1
test eax, eax
je 0x44bfde
mov byte [esp + 0x33], 0
test byte [esp + 0x44], 4
je 0x44bff6
and dword [esp + 0x44], 0xfffffffb
lea ecx, [esp + 0x180]
call fcn.004224c3
cmp byte [esp + 0x33], 0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
jne 0x45188c
mov eax, dword [esp + 0x30]
push dword [eax]
call fcn.004247f5
lea eax, [esp + 0x258]
push eax
call fcn.0047ac30
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x78]
mov byte [esp + 0x374c], 0x9a
call fcn.00424839
lea ecx, [esp + 0x254]
mov byte [esp + 0x3748], 0x94
call fcn.004224c3
call fcn.0044ae72
test eax, eax
je 0x44c108
cmp dword [esp + 0x50], 1
jle 0x44c108
cmp dword [esp + 0x50], 2
jne 0x44c0bc
push 0x513e44
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [edi]
call fcn.004247f5
lea eax, [esp + 0x190]
push eax
call fcn.004752c0
pop ecx
pop ecx
mov byte [esp + 0x374c], 0x9b
or dword [esp + 0x48], 8
call fcn.00424878
test eax, eax
jne 0x44c0bc
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push dword [edi]
call fcn.004247f5
call fcn.004778e0
pop ecx
mov byte [esp + 0x33], 1
cmp eax, esi
jne 0x44c0c1
mov byte [esp + 0x33], 0
mov dword [esp + 0x3748], 0x194
test byte [esp + 0x44], 8
je 0x44c0e4
and dword [esp + 0x44], 0xfffffff7
lea ecx, [esp + 0x188]
call fcn.004224c3
cmp byte [esp + 0x33], 0
je 0x44c0f2
push str.PackageEditor.exe
jmp 0x44c10d
call fcn.0040b6d8
test eax, eax
mov eax, str.Packager64.exe
jne 0x44c105
mov eax, str.Packager.exe
push eax
jmp 0x44c10d
push 0x51233c
lea ecx, [esp + 0x60]
call fcn.0042484e
lea ecx, [esp + 0xec]
mov dword [esp + 0x3748], 4
call fcn.004224c3
jmp 0x44c154
push str._Password_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x51826c
call fcn.004d1dc0
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x4c]
push eax
call fcn.0042484e
inc dword [esp + 0x24]
mov eax, dword [esp + 0x24]
cmp eax, dword [esp + 0x50]
jl 0x44b0eb
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x1038]
push eax
call fcn.0048c620
push 0xffffffffffffffff
mov dword [esp + 0x374c], 0x19c
push dword [esp + 0x44]
lea eax, [esp + 0x7c]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
push ecx
mov byte [esp + 0x3758], 0x9d
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247e0
push ecx
mov byte [esp + 0x375c], 0x9e
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e0
mov byte [esp + 0x375c], 0x9f
push dword [esp + 0x8c]
lea eax, [esp + 0x30]
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x1048]
push eax
mov byte [esp + 0x3768], 0x9c
call fcn.0043cd5c
add esp, 0x20
cmp eax, 2
jne 0x453648
call fcn.0044a258
push esi
push dword [0x54d514]
push str.Application_is_now_integrated_into_your_system
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
lea eax, [esp + 0x102c]
call fcn.0048d500
lea eax, [esp + 0x102c]
mov dword [esp + 0x3748], 4
call fcn.00429e54
lea ecx, [esp + 0x4c]
call fcn.004224c3
lea ecx, [esp + 0x18]
call fcn.004224c3
lea ecx, [esp + 0x74]
call fcn.004224c3
lea ecx, [esp + 0x5c]
call fcn.004224c3
lea ecx, [esp + 0x64]
call fcn.004224c3
jmp 0x44c354
call fcn.00473f80
test eax, eax
jne 0x44c2ae
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Elevation_failed
call fcn.004247f5
call fcn.0044a2d5
push esi
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.License_required.
jmp 0x44c2a4
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
mov esi, 0x54d508
push esi
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x44c2ff
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_obtain_INI_info_from_resource_
jmp 0x44c2a4
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
mov ecx, esi
call fcn.0043be40
pop ecx
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x74]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x5c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x64]
add ecx, 0xfffffff0
call fcn.0042201a
xor eax, eax
mov ecx, dword [esp + 0x3740]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3728]
xor ecx, esp
call fcn.004d14fc
mov esp, ebp
pop ebp
ret
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
push 0x54d508
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x44c3ad
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x54d560
call fcn.004247e0
push ecx
mov byte [esp + 0x3750], 0x14
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x54d570
call fcn.004247e0
push ecx
mov byte [esp + 0x3754], 0x15
mov ecx, esp
mov dword [esp + 0x44], esp
push 0x54d564
call fcn.004247e0
push ecx
mov byte [esp + 0x3758], 0x16
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x54d514
call fcn.004247e0
mov byte [esp + 0x3758], 4
call fcn.00445362
add esp, 0x10
cmp eax, esi
je 0x44c443
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x54d514]
push str.Cannot_stop_application__s
push eax
call fcn.00475230
add esp, 0xc
jmp 0x44c2a9
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.__Stopped_successfully
call fcn.004247f5
call fcn.00449abe
pop ecx
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x74]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x5c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x64]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, esi
jmp 0x44c356
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
push 0x54d508
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x44c4d0
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
mov eax, dword [0x54d564]
cmp dword [eax - 0xc], esi
jne 0x44c4f7
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x54d514]
push str.Cannot_obtain_base_dir_for__s
jmp 0x44c435
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
mov edi, 0x54d564
push edi
call fcn.004247e0
call fcn.004778e0
pop ecx
cmp eax, esi
jne 0x44c542
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x54d514]
push str.Application_is_not_deployed_on_this_machine:__s
push eax
call fcn.00475230
add esp, 0xc
call fcn.0044a324
pop ecx
pop ecx
push 5
jmp 0x44c2af
cmp dword [esp + 0x48], esi
je 0x44c565
push 3
push dword [0x54d514]
push str.Do_you_want_to_stop_the_application_
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x4533db
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x54d514]
push str.Removing_processes:__s
push eax
call fcn.00475230
add esp, 0xc
call fcn.00449abe
pop ecx
lea ecx, [esp + 0x144]
call fcn.00422487
push 0x5060a8
mov byte [esp + 0x374c], 0x1d
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push esi
push esi
push 1
lea eax, [esp + 0x150]
push eax
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x54d560
call fcn.004247e0
push ecx
mov byte [esp + 0x3764], 0x1e
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x54d570
call fcn.004247e0
push ecx
mov byte [esp + 0x3768], 0x1f
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x54d56c
call fcn.004247e0
push ecx
mov byte [esp + 0x376c], 0x20
mov ecx, esp
mov dword [esp + 0x40], esp
push edi
call fcn.004247e0
push ecx
mov byte [esp + 0x3770], 0x21
mov ecx, esp
mov dword [esp + 0xa0], esp
push 0x54d514
call fcn.004247e0
mov byte [esp + 0x3770], 0x1d
call fcn.00445767
add esp, 0x24
mov ecx, esp
mov dword [esp + 0x14], esp
push str.__Stopped_successfully
call fcn.004247f5
call fcn.00449abe
pop ecx
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x54d514]
push str.Application__s_stopped_successfully
push eax
call fcn.00475230
add esp, 0xc
call fcn.0044a324
pop ecx
pop ecx
mov ecx, dword [esp + 0x144]
jmp 0x45363b
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
push 0x54d508
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x44c6b8
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
mov eax, dword [0x54d564]
cmp dword [eax - 0xc], esi
jne 0x44c6d4
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
jmp 0x44c4e7
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
mov edi, 0x54d564
push edi
call fcn.004247e0
call fcn.004778e0
pop ecx
cmp eax, esi
jne 0x44c702
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
jmp 0x44c520
cmp dword [esp + 0x48], esi
je 0x44c725
push 3
push dword [0x54d514]
push str.Do_you_want_to_remove_the_applications_registry_
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x4533db
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x54d514]
push str.Removing_registry:__s
push eax
call fcn.00475230
add esp, 0xc
call fcn.00449abe
pop ecx
lea ecx, [esp + 0x14c]
call fcn.00422487
push 0x5060a8
mov byte [esp + 0x374c], 0x22
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push esi
push 1
push esi
lea eax, [esp + 0x158]
push eax
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x54d560
call fcn.004247e0
push ecx
mov byte [esp + 0x3764], 0x23
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x54d570
call fcn.004247e0
push ecx
mov byte [esp + 0x3768], 0x24
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x54d56c
call fcn.004247e0
push ecx
mov byte [esp + 0x376c], 0x25
mov ecx, esp
mov dword [esp + 0x40], esp
push edi
call fcn.004247e0
push ecx
mov byte [esp + 0x3770], 0x26
mov ecx, esp
mov dword [esp + 0xa0], esp
push 0x54d514
call fcn.004247e0
mov byte [esp + 0x3770], 0x22
call fcn.00445767
add esp, 0x24
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x54d514]
push str.SoftwareVOS_s
push eax
call fcn.00475230
add esp, 0xc
mov edx, SysReAllocStringLen
call fcn.00476310
pop ecx
cmp eax, esi
je 0x44c841
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x54d514]
push str.Registry_could_not_be_emptied_for__s
jmp 0x44c435
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.__Registry_removed_successfully
call fcn.004247f5
call fcn.00449abe
pop ecx
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x54d514]
push str.Application__ss_registry_removed_successfully
push eax
call fcn.00475230
add esp, 0xc
call fcn.0044a324
pop ecx
pop ecx
mov ecx, dword [esp + 0x14c]
jmp 0x45363b
lea ecx, [esp + 0x20]
call fcn.00422487
lea ecx, [esp + 0x40]
call fcn.00422487
mov byte [esp + 0x3748], 0x2f
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x50], ecx
jle 0x44c8c6
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x24]
call fcn.0042484e
jmp 0x44c8d4
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x24]
call fcn.00424839
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..new.exe
call fcn.004247f5
push ecx
mov byte [esp + 0x3750], 0x30
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x264]
push eax
mov byte [esp + 0x3754], 0x2f
call fcn.004753f0
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x374c], 0x31
call fcn.00424839
mov byte [esp + 0x3748], 0x2f
mov ecx, dword [esp + 0x25c]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
call fcn.00478330
mov edi, dword [esp + 0x44]
mov ebx, dword [esp + 0x24]
pop ecx
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x40]
jne 0x44c987
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e0
jmp 0x44c2a9
push dword [esp + 0x34]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e0
call fcn.0044482c
pop ecx
pop ecx
mov dword [esp + 0x34], eax
cmp eax, esi
jne 0x44ca14
push dword [0x549380]
lea eax, [esp + 0x44]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x19c]
push eax
call fcn.00475560
add esp, 8
mov byte [esp + 0x3750], 0x32
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Successfully_repackaged_into:__s
push ecx
call fcn.00475230
add esp, 0xc
call fcn.0044a324
pop ecx
pop ecx
mov ecx, dword [esp + 0x190]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [edi - 0x10]
call fcn.0042201a
lea ecx, [ebx - 0x10]
jmp 0x45363e
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esp + 0x34], 0x10
push dword [0x549380]
jne 0x44ca39
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Application_not_deployed_on_this_machine._Nothing_to_repackage.
jmp 0x44c2a4
push dword [esp + 0x38]
lea eax, [esp + 0x308]
push eax
call fcn.0047c1e0
add esp, 4
mov byte [esp + 0x3750], 0x33
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Could_not_repackage:__s
push ecx
jmp 0x44c436
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x24]
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push dword [eax + edx*4]
call fcn.004247f5
lea eax, [esp + 0x268]
push eax
call fcn.0047ac30
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x78]
mov byte [esp + 0x374c], 0x3a
call fcn.00424839
push eax
lea ecx, [esp + 0x60]
call fcn.00424839
push eax
lea ecx, [esp + 0xf8]
call fcn.004247e0
mov byte [esp + 0x3748], 0x3c
mov ecx, dword [esp + 0x264]
add ecx, 0xfffffff0
call fcn.0042201a
push 1
lea eax, [esp + 0x19c]
push eax
lea ecx, [esp + 0xfc]
call fcn.004249e4
push 0x512c74
push eax
call fcn.00424aee
pop ecx
pop ecx
mov ecx, dword [esp + 0x198]
add ecx, 0xfffffff0
mov byte [esp + 0x33], al
call fcn.0042201a
cmp byte [esp + 0x33], 0
lea ecx, [esp + 0x5c]
je 0x44cb15
push 1
push 0x22
jmp 0x44cb18
push esi
push 0x20
call fcn.0042944a
mov edi, eax
cmp edi, 0xffffffff
je 0x44cb8c
push edi
lea eax, [esp + 0x270]
push eax
lea ecx, [esp + 0x64]
call fcn.004249e4
push 0x512b60
mov byte [esp + 0x374c], 0x3d
call fcn.004424f3
push eax
lea ecx, [esp + 0x60]
call fcn.00424839
mov byte [esp + 0x3748], 0x3c
mov ecx, dword [esp + 0x26c]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
lea ecx, [esp + 0x78]
lea eax, [edi + 1]
push ecx
call fcn.0042488c
lea eax, [esp + 0x74]
call fcn.0042493b
push eax
lea ecx, [esp + 0x78]
call fcn.00424839
jmp 0x44cbb1
push 0x512b60
lea eax, [esp + 0xf8]
call fcn.004424f3
push eax
lea ecx, [esp + 0x60]
call fcn.00424839
push ebx
lea ecx, [esp + 0x78]
call fcn.0042484e
xor ecx, ecx
lea eax, [esp + 0x5c]
call fcn.0042dcfd
movzx eax, ax
cmp ax, 0x25
jne 0x44cbd0
lea eax, [esp + 0x5c]
push eax
call fcn.00485200
pop ecx
push ecx
lea eax, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x1a4]
push eax
call fcn.00485f90
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x60]
mov byte [esp + 0x374c], 0x3e
call fcn.00424839
mov ecx, dword [esp + 0x1a0]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3748], 4
mov ecx, dword [esp + 0xf4]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x44c166
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.ShowStreaming:
call fcn.004247f5
call fcn.00449abe
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x8e8]
push eax
call fcn.0048c620
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x3754], 0x4c
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x4d
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x375c], 0x4e
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e0
push 2
push ecx
mov byte [esp + 0x3764], 0x4f
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x8f8]
push eax
mov byte [esp + 0x3768], 0x4c
call fcn.0043cd5c
add esp, 0x20
lea ecx, [esp + 0x8dc]
call fcn.0043b953
lea eax, [esp + 0x8dc]
call fcn.0048d500
mov byte [esp + 0x3748], 4
lea eax, [esp + 0x8dc]
call fcn.00429e54
jmp 0x44c45a
lea ecx, [esp + 0x20]
call fcn.00422487
mov byte [esp + 0x3748], 0x50
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x50], ecx
jle 0x44cd40
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x24]
call fcn.0042484e
jmp 0x44cd4e
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x24]
call fcn.00424839
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..break
call fcn.004247f5
push ecx
mov byte [esp + 0x3750], 0x51
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x68]
push eax
mov byte [esp + 0x3754], 0x50
call fcn.004753f0
add esp, 0xc
push 1
push esi
push ecx
mov byte [esp + 0x3754], 0x52
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x420]
push eax
call fcn.0048c620
mov byte [esp + 0x3748], 0x53
push dword [0x549380]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x420]
push eax
call fcn.0044a39e
add esp, 0x10
cmp dword [esp + 0x49c], esi
jne 0x44ce07
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_load_containers_
jmp 0x44c2a4
push ecx
lea eax, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
call fcn.00476fc0
pop ecx
push dword [esp + 0x60]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x44ce48
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x68]
push str.Cant_empty__s
jmp 0x44c435
mov esi, dword [esp + 0x60]
call fcn.004779c0
test eax, eax
jne 0x44ce70
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x68]
push str.Cant_create__s
jmp 0x44c435
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov ebx, 0x5060a8
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3754], 0x54
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtApp.ini
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x55
lea eax, [esp + 0x70]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3758], 0x53
call fcn.00474af0
add esp, 8
mov byte [esp + 0x3750], 0x56
mov ecx, esp
mov dword [esp + 0x1c], esp
mov esi, str.Main
push esi
call fcn.004247f5
push 3
pop ecx
lea edi, [esp + 0x41c]
mov byte [esp + 0x3750], 0x53
call fcn.0048ea10
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3754], 0x57
mov ecx, esp
mov dword [esp + 0x44], esp
push str.AppVirtDll.dll
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x58
lea eax, [esp + 0x70]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3758], 0x53
call fcn.00474af0
add esp, 8
mov byte [esp + 0x3750], 0x59
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f5
push 2
pop ecx
lea edi, [esp + 0x41c]
mov byte [esp + 0x3750], 0x53
call fcn.0048ea10
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3754], 0x5a
mov ecx, esp
mov dword [esp + 0x44], esp
push str.AppVirtDll64.dll
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x5b
lea eax, [esp + 0x70]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3758], 0x53
call fcn.00474af0
add esp, 8
mov byte [esp + 0x3750], 0x5c
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f5
push 8
pop ecx
lea edi, [esp + 0x41c]
mov byte [esp + 0x3750], 0x53
call fcn.0048ea10
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3754], 0x5d
mov ecx, esp
mov dword [esp + 0x44], esp
push str.StubExe.exe
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x5e
lea eax, [esp + 0x70]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3758], 0x53
call fcn.00474af0
add esp, 8
mov byte [esp + 0x3750], 0x5f
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f5
push 9
pop ecx
lea edi, [esp + 0x41c]
mov byte [esp + 0x3750], 0x53
call fcn.0048ea10
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3754], 0x60
mov ecx, esp
mov dword [esp + 0x44], esp
push str.StubExe64.exe
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x61
lea eax, [esp + 0x70]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3758], 0x53
call fcn.00474af0
add esp, 8
mov byte [esp + 0x3750], 0x62
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f5
push 0xa
pop ecx
lea edi, [esp + 0x41c]
mov byte [esp + 0x3750], 0x53
call fcn.0048ea10
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3754], 0x63
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtFiles.db
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x64
lea eax, [esp + 0x70]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3758], 0x53
call fcn.00474af0
add esp, 8
mov byte [esp + 0x3750], 0x65
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f5
push 4
pop ecx
lea edi, [esp + 0x41c]
mov byte [esp + 0x3750], 0x53
call fcn.0048ea10
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3754], 0x66
mov ecx, esp
mov dword [esp + 0x44], esp
push str.SandboxCfg.db
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x67
mov ecx, esp
lea eax, [esp + 0x70]
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3758], 0x53
call fcn.00474af0
add esp, 8
mov byte [esp + 0x3750], 0x68
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f5
push 5
pop ecx
lea edi, [esp + 0x41c]
mov byte [esp + 0x3750], 0x53
call fcn.0048ea10
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3754], 0x69
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtReg.export
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x6a
lea eax, [esp + 0x70]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3758], 0x53
call fcn.00474af0
add esp, 8
mov byte [esp + 0x3750], 0x6b
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f5
push 6
pop ecx
lea edi, [esp + 0x41c]
mov byte [esp + 0x3750], 0x53
call fcn.0048ea10
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3754], 0x6c
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtReg.dat
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x6d
lea eax, [esp + 0x70]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3758], 0x53
call fcn.00474af0
add esp, 8
mov byte [esp + 0x3750], 0x6e
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f5
push 0xb
pop ecx
lea edi, [esp + 0x41c]
mov byte [esp + 0x3750], 0x53
call fcn.0048ea10
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3754], 0x6f
mov ecx, esp
mov dword [esp + 0x44], esp
push str.SysDllSubdirs.txt
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x70
lea eax, [esp + 0x70]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3758], 0x53
call fcn.00474af0
add esp, 8
mov byte [esp + 0x3750], 0x71
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f5
push 7
pop ecx
lea edi, [esp + 0x41c]
mov byte [esp + 0x3750], 0x53
call fcn.0048ea10
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3754], 0x72
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtFiles.vfc
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x73
lea eax, [esp + 0x70]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3758], 0x53
call fcn.00474af0
add esp, 8
mov byte [esp + 0x3750], 0x74
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f5
mov byte [esp + 0x3750], 0x53
xor ecx, ecx
inc ecx
lea edi, [esp + 0x41c]
call fcn.0048ea10
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x68]
push 0x5190f4
push eax
call fcn.00475230
add esp, 0xc
call fcn.0044a324
pop ecx
pop ecx
push 0
jmp 0x44c2af
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.Unbreak:
call fcn.004247f5
call fcn.00449abe
mov ecx, esp
mov dword [esp + 0x14], esp
push str..break
call fcn.004247f5
push ecx
mov byte [esp + 0x3750], 0x75
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x78]
push eax
mov byte [esp + 0x3754], 4
call fcn.004753f0
add esp, 0xc
mov byte [esp + 0x3748], 0x76
push dword [esp + 0x70]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x44d4b8
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x78]
push str.Dir_doesnt_exist:__s
jmp 0x44c435
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x44]
call fcn.004247e0
mov edi, str..old
push edi
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x27c]
push eax
mov byte [esp + 0x3754], 0x77
call fcn.00424a44
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x274]
add ecx, 0xfffffff0
call fcn.0042201a
push edi
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x1b0]
push eax
call fcn.00424a44
add esp, 0xc
push dword [eax]
push dword [esp + 0x44]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov ecx, dword [esp + 0x1a8]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.0042201a
test bl, bl
je 0x44d554
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_rename_myself_to_.old
jmp 0x44c2a4
push edi
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x284]
push eax
call fcn.00424a44
mov eax, dword [eax]
add esp, 0xc
push esi
push dword [esp + 0x44]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [esp + 0x27c]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.0042201a
test bl, bl
je 0x44d5aa
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_copy_myself
jmp 0x44c2a4
push 1
push ecx
mov dword [esp + 0x18], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov dword [esp + 0x108], esi
push 0x5060a8
lea ebx, [esp + 0x10c]
lea esi, [esp + 0x164]
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x78
mov ecx, esp
mov dword [esp + 0x24], esp
push str.VirtApp.ini
call fcn.004247f5
push ecx
mov byte [esp + 0x375c], 0x79
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e0
mov byte [esp + 0x375c], 0x77
call fcn.00474af0
add esp, 0xc
mov edi, esi
call fcn.004759c0
pop ecx
pop ecx
cmp eax, 0xffffffff
je 0x44dc46
xor edi, edi
cmp dword [esp + 0xfc], edi
je 0x44dc46
push dword [esp + 0xfc]
mov ecx, dword [esp + 0x158]
lea eax, [esp + 0x38]
push eax
call fcn.00475720
mov byte [esp + 0x3750], 0x7a
push dword [esp + 0x15c]
call fcn.004d20e7
add esp, 0xc
push 1
push 1
push ecx
lea eax, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x390]
push eax
call fcn.0048c620
mov byte [esp + 0x3748], 0x7b
push dword [0x549380]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x390]
push eax
call fcn.0044a39e
add esp, 0x10
cmp dword [esp + 0x40c], edi
jne 0x44d6e1
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_begin_to_update_resource
jmp 0x44c2a4
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
mov esi, str.Main
push esi
call fcn.004247f5
mov byte [esp + 0x374c], 0x7c
mov eax, dword [esp + 0x38]
mov eax, dword [eax - 0xc]
add eax, eax
push edi
push eax
lea ecx, [esp + 0x40]
call fcn.00424f9a
push eax
lea eax, [esp + 0x394]
push eax
mov byte [esp + 0x375c], 0x7b
call fcn.0048ded0
cmp eax, edi
je 0x44d740
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_update_INI_resource
jmp 0x44c2a4
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f5
push 0
push 2
push ecx
mov byte [esp + 0x3758], 0x7d
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
mov ebx, 0x5060a8
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3760], 0x7e
mov ecx, esp
mov dword [esp + 0x50], esp
push str.AppVirtDll.dll
call fcn.004247f5
push ecx
mov byte [esp + 0x3764], 0x7f
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3764], 0x7d
call fcn.00474af0
add esp, 0xc
lea eax, [esp + 0x394]
push eax
mov byte [esp + 0x375c], 0x7b
call fcn.0048e230
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f5
push 0
push 8
push ecx
mov byte [esp + 0x3758], 0x80
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3760], 0x81
mov ecx, esp
mov dword [esp + 0x50], esp
push str.AppVirtDll64.dll
call fcn.004247f5
push ecx
mov byte [esp + 0x3764], 0x82
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3764], 0x80
call fcn.00474af0
add esp, 0xc
lea eax, [esp + 0x394]
push eax
mov byte [esp + 0x375c], 0x7b
call fcn.0048e230
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f5
push 0
push 9
push ecx
mov byte [esp + 0x3758], 0x83
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3760], 0x84
mov ecx, esp
mov dword [esp + 0x50], esp
push str.StubExe.exe
call fcn.004247f5
push ecx
mov byte [esp + 0x3764], 0x85
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3764], 0x83
call fcn.00474af0
add esp, 0xc
lea eax, [esp + 0x394]
push eax
mov byte [esp + 0x375c], 0x7b
call fcn.0048e230
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f5
push 0
push 0xa
push ecx
mov byte [esp + 0x3758], 0x86
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3760], 0x87
mov ecx, esp
mov dword [esp + 0x50], esp
push str.StubExe64.exe
call fcn.004247f5
push ecx
mov byte [esp + 0x3764], 0x88
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3764], 0x86
call fcn.00474af0
add esp, 0xc
lea eax, [esp + 0x394]
push eax
mov byte [esp + 0x375c], 0x7b
call fcn.0048e230
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f5
push 0x4000
push 4
push ecx
mov byte [esp + 0x3758], 0x89
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3760], 0x8a
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtFiles.db
call fcn.004247f5
push ecx
mov byte [esp + 0x3764], 0x8b
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3764], 0x89
call fcn.00474af0
add esp, 0xc
lea eax, [esp + 0x394]
push eax
mov byte [esp + 0x375c], 0x7b
call fcn.0048e230
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f5
push 0x4000
push 5
push ecx
mov byte [esp + 0x3758], 0x8c
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3760], 0x8d
mov ecx, esp
mov dword [esp + 0x50], esp
push str.SandboxCfg.db
call fcn.004247f5
push ecx
mov byte [esp + 0x3764], 0x8e
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3764], 0x8c
call fcn.00474af0
add esp, 0xc
lea eax, [esp + 0x394]
push eax
mov byte [esp + 0x375c], 0x7b
call fcn.0048e230
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f5
mov byte [esp + 0x374c], 0x8f
push 0x4000
push 0xb
push ecx
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3760], 0x90
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtReg.dat
call fcn.004247f5
push ecx
mov byte [esp + 0x3764], 0x91
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3764], 0x8f
call fcn.00474af0
add esp, 0xc
lea eax, [esp + 0x394]
push eax
mov byte [esp + 0x375c], 0x7b
call fcn.0048e230
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f5
push 0
push 7
push ecx
mov byte [esp + 0x3758], 0x92
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3760], 0x93
mov ecx, esp
mov dword [esp + 0x50], esp
push str.SysDllSubdirs.txt
call fcn.004247f5
push ecx
mov byte [esp + 0x3764], 0x94
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3764], 0x92
call fcn.00474af0
add esp, 0xc
lea eax, [esp + 0x394]
push eax
mov byte [esp + 0x375c], 0x7b
call fcn.0048e230
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f5
push 0x4000
push 1
push ecx
mov byte [esp + 0x3758], 0x95
mov edi, esp
mov dword [esp + 0x24], esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3760], 0x96
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtFiles.vfc
call fcn.004247f5
push ecx
mov byte [esp + 0x3764], 0x97
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3764], 0x95
call fcn.00474af0
add esp, 0xc
lea eax, [esp + 0x394]
push eax
mov byte [esp + 0x375c], 0x7b
call fcn.0048e230
lea eax, [esp + 0x384]
call fcn.0048d500
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
test eax, eax
je 0x44dc37
push str.Could_not_commit_resource
jmp 0x44c2a4
push str.Success
call fcn.004247f5
jmp 0x44d424
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_load_VirtApp.ini
jmp 0x44c2a4
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
mov edi, 0x54d508
push edi
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x44dc91
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
push edi
call fcn.00440e27
pop ecx
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x54d514]
push str._s_is_no_longer_integrated.
push eax
call fcn.00475230
add esp, 0xc
call fcn.0044a324
pop ecx
pop ecx
jmp 0x44c2ae
lea ecx, [esp + 0x20]
call fcn.00422487
lea ecx, [esp + 0x34]
call fcn.00422487
mov byte [esp + 0x3748], 0xc3
mov edi, dword [esp + 0x24]
or dword [esp + 0x28], 0xffffffff
lea eax, [edi + 1]
cmp dword [esp + 0x50], eax
jle 0x44dd02
mov eax, dword [esp + 0x2c]
push dword [eax + edi*4 + 4]
lea ecx, [esp + 0x24]
call fcn.0042484e
lea eax, [edi + 2]
cmp dword [esp + 0x50], eax
jle 0x44dd1b
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4]
lea ecx, [esp + 0x38]
call fcn.0042484e
lea ecx, [esp + 0x1b0]
call fcn.00422487
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x374c], 0xc4
call fcn.004247e0
push ecx
mov byte [esp + 0x374c], 0xc5
lea eax, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
push 0x54d508
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x44dd78
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
push 1
push esi
push ecx
lea eax, [esp + 0x54]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xe88]
push eax
call fcn.0048c620
lea edi, [esp + 0xe7c]
mov byte [esp + 0x3748], 0xc6
call fcn.0042c7e6
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x34]
cmp dword [eax - 0xc], esi
je 0x44ddd5
push esi
push 0x80
push 4
push esi
push 3
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [esp + 0x28], eax
push 1
push 1
push 1
lea eax, [esp + 0x1bc]
push eax
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x54d560
call fcn.004247e0
push ecx
mov byte [esp + 0x3764], 0xc7
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x54d570
call fcn.004247e0
push ecx
mov byte [esp + 0x3768], 0xc8
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x54d56c
call fcn.004247e0
push ecx
mov byte [esp + 0x376c], 0xc9
mov ecx, esp
mov dword [esp + 0x9c], esp
push 0x54d564
call fcn.004247e0
push ecx
mov byte [esp + 0x3770], 0xca
mov ecx, esp
mov dword [esp + 0x80], esp
push 0x54d514
call fcn.004247e0
mov byte [esp + 0x3770], 0xc6
call fcn.00445767
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0x28
call edi
push esi
push 2
mov dword [esp + 0x74], eax
push 0x54d508
lea eax, [esp + 0xe88]
push eax
push dword [esp + 0x2c]
call fcn.004393f6
add esp, 0x14
cmp eax, esi
je 0x44deb7
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Failed_BasicDeploy_
jmp 0x44c2a4
call edi
sub eax, dword [esp + 0x6c]
mov dword [esp + 0x6c], eax
call edi
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], esi
je 0x44df72
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0xcb
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x51233c
call fcn.004247f5
push ecx
mov byte [esp + 0x375c], 0xcc
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247f5
push 2
push ecx
mov byte [esp + 0x3764], 0xcd
lea eax, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x94], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xe98]
push eax
mov byte [esp + 0x3768], 0xc6
call fcn.0043cd5c
add esp, 0x20
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e0
call fcn.0047b8e0
pop ecx
pop ecx
cmp eax, esi
jne 0x44df72
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x44df48
call edi
push ecx
mov edi, eax
sub edi, dword [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x54d560
call fcn.004247e0
push ecx
mov byte [esp + 0x3750], 0xce
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x54d570
call fcn.004247e0
push ecx
mov byte [esp + 0x3754], 0xcf
mov ecx, esp
mov dword [esp + 0x44], esp
push 0x54d564
call fcn.004247e0
push ecx
mov byte [esp + 0x3758], 0xd0
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x54d514
call fcn.004247e0
mov byte [esp + 0x3758], 0xc6
call fcn.00445362
add esp, 0x10
lea ecx, [esp + 0x54]
call fcn.00422487
lea ecx, [esp + 0x284]
mov eax, 0x100
push ecx
mov byte [esp + 0x374c], 0xd1
push eax
lea ecx, [esp + 0x5c]
mov dword [esp + 0x28c], eax
call fcn.004224cd
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push 0xffffffffffffffff
lea ecx, [esp + 0x58]
call fcn.00424b03
push edi
push dword [esp + 0x70]
lea eax, [esp + 0x164]
push dword [esp + 0x5c]
push dword [0x54d514]
push str._s__s__d_d_r_n
push eax
call fcn.00475230
add esp, 0x18
mov byte [esp + 0x3748], 0xd2
push dword [esp + 0x15c]
lea ecx, [esp + 0x1bc]
call fcn.00428760
mov byte [esp + 0x3748], 0xd3
mov edi, dword [esp + 0x28]
cmp edi, 0xffffffff
je 0x44e0ac
push 2
push esi
push esi
push edi
mov dword [esp + 0x29c], esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [esp + 0x1b8]
mov ecx, dword [eax - 0xc]
push esi
lea edx, [esp + 0x290]
push edx
push ecx
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [0x549380]
lea eax, [esp + 0x160]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e0
jmp 0x44dcb9
push ecx
mov dword [esp + 0x14], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..Packager.log
call fcn.004247f5
push ecx
mov byte [esp + 0x3754], 0xd4
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247e0
push edi
mov byte [esp + 0x3758], 4
call fcn.004753f0
lea eax, [esp + 0xb8]
add esp, 0xc
push eax
call fcn.00474800
add esp, 4
mov byte [esp + 0x374c], 0xd5
lea eax, [esp + 0xac]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
call fcn.00478330
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov dword [esp + 0x44], esi
call fcn.004247e0
lea eax, [esp + 0x978]
push eax
call fcn.0048c620
mov byte [esp + 0x3748], 0xd6
push dword [0x549380]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x978]
push eax
call fcn.0044a39e
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0xd7
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x375c], 0xd8
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e0
push 2
push ecx
mov byte [esp + 0x3764], 0xd9
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x988]
push eax
mov byte [esp + 0x3768], 0xd6
call fcn.0043cd5c
add esp, 0x20
lea edi, [esp + 0x96c]
call fcn.0042c7e6
mov ebx, eax
cmp ebx, esi
je 0x44e2bb
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00474240
mov byte [esp + 0x3750], 0xda
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.LogsPackager.log
call fcn.004247f5
push ebx
mov byte [esp + 0x3754], 0xd6
call fcn.0042a343
add esp, 0xc
cmp eax, esi
jne 0x44e26c
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_extract_Packager.log_
jmp 0x44c2a4
push dword [esp + 0xa8]
mov dword [esp + 0x38], 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Packager.log
call fcn.004247f5
lea eax, [esp + 0x1c8]
push eax
call fcn.00474800
pop ecx
pop ecx
push dword [eax]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov ecx, dword [esp + 0x1c0]
add ecx, 0xfffffff0
call fcn.0042201a
call fcn.0048b9b0
xor esi, esi
jmp 0x44e2dd
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
push str.Loader__ExtractLog_:_OpenVfc_failed__LE_d
push ecx
call fcn.00475230
add esp, 0xc
call fcn.00449a8e
pop ecx
lea eax, [esp + 0x96c]
call fcn.0048d500
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xb0]
cmp dword [esp + 0x40], esi
je 0x44e30d
push str.Success:__s
jmp 0x44dcb0
push str.Failed_saving__s
jmp 0x44dcb0
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
mov ebx, 0x54d508
push ebx
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x44e34b
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x858]
push eax
call fcn.0048c620
mov byte [esp + 0x3748], 0xdb
push dword [0x549380]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x858]
push eax
call fcn.0044a39e
lea edi, [esp + 0x85c]
call fcn.0042c7e6
push 1
push 2
push ebx
mov ecx, edi
push ecx
push eax
call fcn.004393f6
mov edi, eax
add esp, 0x24
lea eax, [esp + 0x84c]
call fcn.0048d500
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
cmp edi, esi
jne 0x44e3e6
push dword [0x54d564]
push str.Success:_n_s
jmp 0x44dcb0
push str.Failed_extracting.
push eax
call fcn.00475230
pop ecx
pop ecx
jmp 0x44dcb9
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
mov esi, 0x54d508
push esi
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x44e42c
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
lea eax, [esp + 0x294]
push eax
call fcn.004b0b90
pop ecx
mov byte [esp + 0x3748], 0xdc
push dword [eax]
lea ecx, [esp + 0x1cc]
call fcn.00428760
mov byte [esp + 0x3748], 0xde
mov ecx, dword [esp + 0x294]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x1c8]
mov edi, dword [eax - 0xc]
push eax
push ecx
mov dword [esp + 0x18], esp
mov ebx, esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov esi, str..xml
push esi
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0xdf
mov eax, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00474150
pop ecx
push ebx
mov byte [esp + 0x375c], 0xde
call fcn.004753f0
add esp, 0xc
call fcn.00475c00
pop ecx
pop ecx
push dword [0x549380]
push ecx
mov dword [esp + 0x18], esp
test eax, eax
je 0x44e537
mov ecx, esp
push esi
call fcn.004247f5
push ecx
mov byte [esp + 0x3754], 0xe0
mov eax, esp
mov dword [esp + 0x20], esp
push eax
call fcn.00474150
pop ecx
lea eax, [esp + 0x2a8]
push eax
mov byte [esp + 0x3758], 0xde
call fcn.004753f0
add esp, 8
mov byte [esp + 0x3750], 0xe1
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Success:_n_s
push ecx
call fcn.00475230
add esp, 0xc
call fcn.0044a324
pop ecx
pop ecx
mov ecx, dword [esp + 0x29c]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x44d42b
mov eax, esp
push str.Failed_extracting.
push eax
call fcn.00475230
pop ecx
pop ecx
jmp 0x44d424
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x38]
call fcn.004247e0
mov byte [esp + 0x3748], 0xe2
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x50], ecx
jle 0x44e57f
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x38]
call fcn.0042484e
push 1
push esi
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x1308]
push eax
call fcn.0048c620
mov byte [esp + 0x3748], 0xe3
push dword [0x549380]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x1308]
push eax
call fcn.0044a39e
push esi
lea eax, [esp + 0x1310]
push eax
lea eax, [esp + 0x1e8]
push eax
call fcn.0044a437
add esp, 0x1c
push esi
push str.Info
push dword [esp + 0x1d8]
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x44c2ae
push str._Sandbox_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
push 0x54d508
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x44e63e
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x38]
call fcn.004247e0
mov byte [esp + 0x3748], 0xe4
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x50], ecx
jle 0x44e672
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x38]
call fcn.0042484e
push 1
push esi
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xd68]
push eax
call fcn.0048c620
mov byte [esp + 0x3748], 0xe5
push dword [0x549380]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xd68]
push eax
call fcn.0044a39e
add esp, 0x10
cmp dword [esp + 0xde4], esi
jne 0x44e6e4
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.FAILED_LOADING_CONTAINERS_
jmp 0x44c2a4
lea eax, [esp + 0xd5c]
push eax
lea eax, [esp + 0x2a8]
push eax
call fcn.0044a7be
pop ecx
pop ecx
mov byte [esp + 0x3748], 0xe6
mov ecx, dword [esp + 0x2a4]
mov eax, dword [ecx - 0xc]
cmp eax, 0x800
jge 0x44e720
push esi
push str.Sandbox
push ecx
jmp 0x44e5f4
push ecx
push ecx
mov dword [esp + 0x18], esp
mov edi, esp
push ecx
add eax, eax
mov ecx, esp
mov dword [esp + 0x1c], esp
mov ebx, str..sandbox.txt
push ebx
mov dword [esp + 0x2c], eax
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0xe7
mov eax, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00474150
pop ecx
push edi
mov byte [esp + 0x375c], 0xe6
call fcn.004753f0
mov edi, dword [esp + 0x30]
add esp, 0xc
call fcn.00475c00
add esp, 4
mov ecx, esp
mov dword [esp + 0x14], esp
push str.open
call fcn.004247f5
push 1
push ecx
mov byte [esp + 0x3754], 0xe8
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
xor edi, edi
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0xe9
mov eax, esp
mov dword [esp + 0x48], esp
push ecx
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
mov dword [esp + 0x34], eax
call fcn.004247f5
push ecx
mov byte [esp + 0x3760], 0xea
mov eax, esp
mov dword [esp + 0x90], esp
push eax
call fcn.00474150
mov eax, dword [esp + 0x38]
pop ecx
push eax
mov byte [esp + 0x3764], 0xe9
call fcn.004753f0
add esp, 0xc
mov ebx, esi
mov byte [esp + 0x3758], 0xe6
call fcn.00473bb0
add esp, 0x10
xor esi, esi
jmp 0x44c2ae
push str._AddSandbox_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x5199b0
call fcn.004d1dc0
mov edx, dword [esp + 0x28]
pop ecx
mov ecx, dword [esp + 0x2c]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x1dc]
call fcn.004247f5
push 1
push esi
push ecx
mov byte [esp + 0x3754], 0xeb
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xa98]
push eax
call fcn.0048c620
mov byte [esp + 0x3748], 0xec
push dword [0x549380]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xa98]
push eax
call fcn.0044a39e
add esp, 0x10
cmp dword [esp + 0xb14], esi
jne 0x44e8a9
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44e6da
lea eax, [esp + 0x364]
push eax
call fcn.00424bee
push ebx
lea ecx, [esp + 0x168]
mov byte [esp + 0x374c], 0xed
call fcn.004247f5
lea eax, [esp + 0x164]
push eax
lea eax, [esp + 0x368]
push eax
push ecx
mov byte [esp + 0x3754], 0xee
lea eax, [esp + 0x1e4]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
call fcn.00488e90
add esp, 0xc
cmp eax, esi
jne 0x44e91c
push dword [0x549380]
lea eax, [esp + 0x168]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c97c
push 0xffffffffffffffff
xor esi, esi
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0xef
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x375c], 0xf0
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247f5
push 2
push ecx
mov byte [esp + 0x3764], 0xf1
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xaa8]
push eax
mov byte [esp + 0x3768], 0xee
call fcn.0043cd5c
add esp, 0x20
push 7
pop ecx
push dword [0x54d588]
xor eax, eax
mov dword [esp + 0x348], esi
lea edi, [esp + 0x34c]
rep stosd dword es:[edi], eax
push ecx
mov dword [esp + 0x18], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.SandboxCfg.db
call fcn.004247f5
push edi
mov ecx, esi
call fcn.00486660
pop ecx
pop ecx
lea ecx, [esp + 0x34c]
call fcn.00480710
pop ecx
pop ecx
lea esi, [esp + 0x88]
lea edi, [esp + 0x364]
call fcn.00453a5f
lea esi, [esp + 0x37c]
lea edi, [esp + 0x364]
call fcn.00447eb4
mov esi, eax
mov eax, dword [esp + 0x88]
test eax, eax
je 0x44ea0d
cmp eax, dword [esi]
je 0x44ea12
call fcn.004d1fe1
mov eax, dword [esp + 0x8c]
cmp eax, dword [esi + 4]
je 0x44eac4
lea esi, [esp + 0x88]
call fcn.0042947e
push eax
lea ecx, [esp + 0x20]
call fcn.004247e0
mov byte [esp + 0x3748], 0xf2
call fcn.0042947e
mov edi, dword [eax + 4]
mov eax, edi
lea esi, [esp + 0x2ac]
call fcn.00482a00
push ecx
mov byte [esp + 0x374c], 0xf3
mov esi, dword [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x14], esp
push dword [eax]
push esi
push str.Setting___s__s
push ecx
call fcn.00475230
add esp, 0x10
call fcn.00449a8e
pop ecx
mov ecx, dword [esp + 0x2ac]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x344]
push edi
push eax
xor eax, eax
mov edx, esi
call fcn.00482a60
pop ecx
pop ecx
lea ecx, [esi - 0x10]
mov byte [esp + 0x3748], 0xee
call fcn.0042201a
lea esi, [esp + 0x88]
call fcn.00453a7b
jmp 0x44e9e9
mov ebx, dword [esp + 0x344]
lea eax, [esp + 0x344]
push eax
call fcn.00496b20
lea eax, [esp + 0xa8c]
call fcn.0048d500
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Done
jmp 0x44dc3c
push str._GetProperty_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x519a18
call fcn.004d1dc0
mov edx, dword [esp + 0x28]
pop ecx
mov ecx, dword [esp + 0x2c]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x1e4]
call fcn.004247f5
push 1
push esi
push ecx
mov byte [esp + 0x3754], 0xf4
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x11e8]
push eax
call fcn.0048c620
mov byte [esp + 0x3748], 0xf5
push dword [0x549380]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x11e8]
push eax
call fcn.0044a39e
add esp, 0x10
lea ecx, [esp + 0x16c]
call fcn.00422487
lea eax, [esp + 0x31c]
push eax
mov byte [esp + 0x374c], 0xf6
call fcn.0042dd3f
lea eax, [esp + 0x16c]
push eax
push ecx
mov byte [esp + 0x3750], 0xf7
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Main
call fcn.004247f5
push 3
lea edi, [esp + 0x11e8]
call fcn.0048e870
mov ecx, dword [esp + 0x16c]
mov eax, dword [ecx - 0xc]
cmp eax, esi
jne 0x44ebeb
push 6
jmp 0x44c2af
lea edx, [esp + 0x31c]
push edx
push eax
push ecx
call fcn.0047d3f0
mov eax, dword [esp + 0x340]
mov eax, dword [eax]
add esp, 0xc
lea edi, [esp + 0x31c]
lea esi, [esp + 0x88]
call fcn.0042e244
mov eax, dword [esp + 0x334]
lea esi, [esp + 0xb0]
call fcn.0042e244
mov edi, esi
lea esi, [esp + 0x88]
call fcn.0042deba
test al, al
je 0x44c53b
xor ebx, ebx
lea esi, [esp + 0x88]
call fcn.0042de83
push dword [eax]
lea eax, [esp + 0x1e4]
call fcn.00424878
test eax, eax
jne 0x44ecce
call fcn.0042de83
add eax, 4
push dword [eax]
lea ecx, [esp + 0xe0]
call fcn.00428760
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
cmp eax, 0xffffffff
je 0x44ecbf
mov ecx, dword [esp + 0xdc]
push ebx
mov dword [esp + 0x178], ebx
mov edx, dword [ecx - 0xc]
lea esi, [esp + 0x178]
push esi
push edx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x44ecbf
mov eax, dword [esp + 0x174]
mov ecx, dword [esp + 0xdc]
cmp eax, dword [ecx - 0xc]
je 0x44ed0f
mov ecx, dword [esp + 0xdc]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x88]
call fcn.0042deae
mov eax, dword [esp + 0x334]
lea edi, [esp + 0x31c]
lea esi, [esp + 0xb0]
call fcn.0042e244
mov edi, esi
lea esi, [esp + 0x88]
call fcn.0042deba
test al, al
jne 0x44ec44
jmp 0x44c53b
push ebx
jmp 0x44c2af
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x38]
call fcn.004247e0
mov byte [esp + 0x3748], 0xfe
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x50], ecx
jle 0x44ed49
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x38]
call fcn.0042484e
push 1
push esi
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x738]
push eax
call fcn.0048c620
mov byte [esp + 0x3748], 0xff
push dword [0x549380]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x738]
push eax
call fcn.0044a39e
add esp, 0x10
cmp dword [esp + 0x7b4], esi
jne 0x44edb6
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44e6da
push 1
lea eax, [esp + 0x730]
push eax
lea eax, [esp + 0x114]
push eax
call fcn.0044a437
add esp, 0xc
push str._n_nSandboxing:_n_n
lea ecx, [esp + 0x110]
mov dword [esp + 0x374c], 0x100
call fcn.004280e0
lea eax, [esp + 0x72c]
push eax
lea eax, [esp + 0x2b8]
push eax
call fcn.0044a7be
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x110]
mov byte [esp + 0x374c], 1
call fcn.00424863
mov byte [esp + 0x3748], 0
mov ecx, dword [esp + 0x2b4]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x10c]
mov eax, dword [ecx - 0xc]
push ecx
push ecx
mov dword [esp + 0x18], esp
mov edi, esp
push ecx
add eax, eax
mov ecx, esp
mov dword [esp + 0x1c], esp
mov ebx, str..txt
push ebx
mov dword [esp + 0x2c], eax
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 2
mov eax, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00474150
pop ecx
push edi
mov byte [esp + 0x375c], 0
call fcn.004753f0
mov edi, dword [esp + 0x30]
add esp, 0xc
call fcn.00475c00
pop ecx
pop ecx
push esi
push str.Package_info
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 3
mov eax, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00474150
pop ecx
lea eax, [esp + 0x188]
push eax
mov byte [esp + 0x375c], 0
call fcn.004753f0
add esp, 0xc
mov byte [esp + 0x3750], 4
push dword [eax]
lea eax, [esp + 0x1f4]
push str.Saved_in:__s
push eax
call fcn.00475230
add esp, 0xc
push dword [eax]
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [esp + 0x1e8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x178]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x44c2ae
lea ecx, [esp + 0x10]
call fcn.00422487
lea ecx, [esp + 0x128]
mov dword [esp + 0x3748], 0x109
call fcn.00422487
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x374c], 0xa
call fcn.004247e0
mov byte [esp + 0x3748], 0xb
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x50], ecx
jle 0x44ef73
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x4c]
call fcn.0042484e
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..ini
call fcn.004247f5
push ecx
mov byte [esp + 0x3750], 0xc
lea eax, [esp + 0x50]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x128]
push eax
mov byte [esp + 0x3754], 0xb
call fcn.004753f0
add esp, 8
mov byte [esp + 0x374c], 0xd
lea eax, [esp + 0x124]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e0
call fcn.00478330
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x54]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xfa8]
push eax
call fcn.0048c620
mov byte [esp + 0x3748], 0xe
push dword [0x549380]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xfa8]
push eax
call fcn.0044a39e
add esp, 0x10
cmp dword [esp + 0x1024], esi
jne 0x44f043
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44e6da
lea eax, [esp + 0x128]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Main
call fcn.004247f5
push 3
lea edi, [esp + 0xfa8]
call fcn.0048e870
mov ecx, dword [esp + 0x128]
mov eax, dword [ecx - 0xc]
cmp eax, esi
jne 0x44f08a
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44c2f8
push ecx
push ecx
lea edi, [eax + eax]
lea eax, [esp + 0x128]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
call fcn.00475c00
jmp 0x44dcbe
push str.AppID_ShortDesc_FriendlyName_Category_DownloadUrl_IconUrl_Version_BuildUid_Size_PopularityIndex_n
lea ecx, [esp + 0x6c]
call fcn.004247f5
mov dword [esp + 0x3748], 0x10f
lea ecx, [esp + 0x28]
mov dword [esp + 0x130], esi
mov dword [esp + 0x1fc], esi
call fcn.00422487
push 1
push esi
push ecx
mov byte [esp + 0x3754], 0x10
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x1548]
push eax
call fcn.0048c620
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x3754], 0x11
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x12
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x375c], 0x13
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e0
push 2
push ecx
mov byte [esp + 0x3764], 0x14
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x1558]
push eax
mov byte [esp + 0x3768], 0x11
call fcn.0043cd5c
mov esi, 0x507b8c
push esi
lea eax, [esp + 0x214]
push 0x54d514
push eax
call fcn.00424a44
add esp, 0x2c
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x374c], 0x15
call fcn.00424863
mov byte [esp + 0x3748], 0x11
mov ecx, dword [esp + 0x1f0]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
lea ecx, [esp + 0x6c]
call fcn.004280e0
push esi
push 0x54d520
lea eax, [esp + 0x2cc]
push eax
call fcn.00424a44
add esp, 0xc
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x374c], 0x16
call fcn.00424863
mov byte [esp + 0x3748], 0x11
mov ecx, dword [esp + 0x2c4]
add ecx, 0xfffffff0
call fcn.0042201a
push str.Productivity_
lea ecx, [esp + 0x6c]
call fcn.004280e0
mov ebx, dword [esp + 0x24]
lea eax, [ebx + 1]
cmp dword [esp + 0x50], eax
mov edi, 0x519ce0
jle 0x44f242
mov eax, dword [esp + 0x2c]
push dword [eax + ebx*4 + 4]
lea ebx, [esp + 0x6c]
push edi
call fcn.00429cab
mov ebx, dword [esp + 0x2c]
pop ecx
pop ecx
jmp 0x44f250
push str._Download_URL_here__
lea ecx, [esp + 0x6c]
call fcn.004280e0
lea eax, [ebx + 2]
cmp dword [esp + 0x50], eax
jle 0x44f26e
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4]
lea ebx, [esp + 0x6c]
push edi
call fcn.00429cab
pop ecx
pop ecx
jmp 0x44f27c
push str._Icon_here__
lea ecx, [esp + 0x6c]
call fcn.004280e0
push esi
lea eax, [esp + 0x2d0]
push 0x54d528
push eax
call fcn.00424a44
add esp, 0xc
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x374c], 0x17
call fcn.00424863
mov byte [esp + 0x3748], 0x11
mov ecx, dword [esp + 0x2cc]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
lea eax, [esp + 0x1fc]
push 0x54d558
push eax
call fcn.00424a44
add esp, 0xc
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x374c], 0x18
call fcn.00424863
mov byte [esp + 0x3748], 0x11
mov ecx, dword [esp + 0x1f8]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push eax
lea edi, [esp + 0x204]
lea esi, [esp + 0x138]
call fcn.00474150
pop ecx
call fcn.00478230
pop ecx
push dword [esp + 0x130]
lea eax, [esp + 0x20c]
push 0x508ec0
push eax
call fcn.00475230
add esp, 0xc
push 0x507b8c
push eax
lea eax, [esp + 0x2a8]
push eax
mov byte [esp + 0x3754], 0x19
call fcn.00424a44
add esp, 0xc
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x374c], 0x1a
call fcn.00424863
mov ecx, dword [esp + 0x2a0]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3748], 0x11
mov ecx, dword [esp + 0x208]
add ecx, 0xfffffff0
call fcn.0042201a
push 0x50a014
lea ecx, [esp + 0x6c]
call fcn.004280e0
mov eax, dword [esp + 0x24]
add eax, 3
cmp dword [esp + 0x50], eax
jle 0x44f3bb
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4]
lea ecx, [esp + 0x2c]
call fcn.0042484e
jmp 0x44f423
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..csv
call fcn.004247f5
push ecx
mov byte [esp + 0x3750], 0x1b
mov eax, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00474150
pop ecx
lea eax, [esp + 0x278]
push eax
mov byte [esp + 0x3754], 0x11
call fcn.004753f0
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x374c], 0x1c
call fcn.00424839
mov byte [esp + 0x3748], 0x11
mov ecx, dword [esp + 0x270]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x68]
mov eax, dword [ecx - 0xc]
push ecx
push ecx
lea edi, [eax + eax]
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e0
call fcn.00475c00
pop ecx
pop ecx
push dword [0x549380]
push ecx
mov dword [esp + 0x18], esp
test eax, eax
jne 0x44f46c
mov eax, esp
lea ecx, [esp + 0x30]
push ecx
push str.Could_not_save_to
push eax
call fcn.00424a99
jmp 0x44c43b
mov ecx, esp
lea eax, [esp + 0x30]
push eax
call fcn.004247e0
jmp 0x44d424
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x10c8]
push eax
call fcn.0048c620
mov dword [esp + 0x3748], 0x11d
cmp dword [esp + 0x1144], esi
jne 0x44f4c4
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44cdfd
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x54d514]
push str._s.AppVirtDll.dll
push eax
call fcn.00475230
lea eax, [esp + 0x124]
add esp, 0xc
push eax
call fcn.00474900
add esp, 4
mov byte [esp + 0x374c], 0x1e
lea eax, [esp + 0x118]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
push ecx
mov byte [esp + 0x3750], 0x1f
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Main
call fcn.004247f5
push 2
pop ecx
lea edi, [esp + 0x10c4]
mov byte [esp + 0x3750], 0x1e
call fcn.0048ea10
push dword [0x549380]
lea eax, [esp + 0x118]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x218]
push eax
call fcn.00497490
add esp, 4
mov byte [esp + 0x3750], 0x20
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.EngineVersion_s
push ecx
call fcn.00475230
add esp, 0xc
call fcn.0044a324
pop ecx
pop ecx
mov byte [esp + 0x3748], 0x1e
mov ecx, dword [esp + 0x210]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
lea eax, [esp + 0x118]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
call fcn.00478330
jmp 0x44dcbf
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
call fcn.004247e0
push 0x2e
lea ecx, [esp + 0x2c]
mov dword [esp + 0x374c], 0x121
call fcn.004424ce
push eax
lea eax, [esp + 0x2cc]
push eax
lea ecx, [esp + 0x30]
call fcn.004249e4
push str..new.exe
push eax
lea eax, [esp + 0xa4]
push eax
mov byte [esp + 0x3754], 0x22
call fcn.00424a44
add esp, 0xc
mov byte [esp + 0x3748], 0x24
mov ecx, dword [esp + 0x2c8]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x21c]
call fcn.004247f5
push esi
mov byte [esp + 0x374c], 0x25
push dword [esp + 0xa0]
push dword [esp + 0x220]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x44f68d
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xa4]
push dword [esp + 0x34]
push str.Cant_copy__s_to__s
push eax
call fcn.00475230
add esp, 0x10
jmp 0x44c2a9
push dword [esp + 0x9c]
push dword [esp + 0x2c]
call fcn.004426ec
pop ecx
pop ecx
xor esi, esi
inc esi
push esi
push 0
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x588]
push eax
call fcn.0048c620
push esi
push esi
push ecx
mov byte [esp + 0x3754], 0x26
lea eax, [esp + 0xa8]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x1158]
push eax
call fcn.0048c620
mov byte [esp + 0x3748], 0x27
push dword [0x549380]
lea eax, [esp + 0x50]
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x588]
push eax
call fcn.0044a39e
add esp, 0x10
lea eax, [esp + 0x38]
lea ecx, [esp + 0x5ec]
call fcn.004538e5
jmp 0x44f845
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.CEChangeEngine.tmp
call fcn.004247f5
lea eax, [esp + 0xb0]
push eax
call fcn.00474900
add esp, 4
mov byte [esp + 0x374c], 0x28
lea eax, [esp + 0xb0]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
lea esi, [esp + 0x3c]
mov byte [esp + 0x374c], 0x29
call fcn.0042947e
push ecx
add eax, 0x2c
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
call fcn.0042947e
mov byte [esp + 0x3750], 0x28
mov ecx, dword [eax + 0x28]
lea edi, [esp + 0x584]
call fcn.0048ea10
test eax, eax
jne 0x44f8a1
call fcn.0042947e
push ecx
add eax, 0x2c
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
push 0x4000
mov byte [esp + 0x3750], 0x2a
call fcn.0042947e
push dword [eax + 0x28]
lea eax, [esp + 0xb8]
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x115c]
push eax
mov byte [esp + 0x375c], 0x28
call fcn.0048e230
test eax, eax
jne 0x44f8cd
push ecx
lea eax, [esp + 0xb0]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
call fcn.00478330
pop ecx
mov byte [esp + 0x3748], 0x27
mov ecx, dword [esp + 0xac]
add ecx, 0xfffffff0
call fcn.0042201a
call fcn.0045395d
lea eax, [esp + 0x308]
lea ecx, [esp + 0x5ec]
call fcn.004538fa
mov edi, eax
lea esi, [esp + 0x38]
call fcn.00424d8f
test al, al
jne 0x44f733
lea eax, [esp + 0x57c]
call fcn.0048d500
lea eax, [esp + 0x114c]
call fcn.0048d500
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xa4]
push str.Successfully_changed_Loader:__s
jmp 0x44d41b
push dword [0x549380]
call fcn.0042947e
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push dword [eax + 0x2c]
lea esi, [esp + 0x44]
call fcn.0042947e
push dword [eax + 0x28]
push str.Cannot_read_container__d__s_to_file
push edi
jmp 0x44f680
push dword [0x549380]
lea esi, [esp + 0x3c]
call fcn.0042947e
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push dword [eax + 0x2c]
jmp 0x44f8ba
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x24]
call fcn.004247e0
push 0x2e
lea ecx, [esp + 0x24]
mov dword [esp + 0x374c], 0x12b
call fcn.004424ce
push eax
lea eax, [esp + 0x27c]
push eax
lea ecx, [esp + 0x28]
call fcn.004249e4
push str..new.exe
push eax
lea eax, [esp + 0xc8]
push eax
mov byte [esp + 0x3754], 0x2c
call fcn.00424a44
add esp, 0xc
mov byte [esp + 0x3748], 0x2e
mov ecx, dword [esp + 0x278]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0xcc]
call fcn.004247f5
push esi
mov byte [esp + 0x374c], 0x2f
push dword [esp + 0xc4]
push dword [esp + 0x28]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x44f9a6
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xc8]
push dword [esp + 0x2c]
jmp 0x44f67a
push 1
push 1
push ecx
lea eax, [esp + 0xcc]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x4f8]
push eax
call fcn.0048c620
mov byte [esp + 0x3748], 0x30
push dword [0x549380]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x4f8]
push eax
call fcn.0044a39e
add esp, 0x10
cmp dword [esp + 0x574], esi
jne 0x44fa1c
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_open_PeContainer
jmp 0x44c2a4
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
mov esi, str.Main
push esi
call fcn.004247f5
push 0
push 2
push ecx
mov byte [esp + 0x3758], 0x31
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x4fc]
push eax
mov byte [esp + 0x375c], 0x30
call fcn.0048e230
test eax, eax
je 0x44fa7e
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEDLL
jmp 0x44c2a4
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f5
push 0
push 8
push ecx
mov byte [esp + 0x3758], 0x32
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
lea eax, [esp + 0xdc]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247e0
push edi
call fcn.00482ec0
pop ecx
pop ecx
lea eax, [esp + 0x4fc]
push eax
mov byte [esp + 0x375c], 0x30
call fcn.0048e230
test eax, eax
je 0x44faea
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEDLL64
jmp 0x44c2a4
lea ecx, [esp + 0x170]
call fcn.00422487
lea ecx, [esp + 0x138]
call fcn.00422487
lea eax, [esp + 0x170]
push eax
push ecx
mov byte [esp + 0x3750], 0x34
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247f5
push 3
lea edi, [esp + 0x4f8]
call fcn.0048e870
test eax, eax
je 0x44fb48
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_Read_PeContainer_PECONTAINER_INI
jmp 0x44c2a4
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
lea eax, [esp + 0xd0]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
lea ebx, [esp + 0x144]
call fcn.004247e0
push edi
call fcn.00497490
add esp, 4
mov byte [esp + 0x3750], 0x35
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.EngineVersion
call fcn.004247f5
push ecx
mov byte [esp + 0x3754], 0x36
lea eax, [esp + 0x17c]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3754], 0x34
call fcn.00479920
pop ecx
pop ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f5
push 0x4000
push 3
pop esi
push ecx
mov byte [esp + 0x3754], 0x37
mov eax, ebx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247e0
mov ecx, esi
lea ebx, [esp + 0x4f8]
mov byte [esp + 0x3754], 0x34
call fcn.0048e010
test eax, eax
je 0x44fc12
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_Add_PeContainerStr_PECONTAINER_INI
jmp 0x44c2a4
lea eax, [esp + 0x4ec]
call fcn.0048d500
push dword [0x549380]
lea eax, [esp + 0xcc]
push ecx
mov dword [esp + 0x18], esp
mov esi, esp
push dword [esp + 0xc8]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x230]
push eax
call fcn.00497490
pop ecx
pop ecx
mov byte [esp + 0x3754], 0x38
push dword [eax]
push str.Successfully_changed_to_Engine__s._nNew_package_saved_in:_n_s
push esi
call fcn.00475230
add esp, 0x10
call fcn.0044a324
pop ecx
pop ecx
mov ecx, dword [esp + 0x220]
jmp 0x44e52a
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x24]
call fcn.004247e0
push 0x2e
lea ecx, [esp + 0x24]
mov dword [esp + 0x374c], 0x139
call fcn.004424ce
push eax
lea eax, [esp + 0x2ac]
push eax
lea ecx, [esp + 0x28]
call fcn.004249e4
push str..new.exe
push eax
lea eax, [esp + 0xd8]
push eax
mov byte [esp + 0x3754], 0x3a
call fcn.00424a44
add esp, 0xc
mov byte [esp + 0x3748], 0x3c
mov ecx, dword [esp + 0x2a8]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x22c]
call fcn.004247f5
push esi
mov byte [esp + 0x374c], 0x3d
push dword [esp + 0xd4]
push dword [esp + 0x28]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x44fd3e
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xd8]
push dword [esp + 0x2c]
jmp 0x44f67a
push 1
push 1
push ecx
lea eax, [esp + 0xdc]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x7c8]
push eax
call fcn.0048c620
mov byte [esp + 0x3748], 0x3e
push dword [0x549380]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x7c8]
push eax
call fcn.0044a39e
add esp, 0x10
cmp dword [esp + 0x844], esi
jne 0x44fdaf
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44fa12
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.Main
call fcn.004247f5
push esi
push 3
push ecx
mov byte [esp + 0x3758], 0x3f
lea eax, [esp + 0x238]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x7cc]
push eax
mov byte [esp + 0x375c], 0x3e
call fcn.0048e230
cmp eax, esi
je 0x44fe0f
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEINI
jmp 0x44c2a4
lea eax, [esp + 0x7bc]
call fcn.0048d500
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xd8]
push str.Successfully_changed_INI._nNew_package_saved_in:_n_s
jmp 0x44dcb0
lea esi, [esp + 0x15cc]
call fcn.004383c7
mov dword [esp + 0x3748], 0x140
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x24]
push dword [edi + esi*4 + 4]
lea ecx, [esp + 0x1618]
call fcn.0042484e
push dword [edi + esi*4 + 8]
lea ecx, [esp + 0x15f0]
call fcn.0042484e
push dword [edi + esi*4 + 0xc]
lea ecx, [esp + 0x15e8]
call fcn.0042484e
push eax
lea ecx, [esp + 0x15dc]
call fcn.00424839
push dword [edi + esi*4 + 0x10]
lea ecx, [esp + 0x1620]
call fcn.0042484e
push dword [edi + esi*4 + 0x14]
lea ecx, [esp + 0x161c]
call fcn.0042484e
lea eax, [esp + 0x1734]
push eax
lea edi, [esp + 0x15d0]
call fcn.004af780
lea eax, [esp + 0x1734]
push eax
mov byte [esp + 0x374c], 0x41
call fcn.004af920
test eax, eax
je 0x44ff2d
xor esi, esi
mov eax, 0x51a1d0
cmp dword [esp + 0x1734], esi
jne 0x44fef7
mov eax, 0x51a1d8
push dword [esp + 0x1740]
push dword [esp + 0x1740]
push eax
lea eax, [esp + 0x28c]
push str.Need_to_update:__s_nVersion:__s_nBuildUID:__s_n
push eax
call fcn.00475230
add esp, 0x14
push esi
push str.Server_test:
push dword [esp + 0x288]
jmp 0x44e5f4
push 0
push str.Server_test:
push str.Failed
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 1
jmp 0x44c2af
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x6a8]
push eax
call fcn.0048c620
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x3754], 0x149
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x4a
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x375c], 0x4b
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e0
push 2
push ecx
mov byte [esp + 0x3764], 0x4c
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x6b8]
push eax
mov byte [esp + 0x3768], 0x49
call fcn.0043cd5c
add esp, 0x20
lea ecx, [esp + 0x69c]
call fcn.0043b97f
lea eax, [esp + 0x69c]
call fcn.0048d500
mov dword [esp + 0x3748], 4
lea eax, [esp + 0x69c]
jmp 0x44cd05
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xc48]
push eax
call fcn.0048c620
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x3754], 0x14d
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x4e
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x375c], 0x4f
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e0
push 2
push ecx
mov byte [esp + 0x3764], 0x50
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xc58]
push eax
mov byte [esp + 0x3768], 0x4d
call fcn.0043cd5c
add esp, 0x20
push esi
push esi
push esi
push ecx
mov eax, esp
mov dword [esp + 0x20], esp
push eax
xor ecx, ecx
call fcn.00486a40
pop ecx
mov ecx, esi
call fcn.0049f890
add esp, 0x10
lea eax, [esp + 0xc3c]
call fcn.0048d500
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
mov edi, 0x54d508
push edi
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x450113
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.Cannot_obtain_INI_info_from_resource_
call fcn.004247f5
call fcn.00449a8e
pop ecx
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push str.MountVirtReg
push eax
call fcn.00475230
pop ecx
pop ecx
call fcn.00449a8e
mov eax, esp
mov dword [esp + 0x14], esp
push str._____________
push eax
call fcn.00475230
pop ecx
pop ecx
call fcn.00449a8e
pop ecx
mov ecx, edi
call fcn.0042d4df
mov edi, eax
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
cmp edi, esi
jne 0x45016a
push str.Cannot_mount_virtual_registry
call fcn.004247f5
call fcn.00449a8e
jmp 0x450177
push ebx
call fcn.004247f5
push edi
call fcn.0044a8ab
pop ecx
pop ecx
mov dword [esp + 0x3748], 4
lea eax, [esp + 0xc3c]
jmp 0x44cd05
mov eax, dword [esp + 0x2c]
mov edi, dword [esp + 0x24]
push dword [eax + edi*4 + 4]
lea ecx, [esp + 0x15c]
call fcn.004247f5
mov dword [esp + 0x3748], 0x151
mov eax, dword [esp + 0x2c]
push dword [eax + edi*4 + 8]
lea ecx, [esp + 0xa4]
call fcn.004247f5
push 0x10
mov byte [esp + 0x374c], 0x52
push esi
push dword [esp + 0x160]
call fcn.004d6168
add esp, 8
mov edi, eax
mov eax, esp
mov dword [esp + 0x14], esp
push dword [esp + 0xa4]
push edi
push str.SetFileFlags:__0x_x____s_
push eax
call fcn.00475230
add esp, 0x10
call fcn.00449a8e
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xcd8]
push eax
call fcn.0048c620
mov byte [esp + 0x3748], 0x53
push dword [0x549380]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xcd8]
push eax
call fcn.0044a39e
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x54
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x375c], 0x55
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e0
push 2
push ecx
mov byte [esp + 0x3764], 0x56
mov ecx, esp
lea eax, [esp + 0x34]
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xce8]
push eax
mov byte [esp + 0x3768], 0x53
call fcn.0043cd5c
call fcn.00480900
mov ebx, 0x54cd10
mov eax, ebx
call fcn.00495b20
mov eax, dword [esp + 0xc0]
push esi
call fcn.00480fc0
add esp, 0x24
push ecx
mov dword [esp + 0x14], esp
cmp eax, esi
je 0x45034d
mov eax, dword [eax + 0x24]
mov dword [eax], edi
mov ecx, esp
push dword [0x54cd10]
call fcn.004247f5
mov ecx, ebx
call fcn.00480ef0
pop ecx
cmp eax, esi
je 0x450337
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xa8]
push edi
push str.Success:_n__x___s
push eax
call fcn.00475230
add esp, 0x10
call fcn.0044a324
pop ecx
jmp 0x450369
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push str._SetFileFlags:_could_not_save_tree
push eax
call fcn.00475230
pop ecx
pop ecx
jmp 0x450364
mov eax, esp
push dword [esp + 0xa4]
push str._SetFileFlags:_could_not_find__s
push eax
call fcn.00475230
add esp, 0xc
call fcn.00449a8e
pop ecx
mov eax, ebx
call fcn.00495b30
lea eax, [esp + 0xccc]
mov byte [esp + 0x3748], 0x52
call fcn.00429e54
mov ecx, dword [esp + 0xa0]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x158]
jmp 0x45363b
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.DbgZip
call fcn.004247f5
call fcn.00449abe
mov dword [esp], str._DbgZip:
call fcn.004d1e6a
mov edx, dword [esp + 0x28]
pop ecx
mov ecx, dword [esp + 0x2c]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x68]
call fcn.0042484e
jmp 0x44c166
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xa08]
push eax
call fcn.0048c620
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x3754], 0x157
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x58
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x375c], 0x59
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247f5
push 2
push ecx
mov byte [esp + 0x3764], 0x5a
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xa18]
push eax
mov byte [esp + 0x3768], 0x57
call fcn.0043cd5c
add esp, 0x20
push dword [0x549380]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xa08]
push eax
call fcn.0044a39e
push dword [esp + 0x64]
lea edx, [esp + 0xa10]
mov ecx, 0x54d508
call fcn.00440ca3
add esp, 0x14
mov dword [esp + 0x3748], 4
lea eax, [esp + 0x9fc]
jmp 0x44cd05
push 1
xor edi, edi
push edi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x1278]
push eax
call fcn.0048c620
push 0xffffffffffffffff
push edi
push ecx
mov dword [esp + 0x3754], 0x161
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x62
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x375c], 0x63
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e0
push 2
push ecx
mov byte [esp + 0x3764], 0x64
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x1288]
push eax
mov byte [esp + 0x3768], 0x61
call fcn.0043cd5c
add esp, 0x20
lea esi, [esp + 0xb0]
call fcn.00493730
mov byte [esp + 0x3748], 0x65
mov dword [esp + 0x34], edi
jmp 0x450620
push dword [0x54d514]
lea eax, [esp + 0x2b10]
push eax
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
jne 0x450620
mov dword [esp + 0x20], edi
cmp dword [esp + 0x2708], edi
jbe 0x450620
mov ebx, dword [esp + 0x20]
shl ebx, 3
lea esi, [esp + ebx + 0x270c]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [esi], eax
je 0x45060f
test byte [esp + ebx + 0x2710], 3
je 0x45060f
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x54d564
call fcn.004247e0
push ecx
mov byte [esp + 0x3750], 0x66
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x54d514
call fcn.004247e0
mov byte [esp + 0x3750], 0x65
mov ebx, dword [esi]
call fcn.00445224
pop ecx
pop ecx
xor edi, edi
inc dword [esp + 0x20]
mov eax, dword [esp + 0x20]
cmp eax, dword [esp + 0x2708]
jb 0x4505b0
push 1
lea eax, [esp + 0x22e8]
push eax
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0x40]
call fcn.00493450
test eax, eax
jne 0x45058a
push edi
push edi
push edi
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
lea eax, [esp + 0xb0]
call fcn.00493750
lea eax, [esp + 0x126c]
mov dword [esp + 0x3748], 4
call fcn.00429e54
xor esi, esi
jmp 0x44c45a
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x1428]
push eax
call fcn.0048c620
push 0xffffffffffffffff
mov dword [esp + 0x374c], 0x167
push dword [esp + 0x44]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x68
mov ecx, esp
mov dword [esp + 0x24], esp
push str._Vintegrate_
call fcn.004247f5
push ecx
mov byte [esp + 0x375c], 0x69
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e0
push esi
push ecx
mov byte [esp + 0x3764], 0x6a
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x1438]
push eax
mov byte [esp + 0x3768], 0x67
call fcn.0043cd5c
add esp, 0x20
call fcn.0044a258
jmp 0x44c2ae
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push str._ProcessList:all
push dword [eax + ecx*4]
call fcn.004d1bae
mov edi, eax
neg edi
pop ecx
sbb edi, edi
pop ecx
lea esi, [esp + 0xb0]
inc edi
call fcn.00493730
mov dword [esp + 0x3748], 0x16b
and dword [esp + 0x20], 0
lea ecx, [esp + 0x44]
call fcn.00422487
xor eax, eax
test edi, edi
sete al
mov byte [esp + 0x3748], 0x6c
mov dword [esp + 0x34], eax
jmp 0x450a42
lea eax, [esp + 0x20e4]
push eax
lea eax, [esp + 0x234]
push str._AppID_ws_n
push eax
call fcn.00475230
add esp, 0xc
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x374c], 0x6d
call fcn.00424863
mov byte [esp + 0x3748], 0x6c
mov ecx, dword [esp + 0x230]
add ecx, 0xfffffff0
call fcn.0042201a
push dword [esp + 0x18c0]
lea eax, [esp + 0x2c4]
push str.____SerialId:__d_n
push eax
call fcn.00475230
add esp, 0xc
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x374c], 0x6e
call fcn.00424863
mov byte [esp + 0x3748], 0x6c
mov ecx, dword [esp + 0x2c0]
add ecx, 0xfffffff0
call fcn.0042201a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x1cd8]
mov esi, 0x3e8
xor edx, edx
mov ecx, esi
div ecx
push eax
lea eax, [esp + 0x23c]
push str.____Started:__d_sec_ago_n
push eax
call fcn.00475230
add esp, 0xc
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x374c], 0x6f
call fcn.00424863
mov byte [esp + 0x3748], 0x6c
mov ecx, dword [esp + 0x238]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x1cdc]
xor edx, edx
div esi
push eax
lea eax, [esp + 0x28c]
push str.____Blocking_buffering:__d_sec_n
push eax
call fcn.00475230
add esp, 0xc
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x374c], 0x70
call fcn.00424863
mov byte [esp + 0x3748], 0x6c
mov ecx, dword [esp + 0x288]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x240]
push str.____Processes:_n
push eax
call fcn.00475230
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x374c], 0x71
call fcn.00424863
mov byte [esp + 0x3748], 0x6c
mov ecx, dword [esp + 0x240]
add ecx, 0xfffffff0
call fcn.0042201a
and dword [esp + 0x48], 0
cmp dword [esp + 0x1ce0], 0
jbe 0x450a42
push ebx
lea ecx, [esp + 0xdc]
call fcn.004247f5
mov byte [esp + 0x3748], 0x72
mov edi, dword [esp + 0x48]
lea edi, [esp + edi*8 + 0x1ce4]
push dword [edi]
lea esi, [esp + 0xdc]
call fcn.00473990
pop ecx
test eax, eax
jne 0x45093e
push 0x50aba8
mov ecx, esi
call fcn.0042484e
push 0x5c
push ecx
lea eax, [esp + 0xe0]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x250]
push eax
call fcn.00475560
add esp, 0xc
mov byte [esp + 0x3748], 0x73
push dword [eax]
lea eax, [esp + 0x2b4]
push dword [edi]
push str._______wd:__ws
push eax
call fcn.00475230
add esp, 0x10
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x374c], 0x74
call fcn.00424863
mov ecx, dword [esp + 0x2b0]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3748], 0x72
mov ecx, dword [esp + 0x248]
add ecx, 0xfffffff0
call fcn.0042201a
mov esi, dword [esp + 0x48]
mov eax, dword [esp + esi*8 + 0x1ce8]
test eax, eax
je 0x450a0b
push eax
lea eax, [esp + 0x294]
push str._0x_x_
push eax
call fcn.00475230
add esp, 0xc
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x374c], 0x75
call fcn.00424863
mov byte [esp + 0x3748], 0x72
mov ecx, dword [esp + 0x290]
add ecx, 0xfffffff0
call fcn.0042201a
push 0x5065cc
lea ecx, [esp + 0x48]
call fcn.004280e0
mov byte [esp + 0x3748], 0x6c
mov ecx, dword [esp + 0xd8]
add ecx, 0xfffffff0
call fcn.0042201a
inc esi
mov dword [esp + 0x48], esi
cmp esi, dword [esp + 0x1ce0]
jb 0x4508ff
push dword [esp + 0x34]
lea eax, [esp + 0x18c0]
push eax
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0x2c]
call fcn.00493450
test eax, eax
jne 0x450783
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
cmp dword [esp + 0x28], eax
jne 0x450a90
push str.No_active_virtual_apps
call fcn.004247f5
call fcn.0044a324
pop ecx
pop ecx
jmp 0x44ff41
lea eax, [esp + 0x4c]
jmp 0x44f472
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
push 0x54d508
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x450acc
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
lea esi, [esp + 0xb0]
call fcn.00493730
mov dword [esp + 0x3748], 0x176
and dword [esp + 0x34], 0
jmp 0x450b03
push dword [0x54d514]
lea eax, [esp + 0x3538]
push eax
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x450b33
push 1
lea eax, [esp + 0x2d10]
push eax
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0x40]
call fcn.00493450
test eax, eax
jne 0x450aea
lea eax, [esp + 0xb0]
call fcn.00493750
jmp 0x44d42b
push 0x2bc
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0xb0]
mov dword [esp + 0x3748], 4
call fcn.00493750
jmp 0x450acc
lea eax, [esp + 0x250]
push eax
mov eax, dword [esp + 0x5c]
mov eax, dword [eax + 0x44]
call fcn.00433bc7
lea eax, [esp + 0x250]
push eax
call fcn.00433d04
jmp 0x44c2ae
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.AutoUpdate
call fcn.004247f5
call fcn.00449abe
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
mov edi, 0x54d508
push edi
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x450bc9
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x54d550]
push str.AutoUpdate_s
push eax
call fcn.00475230
add esp, 0xc
call fcn.00449abe
mov ecx, 0x54d550
mov dword [esp], str.https:__online.cameyo.com
call fcn.0042484e
push str.0000
mov ecx, 0x54d554
call fcn.0042484e
mov ecx, edi
call fcn.004b1590
jmp 0x44c45a
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.VirtRegSyncExport
call fcn.004247f5
call fcn.00449abe
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
push 0x54d508
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x450c5d
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
call fcn.00446c56
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
push str.VirtRegSyncExport:_bRet_d
push ecx
call fcn.00475230
add esp, 0xc
jmp 0x44c454
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.AppServer
call fcn.004247f5
call fcn.00449abe
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
push 0x54d508
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x450cc5
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
push esi
call fcn.0044ac0d
pop ecx
mov esi, eax
lea eax, [esp + 0x2d0]
push esi
push eax
call fcn.0047c1e0
add esp, 4
mov dword [esp + 0x374c], 0x179
mov ecx, esp
mov dword [esp + 0x14], esp
push dword [eax]
push str.AppServer:_ApiRet_s
push ecx
call fcn.00475230
add esp, 0xc
call fcn.00449abe
pop ecx
mov ecx, dword [esp + 0x2d0]
jmp 0x45363b
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.StartStreaming:AppIDSkype
call fcn.004247f5
call fcn.00429b84
pop ecx
jmp 0x44c459
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
push 0x54d508
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x450d63
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.open
xor ebx, ebx
call fcn.004247f5
push esi
push ecx
mov dword [esp + 0x3754], 0x17a
mov eax, esp
mov dword [esp + 0x20], esp
push dword [0x54d564]
xor edi, edi
push str._select___s_
push eax
call fcn.00475230
add esp, 8
mov byte [esp + 0x3758], 0x7b
mov ecx, esp
mov dword [esp + 0x48], esp
push str.explorer.exe
call fcn.004247f5
mov dword [esp + 0x3758], 4
call fcn.00473bb0
add esp, 0x10
jmp 0x450674
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.SvcRegister
call fcn.004247f5
call fcn.00449abe
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
mov edi, 0x54d508
push edi
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x450e18
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
mov ecx, edi
call fcn.0042d4df
mov ebx, eax
cmp ebx, esi
jne 0x450e3c
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_mount_virtual_registry
jmp 0x44c2a4
call fcn.00480900
push dword [0x549380]
push ebx
push edi
call fcn.00423ab9
add esp, 0xc
push dword [0x549380]
mov edi, eax
cmp edi, esi
jne 0x450e6b
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Success
jmp 0x450e7c
cmp edi, 5
jne 0x450e8a
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_services_to_register
call fcn.004247f5
call fcn.0044a324
pop ecx
pop ecx
jmp 0x450ed2
lea eax, [esp + 0x25c]
push edi
push eax
call fcn.0047c1e0
add esp, 4
mov dword [esp + 0x3750], 0x17c
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Failed_registering_services:__s
push ecx
call fcn.00475230
add esp, 0xc
call fcn.0044a324
pop ecx
pop ecx
mov ecx, dword [esp + 0x258]
add ecx, 0xfffffff0
call fcn.0042201a
push edi
jmp 0x44c2af
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.SvcStart
call fcn.004247f5
call fcn.00449abe
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
mov edi, 0x54d508
push edi
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x450f21
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
mov ecx, edi
call fcn.0042430b
push dword [0x549380]
mov edi, eax
cmp edi, esi
je 0x450e5d
cmp edi, 5
jne 0x450f4e
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_services_to_start
jmp 0x450e7c
lea eax, [esp + 0x29c]
push edi
push eax
call fcn.0047c1e0
add esp, 4
mov dword [esp + 0x3750], 0x17d
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Failed_starting_services:__s
push ecx
call fcn.00475230
add esp, 0xc
call fcn.0044a324
pop ecx
pop ecx
mov ecx, dword [esp + 0x298]
jmp 0x450eca
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.SvcRegisterStart
call fcn.004247f5
call fcn.00449abe
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
mov edi, 0x54d508
push edi
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x450fdc
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
mov ecx, edi
call fcn.0042d4df
mov ebx, eax
cmp ebx, esi
jne 0x450ffb
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x450e32
call fcn.00480900
push dword [0x549380]
push ebx
push edi
call fcn.00423ab9
add esp, 0xc
mov ebx, str.Failed_registering_services:__s
cmp eax, 5
jne 0x45103a
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_services_to_register
call fcn.004247f5
call fcn.0044a324
pop ecx
pop ecx
jmp 0x451093
cmp eax, esi
je 0x451093
push dword [0x549380]
push eax
lea eax, [esp + 0x268]
push eax
call fcn.0047c1e0
add esp, 4
mov dword [esp + 0x3750], 0x17e
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push ebx
push ecx
call fcn.00475230
add esp, 0xc
call fcn.0044a324
pop ecx
pop ecx
mov dword [esp + 0x3748], 4
mov ecx, dword [esp + 0x260]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, edi
call fcn.0042430b
push dword [0x549380]
mov edi, eax
cmp edi, esi
je 0x450e5d
cmp edi, 5
je 0x450e70
lea eax, [esp + 0x2bc]
push edi
push eax
call fcn.0047c1e0
add esp, 4
mov dword [esp + 0x3750], 0x17f
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push ebx
push ecx
call fcn.00475230
add esp, 0xc
call fcn.0044a324
pop ecx
pop ecx
mov ecx, dword [esp + 0x2b8]
jmp 0x450eca
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.SvcStop
call fcn.004247f5
call fcn.00449abe
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
mov edi, 0x54d508
push edi
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x45113d
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
push esi
mov ecx, edi
call fcn.00423eab
mov edi, eax
pop ecx
push dword [0x549380]
cmp edi, esi
je 0x450e5d
cmp edi, 5
jne 0x45116c
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_services_to_stop
jmp 0x450e7c
lea eax, [esp + 0x26c]
push edi
push eax
call fcn.0047c1e0
add esp, 4
mov dword [esp + 0x3750], 0x180
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Failed_stopping_services:__s
push ecx
call fcn.00475230
add esp, 0xc
call fcn.0044a324
pop ecx
pop ecx
mov ecx, dword [esp + 0x268]
jmp 0x450eca
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.SvcRemove
call fcn.004247f5
call fcn.00449abe
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
mov edi, 0x54d508
push edi
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x4511fa
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
push 1
mov ecx, edi
call fcn.00423eab
mov edi, eax
pop ecx
push dword [0x549380]
cmp edi, esi
je 0x450e5d
cmp edi, 5
jne 0x45122a
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_services_to_remove
jmp 0x450e7c
lea eax, [esp + 0x1f8]
push edi
push eax
call fcn.0047c1e0
add esp, 4
mov dword [esp + 0x3750], 0x181
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Failed_removing_services:__s
push ecx
call fcn.00475230
add esp, 0xc
call fcn.0044a324
pop ecx
pop ecx
mov ecx, dword [esp + 0x1f4]
jmp 0x450eca
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.ScmDirectInit
call fcn.004247f5
call fcn.00449abe
mov dword [esp], 0x51aba0
call fcn.004d1dc0
mov edx, dword [esp + 0x28]
pop ecx
mov ecx, dword [esp + 0x2c]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x208]
call fcn.004247f5
push ecx
mov dword [esp + 0x374c], 0x182
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
mov ebx, 0x54d508
push ebx
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x4512ec
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
push ecx
lea eax, [esp + 0x208]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
mov edi, 0x54d5a0
call fcn.004247e0
call fcn.0042cf17
pop ecx
mov edi, ebx
call fcn.004246ed
jmp 0x44c2ae
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.RepoSync
call fcn.004247f5
call fcn.00449abe
mov eax, dword [esp + 0x30]
pop ecx
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x16c]
call fcn.004247f5
lea eax, [esp + 0x4bc]
push eax
mov dword [esp + 0x374c], 0x183
call fcn.00424bee
lea eax, [esp + 0x4a4]
push eax
mov byte [esp + 0x374c], 0x84
call fcn.00424bee
lea eax, [esp + 0x4d4]
push eax
mov byte [esp + 0x374c], 0x85
call fcn.00424bee
push esi
lea eax, [esp + 0x4d8]
push eax
lea eax, [esp + 0x4ac]
push eax
lea eax, [esp + 0x4c8]
push eax
push ecx
mov byte [esp + 0x375c], 0x86
lea eax, [esp + 0x17c]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247e0
push ecx
mov byte [esp + 0x3760], 0x87
lea eax, [esp + 0x180]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3760], 0x86
call fcn.00440fc1
add esp, 0x18
push eax
jmp 0x44c2af
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.MergeRegistry
call fcn.004247f5
call fcn.00449abe
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
mov edi, 0x54d508
push edi
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x451438
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
push edi
call fcn.004422bf
pop ecx
mov edi, eax
lea eax, [esp + 0x20c]
push edi
push eax
call fcn.0047c1e0
add esp, 4
mov ecx, esp
mov dword [esp + 0x374c], 0x188
mov dword [esp + 0x14], esp
push dword [eax]
push edi
push str.Loader_MergeRegistry___d__s_
push ecx
call fcn.00475230
add esp, 0x10
call fcn.00449a8e
pop ecx
mov dword [esp + 0x3748], 4
mov ecx, dword [esp + 0x20c]
add ecx, 0xfffffff0
call fcn.0042201a
push dword [0x549380]
cmp edi, esi
je 0x450e5d
lea eax, [esp + 0x218]
push edi
push eax
call fcn.0047c1e0
add esp, 4
mov dword [esp + 0x3750], 0x189
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Failed:__s
push ecx
call fcn.00475230
add esp, 0xc
call fcn.0044a324
pop ecx
pop ecx
mov ecx, dword [esp + 0x214]
jmp 0x450eca
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.OpenFile
call fcn.004247f5
call fcn.00449abe
mov eax, dword [esp + 0x30]
pop ecx
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x128]
call fcn.004247f5
push ecx
mov dword [esp + 0x374c], 0x18a
lea eax, [esp + 0x128]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x220]
push eax
call fcn.004752c0
pop ecx
pop ecx
mov edi, eax
mov byte [esp + 0x3748], 0x8b
call fcn.00430abb
push eax
lea ecx, [esp + 0x24]
call fcn.004247e0
mov byte [esp + 0x3748], 0x8d
mov ecx, dword [esp + 0x21c]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], esi
jne 0x451594
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.File_has_no_extension
jmp 0x44c2a4
lea ebx, [esp + 0x20]
call fcn.004537f5
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
push 0x54d508
call fcn.0042c77b
xor ebx, ebx
pop ecx
pop ecx
cmp al, bl
jne 0x4515d2
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
mov dword [esp + 0x148], ebx
push 0x3b
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x54d5dc
lea edi, [esp + 0x154]
call fcn.004247e0
lea eax, [esp + 0x8c]
push eax
call fcn.00478e30
add esp, 0xc
or esi, 0xffffffff
mov byte [esp + 0x3748], 0x8e
cmp dword [esp + 0x148], esi
je 0x45185d
mov eax, dword [esp + 0x84]
cmp dword [eax - 0xc], ebx
jne 0x45163d
lea ecx, [esp + 0x84]
mov byte [esp + 0x3748], 0x8d
call fcn.004224c3
jmp 0x4515d9
push 0x3e
push ecx
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
mov dword [esp + 0xd8], ebx
lea edi, [esp + 0xd8]
call fcn.004247e0
lea eax, [esp + 0xac]
push eax
call fcn.00478e30
add esp, 0xc
mov byte [esp + 0x3748], 0x8f
cmp dword [esp + 0xcc], esi
je 0x4516c5
push 0x3e
push ecx
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x124]
push eax
call fcn.00478e30
add esp, 0xc
mov byte [esp + 0x3748], 0x90
cmp dword [esp + 0xcc], esi
jne 0x4516d6
lea ecx, [esp + 0x11c]
call fcn.004224c3
lea ecx, [esp + 0xa4]
call fcn.004224c3
jmp 0x451627
mov dword [esp + 0x160], ebx
push 0x2c
push ecx
lea eax, [esp + 0xac]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
lea edi, [esp + 0x16c]
call fcn.004247e0
lea eax, [esp + 0xa0]
push eax
call fcn.00478e30
add esp, 0xc
mov byte [esp + 0x3748], 0x91
cmp dword [esp + 0x160], esi
je 0x45184c
mov eax, dword [esp + 0x98]
cmp dword [eax - 0xc], ebx
jne 0x451741
lea ecx, [esp + 0x98]
mov byte [esp + 0x3748], 0x90
call fcn.004224c3
jmp 0x4516dd
push dword [esp + 0x20]
lea eax, [esp + 0x9c]
call fcn.00424878
test eax, eax
jne 0x45172b
lea eax, [esp + 0x11c]
push eax
lea ecx, [esp + 0x4c]
call fcn.004247e0
mov byte [esp + 0x3748], 0x92
push dword [esp + 0x124]
lea eax, [esp + 0x4c]
push 0x516f94
push eax
call fcn.0042da87
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [esp + 0x4c]
push str.OpenFile:_executing:__s
push eax
call fcn.00475230
add esp, 0xc
call fcn.00449a8e
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
push dword [esp + 0x48]
lea eax, [esp + 0x228]
push str._exec__s
push eax
call fcn.00475230
mov eax, dword [eax]
add esp, 0xc
push ebx
push ebx
push eax
push dword [esp + 0x24]
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
xor ecx, ecx
cmp eax, 0x20
setg cl
mov dword [esp + 0x58], ecx
lea ecx, [esp + 0x224]
call fcn.004224c3
push dword [esp + 0x58]
lea eax, [esp + 0x230]
push eax
call fcn.0047c2c0
pop ecx
pop ecx
mov edi, eax
mov byte [esp + 0x3748], 0x93
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
push dword [edi]
push str.OpenFile:_bExecOK_s__LE_d
push ecx
call fcn.00475230
add esp, 0x10
call fcn.00449a8e
pop ecx
lea ecx, [esp + 0x22c]
call fcn.004224c3
cmp dword [esp + 0x58], ebx
jne 0x44ed0f
call esi
jmp 0x4513e9
lea ecx, [esp + 0x98]
call fcn.004224c3
jmp 0x4516b9
lea ecx, [esp + 0x84]
mov byte [esp + 0x3748], 0x8d
call fcn.004224c3
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x28]
push str.Application_does_not_handle_this_type_of_files:__s
jmp 0x44c435
push str.Cameyo.exe__UpgradePkg_
call fcn.004247f5
call fcn.00449abe
pop ecx
lea ecx, [esp + 0xe4]
call fcn.00422487
mov byte [esp + 0x3748], 0x96
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4]
lea ecx, [esp + 0x104]
call fcn.004247f5
push ecx
mov byte [esp + 0x374c], 0x97
lea eax, [esp + 0x104]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
call fcn.004778e0
pop ecx
cmp eax, esi
jne 0x45190b
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x108]
push str._s_not_found
jmp 0x44c435
push esi
lea eax, [esp + 0xe8]
push eax
push ecx
lea eax, [esp + 0x10c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
push ecx
mov byte [esp + 0x3758], 0x98
mov eax, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00474150
pop ecx
mov byte [esp + 0x3758], 0x97
call fcn.00446f6d
add esp, 0x10
push dword [0x549380]
cmp eax, esi
jne 0x451970
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xec]
push 0x5190f4
jmp 0x44dcb0
push eax
lea eax, [esp + 0x31c]
push eax
call fcn.0047c1e0
add esp, 4
mov byte [esp + 0x3750], 0x99
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xec]
push dword [eax]
push str._s:__s
push ecx
jmp 0x44f680
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.AuthCheck
call fcn.004247f5
call fcn.00449abe
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
mov esi, 0x54d508
push esi
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x4519ec
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
call fcn.00436185
xor edi, edi
mov dword [esp + 0x1c], eax
cmp eax, edi
je 0x451a9c
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push str._AuthCheck:Force
push dword [eax + ecx*4]
call fcn.004d1bae
pop ecx
pop ecx
lea eax, [esp + 0x234]
push eax
push ecx
mov dword [esp + 0x18], esp
mov ebx, esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.AuthToken.dat
mov dword [esp + 0x244], edi
call fcn.004247f5
push ebx
mov ecx, edi
call fcn.00486660
pop ecx
pop ecx
mov ecx, dword [esp + 0x24]
mov edx, esi
call fcn.0043589c
push dword [0x549380]
mov esi, eax
push ecx
mov dword [esp + 0x18], esp
test esi, esi
je 0x451a71
mov ecx, esp
push str.Allowed_to_run_this_package
call fcn.004247f5
jmp 0x451a86
mov eax, esp
push 0x54d5e8
push str.Denied:_n
push eax
call fcn.00424a99
add esp, 0xc
call fcn.0044a324
neg esi
sbb esi, esi
pop ecx
and esi, 0xffffffef
pop ecx
add esi, 0x11
jmp 0x44c2ae
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_authentication_server_specified_in_this_package
jmp 0x44c2a4
push str.Vintegrate:
lea ecx, [esp + 0x114]
call fcn.004247f5
mov dword [esp + 0x3748], 0x15b
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
lea edi, [eax + ecx*4]
push str._VintegrateRecursive
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
je 0x451b0b
push 0x51a4d0
call fcn.004d1dc0
pop ecx
push eax
push str._VintegrateRecursive:
push dword [edi]
call fcn.004d4826
add esp, 0xc
test eax, eax
jne 0x451b1c
push str.VintegrateRecursive:
lea ecx, [esp + 0x114]
call fcn.0042484e
push str._Windows_Explorer.exe
lea ecx, [esp + 0xec]
call fcn.004247f5
mov byte [esp + 0x3748], 0x5c
mov edi, dword [edi]
push 0x3a
push edi
call fcn.004d2d68
pop ecx
pop ecx
cmp eax, esi
je 0x451b55
add eax, 2
push eax
lea ecx, [esp + 0xec]
call fcn.0042484e
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x1398]
push eax
call fcn.0048c620
push 0xffffffffffffffff
mov byte [esp + 0x374c], 0x5d
push dword [esp + 0x44]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov eax, esp
mov byte [esp + 0x3758], 0x5e
mov dword [esp + 0x24], esp
lea ecx, [esp + 0xf8]
push ecx
lea ecx, [esp + 0x124]
push ecx
push eax
call fcn.0042eb61
add esp, 8
mov byte [esp + 0x375c], 0x5f
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e0
push esi
push ecx
mov byte [esp + 0x3764], 0x60
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x13a8]
push eax
mov byte [esp + 0x3768], 0x5d
call fcn.0043cd5c
add esp, 0x20
lea eax, [esp + 0x138c]
mov byte [esp + 0x3748], 0x5c
call fcn.00429e54
mov ecx, dword [esp + 0xe8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x110]
jmp 0x45363b
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
push 0x54d508
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x451c65
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
push 1
call fcn.0044ac0d
jmp 0x44c459
lea ecx, [esp + 0x20]
call fcn.00422487
lea ecx, [esp + 0xf0]
mov dword [esp + 0x3748], 0x105
call fcn.00422487
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x374c], 6
call fcn.004247e0
mov byte [esp + 0x3748], 7
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x50], ecx
jle 0x451ccd
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x5c]
call fcn.0042484e
push 1
push esi
push ecx
lea eax, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xdf8]
push eax
call fcn.0048c620
mov byte [esp + 0x3748], 8
push dword [0x549380]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xdf8]
push eax
call fcn.0044a39e
add esp, 0x10
cmp dword [esp + 0xe74], esi
jne 0x451d39
push str.FAILED_LOADING_CONTAINERS__n
lea ebx, [esp + 0x24]
call fcn.00429cab
pop ecx
xor esi, esi
lea eax, [esp + 0xf0]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Main
call fcn.004247f5
push 3
lea edi, [esp + 0xdf8]
call fcn.0048e870
mov eax, dword [esp + 0xf0]
cmp dword [eax - 0xc], esi
jne 0x451d7a
push str.Cannot_obtain_INI_info_from_resource__n
lea ecx, [esp + 0x24]
call fcn.0042810a
lea eax, [esp + 0xf0]
push eax
lea ecx, [esp + 0x24]
call fcn.0042538f
push esi
push 0x50ab2c
push dword [esp + 0x28]
jmp 0x44e5f4
push str._SaveProperties_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea ecx, [esp + 0x28]
call fcn.00422487
mov byte [esp + 0x3748], 0xf8
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push str._SaveAllProperties
push dword [eax + ecx*4]
call fcn.004d1bae
mov edi, eax
mov eax, dword [esp + 0x30]
neg edi
sbb edi, edi
pop ecx
inc edi
pop ecx
cmp dword [eax - 0xc], esi
jne 0x451e48
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..xml
call fcn.004247f5
push ecx
mov byte [esp + 0x3750], 0xf9
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x244]
push eax
mov byte [esp + 0x3754], 0xf8
call fcn.004753f0
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x374c], 0xfa
call fcn.00424839
mov byte [esp + 0x3748], 0xf8
mov ecx, dword [esp + 0x23c]
add ecx, 0xfffffff0
call fcn.0042201a
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xb28]
push eax
call fcn.0048c620
mov byte [esp + 0x3748], 0xfb
push dword [0x549380]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xb28]
push eax
call fcn.0044a39e
add esp, 0x10
cmp dword [esp + 0xba4], esi
jne 0x451eb5
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44e6da
sub esp, 0x90
mov eax, esp
mov dword [esp + 0xa0], esp
lea ecx, [esp + 0xbac]
push ecx
push eax
call fcn.004536cd
push edi
push ecx
mov byte [esp + 0x37e0], 0xfc
lea eax, [esp + 0xe4]
mov ecx, esp
mov dword [esp + 0xac], esp
push eax
call fcn.004247e0
push ecx
mov byte [esp + 0x37e4], 0xfd
lea eax, [esp + 0xc4]
mov ecx, esp
mov dword [esp + 0xd4], esp
push eax
call fcn.004247e0
mov byte [esp + 0x37e4], 0xfb
call fcn.0042d713
add esp, 0x9c
cmp eax, esi
jne 0x451f43
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x30]
push str.Cannot_save_into:__s
jmp 0x44c435
lea eax, [esp + 0xb1c]
call fcn.0048d500
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x30]
push str.Properties_exported_to:_n_s
jmp 0x44dcb0
lea eax, [esp + 0x20]
push eax
call fcn.00474240
mov byte [esp + 0x374c], 0xa7
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
lea edi, [eax + ecx*4]
mov dword [esp], 0x5196e0
call fcn.004d1dc0
pop ecx
push eax
push str._CreateShortcuts:
push dword [edi]
call fcn.004d4826
add esp, 0xc
test eax, eax
jne 0x451fc9
push dword [edi]
lea ecx, [esp + 0x24]
call fcn.0042484e
push 0x5196e0
call fcn.004d1dc0
pop ecx
push esi
lea ecx, [esp + 0x24]
push ecx
call fcn.0042488c
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
push 0x54d508
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x451ffc
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x14b8]
push eax
call fcn.0048c620
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x3754], 0xa8
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0xa9
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x375c], 0xaa
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247f5
push 2
push ecx
mov byte [esp + 0x3764], 0xab
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x14c8]
push eax
mov byte [esp + 0x3768], 0xa8
call fcn.0043cd5c
add esp, 0x20
push 0x54d518
lea ecx, [esp + 0x5c]
call fcn.004247e0
lea eax, [esp + 0x6c]
push eax
push 0x507b8c
lea eax, [esp + 0x84]
mov byte [esp + 0x3750], 0xac
push eax
lea ecx, [esp + 0x64]
mov dword [esp + 0x78], esi
call fcn.0042dc01
jmp 0x4525ba
lea ecx, [esp + 0x28]
call fcn.00422487
lea ecx, [esp + 0x24]
call fcn.00422487
lea ecx, [esp + 0x2c]
call fcn.00422487
lea ecx, [esp + 0x40]
call fcn.00422487
push 0x3e
push ecx
mov byte [esp + 0x3750], 0xb1
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
mov dword [esp + 0x8c], esi
lea edi, [esp + 0x8c]
call fcn.004247e0
lea eax, [esp + 0x24c]
push eax
call fcn.00478e30
add esp, 0xc
mov byte [esp + 0x3748], 0xb2
call fcn.0042493b
push eax
lea ecx, [esp + 0x2c]
call fcn.00424839
mov byte [esp + 0x3748], 0xb1
mov ecx, dword [esp + 0x244]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0x80], 0xffffffff
je 0x45255b
push 0x3e
push ecx
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x254]
push eax
call fcn.00478e30
add esp, 0xc
mov byte [esp + 0x3748], 0xb3
call fcn.0042493b
push eax
lea ecx, [esp + 0x28]
call fcn.00424839
mov byte [esp + 0x3748], 0xb1
mov ecx, dword [esp + 0x24c]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0x80], 0xffffffff
je 0x45255b
push 0x3e
push ecx
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x184]
push eax
call fcn.00478e30
add esp, 0xc
mov byte [esp + 0x3748], 0xb4
call fcn.0042493b
push eax
lea ecx, [esp + 0x30]
call fcn.00424839
mov byte [esp + 0x3748], 0xb1
mov ecx, dword [esp + 0x17c]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0x80], 0xffffffff
jne 0x452234
push ebx
lea ecx, [esp + 0x30]
call fcn.0042484e
jmp 0x45228f
push 0x3e
push ecx
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
lea edi, [esp + 0x8c]
call fcn.004247e0
lea eax, [esp + 0x18c]
push eax
call fcn.00478e30
add esp, 0xc
mov byte [esp + 0x3748], 0xb5
call fcn.0042493b
push eax
lea ecx, [esp + 0x44]
call fcn.00424839
mov byte [esp + 0x3748], 0xb1
mov ecx, dword [esp + 0x184]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0x80], 0xffffffff
jne 0x4522a3
push ebx
lea ecx, [esp + 0x44]
call fcn.0042484e
push dword [esp + 0x28]
lea eax, [esp + 0xc8]
push str._exec___s_
push eax
call fcn.00475230
add esp, 0xc
mov byte [esp + 0x3748], 0xb6
mov eax, dword [esp + 0x24]
cmp dword [eax - 0xc], esi
je 0x4522ef
push 0x50f77c
lea ecx, [esp + 0xc8]
call fcn.004280e0
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0xc8]
call fcn.00424863
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
push ecx
mov edi, esp
mov byte [esp + 0x3750], 0xb7
mov dword [esp + 0x1c], esp
push 0x5c
push ecx
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247e0
push edi
call fcn.00475560
lea eax, [esp + 0x140]
add esp, 0xc
push eax
mov byte [esp + 0x3754], 0xb6
call fcn.0042d09e
add esp, 0xc
push esi
push esi
push esi
push ecx
mov byte [esp + 0x3758], 0xb8
lea eax, [esp + 0x13c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x118]
push esi
push eax
call fcn.00486360
add esp, 0x14
mov byte [esp + 0x374c], 0xb9
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x5060a8
call fcn.004247f5
push ecx
mov eax, esp
mov byte [esp + 0x3750], 0xba
mov dword [esp + 0x1c], esp
push str..lnk
lea ecx, [esp + 0x38]
push ecx
push eax
call fcn.00424a44
add esp, 8
mov byte [esp + 0x3754], 0xbb
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247e0
lea edi, [esp + 0x198]
mov byte [esp + 0x3754], 0xb9
call fcn.00474af0
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x18c]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
lea eax, [esp + 0x10c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
call fcn.004778e0
pop ecx
cmp eax, esi
je 0x45241a
lea eax, [esp + 0x108]
jmp 0x452434
push esi
lea ecx, [esp + 0x198]
call fcn.004247f5
mov byte [esp + 0x3748], 0xbc
or dword [esp + 0x44], 2
mov eax, dword [eax]
push esi
push ecx
mov dword [esp + 0x24], eax
lea eax, [esp + 0x48]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e0
push ecx
mov dword [esp + 0x3754], 0xbd
lea eax, [esp + 0xd0]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247e0
push ecx
mov byte [esp + 0x3758], 0xbe
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x48], esp
push eax
call fcn.004247e0
push ecx
mov byte [esp + 0x375c], 0xbf
mov dword [esp + 0x8c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x90], esp
push 0x5060a8
call fcn.004247f5
push ecx
mov eax, esp
mov byte [esp + 0x3764], 0xc0
mov dword [esp + 0x50], esp
push str..lnk
lea ecx, [esp + 0x4c]
push ecx
push eax
call fcn.00424a44
add esp, 8
mov byte [esp + 0x3768], 0xc1
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x68], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3768], 0xbf
call fcn.00474af0
mov ecx, dword [esp + 0x3c]
add esp, 0xc
mov byte [esp + 0x375c], 0xbc
call fcn.004aeaa0
add esp, 0x14
mov dword [esp + 0x3748], 0xb9
test byte [esp + 0x44], 2
je 0x45252e
mov ecx, dword [esp + 0x194]
and dword [esp + 0x44], 0xfffffffd
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x108]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x12c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0xc4]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x40]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x2c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x28]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3748], 0xac
mov ecx, dword [esp + 0x7c]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x6c]
push eax
push 0x507b8c
lea eax, [esp + 0x84]
push eax
lea ecx, [esp + 0x64]
call fcn.0042dc01
cmp dword [esp + 0x6c], 0xffffffff
jne 0x4520cc
mov byte [esp + 0x3748], 0xac
mov ecx, dword [esp + 0x7c]
add ecx, 0xfffffff0
call fcn.0042201a
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x54d514]
push str.Shortcuts_created_for__s.
jmp 0x44dcb0
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
call fcn.004247e0
mov byte [esp + 0x3748], 0x98
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
lea edi, [eax + ecx*4]
push str._FullIntegrate
push dword [edi]
mov dword [esp + 0x50], edi
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
jne 0x4527b7
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
push 0x54d508
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x452664
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
push dword [esp + 0x54]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x54d514
call fcn.004247e0
lea eax, [esp + 0x100]
push eax
call fcn.00446f17
add esp, 8
mov byte [esp + 0x374c], 0x99
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x5060a8
call fcn.004247f5
push ecx
mov byte [esp + 0x3750], 0x9a
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x54d514]
push str._s.host.exe
push eax
call fcn.00475230
add esp, 8
mov byte [esp + 0x3754], 0x9b
lea eax, [esp + 0x104]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247e0
lea edi, [esp + 0x1a8]
mov byte [esp + 0x3754], 0x99
call fcn.00474af0
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x374c], 0x9c
call fcn.00424839
mov byte [esp + 0x3748], 0x99
mov ecx, dword [esp + 0x19c]
add ecx, 0xfffffff0
call fcn.0042201a
mov esi, dword [esp + 0xf8]
call fcn.004779c0
test eax, eax
jne 0x452746
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_create_virtual_repository
jmp 0x44c2a4
lea eax, [esp + 0x1a4]
push eax
call fcn.00474150
mov eax, dword [eax]
pop ecx
push 0
push dword [esp + 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [esp + 0x1a4]
neg eax
sbb al, al
inc al
add ecx, 0xfffffff0
mov byte [esp + 0x33], al
call fcn.0042201a
cmp byte [esp + 0x33], 0
je 0x45279a
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_copy_executable_to_repository
jmp 0x44c2a4
mov byte [esp + 0x3748], 0x98
mov ecx, dword [esp + 0xf8]
add ecx, 0xfffffff0
call fcn.0042201a
mov edi, dword [esp + 0x48]
xor esi, esi
push 1
push esi
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xbb8]
push eax
call fcn.0048c620
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x3754], 0x9d
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x9e
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x375c], 0x9f
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247f5
push 2
push ecx
mov byte [esp + 0x3764], 0xa0
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
lea eax, [esp + 0xbc8]
push eax
mov byte [esp + 0x3768], 0x9d
call fcn.0043cd5c
push str._Integrate:once
push dword [edi]
call fcn.004d1bae
add esp, 0x28
test eax, eax
jne 0x452997
push ebx
lea ecx, [esp + 0x98]
call fcn.004247f5
push esi
push esi
push esi
push ecx
mov byte [esp + 0x3758], 0xa1
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Registered
lea edi, [esp + 0xa8]
call fcn.004247f5
mov byte [esp + 0x3758], 0xa2
push dword [0x54d514]
lea eax, [esp + 0x1c0]
push str.SoftwareVOS_s
push eax
call fcn.00475230
add esp, 8
mov byte [esp + 0x375c], 0xa3
or dword [esp + 0x58], 1
mov ecx, esp
mov dword [esp + 0x28], esp
push str.Integrated
push eax
push ecx
call fcn.00424a44
add esp, 0xc
mov dword [esp + 0x375c], 0xa4
call fcn.00485a60
push eax
mov byte [esp + 0x3760], 0xa5
call fcn.00475d10
add esp, 0x18
cmp eax, esi
je 0x45290b
mov eax, dword [esp + 0x94]
cmp dword [eax - 0xc], esi
je 0x45290b
mov bl, 1
jmp 0x45290d
xor bl, bl
mov dword [esp + 0x3748], 0xa1
test byte [esp + 0x44], 1
je 0x45292e
mov ecx, dword [esp + 0x1ac]
add ecx, 0xfffffff0
call fcn.0042201a
test bl, bl
je 0x452980
push str.Success
lea eax, [esp + 0x98]
call fcn.00424878
push ecx
test eax, eax
mov dword [esp + 0x14], esp
mov eax, esp
jne 0x452965
push str._Integrate:once:_already_registered_successfully._Quitting.
push eax
call fcn.00475230
pop ecx
pop ecx
call fcn.00449a8e
jmp 0x44dcbf
push dword [esp + 0x98]
push str._Integrate:once:_already_attempted_registration_before__but_failed:__s._Trying_integration_again.
push eax
call fcn.00475230
add esp, 0xc
call fcn.00449a8e
pop ecx
mov byte [esp + 0x3748], 0x9d
mov ecx, dword [esp + 0x94]
add ecx, 0xfffffff0
call fcn.0042201a
xor eax, eax
cmp dword [esp + 0x54], esi
push esi
setne al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.AllUsers
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0xa6
mov eax, esp
mov dword [esp + 0x24], esp
push dword [0x54d514]
push str.SoftwareVOS_s
push eax
call fcn.00475230
add esp, 0xc
push SysReAllocStringLen
mov byte [esp + 0x375c], 0x9d
call fcn.00476210
add esp, 0x14
push dword [esp + 0x54]
lea edx, [esp + 0xbb0]
mov ecx, 0x54d508
call fcn.00440ca3
pop ecx
lea eax, [esp + 0xbac]
call fcn.0048d500
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x54d514]
push str._s_is_now_integrated_into_your_system.
jmp 0x44dcb0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.00473f30
test eax, eax
jne 0x452aa4
mov eax, dword [esp + 0x2c]
push esi
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push dword [eax]
call fcn.004247f5
push edi
call fcn.0047ac30
add esp, 4
mov byte [esp + 0x3754], 0x3f
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247e0
mov ecx, esi
xor edx, edx
mov byte [esp + 0x3754], 4
call fcn.00473d20
add esp, 0xc
cmp eax, esi
jne 0x44c2ae
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c29f
call fcn.00474100
test eax, eax
jne 0x452abf
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44b1cd
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
lea edi, [eax + ecx*4]
push 0x518c04
mov dword [esp + 0x4c], edi
call fcn.004d1dc0
pop ecx
push eax
push str._Patch
push dword [edi]
call fcn.004d4826
add esp, 0xc
mov edi, eax
neg edi
lea eax, [esp + 0x18]
sbb edi, edi
push eax
lea ecx, [esp + 0x5c]
inc edi
call fcn.004247e0
push ecx
mov byte [esp + 0x374c], 0x40
mov ecx, esp
mov dword [esp + 0x14], esp
push str..new.exe
call fcn.004247f5
push ecx
mov byte [esp + 0x3750], 0x41
lea eax, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x98]
push eax
mov byte [esp + 0x3754], 0x40
call fcn.004753f0
add esp, 0xc
mov byte [esp + 0x3748], 0x42
push dword [esp + 0x90]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [esp + 0x48]
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push dword [eax]
call fcn.004247f5
lea eax, [esp + 0xe4]
push eax
call fcn.0047ac30
pop ecx
pop ecx
push 1
push esi
push ecx
mov byte [esp + 0x3754], 0x43
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x618]
push eax
call fcn.0048c620
mov byte [esp + 0x3748], 0x44
push dword [0x549380]
cmp dword [esp + 0x698], esi
jne 0x452bd3
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x20]
push str.Cannot_load_newly_created_package__s
jmp 0x44c435
push 1
push ecx
lea eax, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x618]
push eax
call fcn.0044a39e
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x45
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f5
push ecx
mov byte [esp + 0x375c], 0x46
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e0
push 2
push ecx
mov byte [esp + 0x3764], 0x47
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x628]
push eax
mov byte [esp + 0x3768], 0x44
call fcn.0043cd5c
push dword [0x54d514]
lea eax, [esp + 0xf8]
push dword [0x54d564]
push str._sAppVirtDll__s.dll
push eax
call fcn.00475230
add esp, 0x2c
mov byte [esp + 0x374c], 0x48
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
call fcn.0042933c
pop ecx
cmp eax, esi
je 0x452d0c
push dword [0x549380]
cmp eax, 0x11
jne 0x452cce
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str.MsiTrackerStart:_Insufficient_permissions_
push eax
call fcn.00475230
pop ecx
pop ecx
jmp 0x44c2a9
cmp eax, 0x12
jne 0x452ce1
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str.MsiTrackerStart:_Cant_access_services.exe._32_64_bit_mismatch_
jmp 0x452cc1
push eax
lea eax, [esp + 0x320]
push eax
call fcn.0047c1e0
add esp, 4
mov byte [esp + 0x3750], 0x49
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.MsiTrackerStart:_Failed:__s
jmp 0x44ca62
push dword [esp + 0xe0]
lea eax, [esp + 0x1b8]
push str._exec__s
push eax
call fcn.00475230
mov eax, dword [eax]
add esp, 0xc
push esi
push esi
push eax
push dword [esp + 0x24]
push esi
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [esp + 0x1b4]
xor ebx, ebx
cmp eax, 0x20
setg bl
add ecx, 0xfffffff0
call fcn.0042201a
cmp ebx, esi
je 0x452d9e
cmp edi, esi
je 0x452d66
push 1
push 0x5065d0
push str.Installation_launched_in_virtual_mode..._nWhen_installation_is_done__click_OK_and_Cameyo_will_turn_it_into_a_virtual_package._nInstallation_will_not_truly_install_anything_on_your_hard_drive__it_is_simulated_.
jmp 0x452d71
push esi
push 0x5065d0
push str.When_installation_is_done__click_OK.
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
jne 0x452d9e
push ecx
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
call fcn.004293c3
pop ecx
push 0x14
jmp 0x44c2af
push ecx
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
call fcn.004293c3
pop ecx
cmp eax, esi
je 0x452e19
push dword [0x549380]
cmp eax, 0x11
jne 0x452dd8
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str.MsiTrackerStop:_Insufficient_permissions_
jmp 0x452cc1
cmp eax, 0x12
jne 0x452dee
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str.MsiTrackerStop:_Cant_access_services.exe._32_64_bit_mismatch_
jmp 0x452cc1
push eax
lea eax, [esp + 0x30c]
push eax
call fcn.0047c1e0
add esp, 4
mov byte [esp + 0x3750], 0x4a
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.MsiTrackerStop:_Failed:__s
jmp 0x44ca62
cmp ebx, esi
jne 0x452e3b
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xe8]
push str.Failed_executing__s
jmp 0x44c435
mov ebx, dword [esp + 0x58]
cmp edi, esi
je 0x452f00
call fcn.004324f8
push 0x407
mov edi, 0x54d508
call fcn.00492d60
pop ecx
push esi
push dword [esp + 0x94]
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x90]
jne 0x452e88
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c97c
push dword [esp + 0x34]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e0
call fcn.0044482c
pop ecx
pop ecx
mov dword [esp + 0x34], eax
cmp eax, esi
je 0x452ef5
push dword [esp + 0x90]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esp + 0x34], 0x10
push dword [0x549380]
jne 0x452ece
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44ca2f
push dword [esp + 0x38]
lea eax, [esp + 0x344]
push eax
call fcn.0047c1e0
add esp, 4
mov byte [esp + 0x3750], 0x4b
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44ca5b
push 0x404
call fcn.00492d60
pop ecx
lea eax, [esp + 0x60c]
call fcn.0048d500
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x98]
push 0x5190f4
push eax
call fcn.00475230
add esp, 0xc
call fcn.0044a324
pop ecx
pop ecx
mov ecx, dword [esp + 0xd4]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x60c]
mov byte [esp + 0x3748], 0x43
call fcn.00429e54
mov ecx, dword [esp + 0xe0]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x90]
add ecx, 0xfffffff0
jmp 0x44ca07
lea ecx, [esp + 0x28]
call fcn.00422487
lea ecx, [esp + 0x54]
call fcn.00422487
mov byte [esp + 0x3748], 0x35
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
lea edi, [eax + ecx*4]
push str._CreateDiff
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
jne 0x452fbd
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
call fcn.00424839
jmp 0x452fd7
push 0x518bc0
call fcn.004d1dc0
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x2c]
call fcn.0042484e
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..mod
call fcn.004247f5
push ecx
mov byte [esp + 0x3750], 0x36
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x1c4]
push eax
mov byte [esp + 0x3754], 0x35
call fcn.004753f0
add esp, 0xc
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x374c], 0x37
call fcn.00424839
mov byte [esp + 0x3748], 0x35
mov ecx, dword [esp + 0x1bc]
add ecx, 0xfffffff0
call fcn.0042201a
mov ebx, dword [esp + 0x54]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
call edi
push esi
push ebx
push dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x54]
jne 0x453075
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c97c
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e0
call fcn.0044482c
pop ecx
pop ecx
mov dword [esp + 0x58], eax
cmp eax, esi
jne 0x4530ec
push dword [0x549380]
lea eax, [esp + 0x58]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x1d0]
push eax
call fcn.00475560
add esp, 8
mov byte [esp + 0x3750], 0x38
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Successfully_repackaged_into:__s
push ecx
call fcn.00475230
add esp, 0xc
call fcn.0044a324
pop ecx
pop ecx
mov ecx, dword [esp + 0x1c4]
jmp 0x4532c0
push ebx
call edi
cmp dword [esp + 0x58], 0x10
push dword [0x549380]
jne 0x453108
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44ca2f
push dword [esp + 0x5c]
lea eax, [esp + 0x348]
push eax
call fcn.0047c1e0
add esp, 4
mov byte [esp + 0x3750], 0x39
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44ca5b
lea ecx, [esp + 0x28]
call fcn.00422487
lea ecx, [esp + 0x54]
call fcn.00422487
mov byte [esp + 0x3748], 0x28
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
lea edi, [eax + ecx*4]
push str._LearnStreaming
push dword [edi]
call fcn.004d1bae
pop ecx
pop ecx
test eax, eax
jne 0x453176
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
call fcn.00424839
jmp 0x453190
push 0x51899c
call fcn.004d1dc0
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x2c]
call fcn.0042484e
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..new.exe
call fcn.004247f5
push ecx
mov byte [esp + 0x3750], 0x29
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x1d4]
push eax
mov byte [esp + 0x3754], 0x28
call fcn.004753f0
add esp, 0xc
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x374c], 0x2a
call fcn.00424839
mov byte [esp + 0x3748], 0x28
mov ecx, dword [esp + 0x1cc]
add ecx, 0xfffffff0
call fcn.0042201a
mov ebx, dword [esp + 0x54]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
call edi
push esi
push ebx
push dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x54]
jne 0x45322e
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c97c
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e0
push ecx
mov byte [esp + 0x3750], 0x2b
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
mov byte [esp + 0x3750], 0x28
call fcn.00444dc3
pop ecx
pop ecx
mov dword [esp + 0x1c], eax
cmp eax, esi
jne 0x4532d9
push dword [0x549380]
lea eax, [esp + 0x58]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e0
lea eax, [esp + 0x1e0]
push eax
call fcn.00475560
add esp, 8
mov byte [esp + 0x3750], 0x2c
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Successfully_learned_streaming_into:__s
push ecx
call fcn.00475230
add esp, 0xc
call fcn.0044a324
pop ecx
pop ecx
mov ecx, dword [esp + 0x1d4]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [ebx - 0x10]
call fcn.0042201a
mov ecx, dword [esp + 0x28]
jmp 0x45363b
push ebx
call edi
push dword [0x549380]
lea eax, [esp + 0x314]
push dword [esp + 0x20]
push eax
call fcn.0047c1e0
add esp, 4
mov byte [esp + 0x3750], 0x2d
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Could_not_learn_streaming:__s
jmp 0x44ca62
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push str._RemoveSelf
push dword [eax + ecx*4]
call fcn.004d1bae
mov ebx, eax
neg ebx
sbb ebx, ebx
add esp, 4
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
inc ebx
call fcn.004247e0
push 0x54d508
call fcn.0042c77b
pop ecx
pop ecx
test al, al
jne 0x453361
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c2f8
mov eax, dword [0x54d564]
cmp dword [eax - 0xc], esi
jne 0x45337d
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
jmp 0x44c4e7
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
mov edi, 0x54d564
push edi
call fcn.004247e0
call fcn.004778e0
pop ecx
cmp eax, esi
jne 0x4533bc
cmp ebx, esi
je 0x4533aa
call fcn.00478400
test eax, eax
jne 0x44c2ae
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
jmp 0x44c520
cmp dword [esp + 0x48], esi
je 0x4533e3
push 3
push dword [0x54d514]
push str.Do_you_want_to_remove_the_application_and_all_of_its_settings__files_
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
je 0x4533e3
push 0x14
pop esi
jmp 0x44c45a
push esi
lea eax, [esp + 0x138]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.AllUsers
mov dword [esp + 0x144], esi
call fcn.004247f5
push ecx
mov byte [esp + 0x3758], 0x17
mov eax, esp
mov dword [esp + 0x24], esp
push dword [0x54d514]
push str.SoftwareVOS_s
push eax
call fcn.00475230
add esp, 0xc
push SysReAllocStringLen
mov byte [esp + 0x375c], 4
call fcn.00475f90
add esp, 0x14
cmp eax, esi
je 0x453494
cmp dword [esp + 0x134], esi
je 0x453494
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.00473f30
test eax, eax
jne 0x453479
call fcn.00473f80
test eax, eax
jne 0x44c2ae
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c29f
call fcn.00474100
test eax, eax
jne 0x453494
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44b1cd
push 0x54d508
call fcn.00440e27
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x54d514]
push str.Removing__s
push eax
call fcn.00475230
add esp, 0xc
call fcn.00449abe
pop ecx
lea ecx, [esp + 0x13c]
call fcn.00422487
push 0x5060a8
mov byte [esp + 0x374c], 0x18
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push 1
push 1
push 1
lea eax, [esp + 0x148]
push eax
push dword [0x549380]
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x54d560
call fcn.004247e0
push ecx
mov byte [esp + 0x3764], 0x19
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x54d570
call fcn.004247e0
push ecx
mov byte [esp + 0x3768], 0x1a
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x54d56c
call fcn.004247e0
push ecx
mov byte [esp + 0x376c], 0x1b
mov ecx, esp
mov dword [esp + 0x40], esp
push edi
call fcn.004247e0
push ecx
mov byte [esp + 0x3770], 0x1c
mov ecx, esp
mov dword [esp + 0xa0], esp
push 0x54d514
call fcn.004247e0
mov byte [esp + 0x3770], 0x18
call fcn.00445767
add esp, 0x24
mov ecx, esp
mov dword [esp + 0x14], esp
push edi
call fcn.004247e0
call fcn.00477920
pop ecx
cmp eax, esi
je 0x4535a8
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x54d514]
push str.Base_dir_could_not_be_emptied_for__s
jmp 0x44c435
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x54d514]
push str.SoftwareVOS_s
push eax
call fcn.00475230
add esp, 0xc
mov edx, SysReAllocStringLen
call fcn.00476310
pop ecx
cmp eax, esi
je 0x4535e4
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
jmp 0x44c831
cmp ebx, esi
je 0x4535f5
call fcn.00478400
test eax, eax
jne 0x44c2ae
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.__Removed_successfully
call fcn.004247f5
call fcn.00449abe
pop ecx
push dword [0x549380]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x54d514]
push str.Application__s_removed_successfully
push eax
call fcn.00475230
add esp, 0xc
call fcn.0044a324
pop ecx
pop ecx
mov ecx, dword [esp + 0x13c]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x44c45a
cmp dword [0x54d180], esi
je 0x45367f
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x54d550]
push str.CLoaderApp:_waiting_for_LoaderCanQuit__AutoUpdate_s_
push eax
call fcn.00475230
add esp, 0xc
call fcn.00449a8e
pop ecx
push 0xffffffffffffffff
push dword [0x54d180]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.CLoaderApp:_done._Bye_
call fcn.004247f5
call fcn.00449a8e
mov eax, dword [0x549390]
pop ecx
cmp eax, 0xa2c2a
je 0x44c2ae
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
push str.CLoaderApp:_ExecWait:_g_LoaderExitCode_d
push ecx
call fcn.00475230
add esp, 0xc
call fcn.00449a8e
pop ecx
push dword [0x549390]
jmp 0x44c2af