Function at 0x43fbed
Capabilities:
Check for time delay via gettickcount
Check mutex and terminate process on windows
Check mutex on windows
Create thread
Get file attributes
Set current directory
Set environment variable
Terminate process

Disassembly:
push 0x8c
mov eax, 0x4f5469
call fcn.004d2924
mov edi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x30], ebx
push 3
pop esi
mov dword [ebp - 4], esi
call fcn.004bcd4c
push eax
lea ecx, [ebp - 0x40]
call fcn.0042636d
mov byte [ebp - 4], 4
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x48], ebx
call fcn.004bcd4c
push eax
lea ecx, [ebp - 0x4c]
call fcn.0042636d
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 4], 5
call fcn.004774f0
mov byte [ebp - 4], 6
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push dword [eax]
push 0x50b470
push ecx
call fcn.00478610
add esp, 0x14
call fcn.0043b75e
pop ecx
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.0042201a
call fcn.0042a3e8
mov dword [ebp - 0x14], eax
cmp eax, ebx
jne 0x43fc97
lea eax, [ebp - 0x14]
push str.Cannot_open_virtual_app_data._Please_check_that_file_isnt_corrupted
push eax
call fcn.00478610
pop ecx
pop ecx
push dword [eax]
call fcn.0043b78e
lea eax, [ebp + 0xc]
push eax
mov ecx, 0x545320
call fcn.00424eee
push 0x5452b8
mov ecx, edi
call fcn.0042a281
mov eax, dword [ebp + 0x24]
pop ecx
cmp eax, 0xffffffff
je 0x43fcbf
mov dword [0x545350], eax
mov eax, dword [0x545384]
cmp eax, esi
je 0x43fcdf
mov ecx, dword [ebp + 0x18]
cmp eax, 1
jne 0x43fcd5
cmp dword [ecx - 0xc], ebx
jne 0x43fcdf
cmp eax, 2
jne 0x43fcfc
cmp dword [ecx - 0xc], ebx
jne 0x43fcfc
push ecx
mov eax, esp
mov dword [ebp - 0x1c], esp
push str.Loader_Main:_activating_ExecWait
push eax
call fcn.00478610
pop ecx
pop ecx
call fcn.0043b75e
or dword [ebp + 0x20], 1
pop ecx
push ecx
mov dword [ebp - 0x1c], esp
mov ecx, esp
push 0x5452c4
xor esi, esi
call fcn.00424ecd
mov ecx, esi
call fcn.0048ad50
pop ecx
cmp word [0x545328], bx
je 0x43fd78
xor eax, eax
mov word [ebp - 0x74], ax
lea edi, [ebp - 0x72]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ax, word [ebp - 0x74]
cmp ax, word [0x545328]
jb 0x43fd78
mov ax, word [ebp - 0x72]
cmp ax, word [0x54532a]
jb 0x43fd78
mov ax, word [ebp - 0x6e]
cmp ax, word [0x54532e]
jb 0x43fd78
push ebx
push str.Expiration
push str.Package_expired
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0x14
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp dword [0x54533c], ebx
je 0x43fd85
call fcn.0043edd9
mov esi, 0x5452b8
call fcn.0043aef9
mov dword [ebp - 0x3c], eax
cmp eax, ebx
je 0x43fdf0
lea eax, [ebp - 0x20]
push eax
push ecx
mov dword [ebp - 0x1c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.AuthToken.dat
mov dword [ebp - 0x20], ebx
call fcn.004247e9
push edi
xor ecx, ecx
call fcn.0048a1c0
pop ecx
pop ecx
mov ecx, dword [ebp - 0x3c]
mov edx, esi
call fcn.0043a610
cmp eax, ebx
jne 0x43fdf0
cmp dword [0x545398], ebx
je 0x43fdec
mov eax, dword [0x54539c]
cmp dword [eax - 0xc], ebx
je 0x43fdec
push ebx
push dword [0x5452c4]
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0x11
jmp 0x43fd72
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.Vintegrate:
call fcn.004247e9
push ecx
mov byte [ebp - 4], 7
lea eax, [ebp + 0x18]
mov dword [ebp - 0x44], esp
mov ecx, esp
push eax
call fcn.00424ecd
mov byte [ebp - 4], 5
call fcn.0047cd30
add esp, 0xc
cmp eax, ebx
je 0x43fe2d
mov dword [ebp - 0x48], 1
jmp 0x43fe68
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.VintegrateRecursive:
call fcn.004247e9
push ecx
mov byte [ebp - 4], 8
lea eax, [ebp + 0x18]
mov dword [ebp - 0x44], esp
mov ecx, esp
push eax
call fcn.00424ecd
mov byte [ebp - 4], 5
call fcn.0047cd30
add esp, 0xc
cmp eax, ebx
je 0x43fe8a
mov dword [ebp - 0x48], 2
lea eax, [ebp + 0x18]
push eax
lea ecx, [ebp - 0x4c]
call fcn.00424eee
push ebx
push 0x3a
lea ecx, [ebp - 0x4c]
call fcn.00426fbe
push ebx
lea ecx, [ebp - 0x4c]
inc eax
push ecx
call fcn.00424880
push ecx
lea eax, [ebp + 0xc]
mov dword [ebp - 0x1c], esp
mov ecx, esp
push eax
mov esi, 0x5452b8
call fcn.00424ecd
mov ecx, esi
call fcn.0043ec32
lea ecx, [ebp - 0x50]
mov dword [esp], 0x50107c
call fcn.004247e9
mov byte [ebp - 4], 9
push dword [ebp - 0x48]
lea eax, [ebp - 0x20]
push str.VintegrateMode_d_n
push eax
call fcn.00478610
add esp, 0xc
mov byte [ebp - 4], 0xa
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x50]
push eax
call fcn.00425b52
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.0042201a
push dword [ebp - 0x4c]
lea eax, [ebp - 0x20]
push str.VintegrateTgtPattern_s_n
push eax
call fcn.00478610
add esp, 0xc
mov byte [ebp - 4], 0xb
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x50]
push eax
call fcn.00425b52
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.0042201a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
lea eax, [ebp - 0x20]
push str.StartTickTime_d_n
push eax
call fcn.00478610
add esp, 0xc
mov byte [ebp - 4], 0xc
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x50]
push eax
call fcn.00425b52
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp - 0x50]
mov eax, dword [ecx - 0xc]
push ecx
push ecx
mov dword [ebp - 0x1c], esp
mov esi, esp
push ebx
push ebx
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.RunningInfo.ini
lea edi, [eax + eax]
call fcn.004247e9
push 1
push esi
call fcn.00489ea0
add esp, 0x18
call fcn.00478fe0
pop ecx
mov dword [ebp - 0x1c], esp
mov esi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.VirtFiles.Prog.db
call fcn.004247e9
push esi
mov ecx, ebx
call fcn.0048a1c0
pop ecx
pop ecx
call fcn.0047b160
pop ecx
cmp eax, ebx
jne 0x44005d
call fcn.0043be19
test eax, eax
jne 0x43ffe3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x64], eax
call fcn.00431fd7
push 0x405
mov edi, 0x5452b8
call fcn.00496780
pop ecx
push ecx
mov eax, esp
mov dword [ebp - 0x1c], esp
push dword [0x5452c4]
push str.AppVirtDll__s.dll
push eax
call fcn.00478610
lea eax, [ebp - 0x20]
add esp, 0xc
push eax
mov ecx, ebx
call fcn.0048a1c0
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xd
call fcn.00424eee
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.0042201a
push dword [0x5452d0]
mov esi, dword [0x5452c4]
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, dword [0x545324]
push eax
mov eax, esi
call fcn.00496c60
mov edi, 0x50107c
cmp dword [0x5452c8], ebx
je 0x4400bc
mov eax, 0x5452c8
jmp 0x4400d0
mov eax, dword [0x545310]
cmp dword [eax - 0xc], ebx
je 0x43ffe3
cmp dword [ebp + 0x10], 2
je 0x43ffe3
push 1
push ecx
mov eax, esp
mov dword [ebp - 0x1c], esp
push dword [0x5452c4]
push str.StartStreaming:AppID_s
push eax
call fcn.00478610
add esp, 0xc
call fcn.0042769b
pop ecx
pop ecx
cmp eax, ebx
jne 0x43ffe3
push dword [0x5452c4]
lea eax, [ebp - 0x14]
push str.Cannot_stream_application__s_
push eax
call fcn.00478610
add esp, 0xc
jmp 0x43fc90
push edi
lea ecx, [ebp - 0x78]
call fcn.004247e9
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x30], 1
push eax
lea ecx, [ebp - 0x34]
call fcn.00424ecd
mov dword [ebp - 4], 0x10
test byte [ebp - 0x30], 1
je 0x4400f5
mov ecx, dword [ebp - 0x78]
and dword [ebp - 0x30], 0xfffffffe
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [ebp + 0x10], 2
mov dword [ebp - 0x38], ebx
je 0x44035c
mov eax, dword [0x5453b8]
cmp dword [eax - 0xc], ebx
je 0x440120
mov eax, dword [0x5453bc]
cmp eax, 2
je 0x44011b
cmp eax, 3
jne 0x440120
call fcn.0043f3ca
mov eax, dword [ebp + 0x18]
cmp dword [eax - 0xc], ebx
jne 0x4401f1
push 0x3b
push dword [0x5452c8]
call fcn.004ccd78
pop ecx
pop ecx
test eax, eax
jne 0x440149
cmp dword [ebp + 0x10], 1
jne 0x44035c
push edi
lea ecx, [ebp - 0x2c]
call fcn.004247e9
mov byte [ebp - 4], 0x11
cmp dword [0x545388], ebx
je 0x4401c2
cmp dword [ebp + 0x10], 1
je 0x4401c2
push ebx
push ebx
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.AutoLaunchAlways
lea edi, [ebp - 0x2c]
call fcn.004247e9
push ecx
mov byte [ebp - 4], 0x12
mov eax, esp
mov dword [ebp - 0x44], esp
push dword [0x5452c4]
push str.SoftwareVOS_s
push eax
call fcn.00478610
add esp, 0xc
push SysReAllocStringLen
mov byte [ebp - 4], 0x11
call fcn.004790f0
add esp, 0x18
cmp eax, ebx
je 0x4401c2
mov eax, dword [ebp - 0x2c]
cmp dword [eax - 0xc], ebx
je 0x4401c2
mov eax, edi
push eax
lea ecx, [ebp - 0x34]
call fcn.00424eee
jmp 0x4401e5
push 0x404
mov edi, 0x5452b8
call fcn.00496780
pop ecx
push ebx
push ebx
push ebx
push 0x43e91e
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x2c]
jmp 0x440354
push 1
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp + 0x18]
call fcn.004249d8
push 0x50b6bc
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00424df8
neg eax
sbb al, al
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x20]
inc al
add ecx, 0xfffffff0
mov byte [ebp - 0x25], al
call fcn.0042201a
cmp byte [ebp - 0x25], bl
je 0x44035c
push ebx
lea eax, [ebp + 0x18]
push eax
xor eax, eax
inc eax
call fcn.00424880
push dword [ebp + 0x18]
call fcn.004ce741
pop ecx
push edi
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], ebx
call fcn.004247e9
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x20], ebx
mov dword [ebp - 0x2c], ebx
jle 0x440338
mov esi, 0x505c64
lea eax, [ebp - 0x24]
push eax
push 0x501024
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x34]
call fcn.0042b803
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x15
call fcn.00424eee
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [ebp + 0x1c]
cmp dword [eax - 0xc], ebx
je 0x440313
lea eax, [ebp - 0x60]
push eax
push esi
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x60], ebx
call fcn.0042b803
push esi
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x16
call fcn.00424a38
add esp, 0xc
lea ecx, [ebp + 0x1c]
push ecx
push eax
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 0x17
call fcn.0042c7bf
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x18
call fcn.00424eee
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [ebp - 0x24], 0xffffffff
je 0x44043c
mov eax, dword [ebp - 0x18]
cmp dword [eax - 0xc], ebx
je 0x44043c
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x20]
jl 0x44026a
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x34]
call fcn.00424eee
push edi
lea ecx, [ebp + 0x18]
call fcn.00425392
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.0042201a
xor eax, eax
mov dword [ebp - 0x84], ebx
lea edi, [ebp - 0x80]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov byte [ebp - 0x98], bl
xor eax, eax
lea edi, [ebp - 0x97]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea esi, [ebp - 0x98]
lea edi, [ebp - 0x84]
call fcn.0047f490
push dword [0x5452c4]
lea eax, [ebp - 0x1c]
push 0x50b6c0
push eax
call fcn.00478610
add esp, 0xc
push dword [eax]
mov eax, edi
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
mov esi, eax
call fcn.0042201a
cmp esi, ebx
je 0x4403fe
push ecx
mov eax, esp
mov dword [ebp - 0x44], esp
push str.Loader_Main:_waiting_on_BasicDeployMutex
push eax
call fcn.00478610
pop ecx
pop ecx
call fcn.0043b75e
pop ecx
push 0xffffffffffffffff
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push ecx
mov eax, esp
mov dword [ebp - 0x44], esp
push str.Loader_Main:_done_waiting_on_BasicDeployMutex
push eax
call fcn.00478610
pop ecx
pop ecx
call fcn.0043b75e
pop ecx
push ebx
push dword [ebp + 0x10]
push 0x5452b8
push dword [ebp + 8]
push dword [ebp - 0x14]
call fcn.0043c166
add esp, 0x14
mov edi, eax
cmp esi, ebx
je 0x440429
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp edi, ebx
je 0x440455
cmp edi, 7
jne 0x440446
push str.Failed_deploying_files._Please_make_sure_application_is_not_currently_running_and_try_again.
jmp 0x43fc92
push 0xff
jmp 0x43fd72
lea eax, [ebp - 0x14]
push edi
push eax
call fcn.0047fa60
jmp 0x43fc8e
cmp dword [ebp + 0x10], 2
je 0x440551
push ebx
push ebx
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.CryptCheck.dat
call fcn.004247e9
xor esi, esi
inc esi
lea eax, [ebp - 0x18]
push esi
push eax
call fcn.00489ea0
add esp, 0x14
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
mov dword [ebp - 0x24], esi
call fcn.00424ecd
call fcn.0047b160
pop ecx
push ecx
mov dword [ebp - 0x14], esp
cmp eax, ebx
je 0x440620
lea eax, [ebp - 0x18]
mov ecx, esp
push eax
lea esi, [ebp - 0x24]
call fcn.00424ecd
mov ecx, esi
call fcn.0043f972
pop ecx
cmp eax, ebx
je 0x440509
cmp dword [ebp - 0x24], ebx
jne 0x440509
lea eax, [ebp - 0x14]
push ebx
push eax
call fcn.0047fb40
add esp, 4
mov byte [ebp - 4], 0x1a
mov ecx, esp
mov dword [ebp - 0x1c], esp
push dword [eax]
push str._Loader_Main:_CryptIntegrityCheck:_bConsistent_s
push ecx
call fcn.00478610
add esp, 0xc
call fcn.0043b75e
pop ecx
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.0042201a
push str.Data_was_encrypted_with_a_different_key___method._Cannot_access_the_data_with_the_current_encryption_method._Please_remove_the_package___remove__and_restart_it.
jmp 0x43fc92
push dword [ebp - 0x24]
lea eax, [ebp - 0x14]
push eax
call fcn.0047fb40
add esp, 4
mov byte [ebp - 4], 0x1b
mov ecx, esp
mov dword [ebp - 0x1c], esp
push dword [eax]
push str.Loader_Main:_CryptIntegrityCheck:_bConsistent_s
push ecx
call fcn.00478610
add esp, 0xc
call fcn.0043b75e
pop ecx
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.0042201a
push 1
lea eax, [ebp - 0x58]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
mov edi, str.RequireManaged
push edi
call fcn.004247e9
push ecx
mov byte [ebp - 4], 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
mov esi, str.SoftwareCameyo
push esi
call fcn.004247e9
push reloc.OLEAUT32.dll_SysReAllocString
mov byte [ebp - 4], 0x10
call fcn.00479370
add esp, 0x14
cmp eax, ebx
jne 0x4405d2
push 1
lea eax, [ebp - 0x58]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push edi
call fcn.004247e9
push ecx
mov byte [ebp - 4], 0x1d
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.004247e9
mov byte [ebp - 4], 0x1e
call fcn.00489500
push eax
mov byte [ebp - 4], 0x10
call fcn.00479370
add esp, 0x14
cmp eax, ebx
je 0x44067c
cmp dword [ebp - 0x58], ebx
je 0x44067c
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.Loader_Main:_RequireManaged
call fcn.004247e9
call fcn.0043b75e
lea eax, [ebp - 0x40]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00424ecd
call fcn.00426ace
pop ecx
cmp eax, ebx
jne 0x44067c
push ebx
push 0x4ffab0
push str.You_are_not_allowed_to_use_unmanaged_apps.
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
push ebx
jmp 0x43fd72
mov eax, esp
push str.Loader_Main:_CryptIntegrity:_saving_CryptCheck
push eax
call fcn.00478610
pop ecx
pop ecx
call fcn.0043b75e
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00424ecd
call fcn.0043f75b
pop ecx
cmp eax, ebx
jne 0x440542
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
push str._Loader_Main:_CryptIntegritySave_returned_false:_LE_d
push ecx
call fcn.00478610
add esp, 0xc
call fcn.0043b75e
mov dword [esp], str.Could_not_save_encryption_integrity_check.
jmp 0x43fc92
mov eax, dword [0x545354]
cmp dword [eax - 0xc], ebx
je 0x44069c
push ecx
mov dword [ebp - 0x14], esp
mov ecx, esp
push 0x545354
call fcn.00424ecd
call fcn.0043e752
pop ecx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push dword [ebp + 0x18]
push dword [ebp - 0x34]
push dword [ebp + 0x10]
push str.Loader_Main:_AutoLaunchMode_d__AutoLaunchRaw_s__ExecCmd_s
push eax
call fcn.00478610
add esp, 0x14
call fcn.0043b75e
cmp dword [ebp + 0x10], 2
pop ecx
je 0x44116a
mov eax, dword [0x545300]
mov eax, dword [eax - 0xc]
cmp eax, ebx
je 0x440808
mov eax, dword [ebp + 0x18]
cmp dword [eax - 0xc], ebx
je 0x4406f6
push 0x50bd1c
lea ecx, [ebp + 0x18]
call fcn.00424df8
test eax, eax
jne 0x440808
lea esi, [ebp - 0x74]
call fcn.00497150
push ebx
push ebx
push ecx
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x14], esp
mov ecx, esp
push 0x5452c4
call fcn.00424ecd
call fcn.00496cd0
mov esi, eax
cmp esi, ebx
je 0x4407bf
cmp dword [esi + 0x424], ebx
je 0x4407bf
call fcn.004bcd4c
push eax
lea ecx, [ebp - 0x20]
call fcn.0042636d
mov byte [ebp - 4], 0x20
cmp dword [esi + 0x424], ebx
mov dword [ebp - 0x18], ebx
jle 0x440797
lea edi, [esi + 0x428]
push dword [edi]
lea eax, [ebp - 0x14]
push 0x50bd94
push eax
call fcn.00478610
add esp, 0xc
mov byte [ebp - 4], 0x21
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x20]
push eax
call fcn.00425b52
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.0042201a
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
add edi, 8
cmp eax, dword [esi + 0x424]
jl 0x440752
mov esi, dword [ebp - 0x20]
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push esi
push str.AutoUpdate:_app_already_running__aborting__PIDs_s_
push eax
call fcn.00478610
add esp, 0xc
call fcn.0043b75e
pop ecx
lea ecx, [esi - 0x10]
call fcn.0042201a
jmp 0x4407fc
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.Loader_Main:_AutoUpdate:_triggering_async_autoupdate
call fcn.004247e9
call fcn.0043b75e
mov eax, dword [0x544f24]
pop ecx
cmp eax, ebx
je 0x4407e5
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
push ebx
push ebx
push 0x43ec13
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x10
call fcn.00497170
mov eax, dword [0x545418]
cmp dword [eax - 0xc], ebx
je 0x440841
push ecx
mov dword [ebp - 0x14], esp
mov ecx, esp
push 0x545320
call fcn.00424ecd
push ecx
mov byte [ebp - 4], 0x22
mov dword [ebp - 0x1c], esp
mov ecx, esp
push 0x5452c4
call fcn.00424ecd
mov byte [ebp - 4], 0x10
call fcn.0048d110
pop ecx
pop ecx
mov eax, dword [0x545350]
test al, 2
je 0x440902
mov dword [ebp - 0x1c], ebx
push eax
lea ebx, [ebp - 0x14]
call fcn.0042abf6
pop ecx
push eax
lea eax, [ebp - 0x18]
push str._Quiet__ScmDirectInit:
push eax
mov byte [ebp - 4], 0x23
call fcn.00424a8d
add esp, 0xc
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
mov ecx, esp
mov dword [ebp - 0x44], esp
push str.open
xor ebx, ebx
call fcn.004247e9
push 1
push ecx
mov byte [ebp - 4], 0x26
lea eax, [ebp - 0x18]
mov dword [ebp - 0x60], esp
mov ecx, esp
push eax
lea edi, [ebp - 0x1c]
call fcn.00424ecd
push ecx
mov byte [ebp - 4], 0x27
mov dword [ebp - 0x5c], esp
mov ecx, esp
push 0x545320
call fcn.00424ecd
mov byte [ebp - 4], 0x25
call fcn.00476f50
add esp, 0x10
test eax, eax
jne 0x4408f1
push ecx
mov eax, esp
mov dword [ebp - 0x44], esp
push dword [ebp - 0x18]
push dword [0x545320]
push str._Loader_Main:_ScmDirectInit:_could_not_execute___s___s
push eax
call fcn.00478610
add esp, 0x10
call fcn.0043b75e
pop ecx
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.0042201a
xor ebx, ebx
cmp dword [ebp - 0x48], ebx
je 0x4409a2
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x20]
call fcn.00424ecd
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 4], 0x28
call fcn.00488ca0
mov edi, dword [ebp - 0x20]
pop ecx
mov ecx, dword [ebp - 0x40]
push 1
push edi
call fcn.0042672a
pop ecx
pop ecx
test eax, eax
je 0x440950
push ebx
push ebx
push ebx
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
mov dword [ebp - 0x54], 2
jmp 0x440996
call fcn.004bcd4c
push eax
lea ecx, [ebp - 0x3c]
call fcn.0042636d
mov byte [ebp - 4], 0x29
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3c]
push str.Could_not_inject_explorer.exe__Error_d_
push eax
call fcn.004225ea
mov esi, dword [ebp - 0x3c]
add esp, 0xc
push ebx
push str.Error
push esi
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [esi - 0x10]
mov dword [ebp - 0x54], ebx
call fcn.0042201a
mov byte [ebp - 4], 0x10
lea ecx, [edi - 0x10]
jmp 0x441165
mov eax, dword [ebp - 0x34]
cmp dword [eax - 0xc], ebx
jne 0x4409b6
mov eax, dword [ebp + 0x18]
cmp dword [eax - 0xc], ebx
je 0x44116a
cmp dword [ebp - 0x38], ebx
je 0x440aaa
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push str.Loader_Main:_Waiting_for_AutoLaunchMenu
push eax
call fcn.00478610
pop ecx
pop ecx
call fcn.0043b75e
mov edi, 0x5452b8
mov dword [esp], 0x404
call fcn.00496780
pop ecx
push 0xffffffffffffffff
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x5452c8
lea ecx, [ebp - 0x34]
call fcn.00424eee
push str._Cancel_
lea ecx, [ebp - 0x34]
call fcn.00424df8
test eax, eax
jne 0x440a91
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.Loader_Main:_cancelled_n
call fcn.004247e9
call fcn.0043b75e
pop ecx
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0x18]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0x1c]
add ecx, 0xfffffff0
call fcn.0042201a
xor eax, eax
inc eax
jmp 0x4411e9
call fcn.0043be19
test eax, eax
jne 0x440aaa
call fcn.00431fd7
push 0x405
call fcn.00496780
pop ecx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x34]
push str.Loader_Main:_AutoLaunchRaw_s
push eax
call fcn.00478610
add esp, 0xc
call fcn.0043b75e
pop ecx
mov dword [ebp - 0x24], ebx
call fcn.004bcd4c
push eax
lea ecx, [ebp - 0x18]
call fcn.0042636d
mov byte [ebp - 4], 0x2a
call fcn.004bcd4c
push eax
lea ecx, [ebp - 0x3c]
call fcn.0042636d
push 0x3e
push ecx
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0x34]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
lea edi, [ebp - 0x24]
call fcn.00424ecd
lea eax, [ebp - 0x14]
push eax
call fcn.0047c6b0
add esp, 0xc
mov byte [ebp - 4], 0x2c
call fcn.0042492f
push eax
lea ecx, [ebp - 0x18]
call fcn.00424eee
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.0042201a
push 0x3e
push ecx
lea eax, [ebp - 0x34]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00424ecd
lea eax, [ebp - 0x14]
push eax
call fcn.0047c6b0
add esp, 0xc
mov byte [ebp - 4], 0x2d
call fcn.0042492f
push eax
lea ecx, [ebp - 0x3c]
call fcn.00424eee
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.0042201a
push 1
push 1
push 0xffffffffffffffff
push ecx
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00424ecd
lea eax, [ebp - 0x14]
push eax
call fcn.0048a350
add esp, 0x14
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0x18]
call fcn.00424eee
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x18]
push str.Loader_Main:_AutoLaunchCmd_s
push eax
call fcn.00478610
add esp, 0xc
call fcn.0043b75e
mov eax, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x40]
push str.Loader_Main:_Loading_DLL_to_get_myself_hooked:__s
push eax
call fcn.00478610
add esp, 0xc
call fcn.0043b75e
mov edi, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov dword [esp], str.TRUE
push str.CAMEYO_VIRTUALAPP
call edi
cmp dword [0x5453bc], ebx
je 0x440c26
push 0x6f
push 0x10
lea eax, [ebp - 0x14]
push 0x5453c0
push eax
call fcn.0047fe10
add esp, 0x10
push dword [eax]
push str._CEK_
call edi
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.0042201a
push 0x5034b0
mov esi, str.APPVIRTDLL_LOADED_BY_LOADER
push esi
call edi
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
push dword [ebp - 0x14]
push dword [ebp - 0x40]
push str.Loader_Main:_LoadLibrary__s_0x_x__LE_d
push ecx
call fcn.00478610
add esp, 0x14
call fcn.0043b75e
pop ecx
cmp dword [0x5453bc], ebx
je 0x440c7d
push ebx
push str._CEK_
call edi
push 0x50107c
push esi
call edi
call fcn.004bcd4c
push eax
lea ecx, [ebp - 0x24]
call fcn.0042636d
mov byte [ebp - 4], 0x2f
call fcn.004bcd4c
push eax
lea ecx, [ebp - 0x2c]
call fcn.0042636d
mov byte [ebp - 4], 0x30
mov eax, dword [ebp + 0x18]
push ecx
mov dword [ebp - 0x14], esp
cmp dword [eax - 0xc], ebx
jne 0x440cea
mov eax, esp
push dword [ebp - 0x18]
push str.FileName:_Taking_AutoLaunchCmd_s
push eax
call fcn.00478610
add esp, 0xc
call fcn.0043b75e
pop ecx
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x24]
call fcn.00424eee
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp - 0x2c]
cmp dword [eax - 0xc], ebx
jne 0x440d10
lea eax, [ebp - 0x3c]
jmp 0x440d13
mov ecx, esp
push eax
push str.FileName:_Taking_ExecCmd_s
push ecx
call fcn.00478610
add esp, 0xc
call fcn.0043b75e
pop ecx
lea eax, [ebp + 0x18]
push eax
lea ecx, [ebp - 0x24]
call fcn.00424eee
lea ecx, [ebp - 0x2c]
lea eax, [ebp + 0x1c]
push eax
call fcn.00424eee
mov eax, dword [ebp - 0x24]
mov eax, dword [eax - 0xc]
cmp eax, ebx
je 0x440d5d
push 1
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
call fcn.004249d8
mov byte [ebp - 4], 0x31
or dword [ebp - 0x30], 2
push 0x50b6bc
mov ecx, eax
call fcn.00424df8
test eax, eax
je 0x440d5d
push ebx
push 0x5c
lea ecx, [ebp - 0x24]
call fcn.00426fbe
mov byte [ebp - 0x25], 1
cmp eax, 0xffffffff
je 0x440d60
mov byte [ebp - 0x25], bl
mov dword [ebp - 4], 0x30
test byte [ebp - 0x30], 2
je 0x440d78
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.0042201a
cmp byte [ebp - 0x25], bl
je 0x440e5c
call fcn.004bcd4c
push eax
lea ecx, [ebp - 0x48]
call fcn.0042636d
mov byte [ebp - 4], 0x32
call fcn.004bcd4c
push eax
lea ecx, [ebp - 0x38]
call fcn.0042636d
mov byte [ebp - 4], 0x33
call fcn.00483e30
lea eax, [ebp - 0x38]
push eax
push 0x43bb54
push ebx
push dword [0x544aa0]
push 0x544a98
call fcn.0049a570
push ebx
lea eax, [ebp - 0x48]
push eax
push ebx
push ecx
lea eax, [ebp - 0x38]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00424ecd
push ecx
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x24]
mov dword [ebp - 0x1c], esp
mov ecx, esp
push eax
call fcn.00424ecd
mov byte [ebp - 4], 0x33
call fcn.004855b0
add esp, 0x14
cmp eax, ebx
je 0x440e42
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x24]
call fcn.00424eee
lea eax, [ebp - 0x24]
push eax
call fcn.00488ca0
lea eax, [ebp - 0x24]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00424ecd
lea eax, [ebp - 0x14]
push eax
call fcn.00489ad0
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x35
call fcn.00424eee
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x30]
call fcn.00424ecd
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 4], 0x36
call fcn.00488ca0
pop ecx
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
push dword [ebp - 0x30]
mov dword [ebp - 0x58], eax
push str.Loader_Main:_GetFileAttributes__s__d
push ecx
call fcn.00478610
add esp, 0x10
call fcn.0043b75e
pop ecx
mov edi, str.Original
push edi
push dword [0x54535c]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x440eea
push 0x5c
push ecx
lea eax, [ebp - 0x30]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00424ecd
lea eax, [ebp - 0x14]
push eax
call fcn.00478a20
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
mov dword [ebp - 0x58], eax
call fcn.0042201a
push ecx
mov dword [ebp - 0x14], esp
mov esi, esp
push dword [ebp - 0x58]
lea eax, [ebp - 0x30]
push 0x5c
push ecx
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00424ecd
lea eax, [ebp - 0x14]
push eax
call fcn.00478a20
add esp, 0xc
mov byte [ebp - 4], 0x37
push dword [eax]
push str.Loader_Main:_SetCurrentDirectory__s__d
push esi
call fcn.00478610
add esp, 0x10
call fcn.0043b75e
pop ecx
mov byte [ebp - 4], 0x36
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [0x54535c]
cmp dword [eax - 0xc], ebx
je 0x440f74
push edi
push eax
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x440f74
push ecx
mov dword [ebp - 0x14], esp
mov ecx, esp
push 0x54535c
call fcn.00424ecd
call fcn.0047b1a0
pop ecx
cmp eax, ebx
je 0x440f74
mov eax, dword [0x54535c]
mov dword [ebp - 0x20], eax
jmp 0x440f77
mov dword [ebp - 0x20], ebx
push ecx
mov dword [ebp - 0x14], esp
mov esi, esp
push ebx
push ebx
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.C_License.txt
call fcn.004247e9
push ebx
push esi
call fcn.00489ea0
add esp, 0x18
call fcn.0047b160
mov dword [ebp - 0x14], esp
mov edi, esp
push ebx
push ebx
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.License.accepted
mov esi, eax
call fcn.004247e9
push ebx
push edi
call fcn.00489ea0
add esp, 0x18
call fcn.0047b160
mov dword [ebp - 0x14], esp
mov edi, eax
mov eax, esp
push edi
push esi
push dword [0x544f28]
push str.Loader_Main:_EULA:_g_hEulaThread_d__EulaFile_d__EulaAccepted_d
push eax
call fcn.00478610
add esp, 0x14
call fcn.0043b75e
pop ecx
cmp dword [0x544f28], ebx
jne 0x44100e
cmp esi, ebx
je 0x441046
cmp edi, ebx
jne 0x441046
push ebx
call fcn.0043ea30
call fcn.0043ed62
cmp dword [0x544f28], ebx
je 0x441046
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push str.Loader_Main:_waiting_for_EULA_to_be_accepted
push eax
call fcn.00478610
pop ecx
pop ecx
call fcn.0043b75e
pop ecx
push 0xffffffffffffffff
push dword [0x544f28]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [0x544f28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.0043ed62
mov esi, dword [ebp - 0x24]
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x40]
mov dword [ebp - 0x38], ebx
push esi
push str.Loader_Main:_FileName_s__Dll32Name_s
push eax
call fcn.00478610
add esp, 0x10
call fcn.0043b75e
pop ecx
push dword [ebp + 0x20]
lea eax, [ebp - 0x38]
push eax
push dword [ebp - 0x20]
lea eax, [ebp - 0x2c]
push ecx
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00424ecd
push ecx
mov byte [ebp - 4], 0x38
lea eax, [ebp - 0x40]
mov dword [ebp - 0x1c], esp
mov ecx, esp
push eax
call fcn.00424ecd
push ecx
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x24]
mov dword [ebp - 0x44], esp
mov ecx, esp
push eax
call fcn.00424ecd
mov byte [ebp - 4], 0x36
call fcn.0043b7b5
add esp, 0x18
cmp eax, ebx
je 0x4410f9
mov edi, dword [ebp - 0x64]
mov dword [ebp - 0x54], 1
cmp edi, ebx
je 0x441132
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, eax
sub edx, edi
mov ecx, 0x1770
cmp edx, ecx
jae 0x4410e7
sub edi, eax
push 1
add edi, ecx
push edi
call dword [sym.imp.KERNEL32.dll_SleepEx]
push 0x404
mov edi, 0x5452b8
call fcn.00496780
pop ecx
jmp 0x441132
test byte [ebp + 0x20], 2
jne 0x44112f
push dword [ebp - 0x38]
lea eax, [ebp - 0x14]
push esi
push str.Could_not_execute__s__Error_d_
push eax
call fcn.00478610
mov eax, dword [eax]
add esp, 0x10
push ebx
push str.Error
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.0042201a
mov dword [ebp - 0x54], ebx
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [esi - 0x10]
call fcn.0042201a
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.0042201a
push 0x404
mov edi, 0x5452b8
call fcn.00496780
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.Loader_Main:_out_n
call fcn.004247e9
call fcn.0043b75e
pop ecx
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0x18]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [ebp + 0x1c]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [ebp - 0x54]
call fcn.004d29fc
ret