Function at 0x441350
Capabilities:
Check if file exists
Check mutex on windows
Create directory
Delete directory
Get geographical location

Disassembly:
push ebp
mov ebp, esp
mov eax, 0xe74c
call fcn.00468360
mov eax, dword [0x4ce724]
xor eax, ebp
mov dword [ebp - 4], eax
push str.Begin...
call fcn.00456fc0
add esp, 4
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 0x17b8], 0
mov dword [ebp - 0xe4c], 0
call fcn.004204a0
mov dword [ebp - 0x17bc], eax
mov dword [ebp - 0x17b4], 0
mov dword [ebp - 0x634], 0
mov eax, dword [ebp + 8]
mov dword [0x4db5bc], eax
push str.RICHED20.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x1c90], eax
xor ecx, ecx
mov word [ebp - 0x410], cx
push 0x1fe
push 0
lea edx, [ebp - 0x40e]
push edx
call fcn.00467d60
add esp, 0xc
xor eax, eax
mov word [ebp - 0xe48], ax
push 0x1fe
push 0
lea ecx, [ebp - 0xe46]
push ecx
call fcn.00467d60
add esp, 0xc
xor edx, edx
mov word [ebp - 0x14a0], dx
push 0x1fe
push 0
lea eax, [ebp - 0x149e]
push eax
call fcn.00467d60
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0xc40], cx
push 0x3fe
push 0
lea edx, [ebp - 0xc3e]
push edx
call fcn.00467d60
add esp, 0xc
call fcn.00409f80
call fcn.00446ca0
mov eax, dword [ebp + 0x10]
push eax
push 0x1f40
push 0x4dc000
call fcn.0046a6ad
add esp, 0xc
push 0x4dc000
push str.WinMain____CmdLine_s
call fcn.00456fc0
add esp, 8
push 0
push 0
push 0x4b62b4
push 0x4b62bc
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x44150b
push 0x809
push 0x100
lea ecx, [ebp - 0x14a0]
push ecx
push 0x2c9
mov edx, dword [0x4db5bc]
push edx
call fcn.00449f40
add esp, 0x14
push 0x809
push 0x200
lea eax, [ebp - 0xc40]
push eax
push 0x2c8
mov ecx, dword [0x4db5bc]
push ecx
call fcn.00449f40
add esp, 0x14
push 0x40
lea edx, [ebp - 0x14a0]
push edx
lea eax, [ebp - 0xc40]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0x4b62c0
call fcn.00456fc0
add esp, 4
xor eax, eax
jmp 0x444b78
xor ecx, ecx
mov word [ebp - 0x1708], cx
push 0x206
push 0
lea edx, [ebp - 0x1706]
push edx
call fcn.00467d60
add esp, 0xc
push 0x104
lea eax, [ebp - 0x1708]
push eax
push 0x4b6308
push str.LANG:
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x4415c3
lea ecx, [ebp - 0x1708]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
lea edx, [ebp - 0x1708]
push edx
call dword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
lea eax, [ebp - 0x1708]
push eax
call fcn.0046afa0
add esp, 4
mov word [0x4e8c30], ax
movzx ecx, word [0x4e8c30]
test ecx, ecx
jne 0x4415ae
push 0
call fcn.00409bb0
add esp, 4
test eax, eax
je 0x4415ae
lea edx, [ebp - 0x1708]
push edx
call fcn.0040fdb0
add esp, 4
mov word [0x4e8c30], ax
movzx eax, word [0x4e8c30]
push eax
push str.WinMain____Language_parameter:__d
call fcn.00456fc0
add esp, 8
push 0x104
lea ecx, [ebp - 0x1708]
push ecx
push 0x4b6374
push str.CMDLINE:
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x44162f
lea edx, [ebp - 0x1708]
push edx
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
lea eax, [ebp - 0x1708]
push eax
call dword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
lea ecx, [ebp - 0x1708]
push ecx
push 0x1f40
push 0x4dfe80
call fcn.0046a6ad
add esp, 0xc
push 0x4dfe80
push str.WinMain____CMDLINE_parameter:__s
call fcn.00456fc0
add esp, 8
xor edx, edx
mov word [ebp - 0x1500], dx
push 0x4c
push 0
lea eax, [ebp - 0x14fe]
push eax
call fcn.00467d60
add esp, 0xc
lea ecx, [ebp - 0x62c]
push ecx
call dword [sym.imp.ole32.dll_CoCreateGuid]
test eax, eax
jne 0x441697
push 0x27
lea edx, [ebp - 0x1500]
push edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x62c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x628]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x624]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x620]
mov dword [eax + 0xc], edx
call fcn.0040bcd0
add esp, 0x18
jmp 0x4416ad
push 0x4b63c8
push 0x27
lea eax, [ebp - 0x1500]
push eax
call fcn.0046a6ad
add esp, 0xc
lea ecx, [ebp - 0x1500]
push ecx
push 0x4e5d70
push 0x4e4920
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4e4920
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x441701
push 2
push 0x4e4920
call fcn.00456410
add esp, 8
mov dword [ebp - 0xe4c], eax
mov edx, dword [ebp - 0xe4c]
push edx
push 0x4e4920
push 0x4b6418
call fcn.00456fc0
add esp, 0xc
push 0
push 0x4e4920
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x44172b
push 0x4e4920
push str.WinMain____Error_create_directory___s__
call fcn.00456fc0
add esp, 8
xor eax, eax
jmp 0x444b78
push 0x4e4920
push str.WinMain____TempPathFCW_s
call fcn.00456fc0
add esp, 8
call fcn.00446750
mov dword [ebp - 0x61c], 0
mov dword [ebp - 0xe7c], 0
push 0x2a
push 0
lea eax, [ebp - 0xe78]
push eax
call fcn.00467d60
add esp, 0xc
mov dword [ebp - 0x1a80], 0
push 0x214
push 0
lea ecx, [ebp - 0x1a7c]
push ecx
call fcn.00467d60
add esp, 0xc
mov dword [ebp - 0x1a74], 1
mov dword [ebp - 0x129c], 0
xor edx, edx
mov dword [ebp - 0x1298], edx
mov dword [ebp - 0x1294], edx
push 0x4dbdf8
call fcn.0040d000
add esp, 4
test eax, eax
jne 0x4417fa
push str.setup.cfg
push 0x4e4920
push 0x4b64f8
push 0x104
push 0x4dbdf8
call fcn.00468336
add esp, 0x14
push 0x4dbdf8
push 0x4b6504
push 0x88
mov eax, dword [0x4db5bc]
push eax
call fcn.00408630
add esp, 0x10
push 0x4dbdf8
call fcn.00444e10
add esp, 4
movzx ecx, word [0x4d4668]
test ecx, ecx
je 0x44185a
push 0x4d4668
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x634], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x44185a
push 0x4d4668
push str.WinMain____Project_already_in_memory___s_
call fcn.00456fc0
add esp, 8
mov dword [0x4ce5d4], 0xb7
jmp 0x4448f3
push 0
push 0
push 0x4b6574
push str.NORESUME
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441890
mov dword [0x4d61d4], 0
push str.WinMain____Resume_mode_disabled_by_parameter
call fcn.00456fc0
add esp, 4
lea edx, [ebp - 0x1500]
push edx
push 0x4d4668
call fcn.0046b9ce
add esp, 8
test eax, eax
je 0x4418d8
cmp dword [0x4d61d4], 0
je 0x4418d8
push 0x4d4668
push 0x4e5d70
push 0x4e4b28
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4d4668
push 0x4e4b28
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x4418ed
push 0x4d4668
push 0x4e4920
push 0x4e4b28
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4e4b28
call fcn.0040d340
add esp, 4
test eax, eax
jne 0x441973
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x17b8], eax
mov eax, dword [ebp - 0x17b8]
push eax
push 0x4e4b28
push str.WinMain____Error_create_directory___s____d_
call fcn.00456fc0
add esp, 0xc
cmp dword [ebp - 0x17b8], 0xb7
je 0x441969
push 2
push 0x4e4b28
call fcn.00456410
add esp, 8
mov dword [ebp - 0xe4c], eax
mov ecx, dword [ebp - 0xe4c]
push ecx
push 0x4e4b28
push 0x4b6638
call fcn.00456fc0
add esp, 0xc
jmp 0x4448f3
mov dword [ebp - 0x17b8], 0
push 0x4e4b28
push str.WinMain____DataPath_s
call fcn.00456fc0
add esp, 8
call fcn.004482e0
push 1
push 0
push 0x4e3f08
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov dword [ebp - 0x14ac], eax
cmp dword [ebp - 0x14ac], 0
je 0x4419b6
mov edx, dword [ebp - 0x14ac]
mov dword [0x4d2ddc], edx
jmp 0x4419c0
mov eax, dword [0x4db5bc]
mov dword [0x4d2ddc], eax
mov ecx, dword [0x4d2ddc]
push ecx
mov edx, dword [ebp - 0x14ac]
push edx
push 0x4e3f08
push str.WinMain____LoadLibrary__s____d__hInstRes_d_
call fcn.00456fc0
add esp, 0x10
movzx eax, word [0x4d46b6]
test eax, eax
jne 0x441a0b
push 0x100
push 0x4db5e0
push 0x4b670c
mov ecx, dword [0x4db5bc]
push ecx
call fcn.00457a90
add esp, 0x10
jmp 0x441a22
push 0x4d46b6
push 0x100
push 0x4db5e0
call fcn.0046a6ad
add esp, 0xc
push 0x4db5e0
push str.WinMain____Title_s
call fcn.00456fc0
add esp, 8
push 0
push 0
push 0x4b674c
push str.INFO
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441c69
xor edx, edx
mov word [ebp - 0x2098], dx
push 0x206
push 0
lea eax, [ebp - 0x2096]
push eax
call fcn.00467d60
add esp, 0xc
push str.Language_s__available:_n_n
push 0x200
push 0x4e4318
call fcn.00468221
add esp, 0xc
mov ecx, 0x4e8c54
call fcn.00408940
test eax, eax
jbe 0x441b80
mov dword [ebp - 0x209c], 0
jmp 0x441aba
mov ecx, dword [ebp - 0x209c]
add ecx, 1
mov dword [ebp - 0x209c], ecx
mov ecx, 0x4e8c54
call fcn.00408940
cmp dword [ebp - 0x209c], eax
jae 0x441b7b
mov edx, dword [ebp - 0x209c]
push edx
mov ecx, 0x4e8c54
call fcn.004087b0
mov eax, dword [eax + 0x410]
push eax
push str._d__
push 0x104
lea ecx, [ebp - 0x2098]
push ecx
call fcn.00468336
add esp, 0x10
lea edx, [ebp - 0x2098]
push edx
push 0x200
push 0x4e4318
call fcn.00468221
add esp, 0xc
push 0x104
lea eax, [ebp - 0x2098]
push eax
push 2
mov ecx, dword [ebp - 0x209c]
push ecx
mov ecx, 0x4e8c54
call fcn.004087b0
mov edx, dword [eax + 0x410]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
lea eax, [ebp - 0x2098]
push eax
push 0x200
push 0x4e4318
call fcn.00468221
add esp, 0xc
push 0x4b67a0
push 0x200
push 0x4e4318
call fcn.00468221
add esp, 0xc
jmp 0x441aab
jmp 0x441c04
mov ecx, dword [0x4db5ac]
push ecx
push 0x4b67a4
push 0x104
lea edx, [ebp - 0x2098]
push edx
call fcn.00468336
add esp, 0x10
lea eax, [ebp - 0x2098]
push eax
push 0x200
push 0x4e4318
call fcn.00468221
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x2098]
push ecx
push 2
mov edx, dword [0x4db5ac]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
lea eax, [ebp - 0x2098]
push eax
push 0x200
push 0x4e4318
call fcn.00468221
add esp, 0xc
push 0x4b67ac
push 0x200
push 0x4e4318
call fcn.00468221
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x1e90], cx
push 0x1fe
push 0
lea edx, [ebp - 0x1e8e]
push edx
call fcn.00467d60
add esp, 0xc
push 0x809
push 0x100
lea eax, [ebp - 0x1e90]
push eax
push 0x2c9
mov ecx, dword [0x4d2ddc]
push ecx
call fcn.00449f40
add esp, 0x14
push 0x40
lea edx, [ebp - 0x1e90]
push edx
push 0x4e4318
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, dword [ebp - 0x17b8]
jmp 0x444b78
push 0
push 0
push 0x4b67b0
push str.WITHPROGRESS
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441c9f
mov dword [0x4d5770], 1
push str.WinMain____DialogInRun_mode_
call fcn.00456fc0
add esp, 4
push 0
push 0
push 0x4b6810
push 0x4b6818
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441cd5
mov dword [0x4e8c38], 1
push str.WinMain____Silent_mode_parameter
call fcn.00456fc0
add esp, 4
push 0
push 0
push 0x4b6874
push 0x4b681c
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441d0b
mov dword [0x4d576c], 0
push str.WinMain____No_balloon_parameter
call fcn.00456fc0
add esp, 4
push 0
push 0
push 0x4b68c0
push str.FULLSILENT
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441d4b
mov dword [0x4e8c38], 1
mov dword [0x4d576c], 0
push str.WinMain____Full_Silent_mode_parameter
call fcn.00456fc0
add esp, 4
push 0
push 0
push 0x4b692c
push 0x4b6934
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441d81
mov dword [0x4e8c44], 1
push str.WinMain____Force_to_Download_parameter
call fcn.00456fc0
add esp, 4
push 0
push 0
push 0x4b6990
push str.NOLICENSE
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441db7
mov dword [0x4d5764], 0
push str.WinMain____No_license_parameter
call fcn.00456fc0
add esp, 4
push 0
push 0
push 0x4b6a00
push str.NOTOOLBAR
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441ded
mov dword [0x4d299d], 0
push str.WinMain____No_Toolbar_parameter
call fcn.00456fc0
add esp, 4
push 0
push 0
push 0x4b6a48
push str.NORMALSTATUS
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441e20
mov byte [0x4d67f4], 1
push str.WinMain____NORMALSTATUS_parameter
call fcn.00456fc0
add esp, 4
push 0
push 0
push 0x4b6ab4
push str.SMALLSTATUS
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441e53
mov byte [0x4d67f4], 0
push str.WinMain____SMALLSATUS_parameter
call fcn.00456fc0
add esp, 4
push 0
push 0
push 0x4b6b20
push str.NOLU
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441e93
mov dword [0x4d5510], 0
mov dword [0x4e8c48], 1
push str.WinMain____NOLU_parameter:_LiveUpdate_Disabled_
call fcn.00456fc0
add esp, 4
push 0
push 0
push 0x4b6b88
push str.NOGA
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441ec9
mov dword [0x4d2de0], 0
push str.WinMain____NOGA_parameter:_Google_Analytics_Disabled_
call fcn.00456fc0
add esp, 4
mov dword [ebp - 0x630], 0
push 0
push 0
push 0x4b6c0c
push str.GA_REG
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441f09
mov dword [ebp - 0x630], 1
push str.WinMain____GA_REG_parameter:_Google_Analytics_in_Registry_
call fcn.00456fc0
add esp, 4
push 0x104
lea eax, [ebp - 0x1708]
push eax
push 0x4b6ca0
push str.SCRIPT:
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441f97
lea ecx, [ebp - 0x1708]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
lea edx, [ebp - 0x1708]
push edx
call dword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
lea eax, [ebp - 0x1708]
push eax
push 0x104
push 0x4d61d8
call fcn.0046a6ad
add esp, 0xc
push 0x4d61d8
call fcn.0040d000
add esp, 4
test eax, eax
je 0x441f7e
mov dword [0x4d61d0], 1
mov ecx, dword [0x4d61d0]
push ecx
push 0x4d61d8
push str.WinMain____ScriptFile:__s___d_
call fcn.00456fc0
add esp, 0xc
push 0x104
lea edx, [ebp - 0x1708]
push edx
push 0x4b6cf8
push 0x4b6d00
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x44207f
lea eax, [ebp - 0x1708]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
lea ecx, [ebp - 0x1708]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
lea edx, [ebp - 0x1708]
push edx
push str.WinMain____Params_X:__s
call fcn.00456fc0
add esp, 8
lea eax, [ebp - 0x1708]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
je 0x44202c
push 0x4e5758
push 0x104
push 0x4d5fa8
call fcn.0046a6ad
add esp, 0xc
lea ecx, [ebp - 0x1708]
push ecx
push 0x4d5fa8
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x442045
lea edx, [ebp - 0x1708]
push edx
push 0x104
push 0x4d5fa8
call fcn.0046a6ad
add esp, 0xc
push 0x4d5fa8
push str.WinMain____TgdFolder_s
call fcn.00456fc0
add esp, 8
mov dword [0x4d61b8], 0
mov dword [0x4d5758], 0
mov dword [0x4d61b4], 0
mov dword [0x4d575c], 0
call fcn.0040c400
mov dword [ebp - 0x1c8c], eax
cmp dword [0x4d61c8], 0
je 0x4420a8
cmp dword [ebp - 0x1c8c], 0
jne 0x4420a8
mov dword [ebp - 0xe6f0], 1
jmp 0x4420b2
mov dword [ebp - 0xe6f0], 0
mov eax, dword [ebp - 0xe6f0]
mov dword [ebp - 0x17b4], eax
mov ecx, dword [ebp - 0x17b4]
push ecx
push str.WinMain____NeedToRunAsAdmin_d
call fcn.00456fc0
add esp, 8
cmp dword [ebp - 0x17b4], 0
je 0x4420e5
jmp 0x4448f3
xor edx, edx
mov word [ebp - 0x840], dx
push 0x206
push 0
lea eax, [ebp - 0x83e]
push eax
call fcn.00467d60
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x1290], cx
push 0x206
push 0
lea edx, [ebp - 0x128e]
push edx
call fcn.00467d60
add esp, 0xc
xor eax, eax
mov word [ebp - 0x210], ax
push 0x206
push 0
lea ecx, [ebp - 0x20e]
push ecx
call fcn.00467d60
add esp, 0xc
xor edx, edx
mov word [ebp - 0x1c88], dx
push 0x206
push 0
lea eax, [ebp - 0x1c86]
push eax
call fcn.00467d60
add esp, 0xc
push 0x4d2bcf
push 0x104
lea ecx, [ebp - 0x840]
push ecx
call fcn.0046a6ad
add esp, 0xc
push 0x104
lea edx, [ebp - 0x210]
push edx
push 0x104
lea eax, [ebp - 0x1290]
push eax
push 0x104
lea ecx, [ebp - 0x840]
push ecx
call fcn.0040cc10
add esp, 0x18
cmp dword [0x4d2de0], 0
jne 0x4421bc
cmp dword [ebp - 0x630], 0
je 0x442bec
call fcn.004040e0
mov dword [ebp - 0x6438], eax
mov dword [ebp - 0x6434], 0
mov dword [ebp - 0x20a4], 1
xor edx, edx
mov word [ebp - 0x6430], dx
push 0x50
push 0
lea eax, [ebp - 0x642e]
push eax
call fcn.00467d60
add esp, 0xc
push 0x4333
push 0
lea ecx, [ebp - 0x63de]
push ecx
call fcn.00467d60
add esp, 0xc
push 0x208
lea edx, [ebp - 0x1708]
push edx
push 0x4b6dac
push 0x4d2ff0
push closesocket
call fcn.00437d10
add esp, 0x14
mov dword [ebp - 0x6434], eax
cmp dword [ebp - 0x6434], 0
jne 0x442268
push 0x208
lea eax, [ebp - 0x1708]
push eax
push str.GAclientID
push 0x4d2ff0
push closesocket
call fcn.00437d10
add esp, 0x14
mov dword [ebp - 0x6434], eax
cmp dword [ebp - 0x6434], 0
je 0x442324
lea ecx, [ebp - 0x1708]
mov dword [ebp - 0x20a8], ecx
cmp dword [ebp - 0x20a8], 0
jne 0x442296
mov dword [ebp - 0xe6f4], 0
jmp 0x44230c
mov edx, dword [ebp - 0x20a8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
mov dword [ebp - 0x20a0], eax
cmp dword [ebp - 0x20a0], 0x3fffffff
jle 0x4422c4
mov dword [ebp - 0xe6f8], 0
jmp 0x442300
mov eax, dword [ebp - 0x20a0]
shl eax, 1
call fcn.0046d9c0
mov dword [ebp - 0xe6fc], esp
mov eax, dword [ebp - 0x6438]
push eax
mov ecx, dword [ebp - 0x20a0]
shl ecx, 1
push ecx
mov edx, dword [ebp - 0x20a8]
push edx
mov eax, dword [ebp - 0xe6fc]
push eax
call fcn.00423510
mov dword [ebp - 0xe6f8], eax
mov ecx, dword [ebp - 0xe6f8]
mov dword [ebp - 0xe6f4], ecx
mov edx, dword [ebp - 0xe6f4]
push edx
push 0x27
lea eax, [ebp - 0x63de]
push eax
call fcn.0046a4fd
add esp, 0xc
push 0x4b6ddc
lea ecx, [ebp - 0x840]
push ecx
lea edx, [ebp - 0x1c88]
push edx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [ebp - 0x630], 0
je 0x44253b
lea eax, [ebp - 0x20a4]
push eax
push 0x4b6de4
lea ecx, [ebp - 0x840]
push ecx
push closesocket
call fcn.00437e60
add esp, 0x10
lea edx, [ebp - 0x840]
push edx
push 0x104
lea eax, [ebp - 0x1c88]
push eax
call fcn.0046a6ad
add esp, 0xc
push 0x4b6dec
lea ecx, [ebp - 0x1c88]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0x52
lea edx, [ebp - 0x6430]
push edx
push 0x4b6df4
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437d10
add esp, 0x14
cmp dword [0x4d34a2], 0
jne 0x4423eb
push 0xca
lea ecx, [ebp - 0x47b1]
push ecx
push 0x4b6e0c
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437d10
add esp, 0x14
test eax, eax
jne 0x442401
push 0x4d3400
push 0x65
lea eax, [ebp - 0x47b1]
push eax
call fcn.0046a6ad
add esp, 0xc
cmp dword [0x4d3548], 0
jne 0x442433
push 0xca
lea ecx, [ebp - 0x46e7]
push ecx
push 0x4b6e24
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437d10
add esp, 0x14
test eax, eax
jne 0x442449
push 0x4d34a6
push 0x65
lea eax, [ebp - 0x46e7]
push eax
call fcn.0046a6ad
add esp, 0xc
push 0x4b6e44
lea ecx, [ebp - 0x1c88]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0xca
lea edx, [ebp - 0x4013]
push edx
push 0x4b6e58
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437d10
add esp, 0x14
push 0xca
lea ecx, [ebp - 0x4415]
push ecx
push 0x4b6e60
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437d10
add esp, 0x14
push 0x208
lea eax, [ebp - 0x461d]
push eax
push 0x4b6e6c
lea ecx, [ebp - 0x1c88]
push ecx
push closesocket
call fcn.00437d10
add esp, 0x14
push 0xca
lea edx, [ebp - 0x434b]
push edx
push 0x4b6e7c
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437d10
add esp, 0x14
push 0x66
lea ecx, [ebp - 0x4281]
push ecx
push 0x4b6e8c
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437d10
add esp, 0x14
push 0x208
lea eax, [ebp - 0x421b]
push eax
push 0x4b6e9c
lea ecx, [ebp - 0x1c88]
push ecx
push closesocket
call fcn.00437d10
add esp, 0x14
jmp 0x442a4c
push 1
push 0x4b6eac
lea edx, [ebp - 0x840]
push edx
push closesocket
call fcn.00437bc0
add esp, 0x10
movzx eax, word [0x4d31f8]
test eax, eax
je 0x442588
push 0x104
push 0x4d31f8
push 1
push 0x4b6eb4
lea ecx, [ebp - 0x1c88]
push ecx
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x4425a1
push 0x4b6ecc
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437ca0
add esp, 0xc
push 0x4d31f8
push 0x29
lea eax, [ebp - 0x6430]
push eax
call fcn.0046a6ad
add esp, 0xc
cmp dword [0x4d34a2], 0
jne 0x442621
movzx ecx, word [0x4d3400]
test ecx, ecx
je 0x4425f2
push 0x104
push 0x4d3400
push 1
push 0x4b6ee4
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x44260b
push 0x4b6efc
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437ca0
add esp, 0xc
push 0x4d3400
push 0x65
lea ecx, [ebp - 0x47b1]
push ecx
call fcn.0046a6ad
add esp, 0xc
cmp dword [0x4d3548], 0
jne 0x44268b
movzx edx, word [0x4d34a6]
test edx, edx
je 0x44265c
push 0x104
push 0x4d34a6
push 1
push 0x4b6f14
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x442675
push 0x4b6f34
lea ecx, [ebp - 0x1c88]
push ecx
push closesocket
call fcn.00437ca0
add esp, 0xc
push 0x4d34a6
push 0x65
lea edx, [ebp - 0x46e7]
push edx
call fcn.0046a6ad
add esp, 0xc
push str.Campaign
lea eax, [ebp - 0x1c88]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
movzx ecx, word [0x4d3d5e]
test ecx, ecx
je 0x4426cf
push 0x104
push 0x4d3d5e
push 1
push 0x4b6f68
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x4426e8
push 0x4b6f70
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437ca0
add esp, 0xc
movzx ecx, word [0x4d395c]
test ecx, ecx
je 0x44271a
push 0x104
push 0x4d395c
push 1
push 0x4b6f78
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x442733
push str.Name
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437ca0
add esp, 0xc
movzx ecx, word [0x4d3754]
test ecx, ecx
je 0x442765
push 0x104
push 0x4d3754
push 1
push 0x4b6f90
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x44277e
push str.Content
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437ca0
add esp, 0xc
movzx ecx, word [0x4d3a26]
test ecx, ecx
je 0x4427b0
push 0x104
push 0x4d3a26
push 1
push 0x4b6fb0
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x4427c9
push str.Source
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437ca0
add esp, 0xc
movzx ecx, word [0x4d3af0]
test ecx, ecx
je 0x4427fb
push 0x104
push 0x4d3af0
push 1
push 0x4b6fd0
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x442814
push str.Medium
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437ca0
add esp, 0xc
movzx ecx, word [0x4d3b56]
test ecx, ecx
je 0x442846
push 0x104
push 0x4d3b56
push 1
push 0x4b6ff0
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x44285f
push str.Keyword
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437ca0
add esp, 0xc
movzx ecx, word [0x4d3d5e]
test ecx, ecx
je 0x442891
push 0x104
push 0x4d3d5e
push 1
push 0x4b7010
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x4428aa
push 0x4b7018
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437ca0
add esp, 0xc
push 0x4d3d5e
push 0x65
lea ecx, [ebp - 0x4013]
push ecx
call fcn.0046a6ad
add esp, 0xc
push 0x4d3b56
push 0x104
lea edx, [ebp - 0x421b]
push edx
call fcn.0046a6ad
add esp, 0xc
push 0x4d3af0
push 0x33
lea eax, [ebp - 0x4281]
push eax
call fcn.0046a6ad
add esp, 0xc
push 0x4d395c
push 0x65
lea ecx, [ebp - 0x4415]
push ecx
call fcn.0046a6ad
add esp, 0xc
push 0x4d3a26
push 0x65
lea edx, [ebp - 0x434b]
push edx
call fcn.0046a6ad
add esp, 0xc
xor eax, eax
mov word [ebp - 0xc7c8], ax
push 0x50
push 0
lea ecx, [ebp - 0xc7c6]
push ecx
call fcn.00467d60
add esp, 0xc
push 0x4333
push 0
lea edx, [ebp - 0xc776]
push edx
call fcn.00467d60
add esp, 0xc
xor eax, eax
mov word [ebp - 0x8440], ax
push 0x1ffe
push 0
lea ecx, [ebp - 0x843e]
push ecx
call fcn.00467d60
add esp, 0xc
lea edx, [ebp - 0x4013]
push edx
push 0x65
lea eax, [ebp - 0xa3ab]
push eax
call fcn.0046a6ad
add esp, 0xc
lea ecx, [ebp - 0x421b]
push ecx
push 0x104
lea edx, [ebp - 0xa5b3]
push edx
call fcn.0046a6ad
add esp, 0xc
lea eax, [ebp - 0x4281]
push eax
push 0x33
lea ecx, [ebp - 0xa619]
push ecx
call fcn.0046a6ad
add esp, 0xc
lea edx, [ebp - 0x4415]
push edx
push 0x65
lea eax, [ebp - 0xa7ad]
push eax
call fcn.0046a6ad
add esp, 0xc
lea ecx, [ebp - 0x434b]
push ecx
push 0x65
lea edx, [ebp - 0xa6e3]
push edx
call fcn.0046a6ad
add esp, 0xc
push 0x1000
lea eax, [ebp - 0x8440]
push eax
lea ecx, [ebp - 0xc7c8]
push ecx
call fcn.0041b2f0
movzx edx, word [ebp - 0x8440]
test edx, edx
je 0x442a33
push 0x104
lea eax, [ebp - 0x8440]
push eax
push 1
push 0x4b7020
lea ecx, [ebp - 0x1c88]
push ecx
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x442a4c
push str.Params
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437ca0
add esp, 0xc
cmp dword [ebp - 0x20a4], 0
je 0x442bea
push 0x4d354c
push 0x104
lea eax, [ebp - 0x55db]
push eax
call fcn.0046a6ad
add esp, 0xc
push str.appview
push 0x1e
lea ecx, [ebp - 0x63b7]
push ecx
call fcn.0046a6ad
add esp, 0xc
cmp dword [0x4d2de4], 0
jne 0x442bea
lea edx, [ebp - 0x6430]
push edx
push 0x4d2de8
call fcn.0041b980
lea eax, [ebp - 0x63de]
push eax
push str.GAParams.UniqueId_s
call fcn.004573f0
add esp, 8
cmp dword [ebp - 0x6434], 0
jne 0x442bea
movzx ecx, word [0x4d2ff0]
test ecx, ecx
je 0x442bea
movsx edx, byte [ebp - 0x63de]
test edx, edx
je 0x442bea
lea eax, [ebp - 0x63de]
mov dword [ebp - 0x643c], eax
cmp dword [ebp - 0x643c], 0
jne 0x442b06
mov dword [ebp - 0xe700], 0
jmp 0x442b7a
mov ecx, dword [ebp - 0x643c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x20a0], eax
cmp dword [ebp - 0x20a0], 0x3fffffff
jle 0x442b34
mov dword [ebp - 0xe704], 0
jmp 0x442b6e
mov eax, dword [ebp - 0x20a0]
shl eax, 1
call fcn.0046d9c0
mov dword [ebp - 0xe708], esp
mov edx, dword [ebp - 0x6438]
push edx
mov eax, dword [ebp - 0x20a0]
push eax
mov ecx, dword [ebp - 0x643c]
push ecx
mov edx, dword [ebp - 0xe708]
push edx
call fcn.0041f650
mov dword [ebp - 0xe704], eax
mov eax, dword [ebp - 0xe704]
mov dword [ebp - 0xe700], eax
mov ecx, dword [ebp - 0xe700]
push ecx
push 0x104
lea edx, [ebp - 0x1708]
push edx
call fcn.0046a6ad
add esp, 0xc
cmp dword [ebp - 0x1c8c], 0
je 0x442bc5
push 0x104
lea eax, [ebp - 0x1708]
push eax
push 1
push 0x4b7068
push 0x4d2ff0
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x442bea
push 0x104
lea ecx, [ebp - 0x1708]
push ecx
push 1
push str.GAClientID
push 0x4d2ff0
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x442c46
movzx edx, word [ebp - 0x840]
test edx, edx
je 0x442c46
cmp dword [0x4e8c48], 0
jne 0x442c46
push 0x4b7098
lea eax, [ebp - 0x840]
push eax
push closesocket
call fcn.00437ca0
add esp, 0xc
push 0x4b70a0
lea ecx, [ebp - 0x840]
push ecx
lea edx, [ebp - 0x1c88]
push edx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437c60
add esp, 8
call fcn.00447de0
mov dword [0x4db5cc], eax
xor ecx, ecx
mov word [ebp - 0x618], cx
push 0x206
push 0
lea edx, [ebp - 0x616]
push edx
call fcn.00467d60
add esp, 0xc
push str.IAMCu.dll
push 0x4e4718
lea eax, [ebp - 0x618]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [0x4d29a9], 0
je 0x442caa
cmp dword [ebp - 0x17bc], 0
je 0x442caa
lea ecx, [ebp - 0x618]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x4db5c8], eax
push 0
push 0x4db5d4
mov edx, dword [0x4db5bc]
push edx
call fcn.00408590
add esp, 0xc
mov dword [0x4db5d0], eax
cmp dword [0x4db5d0], 0
jne 0x442cea
push 0x4db5d8
push str._BV69_FCW_
push 0x4db9e8
call fcn.00418210
add esp, 0xc
mov dword [0x4e8c40], eax
movzx eax, word [0x4d5fa8]
test eax, eax
je 0x442d02
cmp dword [0x4d575c], 0
je 0x442d88
cmp dword [0x4db5d0], 0
jne 0x442d14
cmp dword [0x4e8c40], 0
je 0x442d71
push 0x4b70c8
push 0x4d4668
call fcn.0046b9ce
add esp, 8
test eax, eax
je 0x442d5a
cmp dword [0x4d61d4], 0
je 0x442d5a
push 0x4d4668
push 0x4e5d70
push 0x4d5fa8
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4b7118
push 0x4d5fa8
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x442d6f
push str.7B28E39C_883C_4f49_ABFB_5D16796F2DD9
push 0x4e4920
push 0x4d5fa8
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
jmp 0x442d88
push 0x4db7e0
push 0x104
push 0x4d5fa8
call fcn.0046a6ad
add esp, 0xc
push 0x104
push 0x4d5990
call fcn.004474f0
add esp, 8
push 0x4d5990
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
je 0x442dc0
push 0x4d5990
push 0x4d5fa8
push 0x4e3d00
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
jmp 0x442dd0
push 0x4d5990
push 0x4e3d00
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x4e3d00
push str.WinMain____ExeFile_s
call fcn.00456fc0
add esp, 8
cmp dword [0x4d5510], 0
je 0x442f2e
push str.__NOLU
push 0x1f40
push 0x4dc000
call fcn.00468221
add esp, 0xc
mov ecx, dword [0x4d551c]
push ecx
mov edx, dword [0x4d5518]
push edx
lea eax, [ebp - 0x17b8]
push eax
push 0x4db9e8
push 0x4d4ef8
call fcn.004229a0
add esp, 0x14
mov dword [0x4d5510], eax
cmp dword [0x4d5510], 0
je 0x442eda
cmp dword [0x4d5528], 0
je 0x442eb0
cmp dword [0x4e8c38], 0
jne 0x442eb0
mov ecx, dword [0x4db5b0]
push ecx
mov ecx, 0x4e8c54
call fcn.004087b0
mov edx, dword [eax + 0x410]
push edx
push 0x100
lea eax, [ebp - 0xe48]
push eax
push 0x2ca
mov ecx, dword [0x4d2ddc]
push ecx
call fcn.00449f40
add esp, 0x14
push 0x40024
push 0x4d3e28
lea edx, [ebp - 0xe48]
push edx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
cmp eax, 6
sete cl
mov dword [0x4d5510], ecx
cmp dword [0x4d5510], 0
je 0x442ec5
jmp 0x44485e
cmp dword [0x4d5520], 0
je 0x442ed8
jmp 0x4448f3
jmp 0x442f2e
cmp dword [0x4d5524], 0
je 0x442f2e
push 0x100
lea edx, [ebp - 0xe48]
push edx
mov eax, dword [ebp - 0x17b8]
push eax
call fcn.00449d50
add esp, 0xc
test eax, eax
je 0x442f24
cmp dword [0x4e8c38], 0
jne 0x442f24
push 0x40010
push 0x4d3e28
lea ecx, [ebp - 0xe48]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x4448f3
mov byte [ebp - 0x14a5], 0
xor edx, edx
mov word [ebp - 0x1088], dx
push 0x206
push 0
lea eax, [ebp - 0x1086]
push eax
call fcn.00467d60
add esp, 0xc
cmp dword [0x4d299d], 0
je 0x442fd9
push str.TBI.exe
push 0x4e4920
lea ecx, [ebp - 0x1088]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
call fcn.00401870
mov byte [ebp - 0x14a5], al
cmp dword [0x4d2068], 0
jne 0x442fc3
push 0x4d208e
push 0x4d2078
movzx edx, byte [ebp - 0x14a5]
push edx
call fcn.00401a50
add esp, 0xc
test eax, eax
jne 0x442fb7
lea eax, [ebp - 0x1088]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x442fc3
mov dword [ebp - 0xe70c], 0
jmp 0x442fcd
mov dword [ebp - 0xe70c], 1
mov ecx, dword [ebp - 0xe70c]
mov dword [0x4d299d], ecx
mov edx, dword [0x4d299d]
push edx
push str.WinMain____Toolbar_d
call fcn.00456fc0
add esp, 8
cmp dword [0x4d5774], 0
je 0x4431a3
mov dword [ebp - 0xc7d0], 0
mov dword [ebp - 0xc7cc], 0
mov ecx, 0x4d0968
call fcn.0040ffb0
cmp dword [ebp - 0xc7cc], eax
jae 0x44312e
cmp dword [ebp - 0xc7d0], 0
jne 0x44312e
mov eax, dword [ebp - 0xc7cc]
push eax
mov ecx, 0x4d0968
call fcn.0040ffd0
add eax, 0x200
push eax
push str.WinMain____Platform:__s
call fcn.00456fc0
add esp, 8
push str.Win32
mov ecx, dword [ebp - 0xc7cc]
push ecx
mov ecx, 0x4d0968
call fcn.0040ffd0
add eax, 0x400
push eax
call fcn.0046b9ce
add esp, 8
test eax, eax
jne 0x443091
xor edx, edx
cmp dword [0x4d0830], 0
sete dl
mov dword [ebp - 0xc7d0], edx
jmp 0x4430d1
push str.Win64
mov eax, dword [ebp - 0xc7cc]
push eax
mov ecx, 0x4d0968
call fcn.0040ffd0
add eax, 0x400
push eax
call fcn.0046b9ce
add esp, 8
test eax, eax
jne 0x4430c7
mov ecx, dword [0x4d0830]
mov dword [ebp - 0xc7d0], ecx
jmp 0x4430d1
mov dword [ebp - 0xc7d0], 1
mov edx, dword [ebp - 0xc7d0]
push edx
push str.WinMain____ProcArchitecture:_Continue_d
call fcn.00456fc0
add esp, 8
cmp dword [ebp - 0xc7d0], 0
je 0x44311a
mov eax, dword [ebp - 0xc7cc]
push eax
mov ecx, dword [ebp - 0xc7cc]
push ecx
mov ecx, 0x4d0968
call fcn.0040ffd0
add eax, 0x600
push eax
call fcn.0040f880
add esp, 8
mov dword [ebp - 0xc7d0], eax
mov edx, dword [ebp - 0xc7cc]
add edx, 1
mov dword [ebp - 0xc7cc], edx
jmp 0x44300e
cmp dword [ebp - 0xc7d0], 0
jne 0x4431a3
mov dword [ebp - 0x17b8], 0xa
cmp dword [0x4e8c38], 0
jne 0x443199
mov eax, dword [0x4db5b0]
push eax
mov ecx, 0x4e8c54
call fcn.004087b0
mov ecx, dword [eax + 0x410]
push ecx
push 0x100
lea edx, [ebp - 0xe48]
push edx
push 0x25f
mov eax, dword [0x4d2ddc]
push eax
call fcn.00449f40
add esp, 0x14
push 0x40010
push 0x4d3e28
lea ecx, [ebp - 0xe48]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x4448f3
cmp dword [0x4d5760], 0
je 0x44331d
mov dword [ebp - 0xc7d4], 1
xor edx, edx
mov word [ebp - 0xc9e0], dx
push 0x206
push 0
lea eax, [ebp - 0xc9de]
push eax
call fcn.00467d60
add esp, 0xc
push 0x104
lea ecx, [ebp - 0xc9e0]
push ecx
push 0x4b72cc
push 0x4b72d4
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
jne 0x443227
push 0x104
lea edx, [ebp - 0xc9e0]
push edx
push 0x4b72ec
push str._PASSWORD:
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x443270
lea eax, [ebp - 0xc9e0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
push 0x10
lea ecx, [ebp - 0xc9e0]
push ecx
push 0x11
lea edx, [ebp - 0xe70]
push edx
call fcn.0046afc1
add esp, 0x10
push 0x4d4ed6
lea eax, [ebp - 0xc9e0]
push eax
call fcn.0046d8c4
add esp, 8
test eax, eax
jne 0x443270
mov dword [ebp - 0xc7d4], 0
cmp dword [ebp - 0xc7d4], 0
je 0x44331d
mov ecx, dword [0x4d2ddc]
mov dword [ebp - 0xe7c], ecx
mov edx, dword [0x4db5b0]
push edx
mov ecx, 0x4e8c54
call fcn.004087b0
mov eax, dword [eax + 0x410]
mov dword [ebp - 0xe78], eax
mov ecx, dword [0x4d577c]
neg ecx
sbb ecx, ecx
and ecx, 0xfffffffe
add ecx, 2
mov dword [ebp - 0xe74], ecx
mov edx, dword [0x4d5780]
neg edx
sbb edx, edx
and edx, 4
or edx, dword [ebp - 0xe74]
mov dword [ebp - 0xe74], edx
lea eax, [ebp - 0xe7c]
push eax
push 0
call fcn.00414c70
add esp, 8
mov dword [ebp - 0x61c], eax
mov ecx, dword [ebp - 0x61c]
push ecx
push str.WinMain____Dialog_password_d
call fcn.00456fc0
add esp, 8
cmp dword [ebp - 0x61c], 1
je 0x44331d
mov dword [ebp - 0x17b8], 0x4c7
jmp 0x4448f3
cmp dword [0x4d5764], 0
je 0x4433ea
cmp dword [0x4e8c38], 0
jne 0x4433ea
mov edx, dword [0x4d2ddc]
mov dword [ebp - 0x1a80], edx
mov eax, dword [0x4db5b0]
push eax
mov ecx, 0x4e8c54
call fcn.004087b0
mov ecx, dword [eax + 0x410]
mov dword [ebp - 0x1a7c], ecx
push 0x4e4110
push 0x104
lea edx, [ebp - 0x1a70]
push edx
call fcn.0046a6ad
add esp, 0xc
cmp dword [ebp - 0x61c], 0
je 0x44338b
mov dword [ebp - 0x1a78], 1
mov eax, dword [0x4d577c]
neg eax
sbb eax, eax
and eax, 0xfffffffe
add eax, 2
or eax, dword [ebp - 0x1a78]
mov dword [ebp - 0x1a78], eax
mov ecx, dword [0x4d5780]
neg ecx
sbb ecx, ecx
and ecx, 4
or ecx, dword [ebp - 0x1a78]
mov dword [ebp - 0x1a78], ecx
lea edx, [ebp - 0x1a80]
push edx
push 0
call fcn.004140a0
add esp, 8
mov dword [ebp - 0x61c], eax
mov eax, dword [ebp - 0x61c]
push eax
push str.WinMain____Dialog_license_d
call fcn.00456fc0
add esp, 8
cmp dword [ebp - 0x61c], 3
jne 0x4433fa
jmp 0x4431a3
cmp dword [ebp - 0x61c], 1
je 0x443420
cmp dword [ebp - 0x61c], 0
je 0x443420
mov dword [ebp - 0x17b8], 0x4c7
jmp 0x4448f3
xor ecx, ecx
mov word [ebp - 0x17b0], cx
push 0xa0
push 0
lea edx, [ebp - 0x17ae]
push edx
call fcn.00467d60
add esp, 0xc
xor eax, eax
mov word [ebp - 0x1868], ax
push 0xa0
push 0
lea ecx, [ebp - 0x1866]
push ecx
call fcn.00467d60
add esp, 0xc
push 0x51
lea edx, [ebp - 0x17b0]
push edx
call fcn.00438780
add esp, 8
push 0x51
lea eax, [ebp - 0x1868]
push eax
call fcn.00438810
add esp, 8
lea ecx, [ebp - 0x17b0]
push ecx
push str.WinMain____CompanyName_s
call fcn.00456fc0
add esp, 8
lea edx, [ebp - 0x1868]
push edx
push str.WinMain____UserName_s
call fcn.00456fc0
add esp, 8
mov dword [ebp - 0xc44], 0
movzx eax, byte [0x4d2998]
cmp eax, 1
je 0x4434ec
movzx ecx, byte [0x4d2998]
cmp ecx, 2
je 0x4434ec
movzx edx, byte [0x4d2998]
cmp edx, 3
je 0x4434ec
cmp dword [0x4d2999], 0
jne 0x4434ec
cmp dword [0x4d29a1], 0
je 0x443851
xor eax, eax
mov word [ebp - 0xcdf8], ax
push 0x206
push 0
lea ecx, [ebp - 0xcdf6]
push ecx
call fcn.00467d60
add esp, 0xc
push 0x104
lea edx, [ebp - 0xcdf8]
push edx
push 0x4b73e8
push 0x4b73f0
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
jne 0x44355d
push 0x104
lea eax, [ebp - 0xcdf8]
push eax
push 0x4b7404
push str._SERIAL:
push 0x4dc000
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x443625
lea ecx, [ebp - 0xcdf8]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
call fcn.004040e0
mov dword [ebp - 0xce0c], eax
lea edx, [ebp - 0xcdf8]
mov dword [ebp - 0xce08], edx
cmp dword [ebp - 0xce08], 0
jne 0x443596
mov dword [ebp - 0xe710], 0
jmp 0x44360c
mov eax, dword [ebp - 0xce08]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
mov dword [ebp - 0xce04], eax
cmp dword [ebp - 0xce04], 0x3fffffff
jle 0x4435c4
mov dword [ebp - 0xe714], 0
jmp 0x443600
mov eax, dword [ebp - 0xce04]
shl eax, 1
call fcn.0046d9c0
mov dword [ebp - 0xe718], esp
mov ecx, dword [ebp - 0xce0c]
push ecx
mov edx, dword [ebp - 0xce04]
shl edx, 1
push edx
mov eax, dword [ebp - 0xce08]
push eax
mov ecx, dword [ebp - 0xe718]
push ecx
call fcn.00423510
mov dword [ebp - 0xe714], eax
mov edx, dword [ebp - 0xe714]
mov dword [ebp - 0xe710], edx
mov eax, dword [ebp - 0xe710]
push eax
push 0x104
push 0x4d29ad
call fcn.0046a4fd
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0xcbe8], cx
push 0x206
push 0
lea edx, [ebp - 0xcbe6]
push edx
call fcn.00467d60
add esp, 0xc
lea eax, [ebp - 0x1290]
push eax
push 0x4e7df0
lea ecx, [ebp - 0xcbe8]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea edx, [ebp - 0x210]
push edx
lea eax, [ebp - 0xcbe8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov dword [ebp - 0xe4c], 0
lea ecx, [ebp - 0xcbe8]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4436c5
push 3
push 0x10000000
lea edx, [ebp - 0xcbe8]
push edx
call fcn.0040c8e0
add esp, 0xc
mov dword [ebp - 0xe4c], eax
mov eax, dword [ebp - 0xe4c]
push eax
lea ecx, [ebp - 0xcbe8]
push ecx
push str.AddAccessRights__s____d
call fcn.00456fc0
add esp, 0xc
jmp 0x443700
cmp dword [0x4d080c], 0
je 0x443700
lea edx, [ebp - 0x1290]
push edx
push 0x23
call fcn.0040caf0
add esp, 8
mov dword [ebp - 0xe4c], eax
mov eax, dword [ebp - 0xe4c]
push eax
lea ecx, [ebp - 0x1290]
push ecx
push str.CreateFreeDirectory__s____d
call fcn.00456fc0
add esp, 0xc
lea edx, [ebp - 0xcbe8]
push edx
call fcn.0040d340
add esp, 4
call fcn.004040e0
mov dword [ebp - 0xcdfc], eax
lea eax, [ebp - 0x840]
push eax
push closesocket
call fcn.00437a30
add esp, 8
push 0x1a
push 0x4d2bb5
push 1
push 0x4b7488
lea ecx, [ebp - 0x840]
push ecx
push closesocket
call fcn.00437a90
add esp, 0x18
push 0x208
lea edx, [ebp - 0xcbe8]
push edx
push 1
push 0x4b7498
lea eax, [ebp - 0x840]
push eax
push closesocket
call fcn.00437a90
add esp, 0x18
push 0x208
push 0x4d5fa8
push 1
push 0x4b74ac
lea ecx, [ebp - 0x840]
push ecx
push closesocket
call fcn.00437a90
add esp, 0x18
movzx edx, byte [0x4d2998]
cmp edx, 1
jne 0x4437cf
push 0x4e
push 0x4d2940
push 1
push 0x4b74c0
lea eax, [ebp - 0x840]
push eax
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x443851
movzx ecx, byte [0x4d2998]
cmp ecx, 3
jne 0x443851
xor edx, edx
mov word [ebp - 0xce30], dx
xor eax, eax
mov dword [ebp - 0xce2e], eax
mov dword [ebp - 0xce2a], eax
mov dword [ebp - 0xce26], eax
mov dword [ebp - 0xce22], eax
mov dword [ebp - 0xce1e], eax
mov dword [ebp - 0xce1a], eax
mov dword [ebp - 0xce16], eax
push 0xf
lea ecx, [ebp - 0xce30]
push ecx
push 0xffffffffffffffff
push 0x4d24c2
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0x1e
lea edx, [ebp - 0xce30]
push edx
push 1
push 0x4b74cc
lea eax, [ebp - 0x840]
push eax
push closesocket
call fcn.00437a90
add esp, 0x18
mov dword [ebp - 0x14a4], 0
movzx ecx, byte [0x4d2998]
cmp ecx, 1
jne 0x443bf5
mov dword [ebp - 0xd3a8], 0
push 0x574
push 0
lea edx, [ebp - 0xd3a4]
push edx
call fcn.00467d60
add esp, 0xc
lea eax, [ebp - 0xd3a0]
push eax
push 0x4d2940
call fcn.0040baa0
add esp, 8
cmp dword [ebp - 0xc44], 0
je 0x4438dd
push 0x4d29ad
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0xd3a0]
mov dword [ecx], edx
mov eax, dword [ebp - 0xd39c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xd398]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xd394]
mov dword [ecx + 0xc], eax
call fcn.0044e6d0
add esp, 0x14
cmp dword [0x4d2730], 0
je 0x44391c
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0xd3a0]
mov dword [ecx], edx
mov eax, dword [ebp - 0xd39c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xd398]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xd394]
mov dword [ecx + 0xc], eax
call fcn.0044e530
add esp, 0x10
mov dword [ebp - 0x14a4], eax
cmp dword [ebp - 0x14a4], 0
jne 0x443bf0
mov ecx, dword [0x4d2ddc]
mov dword [ebp - 0xd3a8], ecx
mov edx, dword [0x4db5b0]
push edx
mov ecx, 0x4e8c54
call fcn.004087b0
mov eax, dword [eax + 0x410]
mov dword [ebp - 0xd3a4], eax
mov ecx, dword [0x4d272c]
neg ecx
sbb ecx, ecx
add ecx, 2
mov byte [ebp - 0xd390], cl
mov edx, dword [0x4d2734]
mov dword [ebp - 0xd38f], edx
mov eax, dword [0x4d577c]
neg eax
sbb eax, eax
and eax, 0xfffffc00
add eax, 0x400
or eax, dword [ebp - 0xd38f]
mov dword [ebp - 0xd38f], eax
mov ecx, dword [0x4d5780]
neg ecx
sbb ecx, ecx
and ecx, 0x800
or ecx, dword [ebp - 0xd38f]
mov dword [ebp - 0xd38f], ecx
cmp dword [ebp - 0x61c], 0
je 0x4439c7
mov edx, dword [ebp - 0xd38f]
or edx, 0x200
mov dword [ebp - 0xd38f], edx
mov eax, dword [ebp - 0xd38f]
push eax
push str.WinMain____SNV3Info.uiDlgOption_d
call fcn.00456fc0
add esp, 8
mov cl, byte [0x4d298e]
mov byte [ebp - 0xd38b], cl
movzx edx, byte [ebp - 0xd38b]
push edx
movzx eax, byte [ebp - 0xd38b]
push eax
push str.WinMain____SNV3Info.byProductCode_d___x_
call fcn.00456fc0
add esp, 0xc
mov cl, byte [0x4d2dd8]
mov byte [ebp - 0xd389], cl
mov dl, byte [0x4d2dd9]
mov byte [ebp - 0xd38a], dl
mov al, byte [0x4d298f]
mov byte [ebp - 0xd388], al
mov cl, byte [0x4d2990]
mov byte [ebp - 0xd386], cl
mov dl, byte [0x4d2ddb]
mov byte [ebp - 0xd387], dl
lea eax, [ebp - 0x17b0]
push eax
push 0x51
lea ecx, [ebp - 0xcf74]
push ecx
call fcn.0046a6ad
add esp, 0xc
lea edx, [ebp - 0x1868]
push edx
push 0x51
lea eax, [ebp - 0xced2]
push eax
call fcn.0046a6ad
add esp, 0xc
push 0x4d2738
push 0x104
lea ecx, [ebp - 0xd17c]
push ecx
call fcn.0046a6ad
add esp, 0xc
push 0x4d29ad
push 0x104
lea edx, [ebp - 0xd384]
push edx
call fcn.0046a4fd
add esp, 0xc
push 0x4d2ab1
push 0x104
lea eax, [ebp - 0xd280]
push eax
call fcn.0046a4fd
add esp, 0xc
cmp dword [0x4e8c38], 0
jne 0x443b24
lea ecx, [ebp - 0xd3a8]
push ecx
push 0
call fcn.0044e240
add esp, 8
mov dword [ebp - 0x61c], eax
mov edx, dword [ebp - 0x61c]
push edx
push str.WinMain____Dialog_SerialV3_d
call fcn.00456fc0
add esp, 8
cmp dword [ebp - 0x61c], 3
jne 0x443afe
jmp 0x44331d
cmp dword [ebp - 0x61c], 1
je 0x443b24
cmp dword [ebp - 0x61c], 0
je 0x443b24
mov dword [ebp - 0x17b8], 0x4c7
jmp 0x4448f3
lea eax, [ebp - 0xd3a8]
push eax
call fcn.0044e3c0
add esp, 4
test eax, eax
jne 0x443bd7
mov ecx, dword [0x4db5b0]
push ecx
mov ecx, 0x4e8c54
call fcn.004087b0
mov edx, dword [eax + 0x410]
push edx
push 0x100
lea eax, [ebp - 0x410]
push eax
push 0x258
mov ecx, dword [0x4d2ddc]
push ecx
call fcn.00449f40
add esp, 0x14
mov edx, dword [0x4db5b0]
push edx
mov ecx, 0x4e8c54
call fcn.004087b0
mov eax, dword [eax + 0x410]
push eax
push 0x100
lea ecx, [ebp - 0xe48]
push ecx
push 0x2bf
mov edx, dword [0x4d2ddc]
push edx
call fcn.00449f40
add esp, 0x14
push 0
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0xe48]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0x17b8], 0xd
jmp 0x4448f3
lea edx, [ebp - 0xd384]
push edx
push 0x104
push 0x4d29ad
call fcn.0046a4fd
add esp, 0xc
jmp 0x443f31
movzx eax, byte [0x4d2998]
cmp eax, 3
jne 0x443f31
mov dword [ebp - 0xdb28], 0
push 0x775
push 0
lea ecx, [ebp - 0xdb24]
push ecx
call fcn.00467d60
add esp, 0xc
push 0x4d24c2
push 0xf
lea edx, [ebp - 0xdb20]
push edx
call fcn.0046a4fd
add esp, 0xc
cmp dword [ebp - 0xc44], 0
je 0x443c5a
lea eax, [ebp - 0xdb20]
push eax
lea ecx, [ebp - 0x840]
push ecx
call fcn.004507b0
add esp, 8
cmp dword [0x4d22b0], 0
je 0x443c7d
lea edx, [ebp - 0xdb20]
push edx
push 0x4d2bcf
call fcn.004505b0
add esp, 8
mov dword [ebp - 0x14a4], eax
cmp dword [ebp - 0x14a4], 0
jne 0x443f31
mov eax, dword [0x4d2ddc]
mov dword [ebp - 0xdb28], eax
mov ecx, dword [0x4db5b0]
push ecx
mov ecx, 0x4e8c54
call fcn.004087b0
mov edx, dword [eax + 0x410]
mov dword [ebp - 0xdb24], edx
mov eax, dword [0x4d22ac]
neg eax
sbb eax, eax
add eax, 2
mov byte [ebp - 0xdb11], al
mov ecx, dword [0x4d22b4]
mov dword [ebp - 0xdb10], ecx
mov edx, dword [0x4d577c]
neg edx
sbb edx, edx
and edx, 0xfffffc00
add edx, 0x400
or edx, dword [ebp - 0xdb10]
mov dword [ebp - 0xdb10], edx
mov eax, dword [0x4d5780]
neg eax
sbb eax, eax
and eax, 0x800
or eax, dword [ebp - 0xdb10]
mov dword [ebp - 0xdb10], eax
cmp dword [ebp - 0x61c], 0
je 0x443d27
mov ecx, dword [ebp - 0xdb10]
or ecx, 0x200
mov dword [ebp - 0xdb10], ecx
lea edx, [ebp - 0x17b0]
push edx
push 0x51
lea eax, [ebp - 0xd4f3]
push eax
call fcn.0046a6ad
add esp, 0xc
lea ecx, [ebp - 0x1868]
push ecx
push 0x51
lea edx, [ebp - 0xd451]
push edx
call fcn.0046a6ad
add esp, 0xc
push 0x4d22ba
push 0x104
lea eax, [ebp - 0xd6fb]
push eax
call fcn.0046a6ad
add esp, 0xc
push 0x4d29ad
push 0x104
lea ecx, [ebp - 0xdb0b]
push ecx
call fcn.0046a4fd
add esp, 0xc
push 0x4d2ab1
push 0x104
lea edx, [ebp - 0xda07]
push edx
call fcn.0046a4fd
add esp, 0xc
push 0x4d2bcf
push 0x104
lea eax, [ebp - 0xd903]
push eax
call fcn.0046a6ad
add esp, 0xc
cmp dword [0x4e8c38], 0
jne 0x443e25
lea ecx, [ebp - 0xdb28]
push ecx
push 0
call fcn.00450390
add esp, 8
mov dword [ebp - 0x61c], eax
mov edx, dword [ebp - 0x61c]
push edx
push str.WinMain____Dialog_SerialV5_d
call fcn.00456fc0
add esp, 8
cmp dword [ebp - 0x61c], 3
jne 0x443dff
jmp 0x44331d
cmp dword [ebp - 0x61c], 1
je 0x443e25
cmp dword [ebp - 0x61c], 0
je 0x443e25
mov dword [ebp - 0x17b8], 0x4c7
jmp 0x4448f3
push 0x4d2bcf
push str.WinMain____AQTOOLSINFO.szProductKey_s
call fcn.00456fc0
add esp, 8
push 0x4d24c2
push str.WinMain____AQTOOLSSERIALV5.szSerialID_s
call fcn.004573f0
add esp, 8
lea eax, [ebp - 0xdb0b]
push eax
push str.WinMain____SNV5Info.szSerial_s
call fcn.004573f0
add esp, 8
lea ecx, [ebp - 0xdb0b]
push ecx
push 0x4d24c2
push 0x4d2bcf
call fcn.00450730
add esp, 0xc
test eax, eax
jne 0x443f18
mov edx, dword [0x4db5b0]
push edx
mov ecx, 0x4e8c54
call fcn.004087b0
mov eax, dword [eax + 0x410]
push eax
push 0x100
lea ecx, [ebp - 0x410]
push ecx
push 0x258
mov edx, dword [0x4d2ddc]
push edx
call fcn.00449f40
add esp, 0x14
mov eax, dword [0x4db5b0]
push eax
mov ecx, 0x4e8c54
call fcn.004087b0
mov ecx, dword [eax + 0x410]
push ecx
push 0x100
lea edx, [ebp - 0xe48]
push edx
push 0x2bf
mov eax, dword [0x4d2ddc]
push eax
call fcn.00449f40
add esp, 0x14
push 0
lea ecx, [ebp - 0x410]
push ecx
lea edx, [ebp - 0xe48]
push edx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0x17b8], 0xd
jmp 0x4448f3
lea eax, [ebp - 0xdb0b]
push eax
push 0x104
push 0x4d29ad
call fcn.0046a4fd
add esp, 0xc
cmp dword [0x4d2999], 0
je 0x444365
cmp dword [ebp - 0x14a4], 0
jne 0x444365
call fcn.004040e0
mov dword [ebp - 0xdb34], eax
mov dword [ebp - 0xdb38], 0
cmp dword [0x4d17fc], 0
je 0x444057
cmp dword [ebp - 0x17bc], 0
jne 0x444057
cmp dword [0x4e8c38], 0
je 0x443f97
mov dword [ebp - 0x17b8], 0x4cd
jmp 0x4448f3
mov ecx, dword [0x4db5b0]
push ecx
mov ecx, 0x4e8c54
call fcn.004087b0
mov edx, dword [eax + 0x410]
push edx
push 0x100
lea eax, [ebp - 0x410]
push eax
push 0x258
mov ecx, dword [0x4d2ddc]
push ecx
call fcn.00449f40
add esp, 0x14
mov edx, dword [0x4db5b0]
push edx
mov ecx, 0x4e8c54
call fcn.004087b0
mov eax, dword [eax + 0x410]
push eax
push 0x100
lea ecx, [ebp - 0xe48]
push ecx
push 0x2c3
mov edx, dword [0x4d2ddc]
push edx
call fcn.00449f40
add esp, 0x14
cmp dword [ebp - 0x17bc], 0
jne 0x444057
push 0x25
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0xe48]
push ecx
mov edx, dword [ebp - 0xdb38]
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
jne 0x444048
mov dword [ebp - 0x17b8], 0x4c7
jmp 0x4448f3
push 0
call fcn.0048b210
mov dword [ebp - 0x17bc], eax
jmp 0x444007
mov dword [ebp - 0xdb3c], 0x4d29ad
cmp dword [ebp - 0xdb3c], 0
jne 0x444076
mov dword [ebp - 0xe71c], 0
jmp 0x4440ea
mov eax, dword [ebp - 0xdb3c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0xdb2c], eax
cmp dword [ebp - 0xdb2c], 0x3fffffff
jle 0x4440a4
mov dword [ebp - 0xe720], 0
jmp 0x4440de
mov eax, dword [ebp - 0xdb2c]
shl eax, 1
call fcn.0046d9c0
mov dword [ebp - 0xe724], esp
mov ecx, dword [ebp - 0xdb34]
push ecx
mov edx, dword [ebp - 0xdb2c]
push edx
mov eax, dword [ebp - 0xdb3c]
push eax
mov ecx, dword [ebp - 0xe724]
push ecx
call fcn.0041f650
mov dword [ebp - 0xe720], eax
mov edx, dword [ebp - 0xe720]
mov dword [ebp - 0xe71c], edx
mov eax, dword [ebp - 0xe71c]
push eax
lea ecx, [ebp - 0x840]
push ecx
call fcn.0048b2d0
mov dword [ebp - 0xe4c], eax
mov dword [ebp - 0xdb3c], 0x4d29ad
cmp dword [ebp - 0xdb3c], 0
jne 0x444122
mov dword [ebp - 0xe728], 0
jmp 0x444196
mov edx, dword [ebp - 0xdb3c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0xdb2c], eax
cmp dword [ebp - 0xdb2c], 0x3fffffff
jle 0x444150
mov dword [ebp - 0xe72c], 0
jmp 0x44418a
mov eax, dword [ebp - 0xdb2c]
shl eax, 1
call fcn.0046d9c0
mov dword [ebp - 0xe730], esp
mov eax, dword [ebp - 0xdb34]
push eax
mov ecx, dword [ebp - 0xdb2c]
push ecx
mov edx, dword [ebp - 0xdb3c]
push edx
mov eax, dword [ebp - 0xe730]
push eax
call fcn.0041f650
mov dword [ebp - 0xe72c], eax
mov ecx, dword [ebp - 0xe72c]
mov dword [ebp - 0xe728], ecx
mov edx, dword [ebp - 0xe4c]
push edx
mov eax, dword [ebp - 0xe728]
push eax
lea ecx, [ebp - 0x840]
push ecx
push str.WinMain____ActivProd_SetSerialNumber__s___s____d
call fcn.00456fc0
add esp, 0x10
push 1
push 0
push 0
push 0
push 0xfffffffffffffffe
push closesocket
mov edx, dword [ebp - 0xdb38]
push edx
lea eax, [ebp - 0x840]
push eax
call fcn.0048b3c0
mov dword [ebp - 0xe4c], eax
mov ecx, dword [ebp - 0xe4c]
push ecx
mov edx, dword [ebp - 0xdb38]
push edx
lea eax, [ebp - 0x840]
push eax
push str.WinMain____ActivProdEx__s___d____d
call fcn.00456fc0
add esp, 0x10
cmp dword [ebp - 0xe4c], 0
jne 0x444365
mov ecx, dword [0x4db5b0]
push ecx
mov ecx, 0x4e8c54
call fcn.004087b0
mov edx, dword [eax + 0x410]
push edx
push 0x100
lea eax, [ebp - 0x410]
push eax
push 0x258
mov ecx, dword [0x4d2ddc]
push ecx
call fcn.00449f40
add esp, 0x14
mov edx, dword [0x4db5b0]
push edx
mov ecx, 0x4e8c54
call fcn.004087b0
mov eax, dword [eax + 0x410]
push eax
push 0x100
lea ecx, [ebp - 0xe48]
push ecx
push 0x2c2
mov edx, dword [0x4d2ddc]
push edx
call fcn.00449f40
add esp, 0x14
mov dword [ebp - 0xdb3c], 0x4d29ad
cmp dword [ebp - 0xdb3c], 0
jne 0x44429e
mov dword [ebp - 0xe734], 0
jmp 0x444312
mov eax, dword [ebp - 0xdb3c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0xdb2c], eax
cmp dword [ebp - 0xdb2c], 0x3fffffff
jle 0x4442cc
mov dword [ebp - 0xe738], 0
jmp 0x444306
mov eax, dword [ebp - 0xdb2c]
shl eax, 1
call fcn.0046d9c0
mov dword [ebp - 0xe73c], esp
mov ecx, dword [ebp - 0xdb34]
push ecx
mov edx, dword [ebp - 0xdb2c]
push edx
mov eax, dword [ebp - 0xdb3c]
push eax
mov ecx, dword [ebp - 0xe73c]
push ecx
call fcn.0041f650
mov dword [ebp - 0xe738], eax
mov edx, dword [ebp - 0xe738]
mov dword [ebp - 0xe734], edx
push 0x4db5e0
mov eax, dword [ebp - 0xe734]
push eax
lea ecx, [ebp - 0xe48]
push ecx
push 0x200
lea edx, [ebp - 0xc40]
push edx
call fcn.00468336
add esp, 0x14
push 0
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0xc40]
push ecx
mov edx, dword [ebp - 0xdb38]
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0xc44], 1
jmp 0x4434b2
cmp dword [0x4d299d], 0
je 0x44455a
mov dword [ebp - 0xdd80], 0
push 0x236
push 0
lea eax, [ebp - 0xdd7c]
push eax
call fcn.00467d60
add esp, 0xc
mov ecx, dword [0x4d2ddc]
mov dword [ebp - 0xdd80], ecx
mov edx, dword [0x4db5b0]
push edx
mov ecx, 0x4e8c54
call fcn.004087b0
mov eax, dword [eax + 0x410]
mov dword [ebp - 0xdd7c], eax
mov ecx, dword [0x4d2068]
mov dword [ebp - 0xdd6c], ecx
mov edx, dword [0x4d2074]
mov dword [ebp - 0xdd74], edx
mov eax, dword [0x4d2070]
mov dword [ebp - 0xdd70], eax
mov ecx, dword [0x4d206c]
mov dword [ebp - 0xdd78], ecx
mov edx, dword [0x4d577c]
neg edx
sbb edx, edx
and edx, 0xfffffffe
add edx, 2
or edx, dword [ebp - 0xdb4a]
mov dword [ebp - 0xdb4a], edx
mov eax, dword [0x4d5780]
neg eax
sbb eax, eax
and eax, 4
or eax, dword [ebp - 0xdb4a]
mov dword [ebp - 0xdb4a], eax
push 0x4d2078
push 0xb
lea ecx, [ebp - 0xdd68]
push ecx
call fcn.0046a6ad
add esp, 0xc
push str.Toolbar.bmp
push 0x4e4920
lea edx, [ebp - 0xdd52]
push edx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [0x4e8c38], 0
jne 0x44449c
lea eax, [ebp - 0xdd80]
push eax
push 0
call fcn.00401810
add esp, 8
mov dword [ebp - 0x61c], eax
mov ecx, dword [ebp - 0x61c]
push ecx
push str.WinMain____Dialog_Toolbar_d
call fcn.00456fc0
add esp, 8
cmp dword [ebp - 0x61c], 1
je 0x44449c
mov dword [ebp - 0x17b8], 0x4c7
jmp 0x4448f3
cmp dword [ebp - 0xdd78], 0
je 0x44455a
mov dword [ebp - 0xdd84], 0
mov edx, dword [0x4db5b0]
push edx
mov ecx, 0x4e8c54
call fcn.004087b0
mov eax, dword [eax + 0x410]
push eax
push 0x200
lea ecx, [ebp - 0xc40]
push ecx
push 0x2c7
mov edx, dword [0x4d2ddc]
push edx
call fcn.00449f40
add esp, 0x14
push 1
lea eax, [ebp - 0xc40]
push eax
push 0x4d3e28
mov ecx, dword [0x4d2ddc]
push ecx
call fcn.00414530
add esp, 0x10
mov dword [ebp - 0xdd88], eax
mov edx, dword [ebp - 0xdd70]
push edx
mov eax, dword [ebp - 0xdd74]
push eax
movzx ecx, byte [ebp - 0x14a5]
push ecx
push 0x4d2078
lea edx, [ebp - 0x1088]
push edx
mov eax, dword [ebp - 0xdd84]
push eax
call fcn.00401db0
add esp, 0x18
push 0
push 0
push 0
mov ecx, dword [0x4d2ddc]
push ecx
call fcn.00414530
add esp, 0x10
mov dword [ebp - 0xdd88], eax
cmp dword [0x4d29a1], 0
je 0x44485e
call fcn.004040e0
mov dword [ebp - 0xe6e4], eax
mov dword [ebp - 0xe6e0], 0
push 0x736
push 0
lea edx, [ebp - 0xe6dc]
push edx
call fcn.00467d60
add esp, 0xc
mov eax, dword [0x4d2ddc]
mov dword [ebp - 0xe6e0], eax
mov ecx, dword [0x4db5b0]
push ecx
mov ecx, 0x4e8c54
call fcn.004087b0
mov edx, dword [eax + 0x410]
mov dword [ebp - 0xe6dc], edx
mov al, byte [0x4d1e51]
mov byte [ebp - 0xe4d8], al
lea ecx, [ebp - 0x840]
push ecx
push 0x104
lea edx, [ebp - 0xe4d7]
push edx
call fcn.0046a6ad
add esp, 0xc
push 0x1f
lea eax, [ebp - 0x1290]
push eax
push 0x20
lea ecx, [ebp - 0xe1ef]
push ecx
call fcn.0046afc1
add esp, 0x10
push 0x1f
lea edx, [ebp - 0x210]
push edx
push 0x20
lea eax, [ebp - 0xe1af]
push eax
call fcn.0046afc1
add esp, 0x10
push 0x10
push 0x20
lea ecx, [ebp - 0xdfef]
push ecx
movzx edx, byte [0x4d2dd7]
push edx
call fcn.0046d5de
add esp, 0x10
push 0x1f
push 0x4db5e0
push 0x20
lea eax, [ebp - 0xe16f]
push eax
call fcn.0046afc1
add esp, 0x10
push 0x4d2bb5
push 0x20
lea ecx, [ebp - 0xe22f]
push ecx
call fcn.0046a6ad
add esp, 0xc
lea edx, [ebp - 0x17b0]
push edx
push 0x20
lea eax, [ebp - 0xe28f]
push eax
call fcn.0046a6ad
add esp, 0xc
lea ecx, [ebp - 0x1868]
push ecx
push 0x20
lea edx, [ebp - 0xe2cf]
push edx
call fcn.0046a6ad
add esp, 0xc
mov dword [ebp - 0xe6e8], 0x4d29ad
cmp dword [ebp - 0xe6e8], 0
jne 0x4446ac
mov dword [ebp - 0xe740], 0
jmp 0x444720
mov eax, dword [ebp - 0xe6e8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0xdd8c], eax
cmp dword [ebp - 0xdd8c], 0x3fffffff
jle 0x4446da
mov dword [ebp - 0xe744], 0
jmp 0x444714
mov eax, dword [ebp - 0xdd8c]
shl eax, 1
call fcn.0046d9c0
mov dword [ebp - 0xe748], esp
mov ecx, dword [ebp - 0xe6e4]
push ecx
mov edx, dword [ebp - 0xdd8c]
push edx
mov eax, dword [ebp - 0xe6e8]
push eax
mov ecx, dword [ebp - 0xe748]
push ecx
call fcn.0041f650
mov dword [ebp - 0xe744], eax
mov edx, dword [ebp - 0xe744]
mov dword [ebp - 0xe740], edx
mov eax, dword [ebp - 0xe740]
push eax
push 0x40
lea ecx, [ebp - 0xe0af]
push ecx
call fcn.0046a6ad
add esp, 0xc
push 0x4d400e
push 0x20
lea edx, [ebp - 0xe12f]
push edx
call fcn.0046a6ad
add esp, 0xc
push 0xa
push 0x10
lea eax, [ebp - 0xe24f]
push eax
movzx ecx, byte [0x4d2dd9]
push ecx
call fcn.0046d5de
add esp, 0x10
mov dl, byte [0x4d2dda]
mov byte [ebp - 0xdfab], dl
mov eax, dword [0x4d2062]
mov dword [ebp - 0xdfaa], eax
push 0x20
lea ecx, [ebp - 0xe0ef]
push ecx
movzx dx, byte [0x4d2dd8]
movzx eax, dx
push eax
call fcn.00434550
add esp, 0xc
push 0x4d1e5a
push 0x100
lea ecx, [ebp - 0xe6d8]
push ecx
call fcn.0046a6ad
add esp, 0xc
push str.WinMain____before_OLRDisplay
call fcn.00456fc0
add esp, 4
xor edx, edx
mov word [ebp - 0xdf98], dx
push 0x206
push 0
lea eax, [ebp - 0xdf96]
push eax
call fcn.00467d60
add esp, 0xc
push str.OLRegistu.dll
push 0x4e4718
lea ecx, [ebp - 0xdf98]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
xor edx, edx
cmp dword [0x4e8c38], 0
sete dl
push edx
lea eax, [ebp - 0xdf98]
push eax
lea ecx, [ebp - 0xe6e0]
push ecx
push 0
call fcn.00434f80
add esp, 0x10
mov dword [ebp - 0x61c], eax
mov edx, dword [ebp - 0x61c]
push edx
push str.WinMain____Dialog_OLRv3_d
call fcn.00456fc0
add esp, 8
cmp dword [ebp - 0x61c], 1
je 0x44485e
cmp dword [ebp - 0x61c], 3
je 0x44485e
mov dword [ebp - 0x17b8], 0x4c7
jmp 0x4448f3
mov eax, dword [0x4d2ddc]
mov dword [ebp - 0x129c], eax
mov ecx, 0x4e8c54
call fcn.00408940
test eax, eax
jbe 0x444896
mov ecx, dword [0x4db5b0]
push ecx
mov ecx, 0x4e8c54
call fcn.004087b0
mov edx, dword [eax + 0x410]
mov dword [ebp - 0xe74c], edx
jmp 0x4448a0
mov dword [ebp - 0xe74c], 0x809
mov eax, dword [ebp - 0xe74c]
mov dword [ebp - 0x1298], eax
xor ecx, ecx
cmp dword [0x4d577c], 0
sete cl
or ecx, dword [ebp - 0x1294]
mov dword [ebp - 0x1294], ecx
mov edx, dword [0x4d5780]
neg edx
sbb edx, edx
and edx, 2
or edx, dword [ebp - 0x1294]
mov dword [ebp - 0x1294], edx
lea eax, [ebp - 0x129c]
push eax
push 0
call fcn.00415aa0
add esp, 8
mov dword [0x4db5c4], eax
cmp dword [0x4db5d0], 0
je 0x444909
mov ecx, dword [0x4db5d0]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeResource]
cmp dword [ebp - 0x1c90], 0
je 0x44491f
mov edx, dword [ebp - 0x1c90]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [0x4db5c8], 0
je 0x444934
mov eax, dword [0x4db5c8]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [0x4db5cc], 0
je 0x44499f
push 0x4b7824
mov ecx, dword [0x4db5cc]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xe6ec], eax
cmp dword [ebp - 0xe6ec], 0
je 0x444966
call dword [ebp - 0xe6ec]
jmp 0x444978
push str.ISnuiShutdown
push str.Function__s_failed_
call fcn.004573f0
add esp, 8
mov edx, dword [0x4db5cc]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp - 0xe4c], eax
mov eax, dword [ebp - 0xe4c]
push eax
push str.WinMain____unload_NewUI___d
call fcn.00456fc0
add esp, 8
cmp dword [0x4d2ddc], 0
je 0x4449e2
mov ecx, dword [0x4d2ddc]
cmp ecx, dword [0x4db5bc]
je 0x4449e2
mov edx, dword [0x4d2ddc]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp - 0xe4c], eax
mov eax, dword [ebp - 0xe4c]
push eax
push 0x4e3f08
push str.WinMain____unload__s___d
call fcn.00456fc0
add esp, 0xc
call dword [sym.imp.ole32.dll_CoUninitialize]
push 0x4e4920
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x444a25
push 2
push 0x4e4920
call fcn.00456410
add esp, 8
mov dword [ebp - 0xe4c], eax
mov ecx, dword [ebp - 0xe4c]
push ecx
push 0x4e4920
push 0x4b78c8
call fcn.00456fc0
add esp, 0xc
push 0x4e4b28
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x444a7e
cmp dword [0x4d61d4], 0
je 0x444a50
push 0x4e4b28
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov dword [ebp - 0xe4c], eax
jmp 0x444a65
push 2
push 0x4e4b28
call fcn.00456410
add esp, 8
mov dword [ebp - 0xe4c], eax
mov edx, dword [ebp - 0xe4c]
push edx
push 0x4e4b28
push 0x4b7910
call fcn.00456fc0
add esp, 0xc
cmp dword [0x4d5758], 0
je 0x444adc
push 0x4d5fa8
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x444adc
push 0x4db7e0
push 0x4d5fa8
call fcn.0046b9ce
add esp, 8
test eax, eax
je 0x444adc
push 2
push 0x4d5fa8
call fcn.00456410
add esp, 8
mov dword [ebp - 0xe4c], eax
mov eax, dword [ebp - 0xe4c]
push eax
push 0x4d5fa8
push str.WinMain____Remove_folder__s___d_
call fcn.00456fc0
add esp, 0xc
jmp 0x444aee
push 0x4d5fa8
push str.WinMain____the_folder__s_will_not_be_removed_
call fcn.00456fc0
add esp, 8
cmp dword [ebp - 0x17b4], 0
je 0x444b33
push 0
lea ecx, [ebp - 0x17b8]
push ecx
mov edx, dword [ebp + 0x14]
push edx
push 0
push str.Runas
push 0x4b7a0c
mov eax, dword [ebp + 0x10]
push eax
push 0x4db9e8
push 0
call fcn.00454e40
add esp, 0x24
test eax, eax
jne 0x444b33
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x17b8], eax
cmp dword [ebp - 0x634], 0
je 0x444b49
mov ecx, dword [ebp - 0x634]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x4ce5d4], 0
je 0x444b5e
mov edx, dword [0x4ce5d4]
mov dword [ebp - 0x17b8], edx
mov eax, dword [ebp - 0x17b8]
push eax
push str.WinMain____End__x_
call fcn.00456fc0
add esp, 8
mov eax, dword [ebp - 0x17b8]
lea esp, [ebp - 0xe74c]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00467d4f
mov esp, ebp
pop ebp
ret 0x10