Function at 0x441360
Capabilities:
Check if file exists
Check mutex on windows
Create directory
Delete directory
Get geographical location

Disassembly:
push ebp
mov ebp, esp
mov eax, 0xe74c
call fcn.00468610
mov eax, dword [0x4ce724]
xor eax, ebp
mov dword [ebp - 4], eax
push str.Begin...
call fcn.00457270
add esp, 4
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 0x17b8], 0
mov dword [ebp - 0xe4c], 0
call fcn.004204a0
mov dword [ebp - 0x17bc], eax
mov dword [ebp - 0x17b4], 0
mov dword [ebp - 0x634], 0
mov eax, dword [ebp + 8]
mov dword [0x4db5e4], eax
push str.RICHED20.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x1c90], eax
xor ecx, ecx
mov word [ebp - 0x410], cx
push 0x1fe
push 0
lea edx, [ebp - 0x40e]
push edx
call fcn.00468010
add esp, 0xc
xor eax, eax
mov word [ebp - 0xe48], ax
push 0x1fe
push 0
lea ecx, [ebp - 0xe46]
push ecx
call fcn.00468010
add esp, 0xc
xor edx, edx
mov word [ebp - 0x14a0], dx
push 0x1fe
push 0
lea eax, [ebp - 0x149e]
push eax
call fcn.00468010
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0xc40], cx
push 0x3fe
push 0
lea edx, [ebp - 0xc3e]
push edx
call fcn.00468010
add esp, 0xc
call fcn.00409f80
call fcn.00446d60
mov eax, dword [ebp + 0x10]
push eax
push 0x1f40
push 0x4dc028
call fcn.0046a95d
add esp, 0xc
push 0x4dc028
push str.WinMain____CmdLine_s
call fcn.00457270
add esp, 8
push 0
push 0
push 0x4b62b4
push 0x4b62bc
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x44151b
push 0x809
push 0x100
lea ecx, [ebp - 0x14a0]
push ecx
push 0x2c9
mov edx, dword [0x4db5e4]
push edx
call fcn.0044a170
add esp, 0x14
push 0x809
push 0x200
lea eax, [ebp - 0xc40]
push eax
push 0x2c8
mov ecx, dword [0x4db5e4]
push ecx
call fcn.0044a170
add esp, 0x14
push 0x40
lea edx, [ebp - 0x14a0]
push edx
lea eax, [ebp - 0xc40]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0x4b62c0
call fcn.00457270
add esp, 4
xor eax, eax
jmp 0x444b8a
xor ecx, ecx
mov word [ebp - 0x1708], cx
push 0x206
push 0
lea edx, [ebp - 0x1706]
push edx
call fcn.00468010
add esp, 0xc
push 0x104
lea eax, [ebp - 0x1708]
push eax
push 0x4b6308
push str.LANG:
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x4415d3
lea ecx, [ebp - 0x1708]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
lea edx, [ebp - 0x1708]
push edx
call dword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
lea eax, [ebp - 0x1708]
push eax
call fcn.0046b250
add esp, 4
mov word [0x4e8c58], ax
movzx ecx, word [0x4e8c58]
test ecx, ecx
jne 0x4415be
push 0
call fcn.00409bb0
add esp, 4
test eax, eax
je 0x4415be
lea edx, [ebp - 0x1708]
push edx
call fcn.0040fdb0
add esp, 4
mov word [0x4e8c58], ax
movzx eax, word [0x4e8c58]
push eax
push str.WinMain____Language_parameter:__d
call fcn.00457270
add esp, 8
push 0x104
lea ecx, [ebp - 0x1708]
push ecx
push 0x4b6374
push str.CMDLINE:
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x44163f
lea edx, [ebp - 0x1708]
push edx
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
lea eax, [ebp - 0x1708]
push eax
call dword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
lea ecx, [ebp - 0x1708]
push ecx
push 0x1f40
push 0x4dfea8
call fcn.0046a95d
add esp, 0xc
push 0x4dfea8
push str.WinMain____CMDLINE_parameter:__s
call fcn.00457270
add esp, 8
xor edx, edx
mov word [ebp - 0x1500], dx
push 0x4c
push 0
lea eax, [ebp - 0x14fe]
push eax
call fcn.00468010
add esp, 0xc
lea ecx, [ebp - 0x62c]
push ecx
call dword [sym.imp.ole32.dll_CoCreateGuid]
test eax, eax
jne 0x4416a7
push 0x27
lea edx, [ebp - 0x1500]
push edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x62c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x628]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x624]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x620]
mov dword [eax + 0xc], edx
call fcn.0040bcd0
add esp, 0x18
jmp 0x4416bd
push 0x4b63c8
push 0x27
lea eax, [ebp - 0x1500]
push eax
call fcn.0046a95d
add esp, 0xc
lea ecx, [ebp - 0x1500]
push ecx
push 0x4e5d98
push 0x4e4948
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4e4948
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x441711
push 2
push 0x4e4948
call fcn.004566c0
add esp, 8
mov dword [ebp - 0xe4c], eax
mov edx, dword [ebp - 0xe4c]
push edx
push 0x4e4948
push 0x4b6418
call fcn.00457270
add esp, 0xc
push 0
push 0x4e4948
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x44173b
push 0x4e4948
push str.WinMain____Error_create_directory___s__
call fcn.00457270
add esp, 8
xor eax, eax
jmp 0x444b8a
push 0x4e4948
push str.WinMain____TempPathFCW_s
call fcn.00457270
add esp, 8
call fcn.004467e0
mov dword [ebp - 0x61c], 0
mov dword [ebp - 0xe7c], 0
push 0x2a
push 0
lea eax, [ebp - 0xe78]
push eax
call fcn.00468010
add esp, 0xc
mov dword [ebp - 0x1a80], 0
push 0x214
push 0
lea ecx, [ebp - 0x1a7c]
push ecx
call fcn.00468010
add esp, 0xc
mov dword [ebp - 0x1a74], 1
mov dword [ebp - 0x129c], 0
xor edx, edx
mov dword [ebp - 0x1298], edx
mov dword [ebp - 0x1294], edx
push 0x4dbe20
call fcn.0040d000
add esp, 4
test eax, eax
jne 0x44180a
push str.setup.cfg
push 0x4e4948
push 0x4b64f8
push 0x104
push 0x4dbe20
call fcn.004685e6
add esp, 0x14
push 0x4dbe20
push 0x4b6504
push 0x88
mov eax, dword [0x4db5e4]
push eax
call fcn.00408630
add esp, 0x10
push 0x4dbe20
call fcn.00444e20
add esp, 4
movzx ecx, word [0x4d4668]
test ecx, ecx
je 0x44186a
push 0x4d4668
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x634], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x44186a
push 0x4d4668
push str.WinMain____Project_already_in_memory___s_
call fcn.00457270
add esp, 8
mov dword [0x4ce5d4], 0xb7
jmp 0x444905
push 0
push 0
push 0x4b6574
push str.NORESUME
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x4418a0
mov dword [0x4d61f0], 0
push str.WinMain____Resume_mode_disabled_by_parameter
call fcn.00457270
add esp, 4
lea edx, [ebp - 0x1500]
push edx
push 0x4d4668
call fcn.0046bc7e
add esp, 8
test eax, eax
je 0x4418e8
cmp dword [0x4d61f0], 0
je 0x4418e8
push 0x4d4668
push 0x4e5d98
push 0x4e4b50
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4d4668
push 0x4e4b50
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x4418fd
push 0x4d4668
push 0x4e4948
push 0x4e4b50
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4e4b50
call fcn.0040d340
add esp, 4
test eax, eax
jne 0x441983
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x17b8], eax
mov eax, dword [ebp - 0x17b8]
push eax
push 0x4e4b50
push str.WinMain____Error_create_directory___s____d_
call fcn.00457270
add esp, 0xc
cmp dword [ebp - 0x17b8], 0xb7
je 0x441979
push 2
push 0x4e4b50
call fcn.004566c0
add esp, 8
mov dword [ebp - 0xe4c], eax
mov ecx, dword [ebp - 0xe4c]
push ecx
push 0x4e4b50
push 0x4b6638
call fcn.00457270
add esp, 0xc
jmp 0x444905
mov dword [ebp - 0x17b8], 0
push 0x4e4b50
push str.WinMain____DataPath_s
call fcn.00457270
add esp, 8
call fcn.004483a0
push 1
push 0
push 0x4e3f30
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov dword [ebp - 0x14ac], eax
cmp dword [ebp - 0x14ac], 0
je 0x4419c6
mov edx, dword [ebp - 0x14ac]
mov dword [0x4d2ddc], edx
jmp 0x4419d0
mov eax, dword [0x4db5e4]
mov dword [0x4d2ddc], eax
mov ecx, dword [0x4d2ddc]
push ecx
mov edx, dword [ebp - 0x14ac]
push edx
push 0x4e3f30
push str.WinMain____LoadLibrary__s____d__hInstRes_d_
call fcn.00457270
add esp, 0x10
movzx eax, word [0x4d46b6]
test eax, eax
jne 0x441a1b
push 0x100
push 0x4db608
push 0x4b670c
mov ecx, dword [0x4db5e4]
push ecx
call fcn.00457d40
add esp, 0x10
jmp 0x441a32
push 0x4d46b6
push 0x100
push 0x4db608
call fcn.0046a95d
add esp, 0xc
push 0x4db608
push str.WinMain____Title_s
call fcn.00457270
add esp, 8
push 0
push 0
push 0x4b674c
push str.INFO
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441c79
xor edx, edx
mov word [ebp - 0x2098], dx
push 0x206
push 0
lea eax, [ebp - 0x2096]
push eax
call fcn.00468010
add esp, 0xc
push str.Language_s__available:_n_n
push 0x200
push 0x4e4340
call fcn.004684d1
add esp, 0xc
mov ecx, 0x4e8c7c
call fcn.00408940
test eax, eax
jbe 0x441b90
mov dword [ebp - 0x209c], 0
jmp 0x441aca
mov ecx, dword [ebp - 0x209c]
add ecx, 1
mov dword [ebp - 0x209c], ecx
mov ecx, 0x4e8c7c
call fcn.00408940
cmp dword [ebp - 0x209c], eax
jae 0x441b8b
mov edx, dword [ebp - 0x209c]
push edx
mov ecx, 0x4e8c7c
call fcn.004087b0
mov eax, dword [eax + 0x410]
push eax
push str._d__
push 0x104
lea ecx, [ebp - 0x2098]
push ecx
call fcn.004685e6
add esp, 0x10
lea edx, [ebp - 0x2098]
push edx
push 0x200
push 0x4e4340
call fcn.004684d1
add esp, 0xc
push 0x104
lea eax, [ebp - 0x2098]
push eax
push 2
mov ecx, dword [ebp - 0x209c]
push ecx
mov ecx, 0x4e8c7c
call fcn.004087b0
mov edx, dword [eax + 0x410]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
lea eax, [ebp - 0x2098]
push eax
push 0x200
push 0x4e4340
call fcn.004684d1
add esp, 0xc
push 0x4b67a0
push 0x200
push 0x4e4340
call fcn.004684d1
add esp, 0xc
jmp 0x441abb
jmp 0x441c14
mov ecx, dword [0x4db5d1]
push ecx
push 0x4b67a4
push 0x104
lea edx, [ebp - 0x2098]
push edx
call fcn.004685e6
add esp, 0x10
lea eax, [ebp - 0x2098]
push eax
push 0x200
push 0x4e4340
call fcn.004684d1
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x2098]
push ecx
push 2
mov edx, dword [0x4db5d1]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
lea eax, [ebp - 0x2098]
push eax
push 0x200
push 0x4e4340
call fcn.004684d1
add esp, 0xc
push 0x4b67ac
push 0x200
push 0x4e4340
call fcn.004684d1
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x1e90], cx
push 0x1fe
push 0
lea edx, [ebp - 0x1e8e]
push edx
call fcn.00468010
add esp, 0xc
push 0x809
push 0x100
lea eax, [ebp - 0x1e90]
push eax
push 0x2c9
mov ecx, dword [0x4d2ddc]
push ecx
call fcn.0044a170
add esp, 0x14
push 0x40
lea edx, [ebp - 0x1e90]
push edx
push 0x4e4340
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, dword [ebp - 0x17b8]
jmp 0x444b8a
push 0
push 0
push 0x4b67b0
push str.WITHPROGRESS
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441caf
mov dword [0x4d5770], 1
push str.WinMain____DialogInRun_mode_
call fcn.00457270
add esp, 4
push 0
push 0
push 0x4b6810
push 0x4b6818
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441ce5
mov dword [0x4e8c60], 1
push str.WinMain____Silent_mode_parameter
call fcn.00457270
add esp, 4
push 0
push 0
push 0x4b6874
push 0x4b681c
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441d1b
mov dword [0x4d576c], 0
push str.WinMain____No_balloon_parameter
call fcn.00457270
add esp, 4
push 0
push 0
push 0x4b68c0
push str.FULLSILENT
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441d5b
mov dword [0x4e8c60], 1
mov dword [0x4d576c], 0
push str.WinMain____Full_Silent_mode_parameter
call fcn.00457270
add esp, 4
push 0
push 0
push 0x4b692c
push 0x4b6934
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441d91
mov dword [0x4e8c6c], 1
push str.WinMain____Force_to_Download_parameter
call fcn.00457270
add esp, 4
push 0
push 0
push 0x4b6990
push str.NOLICENSE
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441dc7
mov dword [0x4d5764], 0
push str.WinMain____No_license_parameter
call fcn.00457270
add esp, 4
push 0
push 0
push 0x4b6a00
push str.NOTOOLBAR
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441dfd
mov dword [0x4d299d], 0
push str.WinMain____No_Toolbar_parameter
call fcn.00457270
add esp, 4
push 0
push 0
push 0x4b6a48
push str.NORMALSTATUS
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441e30
mov byte [0x4d6810], 1
push str.WinMain____NORMALSTATUS_parameter
call fcn.00457270
add esp, 4
push 0
push 0
push 0x4b6ab4
push str.SMALLSTATUS
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441e63
mov byte [0x4d6810], 0
push str.WinMain____SMALLSATUS_parameter
call fcn.00457270
add esp, 4
push 0
push 0
push 0x4b6b20
push str.NOLU
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441ea3
mov dword [0x4d5510], 0
mov dword [0x4e8c70], 1
push str.WinMain____NOLU_parameter:_LiveUpdate_Disabled_
call fcn.00457270
add esp, 4
push 0
push 0
push 0x4b6b88
push str.NOGA
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441ed9
mov dword [0x4d2de0], 0
push str.WinMain____NOGA_parameter:_Google_Analytics_Disabled_
call fcn.00457270
add esp, 4
mov dword [ebp - 0x630], 0
push 0
push 0
push 0x4b6c0c
push str.GA_REG
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441f19
mov dword [ebp - 0x630], 1
push str.WinMain____GA_REG_parameter:_Google_Analytics_in_Registry_
call fcn.00457270
add esp, 4
push 0x104
lea eax, [ebp - 0x1708]
push eax
push 0x4b6ca0
push str.SCRIPT:
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x441fa7
lea ecx, [ebp - 0x1708]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
lea edx, [ebp - 0x1708]
push edx
call dword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
lea eax, [ebp - 0x1708]
push eax
push 0x104
push 0x4d61f4
call fcn.0046a95d
add esp, 0xc
push 0x4d61f4
call fcn.0040d000
add esp, 4
test eax, eax
je 0x441f8e
mov dword [0x4d61ec], 1
mov ecx, dword [0x4d61ec]
push ecx
push 0x4d61f4
push str.WinMain____ScriptFile:__s___d_
call fcn.00457270
add esp, 0xc
push 0x104
lea edx, [ebp - 0x1708]
push edx
push 0x4b6cf8
push 0x4b6d00
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x44208f
lea eax, [ebp - 0x1708]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
lea ecx, [ebp - 0x1708]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
lea edx, [ebp - 0x1708]
push edx
push str.WinMain____Params_X:__s
call fcn.00457270
add esp, 8
lea eax, [ebp - 0x1708]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
je 0x44203c
push 0x4e5780
push 0x104
push 0x4d5fc4
call fcn.0046a95d
add esp, 0xc
lea ecx, [ebp - 0x1708]
push ecx
push 0x4d5fc4
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x442055
lea edx, [ebp - 0x1708]
push edx
push 0x104
push 0x4d5fc4
call fcn.0046a95d
add esp, 0xc
push 0x4d5fc4
push str.WinMain____TgdFolder_s
call fcn.00457270
add esp, 8
mov dword [0x4d61d4], 0
mov dword [0x4d5758], 0
mov dword [0x4d61d0], 0
mov dword [0x4d575c], 0
call fcn.0040c400
mov dword [ebp - 0x1c8c], eax
cmp dword [0x4d61e4], 0
je 0x4420b8
cmp dword [ebp - 0x1c8c], 0
jne 0x4420b8
mov dword [ebp - 0xe6f0], 1
jmp 0x4420c2
mov dword [ebp - 0xe6f0], 0
mov eax, dword [ebp - 0xe6f0]
mov dword [ebp - 0x17b4], eax
mov ecx, dword [ebp - 0x17b4]
push ecx
push str.WinMain____NeedToRunAsAdmin_d
call fcn.00457270
add esp, 8
cmp dword [ebp - 0x17b4], 0
je 0x4420f5
jmp 0x444905
xor edx, edx
mov word [ebp - 0x840], dx
push 0x206
push 0
lea eax, [ebp - 0x83e]
push eax
call fcn.00468010
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x1290], cx
push 0x206
push 0
lea edx, [ebp - 0x128e]
push edx
call fcn.00468010
add esp, 0xc
xor eax, eax
mov word [ebp - 0x210], ax
push 0x206
push 0
lea ecx, [ebp - 0x20e]
push ecx
call fcn.00468010
add esp, 0xc
xor edx, edx
mov word [ebp - 0x1c88], dx
push 0x206
push 0
lea eax, [ebp - 0x1c86]
push eax
call fcn.00468010
add esp, 0xc
push 0x4d2bcf
push 0x104
lea ecx, [ebp - 0x840]
push ecx
call fcn.0046a95d
add esp, 0xc
push 0x104
lea edx, [ebp - 0x210]
push edx
push 0x104
lea eax, [ebp - 0x1290]
push eax
push 0x104
lea ecx, [ebp - 0x840]
push ecx
call fcn.0040cc10
add esp, 0x18
cmp dword [0x4d2de0], 0
jne 0x4421cc
cmp dword [ebp - 0x630], 0
je 0x442bfc
call fcn.004040e0
mov dword [ebp - 0x6438], eax
mov dword [ebp - 0x6434], 0
mov dword [ebp - 0x20a4], 1
xor edx, edx
mov word [ebp - 0x6430], dx
push 0x50
push 0
lea eax, [ebp - 0x642e]
push eax
call fcn.00468010
add esp, 0xc
push 0x4333
push 0
lea ecx, [ebp - 0x63de]
push ecx
call fcn.00468010
add esp, 0xc
push 0x208
lea edx, [ebp - 0x1708]
push edx
push 0x4b6dac
push 0x4d2ff0
push closesocket
call fcn.00437d10
add esp, 0x14
mov dword [ebp - 0x6434], eax
cmp dword [ebp - 0x6434], 0
jne 0x442278
push 0x208
lea eax, [ebp - 0x1708]
push eax
push str.GAclientID
push 0x4d2ff0
push closesocket
call fcn.00437d10
add esp, 0x14
mov dword [ebp - 0x6434], eax
cmp dword [ebp - 0x6434], 0
je 0x442334
lea ecx, [ebp - 0x1708]
mov dword [ebp - 0x20a8], ecx
cmp dword [ebp - 0x20a8], 0
jne 0x4422a6
mov dword [ebp - 0xe6f4], 0
jmp 0x44231c
mov edx, dword [ebp - 0x20a8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
mov dword [ebp - 0x20a0], eax
cmp dword [ebp - 0x20a0], 0x3fffffff
jle 0x4422d4
mov dword [ebp - 0xe6f8], 0
jmp 0x442310
mov eax, dword [ebp - 0x20a0]
shl eax, 1
call fcn.0046dc70
mov dword [ebp - 0xe6fc], esp
mov eax, dword [ebp - 0x6438]
push eax
mov ecx, dword [ebp - 0x20a0]
shl ecx, 1
push ecx
mov edx, dword [ebp - 0x20a8]
push edx
mov eax, dword [ebp - 0xe6fc]
push eax
call fcn.00423510
mov dword [ebp - 0xe6f8], eax
mov ecx, dword [ebp - 0xe6f8]
mov dword [ebp - 0xe6f4], ecx
mov edx, dword [ebp - 0xe6f4]
push edx
push 0x27
lea eax, [ebp - 0x63de]
push eax
call fcn.0046a7ad
add esp, 0xc
push 0x4b6ddc
lea ecx, [ebp - 0x840]
push ecx
lea edx, [ebp - 0x1c88]
push edx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [ebp - 0x630], 0
je 0x44254b
lea eax, [ebp - 0x20a4]
push eax
push 0x4b6de4
lea ecx, [ebp - 0x840]
push ecx
push closesocket
call fcn.00437e60
add esp, 0x10
lea edx, [ebp - 0x840]
push edx
push 0x104
lea eax, [ebp - 0x1c88]
push eax
call fcn.0046a95d
add esp, 0xc
push 0x4b6dec
lea ecx, [ebp - 0x1c88]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0x52
lea edx, [ebp - 0x6430]
push edx
push 0x4b6df4
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437d10
add esp, 0x14
cmp dword [0x4d34a2], 0
jne 0x4423fb
push 0xca
lea ecx, [ebp - 0x47b1]
push ecx
push 0x4b6e0c
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437d10
add esp, 0x14
test eax, eax
jne 0x442411
push 0x4d3400
push 0x65
lea eax, [ebp - 0x47b1]
push eax
call fcn.0046a95d
add esp, 0xc
cmp dword [0x4d3548], 0
jne 0x442443
push 0xca
lea ecx, [ebp - 0x46e7]
push ecx
push 0x4b6e24
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437d10
add esp, 0x14
test eax, eax
jne 0x442459
push 0x4d34a6
push 0x65
lea eax, [ebp - 0x46e7]
push eax
call fcn.0046a95d
add esp, 0xc
push 0x4b6e44
lea ecx, [ebp - 0x1c88]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0xca
lea edx, [ebp - 0x4013]
push edx
push 0x4b6e58
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437d10
add esp, 0x14
push 0xca
lea ecx, [ebp - 0x4415]
push ecx
push 0x4b6e60
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437d10
add esp, 0x14
push 0x208
lea eax, [ebp - 0x461d]
push eax
push 0x4b6e6c
lea ecx, [ebp - 0x1c88]
push ecx
push closesocket
call fcn.00437d10
add esp, 0x14
push 0xca
lea edx, [ebp - 0x434b]
push edx
push 0x4b6e7c
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437d10
add esp, 0x14
push 0x66
lea ecx, [ebp - 0x4281]
push ecx
push 0x4b6e8c
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437d10
add esp, 0x14
push 0x208
lea eax, [ebp - 0x421b]
push eax
push 0x4b6e9c
lea ecx, [ebp - 0x1c88]
push ecx
push closesocket
call fcn.00437d10
add esp, 0x14
jmp 0x442a5c
push 1
push 0x4b6eac
lea edx, [ebp - 0x840]
push edx
push closesocket
call fcn.00437bc0
add esp, 0x10
movzx eax, word [0x4d31f8]
test eax, eax
je 0x442598
push 0x104
push 0x4d31f8
push 1
push 0x4b6eb4
lea ecx, [ebp - 0x1c88]
push ecx
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x4425b1
push 0x4b6ecc
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437ca0
add esp, 0xc
push 0x4d31f8
push 0x29
lea eax, [ebp - 0x6430]
push eax
call fcn.0046a95d
add esp, 0xc
cmp dword [0x4d34a2], 0
jne 0x442631
movzx ecx, word [0x4d3400]
test ecx, ecx
je 0x442602
push 0x104
push 0x4d3400
push 1
push 0x4b6ee4
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x44261b
push 0x4b6efc
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437ca0
add esp, 0xc
push 0x4d3400
push 0x65
lea ecx, [ebp - 0x47b1]
push ecx
call fcn.0046a95d
add esp, 0xc
cmp dword [0x4d3548], 0
jne 0x44269b
movzx edx, word [0x4d34a6]
test edx, edx
je 0x44266c
push 0x104
push 0x4d34a6
push 1
push 0x4b6f14
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x442685
push 0x4b6f34
lea ecx, [ebp - 0x1c88]
push ecx
push closesocket
call fcn.00437ca0
add esp, 0xc
push 0x4d34a6
push 0x65
lea edx, [ebp - 0x46e7]
push edx
call fcn.0046a95d
add esp, 0xc
push str.Campaign
lea eax, [ebp - 0x1c88]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
movzx ecx, word [0x4d3d5e]
test ecx, ecx
je 0x4426df
push 0x104
push 0x4d3d5e
push 1
push 0x4b6f68
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x4426f8
push 0x4b6f70
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437ca0
add esp, 0xc
movzx ecx, word [0x4d395c]
test ecx, ecx
je 0x44272a
push 0x104
push 0x4d395c
push 1
push 0x4b6f78
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x442743
push str.Name
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437ca0
add esp, 0xc
movzx ecx, word [0x4d3754]
test ecx, ecx
je 0x442775
push 0x104
push 0x4d3754
push 1
push 0x4b6f90
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x44278e
push str.Content
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437ca0
add esp, 0xc
movzx ecx, word [0x4d3a26]
test ecx, ecx
je 0x4427c0
push 0x104
push 0x4d3a26
push 1
push 0x4b6fb0
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x4427d9
push str.Source
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437ca0
add esp, 0xc
movzx ecx, word [0x4d3af0]
test ecx, ecx
je 0x44280b
push 0x104
push 0x4d3af0
push 1
push 0x4b6fd0
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x442824
push str.Medium
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437ca0
add esp, 0xc
movzx ecx, word [0x4d3b56]
test ecx, ecx
je 0x442856
push 0x104
push 0x4d3b56
push 1
push 0x4b6ff0
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x44286f
push str.Keyword
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437ca0
add esp, 0xc
movzx ecx, word [0x4d3d5e]
test ecx, ecx
je 0x4428a1
push 0x104
push 0x4d3d5e
push 1
push 0x4b7010
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x4428ba
push 0x4b7018
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437ca0
add esp, 0xc
push 0x4d3d5e
push 0x65
lea ecx, [ebp - 0x4013]
push ecx
call fcn.0046a95d
add esp, 0xc
push 0x4d3b56
push 0x104
lea edx, [ebp - 0x421b]
push edx
call fcn.0046a95d
add esp, 0xc
push 0x4d3af0
push 0x33
lea eax, [ebp - 0x4281]
push eax
call fcn.0046a95d
add esp, 0xc
push 0x4d395c
push 0x65
lea ecx, [ebp - 0x4415]
push ecx
call fcn.0046a95d
add esp, 0xc
push 0x4d3a26
push 0x65
lea edx, [ebp - 0x434b]
push edx
call fcn.0046a95d
add esp, 0xc
xor eax, eax
mov word [ebp - 0xc7c8], ax
push 0x50
push 0
lea ecx, [ebp - 0xc7c6]
push ecx
call fcn.00468010
add esp, 0xc
push 0x4333
push 0
lea edx, [ebp - 0xc776]
push edx
call fcn.00468010
add esp, 0xc
xor eax, eax
mov word [ebp - 0x8440], ax
push 0x1ffe
push 0
lea ecx, [ebp - 0x843e]
push ecx
call fcn.00468010
add esp, 0xc
lea edx, [ebp - 0x4013]
push edx
push 0x65
lea eax, [ebp - 0xa3ab]
push eax
call fcn.0046a95d
add esp, 0xc
lea ecx, [ebp - 0x421b]
push ecx
push 0x104
lea edx, [ebp - 0xa5b3]
push edx
call fcn.0046a95d
add esp, 0xc
lea eax, [ebp - 0x4281]
push eax
push 0x33
lea ecx, [ebp - 0xa619]
push ecx
call fcn.0046a95d
add esp, 0xc
lea edx, [ebp - 0x4415]
push edx
push 0x65
lea eax, [ebp - 0xa7ad]
push eax
call fcn.0046a95d
add esp, 0xc
lea ecx, [ebp - 0x434b]
push ecx
push 0x65
lea edx, [ebp - 0xa6e3]
push edx
call fcn.0046a95d
add esp, 0xc
push 0x1000
lea eax, [ebp - 0x8440]
push eax
lea ecx, [ebp - 0xc7c8]
push ecx
call fcn.0041b2f0
movzx edx, word [ebp - 0x8440]
test edx, edx
je 0x442a43
push 0x104
lea eax, [ebp - 0x8440]
push eax
push 1
push 0x4b7020
lea ecx, [ebp - 0x1c88]
push ecx
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x442a5c
push str.Params
lea edx, [ebp - 0x1c88]
push edx
push closesocket
call fcn.00437ca0
add esp, 0xc
cmp dword [ebp - 0x20a4], 0
je 0x442bfa
push 0x4d354c
push 0x104
lea eax, [ebp - 0x55db]
push eax
call fcn.0046a95d
add esp, 0xc
push str.appview
push 0x1e
lea ecx, [ebp - 0x63b7]
push ecx
call fcn.0046a95d
add esp, 0xc
cmp dword [0x4d2de4], 0
jne 0x442bfa
lea edx, [ebp - 0x6430]
push edx
push 0x4d2de8
call fcn.0041b980
lea eax, [ebp - 0x63de]
push eax
push str.GAParams.UniqueId_s
call fcn.004576a0
add esp, 8
cmp dword [ebp - 0x6434], 0
jne 0x442bfa
movzx ecx, word [0x4d2ff0]
test ecx, ecx
je 0x442bfa
movsx edx, byte [ebp - 0x63de]
test edx, edx
je 0x442bfa
lea eax, [ebp - 0x63de]
mov dword [ebp - 0x643c], eax
cmp dword [ebp - 0x643c], 0
jne 0x442b16
mov dword [ebp - 0xe700], 0
jmp 0x442b8a
mov ecx, dword [ebp - 0x643c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x20a0], eax
cmp dword [ebp - 0x20a0], 0x3fffffff
jle 0x442b44
mov dword [ebp - 0xe704], 0
jmp 0x442b7e
mov eax, dword [ebp - 0x20a0]
shl eax, 1
call fcn.0046dc70
mov dword [ebp - 0xe708], esp
mov edx, dword [ebp - 0x6438]
push edx
mov eax, dword [ebp - 0x20a0]
push eax
mov ecx, dword [ebp - 0x643c]
push ecx
mov edx, dword [ebp - 0xe708]
push edx
call fcn.0041f650
mov dword [ebp - 0xe704], eax
mov eax, dword [ebp - 0xe704]
mov dword [ebp - 0xe700], eax
mov ecx, dword [ebp - 0xe700]
push ecx
push 0x104
lea edx, [ebp - 0x1708]
push edx
call fcn.0046a95d
add esp, 0xc
cmp dword [ebp - 0x1c8c], 0
je 0x442bd5
push 0x104
lea eax, [ebp - 0x1708]
push eax
push 1
push 0x4b7068
push 0x4d2ff0
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x442bfa
push 0x104
lea ecx, [ebp - 0x1708]
push ecx
push 1
push str.GAClientID
push 0x4d2ff0
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x442c56
movzx edx, word [ebp - 0x840]
test edx, edx
je 0x442c56
cmp dword [0x4e8c70], 0
jne 0x442c56
push 0x4b7098
lea eax, [ebp - 0x840]
push eax
push closesocket
call fcn.00437ca0
add esp, 0xc
push 0x4b70a0
lea ecx, [ebp - 0x840]
push ecx
lea edx, [ebp - 0x1c88]
push edx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x1c88]
push eax
push closesocket
call fcn.00437c60
add esp, 8
call fcn.00447ea0
mov dword [0x4db5f4], eax
xor ecx, ecx
mov word [ebp - 0x618], cx
push 0x206
push 0
lea edx, [ebp - 0x616]
push edx
call fcn.00468010
add esp, 0xc
push str.IAMCu.dll
push 0x4e4740
lea eax, [ebp - 0x618]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [0x4d29a9], 0
je 0x442cba
cmp dword [ebp - 0x17bc], 0
je 0x442cba
lea ecx, [ebp - 0x618]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x4db5f0], eax
push 0
push 0x4db5fc
mov edx, dword [0x4db5e4]
push edx
call fcn.00408590
add esp, 0xc
mov dword [0x4db5f8], eax
cmp dword [0x4db5f8], 0
jne 0x442cfa
push 0x4db600
push str._BV69_FCW_
push 0x4dba10
call fcn.00418210
add esp, 0xc
mov dword [0x4e8c68], eax
movzx eax, word [0x4d5fc4]
test eax, eax
je 0x442d12
cmp dword [0x4d575c], 0
je 0x442d98
cmp dword [0x4db5f8], 0
jne 0x442d24
cmp dword [0x4e8c68], 0
je 0x442d81
push 0x4b70c8
push 0x4d4668
call fcn.0046bc7e
add esp, 8
test eax, eax
je 0x442d6a
cmp dword [0x4d61f0], 0
je 0x442d6a
push 0x4d4668
push 0x4e5d98
push 0x4d5fc4
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4b7118
push 0x4d5fc4
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x442d7f
push str.7B28E39C_883C_4f49_ABFB_5D16796F2DD9
push 0x4e4948
push 0x4d5fc4
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
jmp 0x442d98
push 0x4db808
push 0x104
push 0x4d5fc4
call fcn.0046a95d
add esp, 0xc
push 0x104
push 0x4d59ac
call fcn.004475b0
add esp, 8
push 0x4d59ac
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
je 0x442dd0
push 0x4d59ac
push 0x4d5fc4
push 0x4e3d28
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
jmp 0x442de0
push 0x4d59ac
push 0x4e3d28
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x4e3d28
push str.WinMain____ExeFile_s
call fcn.00457270
add esp, 8
cmp dword [0x4d5510], 0
je 0x442f40
push str.__NOLU
push 0x1f40
push 0x4dc028
call fcn.004684d1
add esp, 0xc
mov ecx, dword [0x4d551c]
push ecx
mov edx, dword [0x4d5518]
push edx
lea eax, [ebp - 0x17b8]
push eax
push 0x4dba10
push 0x4d4ef8
call fcn.004229a0
add esp, 0x14
mov dword [0x4d5510], eax
cmp dword [0x4d5510], 0
je 0x442eea
cmp dword [0x4d5528], 0
je 0x442ec0
cmp dword [0x4e8c60], 0
jne 0x442ec0
mov ecx, dword [0x4db5d5]
push ecx
mov ecx, 0x4e8c7c
call fcn.004087b0
mov edx, dword [eax + 0x410]
push edx
push 0x100
lea eax, [ebp - 0xe48]
push eax
push 0x2ca
mov ecx, dword [0x4d2ddc]
push ecx
call fcn.0044a170
add esp, 0x14
push 0x40024
push 0x4d3e28
lea edx, [ebp - 0xe48]
push edx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
cmp eax, 6
sete cl
mov dword [0x4d5510], ecx
cmp dword [0x4d5510], 0
je 0x442ed5
jmp 0x444870
cmp dword [0x4d5520], 0
je 0x442ee8
jmp 0x444905
jmp 0x442f40
cmp dword [0x4d5524], 0
je 0x442f40
push 0
push 0x100
lea edx, [ebp - 0xe48]
push edx
mov eax, dword [ebp - 0x17b8]
push eax
call fcn.00449e50
add esp, 0x10
test eax, eax
je 0x442f36
cmp dword [0x4e8c60], 0
jne 0x442f36
push 0x40010
push 0x4d3e28
lea ecx, [ebp - 0xe48]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x444905
mov byte [ebp - 0x14a5], 0
xor edx, edx
mov word [ebp - 0x1088], dx
push 0x206
push 0
lea eax, [ebp - 0x1086]
push eax
call fcn.00468010
add esp, 0xc
cmp dword [0x4d299d], 0
je 0x442feb
push str.TBI.exe
push 0x4e4948
lea ecx, [ebp - 0x1088]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
call fcn.00401870
mov byte [ebp - 0x14a5], al
cmp dword [0x4d2068], 0
jne 0x442fd5
push 0x4d208e
push 0x4d2078
movzx edx, byte [ebp - 0x14a5]
push edx
call fcn.00401a50
add esp, 0xc
test eax, eax
jne 0x442fc9
lea eax, [ebp - 0x1088]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x442fd5
mov dword [ebp - 0xe70c], 0
jmp 0x442fdf
mov dword [ebp - 0xe70c], 1
mov ecx, dword [ebp - 0xe70c]
mov dword [0x4d299d], ecx
mov edx, dword [0x4d299d]
push edx
push str.WinMain____Toolbar_d
call fcn.00457270
add esp, 8
cmp dword [0x4d5774], 0
je 0x4431b5
mov dword [ebp - 0xc7d0], 0
mov dword [ebp - 0xc7cc], 0
mov ecx, 0x4d0968
call fcn.0040ffb0
cmp dword [ebp - 0xc7cc], eax
jae 0x443140
cmp dword [ebp - 0xc7d0], 0
jne 0x443140
mov eax, dword [ebp - 0xc7cc]
push eax
mov ecx, 0x4d0968
call fcn.0040ffd0
add eax, 0x200
push eax
push str.WinMain____Platform:__s
call fcn.00457270
add esp, 8
push str.Win32
mov ecx, dword [ebp - 0xc7cc]
push ecx
mov ecx, 0x4d0968
call fcn.0040ffd0
add eax, 0x400
push eax
call fcn.0046bc7e
add esp, 8
test eax, eax
jne 0x4430a3
xor edx, edx
cmp dword [0x4d0830], 0
sete dl
mov dword [ebp - 0xc7d0], edx
jmp 0x4430e3
push str.Win64
mov eax, dword [ebp - 0xc7cc]
push eax
mov ecx, 0x4d0968
call fcn.0040ffd0
add eax, 0x400
push eax
call fcn.0046bc7e
add esp, 8
test eax, eax
jne 0x4430d9
mov ecx, dword [0x4d0830]
mov dword [ebp - 0xc7d0], ecx
jmp 0x4430e3
mov dword [ebp - 0xc7d0], 1
mov edx, dword [ebp - 0xc7d0]
push edx
push str.WinMain____ProcArchitecture:_Continue_d
call fcn.00457270
add esp, 8
cmp dword [ebp - 0xc7d0], 0
je 0x44312c
mov eax, dword [ebp - 0xc7cc]
push eax
mov ecx, dword [ebp - 0xc7cc]
push ecx
mov ecx, 0x4d0968
call fcn.0040ffd0
add eax, 0x600
push eax
call fcn.0040f880
add esp, 8
mov dword [ebp - 0xc7d0], eax
mov edx, dword [ebp - 0xc7cc]
add edx, 1
mov dword [ebp - 0xc7cc], edx
jmp 0x443020
cmp dword [ebp - 0xc7d0], 0
jne 0x4431b5
mov dword [ebp - 0x17b8], 0xa
cmp dword [0x4e8c60], 0
jne 0x4431ab
mov eax, dword [0x4db5d5]
push eax
mov ecx, 0x4e8c7c
call fcn.004087b0
mov ecx, dword [eax + 0x410]
push ecx
push 0x100
lea edx, [ebp - 0xe48]
push edx
push 0x25f
mov eax, dword [0x4d2ddc]
push eax
call fcn.0044a170
add esp, 0x14
push 0x40010
push 0x4d3e28
lea ecx, [ebp - 0xe48]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x444905
cmp dword [0x4d5760], 0
je 0x44332f
mov dword [ebp - 0xc7d4], 1
xor edx, edx
mov word [ebp - 0xc9e0], dx
push 0x206
push 0
lea eax, [ebp - 0xc9de]
push eax
call fcn.00468010
add esp, 0xc
push 0x104
lea ecx, [ebp - 0xc9e0]
push ecx
push 0x4b72cc
push 0x4b72d4
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
jne 0x443239
push 0x104
lea edx, [ebp - 0xc9e0]
push edx
push 0x4b72ec
push str._PASSWORD:
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x443282
lea eax, [ebp - 0xc9e0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
push 0x10
lea ecx, [ebp - 0xc9e0]
push ecx
push 0x11
lea edx, [ebp - 0xe70]
push edx
call fcn.0046b271
add esp, 0x10
push 0x4d4ed6
lea eax, [ebp - 0xc9e0]
push eax
call fcn.0046db74
add esp, 8
test eax, eax
jne 0x443282
mov dword [ebp - 0xc7d4], 0
cmp dword [ebp - 0xc7d4], 0
je 0x44332f
mov ecx, dword [0x4d2ddc]
mov dword [ebp - 0xe7c], ecx
mov edx, dword [0x4db5d5]
push edx
mov ecx, 0x4e8c7c
call fcn.004087b0
mov eax, dword [eax + 0x410]
mov dword [ebp - 0xe78], eax
mov ecx, dword [0x4d577c]
neg ecx
sbb ecx, ecx
and ecx, 0xfffffffe
add ecx, 2
mov dword [ebp - 0xe74], ecx
mov edx, dword [0x4d5780]
neg edx
sbb edx, edx
and edx, 4
or edx, dword [ebp - 0xe74]
mov dword [ebp - 0xe74], edx
lea eax, [ebp - 0xe7c]
push eax
push 0
call fcn.00414c70
add esp, 8
mov dword [ebp - 0x61c], eax
mov ecx, dword [ebp - 0x61c]
push ecx
push str.WinMain____Dialog_password_d
call fcn.00457270
add esp, 8
cmp dword [ebp - 0x61c], 1
je 0x44332f
mov dword [ebp - 0x17b8], 0x4c7
jmp 0x444905
cmp dword [0x4d5764], 0
je 0x4433fc
cmp dword [0x4e8c60], 0
jne 0x4433fc
mov edx, dword [0x4d2ddc]
mov dword [ebp - 0x1a80], edx
mov eax, dword [0x4db5d5]
push eax
mov ecx, 0x4e8c7c
call fcn.004087b0
mov ecx, dword [eax + 0x410]
mov dword [ebp - 0x1a7c], ecx
push 0x4e4138
push 0x104
lea edx, [ebp - 0x1a70]
push edx
call fcn.0046a95d
add esp, 0xc
cmp dword [ebp - 0x61c], 0
je 0x44339d
mov dword [ebp - 0x1a78], 1
mov eax, dword [0x4d577c]
neg eax
sbb eax, eax
and eax, 0xfffffffe
add eax, 2
or eax, dword [ebp - 0x1a78]
mov dword [ebp - 0x1a78], eax
mov ecx, dword [0x4d5780]
neg ecx
sbb ecx, ecx
and ecx, 4
or ecx, dword [ebp - 0x1a78]
mov dword [ebp - 0x1a78], ecx
lea edx, [ebp - 0x1a80]
push edx
push 0
call fcn.004140a0
add esp, 8
mov dword [ebp - 0x61c], eax
mov eax, dword [ebp - 0x61c]
push eax
push str.WinMain____Dialog_license_d
call fcn.00457270
add esp, 8
cmp dword [ebp - 0x61c], 3
jne 0x44340c
jmp 0x4431b5
cmp dword [ebp - 0x61c], 1
je 0x443432
cmp dword [ebp - 0x61c], 0
je 0x443432
mov dword [ebp - 0x17b8], 0x4c7
jmp 0x444905
xor ecx, ecx
mov word [ebp - 0x17b0], cx
push 0xa0
push 0
lea edx, [ebp - 0x17ae]
push edx
call fcn.00468010
add esp, 0xc
xor eax, eax
mov word [ebp - 0x1868], ax
push 0xa0
push 0
lea ecx, [ebp - 0x1866]
push ecx
call fcn.00468010
add esp, 0xc
push 0x51
lea edx, [ebp - 0x17b0]
push edx
call fcn.00438780
add esp, 8
push 0x51
lea eax, [ebp - 0x1868]
push eax
call fcn.00438810
add esp, 8
lea ecx, [ebp - 0x17b0]
push ecx
push str.WinMain____CompanyName_s
call fcn.00457270
add esp, 8
lea edx, [ebp - 0x1868]
push edx
push str.WinMain____UserName_s
call fcn.00457270
add esp, 8
mov dword [ebp - 0xc44], 0
movzx eax, byte [0x4d2998]
cmp eax, 1
je 0x4434fe
movzx ecx, byte [0x4d2998]
cmp ecx, 2
je 0x4434fe
movzx edx, byte [0x4d2998]
cmp edx, 3
je 0x4434fe
cmp dword [0x4d2999], 0
jne 0x4434fe
cmp dword [0x4d29a1], 0
je 0x443863
xor eax, eax
mov word [ebp - 0xcdf8], ax
push 0x206
push 0
lea ecx, [ebp - 0xcdf6]
push ecx
call fcn.00468010
add esp, 0xc
push 0x104
lea edx, [ebp - 0xcdf8]
push edx
push 0x4b73e8
push 0x4b73f0
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
jne 0x44356f
push 0x104
lea eax, [ebp - 0xcdf8]
push eax
push 0x4b7404
push str._SERIAL:
push 0x4dc028
call fcn.0040af90
add esp, 0x14
test eax, eax
je 0x443637
lea ecx, [ebp - 0xcdf8]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
call fcn.004040e0
mov dword [ebp - 0xce0c], eax
lea edx, [ebp - 0xcdf8]
mov dword [ebp - 0xce08], edx
cmp dword [ebp - 0xce08], 0
jne 0x4435a8
mov dword [ebp - 0xe710], 0
jmp 0x44361e
mov eax, dword [ebp - 0xce08]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
mov dword [ebp - 0xce04], eax
cmp dword [ebp - 0xce04], 0x3fffffff
jle 0x4435d6
mov dword [ebp - 0xe714], 0
jmp 0x443612
mov eax, dword [ebp - 0xce04]
shl eax, 1
call fcn.0046dc70
mov dword [ebp - 0xe718], esp
mov ecx, dword [ebp - 0xce0c]
push ecx
mov edx, dword [ebp - 0xce04]
shl edx, 1
push edx
mov eax, dword [ebp - 0xce08]
push eax
mov ecx, dword [ebp - 0xe718]
push ecx
call fcn.00423510
mov dword [ebp - 0xe714], eax
mov edx, dword [ebp - 0xe714]
mov dword [ebp - 0xe710], edx
mov eax, dword [ebp - 0xe710]
push eax
push 0x104
push 0x4d29ad
call fcn.0046a7ad
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0xcbe8], cx
push 0x206
push 0
lea edx, [ebp - 0xcbe6]
push edx
call fcn.00468010
add esp, 0xc
lea eax, [ebp - 0x1290]
push eax
push 0x4e7e18
lea ecx, [ebp - 0xcbe8]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea edx, [ebp - 0x210]
push edx
lea eax, [ebp - 0xcbe8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov dword [ebp - 0xe4c], 0
lea ecx, [ebp - 0xcbe8]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4436d7
push 3
push 0x10000000
lea edx, [ebp - 0xcbe8]
push edx
call fcn.0040c8e0
add esp, 0xc
mov dword [ebp - 0xe4c], eax
mov eax, dword [ebp - 0xe4c]
push eax
lea ecx, [ebp - 0xcbe8]
push ecx
push str.AddAccessRights__s____d
call fcn.00457270
add esp, 0xc
jmp 0x443712
cmp dword [0x4d080c], 0
je 0x443712
lea edx, [ebp - 0x1290]
push edx
push 0x23
call fcn.0040caf0
add esp, 8
mov dword [ebp - 0xe4c], eax
mov eax, dword [ebp - 0xe4c]
push eax
lea ecx, [ebp - 0x1290]
push ecx
push str.CreateFreeDirectory__s____d
call fcn.00457270
add esp, 0xc
lea edx, [ebp - 0xcbe8]
push edx
call fcn.0040d340
add esp, 4
call fcn.004040e0
mov dword [ebp - 0xcdfc], eax
lea eax, [ebp - 0x840]
push eax
push closesocket
call fcn.00437a30
add esp, 8
push 0x1a
push 0x4d2bb5
push 1
push 0x4b7488
lea ecx, [ebp - 0x840]
push ecx
push closesocket
call fcn.00437a90
add esp, 0x18
push 0x208
lea edx, [ebp - 0xcbe8]
push edx
push 1
push 0x4b7498
lea eax, [ebp - 0x840]
push eax
push closesocket
call fcn.00437a90
add esp, 0x18
push 0x208
push 0x4d5fc4
push 1
push 0x4b74ac
lea ecx, [ebp - 0x840]
push ecx
push closesocket
call fcn.00437a90
add esp, 0x18
movzx edx, byte [0x4d2998]
cmp edx, 1
jne 0x4437e1
push 0x4e
push 0x4d2940
push 1
push 0x4b74c0
lea eax, [ebp - 0x840]
push eax
push closesocket
call fcn.00437a90
add esp, 0x18
jmp 0x443863
movzx ecx, byte [0x4d2998]
cmp ecx, 3
jne 0x443863
xor edx, edx
mov word [ebp - 0xce30], dx
xor eax, eax
mov dword [ebp - 0xce2e], eax
mov dword [ebp - 0xce2a], eax
mov dword [ebp - 0xce26], eax
mov dword [ebp - 0xce22], eax
mov dword [ebp - 0xce1e], eax
mov dword [ebp - 0xce1a], eax
mov dword [ebp - 0xce16], eax
push 0xf
lea ecx, [ebp - 0xce30]
push ecx
push 0xffffffffffffffff
push 0x4d24c2
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0x1e
lea edx, [ebp - 0xce30]
push edx
push 1
push 0x4b74cc
lea eax, [ebp - 0x840]
push eax
push closesocket
call fcn.00437a90
add esp, 0x18
mov dword [ebp - 0x14a4], 0
movzx ecx, byte [0x4d2998]
cmp ecx, 1
jne 0x443c07
mov dword [ebp - 0xd3a8], 0
push 0x574
push 0
lea edx, [ebp - 0xd3a4]
push edx
call fcn.00468010
add esp, 0xc
lea eax, [ebp - 0xd3a0]
push eax
push 0x4d2940
call fcn.0040baa0
add esp, 8
cmp dword [ebp - 0xc44], 0
je 0x4438ef
push 0x4d29ad
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0xd3a0]
mov dword [ecx], edx
mov eax, dword [ebp - 0xd39c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xd398]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xd394]
mov dword [ecx + 0xc], eax
call fcn.0044e900
add esp, 0x14
cmp dword [0x4d2730], 0
je 0x44392e
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0xd3a0]
mov dword [ecx], edx
mov eax, dword [ebp - 0xd39c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xd398]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xd394]
mov dword [ecx + 0xc], eax
call fcn.0044e760
add esp, 0x10
mov dword [ebp - 0x14a4], eax
cmp dword [ebp - 0x14a4], 0
jne 0x443c02
mov ecx, dword [0x4d2ddc]
mov dword [ebp - 0xd3a8], ecx
mov edx, dword [0x4db5d5]
push edx
mov ecx, 0x4e8c7c
call fcn.004087b0
mov eax, dword [eax + 0x410]
mov dword [ebp - 0xd3a4], eax
mov ecx, dword [0x4d272c]
neg ecx
sbb ecx, ecx
add ecx, 2
mov byte [ebp - 0xd390], cl
mov edx, dword [0x4d2734]
mov dword [ebp - 0xd38f], edx
mov eax, dword [0x4d577c]
neg eax
sbb eax, eax
and eax, 0xfffffc00
add eax, 0x400
or eax, dword [ebp - 0xd38f]
mov dword [ebp - 0xd38f], eax
mov ecx, dword [0x4d5780]
neg ecx
sbb ecx, ecx
and ecx, 0x800
or ecx, dword [ebp - 0xd38f]
mov dword [ebp - 0xd38f], ecx
cmp dword [ebp - 0x61c], 0
je 0x4439d9
mov edx, dword [ebp - 0xd38f]
or edx, 0x200
mov dword [ebp - 0xd38f], edx
mov eax, dword [ebp - 0xd38f]
push eax
push str.WinMain____SNV3Info.uiDlgOption_d
call fcn.00457270
add esp, 8
mov cl, byte [0x4d298e]
mov byte [ebp - 0xd38b], cl
movzx edx, byte [ebp - 0xd38b]
push edx
movzx eax, byte [ebp - 0xd38b]
push eax
push str.WinMain____SNV3Info.byProductCode_d___x_
call fcn.00457270
add esp, 0xc
mov cl, byte [0x4d2dd8]
mov byte [ebp - 0xd389], cl
mov dl, byte [0x4d2dd9]
mov byte [ebp - 0xd38a], dl
mov al, byte [0x4d298f]
mov byte [ebp - 0xd388], al
mov cl, byte [0x4d2990]
mov byte [ebp - 0xd386], cl
mov dl, byte [0x4d2ddb]
mov byte [ebp - 0xd387], dl
lea eax, [ebp - 0x17b0]
push eax
push 0x51
lea ecx, [ebp - 0xcf74]
push ecx
call fcn.0046a95d
add esp, 0xc
lea edx, [ebp - 0x1868]
push edx
push 0x51
lea eax, [ebp - 0xced2]
push eax
call fcn.0046a95d
add esp, 0xc
push 0x4d2738
push 0x104
lea ecx, [ebp - 0xd17c]
push ecx
call fcn.0046a95d
add esp, 0xc
push 0x4d29ad
push 0x104
lea edx, [ebp - 0xd384]
push edx
call fcn.0046a7ad
add esp, 0xc
push 0x4d2ab1
push 0x104
lea eax, [ebp - 0xd280]
push eax
call fcn.0046a7ad
add esp, 0xc
cmp dword [0x4e8c60], 0
jne 0x443b36
lea ecx, [ebp - 0xd3a8]
push ecx
push 0
call fcn.0044e470
add esp, 8
mov dword [ebp - 0x61c], eax
mov edx, dword [ebp - 0x61c]
push edx
push str.WinMain____Dialog_SerialV3_d
call fcn.00457270
add esp, 8
cmp dword [ebp - 0x61c], 3
jne 0x443b10
jmp 0x44332f
cmp dword [ebp - 0x61c], 1
je 0x443b36
cmp dword [ebp - 0x61c], 0
je 0x443b36
mov dword [ebp - 0x17b8], 0x4c7
jmp 0x444905
lea eax, [ebp - 0xd3a8]
push eax
call fcn.0044e5f0
add esp, 4
test eax, eax
jne 0x443be9
mov ecx, dword [0x4db5d5]
push ecx
mov ecx, 0x4e8c7c
call fcn.004087b0
mov edx, dword [eax + 0x410]
push edx
push 0x100
lea eax, [ebp - 0x410]
push eax
push 0x258
mov ecx, dword [0x4d2ddc]
push ecx
call fcn.0044a170
add esp, 0x14
mov edx, dword [0x4db5d5]
push edx
mov ecx, 0x4e8c7c
call fcn.004087b0
mov eax, dword [eax + 0x410]
push eax
push 0x100
lea ecx, [ebp - 0xe48]
push ecx
push 0x2bf
mov edx, dword [0x4d2ddc]
push edx
call fcn.0044a170
add esp, 0x14
push 0
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0xe48]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0x17b8], 0xd
jmp 0x444905
lea edx, [ebp - 0xd384]
push edx
push 0x104
push 0x4d29ad
call fcn.0046a7ad
add esp, 0xc
jmp 0x443f43
movzx eax, byte [0x4d2998]
cmp eax, 3
jne 0x443f43
mov dword [ebp - 0xdb28], 0
push 0x775
push 0
lea ecx, [ebp - 0xdb24]
push ecx
call fcn.00468010
add esp, 0xc
push 0x4d24c2
push 0xf
lea edx, [ebp - 0xdb20]
push edx
call fcn.0046a7ad
add esp, 0xc
cmp dword [ebp - 0xc44], 0
je 0x443c6c
lea eax, [ebp - 0xdb20]
push eax
lea ecx, [ebp - 0x840]
push ecx
call fcn.004509e0
add esp, 8
cmp dword [0x4d22b0], 0
je 0x443c8f
lea edx, [ebp - 0xdb20]
push edx
push 0x4d2bcf
call fcn.004507e0
add esp, 8
mov dword [ebp - 0x14a4], eax
cmp dword [ebp - 0x14a4], 0
jne 0x443f43
mov eax, dword [0x4d2ddc]
mov dword [ebp - 0xdb28], eax
mov ecx, dword [0x4db5d5]
push ecx
mov ecx, 0x4e8c7c
call fcn.004087b0
mov edx, dword [eax + 0x410]
mov dword [ebp - 0xdb24], edx
mov eax, dword [0x4d22ac]
neg eax
sbb eax, eax
add eax, 2
mov byte [ebp - 0xdb11], al
mov ecx, dword [0x4d22b4]
mov dword [ebp - 0xdb10], ecx
mov edx, dword [0x4d577c]
neg edx
sbb edx, edx
and edx, 0xfffffc00
add edx, 0x400
or edx, dword [ebp - 0xdb10]
mov dword [ebp - 0xdb10], edx
mov eax, dword [0x4d5780]
neg eax
sbb eax, eax
and eax, 0x800
or eax, dword [ebp - 0xdb10]
mov dword [ebp - 0xdb10], eax
cmp dword [ebp - 0x61c], 0
je 0x443d39
mov ecx, dword [ebp - 0xdb10]
or ecx, 0x200
mov dword [ebp - 0xdb10], ecx
lea edx, [ebp - 0x17b0]
push edx
push 0x51
lea eax, [ebp - 0xd4f3]
push eax
call fcn.0046a95d
add esp, 0xc
lea ecx, [ebp - 0x1868]
push ecx
push 0x51
lea edx, [ebp - 0xd451]
push edx
call fcn.0046a95d
add esp, 0xc
push 0x4d22ba
push 0x104
lea eax, [ebp - 0xd6fb]
push eax
call fcn.0046a95d
add esp, 0xc
push 0x4d29ad
push 0x104
lea ecx, [ebp - 0xdb0b]
push ecx
call fcn.0046a7ad
add esp, 0xc
push 0x4d2ab1
push 0x104
lea edx, [ebp - 0xda07]
push edx
call fcn.0046a7ad
add esp, 0xc
push 0x4d2bcf
push 0x104
lea eax, [ebp - 0xd903]
push eax
call fcn.0046a95d
add esp, 0xc
cmp dword [0x4e8c60], 0
jne 0x443e37
lea ecx, [ebp - 0xdb28]
push ecx
push 0
call fcn.004505c0
add esp, 8
mov dword [ebp - 0x61c], eax
mov edx, dword [ebp - 0x61c]
push edx
push str.WinMain____Dialog_SerialV5_d
call fcn.00457270
add esp, 8
cmp dword [ebp - 0x61c], 3
jne 0x443e11
jmp 0x44332f
cmp dword [ebp - 0x61c], 1
je 0x443e37
cmp dword [ebp - 0x61c], 0
je 0x443e37
mov dword [ebp - 0x17b8], 0x4c7
jmp 0x444905
push 0x4d2bcf
push str.WinMain____AQTOOLSINFO.szProductKey_s
call fcn.00457270
add esp, 8
push 0x4d24c2
push str.WinMain____AQTOOLSSERIALV5.szSerialID_s
call fcn.004576a0
add esp, 8
lea eax, [ebp - 0xdb0b]
push eax
push str.WinMain____SNV5Info.szSerial_s
call fcn.004576a0
add esp, 8
lea ecx, [ebp - 0xdb0b]
push ecx
push 0x4d24c2
push 0x4d2bcf
call fcn.00450960
add esp, 0xc
test eax, eax
jne 0x443f2a
mov edx, dword [0x4db5d5]
push edx
mov ecx, 0x4e8c7c
call fcn.004087b0
mov eax, dword [eax + 0x410]
push eax
push 0x100
lea ecx, [ebp - 0x410]
push ecx
push 0x258
mov edx, dword [0x4d2ddc]
push edx
call fcn.0044a170
add esp, 0x14
mov eax, dword [0x4db5d5]
push eax
mov ecx, 0x4e8c7c
call fcn.004087b0
mov ecx, dword [eax + 0x410]
push ecx
push 0x100
lea edx, [ebp - 0xe48]
push edx
push 0x2bf
mov eax, dword [0x4d2ddc]
push eax
call fcn.0044a170
add esp, 0x14
push 0
lea ecx, [ebp - 0x410]
push ecx
lea edx, [ebp - 0xe48]
push edx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0x17b8], 0xd
jmp 0x444905
lea eax, [ebp - 0xdb0b]
push eax
push 0x104
push 0x4d29ad
call fcn.0046a7ad
add esp, 0xc
cmp dword [0x4d2999], 0
je 0x444377
cmp dword [ebp - 0x14a4], 0
jne 0x444377
call fcn.004040e0
mov dword [ebp - 0xdb34], eax
mov dword [ebp - 0xdb38], 0
cmp dword [0x4d17fc], 0
je 0x444069
cmp dword [ebp - 0x17bc], 0
jne 0x444069
cmp dword [0x4e8c60], 0
je 0x443fa9
mov dword [ebp - 0x17b8], 0x4cd
jmp 0x444905
mov ecx, dword [0x4db5d5]
push ecx
mov ecx, 0x4e8c7c
call fcn.004087b0
mov edx, dword [eax + 0x410]
push edx
push 0x100
lea eax, [ebp - 0x410]
push eax
push 0x258
mov ecx, dword [0x4d2ddc]
push ecx
call fcn.0044a170
add esp, 0x14
mov edx, dword [0x4db5d5]
push edx
mov ecx, 0x4e8c7c
call fcn.004087b0
mov eax, dword [eax + 0x410]
push eax
push 0x100
lea ecx, [ebp - 0xe48]
push ecx
push 0x2c3
mov edx, dword [0x4d2ddc]
push edx
call fcn.0044a170
add esp, 0x14
cmp dword [ebp - 0x17bc], 0
jne 0x444069
push 0x25
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0xe48]
push ecx
mov edx, dword [ebp - 0xdb38]
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
jne 0x44405a
mov dword [ebp - 0x17b8], 0x4c7
jmp 0x444905
push 0
call fcn.0048b4d0
mov dword [ebp - 0x17bc], eax
jmp 0x444019
mov dword [ebp - 0xdb3c], 0x4d29ad
cmp dword [ebp - 0xdb3c], 0
jne 0x444088
mov dword [ebp - 0xe71c], 0
jmp 0x4440fc
mov eax, dword [ebp - 0xdb3c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0xdb2c], eax
cmp dword [ebp - 0xdb2c], 0x3fffffff
jle 0x4440b6
mov dword [ebp - 0xe720], 0
jmp 0x4440f0
mov eax, dword [ebp - 0xdb2c]
shl eax, 1
call fcn.0046dc70
mov dword [ebp - 0xe724], esp
mov ecx, dword [ebp - 0xdb34]
push ecx
mov edx, dword [ebp - 0xdb2c]
push edx
mov eax, dword [ebp - 0xdb3c]
push eax
mov ecx, dword [ebp - 0xe724]
push ecx
call fcn.0041f650
mov dword [ebp - 0xe720], eax
mov edx, dword [ebp - 0xe720]
mov dword [ebp - 0xe71c], edx
mov eax, dword [ebp - 0xe71c]
push eax
lea ecx, [ebp - 0x840]
push ecx
call fcn.0048b590
mov dword [ebp - 0xe4c], eax
mov dword [ebp - 0xdb3c], 0x4d29ad
cmp dword [ebp - 0xdb3c], 0
jne 0x444134
mov dword [ebp - 0xe728], 0
jmp 0x4441a8
mov edx, dword [ebp - 0xdb3c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0xdb2c], eax
cmp dword [ebp - 0xdb2c], 0x3fffffff
jle 0x444162
mov dword [ebp - 0xe72c], 0
jmp 0x44419c
mov eax, dword [ebp - 0xdb2c]
shl eax, 1
call fcn.0046dc70
mov dword [ebp - 0xe730], esp
mov eax, dword [ebp - 0xdb34]
push eax
mov ecx, dword [ebp - 0xdb2c]
push ecx
mov edx, dword [ebp - 0xdb3c]
push edx
mov eax, dword [ebp - 0xe730]
push eax
call fcn.0041f650
mov dword [ebp - 0xe72c], eax
mov ecx, dword [ebp - 0xe72c]
mov dword [ebp - 0xe728], ecx
mov edx, dword [ebp - 0xe4c]
push edx
mov eax, dword [ebp - 0xe728]
push eax
lea ecx, [ebp - 0x840]
push ecx
push str.WinMain____ActivProd_SetSerialNumber__s___s____d
call fcn.00457270
add esp, 0x10
push 1
push 0
push 0
push 0
push 0xfffffffffffffffe
push closesocket
mov edx, dword [ebp - 0xdb38]
push edx
lea eax, [ebp - 0x840]
push eax
call fcn.0048b680
mov dword [ebp - 0xe4c], eax
mov ecx, dword [ebp - 0xe4c]
push ecx
mov edx, dword [ebp - 0xdb38]
push edx
lea eax, [ebp - 0x840]
push eax
push str.WinMain____ActivProdEx__s___d____d
call fcn.00457270
add esp, 0x10
cmp dword [ebp - 0xe4c], 0
jne 0x444377
mov ecx, dword [0x4db5d5]
push ecx
mov ecx, 0x4e8c7c
call fcn.004087b0
mov edx, dword [eax + 0x410]
push edx
push 0x100
lea eax, [ebp - 0x410]
push eax
push 0x258
mov ecx, dword [0x4d2ddc]
push ecx
call fcn.0044a170
add esp, 0x14
mov edx, dword [0x4db5d5]
push edx
mov ecx, 0x4e8c7c
call fcn.004087b0
mov eax, dword [eax + 0x410]
push eax
push 0x100
lea ecx, [ebp - 0xe48]
push ecx
push 0x2c2
mov edx, dword [0x4d2ddc]
push edx
call fcn.0044a170
add esp, 0x14
mov dword [ebp - 0xdb3c], 0x4d29ad
cmp dword [ebp - 0xdb3c], 0
jne 0x4442b0
mov dword [ebp - 0xe734], 0
jmp 0x444324
mov eax, dword [ebp - 0xdb3c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0xdb2c], eax
cmp dword [ebp - 0xdb2c], 0x3fffffff
jle 0x4442de
mov dword [ebp - 0xe738], 0
jmp 0x444318
mov eax, dword [ebp - 0xdb2c]
shl eax, 1
call fcn.0046dc70
mov dword [ebp - 0xe73c], esp
mov ecx, dword [ebp - 0xdb34]
push ecx
mov edx, dword [ebp - 0xdb2c]
push edx
mov eax, dword [ebp - 0xdb3c]
push eax
mov ecx, dword [ebp - 0xe73c]
push ecx
call fcn.0041f650
mov dword [ebp - 0xe738], eax
mov edx, dword [ebp - 0xe738]
mov dword [ebp - 0xe734], edx
push 0x4db608
mov eax, dword [ebp - 0xe734]
push eax
lea ecx, [ebp - 0xe48]
push ecx
push 0x200
lea edx, [ebp - 0xc40]
push edx
call fcn.004685e6
add esp, 0x14
push 0
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0xc40]
push ecx
mov edx, dword [ebp - 0xdb38]
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0xc44], 1
jmp 0x4434c4
cmp dword [0x4d299d], 0
je 0x44456c
mov dword [ebp - 0xdd80], 0
push 0x236
push 0
lea eax, [ebp - 0xdd7c]
push eax
call fcn.00468010
add esp, 0xc
mov ecx, dword [0x4d2ddc]
mov dword [ebp - 0xdd80], ecx
mov edx, dword [0x4db5d5]
push edx
mov ecx, 0x4e8c7c
call fcn.004087b0
mov eax, dword [eax + 0x410]
mov dword [ebp - 0xdd7c], eax
mov ecx, dword [0x4d2068]
mov dword [ebp - 0xdd6c], ecx
mov edx, dword [0x4d2074]
mov dword [ebp - 0xdd74], edx
mov eax, dword [0x4d2070]
mov dword [ebp - 0xdd70], eax
mov ecx, dword [0x4d206c]
mov dword [ebp - 0xdd78], ecx
mov edx, dword [0x4d577c]
neg edx
sbb edx, edx
and edx, 0xfffffffe
add edx, 2
or edx, dword [ebp - 0xdb4a]
mov dword [ebp - 0xdb4a], edx
mov eax, dword [0x4d5780]
neg eax
sbb eax, eax
and eax, 4
or eax, dword [ebp - 0xdb4a]
mov dword [ebp - 0xdb4a], eax
push 0x4d2078
push 0xb
lea ecx, [ebp - 0xdd68]
push ecx
call fcn.0046a95d
add esp, 0xc
push str.Toolbar.bmp
push 0x4e4948
lea edx, [ebp - 0xdd52]
push edx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [0x4e8c60], 0
jne 0x4444ae
lea eax, [ebp - 0xdd80]
push eax
push 0
call fcn.00401810
add esp, 8
mov dword [ebp - 0x61c], eax
mov ecx, dword [ebp - 0x61c]
push ecx
push str.WinMain____Dialog_Toolbar_d
call fcn.00457270
add esp, 8
cmp dword [ebp - 0x61c], 1
je 0x4444ae
mov dword [ebp - 0x17b8], 0x4c7
jmp 0x444905
cmp dword [ebp - 0xdd78], 0
je 0x44456c
mov dword [ebp - 0xdd84], 0
mov edx, dword [0x4db5d5]
push edx
mov ecx, 0x4e8c7c
call fcn.004087b0
mov eax, dword [eax + 0x410]
push eax
push 0x200
lea ecx, [ebp - 0xc40]
push ecx
push 0x2c7
mov edx, dword [0x4d2ddc]
push edx
call fcn.0044a170
add esp, 0x14
push 1
lea eax, [ebp - 0xc40]
push eax
push 0x4d3e28
mov ecx, dword [0x4d2ddc]
push ecx
call fcn.00414530
add esp, 0x10
mov dword [ebp - 0xdd88], eax
mov edx, dword [ebp - 0xdd70]
push edx
mov eax, dword [ebp - 0xdd74]
push eax
movzx ecx, byte [ebp - 0x14a5]
push ecx
push 0x4d2078
lea edx, [ebp - 0x1088]
push edx
mov eax, dword [ebp - 0xdd84]
push eax
call fcn.00401db0
add esp, 0x18
push 0
push 0
push 0
mov ecx, dword [0x4d2ddc]
push ecx
call fcn.00414530
add esp, 0x10
mov dword [ebp - 0xdd88], eax
cmp dword [0x4d29a1], 0
je 0x444870
call fcn.004040e0
mov dword [ebp - 0xe6e4], eax
mov dword [ebp - 0xe6e0], 0
push 0x736
push 0
lea edx, [ebp - 0xe6dc]
push edx
call fcn.00468010
add esp, 0xc
mov eax, dword [0x4d2ddc]
mov dword [ebp - 0xe6e0], eax
mov ecx, dword [0x4db5d5]
push ecx
mov ecx, 0x4e8c7c
call fcn.004087b0
mov edx, dword [eax + 0x410]
mov dword [ebp - 0xe6dc], edx
mov al, byte [0x4d1e51]
mov byte [ebp - 0xe4d8], al
lea ecx, [ebp - 0x840]
push ecx
push 0x104
lea edx, [ebp - 0xe4d7]
push edx
call fcn.0046a95d
add esp, 0xc
push 0x1f
lea eax, [ebp - 0x1290]
push eax
push 0x20
lea ecx, [ebp - 0xe1ef]
push ecx
call fcn.0046b271
add esp, 0x10
push 0x1f
lea edx, [ebp - 0x210]
push edx
push 0x20
lea eax, [ebp - 0xe1af]
push eax
call fcn.0046b271
add esp, 0x10
push 0x10
push 0x20
lea ecx, [ebp - 0xdfef]
push ecx
movzx edx, byte [0x4d2dd7]
push edx
call fcn.0046d88e
add esp, 0x10
push 0x1f
push 0x4db608
push 0x20
lea eax, [ebp - 0xe16f]
push eax
call fcn.0046b271
add esp, 0x10
push 0x4d2bb5
push 0x20
lea ecx, [ebp - 0xe22f]
push ecx
call fcn.0046a95d
add esp, 0xc
lea edx, [ebp - 0x17b0]
push edx
push 0x20
lea eax, [ebp - 0xe28f]
push eax
call fcn.0046a95d
add esp, 0xc
lea ecx, [ebp - 0x1868]
push ecx
push 0x20
lea edx, [ebp - 0xe2cf]
push edx
call fcn.0046a95d
add esp, 0xc
mov dword [ebp - 0xe6e8], 0x4d29ad
cmp dword [ebp - 0xe6e8], 0
jne 0x4446be
mov dword [ebp - 0xe740], 0
jmp 0x444732
mov eax, dword [ebp - 0xe6e8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0xdd8c], eax
cmp dword [ebp - 0xdd8c], 0x3fffffff
jle 0x4446ec
mov dword [ebp - 0xe744], 0
jmp 0x444726
mov eax, dword [ebp - 0xdd8c]
shl eax, 1
call fcn.0046dc70
mov dword [ebp - 0xe748], esp
mov ecx, dword [ebp - 0xe6e4]
push ecx
mov edx, dword [ebp - 0xdd8c]
push edx
mov eax, dword [ebp - 0xe6e8]
push eax
mov ecx, dword [ebp - 0xe748]
push ecx
call fcn.0041f650
mov dword [ebp - 0xe744], eax
mov edx, dword [ebp - 0xe744]
mov dword [ebp - 0xe740], edx
mov eax, dword [ebp - 0xe740]
push eax
push 0x40
lea ecx, [ebp - 0xe0af]
push ecx
call fcn.0046a95d
add esp, 0xc
push 0x4d400e
push 0x20
lea edx, [ebp - 0xe12f]
push edx
call fcn.0046a95d
add esp, 0xc
push 0xa
push 0x10
lea eax, [ebp - 0xe24f]
push eax
movzx ecx, byte [0x4d2dd9]
push ecx
call fcn.0046d88e
add esp, 0x10
mov dl, byte [0x4d2dda]
mov byte [ebp - 0xdfab], dl
mov eax, dword [0x4d2062]
mov dword [ebp - 0xdfaa], eax
push 0x20
lea ecx, [ebp - 0xe0ef]
push ecx
movzx dx, byte [0x4d2dd8]
movzx eax, dx
push eax
call fcn.00434550
add esp, 0xc
push 0x4d1e5a
push 0x100
lea ecx, [ebp - 0xe6d8]
push ecx
call fcn.0046a95d
add esp, 0xc
push str.WinMain____before_OLRDisplay
call fcn.00457270
add esp, 4
xor edx, edx
mov word [ebp - 0xdf98], dx
push 0x206
push 0
lea eax, [ebp - 0xdf96]
push eax
call fcn.00468010
add esp, 0xc
push str.OLRegistu.dll
push 0x4e4740
lea ecx, [ebp - 0xdf98]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
xor edx, edx
cmp dword [0x4e8c60], 0
sete dl
push edx
lea eax, [ebp - 0xdf98]
push eax
lea ecx, [ebp - 0xe6e0]
push ecx
push 0
call fcn.00434f80
add esp, 0x10
mov dword [ebp - 0x61c], eax
mov edx, dword [ebp - 0x61c]
push edx
push str.WinMain____Dialog_OLRv3_d
call fcn.00457270
add esp, 8
cmp dword [ebp - 0x61c], 1
je 0x444870
cmp dword [ebp - 0x61c], 3
je 0x444870
mov dword [ebp - 0x17b8], 0x4c7
jmp 0x444905
mov eax, dword [0x4d2ddc]
mov dword [ebp - 0x129c], eax
mov ecx, 0x4e8c7c
call fcn.00408940
test eax, eax
jbe 0x4448a8
mov ecx, dword [0x4db5d5]
push ecx
mov ecx, 0x4e8c7c
call fcn.004087b0
mov edx, dword [eax + 0x410]
mov dword [ebp - 0xe74c], edx
jmp 0x4448b2
mov dword [ebp - 0xe74c], 0x809
mov eax, dword [ebp - 0xe74c]
mov dword [ebp - 0x1298], eax
xor ecx, ecx
cmp dword [0x4d577c], 0
sete cl
or ecx, dword [ebp - 0x1294]
mov dword [ebp - 0x1294], ecx
mov edx, dword [0x4d5780]
neg edx
sbb edx, edx
and edx, 2
or edx, dword [ebp - 0x1294]
mov dword [ebp - 0x1294], edx
lea eax, [ebp - 0x129c]
push eax
push 0
call fcn.00415aa0
add esp, 8
mov dword [0x4db5ec], eax
cmp dword [0x4db5f8], 0
je 0x44491b
mov ecx, dword [0x4db5f8]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeResource]
cmp dword [ebp - 0x1c90], 0
je 0x444931
mov edx, dword [ebp - 0x1c90]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [0x4db5f0], 0
je 0x444946
mov eax, dword [0x4db5f0]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [0x4db5f4], 0
je 0x4449b1
push 0x4b7824
mov ecx, dword [0x4db5f4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xe6ec], eax
cmp dword [ebp - 0xe6ec], 0
je 0x444978
call dword [ebp - 0xe6ec]
jmp 0x44498a
push str.ISnuiShutdown
push str.Function__s_failed_
call fcn.004576a0
add esp, 8
mov edx, dword [0x4db5f4]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp - 0xe4c], eax
mov eax, dword [ebp - 0xe4c]
push eax
push str.WinMain____unload_NewUI___d
call fcn.00457270
add esp, 8
cmp dword [0x4d2ddc], 0
je 0x4449f4
mov ecx, dword [0x4d2ddc]
cmp ecx, dword [0x4db5e4]
je 0x4449f4
mov edx, dword [0x4d2ddc]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp - 0xe4c], eax
mov eax, dword [ebp - 0xe4c]
push eax
push 0x4e3f30
push str.WinMain____unload__s___d
call fcn.00457270
add esp, 0xc
call dword [sym.imp.ole32.dll_CoUninitialize]
push 0x4e4948
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x444a37
push 2
push 0x4e4948
call fcn.004566c0
add esp, 8
mov dword [ebp - 0xe4c], eax
mov ecx, dword [ebp - 0xe4c]
push ecx
push 0x4e4948
push 0x4b78c8
call fcn.00457270
add esp, 0xc
push 0x4e4b50
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x444a90
cmp dword [0x4d61f0], 0
je 0x444a62
push 0x4e4b50
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov dword [ebp - 0xe4c], eax
jmp 0x444a77
push 2
push 0x4e4b50
call fcn.004566c0
add esp, 8
mov dword [ebp - 0xe4c], eax
mov edx, dword [ebp - 0xe4c]
push edx
push 0x4e4b50
push 0x4b7910
call fcn.00457270
add esp, 0xc
cmp dword [0x4d5758], 0
je 0x444aee
push 0x4d5fc4
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x444aee
push 0x4db808
push 0x4d5fc4
call fcn.0046bc7e
add esp, 8
test eax, eax
je 0x444aee
push 2
push 0x4d5fc4
call fcn.004566c0
add esp, 8
mov dword [ebp - 0xe4c], eax
mov eax, dword [ebp - 0xe4c]
push eax
push 0x4d5fc4
push str.WinMain____Remove_folder__s___d_
call fcn.00457270
add esp, 0xc
jmp 0x444b00
push 0x4d5fc4
push str.WinMain____the_folder__s_will_not_be_removed_
call fcn.00457270
add esp, 8
cmp dword [ebp - 0x17b4], 0
je 0x444b45
push 0
lea ecx, [ebp - 0x17b8]
push ecx
mov edx, dword [ebp + 0x14]
push edx
push 0
push str.Runas
push 0x4b7a0c
mov eax, dword [ebp + 0x10]
push eax
push 0x4dba10
push 0
call fcn.004550d0
add esp, 0x24
test eax, eax
jne 0x444b45
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x17b8], eax
cmp dword [ebp - 0x634], 0
je 0x444b5b
mov ecx, dword [ebp - 0x634]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x4ce5d4], 0
je 0x444b70
mov edx, dword [0x4ce5d4]
mov dword [ebp - 0x17b8], edx
mov eax, dword [ebp - 0x17b8]
push eax
push str.WinMain____End__x_
call fcn.00457270
add esp, 8
mov eax, dword [ebp - 0x17b8]
lea esp, [ebp - 0xe74c]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00467fff
mov esp, ebp
pop ebp
ret 0x10