Function at 0x429929
Capabilities:
Contain obfuscated stackstrings
Delete file
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a17c1
mov eax, dword fs:[0]
push eax
mov eax, 0x2554
call fcn.0048ab40
mov eax, dword [0x4c3c64]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [ebp - 4], ebx
lea esi, [ebp - 0x2330]
call fcn.0042965b
mov byte [ebp - 4], 2
xor eax, eax
mov dword [ebp - 0x2408], ebx
lea edi, [ebp - 0x2404]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push ecx
stosd dword es:[edi], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x228c], esp
mov ecx, esp
push eax
call fcn.00421355
call fcn.00454a50
pop ecx
cmp eax, ebx
jne 0x4299c9
push 5
pop edi
lea esi, [ebp - 0x2330]
call fcn.0042b1e8
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042001a
mov eax, edi
jmp 0x42b1ce
push 1
push ebx
push ecx
lea eax, [ebp + 8]
mov dword [ebp - 0x228c], esp
mov ecx, esp
push eax
call fcn.00421355
lea eax, [ebp - 0x23d8]
push eax
call fcn.00422a4a
mov byte [ebp - 4], 3
lea eax, [ebp - 0x23d8]
push eax
cmp dword [ebp - 0x234c], ebx
jne 0x429a0a
mov byte [ebp - 4], 2
call fcn.00422b09
push 0xe
jmp 0x4299a0
lea esi, [ebp - 0x2330]
call fcn.00423483
pop ecx
test al, al
jne 0x429a31
lea eax, [ebp - 0x23d8]
push eax
mov byte [ebp - 4], 2
call fcn.00422b09
push 0xf
jmp 0x4299a0
mov esi, 0x4a94b0
push esi
lea ecx, [ebp - 0x22a4]
call fcn.004211c4
push esi
lea ecx, [ebp - 0x2298]
mov byte [ebp - 4], 4
call fcn.004211c4
push esi
lea ecx, [ebp - 0x2294]
mov byte [ebp - 4], 5
call fcn.004211c4
push ecx
mov byte [ebp - 4], 6
mov ecx, esp
mov dword [ebp - 0x228c], esp
push dword [ebp - 0x22f4]
call fcn.004211c4
call fcn.00454a90
pop ecx
cmp eax, ebx
jne 0x429ac5
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22a4]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [ebp - 0x23d8]
push eax
mov byte [ebp - 4], 2
call fcn.00422b09
push 0x10
jmp 0x4299a0
push ecx
mov dword [ebp - 0x228c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x228c], esp
mov esi, 0x4aa0a4
push esi
call fcn.004211c4
push ecx
mov byte [ebp - 4], 7
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push 0x4a9b30
call fcn.004211c4
push ecx
mov byte [ebp - 4], 8
mov ecx, esp
mov dword [ebp - 0x22c8], esp
push dword [ebp - 0x22f4]
call fcn.004211c4
mov byte [ebp - 4], 6
call fcn.00452020
add esp, 0xc
call fcn.00454a50
pop ecx
cmp eax, ebx
je 0x42b170
push ecx
mov dword [ebp - 0x228c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x228c], esp
push esi
call fcn.004211c4
push ecx
mov byte [ebp - 4], 9
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push str.VirtFiles.db
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0xa
mov ecx, esp
mov dword [ebp - 0x22c8], esp
push dword [ebp - 0x22f4]
call fcn.004211c4
mov byte [ebp - 4], 6
call fcn.00452020
add esp, 0xc
call fcn.00454a50
pop ecx
cmp eax, ebx
je 0x42b170
push ecx
mov eax, esp
mov dword [ebp - 0x228c], esp
push dword [ebp - 0x2328]
push str._s.TmpVirtZip.zip
push eax
call fcn.00452370
lea eax, [ebp - 0x229c]
add esp, 0xc
push eax
call fcn.00451bd0
add esp, 4
mov byte [ebp - 4], 0xb
mov eax, esp
mov dword [ebp - 0x228c], esp
push dword [ebp - 0x2328]
push str._s.diff
push eax
call fcn.00452370
lea eax, [ebp - 0x22a8]
add esp, 0xc
push eax
call fcn.00451bd0
pop ecx
pop ecx
mov byte [ebp - 4], 0xc
push dword [ebp - 0x229c]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call edi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push ecx
mov ecx, esp
mov dword [ebp - 0x228c], esp
push eax
push str.CE__d_OldZip.tmp
push ecx
call fcn.00452370
lea eax, [ebp - 0x22b0]
add esp, 0xc
push eax
call fcn.00451bd0
add esp, 4
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x22b0]
mov dword [ebp - 0x228c], esp
mov ecx, esp
push eax
call fcn.00421355
push ecx
mov byte [ebp - 4], 0xe
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push 0x4aa0a8
call fcn.004211c4
push 1
lea eax, [ebp - 0x23d8]
push eax
mov byte [ebp - 4], 0xd
call fcn.00466150
cmp eax, ebx
je 0x429cd5
mov ecx, dword [ebp - 0x22b0]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22a4]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [ebp - 0x23d8]
push eax
mov byte [ebp - 4], 2
call fcn.00422b09
push 8
jmp 0x4299a0
push dword [ebp - 0x229c]
call fcn.0046f6b0
pop ecx
mov dword [ebp - 0x22b8], eax
cmp eax, ebx
jne 0x429d56
mov ecx, dword [ebp - 0x22b0]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22a4]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [ebp - 0x23d8]
push eax
mov byte [ebp - 4], 2
call fcn.00422b09
push 3
jmp 0x4299a0
push ecx
mov eax, esp
mov dword [ebp - 0x228c], esp
push dword [ebp - 0x2328]
push str._s.VirtApp.ini
push eax
call fcn.00452370
lea eax, [ebp - 0x22ac]
add esp, 0xc
push eax
call fcn.00451bd0
pop ecx
pop ecx
mov byte [ebp - 4], 0xf
push dword [ebp - 0x22ac]
call edi
push ecx
lea eax, [ebp - 0x22ac]
mov dword [ebp - 0x228c], esp
mov ecx, esp
push eax
call fcn.00421355
push ecx
mov byte [ebp - 4], 0x10
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push 0x4aa0a8
call fcn.004211c4
push 3
lea eax, [ebp - 0x23d8]
push eax
mov byte [ebp - 4], 0xf
call fcn.00466150
push ecx
mov eax, esp
mov dword [ebp - 0x228c], esp
push dword [ebp - 0x2328]
push str._s.VirtFiles.db
push eax
call fcn.00452370
lea eax, [ebp - 0x22b4]
add esp, 0xc
push eax
call fcn.00451bd0
pop ecx
pop ecx
mov byte [ebp - 4], 0x11
push dword [ebp - 0x22b4]
call edi
push ecx
lea eax, [ebp - 0x22b4]
mov dword [ebp - 0x228c], esp
mov ecx, esp
push eax
call fcn.00421355
push ecx
mov byte [ebp - 4], 0x12
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push 0x4aa0a8
call fcn.004211c4
push 4
lea eax, [ebp - 0x23d8]
push eax
mov byte [ebp - 4], 0x11
call fcn.00466150
cmp eax, ebx
je 0x429e65
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22ac]
add ecx, 0xfffffff0
call fcn.0042001a
jmp 0x429c6a
xor eax, eax
mov dword [ebp - 0x2348], ebx
lea edi, [ebp - 0x2344]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push ecx
stosd dword es:[edi], eax
lea eax, [ebp - 0x22b4]
mov dword [ebp - 0x228c], esp
mov ecx, esp
push eax
lea edi, [ebp - 0x2348]
call fcn.00421355
call fcn.0045cfd0
mov dword [ebp - 0x228c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x228c], esp
push esi
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x13
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push str.VirtFiles.db
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x14
mov ecx, esp
mov dword [ebp - 0x22c8], esp
push dword [ebp - 0x22f4]
call fcn.004211c4
mov byte [ebp - 4], 0x11
call fcn.00452020
add esp, 0xc
mov edi, 0x4c82b4
call fcn.0045cfd0
pop ecx
cmp dword [ebp + 0x14], ebx
jne 0x42a1fc
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x228c], esp
push 0x4aa0a8
call fcn.004211c4
lea eax, [ebp - 0x23d8]
push eax
call fcn.00463d80
mov edi, eax
add esp, 0xc
mov dword [ebp - 0x22cc], edi
cmp edi, ebx
jne 0x429f6d
mov ebx, dword [ebp - 0x22b8]
mov eax, ebx
call fcn.0046f8f0
test al, al
je 0x429f47
mov edi, ebx
call fcn.0046f8a0
jmp 0x429f4c
call fcn.00463f30
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22ac]
add ecx, 0xfffffff0
call fcn.0042001a
jmp 0x429ceb
push 0x2024
lea eax, [ebp - 0x2284]
push ebx
push eax
mov dword [ebp - 0x22c8], ebx
mov dword [ebp - 0x22c0], ebx
mov dword [ebp - 0x2288], ebx
call fcn.00485e30
add esp, 0xc
lea ecx, [ebp - 0x2288]
or edx, 0xffffffff
mov eax, edi
call fcn.00463e20
mov eax, dword [ebp - 0x2288]
cmp eax, ebx
mov dword [ebp - 0x228c], eax
mov dword [ebp - 0x22d4], ebx
jle 0x42a1ab
mov edx, dword [ebp - 0x22d4]
lea ecx, [ebp - 0x2288]
mov eax, edi
call fcn.00463e20
cmp eax, ebx
jne 0x429ff9
test byte [ebp - 0x284], 0x10
lea eax, [ebp - 0x2284]
push eax
je 0x42a012
mov eax, dword [ebp - 0x22b8]
call fcn.0046f850
pop ecx
cmp eax, ebx
je 0x42a0e7
mov eax, edi
call fcn.0046f8f0
test al, al
je 0x42a1bd
call fcn.0046f8a0
jmp 0x42a1c4
lea ecx, [ebp - 0x22c4]
call fcn.004211c4
push 0x5c
push 0x2f
lea ebx, [ebp - 0x22c4]
mov byte [ebp - 4], 0x15
call fcn.004223f7
push ecx
mov dword [ebp - 0x22bc], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x22bc], esp
push esi
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x16
mov eax, ebx
mov dword [ebp - 0x22a0], esp
mov ecx, esp
push eax
call fcn.00421355
push ecx
mov byte [ebp - 4], 0x17
mov ecx, esp
mov dword [ebp - 0x2290], esp
push dword [ebp - 0x22f4]
call fcn.004211c4
mov byte [ebp - 4], 0x15
call fcn.00452020
add esp, 0xc
call fcn.00454a50
pop ecx
test eax, eax
je 0x42a0cd
push ecx
mov eax, esp
mov dword [ebp - 0x2290], esp
push dword [ebp - 0x22c4]
push str.PackUtils_MergeDirToExe:_Skipping:__s
push eax
call fcn.00452370
add esp, 0xc
call fcn.004296cc
pop ecx
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x22c4]
add ecx, 0xfffffff0
call fcn.0042001a
mov edi, dword [ebp - 0x22cc]
xor ebx, ebx
jmp 0x42a193
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x22c4]
add ecx, 0xfffffff0
call fcn.0042001a
mov edi, dword [ebp - 0x22cc]
xor ebx, ebx
mov eax, dword [ebp - 0x264]
cmp eax, 0xffffffff
je 0x42a125
cmp eax, dword [ebp - 0x22c8]
jbe 0x42a125
add eax, eax
mov dword [ebp - 0x22c8], eax
push eax
cmp dword [ebp - 0x22c0], ebx
jne 0x42a112
call fcn.00485790
jmp 0x42a11e
push dword [ebp - 0x22c0]
call fcn.004859cd
pop ecx
mov dword [ebp - 0x22c0], eax
pop ecx
push ecx
mov eax, esp
mov dword [ebp - 0x2290], esp
lea ecx, [ebp - 0x2284]
push ecx
push str.PackUtils_MergeDirToExe:_Keeping__unzipping__zipping_:__s
push eax
call fcn.00452370
add esp, 0xc
call fcn.004296cc
mov edx, dword [ebp - 0x22c0]
pop ecx
push dword [ebp - 0x22c8]
mov eax, edi
push dword [ebp - 0x22d4]
call fcn.00463eb0
pop ecx
pop ecx
cmp eax, ebx
jne 0x429ff9
push dword [ebp - 0x264]
mov eax, dword [ebp - 0x22b8]
push dword [ebp - 0x22c0]
lea ecx, [ebp - 0x2284]
call fcn.0046f800
pop ecx
pop ecx
cmp eax, ebx
jne 0x429ff9
inc dword [ebp - 0x22d4]
mov eax, dword [ebp - 0x22d4]
cmp eax, dword [ebp - 0x228c]
jl 0x429fbe
mov eax, edi
call fcn.0046f8f0
test al, al
je 0x42a1f3
call fcn.0046f8a0
jmp 0x42a1fc
mov ebx, edi
call fcn.00463f30
mov ebx, dword [ebp - 0x22b8]
mov eax, ebx
call fcn.0046f8f0
test al, al
je 0x42a1de
mov edi, ebx
call fcn.0046f8a0
jmp 0x42a1e3
call fcn.00463f30
lea eax, [ebp - 0x23d8]
call fcn.00465040
jmp 0x429f4c
mov ebx, edi
call fcn.00463f30
xor ebx, ebx
push ecx
lea eax, [ebp - 0x22a8]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
mov dword [ebp - 0x22d8], ebx
call fcn.00421355
call fcn.00423d52
pop ecx
cmp dword [ebp + 0x14], ebx
je 0x42a23f
push 0x4c8900
push 0x4426d0
push ebx
push dword [ebp - 0x2340]
lea eax, [ebp - 0x2348]
push eax
call fcn.0046adc0
lea ecx, [ebp - 0x2560]
call fcn.004497a0
push ecx
mov byte [ebp - 4], 0x18
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x19
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push str._Windows_WinSxs
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x1a
mov ecx, esp
mov dword [ebp - 0x22bc], esp
push dword [ebp - 0x22f4]
call fcn.004211c4
lea edi, [ebp - 0x228c]
mov byte [ebp - 4], 0x18
call fcn.00452020
add esp, 0xc
push eax
lea ecx, [ebp - 0x2560]
mov byte [ebp - 4], 0x1b
call fcn.0042274e
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x228c]
add ecx, 0xfffffff0
call fcn.0042001a
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x1c
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push str._Windows_
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x1d
mov ecx, esp
mov dword [ebp - 0x22bc], esp
push dword [ebp - 0x22f4]
call fcn.004211c4
lea edi, [ebp - 0x228c]
mov byte [ebp - 4], 0x18
call fcn.00452020
add esp, 0xc
push eax
lea ecx, [ebp - 0x255c]
mov byte [ebp - 4], 0x1e
call fcn.0042274e
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x228c]
add ecx, 0xfffffff0
call fcn.0042001a
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x1f
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push str._System_
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x20
mov ecx, esp
mov dword [ebp - 0x22bc], esp
push dword [ebp - 0x22f4]
call fcn.004211c4
lea edi, [ebp - 0x228c]
mov byte [ebp - 4], 0x18
call fcn.00452020
add esp, 0xc
push eax
lea ecx, [ebp - 0x2558]
mov byte [ebp - 4], 0x21
call fcn.0042274e
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x228c]
add ecx, 0xfffffff0
call fcn.0042001a
push 0x4a94b0
lea ecx, [ebp - 0x2554]
call fcn.0042149d
push dword [ebp - 0x22f4]
mov ecx, 0x4c8938
call fcn.0042149d
push 0x24c
lea eax, [ebp - 0x25c]
push ebx
push eax
mov dword [ebp - 0x260], ebx
call fcn.00485e30
add esp, 0xc
lea eax, [ebp - 0x260]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x22
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push 0x4abdb8
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x23
mov ecx, esp
mov dword [ebp - 0x22bc], esp
push dword [ebp - 0x22f4]
call fcn.004211c4
lea edi, [ebp - 0x228c]
mov byte [ebp - 4], 0x18
call fcn.00452020
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ecx, dword [ebp - 0x228c]
add ecx, 0xfffffff0
mov dword [ebp - 0x22c8], eax
call fcn.0042001a
cmp dword [ebp - 0x22c8], 0xffffffff
je 0x42a538
test byte [ebp - 0x260], 0x10
je 0x42a511
lea eax, [ebp - 0x234]
push eax
push 0x4ab944
call fcn.00485be8
pop ecx
pop ecx
test eax, eax
je 0x42a511
lea eax, [ebp - 0x234]
push eax
push 0x4abdbc
call fcn.00485be8
pop ecx
pop ecx
test eax, eax
je 0x42a511
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x234]
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push eax
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x25
mov ecx, esp
mov dword [ebp - 0x22bc], esp
push dword [ebp - 0x22f4]
call fcn.004211c4
lea edi, [ebp - 0x22cc]
mov byte [ebp - 4], 0x18
call fcn.00452020
add esp, 0xc
push eax
mov eax, 0x4c8920
mov byte [ebp - 4], 0x26
call fcn.0042453c
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x22cc]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [ebp - 0x260]
push eax
push dword [ebp - 0x22c8]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x42a45f
push dword [ebp - 0x22c8]
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x23f0]
push eax
call fcn.00421272
mov byte [ebp - 4], 0x27
cmp dword [ebp + 0x14], ebx
je 0x42a627
push ecx
mov dword [ebp - 0x2290], esp
mov edi, esp
push ecx
lea eax, [ebp - 0x2408]
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
mov dword [ebp - 0x22d4], eax
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x28
mov ecx, esp
mov dword [ebp - 0x22a0], esp
mov ebx, str.VirtFiles.db
push ebx
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x22a8]
mov dword [ebp - 0x22bc], esp
mov ecx, esp
push eax
call fcn.00421355
mov byte [ebp - 4], 0x27
call fcn.00452020
add esp, 0xc
call fcn.004555b0
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x2a
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push ebx
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0x22a8]
mov dword [ebp - 0x22bc], esp
mov ecx, esp
push eax
call fcn.00421355
lea edi, [ebp - 0x228c]
mov byte [ebp - 4], 0x27
call fcn.00452020
mov esi, dword [eax]
add esp, 0xc
lea ebx, [ebp - 0x2408]
call fcn.00469fd0
mov ecx, dword [ebp - 0x228c]
add ecx, 0xfffffff0
call fcn.0042001a
mov esi, 0x4aa0a4
xor ebx, ebx
jmp 0x42a633
lea eax, [ebp - 0x2348]
mov dword [ebp - 0x22d4], eax
push dword [ebp - 0x22d4]
mov edi, dword [ebp - 0x22b8]
push edi
lea eax, [ebp - 0x22d8]
push eax
lea eax, [ebp - 0x23f0]
push eax
lea eax, [ebp - 0x2560]
push eax
call fcn.00440fe0
add esp, 0x14
lea eax, [ebp - 0x2294]
push eax
lea eax, [ebp - 0x2298]
push eax
lea eax, [ebp - 0x22a4]
push eax
lea eax, [ebp - 0x23f0]
push eax
call fcn.00423e98
add esp, 0x10
lea eax, [ebp - 0x23f0]
push eax
mov byte [ebp - 4], 0x18
call fcn.00424510
lea eax, [ebp - 0x2560]
push eax
mov byte [ebp - 4], 0x11
call fcn.0044e680
mov eax, edi
call fcn.0046f8f0
test al, al
je 0x42a6b3
call fcn.0046f8a0
jmp 0x42a6bc
mov ebx, edi
call fcn.00463f30
xor ebx, ebx
push ecx
mov eax, esp
mov dword [ebp - 0x2290], esp
push dword [ebp - 0x2328]
push str._s.VirtReg.export
push eax
call fcn.00452370
lea eax, [ebp - 0x22d0]
add esp, 0xc
push eax
call fcn.00451bd0
add esp, 4
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x22d0]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00421355
push ecx
mov byte [ebp - 4], 0x2d
mov dword [ebp - 0x22a0], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push dword [ebp - 0x2328]
call fcn.004211c4
push edi
call fcn.00429724
pop ecx
pop ecx
mov byte [ebp - 4], 0x2c
call fcn.00435ce0
pop ecx
pop ecx
cmp dword [ebp + 0x10], ebx
je 0x42ab65
call fcn.0047727e
push eax
lea ecx, [ebp - 0x22c8]
call fcn.0042049e
mov byte [ebp - 4], 0x2e
call fcn.0047727e
push eax
lea ecx, [ebp - 0x22c4]
call fcn.0042049e
mov byte [ebp - 4], 0x2f
call fcn.0047727e
push eax
lea ecx, [ebp - 0x228c]
call fcn.0042049e
mov byte [ebp - 4], 0x30
call fcn.0047727e
push eax
lea ecx, [ebp - 0x22b8]
call fcn.0042049e
mov byte [ebp - 4], 0x31
call fcn.0047727e
push eax
lea ecx, [ebp - 0x22cc]
call fcn.0042049e
lea eax, [ebp - 0x2314]
push eax
lea eax, [ebp - 0x2318]
push eax
lea eax, [ebp - 0x22c8]
push eax
push ecx
mov byte [ebp - 4], 0x32
mov dword [ebp - 0x2290], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x33
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push str.RegistryMACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x34
mov dword [ebp - 0x22bc], esp
mov esi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x22bc], esp
push dword [ebp - 0x2328]
call fcn.004211c4
push esi
call fcn.00429769
pop ecx
pop ecx
mov byte [ebp - 4], 0x32
call fcn.00452020
add esp, 0xc
call fcn.0042bcec
add esp, 0x10
lea eax, [ebp - 0x22cc]
push eax
lea eax, [ebp - 0x22b8]
push eax
push dword [ebp - 0x22d8]
lea eax, [ebp - 0x2298]
push ecx
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00421355
push ecx
mov byte [ebp - 4], 0x35
lea eax, [ebp - 0x22c8]
mov dword [ebp - 0x22a0], esp
mov ecx, esp
push eax
call fcn.00421355
mov byte [ebp - 4], 0x32
call fcn.0042bec7
add esp, 0x14
push ebx
push ecx
lea eax, [ebp - 0x22b8]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00421355
push ecx
mov byte [ebp - 4], 0x36
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push str.NewAppId
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x37
mov dword [ebp - 0x22bc], esp
mov esi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x22bc], esp
push dword [ebp - 0x2328]
call fcn.004211c4
push esi
call fcn.00429769
pop ecx
pop ecx
push SysReAllocStringLen
mov byte [ebp - 4], 0x32
call fcn.004534a0
add esp, 0x14
push dword [ebp - 0x22b8]
call fcn.00485eaa
mov esi, dword [ebp - 0x22cc]
pop ecx
push esi
mov dword [ebp - 0x2328], eax
call fcn.00485eaa
pop ecx
lea ecx, [esi - 0x10]
mov dword [ebp - 0x2320], eax
call fcn.0042001a
mov ecx, dword [ebp - 0x22b8]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x228c]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22c4]
add ecx, 0xfffffff0
call fcn.0042001a
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x22c8]
add ecx, 0xfffffff0
call fcn.0042001a
mov eax, dword [ebp - 0x2294]
cmp dword [eax - 0xc], ebx
je 0x42ab65
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push eax
push str._d_CeIconChange.tmp
push ecx
call fcn.00452370
lea eax, [ebp - 0x22c4]
add esp, 0xc
push eax
call fcn.00451bd0
pop ecx
pop ecx
push ebx
push ebx
push ecx
mov byte [ebp - 4], 0x38
lea eax, [ebp - 0x22c4]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00421355
lea eax, [ebp - 0x23d8]
call fcn.00466440
push ecx
lea eax, [ebp + 0xc]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00421355
call fcn.004666d0
pop ecx
cmp eax, ebx
je 0x42a9e3
mov ecx, dword [ebp - 0x22c4]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22d0]
add ecx, 0xfffffff0
call fcn.0042001a
jmp 0x429e44
push ecx
lea eax, [ebp + 0xc]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00421355
push ecx
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x2294]
mov dword [ebp - 0x22a0], esp
mov ecx, esp
push eax
call fcn.00421355
lea eax, [ebp - 0x228c]
push eax
mov byte [ebp - 4], 0x38
call fcn.004297a4
mov ecx, dword [ebp - 0x228c]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.0042001a
push ebx
push ebx
push ecx
lea eax, [ebp - 0x22c4]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00421355
lea eax, [ebp - 0x2528]
push eax
call fcn.00422a4a
push 0xffffffffffffffff
push 0xffffffffffffffff
push ecx
mov byte [ebp - 4], 0x3a
lea eax, [ebp + 0xc]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00421355
lea eax, [ebp - 0x2528]
call fcn.00466440
mov edi, eax
lea eax, [ebp - 0x2528]
cmp edi, ebx
je 0x42ab32
push eax
mov byte [ebp - 4], 0x38
call fcn.00422b09
mov ecx, dword [ebp - 0x22c4]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22d0]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22ac]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22b0]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22a4]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [ebp - 0x23d8]
push eax
mov byte [ebp - 4], 2
call fcn.00422b09
jmp 0x4299a1
call fcn.00465040
push dword [ebp - 0x22c4]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0x2528]
push eax
mov byte [ebp - 4], 0x38
call fcn.00422b09
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x22c4]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [ebp - 0x23d8]
call fcn.00465040
push 1
push 1
push ecx
lea eax, [ebp + 0xc]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00421355
lea eax, [ebp - 0x2498]
push eax
call fcn.00422a4a
mov byte [ebp - 4], 0x3b
cmp dword [ebp - 0x240c], ebx
jne 0x42ac47
lea eax, [ebp - 0x2498]
push eax
mov byte [ebp - 4], 0x2c
call fcn.00422b09
mov ecx, dword [ebp - 0x22d0]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22ac]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22b0]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22a4]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [ebp - 0x23d8]
push eax
mov byte [ebp - 4], 2
call fcn.00422b09
push 7
jmp 0x4299a0
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
mov edi, 0x4aa0a8
push edi
call fcn.004211c4
mov esi, 0x4000
push esi
push 1
push ecx
mov byte [ebp - 4], 0x3c
lea eax, [ebp - 0x229c]
mov dword [ebp - 0x22a0], esp
mov ecx, esp
push eax
call fcn.00421355
lea eax, [ebp - 0x2498]
push eax
mov byte [ebp - 4], 0x3b
call fcn.00465a60
push dword [ebp - 0x229c]
mov dword [ebp - 0x228c], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [ebp - 0x228c], ebx
je 0x42acbb
lea eax, [ebp - 0x2498]
push eax
mov byte [ebp - 4], 0x2c
call fcn.00422b09
jmp 0x42a9d0
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push edi
call fcn.004211c4
mov eax, dword [ebp - 0x22d4]
push esi
push 4
push ecx
mov byte [ebp - 4], 0x3d
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push dword [eax]
call fcn.004211c4
lea eax, [ebp - 0x2498]
push eax
mov byte [ebp - 4], 0x3b
call fcn.00465a60
cmp eax, ebx
jne 0x42aca6
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push edi
call fcn.004211c4
push esi
push 6
push ecx
mov byte [ebp - 4], 0x3e
lea eax, [ebp - 0x22d0]
mov dword [ebp - 0x22a0], esp
mov ecx, esp
push eax
call fcn.00421355
lea eax, [ebp - 0x2498]
push eax
mov byte [ebp - 4], 0x3b
call fcn.00465a60
cmp eax, ebx
jne 0x42aca6
cmp dword [ebp + 0x10], ebx
je 0x42af03
push 0x4a94b0
lea ecx, [ebp - 0x22b8]
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x22ac]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
lea ebx, [ebp - 0x22b8]
call fcn.00421355
call fcn.00452f00
pop ecx
test eax, eax
je 0x42b017
mov eax, ebx
push eax
lea ecx, [ebp - 0x22c0]
call fcn.00421355
lea eax, [ebp - 0x22c0]
push eax
push ecx
mov byte [ebp - 4], 0x40
mov ecx, esp
mov dword [ebp - 0x2290], esp
push dword [ebp - 0x2328]
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x41
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push str.AppID
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x42
lea eax, [ebp - 0x22c0]
mov dword [ebp - 0x22bc], esp
mov ecx, esp
push eax
call fcn.00421355
mov byte [ebp - 4], 0x40
call fcn.004561b0
add esp, 0x10
lea eax, [ebp - 0x22c0]
push eax
push ecx
lea eax, [ebp - 0x22a4]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00421355
push ecx
mov byte [ebp - 4], 0x43
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push str.AutoLaunch
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x44
lea eax, [ebp - 0x22c0]
mov dword [ebp - 0x22bc], esp
mov ecx, esp
push eax
call fcn.00421355
mov byte [ebp - 4], 0x40
call fcn.004561b0
add esp, 0x10
lea eax, [ebp - 0x22c0]
push eax
push ecx
lea eax, [ebp - 0x2298]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00421355
push ecx
mov byte [ebp - 4], 0x45
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push str.Shortcuts
call fcn.004211c4
push ecx
mov byte [ebp - 4], 0x46
lea eax, [ebp - 0x22c0]
mov dword [ebp - 0x22bc], esp
mov ecx, esp
push eax
call fcn.00421355
mov byte [ebp - 4], 0x40
call fcn.004561b0
mov ebx, dword [ebp - 0x22c0]
mov eax, dword [ebx - 0xc]
add esp, 0x10
push ebx
push ecx
lea edi, [eax + eax]
lea eax, [ebp - 0x22ac]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00421355
call fcn.004530c0
pop ecx
pop ecx
lea ecx, [ebx - 0x10]
test eax, eax
jne 0x42aee5
call fcn.0042001a
mov ecx, dword [ebp - 0x22b8]
add ecx, 0xfffffff0
call fcn.0042001a
jmp 0x42aba2
call fcn.0042001a
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x22b8]
add ecx, 0xfffffff0
call fcn.0042001a
xor ebx, ebx
mov edi, 0x4aa0a8
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push edi
call fcn.004211c4
push esi
push 3
push ecx
mov byte [ebp - 4], 0x47
lea eax, [ebp - 0x22ac]
mov dword [ebp - 0x22a0], esp
mov ecx, esp
push eax
call fcn.00421355
lea eax, [ebp - 0x2498]
push eax
mov byte [ebp - 4], 0x3b
call fcn.00465a60
cmp eax, ebx
jne 0x42aca6
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push str.PackUtils_MergeDirToExe:_Committing
call fcn.004211c4
call fcn.004296cc
pop ecx
lea eax, [ebp - 0x2498]
call fcn.00465040
test eax, eax
lea eax, [ebp - 0x2498]
mov byte [ebp - 4], 0x2c
push eax
je 0x42b0b8
call fcn.00422b09
mov ecx, dword [ebp - 0x22d0]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22ac]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22b0]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22a4]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [ebp - 0x23d8]
push eax
mov byte [ebp - 4], 2
call fcn.00422b09
push 0xa
jmp 0x4299a0
mov ecx, dword [ebp - 0x22b8]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [ebp - 0x2498]
push eax
mov byte [ebp - 4], 0x2c
call fcn.00422b09
mov ecx, dword [ebp - 0x22d0]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22ac]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22b0]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22a4]
add ecx, 0xfffffff0
call fcn.0042001a
jmp 0x429a1a
call fcn.00422b09
mov ecx, dword [ebp - 0x22d0]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22ac]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22b0]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22a4]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [ebp - 0x23d8]
push eax
mov byte [ebp - 4], 2
call fcn.00422b09
lea esi, [ebp - 0x2330]
call fcn.0042b1e8
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042001a
xor eax, eax
jmp 0x42b1ce
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22a4]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [ebp - 0x23d8]
push eax
mov byte [ebp - 4], 2
call fcn.00422b09
lea esi, [ebp - 0x2330]
call fcn.0042b1e8
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042001a
push 6
pop eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00484f14
leave
ret