Function at 0x4263ef
Capabilities:
Delete registry value
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a8472
mov eax, dword fs:[0]
push eax
mov eax, 0x22e4
call fcn.004916c0
mov eax, dword [0x4ccc64]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x22d0], eax
mov eax, dword [ebp + 0xc]
xor esi, esi
push 0x2024
mov dword [ebp - 0x2290], eax
lea eax, [ebp - 0x2284]
mov ebx, ecx
push esi
push eax
mov dword [ebp - 0x22d4], ebx
mov dword [ebp - 0x2288], esi
call fcn.0048cb00
add esp, 0xc
call fcn.0047dccb
push eax
lea ecx, [ebp - 0x22e8]
call fcn.00434103
mov dword [ebp - 4], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push ecx
mov ecx, esp
mov dword [ebp - 0x2294], esp
push str.Loader_BasicDeploy:_in
mov dword [ebp - 0x22ec], eax
call fcn.00421197
call fcn.00425faf
mov esi, dword [ebx + 0x3c]
pop ecx
call fcn.00456520
push ecx
mov dword [ebp - 0x2294], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x2294], esp
push 0x4b11ac
call fcn.00421197
push ecx
mov byte [ebp - 4], 1
mov ecx, esp
mov dword [ebp - 0x22a0], esp
mov esi, 0x4b0b60
push esi
call fcn.00421197
push ecx
mov byte [ebp - 4], 2
mov ecx, esp
mov dword [ebp - 0x22b8], esp
push dword [ebx + 0x3c]
call fcn.00421197
mov byte [ebp - 4], 0
call fcn.00453850
add esp, 0xc
call fcn.00456490
mov edi, esp
mov dword [ebp - 0x2294], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push 0x4b11ac
mov dword [ebp - 0x22a4], eax
call fcn.00421197
push ecx
mov byte [ebp - 4], 3
mov ecx, esp
mov dword [ebp - 0x22b8], esp
push esi
call fcn.00421197
push ecx
mov byte [ebp - 4], 4
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push dword [ebx + 0x3c]
call fcn.00421197
mov byte [ebp - 4], 0
call fcn.00453850
add esp, 8
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x22a0], esp
mov edi, str.Main
push edi
call fcn.00421197
push 3
push dword [ebp - 0x2290]
lea esi, [ebp - 0x2289]
mov byte [ebp - 4], 0
call fcn.004238e6
add esp, 0x10
test eax, eax
je 0x4265a9
mov edi, eax
mov ecx, dword [ebp - 0x22e8]
add ecx, 0xfffffff0
call fcn.0042001a
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0048b97b
leave
ret
cmp byte [ebp - 0x2289], 0
je 0x4265c7
cmp dword [ebp - 0x22a4], 0
je 0x4265c7
mov dword [ebp - 0x22dc], 1
jmp 0x4265ce
and dword [ebp - 0x22dc], 0
cmp byte [ebp - 0x2289], 0
je 0x426615
push ecx
mov ecx, esp
mov dword [ebp - 0x2294], esp
push str._Loader_BasicDeploy:_refreshing_changed_INI
call fcn.00421197
call fcn.00425faf
mov esi, dword [ebx + 0x3c]
pop ecx
call fcn.00456520
push dword [ebp - 0x2290]
mov esi, 0x4d19d0
call fcn.004235bf
pop ecx
test al, al
jne 0x426615
push 0xf
pop edi
jmp 0x42657f
cmp dword [ebp - 0x22dc], 0
je 0x426634
call fcn.0042d81e
push 0x406
call fcn.00465d00
mov ebx, dword [ebp - 0x22d4]
pop ecx
push ecx
mov eax, esp
mov dword [ebp - 0x2294], esp
push dword [ebx + 8]
lea esi, [ebp - 0x2289]
push dword [ebx + 0x3c]
push str._sAppVirtDll__s.dll
push eax
call fcn.00453c70
add esp, 0xc
mov byte [ebp - 4], 6
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push edi
call fcn.00421197
push 2
push dword [ebp - 0x2290]
mov byte [ebp - 4], 0
call fcn.004238e6
add esp, 0xc
mov dword [ebp - 0x2294], esp
mov dword [ebp - 0x22a4], eax
mov eax, esp
push dword [ebx + 8]
push dword [ebx + 0x3c]
push str._sAppVirtDll64__s.dll
push eax
call fcn.00453c70
add esp, 0xc
mov byte [ebp - 4], 7
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push edi
call fcn.00421197
push 8
push dword [ebp - 0x2290]
mov byte [ebp - 4], 0
call fcn.004238e6
mov esi, dword [ebp - 0x22a4]
add esp, 0x10
and esi, eax
je 0x4266ff
cmp esi, 5
je 0x4266ff
push esi
push ecx
mov ecx, esp
mov dword [ebp - 0x2294], esp
push str.Engine
call fcn.00421197
call fcn.0042636f
sub eax, 3
pop ecx
pop ecx
je 0x426aa2
dec eax
je 0x426634
push ecx
mov edi, esp
mov dword [ebp - 0x2294], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push 0x4b11ac
lea esi, [ebp - 0x2289]
call fcn.00421197
push ecx
mov byte [ebp - 4], 8
mov ecx, esp
mov dword [ebp - 0x22b8], esp
push str.VirtFiles.db
call fcn.00421197
push ecx
mov byte [ebp - 4], 9
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push dword [ebx + 0x3c]
call fcn.00421197
mov byte [ebp - 4], 0
call fcn.00453850
add esp, 8
mov byte [ebp - 4], 0xa
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push str.Main
call fcn.00421197
push 4
push dword [ebp - 0x2290]
mov byte [ebp - 4], 0
call fcn.004238e6
add esp, 0x10
test eax, eax
jne 0x42657d
push ecx
mov edi, esp
mov dword [ebp - 0x2294], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push 0x4b11ac
call fcn.00421197
push ecx
mov byte [ebp - 4], 0xb
mov ecx, esp
mov dword [ebp - 0x22b8], esp
push str.SandboxCfg.db
call fcn.00421197
push ecx
mov byte [ebp - 4], 0xc
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push dword [ebx + 0x3c]
call fcn.00421197
mov byte [ebp - 4], 0
call fcn.00453850
add esp, 8
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push str.Main
call fcn.00421197
push 5
push dword [ebp - 0x2290]
mov byte [ebp - 4], 0
call fcn.004238e6
add esp, 0xc
mov edi, esp
mov dword [ebp - 0x2294], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push 0x4b11ac
lea esi, [ebp - 0x2289]
call fcn.00421197
push ecx
mov byte [ebp - 4], 0xe
mov ecx, esp
mov dword [ebp - 0x22b8], esp
push str.VirtReg.export
call fcn.00421197
push ecx
mov byte [ebp - 4], 0xf
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push dword [ebx + 0x3c]
call fcn.00421197
mov byte [ebp - 4], 0
call fcn.00453850
add esp, 8
mov byte [ebp - 4], 0x10
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push str.Main
call fcn.00421197
push 6
push dword [ebp - 0x2290]
mov byte [ebp - 4], 0
call fcn.004238e6
add esp, 0x10
mov esi, 0x4b04e0
push esi
lea ecx, [ebp - 0x22b4]
call fcn.00421197
lea eax, [ebp - 0x22b4]
push eax
mov byte [ebp - 4], 0x11
push ecx
mov edi, esp
mov dword [ebp - 0x2294], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push 0x4b11ac
call fcn.00421197
push ecx
mov byte [ebp - 4], 0x12
mov ecx, esp
mov dword [ebp - 0x22b8], esp
push str.ZipCache
call fcn.00421197
push ecx
mov byte [ebp - 4], 0x13
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push dword [ebx + 0x3c]
call fcn.00421197
mov byte [ebp - 4], 0x11
call fcn.00453850
add esp, 8
mov byte [ebp - 4], 0x14
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push str.Main
call fcn.00421197
push 1
push dword [ebp - 0x2290]
mov byte [ebp - 4], 0x11
call fcn.004237d1
xor edi, edi
add esp, 0x14
cmp byte [ebp - 0x2289], 0
mov dword [ebp - 0x22bc], eax
mov dword [ebp - 0x22c0], edi
je 0x426aca
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push ecx
mov ecx, esp
mov dword [ebp - 0x2294], esp
push str.Loader_BasicDeploy:_DEPLOYING_virtual_registry
mov dword [ebp - 0x22c4], eax
mov dword [ebp - 0x22b0], edi
mov dword [ebp - 0x22ac], edi
mov dword [ebp - 0x2298], edi
call fcn.00421197
call fcn.00425faf
pop ecx
push 2
lea eax, [ebp - 0x2298]
push eax
push edi
push edi
push ecx
mov ecx, esp
mov dword [ebp - 0x2294], esp
push str.Main
call fcn.00421197
mov ecx, dword [ebp - 0x2290]
lea edi, [ebp - 0x22b0]
call fcn.00467d30
xor edi, edi
cmp dword [ebp - 0x2298], edi
je 0x426ab5
push dword [ebx + 8]
lea eax, [ebp - 0x22a4]
push str.SoftwareVOS_s
push eax
mov dword [ebp - 0x22c8], edi
call fcn.00453c70
mov eax, dword [eax]
add esp, 0xc
push edi
lea ecx, [ebp - 0x22c0]
push ecx
push edi
push 0xf003f
push edi
push edi
push edi
push eax
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov ecx, dword [ebp - 0x22a4]
neg eax
sbb al, al
inc al
add ecx, 0xfffffff0
mov byte [ebp - 0x2289], al
call fcn.0042001a
cmp byte [ebp - 0x2289], 0
je 0x426aa9
mov edi, dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
push str.VirtRegSync.Low
push dword [ebp - 0x22c0]
call edi
push str.VirtRegSync.High
push dword [ebp - 0x22c0]
call edi
lea eax, [ebp - 0x22c8]
push eax
push dword [ebp - 0x22b0]
push dword [ebp - 0x22c0]
push dword [ebp - 0x2298]
call fcn.00478020
add esp, 0x10
push dword [ebp - 0x22c0]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x2298]
call fcn.0048c1d3
pop ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x22c4]
push ecx
mov ecx, esp
mov dword [ebp - 0x2294], esp
push eax
push str.Loader_BasicDeploy:_Registry_deployment_took__dms
push ecx
call fcn.00453c70
add esp, 0xc
call fcn.00425faf
pop ecx
xor edi, edi
jmp 0x426b2f
mov edi, esi
jmp 0x42657f
push dword [ebp - 0x2298]
call fcn.0048c1d3
pop ecx
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042001a
push 0xb
jmp 0x42660f
push dword [ebx + 8]
lea eax, [ebp - 0x22a4]
push str.SoftwareVOS_s
push eax
call fcn.00453c70
mov eax, dword [eax]
add esp, 0xc
push edi
lea ecx, [ebp - 0x22c0]
push ecx
push edi
push 0xf003f
push edi
push edi
push edi
push eax
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov ecx, dword [ebp - 0x22a4]
neg eax
sbb al, al
inc al
add ecx, 0xfffffff0
mov byte [ebp - 0x2289], al
call fcn.0042001a
cmp byte [ebp - 0x2289], 0
je 0x426b2f
push dword [ebp - 0x22c0]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.004298af
cmp dword [ebp - 0x22bc], edi
je 0x427286
push ecx
mov eax, esp
mov dword [ebp - 0x2294], esp
push dword [ebx + 0x3c]
push str.Loader_BasicDeploy:_DEPLOYING_ZIPs_virtual_files_to:__s
push eax
call fcn.00453c70
add esp, 0xc
call fcn.00425faf
mov eax, dword [ebp - 0x22d0]
pop ecx
push dword [ebx + 0x3c]
call fcn.00465be0
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
pop ecx
call ebx
call fcn.0045dc00
call ebx
push 1
push str._System_mscoree.dll
call fcn.0045ee40
pop ecx
pop ecx
cmp eax, edi
je 0x426c6d
push eax
call fcn.0048c1d3
pop ecx
call fcn.0047dccb
push eax
lea ecx, [ebp - 0x2298]
call fcn.00434103
mov eax, 0x104
push eax
push eax
lea ecx, [ebp - 0x2298]
mov byte [ebp - 4], 0x15
call fcn.0042049e
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x2298]
call fcn.00423c25
push ecx
mov dword [ebp - 0x2294], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x2294], esp
push 0x4b11ac
call fcn.00421197
push ecx
mov byte [ebp - 4], 0x16
mov ecx, esp
mov dword [ebp - 0x22a0], esp
push str.mscoree.dll
call fcn.00421197
push ecx
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x2298]
mov dword [ebp - 0x22b8], esp
mov ecx, esp
push eax
call fcn.00421360
mov byte [ebp - 4], 0x15
call fcn.00453850
add esp, 0xc
call fcn.00456490
pop ecx
test eax, eax
jne 0x426c5b
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042001a
push 0x13
jmp 0x42660f
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042001a
call fcn.0047dccb
push eax
lea ecx, [ebp - 0x2298]
call fcn.00434103
push ecx
mov byte [ebp - 4], 0x18
mov ecx, esp
mov dword [ebp - 0x2294], esp
push str.Main
lea ebx, [ebp - 0x2298]
call fcn.00421197
mov edi, dword [ebp - 0x2290]
push 7
call fcn.00467eb0
mov eax, dword [ebp - 0x22d0]
lea ecx, [ebp - 0x2288]
or edx, 0xffffffff
call fcn.00465ad0
mov edi, dword [ebp - 0x2288]
mov dword [ebp - 0x22a0], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ebx, ebx
xor edx, edx
cmp edi, ebx
mov dword [ebp - 0x2294], eax
mov dword [ebp - 0x22c4], edx
jle 0x4271c5
mov eax, dword [ebp - 0x22d0]
lea ecx, [ebp - 0x2288]
call fcn.00465ad0
push ecx
lea eax, [ebp - 0x2284]
mov ecx, esp
mov dword [ebp - 0x22e0], esp
push eax
mov dword [ebp - 0x2290], ebx
mov dword [ebp - 0x22a4], ebx
call fcn.00421197
lea esi, [ebp - 0x229c]
call fcn.004691b0
pop ecx
push ebx
push 0x5c
mov ecx, esi
mov byte [ebp - 4], 0x19
call fcn.00423b4d
xor esi, esi
inc esi
cmp eax, 0xffffffff
jne 0x426d40
mov dword [ebp - 0x2290], esi
mov eax, dword [ebp - 0x229c]
push esi
call fcn.0045eda0
pop ecx
cmp eax, ebx
je 0x426d6f
mov eax, dword [eax + 0x24]
mov ecx, dword [eax]
test cl, 8
je 0x426d6f
test cl, 1
je 0x426d6f
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x2290], esi
mov dword [ebp - 0x22a4], eax
push str.Packager.log
push dword [ebp - 0x229c]
call fcn.0048c876
pop ecx
pop ecx
test eax, eax
jne 0x426d8b
mov dword [ebp - 0x2290], ebx
cmp dword [ebp - 0x22dc], ebx
je 0x426ea2
cmp dword [ebp - 0x2290], ebx
jne 0x426eae
push 0x24c
lea eax, [ebp - 0x25c]
push ebx
push eax
mov dword [ebp - 0x260], ebx
call fcn.0048cb00
add esp, 0xc
lea eax, [ebp - 0x260]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x22e0], esp
push 0x4b11ac
call fcn.00421197
push ecx
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x229c]
mov dword [ebp - 0x22d8], esp
mov ecx, esp
push eax
call fcn.00421360
mov eax, dword [ebp - 0x22d4]
push ecx
mov byte [ebp - 4], 0x1b
mov ecx, esp
mov dword [ebp - 0x22ac], esp
push dword [eax + 0x3c]
call fcn.00421197
lea edi, [ebp - 0x22f0]
mov byte [ebp - 4], 0x19
call fcn.00453850
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ecx, dword [ebp - 0x22f0]
mov edi, eax
cmp edi, 0xffffffff
setne byte [ebp - 0x2289]
add ecx, 0xfffffff0
call fcn.0042001a
cmp byte [ebp - 0x2289], bl
je 0x427172
mov eax, dword [ebp - 0x240]
cmp eax, dword [ebp - 0x264]
jne 0x426e72
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x24c]
push eax
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
test eax, eax
je 0x426e9b
push ecx
mov eax, esp
mov dword [ebp - 0x22ac], esp
push dword [ebp - 0x229c]
push str.Patching:_Forcing_deployment_of_modified_file:__s
push eax
call fcn.00453c70
add esp, 0xc
call fcn.00425faf
pop ecx
mov dword [ebp - 0x2290], esi
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0x2290], ebx
je 0x427172
push ecx
mov eax, esp
mov dword [ebp - 0x22ac], esp
push dword [ebp - 0x229c]
push str._Deploying__s
push eax
call fcn.00453c70
add esp, 0xc
call fcn.00425faf
pop ecx
push ebx
push ebx
push dword [ebp - 0x22a4]
push dword [ebp - 0x229c]
push dword [ebp - 0x22c4]
push dword [ebp - 0x22d0]
call fcn.00422b17
add esp, 0x18
cmp eax, ebx
je 0x426f20
push eax
push ecx
lea eax, [ebp - 0x229c]
mov dword [ebp - 0x22ac], esp
mov ecx, esp
push eax
call fcn.00421360
call fcn.0042636f
sub eax, 3
pop ecx
pop ecx
je 0x4272df
dec eax
je 0x426eae
push 0x5c
push ecx
lea eax, [ebp - 0x229c]
mov dword [ebp - 0x22ac], esp
mov ecx, esp
push eax
call fcn.00421360
lea eax, [ebp - 0x22c8]
push eax
call fcn.004542b0
add esp, 0xc
push str._System_
lea ecx, [ebp - 0x22c8]
mov byte [ebp - 4], 0x1c
call fcn.00422611
test eax, eax
je 0x426f76
push str._Windows_
lea ecx, [ebp - 0x22c8]
call fcn.00422611
test eax, eax
jne 0x427162
push 0x5c
push ecx
lea eax, [ebp - 0x229c]
mov dword [ebp - 0x22ac], esp
mov ecx, esp
push eax
call fcn.00421360
lea eax, [ebp - 0x22e4]
push eax
call fcn.00454180
add esp, 8
mov byte [ebp - 4], 0x1d
mov ecx, esp
mov dword [ebp - 0x22ac], esp
push dword [eax]
push str.Deploying__s_to_all_SysDlls_subdirs:
push ecx
call fcn.00453c70
add esp, 0xc
call fcn.00425faf
pop ecx
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x22e4]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [ebp - 0x2290]
push eax
push 0x4b0544
lea eax, [ebp - 0x22bc]
push eax
lea ecx, [ebp - 0x2298]
mov dword [ebp - 0x2290], ebx
call fcn.004223f7
jmp 0x427143
push ecx
mov eax, esp
mov dword [ebp - 0x22ac], esp
push dword [ebp - 0x22bc]
push str.__deploying_to__sSysDlls
push eax
call fcn.00453c70
add esp, 0xc
call fcn.00425faf
pop ecx
push ebx
push ebx
push dword [ebp - 0x22a4]
push ecx
mov ecx, esp
mov dword [ebp - 0x22ac], esp
push 0x4b11ac
call fcn.00421197
push 0x5c
push ecx
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x229c]
mov dword [ebp - 0x22d8], esp
mov ecx, esp
push eax
call fcn.00421360
lea eax, [ebp - 0x22b8]
push eax
call fcn.00454180
add esp, 8
mov ecx, esp
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x22d8], esp
push eax
push str.SysDlls_
push ecx
call fcn.0042250c
add esp, 8
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x22bc]
mov dword [ebp - 0x22e0], esp
mov ecx, esp
push eax
call fcn.00421360
lea edi, [ebp - 0x22cc]
mov byte [ebp - 4], 0x22
call fcn.00453850
add esp, 0xc
mov byte [ebp - 4], 0x23
push dword [eax]
push dword [ebp - 0x22c4]
push dword [ebp - 0x22d0]
call fcn.00422b17
mov ecx, dword [ebp - 0x22cc]
add esp, 0x18
add ecx, 0xfffffff0
mov esi, eax
call fcn.0042001a
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x22b8]
add ecx, 0xfffffff0
call fcn.0042001a
cmp esi, ebx
je 0x427113
push esi
push ecx
lea eax, [ebp - 0x229c]
mov dword [ebp - 0x22ac], esp
mov ecx, esp
push eax
call fcn.00421360
call fcn.0042636f
sub eax, 3
pop ecx
pop ecx
je 0x4272c3
dec eax
je 0x426ff9
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x22bc]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [ebp - 0x2290]
push eax
push 0x4b0544
lea eax, [ebp - 0x22bc]
push eax
lea ecx, [ebp - 0x2298]
call fcn.004223f7
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x2290], 0xffffffff
jne 0x426ff9
mov ecx, dword [ebp - 0x22bc]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22c8]
add ecx, 0xfffffff0
call fcn.0042001a
jmp 0x427195
push ecx
mov eax, esp
mov dword [ebp - 0x22ac], esp
push dword [ebp - 0x229c]
push str.__Skipping__s
push eax
call fcn.00453c70
add esp, 0xc
call fcn.00425faf
pop ecx
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042001a
mov edx, dword [ebp - 0x22c4]
inc edx
cmp edx, dword [ebp - 0x22a0]
mov dword [ebp - 0x22c4], edx
jl 0x426ce6
mov esi, 0x4b04e0
push esi
push ecx
mov dword [ebp - 0x22ac], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x22ac], esp
push 0x4b11ac
call fcn.00421197
push ecx
mov byte [ebp - 4], 0x24
mov ecx, esp
mov dword [ebp - 0x22d8], esp
push str.ZipCache
call fcn.00421197
mov eax, dword [ebp - 0x22d4]
push ecx
mov byte [ebp - 4], 0x25
mov ecx, esp
mov dword [ebp - 0x22e0], esp
push dword [eax + 0x3c]
call fcn.00421197
mov byte [ebp - 4], 0x18
call fcn.00453850
add esp, 0xc
xor edi, edi
call fcn.004549c0
pop ecx
pop ecx
push esi
push ecx
lea eax, [ebp - 0x22b4]
mov dword [ebp - 0x22ac], esp
mov ecx, esp
push eax
call fcn.00421360
mov edi, ebx
call fcn.004549c0
pop ecx
pop ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x2294]
push ecx
mov ecx, esp
mov dword [ebp - 0x22ac], esp
push eax
push str.Loader_BasicDeploy:_Files_deployment_took__dms
push ecx
call fcn.00453c70
add esp, 0xc
call fcn.00425faf
pop ecx
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042001a
xor edi, edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x22ec]
push ecx
mov ecx, esp
mov dword [ebp - 0x22ac], esp
push eax
push str.Loader_BasicDeploy:_out___dms_
push ecx
call fcn.00453c70
add esp, 0xc
call fcn.00425faf
pop ecx
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042001a
jmp 0x42657f
mov ecx, dword [ebp - 0x22bc]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22c8]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042001a
push 7
jmp 0x42660f