Function at 0x454ea0
Capabilities:
Check if file exists
Check mutex on windows
Create directory
Delete directory
Delete file
Get geographical location

Disassembly:
push ebp
mov ebp, esp
mov eax, 0xd358
call fcn.00469cb0
mov eax, dword [0x4a86f0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 8]
push edi
push str.Begin...
mov dword [ebp - 0xd338], ebx
call fcn.0045f4c0
add esp, 4
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 0xd310], 0
call fcn.00438db0
mov dword [ebp - 0xd320], eax
xor eax, eax
push str.RICHED20.DLL
mov dword [ebp - 0xd324], 0
mov dword [ebp - 0xd328], eax
mov dword [0x4c1264], esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0xd33c], eax
xor eax, eax
push 0x1fe
push eax
mov word [ebp - 0xfc4], ax
lea eax, [ebp - 0xfc2]
push eax
call fcn.0046a330
xor eax, eax
push 0x1fe
push eax
mov word [ebp - 0xbbc], ax
lea eax, [ebp - 0xbba]
push eax
call fcn.0046a330
xor eax, eax
push 0x1fe
push eax
mov word [ebp - 0x19e4], ax
lea eax, [ebp - 0x19e2]
push eax
call fcn.0046a330
xor eax, eax
push 0x3fe
push eax
mov word [ebp - 0x1de4], ax
lea eax, [ebp - 0x1de2]
push eax
call fcn.0046a330
call fcn.0042d180
call fcn.004504f0
push ebx
push 0x1f40
push 0x4ac828
call fcn.0046befa
push 0x4ac828
push str.WinMain____CmdLine:__s
call fcn.0045f4c0
add esp, 0x44
push 0
push 0
push 0x48f400
push 0x48f408
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x455041
push 0x809
push 0x100
lea eax, [ebp - 0x19e4]
push eax
push 0x2c9
push dword [0x4c1264]
call fcn.004510f0
push 0x809
push 0x200
lea eax, [ebp - 0x1de4]
push eax
push 0x2c8
push dword [0x4c1264]
call fcn.004510f0
add esp, 0x28
lea eax, [ebp - 0x19e4]
push 0x40
push eax
lea eax, [ebp - 0x1de4]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push str.WinMain____Help_____mode_parameter
call fcn.0045f4c0
add esp, 4
xor eax, eax
jmp 0x458162
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x464], ax
lea eax, [ebp - 0x462]
push eax
call fcn.0046a330
push str.WinMain____WONDERSHARE
call fcn.0045f4c0
push 0x104
lea eax, [ebp - 0x464]
push eax
push 0x48f400
push str.LANG
push 0x4ac828
call fcn.0042ce50
mov ebx, dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
add esp, 0x24
mov esi, dword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
test eax, eax
jne 0x4550c0
push 0x104
lea eax, [ebp - 0x464]
push eax
push 0x48f400
push str.LANG:
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x455128
lea eax, [ebp - 0x464]
push eax
call ebx
lea eax, [ebp - 0x464]
push eax
call esi
lea eax, [ebp - 0x464]
push eax
call fcn.0046d12f
add esp, 4
mov word [0x4c3894], ax
test ax, ax
jne 0x455117
push 0
call fcn.0042e0f0
add esp, 4
test eax, eax
je 0x455111
lea eax, [ebp - 0x464]
push eax
call fcn.0042d0d0
add esp, 4
mov word [0x4c3894], ax
jmp 0x455117
mov ax, word [0x4c3894]
movzx eax, ax
push eax
push str.WinMain____Language_parameter:__d
call fcn.0045f4c0
add esp, 8
push 0x104
lea eax, [ebp - 0x464]
push eax
push 0x48f400
push str.CMDLINE:
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x455189
lea eax, [ebp - 0x464]
push eax
call ebx
lea eax, [ebp - 0x464]
push eax
call esi
lea eax, [ebp - 0x464]
push eax
push 0x1f40
push 0x4b06a8
call fcn.0046befa
push 0x4b06a8
push str.WinMain____CMDLINE_parameter:__s
call fcn.0045f4c0
add esp, 0x14
xor eax, eax
push 0x4c
push eax
mov word [ebp - 0x25c], ax
lea eax, [ebp - 0x25a]
push eax
call fcn.0046a330
add esp, 0xc
lea eax, [ebp - 0x3ffc]
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
test eax, eax
lea eax, [ebp - 0x25c]
jne 0x4551d9
movdqu xmm0, xmmword [ebp - 0x3ffc]
push 0x27
push eax
sub esp, 0x10
mov eax, esp
movdqu xmmword [eax], xmm0
call fcn.0042db30
add esp, 0x18
jmp 0x4551e9
push str.A6E044B8_6C25_48fc_806B_002A9582C81F
push 0x27
push eax
call fcn.0046befa
add esp, 0xc
mov ebx, dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x25c]
push eax
push 0x4b6188
push 0x4c3678
call ebx
push 0x4c3678
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x455230
push 2
push 0x4c3678
call fcn.0045d9d0
push eax
push 0x4c3678
push str.WinMain____Remove_folder__s___d_
call fcn.0045f4c0
add esp, 0x14
push 0
push 0x4c3678
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push 0x4c3678
test eax, eax
jne 0x45525a
push str.WinMain____Error_create_directory___s__
call fcn.0045f4c0
add esp, 8
xor eax, eax
jmp 0x458162
push str.WinMain____TempPathFCW_s
call fcn.0045f4c0
call fcn.00450c70
xor edi, edi
lea eax, [ebp - 0xc738]
push 0x2a
xorps xmm0, xmm0
mov dword [ebp - 0xd314], edi
push edi
push eax
movdqu xmmword [ebp - 0xd358], xmm0
mov dword [ebp - 0xd348], edi
mov dword [ebp - 0xd344], edi
mov dword [ebp - 0xd340], edi
mov dword [ebp - 0xc73c], edi
call fcn.0046a330
push 0x214
lea eax, [ebp - 0xd308]
mov dword [ebp - 0xd30c], edi
push edi
push eax
call fcn.0046a330
xorps xmm0, xmm0
mov dword [ebp - 0xd300], 1
push 0x4ac620
mov dword [ebp - 0xd334], edi
movq qword [ebp - 0xd330], xmm0
call fcn.0042df80
add esp, 0x24
test eax, eax
jne 0x455322
push str.setup.cfg
push 0x4c3678
push str._s_s
push 0x104
push 0x4ac620
call fcn.0046982e
push 0x4ac620
push 0x48f67c
push 0x88
push dword [0x4c1264]
call fcn.00429c80
add esp, 0x24
push 0x4ac620
call fcn.004513b0
add esp, 4
cmp word [0x4b8c38], di
mov edi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
je 0x455381
push 0x4b8c38
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0xd328], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x455381
push 0x4b8c38
push str.WinMain____Project_already_in_memory___s_
call fcn.0045f4c0
add esp, 8
mov dword [0x4a80cc], 0xb7
jmp 0x457f5f
push 0
push 0
push 0x48f400
push str.NORESUME
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x4553b7
push str.WinMain____Resume_mode_disabled_by_parameter
mov dword [0x4ba7d0], 0
call fcn.0045f4c0
add esp, 4
lea eax, [ebp - 0x25c]
push eax
push 0x4b8c38
call fcn.0046cd59
add esp, 8
test eax, eax
je 0x4553fb
cmp dword [0x4ba7d0], 0
je 0x4553fb
push 0x4b8c38
push 0x4b6188
push 0x4b4f40
call ebx
push 0x4b8c38
push 0x4b4f40
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x45540c
push 0x4b8c38
push 0x4c3678
push 0x4b4f40
call ebx
push 0x4b4f40
call fcn.0042c370
add esp, 4
test eax, eax
jne 0x455478
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
push eax
push 0x4b4f40
push str.WinMain____Error_create_directory___s____d_
mov dword [ebp - 0xd310], eax
call fcn.0045f4c0
add esp, 0xc
cmp dword [ebp - 0xd310], 0xb7
je 0x45546e
push 2
push 0x4b4f40
call fcn.0045d9d0
push eax
push 0x4b4f40
push str.WinMain____Remove_folder__s___d_
call fcn.0045f4c0
add esp, 0x14
jmp 0x457f65
mov dword [ebp - 0xd310], 0
push 0x4b4f40
push str.WinMain____DataPath:__s
call fcn.0045f4c0
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x13d4], ax
lea eax, [ebp - 0x13d2]
push eax
call fcn.0046a330
push str.Binary.tmp
push 0x4c3678
lea eax, [ebp - 0x13d4]
push str._s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x13d4]
push eax
call fcn.0044f9f0
add esp, 0x28
push 1
push 0
push 0x4b4730
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov ecx, dword [0x4c1264]
test eax, eax
cmovne ecx, eax
push ecx
push eax
push 0x4b4730
push str.WinMain____LoadLibrary__s____d__hInstRes:__d_
mov dword [0x4c14e4], ecx
call fcn.0045f4c0
add esp, 0x10
cmp word [0x4b8c86], 0
jne 0x45552a
push 0x100
push 0x4c2e60
push 0x48f84c
push dword [0x4c1264]
call fcn.0045fb60
add esp, 0x10
jmp 0x455541
push 0x4b8c86
push 0x100
push 0x4c2e60
call fcn.0046befa
add esp, 0xc
push 0x4c2e60
push str.WinMain____Title:__s
call fcn.0045f4c0
push 0
push 0
push 0x48f400
push str.INFO
push 0x4ac828
call fcn.0042ce50
add esp, 0x1c
test eax, eax
je 0x455769
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x874], ax
lea eax, [ebp - 0x872]
push eax
call fcn.0046a330
push str.Language_s__available:_n_n
push 0x200
push 0x4b4b40
call fcn.00469454
mov ecx, dword [0x4c38bc]
mov eax, 0x5397829d
mov edi, dword [0x4c38b8]
add esp, 0x18
sub ecx, edi
imul ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x455693
xor ebx, ebx
test eax, eax
je 0x45570f
xor esi, esi
jmp 0x4555e0
push dword [esi + edi + 0x618]
lea eax, [ebp - 0x874]
push 0x48f8d0
push 0x104
push eax
call fcn.0046982e
lea eax, [ebp - 0x874]
push eax
push 0x200
push 0x4b4b40
call fcn.00469454
add esp, 0x1c
lea eax, [ebp - 0x874]
push 0x104
push eax
mov eax, dword [0x4c38b8]
push 2
push dword [esi + eax + 0x618]
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
lea eax, [ebp - 0x874]
push eax
push 0x200
push 0x4b4b40
call fcn.00469454
push 0x48f8dc
push 0x200
push 0x4b4b40
call fcn.00469454
mov ecx, dword [0x4c38bc]
lea esi, [esi + 0x620]
mov edi, dword [0x4c38b8]
mov eax, 0x5397829d
sub ecx, edi
inc ebx
imul ecx
add esp, 0x18
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jb 0x4555e0
jmp 0x45570f
push dword [0x4bfdb9]
lea eax, [ebp - 0x874]
push 0x48f8e0
push 0x104
push eax
call fcn.0046982e
lea eax, [ebp - 0x874]
push eax
push 0x200
push 0x4b4b40
call fcn.00469454
add esp, 0x1c
lea eax, [ebp - 0x874]
push 0x104
push eax
push 2
push dword [0x4bfdb9]
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
lea eax, [ebp - 0x874]
push eax
push 0x200
push 0x4b4b40
call fcn.00469454
push 0x48f8dc
push 0x200
push 0x4b4b40
call fcn.00469454
add esp, 0x18
xor eax, eax
push 0x1fe
push eax
mov word [ebp - 0xdbc], ax
lea eax, [ebp - 0xdba]
push eax
call fcn.0046a330
push 0x809
push 0x100
lea eax, [ebp - 0xdbc]
push eax
push 0x2c9
push dword [0x4c14e4]
call fcn.004510f0
add esp, 0x20
lea eax, [ebp - 0xdbc]
push 0x40
push eax
push 0x4b4b40
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x458147
push 0
push 0
push 0x48f400
push 0x48f8e8
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x45579f
push str.WinMain____DialogInRun_mode_
mov dword [0x4b9d4c], 1
call fcn.0045f4c0
add esp, 4
push 0
push 0
push 0x48f400
push 0x487798
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x4557d5
push str.WinMain____Silent_mode_parameter
mov dword [0x4c2e5c], 1
call fcn.0045f4c0
add esp, 4
push 0
push 0
push 0x48f400
push str.NOBALLOON
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x45580b
push str.WinMain____No_balloon_parameter
mov dword [0x4b9d48], 0
call fcn.0045f4c0
add esp, 4
push 0
push 0
push 0x48f400
push str.FULLSILENT
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x455855
push str.WinMain____Full_Silent_mode_parameter
mov dword [0x4c2e5c], 1
mov dword [0x4b9d48], 0
mov dword [0x4b9d80], 0
call fcn.0045f4c0
add esp, 4
push 0
push 0
push 0x48f400
push 0x48fa3c
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x45588b
push str.WinMain____Force_to_Download_parameter
mov dword [0x4c3898], 1
call fcn.0045f4c0
add esp, 4
push 0
push 0
push 0x48f400
push str.NOLICENSE
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x4558c1
push str.WinMain____No_license_parameter
mov dword [0x4b9d40], 0
call fcn.0045f4c0
add esp, 4
push 0
push 0
push 0x48f400
push str.NOTOOLBAR
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x4558f7
push str.WinMain____No_Toolbar_parameter
mov dword [0x4c0e25], 0
call fcn.0045f4c0
add esp, 4
push 0
push 0
push 0x48f400
push str.NORMALSTATUS
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x45592a
push str.WinMain____NORMALSTATUS_parameter
mov byte [0x4baff8], 1
call fcn.0045f4c0
add esp, 4
push 0
push 0
push 0x48f400
push str.SMALLSTATUS
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x45595d
push str.WinMain____SMALLSATUS_parameter
mov byte [0x4baff8], 0
call fcn.0045f4c0
add esp, 4
push 0
push 0
push 0x48f400
push str.NOLU
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x45599d
push str.WinMain____NOLU_parameter:_LiveUpdate_Disabled_
mov dword [0x4b9ae0], 0
mov dword [0x4c389c], 1
call fcn.0045f4c0
add esp, 4
push 0
push 0
push 0x48f400
push str.NOGA
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x4559d3
push str.WinMain____NOGA_parameter:_Google_Analytics_Disabled_
mov dword [0x4bfdd8], 0
call fcn.0045f4c0
add esp, 4
xor edi, edi
push edi
push edi
push 0x48f400
push str.GA_REG
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x455a04
push str.WinMain____GA_REG_parameter:_Google_Analytics_in_Registry_
mov edi, 1
call fcn.0045f4c0
add esp, 4
push 0x104
lea eax, [ebp - 0x464]
push eax
push 0x48f400
push str.SCRIPT:
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
mov ebx, 1
test eax, eax
je 0x455a8a
lea eax, [ebp - 0x464]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
lea eax, [ebp - 0x464]
push eax
call esi
lea eax, [ebp - 0x464]
push eax
push 0x104
push 0x4ba7d4
call fcn.0046befa
push 0x4ba7d4
call fcn.0042df80
mov ecx, dword [0x4ba7cc]
test eax, eax
cmovne ecx, ebx
push ecx
push 0x4ba7d4
push str.WinMain____ScriptFile:__s___d_
mov dword [0x4ba7cc], ecx
call fcn.0045f4c0
add esp, 0x1c
push 0x104
lea eax, [ebp - 0x464]
push eax
push 0x48f400
push 0x48fdd0
push 0x4ac828
call fcn.0042ce50
mov ebx, dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
add esp, 0x14
test eax, eax
je 0x455b70
lea eax, [ebp - 0x464]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
lea eax, [ebp - 0x464]
push eax
call esi
lea eax, [ebp - 0x464]
push eax
push str.WinMain____Params_X:__s
call fcn.0045f4c0
add esp, 8
lea eax, [ebp - 0x464]
push eax
call ebx
test eax, eax
je 0x455b1d
push 0x4c3268
push 0x104
push 0x4ba5a4
call fcn.0046befa
add esp, 0xc
lea eax, [ebp - 0x464]
push eax
push 0x4ba5a4
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x455b36
lea eax, [ebp - 0x464]
push eax
push 0x104
push 0x4ba5a4
call fcn.0046befa
add esp, 0xc
push 0x4ba5a4
push str.WinMain____TgdFolder:__s
call fcn.0045f4c0
add esp, 8
mov dword [0x4ba7b4], 0
mov dword [0x4b9d34], 0
mov dword [0x4ba7b0], 0
mov dword [0x4b9d38], 0
push 0
push 0
push 0x48f400
push str.VERYSILENT
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x455bf1
push str.WinMain____Very_Silent_mode_parameter
mov dword [0x4c2e5c], 1
mov dword [0x4b9d48], 0
mov dword [0x4b9d80], 0
call fcn.0045f4c0
add esp, 4
cmp word [0x4b06a8], 0
je 0x455bda
push 0x48fea4
push 0x1f40
push 0x4b06a8
call fcn.00469454
jmp 0x455bee
push 0x48feac
push 0x1f40
push 0x4b06a8
call fcn.0046befa
add esp, 0xc
push 0x104
lea eax, [ebp - 0x464]
push eax
push 0x48f400
push str.DIR
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x455c79
cmp word [0x4b06a8], 0
je 0x455c38
push str.__PROGRAMPATH:
push 0x1f40
push 0x4b06a8
call fcn.00469454
jmp 0x455c4c
push str._PROGRAMPATH:
push 0x1f40
push 0x4b06a8
call fcn.0046befa
add esp, 0xc
lea eax, [ebp - 0x464]
push eax
push 0x1f40
push 0x4b06a8
call fcn.00469454
lea eax, [ebp - 0x464]
push eax
push str.WinMain____Targetdir_parameter:__s
call fcn.0045f4c0
add esp, 0x14
push 0
push 0
push 0x48f400
push str.NOREBOOT
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x455cdc
push str.WinMain____NOREBOOT_parameter
call fcn.0045f4c0
add esp, 4
cmp word [0x4b06a8], 0
je 0x455cc5
push str.__NOREBOOT
push 0x1f40
push 0x4b06a8
call fcn.00469454
jmp 0x455cd9
push str._NOREBOOT
push 0x1f40
push 0x4b06a8
call fcn.0046befa
add esp, 0xc
call fcn.0042e190
cmp dword [0x4ba7c4], 0
mov dword [ebp - 0xd31c], eax
je 0x455cf9
test eax, eax
jne 0x455cf9
lea esi, [eax + 1]
jmp 0x455cfb
xor esi, esi
push esi
push str.WinMain____NeedToRunAsAdmin:__d
mov dword [ebp - 0xd324], esi
call fcn.0045f4c0
add esp, 8
test esi, esi
jne 0x457f59
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x66c], ax
lea eax, [ebp - 0x66a]
push eax
call fcn.0046a330
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x11cc], ax
lea eax, [ebp - 0x11ca]
push eax
call fcn.0046a330
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x17e4], ax
lea eax, [ebp - 0x17e2]
push eax
call fcn.0046a330
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push eax
call fcn.0046a330
push 0x4c1057
lea eax, [ebp - 0x66c]
push 0x104
push eax
call fcn.0046befa
push 0x104
lea eax, [ebp - 0x17e4]
push eax
push 0x104
lea eax, [ebp - 0x11cc]
push eax
lea eax, [ebp - 0x66c]
push 0x104
push eax
call fcn.0042e570
add esp, 0x54
cmp dword [0x4bfdd8], esi
jne 0x455e36
test edi, edi
jne 0x455e36
cmp word [ebp - 0x66c], di
je 0x456714
cmp dword [0x4c389c], edi
jne 0x456714
push 0x490020
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.00448ee0
add esp, 0xc
lea eax, [ebp - 0x66c]
push 0x490020
push eax
lea eax, [ebp - 0x20c]
push eax
mov eax, dword [sym.imp.SHLWAPI.dll_PathCombineW]
call eax
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.00448eb0
add esp, 8
jmp 0x456714
xor eax, eax
mov dword [ebp - 0xd318], 1
push 0x50
push eax
mov word [ebp - 0x8384], ax
lea eax, [ebp - 0x8382]
push eax
call fcn.0046a330
push 0x4333
lea eax, [ebp - 0x8332]
push 0
push eax
call fcn.0046a330
push 0x104
lea eax, [ebp - 0x464]
push eax
push str.GAclientID
push 0x4bffe8
push closesocket
call fcn.004490d0
mov ebx, eax
add esp, 0x2c
test ebx, ebx
jne 0x455ebd
push 0x104
lea eax, [ebp - 0x464]
push eax
push str.GAclientID
push 0x4bffe8
push closesocket
call fcn.004490d0
mov ebx, eax
add esp, 0x14
test ebx, ebx
je 0x455f11
lea ecx, [ebp - 0x464]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x455ec6
sub ecx, edx
sar ecx, 1
lea esi, [ecx + 1]
cmp esi, 0x3fffffff
jle 0x455ee4
xor eax, eax
jmp 0x455eff
add esi, esi
mov eax, esi
call fcn.0046db50
mov eax, esp
lea ecx, [ebp - 0x464]
push 3
push esi
push ecx
push eax
call fcn.0044f9b0
push eax
lea eax, [ebp - 0x8332]
push 0x27
push eax
call fcn.0046a482
add esp, 0xc
push 0x490020
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x20c]
push eax
mov eax, dword [sym.imp.SHLWAPI.dll_PathCombineW]
call eax
test edi, edi
je 0x45616c
lea eax, [ebp - 0xd318]
push eax
push 0x490020
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.00449050
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.0046befa
mov esi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x20c]
add esp, 0x1c
push 0x490020
push eax
call esi
push 0x29
lea eax, [ebp - 0x8384]
push eax
push str.TrackingId
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004490d0
add esp, 0x14
test eax, eax
jne 0x455fdd
push 0x4c01f0
lea eax, [ebp - 0x8384]
push 0x29
push eax
call fcn.0046befa
push 0x104
push 0x4c01f0
push 1
push str.TrackingId
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004493c0
add esp, 0x24
push 0x65
lea eax, [ebp - 0x6705]
push eax
push 0x48f84c
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004490d0
add esp, 0x14
test eax, eax
jne 0x456038
push 0x4c03f8
lea eax, [ebp - 0x6705]
push 0x65
push eax
call fcn.0046befa
push 0x51
push 0x4c03f8
push 1
push 0x48f84c
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004493c0
add esp, 0x24
push 0x65
lea eax, [ebp - 0x663b]
push eax
push 0x48d8c4
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004490d0
add esp, 0x14
test eax, eax
jne 0x456093
push 0x4c049e
lea eax, [ebp - 0x663b]
push 0x65
push eax
call fcn.0046befa
push 0x51
push 0x4c049e
push 1
push 0x48d8c4
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004493c0
add esp, 0x24
push str.Campaign
lea eax, [ebp - 0x20c]
push eax
call esi
push 0x65
lea eax, [ebp - 0x5f67]
push eax
push 0x490054
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004490d0
push 0x65
lea eax, [ebp - 0x6369]
push eax
push str.Name
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004490d0
push 0x104
lea eax, [ebp - 0x6571]
push eax
push str.Content
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004490d0
push 0x65
lea eax, [ebp - 0x629f]
push eax
push str.Source
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004490d0
add esp, 0x50
lea eax, [ebp - 0x61d5]
push 0x33
push eax
push str.Medium
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004490d0
push 0x104
lea eax, [ebp - 0x616f]
push eax
push str.Keyword
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004490d0
add esp, 0x28
jmp 0x456601
push 1
push 0x490020
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.004494b0
add esp, 0x10
lea eax, [ebp - 0x20c]
cmp word [0x4c01f0], 0
je 0x4561b8
push 0x104
push 0x4c01f0
push 1
push str.TrackingId
push eax
push closesocket
call fcn.004493c0
add esp, 0x18
jmp 0x4561cb
push str.TrackingId
push eax
push closesocket
call fcn.00448ee0
add esp, 0xc
push 0x4c01f0
lea eax, [ebp - 0x8384]
push 0x29
push eax
call fcn.0046befa
add esp, 0xc
cmp dword [0x4c049a], 0
jne 0x456241
cmp word [0x4c03f8], 0
lea eax, [ebp - 0x20c]
je 0x456218
push 0x51
push 0x4c03f8
push 1
push 0x48f84c
push eax
push closesocket
call fcn.004493c0
add esp, 0x18
jmp 0x45622b
push 0x48f84c
push eax
push closesocket
call fcn.00448ee0
add esp, 0xc
push 0x4c03f8
lea eax, [ebp - 0x6705]
push 0x65
push eax
call fcn.0046befa
add esp, 0xc
cmp dword [0x4c0540], 0
jne 0x4562a1
cmp word [0x4c049e], 0
lea eax, [ebp - 0x20c]
je 0x456278
push 0x51
push 0x4c049e
push 1
push 0x48d8c4
push eax
push closesocket
call fcn.004493c0
add esp, 0x18
jmp 0x45628b
push 0x48d8c4
push eax
push closesocket
call fcn.00448ee0
add esp, 0xc
push 0x4c049e
lea eax, [ebp - 0x663b]
push 0x65
push eax
call fcn.0046befa
add esp, 0xc
push str.Campaign
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
cmp word [0x4c0d56], 0
lea eax, [ebp - 0x20c]
je 0x4562e1
push 0x65
push 0x4c0d56
push 1
push 0x490054
push eax
push closesocket
call fcn.004493c0
add esp, 0x18
jmp 0x4562f4
push 0x490054
push eax
push closesocket
call fcn.00448ee0
add esp, 0xc
cmp word [0x4c0954], 0
lea eax, [ebp - 0x20c]
je 0x456322
push 0x65
push 0x4c0954
push 1
push str.Name
push eax
push closesocket
call fcn.004493c0
add esp, 0x18
jmp 0x456335
push str.Name
push eax
push closesocket
call fcn.00448ee0
add esp, 0xc
cmp word [0x4c074c], 0
lea eax, [ebp - 0x20c]
je 0x456366
push 0x104
push 0x4c074c
push 1
push str.Content
push eax
push closesocket
call fcn.004493c0
add esp, 0x18
jmp 0x456379
push str.Content
push eax
push closesocket
call fcn.00448ee0
add esp, 0xc
cmp word [0x4c0a1e], 0
lea eax, [ebp - 0x20c]
je 0x4563a7
push 0x65
push 0x4c0a1e
push 1
push str.Source
push eax
push closesocket
call fcn.004493c0
add esp, 0x18
jmp 0x4563ba
push str.Source
push eax
push closesocket
call fcn.00448ee0
add esp, 0xc
cmp word [0x4c0ae8], 0
lea eax, [ebp - 0x20c]
je 0x4563e8
push 0x33
push 0x4c0ae8
push 1
push str.Medium
push eax
push closesocket
call fcn.004493c0
add esp, 0x18
jmp 0x4563fb
push str.Medium
push eax
push closesocket
call fcn.00448ee0
add esp, 0xc
cmp word [0x4c0b4e], 0
lea eax, [ebp - 0x20c]
je 0x45642c
push 0x104
push 0x4c0b4e
push 1
push str.Keyword
push eax
push closesocket
call fcn.004493c0
add esp, 0x18
jmp 0x45643f
push str.Keyword
push eax
push closesocket
call fcn.00448ee0
add esp, 0xc
cmp word [0x4c0d56], 0
lea eax, [ebp - 0x20c]
je 0x45646d
push 0x65
push 0x4c0d56
push 1
push 0x490054
push eax
push closesocket
call fcn.004493c0
add esp, 0x18
jmp 0x456480
push 0x490054
push eax
push closesocket
call fcn.00448ee0
add esp, 0xc
push 0x4c0d56
lea eax, [ebp - 0x5f67]
push 0x65
push eax
call fcn.0046befa
push 0x4c0b4e
lea eax, [ebp - 0x616f]
push 0x104
push eax
call fcn.0046befa
push 0x4c0ae8
lea eax, [ebp - 0x61d5]
push 0x33
push eax
call fcn.0046befa
push 0x4c0954
lea eax, [ebp - 0x6369]
push 0x65
push eax
call fcn.0046befa
push 0x4c0a1e
lea eax, [ebp - 0x629f]
push 0x65
push eax
call fcn.0046befa
xor eax, eax
push 0x50
push eax
mov word [ebp - 0xc70c], ax
lea eax, [ebp - 0xc70a]
push eax
call fcn.0046a330
add esp, 0x48
lea eax, [ebp - 0xc6ba]
push 0x4333
push 0
push eax
call fcn.0046a330
xor eax, eax
push 0x1ffe
push eax
mov word [ebp - 0x3fec], ax
lea eax, [ebp - 0x3fea]
push eax
call fcn.0046a330
lea eax, [ebp - 0x5f67]
push eax
lea eax, [ebp - 0xa2ef]
push 0x65
push eax
call fcn.0046befa
lea eax, [ebp - 0x616f]
push eax
lea eax, [ebp - 0xa4f7]
push 0x104
push eax
call fcn.0046befa
lea eax, [ebp - 0x61d5]
push eax
lea eax, [ebp - 0xa55d]
push 0x33
push eax
call fcn.0046befa
lea eax, [ebp - 0x6369]
push eax
lea eax, [ebp - 0xa6f1]
push 0x65
push eax
call fcn.0046befa
add esp, 0x48
lea eax, [ebp - 0x629f]
push eax
lea eax, [ebp - 0xa627]
push 0x65
push eax
call fcn.0046befa
add esp, 0xc
lea eax, [ebp - 0x3fec]
push 0x1000
push eax
lea eax, [ebp - 0xc70c]
push eax
call fcn.00434fc0
cmp word [ebp - 0x3fec], 0
je 0x4565e8
push 0x104
lea eax, [ebp - 0x3fec]
push eax
push 1
push str.Params
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004493c0
add esp, 0x18
jmp 0x456601
push str.Params
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.00448ee0
add esp, 0xc
cmp dword [ebp - 0xd318], 0
je 0x45670e
push 0x4c0544
lea eax, [ebp - 0x752f]
push 0x104
push eax
call fcn.0046befa
push str.appview
lea eax, [ebp - 0x830b]
push 0x1e
push eax
call fcn.0046befa
add esp, 0x18
cmp dword [0x4bfddc], 0
jne 0x456668
lea eax, [ebp - 0x8384]
push eax
push 0x4bfde0
call fcn.004355a0
lea eax, [ebp - 0x8332]
push eax
push str.GAParams.UniqueId:__s
call fcn.0045f820
add esp, 8
test ebx, ebx
jne 0x45670e
cmp word [0x4bffe8], bx
je 0x45670e
cmp byte [ebp - 0x8332], bl
je 0x45670e
lea ecx, [ebp - 0x8332]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x456692
sub ecx, edx
lea esi, [ecx + 1]
cmp esi, 0x3fffffff
jle 0x4566aa
xor eax, eax
jmp 0x4566c4
lea eax, [esi + esi]
call fcn.0046db50
mov eax, esp
lea ecx, [ebp - 0x8332]
push 3
push esi
push ecx
push eax
call fcn.00434c30
push eax
lea eax, [ebp - 0x464]
push 0x104
push eax
call fcn.0046befa
add esp, 0xc
lea eax, [ebp - 0x464]
cmp dword [ebp - 0xd31c], 0
push 0x104
push eax
push 1
push str.GAClientID
push 0x4bffe8
je 0x456701
push closesocket
jmp 0x456706
push closesocket
call fcn.004493c0
add esp, 0x18
mov ebx, dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
call fcn.00452d50
mov dword [0x4c1964], eax
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x1fec], ax
lea eax, [ebp - 0x1fea]
push eax
call fcn.0046a330
add esp, 0xc
lea eax, [ebp - 0x1fec]
push str.IAMCu.dll
push 0x4c3470
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [0x4c0e31], 0
je 0x456777
cmp dword [ebp - 0xd320], 0
je 0x456777
lea eax, [ebp - 0x1fec]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x4c2c3c], eax
push 0
push 0x4abff8
push dword [0x4c1264]
call fcn.00429c00
add esp, 0xc
mov dword [0x4c1724], eax
test eax, eax
jne 0x4567bb
push 0x4ac000
push str._BV69_FCW_
push 0x4ac210
call fcn.00433120
mov ecx, eax
add esp, 0xc
mov eax, dword [0x4c1724]
mov dword [0x4c2e54], ecx
jmp 0x4567c1
mov ecx, dword [0x4c2e54]
cmp word [0x4ba5a4], 0
je 0x4567d4
cmp dword [0x4b9d38], 0
je 0x456850
test eax, eax
jne 0x4567f5
test ecx, ecx
jne 0x4567f5
push 0x4ac008
push 0x104
push 0x4ba5a4
call fcn.0046befa
add esp, 0xc
jmp 0x456850
push str.A6E044B8_6C25_48fc_806B_002A9582C81F
push 0x4b8c38
call fcn.0046cd59
add esp, 8
test eax, eax
je 0x45683b
cmp dword [0x4ba7d0], 0
je 0x45683b
push 0x4b8c38
push 0x4b6188
push 0x4ba5a4
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push str.7B28E39C_883C_4f49_ABFB_5D16796F2DD9
push 0x4ba5a4
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x456850
push str.7B28E39C_883C_4f49_ABFB_5D16796F2DD9
push 0x4c3678
push 0x4ba5a4
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x104
push 0x4b9f8c
call fcn.00453150
add esp, 8
push 0x4b9f8c
call ebx
push 0x4b9f8c
test eax, eax
je 0x456886
mov ebx, dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4ba5a4
push 0x4b4528
call ebx
jmp 0x456897
push 0x4b4528
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ebx, dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4b4528
push str.WinMain____ExeFile:__s
call fcn.0045f4c0
add esp, 8
mov esi, 2
cmp dword [0x4bfdc5], 0
je 0x4569eb
cmp dword [0x4c2e5c], 0
jne 0x4569eb
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c14e4]
mov dword [ebp - 0xd358], eax
mov eax, dword [0x4c38b8]
push 0x4c38b8
mov eax, dword [ecx + eax + 0x618]
lea ecx, [ebp - 0xd348]
mov dword [ebp - 0xd354], eax
call fcn.0044f830
mov ecx, dword [0x4bfdc9]
mov eax, dword [0x4bfdbd]
neg ecx
mov dword [ebp - 0xd34c], eax
mov eax, dword [0x4b9d5c]
sbb ecx, ecx
and ecx, 8
neg eax
sbb eax, eax
xor edx, edx
and eax, 4
or ecx, eax
cmp dword [0x4b9d58], edx
mov eax, esi
cmovne eax, edx
or ecx, eax
lea eax, [ebp - 0xd358]
push eax
push edx
mov dword [ebp - 0xd350], ecx
call fcn.004646b0
mov edi, eax
push edi
push str.WinMain____Dialog_choiceLang:__d
mov dword [ebp - 0xd314], edi
call fcn.0045f4c0
add esp, 0x10
cmp edi, 1
je 0x456971
mov dword [ebp - 0xd310], 0x4c7
jmp 0x457f59
mov eax, dword [ebp - 0xd34c]
lea ecx, [ebp - 0x13d4]
push ecx
push eax
mov dword [0x4bfdbd], eax
call fcn.0044ff50
mov eax, dword [0x4c14e4]
add esp, 8
test eax, eax
je 0x4569b7
cmp eax, dword [0x4c1264]
je 0x4569b7
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push eax
push 0x4b4730
push str.WinMain____unload__s___d
call fcn.0045f4c0
add esp, 0xc
push 1
push 0
push 0x4b4730
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov ecx, dword [0x4c1264]
test eax, eax
cmovne ecx, eax
push ecx
push eax
push 0x4b4730
push str.WinMain____LoadLibrary__s____d__hInstRes:__d_
mov dword [0x4c14e4], ecx
call fcn.0045f4c0
add esp, 0x10
cmp dword [0x4b9ae0], 0
mov esi, dword [sym.imp.USER32.dll_MessageBoxW]
je 0x456ab1
push dword [0x4b9aec]
lea eax, [ebp - 0xd310]
push dword [0x4b9ae8]
push eax
push 0x4ac210
push 0x4b94c8
call fcn.00436f80
mov ecx, eax
add esp, 0x14
mov dword [0x4b9ae0], ecx
test ecx, ecx
je 0x456b3f
cmp dword [0x4b9af8], 0
je 0x456a9d
cmp dword [0x4c2e5c], 0
jne 0x456a9d
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c38b8]
push dword [ecx + eax + 0x618]
lea eax, [ebp - 0xbbc]
push 0x100
push eax
push 0x2ca
push dword [0x4c14e4]
call fcn.004510f0
add esp, 0x14
lea eax, [ebp - 0xbbc]
push 0x40024
push 0x4c2400
push eax
push 0
call esi
xor ecx, ecx
cmp eax, 6
sete cl
mov dword [0x4b9ae0], ecx
test ecx, ecx
jne 0x457ed4
cmp dword [0x4b9af0], ecx
jne 0x457f59
xor eax, eax
mov byte [ebp - 0xd318], 0
push 0x206
push eax
mov word [ebp - 0x15dc], ax
lea eax, [ebp - 0x15da]
push eax
call fcn.0046a330
mov eax, dword [0x4c0e25]
add esp, 0xc
test eax, eax
je 0x456bab
push str.TBI.exe
push 0x4c3678
lea eax, [ebp - 0x15dc]
push eax
call ebx
call fcn.00427a50
cmp dword [0x4c1968], 0
mov byte [ebp - 0xd318], al
jne 0x456ba1
push 0x4c198e
push 0x4c1978
push dword [ebp - 0xd318]
call fcn.00427530
add esp, 0xc
test eax, eax
jne 0x456b3b
lea eax, [ebp - 0x15dc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x456ba1
xor eax, eax
jmp 0x456ba6
cmp dword [0x4b9af4], 0
je 0x456ab1
push 0
push 0x100
lea eax, [ebp - 0xbbc]
push eax
push dword [ebp - 0xd310]
call fcn.00450210
add esp, 0x10
test eax, eax
je 0x457f59
cmp dword [0x4c2e5c], 0
jne 0x457f59
push 0
push 0
push 0x4b94c8
lea eax, [ebp - 0xbbc]
push eax
push 0x4c2400
push 0
call fcn.004511f0
add esp, 0x18
jmp 0x457f59
mov eax, 1
mov dword [0x4c0e25], eax
push eax
push str.WinMain____Toolbar:__d
call fcn.0045f4c0
add esp, 8
lea eax, [ebp - 0x13d4]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [0x4b9d50], 0
je 0x456d36
mov ecx, dword [0x4ab1b0]
mov eax, 0x14d843bf
sub ecx, dword [0x4ab1ac]
xor ebx, ebx
imul ecx
xor edi, edi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x456cd0
xor esi, esi
lea esp, [esp]
test ebx, ebx
jne 0x456d36
mov eax, dword [0x4ab1ac]
add eax, 0x200
add eax, esi
push eax
push str.WinMain____Platform:__s
call fcn.0045f4c0
mov eax, dword [0x4ab1ac]
add eax, 0x400
add eax, esi
push str.Win32
push eax
call fcn.0046cd59
add esp, 0x10
test eax, eax
jne 0x456c48
cmp dword [0x4ab1a4], ebx
sete bl
jmp 0x456c70
mov eax, dword [0x4ab1ac]
add eax, 0x400
add eax, esi
push str.Win64
push eax
call fcn.0046cd59
add esp, 8
mov ebx, 1
test eax, eax
cmove ebx, dword [0x4ab1a4]
push ebx
push str.WinMain____ProcArchitecture:_Continue:__d
call fcn.0045f4c0
add esp, 8
test ebx, ebx
je 0x456c9a
mov eax, dword [0x4ab1ac]
add eax, 0x600
add eax, esi
push edi
push eax
call fcn.0042c190
add esp, 8
mov ebx, eax
mov ecx, dword [0x4ab1b0]
mov eax, 0x14d843bf
sub ecx, dword [0x4ab1ac]
inc edi
imul ecx
add esi, 0x624
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x456c00
test ebx, ebx
jne 0x456d36
mov esi, dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [0x4c2e5c], 0
mov dword [ebp - 0xd310], 0xa
jne 0x457f59
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c38b8]
push dword [ecx + eax + 0x618]
lea eax, [ebp - 0xbbc]
push 0x100
push eax
push 0x25f
push dword [0x4c14e4]
call fcn.004510f0
add esp, 0x14
lea eax, [ebp - 0xbbc]
push 0x40010
push 0x4c2400
push eax
push 0
call esi
jmp 0x457f59
mov ebx, dword [ebp - 0xd314]
lea esp, [esp]
cmp dword [0x4b9d3c], 0
je 0x456e90
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x874], ax
lea eax, [ebp - 0x872]
push eax
call fcn.0046a330
push 0x104
lea eax, [ebp - 0x874]
push eax
push 0x48f400
push 0x4902d4
push 0x4ac828
call fcn.0042ce50
add esp, 0x20
test eax, eax
jne 0x456db6
push 0x104
lea eax, [ebp - 0x874]
push eax
push 0x48f400
push str._PASSWORD:
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x456e17
lea eax, [ebp - 0x874]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
push 0x10
lea eax, [ebp - 0x874]
push eax
lea eax, [ebp - 0xc730]
push 0x11
push eax
call fcn.0046cbf5
add esp, 0x10
lea eax, [ebp - 0x874]
mov ecx, 0x4b94a6
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x456e0e
test dx, dx
je 0x456e0a
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x456e0e
add eax, 4
add ecx, 4
test dx, dx
jne 0x456de8
xor eax, eax
jmp 0x456e13
sbb eax, eax
or eax, 1
test eax, eax
je 0x456e90
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c14e4]
mov dword [ebp - 0xc73c], eax
mov eax, dword [0x4c38b8]
mov eax, dword [ecx + eax + 0x618]
mov ecx, dword [0x4b9d5c]
neg ecx
mov dword [ebp - 0xc738], eax
mov eax, 2
sbb ecx, ecx
xor edx, edx
and ecx, 4
cmp dword [0x4b9d58], edx
cmovne eax, edx
or ecx, eax
lea eax, [ebp - 0xc73c]
push eax
push edx
mov dword [ebp - 0xc734], ecx
call fcn.00431d40
mov ebx, eax
push ebx
push str.WinMain____Dialog_password:__d
mov dword [ebp - 0xd314], ebx
call fcn.0045f4c0
add esp, 0x10
cmp ebx, 1
jne 0x456962
nop
cmp dword [0x4b9d40], 0
je 0x456f41
cmp dword [0x4c2e5c], 0
jne 0x456f41
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c14e4]
mov dword [ebp - 0xd30c], eax
mov eax, dword [0x4c38b8]
push 0x4b4938
push 0x104
mov eax, dword [ecx + eax + 0x618]
mov dword [ebp - 0xd308], eax
lea eax, [ebp - 0xd2fc]
push eax
call fcn.0046befa
mov edx, dword [ebp - 0xd304]
test ebx, ebx
mov ecx, dword [0x4b9d5c]
mov eax, 1
cmovne edx, eax
neg ecx
mov eax, 2
sbb ecx, ecx
xor esi, esi
and ecx, 4
cmp dword [0x4b9d58], esi
cmovne eax, esi
or ecx, eax
lea eax, [ebp - 0xd30c]
push eax
or edx, ecx
push esi
mov dword [ebp - 0xd304], edx
call fcn.00431390
mov ebx, eax
push ebx
push str.WinMain____Dialog_license:__d
mov dword [ebp - 0xd314], ebx
call fcn.0045f4c0
add esp, 0x1c
cmp ebx, 3
je 0x456d40
cmp ebx, 1
je 0x456f57
test ebx, ebx
jne 0x456962
xor eax, eax
push 0xa0
push eax
mov word [ebp - 0x9bc], ax
lea eax, [ebp - 0x9ba]
push eax
call fcn.0046a330
xor eax, eax
push 0xa0
push eax
mov word [ebp - 0x918], ax
lea eax, [ebp - 0x916]
push eax
call fcn.0046a330
lea eax, [ebp - 0x9bc]
push 0x51
push eax
call fcn.00448cc0
lea eax, [ebp - 0x918]
push 0x51
push eax
call fcn.00449320
lea eax, [ebp - 0x9bc]
push eax
push str.WinMain____CompanyName:__s
call fcn.0045f4c0
lea eax, [ebp - 0x918]
push eax
push str.WinMain____UserName:__s
call fcn.0045f4c0
add esp, 0x38
mov dword [ebp - 0xd31c], 0
jmp 0x456fe0
mov al, byte [0x4c0e20]
cmp al, 1
je 0x457007
cmp al, 2
je 0x457007
cmp al, 3
je 0x457007
cmp dword [0x4c0e21], 0
jne 0x457007
cmp dword [0x4c0e29], 0
je 0x457317
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xdc4], ax
lea eax, [ebp - 0xdc2]
push eax
call fcn.0046a330
push 0x104
lea eax, [ebp - 0xdc4]
push eax
push 0x48f400
push 0x4903e8
push 0x4ac828
call fcn.0042ce50
add esp, 0x20
test eax, eax
jne 0x457070
push 0x104
lea eax, [ebp - 0xdc4]
push eax
push 0x48f400
push str._SERIAL:
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x4570e6
lea eax, [ebp - 0xdc4]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
lea eax, [ebp - 0xdc4]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x457086
sub eax, edx
sar eax, 1
inc eax
cmp eax, 0x3fffffff
jg 0x4570d1
lea edi, [eax + eax]
mov eax, edi
call fcn.0046db50
mov esi, esp
test esi, esi
je 0x4570d1
push 0
push 0
push edi
push esi
push 0xffffffffffffffff
lea eax, [ebp - 0xdc4]
mov byte [esi], 0
push eax
push 0
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
neg eax
sbb eax, eax
and eax, esi
jmp 0x4570d3
xor eax, eax
push eax
push 0x104
push 0x4c0e35
call fcn.0046a482
add esp, 0xc
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x874], ax
lea eax, [ebp - 0x872]
push eax
call fcn.0046a330
add esp, 0xc
lea eax, [ebp - 0x11cc]
push eax
push 0x4b8000
lea eax, [ebp - 0x874]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x17e4]
push eax
lea eax, [ebp - 0x874]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x874]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x45716c
push 3
lea eax, [ebp - 0x874]
push 0x10000000
push eax
call fcn.0042bc10
push eax
lea eax, [ebp - 0x874]
push eax
push str.AddAccessRights__s____d
call fcn.0045f4c0
add esp, 0x18
jmp 0x457198
cmp dword [0x4ab18c], 0
je 0x457198
lea eax, [ebp - 0x11cc]
push eax
push 0x23
call fcn.0042c5b0
push eax
lea eax, [ebp - 0x11cc]
push eax
push str.CreateFreeDirectory__s____d
call fcn.0045f4c0
add esp, 0x14
lea eax, [ebp - 0x874]
push eax
call fcn.0042c370
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xc948], ax
lea eax, [ebp - 0xc946]
push eax
call fcn.0046a330
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.00448e70
push 0x4c103d
lea eax, [ebp - 0xc948]
push 0x104
push eax
call fcn.0046befa
push 0x104
lea eax, [ebp - 0xc948]
push eax
push 1
push 0x490478
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.004493c0
push 0x104
lea eax, [ebp - 0x874]
push eax
push 1
push 0x490488
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.004493c0
add esp, 0x54
lea eax, [ebp - 0x66c]
push 0x104
push 0x4ba5a4
push 1
push str.MainPath
push eax
push closesocket
call fcn.004493c0
mov al, byte [0x4c0e20]
add esp, 0x18
cmp al, 1
jne 0x457286
push 0x27
push 0x4c1490
push 1
push str.Guid
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.004493c0
add esp, 0x18
jmp 0x457312
cmp al, 3
jne 0x457317
mov ecx, 0x4c1952
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x457296
sub ecx, edx
lea edi, [ecx + 1]
cmp edi, 0x3fffffff
jg 0x4572d7
lea eax, [edi + edi]
call fcn.0046db50
mov esi, esp
test esi, esi
je 0x4572d7
push edi
push esi
push 0xffffffffffffffff
xor eax, eax
push 0x4c1952
push eax
push 3
mov word [esi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
neg eax
sbb eax, eax
and eax, esi
jmp 0x4572d9
xor eax, eax
push eax
lea eax, [ebp - 0xc948]
push 0x104
push eax
call fcn.0046befa
push 0x104
lea eax, [ebp - 0xc948]
push eax
push 1
push str.SerialId
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.004493c0
add esp, 0x24
mov al, byte [0x4c0e20]
xor esi, esi
cmp al, 1
jne 0x45754a
push 0x574
lea eax, [ebp - 0xcef0]
mov dword [ebp - 0xcef4], esi
push esi
push eax
call fcn.0046a330
lea eax, [ebp - 0xceec]
push eax
push 0x4c1490
call fcn.0042f490
add esp, 0x14
cmp dword [ebp - 0xd31c], esi
je 0x457373
movdqu xmm0, xmmword [ebp - 0xceec]
push 0x4c0e35
sub esp, 0x10
mov eax, esp
movdqu xmmword [eax], xmm0
call fcn.00459d80
add esp, 0x14
cmp dword [0x4c1280], esi
je 0x45739e
movdqu xmm0, xmmword [ebp - 0xceec]
sub esp, 0x10
mov eax, esp
movdqu xmmword [eax], xmm0
call fcn.00459e50
mov esi, eax
add esp, 0x10
test esi, esi
jne 0x457778
imul edx, dword [0x4bfdbd], 0x620
mov ecx, dword [0x4c14e4]
cmp dword [0x4c127c], 0
mov dword [ebp - 0xcef4], ecx
mov ecx, dword [0x4c38b8]
sete al
inc al
mov ecx, dword [edx + ecx + 0x618]
mov dword [ebp - 0xcef0], ecx
mov ecx, dword [0x4b9d5c]
neg ecx
mov byte [ebp - 0xcedc], al
mov eax, 0x400
sbb ecx, ecx
xor edx, edx
and ecx, 0x800
cmp dword [0x4b9d58], edx
cmovne eax, edx
or ecx, eax
or ecx, dword [0x4c1284]
mov dword [ebp - 0xcedb], ecx
test ebx, ebx
je 0x457417
or ecx, 0x200
mov dword [ebp - 0xcedb], ecx
push ecx
push str.WinMain____SNV3Info.uiDlgOption:__d
call fcn.0045f4c0
mov al, byte [0x4c14de]
mov byte [ebp - 0xced7], al
movzx eax, al
push eax
push eax
push str.WinMain____SNV3Info.byProductCode:__d___x_
call fcn.0045f4c0
mov al, byte [0x4c1260]
mov byte [ebp - 0xced5], al
mov al, byte [0x4c1261]
mov byte [ebp - 0xced6], al
mov al, byte [0x4c14df]
mov byte [ebp - 0xced4], al
mov al, byte [0x4c14e0]
mov byte [ebp - 0xced2], al
mov al, byte [0x4c1263]
mov byte [ebp - 0xced3], al
lea eax, [ebp - 0x9bc]
push eax
lea eax, [ebp - 0xcac0]
push 0x51
push eax
call fcn.0046befa
lea eax, [ebp - 0x918]
push eax
lea eax, [ebp - 0xca1e]
push 0x51
push eax
call fcn.0046befa
push 0x4c1288
lea eax, [ebp - 0xccc8]
push 0x104
push eax
call fcn.0046befa
push 0x4c0e35
lea eax, [ebp - 0xced0]
push 0x104
push eax
call fcn.0046a482
add esp, 0x44
lea eax, [ebp - 0xcdcc]
push 0x4c0f39
push 0x104
push eax
call fcn.0046a482
add esp, 0xc
cmp dword [0x4c2e5c], 0
jne 0x457528
lea eax, [ebp - 0xcef4]
push eax
push 0
call fcn.00458d90
mov ebx, eax
push ebx
push str.WinMain____Dialog_SerialV3:__d
mov dword [ebp - 0xd314], ebx
call fcn.0045f4c0
add esp, 0x10
cmp ebx, 3
je 0x456e90
cmp ebx, 1
je 0x457528
test ebx, ebx
jne 0x456962
lea eax, [ebp - 0xcef4]
push eax
call fcn.00459f10
add esp, 4
test eax, eax
je 0x457a53
lea eax, [ebp - 0xced0]
jmp 0x457765
cmp al, 3
jne 0x457778
push 0x775
lea eax, [ebp - 0xd0f0]
mov dword [ebp - 0xd0f4], esi
push 0
push eax
call fcn.0046a330
push 0x4c1952
lea eax, [ebp - 0xd0ec]
push 0xf
push eax
call fcn.0046a482
add esp, 0x18
cmp dword [ebp - 0xd31c], esi
je 0x45759f
lea eax, [ebp - 0xd0ec]
push eax
lea eax, [ebp - 0x66c]
push eax
call fcn.0045b6f0
add esp, 8
cmp dword [0x4c1740], esi
je 0x4575c7
lea eax, [ebp - 0xd0ec]
push eax
lea eax, [ebp - 0x66c]
push eax
call fcn.0045b740
mov esi, eax
add esp, 8
test esi, esi
jne 0x457778
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c14e4]
cmp dword [0x4c173c], 0
mov dword [ebp - 0xd0f4], eax
mov eax, dword [0x4c38b8]
mov eax, dword [ecx + eax + 0x618]
mov ecx, dword [0x4b9d5c]
mov dword [ebp - 0xd0f0], eax
sete al
inc al
neg ecx
mov byte [ebp - 0xd0dd], al
mov eax, 0x400
sbb ecx, ecx
xor edx, edx
and ecx, 0x800
cmp dword [0x4b9d58], edx
cmovne eax, edx
or ecx, eax
or ecx, dword [0x4c1744]
mov dword [ebp - 0xd0dc], ecx
test ebx, ebx
je 0x45763e
or ecx, 0x200
mov dword [ebp - 0xd0dc], ecx
lea eax, [ebp - 0x9bc]
push eax
lea eax, [ebp - 0xcabf]
push 0x51
push eax
call fcn.0046befa
lea eax, [ebp - 0x918]
push eax
lea eax, [ebp - 0xca1d]
push 0x51
push eax
call fcn.0046befa
push 0x4c174a
lea eax, [ebp - 0xccc7]
push 0x104
push eax
call fcn.0046befa
push 0x4c0e35
lea eax, [ebp - 0xd0d7]
push 0x104
push eax
call fcn.0046a482
push 0x4c0f39
lea eax, [ebp - 0xcfd3]
push 0x104
push eax
call fcn.0046a482
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0xcecf]
push 0x104
push eax
call fcn.0046befa
add esp, 0x48
lea eax, [ebp - 0x66c]
push eax
push str.WinMain____AQTOOLSINFO.szProductKey:__s
call fcn.0045f4c0
push 0x4c1952
push str.WinMain____AQTOOLSSERIALV5.szSerialID:__s
call fcn.0045f820
add esp, 0x10
cmp dword [0x4c2e5c], 0
jne 0x45772b
lea eax, [ebp - 0xd0f4]
push eax
push 0
call fcn.0045aa90
mov ebx, eax
push ebx
push str.WinMain____Dialog_SerialV5_d
mov dword [ebp - 0xd314], ebx
call fcn.0045f4c0
add esp, 0x10
cmp ebx, 3
je 0x456e90
cmp ebx, 1
je 0x45772b
test ebx, ebx
jne 0x456962
lea eax, [ebp - 0xd0d7]
push eax
push str.WinMain____SNV5Info.szSerial:__s
call fcn.0045f820
lea eax, [ebp - 0xd0d7]
push eax
lea eax, [ebp - 0x66c]
push 0x4c1952
push eax
call fcn.0045b7f0
add esp, 0x14
test eax, eax
je 0x457a53
lea eax, [ebp - 0xd0d7]
push eax
push 0x104
push 0x4c0e35
call fcn.0046a482
add esp, 0xc
cmp dword [0x4c0e21], 0
je 0x457af2
test esi, esi
jne 0x457af2
cmp dword [0x4abffc], esi
je 0x45784e
cmp dword [ebp - 0xd320], esi
jne 0x45784e
cmp dword [0x4c2e5c], esi
jne 0x457ae3
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c38b8]
push dword [ecx + eax + 0x618]
lea eax, [ebp - 0xfc4]
push 0x100
push eax
push 0x258
push dword [0x4c14e4]
call fcn.004510f0
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c38b8]
push dword [ecx + eax + 0x618]
lea eax, [ebp - 0xbbc]
push 0x100
push eax
push 0x2c3
push dword [0x4c14e4]
call fcn.004510f0
mov esi, dword [sym.imp.USER32.dll_MessageBoxW]
add esp, 0x28
mov edi, edi
push 0x25
lea eax, [ebp - 0xfc4]
push eax
lea eax, [ebp - 0xbbc]
push eax
push 0
call esi
cmp eax, 2
je 0x456962
push 0
call fcn.00409430
mov dword [ebp - 0xd320], eax
test eax, eax
je 0x457820
mov ecx, 0x4c0e35
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x457856
sub ecx, edx
lea edi, [ecx + 1]
cmp edi, 0x3fffffff
jg 0x457897
lea eax, [edi + edi]
call fcn.0046db50
mov esi, esp
test esi, esi
je 0x457897
push edi
push esi
push 0xffffffffffffffff
xor eax, eax
push 0x4c0e35
push eax
push 3
mov word [esi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
neg eax
sbb eax, eax
and eax, esi
jmp 0x457899
xor eax, eax
push eax
lea eax, [ebp - 0x66c]
push eax
call fcn.004094f0
mov edx, 0x4c0e35
mov ebx, eax
lea esi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x4578b0
sub edx, esi
lea edi, [edx + 1]
cmp edi, 0x3fffffff
jg 0x4578f1
lea eax, [edi + edi]
call fcn.0046db50
mov esi, esp
test esi, esi
je 0x4578f1
push edi
push esi
push 0xffffffffffffffff
xor eax, eax
push 0x4c0e35
push eax
push 3
mov word [esi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
neg eax
sbb eax, eax
and eax, esi
jmp 0x4578f3
xor eax, eax
push ebx
push eax
lea eax, [ebp - 0x66c]
push eax
push str.WinMain____ActivProd_SetSerialNumber__s___s____d
call fcn.0045f4c0
add esp, 0x10
lea eax, [ebp - 0x66c]
push 0
push 0
push 1
push 0
push 0
push 0
push 0xfffffffffffffffe
push closesocket
push 0
push eax
call fcn.004095e0
mov esi, eax
lea eax, [ebp - 0x66c]
push esi
push 0
push eax
push str.WinMain____ActivProdEx__s___d____d
call fcn.0045f4c0
add esp, 0x10
test esi, esi
jne 0x457af2
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c38b8]
push dword [ecx + eax + 0x618]
lea eax, [ebp - 0xfc4]
push 0x100
push eax
push 0x258
push dword [0x4c14e4]
call fcn.004510f0
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c38b8]
push dword [ecx + eax + 0x618]
lea eax, [ebp - 0xbbc]
push 0x100
push eax
push 0x2c2
push dword [0x4c14e4]
call fcn.004510f0
mov ecx, 0x4c0e35
add esp, 0x28
lea edx, [ecx + 1]
lea ebx, [ebx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4579c0
sub ecx, edx
lea edi, [ecx + 1]
cmp edi, 0x3fffffff
jg 0x457a01
lea eax, [edi + edi]
call fcn.0046db50
mov esi, esp
test esi, esi
je 0x457a01
push edi
push esi
push 0xffffffffffffffff
xor eax, eax
push 0x4c0e35
push eax
push 3
mov word [esi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
neg eax
sbb eax, eax
and eax, esi
jmp 0x457a03
xor eax, eax
push 0x4c2e60
push eax
lea eax, [ebp - 0xbbc]
push eax
lea eax, [ebp - 0x1de4]
push 0x200
push eax
call fcn.0046982e
mov esi, dword [sym.imp.USER32.dll_MessageBoxW]
lea eax, [ebp - 0xfc4]
add esp, 0x14
push 0
push eax
lea eax, [ebp - 0x1de4]
push eax
push 0
call esi
mov ebx, dword [ebp - 0xd314]
mov dword [ebp - 0xd31c], 1
jmp 0x456fe0
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c38b8]
push dword [ecx + eax + 0x618]
lea eax, [ebp - 0xfc4]
push 0x100
push eax
push 0x258
push dword [0x4c14e4]
call fcn.004510f0
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c38b8]
push dword [ecx + eax + 0x618]
lea eax, [ebp - 0xbbc]
push 0x100
push eax
push 0x2bf
push dword [0x4c14e4]
call fcn.004510f0
mov esi, dword [sym.imp.USER32.dll_MessageBoxW]
lea eax, [ebp - 0xfc4]
add esp, 0x28
push 0
push eax
lea eax, [ebp - 0xbbc]
push eax
push 0
call esi
mov dword [ebp - 0xd310], 0xd
jmp 0x457f59
mov dword [ebp - 0xd310], 0x4cd
jmp 0x457f59
cmp dword [0x4c0e25], 0
je 0x457c86
push 0x236
lea eax, [ebp - 0xc974]
push 0
push eax
call fcn.0046a330
imul ecx, dword [0x4bfdbd], 0x620
mov esi, 2
mov eax, dword [0x4c14e4]
mov dword [ebp - 0xc978], eax
mov eax, dword [0x4c38b8]
push 0x4c1978
push 0xb
mov eax, dword [ecx + eax + 0x618]
mov dword [ebp - 0xc974], eax
mov eax, dword [0x4c1968]
mov dword [ebp - 0xc964], eax
mov eax, dword [0x4c1974]
mov dword [ebp - 0xc96c], eax
mov eax, dword [0x4c1970]
mov dword [ebp - 0xc968], eax
mov eax, dword [0x4c196c]
mov dword [ebp - 0xc970], eax
mov eax, dword [0x4b9d5c]
neg eax
sbb eax, eax
xor ecx, ecx
and eax, 4
cmp dword [0x4b9d58], ecx
cmovne esi, ecx
or eax, esi
or dword [ebp - 0xc742], eax
lea eax, [ebp - 0xc960]
push eax
call fcn.0046befa
mov ebx, dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0xc94a]
add esp, 0x18
push str.Toolbar.bmp
push 0x4c3678
push eax
call ebx
cmp dword [0x4c2e5c], 0
jne 0x457bf3
lea eax, [ebp - 0xc978]
push eax
push 0
call fcn.00427450
mov esi, eax
push esi
push str.WinMain____Dialog_Toolbar:__d
call fcn.0045f4c0
add esp, 0x10
cmp esi, 1
je 0x457bf3
mov dword [ebp - 0xd310], 0x4c7
jmp 0x457f59
cmp dword [ebp - 0xc970], 0
je 0x457c8c
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c38b8]
push dword [ecx + eax + 0x618]
lea eax, [ebp - 0x1de4]
push 0x200
push eax
push 0x2c7
push dword [0x4c14e4]
call fcn.004510f0
push 1
lea eax, [ebp - 0x1de4]
push eax
push 0x4c2400
push dword [0x4c14e4]
call fcn.00431820
push dword [ebp - 0xc968]
lea eax, [ebp - 0x15dc]
push dword [ebp - 0xc96c]
push dword [ebp - 0xd318]
push 0x4c1978
push eax
push 0
call fcn.00427d90
push 0
push 0
push 0
push dword [0x4c14e4]
call fcn.00431820
add esp, 0x4c
jmp 0x457c8c
mov ebx, dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [0x4c0e29], 0
je 0x457ed4
push 0x736
lea eax, [ebp - 0xd0b4]
push 0
push eax
call fcn.0046a330
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c14e4]
mov dword [ebp - 0xd0b8], eax
mov eax, dword [0x4c38b8]
mov eax, dword [ecx + eax + 0x618]
mov dword [ebp - 0xd0b4], eax
mov al, byte [0x4c1b99]
mov byte [ebp - 0xceb0], al
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0xceaf]
push 0x104
push eax
call fcn.0046befa
push 0x1f
lea eax, [ebp - 0x11cc]
push eax
lea eax, [ebp - 0xcbc7]
push 0x20
push eax
call fcn.0046cbf5
push 0x1f
lea eax, [ebp - 0x17e4]
push eax
lea eax, [ebp - 0xcb87]
push 0x20
push eax
call fcn.0046cbf5
push 0x10
push 0x20
lea eax, [ebp - 0xc9c7]
push eax
movzx eax, byte [0x4c125f]
push eax
call fcn.0046d160
add esp, 0x48
lea eax, [ebp - 0xcb47]
push 0x1f
push 0x4c2e60
push 0x20
push eax
call fcn.0046cbf5
push 0x4c103d
lea eax, [ebp - 0xcc07]
push 0x20
push eax
call fcn.0046befa
lea eax, [ebp - 0x9bc]
push eax
lea eax, [ebp - 0xcc67]
push 0x20
push eax
call fcn.0046befa
lea eax, [ebp - 0x918]
push eax
lea eax, [ebp - 0xcca7]
push 0x20
push eax
call fcn.0046befa
mov ecx, 0x4c0e35
add esp, 0x34
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x457da0
sub ecx, edx
lea esi, [ecx + 1]
cmp esi, 0x3fffffff
jle 0x457db8
xor eax, eax
jmp 0x457dd0
lea eax, [esi + esi]
call fcn.0046db50
mov eax, esp
push 3
push esi
push 0x4c0e35
push eax
call fcn.00434c30
push eax
lea eax, [ebp - 0xca87]
push 0x40
push eax
call fcn.0046befa
push 0x4c25e6
lea eax, [ebp - 0xcb07]
push 0x20
push eax
call fcn.0046befa
push 0xa
push 0x10
lea eax, [ebp - 0xcc27]
push eax
movzx eax, byte [0x4c1261]
push eax
call fcn.0046d160
mov al, byte [0x4c1262]
mov byte [ebp - 0xc983], al
mov eax, dword [0x4c1daa]
mov dword [ebp - 0xc982], eax
lea eax, [ebp - 0xcac7]
push 0x20
push eax
movzx eax, byte [0x4c1260]
push eax
call fcn.00446440
push 0x4c1ba2
lea eax, [ebp - 0xd0b0]
push 0x100
push eax
call fcn.0046befa
add esp, 0x40
push str.WinMain____before_OLRDisplay
call fcn.0045f4c0
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xc948], ax
lea eax, [ebp - 0xc946]
push eax
call fcn.0046a330
add esp, 0x10
lea eax, [ebp - 0xc948]
push str.OLRegistu.dll
push 0x4c3470
push eax
call ebx
xor eax, eax
cmp dword [0x4c2e5c], eax
sete al
push eax
lea eax, [ebp - 0xc948]
push eax
lea eax, [ebp - 0xd0b8]
push eax
push 0
call fcn.00446480
mov esi, eax
push esi
push str.WinMain____Dialog_OLRv3:__d
call fcn.0045f4c0
add esp, 0x18
cmp esi, 1
je 0x457ed4
cmp esi, 3
je 0x457ed4
mov dword [ebp - 0xd310], 0x4c7
jmp 0x457f59
mov eax, dword [0x4c14e4]
mov ecx, dword [0x4c38bc]
mov esi, dword [0x4c38b8]
sub ecx, esi
mov dword [ebp - 0xd334], eax
mov eax, 0x5397829d
imul ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x457f19
imul eax, dword [0x4bfdbd], 0x620
mov eax, dword [eax + esi + 0x618]
mov dword [ebp - 0xd330], eax
jmp 0x457f23
mov dword [ebp - 0xd330], 0x809
mov ecx, dword [0x4b9d5c]
neg ecx
sbb ecx, ecx
xor eax, eax
and ecx, 2
cmp dword [0x4b9d58], eax
sete al
or ecx, eax
lea eax, [ebp - 0xd334]
or dword [ebp - 0xd32c], ecx
push eax
push 0
call fcn.004321d0
add esp, 8
mov dword [0x4c2e4c], eax
mov edi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [0x4c1724]
test eax, eax
je 0x457f75
push eax
call dword [sym.imp.KERNEL32.dll_FreeResource]
mov eax, dword [ebp - 0xd33c]
test eax, eax
je 0x457f82
push eax
call edi
mov eax, dword [0x4c2c3c]
test eax, eax
je 0x457f8e
push eax
call edi
mov eax, dword [0x4c1964]
test eax, eax
je 0x457fd3
push str.ISnuiShutdown
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x457fab
call eax
jmp 0x457fbd
push str.ISnuiShutdown
push str.Function__s_failed_
call fcn.0045f820
add esp, 8
push dword [0x4c1964]
call edi
push eax
push str.WinMain____unload_NewUI___d
call fcn.0045f4c0
add esp, 8
mov eax, dword [0x4c14e4]
test eax, eax
je 0x457ffa
cmp eax, dword [0x4c1264]
je 0x457ffa
push eax
call edi
push eax
push 0x4b4730
push str.WinMain____unload__s___d
call fcn.0045f4c0
add esp, 0xc
call dword [sym.imp.ole32.dll_CoUninitialize]
mov esi, dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
push 0x4c3678
call esi
test eax, eax
je 0x458030
push 2
push 0x4c3678
call fcn.0045d9d0
push eax
push 0x4c3678
push str.WinMain____Remove_folder__s___d_
call fcn.0045f4c0
add esp, 0x14
push 0x4b4f40
call esi
test eax, eax
je 0x458073
cmp dword [0x4ba7d0], 0
je 0x458051
push 0x4b4f40
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x458060
push 2
push 0x4b4f40
call fcn.0045d9d0
add esp, 8
push eax
push 0x4b4f40
push str.WinMain____Remove_folder__s___d_
call fcn.0045f4c0
add esp, 0xc
cmp dword [0x4b9d34], 0
je 0x4580be
push 0x4ba5a4
call esi
test eax, eax
je 0x4580be
push 0x4ac008
push 0x4ba5a4
call fcn.0046cd59
add esp, 8
test eax, eax
je 0x4580be
push 2
push 0x4ba5a4
call fcn.0045d9d0
push eax
push 0x4ba5a4
push str.WinMain____Remove_folder__s___d_
call fcn.0045f4c0
add esp, 0x14
jmp 0x4580d0
push 0x4ba5a4
push str.WinMain____the_folder__s_will_not_be_removed_
call fcn.0045f4c0
add esp, 8
cmp dword [ebp - 0xd324], 0
je 0x458112
push 0
lea eax, [ebp - 0xd310]
push eax
push dword [ebp + 0x14]
push 0
push str.Runas
push 0x487854
push dword [ebp - 0xd338]
push 0x4ac210
push 0
call fcn.0045cf00
add esp, 0x24
test eax, eax
jne 0x458112
call ebx
mov dword [ebp - 0xd310], eax
mov eax, dword [ebp - 0xd328]
test eax, eax
je 0x458123
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x4a80cc]
test eax, eax
mov ecx, dword [ebp - 0xd310]
cmovne ecx, eax
push ecx
push str.WinMain____End__x_
mov dword [ebp - 0xd310], ecx
call fcn.0045f4c0
add esp, 8
mov ecx, dword [ebp - 0xd348]
mov esi, dword [ebp - 0xd310]
test ecx, ecx
je 0x458160
push ecx
call fcn.00429520
add esp, 4
mov eax, esi
lea esp, [ebp - 0xd364]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0046984a
mov esp, ebp
pop ebp
ret 0x10