Function at 0x461db0
Capabilities:
Check if file exists
Check mutex on windows
Create directory
Delete directory
Delete file
Get geographical location

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x148a8
call fcn.0046f060
mov eax, dword [0x4af6f0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 8]
push edi
push str.Begin...
mov dword [ebp - 0x1488c], ebx
call fcn.00469290
add esp, 4
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 0x14868], 0
call fcn.004479c0
mov dword [ebp - 0x14878], eax
xor eax, eax
push str.RICHED20.DLL
mov dword [ebp - 0x1487c], 0
mov dword [ebp - 0x14880], eax
mov dword [0x4b550c], esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x14888], eax
xor eax, eax
push 0x1fe
push eax
mov word [ebp - 0xbb4], ax
lea eax, [ebp - 0xbb2]
push eax
call fcn.0046f6e0
xor eax, eax
push 0x1fe
push eax
mov word [ebp - 0x9b4], ax
lea eax, [ebp - 0x9b2]
push eax
call fcn.0046f6e0
xor eax, eax
push 0x1fe
push eax
mov word [ebp - 0x11c4], ax
lea eax, [ebp - 0x11c2]
push eax
call fcn.0046f6e0
xor eax, eax
push 0x3fe
push eax
mov word [ebp - 0x19d4], ax
lea eax, [ebp - 0x19d2]
push eax
call fcn.0046f6e0
call fcn.0043c550
call fcn.0045c970
push ebx
push 0x1f40
push 0x4bf2e8
call fcn.0046fd12
push 0x4bf2e8
push str.WinMain____CmdLine:__s
call fcn.00469290
add esp, 0x44
push 0
push 0
push 0x497b08
push 0x497b10
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x461f51
push 0x809
push 0x100
lea eax, [ebp - 0x11c4]
push eax
push 0x2c9
push dword [0x4b550c]
call fcn.00467110
push 0x809
push 0x200
lea eax, [ebp - 0x19d4]
push eax
push 0x2c8
push dword [0x4b550c]
call fcn.00467110
add esp, 0x28
lea eax, [ebp - 0x11c4]
push 0x40
push eax
lea eax, [ebp - 0x19d4]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push str.WinMain____Help_____mode_parameter
call fcn.00469290
add esp, 4
xor eax, eax
jmp 0x465cff
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push eax
call fcn.0046f6e0
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x497b08
push str.LANG
push 0x4bf2e8
call fcn.0043c1a0
mov ebx, dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
add esp, 0x20
mov esi, dword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
test eax, eax
jne 0x461fc6
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x497b08
push str.LANG:
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x46202e
lea eax, [ebp - 0x20c]
push eax
call ebx
lea eax, [ebp - 0x20c]
push eax
call esi
lea eax, [ebp - 0x20c]
push eax
call fcn.004706b9
add esp, 4
mov word [0x4b5500], ax
test ax, ax
jne 0x46201d
push 0
call fcn.0043d6d0
add esp, 4
test eax, eax
je 0x462017
lea eax, [ebp - 0x20c]
push eax
call fcn.0043c4a0
add esp, 4
mov word [0x4b5500], ax
jmp 0x46201d
mov ax, word [0x4b5500]
movzx eax, ax
push eax
push str.WinMain____Language_parameter:__d
call fcn.00469290
add esp, 8
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x497b08
push str.CMDLINE:
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x46208f
lea eax, [ebp - 0x20c]
push eax
call ebx
lea eax, [ebp - 0x20c]
push eax
call esi
lea eax, [ebp - 0x20c]
push eax
push 0x1f40
push 0x4c3168
call fcn.0046fd12
push 0x4c3168
push str.WinMain____CMDLINE_parameter:__s
call fcn.00469290
add esp, 0x14
xor eax, eax
push 0x4c
push eax
mov word [ebp - 0x464], ax
lea eax, [ebp - 0x462]
push eax
call fcn.0046f6e0
add esp, 0xc
lea eax, [ebp - 0x3bec]
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
test eax, eax
lea eax, [ebp - 0x464]
jne 0x4620df
movdqu xmm0, xmmword [ebp - 0x3bec]
push 0x27
push eax
sub esp, 0x10
mov eax, esp
movdqu xmmword [eax], xmm0
call fcn.0043d110
add esp, 0x18
jmp 0x4620ef
push str.A6E044B8_6C25_48fc_806B_002A9582C81F
push 0x27
push eax
call fcn.0046fd12
add esp, 0xc
mov ebx, dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x464]
push eax
push 0x4c9a48
push 0x4ce980
call ebx
push 0x4ce980
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x462136
push 2
push 0x4ce980
call fcn.00467490
push eax
push 0x4ce980
push str.WinMain____Remove_folder__s___d_
call fcn.00469290
add esp, 0x14
push 0
push 0x4ce980
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push 0x4ce980
test eax, eax
jne 0x462160
push str.WinMain____Error_create_directory___s__
call fcn.00469290
add esp, 8
xor eax, eax
jmp 0x465cff
push str.WinMain____TempPathFCW_s
call fcn.00469290
call fcn.0045d0e0
push 0x2a
lea eax, [ebp - 0xc328]
mov dword [ebp - 0x14898], 0
xorps xmm0, xmm0
mov dword [ebp - 0x14894], 0
push 0
push eax
movdqu xmmword [ebp - 0x148a8], xmm0
mov dword [ebp - 0x14890], 0
mov dword [ebp - 0xc32c], 0
call fcn.0046f6e0
push 0x208
lea eax, [ebp - 0x12644]
mov dword [ebp - 0x12650], 0
xorps xmm0, xmm0
push 0
push eax
movq qword [ebp - 0x1264c], xmm0
call fcn.0046f6e0
push 0x2454
lea eax, [ebp - 0x1242c]
mov dword [ebp - 0x1243c], 0
push 0
push eax
mov dword [ebp - 0x12438], 0
mov dword [ebp - 0x12434], 0
mov dword [ebp - 0x12430], 0
call fcn.0046f6e0
push 0x208
lea eax, [ebp - 0xffcc]
mov dword [ebp - 0xffd8], 0
xorps xmm0, xmm0
push 0
push eax
movq qword [ebp - 0xffd4], xmm0
call fcn.0046f6e0
push 0x2450
lea eax, [ebp - 0xfdb4]
mov dword [ebp - 0xfdc4], 0
push 0
push eax
mov dword [ebp - 0xfdc0], 0
mov dword [ebp - 0xfdbc], 0
mov dword [ebp - 0xfdb8], 0
call fcn.0046f6e0
add esp, 0x44
mov dword [ebp - 0x14864], 0
lea eax, [ebp - 0x14860]
push 0x2210
push 0
push eax
call fcn.0046f6e0
push 0x220
lea eax, [ebp - 0xc788]
mov dword [ebp - 0xc78c], 0
push 0
push eax
call fcn.0046f6e0
push 0x219
lea eax, [ebp - 0xd124]
mov dword [ebp - 0xd128], 0
push 0
push eax
call fcn.0046f6e0
push 0x838
lea eax, [ebp - 0xd960]
mov dword [ebp - 0xd964], 0
push 0
push eax
call fcn.0046f6e0
xor eax, eax
push 0x50
push eax
mov word [ebp - 0x7f74], ax
lea eax, [ebp - 0x7f72]
push eax
call fcn.0046f6e0
push 0x4333
lea eax, [ebp - 0x7f22]
push 0
push eax
call fcn.0046f6e0
add esp, 0x48
push 0x4cd328
call fcn.0043d560
add esp, 4
test eax, eax
jne 0x462369
push str.setup.cfg
push 0x4ce980
push str._s_s
push 0x104
push 0x4cd328
call fcn.0046ebde
push 0x4cd328
push 0x497d54
push 0x88
push dword [0x4b550c]
call fcn.0043bd10
add esp, 0x24
push 0x4cd328
call fcn.0045d7b0
mov edi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
add esp, 4
cmp word [0x4b5750], 0
je 0x4623c9
push 0x4b5750
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x14880], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x4623c9
push 0x4b5750
push str.WinMain____Project_already_in_memory___s_
call fcn.00469290
add esp, 8
mov dword [0x4af524], 0xb7
jmp 0x465a7e
push 0
push 0
push 0x497b08
push str.NORESUME
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x4623ff
push str.WinMain____Resume_mode_disabled_by_parameter
mov dword [0x4b7f6c], 0
call fcn.00469290
add esp, 4
lea eax, [ebp - 0x464]
push eax
push 0x4b5750
call fcn.0047054b
add esp, 8
test eax, eax
je 0x462443
cmp dword [0x4b7f6c], 0
je 0x462443
push 0x4b5750
push 0x4c9a48
push 0x4ceb88
call ebx
push 0x4b5750
push 0x4ceb88
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x462454
push 0x4b5750
push 0x4ce980
push 0x4ceb88
call ebx
push 0x4ceb88
call fcn.0043b250
add esp, 4
test eax, eax
jne 0x4624c0
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
push eax
push 0x4ceb88
push str.WinMain____Error_create_directory___s____d_
mov dword [ebp - 0x14868], eax
call fcn.00469290
add esp, 0xc
cmp dword [ebp - 0x14868], 0xb7
je 0x4624b6
push 2
push 0x4ceb88
call fcn.00467490
push eax
push 0x4ceb88
push str.WinMain____Remove_folder__s___d_
call fcn.00469290
add esp, 0x14
jmp 0x465a84
mov dword [ebp - 0x14868], 0
push 0x4ceb88
push str.WinMain____DataPath:__s
call fcn.00469290
push str.Binary.tmp
push 0x4ce980
push str._s_s
push 0x4ced90
call dword [sym.imp.USER32.dll_wsprintfW]
push 0x4ced90
call fcn.0045bd90
add esp, 0x1c
push 1
push 0
push 0x4cf1a0
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov ecx, dword [0x4b550c]
test eax, eax
cmovne ecx, eax
push ecx
push eax
push 0x4cf1a0
push str.WinMain____LoadLibrary__s____d__hInstRes:__d_
mov dword [0x4b5510], ecx
call fcn.00469290
add esp, 0x10
cmp word [0x4b579e], 0
jne 0x462553
push 0x100
push 0x4b5540
push 0x497f24
push dword [0x4b550c]
call fcn.00469930
add esp, 0x10
jmp 0x46256a
push 0x4b579e
push 0x100
push 0x4b5540
call fcn.0046fd12
add esp, 0xc
push 0x4b5540
push str.WinMain____Title:__s
call fcn.00469290
push 0
push 0
push 0x497b08
push str.INFO
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x1c
test eax, eax
je 0x46275e
push str.Language_s__available:_n_n
push 0x200
push 0x4c6fe8
call fcn.0046e804
mov ecx, dword [0x4c9010]
mov eax, 0x2a4b80c9
mov edi, dword [0x4c900c]
add esp, 0xc
sub ecx, edi
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x4626a3
xor ebx, ebx
test eax, eax
je 0x46271f
xor esi, esi
jmp 0x4625f0
push dword [esi + edi + 0x3058]
lea eax, [ebp - 0x20c]
push str._d__
push 0x104
push eax
call fcn.0046ebde
lea eax, [ebp - 0x20c]
push eax
push 0x200
push 0x4c6fe8
call fcn.0046e804
add esp, 0x1c
lea eax, [ebp - 0x20c]
push 0x104
push eax
mov eax, dword [0x4c900c]
push 2
push dword [esi + eax + 0x3058]
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
lea eax, [ebp - 0x20c]
push eax
push 0x200
push 0x4c6fe8
call fcn.0046e804
push 0x497fb4
push 0x200
push 0x4c6fe8
call fcn.0046e804
mov ecx, dword [0x4c9010]
lea esi, [esi + 0x306c]
mov edi, dword [0x4c900c]
mov eax, 0x2a4b80c9
sub ecx, edi
inc ebx
imul ecx
add esp, 0x18
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jb 0x4625f0
jmp 0x46271f
push dword [0x4bd970]
lea eax, [ebp - 0x20c]
push 0x497fb8
push 0x104
push eax
call fcn.0046ebde
lea eax, [ebp - 0x20c]
push eax
push 0x200
push 0x4c6fe8
call fcn.0046e804
add esp, 0x1c
lea eax, [ebp - 0x20c]
push 0x104
push eax
push 2
push dword [0x4bd970]
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
lea eax, [ebp - 0x20c]
push eax
push 0x200
push 0x4c6fe8
call fcn.0046e804
push 0x497fb4
push 0x200
push 0x4c6fe8
call fcn.0046e804
add esp, 0x18
push 0x809
push 0x100
lea eax, [ebp - 0x11c4]
push eax
push 0x2c9
push dword [0x4b5510]
call fcn.00467110
add esp, 0x14
lea eax, [ebp - 0x11c4]
push 0x40
push eax
push 0x4c6fe8
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x465c82
push 0
push 0
push 0x497b08
push 0x497fc0
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x462794
push str.WinMain____DialogInRun_mode_
mov dword [0x4b687c], 1
call fcn.00469290
add esp, 4
push 0
push 0
push 0x497b08
push 0x48c7e8
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x4627ca
push str.WinMain____Silent_mode_parameter
mov dword [0x4b5538], 1
call fcn.00469290
add esp, 4
push 0
push 0
push 0x497b08
push str.NOBALLOON
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x462800
push str.WinMain____No_balloon_parameter
mov dword [0x4b6878], 0
call fcn.00469290
add esp, 4
push 0
push 0
push 0x497b08
push str.FULLSILENT
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x46284a
push str.WinMain____Full_Silent_mode_parameter
mov dword [0x4b5538], 1
mov dword [0x4b6878], 0
mov dword [0x4b68b0], 0
call fcn.00469290
add esp, 4
push 0
push 0
push 0x497b08
push 0x498114
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x462880
push str.WinMain____Force_to_Download_parameter
mov dword [0x4b5504], 1
call fcn.00469290
add esp, 4
push 0
push 0
push 0x497b08
push str.NOLICENSE
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x4628b6
push str.WinMain____No_license_parameter
mov dword [0x4b6868], 0
call fcn.00469290
add esp, 4
push 0
push 0
push 0x497b08
push str.NOTOOLBAR
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x4628ec
push str.WinMain____No_Toolbar_parameter
mov dword [0x4be9e0], 0
call fcn.00469290
add esp, 4
push 0
push 0
push 0x497b08
push str.NORMALSTATUS
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x46291f
push str.WinMain____NORMALSTATUS_parameter
mov byte [0x4b8794], 1
call fcn.00469290
add esp, 4
push 0
push 0
push 0x497b08
push str.SMALLSTATUS
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x462952
push str.WinMain____SMALLSATUS_parameter
mov byte [0x4b8794], 0
call fcn.00469290
add esp, 4
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x4982e0
push str.HWNDSTATUS:
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x462998
lea eax, [ebp - 0x20c]
push eax
call fcn.00440480
push eax
push str.WinMain____HWNDSTATUS:__d
mov dword [0x4b5528], eax
call fcn.00469290
add esp, 0xc
push 0
push 0
push 0x497b08
push str.NOLU
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x4629d8
push str.WinMain____NOLU_parameter:_LiveUpdate_Disabled_
mov dword [0x4b65f8], 0
mov dword [0x4b5508], 1
call fcn.00469290
add esp, 4
push 0
push 0
push 0x497b08
push str.NOGA
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x462a0e
push str.WinMain____NOGA_parameter:_Google_Analytics_Disabled_
mov dword [0x4bd988], 0
call fcn.00469290
add esp, 4
xor edi, edi
push edi
push edi
push 0x497b08
push str.GA_REG
push 0x4bf2e8
mov dword [ebp - 0x14874], edi
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x462a4b
mov edi, 1
push str.WinMain____GA_REG_parameter:_Google_Analytics_in_Registry_
mov dword [ebp - 0x14874], edi
call fcn.00469290
add esp, 4
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x497b08
push str.SCRIPT:
push 0x4bf2e8
call fcn.0043c1a0
mov ebx, dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
add esp, 0x14
test eax, eax
je 0x462ad3
lea eax, [ebp - 0x20c]
push eax
call ebx
lea eax, [ebp - 0x20c]
push eax
call esi
lea eax, [ebp - 0x20c]
push eax
push 0x104
push 0x4b7f70
call fcn.0046fd12
push 0x4b7f70
call fcn.0043d560
mov ecx, dword [0x4b7f68]
test eax, eax
mov eax, 1
cmovne ecx, eax
push ecx
push 0x4b7f70
push str.WinMain____ScriptFile:__s___d_
mov dword [0x4b7f68], ecx
call fcn.00469290
add esp, 0x1c
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x497b08
push 0x498500
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x462bb3
lea eax, [ebp - 0x20c]
push eax
call ebx
lea eax, [ebp - 0x20c]
push eax
call esi
lea eax, [ebp - 0x20c]
push eax
push str.WinMain____Params_X:__s
call fcn.00469290
add esp, 8
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
je 0x462b60
push 0x4c9840
push 0x104
push 0x4b70fc
call fcn.0046fd12
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
push 0x4b70fc
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x462b79
lea eax, [ebp - 0x20c]
push eax
push 0x104
push 0x4b70fc
call fcn.0046fd12
add esp, 0xc
push 0x4b70fc
push str.WinMain____TgdFolder:__s
call fcn.00469290
add esp, 8
mov dword [0x4b7f50], 0
mov dword [0x4b684c], 0
mov dword [0x4b7f4c], 0
mov dword [0x4b6850], 0
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x497b08
push str.CUSTOMEREXP
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x462c7f
mov ecx, 0x48e734
lea eax, [ebp - 0x20c]
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x462c16
test dx, dx
je 0x462c12
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x462c16
add eax, 4
add ecx, 4
test dx, dx
jne 0x462bf0
xor eax, eax
jmp 0x462c1b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x462c24
lea ebx, [eax + 1]
jmp 0x462c6a
mov ecx, 0x49298c
lea eax, [ebp - 0x20c]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x462c56
test dx, dx
je 0x462c52
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x462c56
add eax, 4
add ecx, 4
test dx, dx
jne 0x462c30
xor ecx, ecx
jmp 0x462c5b
sbb ecx, ecx
or ecx, 1
mov eax, dword [0x4b68b4]
test ecx, ecx
mov ebx, 1
cmove eax, ebx
push eax
push str.WinMain____Params:_CUSTOMEREXP:__d
mov dword [0x4b68b4], eax
call fcn.00469290
add esp, 8
jmp 0x462c84
mov ebx, 1
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x497b08
push str.AVQMSG
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x462d48
mov ecx, 0x48e734
lea eax, [ebp - 0x20c]
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x462ce6
test dx, dx
je 0x462ce2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x462ce6
add eax, 4
add ecx, 4
test dx, dx
jne 0x462cc0
xor eax, eax
jmp 0x462ceb
sbb eax, eax
or eax, 1
test eax, eax
je 0x462d35
mov ecx, 0x49298c
lea eax, [ebp - 0x20c]
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x462d26
test dx, dx
je 0x462d22
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x462d26
add eax, 4
add ecx, 4
test dx, dx
jne 0x462d00
xor ecx, ecx
jmp 0x462d2b
sbb ecx, ecx
or ecx, 1
mov eax, dword [0x4b68c4]
test ecx, ecx
cmove eax, ebx
push eax
push str.WinMain____Params:_AVQMSG:__d
mov dword [0x4b68c4], eax
call fcn.00469290
add esp, 8
push 0
push 0
push 0x497b08
push str.VERYSILENT
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x462dc9
push str.WinMain____Very_Silent_mode_parameter
mov dword [0x4b5538], 1
mov dword [0x4b6878], 0
mov dword [0x4b68b0], 0
call fcn.00469290
add esp, 4
cmp word [0x4c3168], 0
je 0x462db2
push 0x49868c
push 0x1f40
push 0x4c3168
call fcn.0046e804
jmp 0x462dc6
push 0x498694
push 0x1f40
push 0x4c3168
call fcn.0046fd12
add esp, 0xc
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x497b08
push str.DIR
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x462e33
lea eax, [ebp - 0x20c]
push eax
push 0x104
push 0x4b771c
call fcn.0046fd12
push 0x104
push 0x4b771c
call fcn.0045fb00
add esp, 0x14
push 0x4b771c
call esi
lea eax, [ebp - 0x20c]
push eax
push str.WinMain____Params_DIR:__s
call fcn.00469290
add esp, 8
push 0
push 0
push 0x497b08
push str.NOREBOOT
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x462e96
push str.WinMain____NOREBOOT_parameter
call fcn.00469290
add esp, 4
cmp word [0x4c3168], 0
je 0x462e7f
push str.__NOREBOOT
push 0x1f40
push 0x4c3168
call fcn.0046e804
jmp 0x462e93
push str._NOREBOOT
push 0x1f40
push 0x4c3168
call fcn.0046fd12
add esp, 0xc
call fcn.0043d770
cmp dword [0x4b7f60], 0
mov ebx, eax
je 0x462eaf
test ebx, ebx
jne 0x462eaf
lea esi, [eax + 1]
jmp 0x462eb1
xor esi, esi
push esi
push str.WinMain____NeedToRunAsAdmin:__d
mov dword [ebp - 0x1487c], esi
call fcn.00469290
add esp, 8
test esi, esi
jne 0x465a78
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x66c], ax
lea eax, [ebp - 0x66a]
push eax
call fcn.0046f6e0
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xfc4], ax
lea eax, [ebp - 0xfc2]
push eax
call fcn.0046f6e0
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x15d4], ax
lea eax, [ebp - 0x15d2]
push eax
call fcn.0046f6e0
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push eax
call fcn.0046f6e0
push 0x4bec12
lea eax, [ebp - 0x66c]
push 0x104
push eax
call fcn.0046fd12
push 0x104
lea eax, [ebp - 0x15d4]
push eax
push 0x104
lea eax, [ebp - 0xfc4]
push eax
lea eax, [ebp - 0x66c]
push 0x104
push eax
call fcn.0043db50
add esp, 0x54
cmp dword [0x4bd988], esi
jne 0x462fec
test edi, edi
jne 0x462fec
cmp word [ebp - 0x66c], di
je 0x46389a
cmp dword [0x4b5508], edi
jne 0x46389a
push 0x4987b8
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
lea eax, [ebp - 0x66c]
push 0x4987b8
push eax
lea eax, [ebp - 0x414]
push eax
mov eax, dword [sym.imp.SHLWAPI.dll_PathCombineW]
call eax
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430a80
add esp, 8
jmp 0x46389a
push 0x104
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x14870], 1
push eax
push str.GAclientID
push 0x4bdb98
push closesocket
call fcn.00430ca0
mov edi, eax
add esp, 0x14
test edi, edi
jne 0x463048
push 0x104
lea eax, [ebp - 0x20c]
push eax
push str.GAclientID
push 0x4bdb98
push closesocket
call fcn.00430ca0
mov edi, eax
add esp, 0x14
test edi, edi
je 0x46309c
lea ecx, [ebp - 0x20c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x463051
sub ecx, edx
sar ecx, 1
lea esi, [ecx + 1]
cmp esi, 0x3fffffff
jle 0x46306f
xor eax, eax
jmp 0x46308a
add esi, esi
mov eax, esi
call fcn.004704a0
mov eax, esp
lea ecx, [ebp - 0x20c]
push 3
push esi
push ecx
push eax
call fcn.0045bcd0
push eax
lea eax, [ebp - 0x7f22]
push 0x27
push eax
call fcn.0046fcbd
add esp, 0xc
push 0x4987b8
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x414]
push eax
mov eax, dword [sym.imp.SHLWAPI.dll_PathCombineW]
call eax
cmp dword [ebp - 0x14874], 0
je 0x4632fc
lea eax, [ebp - 0x14870]
push eax
push 0x4987b8
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.00430c20
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x414]
push 0x104
push eax
call fcn.0046fd12
mov esi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x414]
add esp, 0x1c
push 0x4987b8
push eax
call esi
push 0x29
lea eax, [ebp - 0x7f74]
push eax
push str.TrackingId
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ca0
add esp, 0x14
test eax, eax
jne 0x46316d
push 0x4bdda0
lea eax, [ebp - 0x7f74]
push 0x29
push eax
call fcn.0046fd12
push 0x104
push 0x4bdda0
push 1
push str.TrackingId
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ff0
add esp, 0x24
push 0x65
lea eax, [ebp - 0x62f5]
push eax
push 0x497f24
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ca0
add esp, 0x14
test eax, eax
jne 0x4631c8
push 0x4bdfa8
lea eax, [ebp - 0x62f5]
push 0x65
push eax
call fcn.0046fd12
push 0x51
push 0x4bdfa8
push 1
push 0x497f24
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ff0
add esp, 0x24
push 0x65
lea eax, [ebp - 0x622b]
push eax
push 0x48eb9c
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ca0
add esp, 0x14
test eax, eax
jne 0x463223
push 0x4be050
lea eax, [ebp - 0x622b]
push 0x65
push eax
call fcn.0046fd12
push 0x51
push 0x4be050
push 1
push 0x48eb9c
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ff0
add esp, 0x24
push str.Campaign
lea eax, [ebp - 0x414]
push eax
call esi
push 0x65
lea eax, [ebp - 0x5b57]
push eax
push 0x4987ec
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ca0
push 0x65
lea eax, [ebp - 0x5f59]
push eax
push str.Name
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ca0
push 0x104
lea eax, [ebp - 0x6161]
push eax
push str.Content
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ca0
push 0x65
lea eax, [ebp - 0x5e8f]
push eax
push str.Source
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ca0
add esp, 0x50
lea eax, [ebp - 0x5dc5]
push 0x33
push eax
push str.Medium
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ca0
push 0x104
lea eax, [ebp - 0x5d5f]
push eax
push str.Keyword
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ca0
add esp, 0x28
jmp 0x463791
push 1
push 0x4987b8
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.004310e0
add esp, 0x10
lea eax, [ebp - 0x414]
cmp word [0x4bdda0], 0
je 0x463348
push 0x104
push 0x4bdda0
push 1
push str.TrackingId
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x46335b
push str.TrackingId
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
push 0x4bdda0
lea eax, [ebp - 0x7f74]
push 0x29
push eax
call fcn.0046fd12
add esp, 0xc
cmp dword [0x4be04c], 0
jne 0x4633d1
cmp word [0x4bdfa8], 0
lea eax, [ebp - 0x414]
je 0x4633a8
push 0x51
push 0x4bdfa8
push 1
push 0x497f24
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x4633bb
push 0x497f24
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
push 0x4bdfa8
lea eax, [ebp - 0x62f5]
push 0x65
push eax
call fcn.0046fd12
add esp, 0xc
cmp dword [0x4be0f4], 0
jne 0x463431
cmp word [0x4be050], 0
lea eax, [ebp - 0x414]
je 0x463408
push 0x51
push 0x4be050
push 1
push 0x48eb9c
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x46341b
push 0x48eb9c
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
push 0x4be050
lea eax, [ebp - 0x622b]
push 0x65
push eax
call fcn.0046fd12
add esp, 0xc
push str.Campaign
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
cmp word [0x4be90a], 0
lea eax, [ebp - 0x414]
je 0x463471
push 0x65
push 0x4be90a
push 1
push 0x4987ec
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x463484
push 0x4987ec
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
cmp word [0x4be508], 0
lea eax, [ebp - 0x414]
je 0x4634b2
push 0x65
push 0x4be508
push 1
push str.Name
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x4634c5
push str.Name
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
cmp word [0x4be300], 0
lea eax, [ebp - 0x414]
je 0x4634f6
push 0x104
push 0x4be300
push 1
push str.Content
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x463509
push str.Content
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
cmp word [0x4be5d2], 0
lea eax, [ebp - 0x414]
je 0x463537
push 0x65
push 0x4be5d2
push 1
push str.Source
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x46354a
push str.Source
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
cmp word [0x4be69c], 0
lea eax, [ebp - 0x414]
je 0x463578
push 0x33
push 0x4be69c
push 1
push str.Medium
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x46358b
push str.Medium
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
cmp word [0x4be702], 0
lea eax, [ebp - 0x414]
je 0x4635bc
push 0x104
push 0x4be702
push 1
push str.Keyword
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x4635cf
push str.Keyword
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
cmp word [0x4be90a], 0
lea eax, [ebp - 0x414]
je 0x4635fd
push 0x65
push 0x4be90a
push 1
push 0x4987ec
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x463610
push 0x4987ec
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
push 0x4be90a
lea eax, [ebp - 0x5b57]
push 0x65
push eax
call fcn.0046fd12
push 0x4be702
lea eax, [ebp - 0x5d5f]
push 0x104
push eax
call fcn.0046fd12
push 0x4be69c
lea eax, [ebp - 0x5dc5]
push 0x33
push eax
call fcn.0046fd12
push 0x4be508
lea eax, [ebp - 0x5f59]
push 0x65
push eax
call fcn.0046fd12
push 0x4be5d2
lea eax, [ebp - 0x5e8f]
push 0x65
push eax
call fcn.0046fd12
xor eax, eax
push 0x50
push eax
mov word [ebp - 0xc2fc], ax
lea eax, [ebp - 0xc2fa]
push eax
call fcn.0046f6e0
add esp, 0x48
lea eax, [ebp - 0xc2aa]
push 0x4333
push 0
push eax
call fcn.0046f6e0
xor eax, eax
push 0x1ffe
push eax
mov word [ebp - 0x3bdc], ax
lea eax, [ebp - 0x3bda]
push eax
call fcn.0046f6e0
lea eax, [ebp - 0x5b57]
push eax
lea eax, [ebp - 0x9edf]
push 0x65
push eax
call fcn.0046fd12
lea eax, [ebp - 0x5d5f]
push eax
lea eax, [ebp - 0xa0e7]
push 0x104
push eax
call fcn.0046fd12
lea eax, [ebp - 0x5dc5]
push eax
lea eax, [ebp - 0xa14d]
push 0x33
push eax
call fcn.0046fd12
lea eax, [ebp - 0x5f59]
push eax
lea eax, [ebp - 0xa2e1]
push 0x65
push eax
call fcn.0046fd12
add esp, 0x48
lea eax, [ebp - 0x5e8f]
push eax
lea eax, [ebp - 0xa217]
push 0x65
push eax
call fcn.0046fd12
add esp, 0xc
lea eax, [ebp - 0x3bdc]
push 0x1000
push eax
lea eax, [ebp - 0xc2fc]
push eax
call fcn.00443fd0
cmp word [ebp - 0x3bdc], 0
je 0x463778
push 0x104
lea eax, [ebp - 0x3bdc]
push eax
push 1
push str.Params
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x463791
push str.Params
lea eax, [ebp - 0x414]
push eax
push closesocket
call fcn.00430ab0
add esp, 0xc
cmp dword [ebp - 0x14870], 0
je 0x46389a
push 0x4be0f8
lea eax, [ebp - 0x711f]
push 0x104
push eax
call fcn.0046fd12
push str.appview
lea eax, [ebp - 0x7efb]
push 0x1e
push eax
call fcn.0046fd12
add esp, 0x18
cmp dword [0x4bd98c], 0
jne 0x4637f8
lea eax, [ebp - 0x7f74]
push eax
push 0x4bd990
call fcn.004445b0
lea eax, [ebp - 0x7f22]
push eax
push str.GAParams.UniqueId:__s
call fcn.004695f0
add esp, 8
test edi, edi
jne 0x46389a
cmp word [0x4bdb98], di
je 0x46389a
cmp byte [ebp - 0x7f22], 0
je 0x46389a
lea ecx, [ebp - 0x7f22]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x463823
sub ecx, edx
lea esi, [ecx + 1]
cmp esi, 0x3fffffff
jle 0x46383b
xor eax, eax
jmp 0x463855
lea eax, [esi + esi]
call fcn.004704a0
mov eax, esp
lea ecx, [ebp - 0x7f22]
push 3
push esi
push ecx
push eax
call fcn.00431390
push eax
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.0046fd12
add esp, 0xc
lea eax, [ebp - 0x20c]
push 0x104
push eax
push 1
push str.GAClientID
push 0x4bdb98
test ebx, ebx
je 0x46388d
push closesocket
jmp 0x463892
push closesocket
call fcn.00430ff0
add esp, 0x18
call fcn.0045f6f0
mov dword [0x4b5518], eax
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x1bdc], ax
lea eax, [ebp - 0x1bda]
push eax
call fcn.0046f6e0
add esp, 0xc
lea eax, [ebp - 0x1bdc]
push str.IAMCu.dll
push 0x4cef98
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [0x4be9ec], 0
je 0x4638fd
cmp dword [ebp - 0x14878], 0
je 0x4638fd
lea eax, [ebp - 0x1bdc]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x4b551c], eax
xor eax, eax
mov byte [ebp - 0x14874], 0
push 0x206
push eax
mov word [ebp - 0x13cc], ax
lea eax, [ebp - 0x13ca]
push eax
call fcn.0046f6e0
mov eax, dword [0x4be9e0]
add esp, 0xc
test eax, eax
je 0x463991
push str.TBI.exe
push 0x4ce980
lea eax, [ebp - 0x13cc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
call fcn.00427a00
cmp dword [0x4c7830], 0
mov byte [ebp - 0x14874], al
jne 0x463987
push 0x4c7856
push 0x4c7840
push dword [ebp - 0x14874]
call fcn.004274f0
add esp, 0xc
test eax, eax
jne 0x463983
lea eax, [ebp - 0x13cc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x463987
xor eax, eax
jmp 0x46398c
mov eax, 1
mov dword [0x4be9e0], eax
push eax
push str.WinMain____Toolbar:__d
call fcn.00469290
push 0
push 0x4be9d4
push dword [0x4b550c]
call fcn.0043ae00
mov ecx, eax
add esp, 0x14
mov dword [0x4b5514], ecx
test ecx, ecx
jne 0x463a01
push 0x4bf2e0
push str._BVRP_PSA
push 0x4ccd10
call fcn.0042ca80
add esp, 0xc
mov dword [0x4b5530], eax
test eax, eax
jne 0x4639f9
push 0x4bf2e0
push str._BV69_FCW_
push 0x4ccd10
call fcn.0042ca80
add esp, 0xc
mov dword [0x4b5530], eax
mov ecx, dword [0x4b5514]
jmp 0x463a06
mov eax, dword [0x4b5530]
cmp word [0x4b70fc], 0
je 0x463a1d
cmp dword [0x4b6850], 0
je 0x463a99
test ecx, ecx
jne 0x463a3e
test eax, eax
jne 0x463a3e
push 0x4cd120
push 0x104
push 0x4b70fc
call fcn.0046fd12
add esp, 0xc
jmp 0x463a99
push str.A6E044B8_6C25_48fc_806B_002A9582C81F
push 0x4b5750
call fcn.0047054b
add esp, 8
test eax, eax
je 0x463a84
cmp dword [0x4b7f6c], 0
je 0x463a84
push 0x4b5750
push 0x4c9a48
push 0x4b70fc
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push str.7B28E39C_883C_4f49_ABFB_5D16796F2DD9
push 0x4b70fc
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x463a99
push str.7B28E39C_883C_4f49_ABFB_5D16796F2DD9
push 0x4ce980
push 0x4b70fc
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x104
push 0x4b6ae4
call fcn.0045fb00
add esp, 8
push 0x4b6ae4
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
push 0x4b6ae4
test eax, eax
je 0x463ad1
push 0x4b70fc
push 0x4cf5b0
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
jmp 0x463adc
push 0x4cf5b0
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x4cf5b0
push str.WinMain____ExeFile:__s
call fcn.00469290
xor ebx, ebx
add esp, 8
cmp dword [0x4b5538], ebx
mov esi, 2
setne bl
cmp dword [0x4b6858], 0
mov edi, dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x463b10
je 0x463bc9
cmp dword [0x4b5538], 0
jne 0x463bc9
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4b5510]
mov dword [ebp - 0x148a8], eax
mov eax, dword [0x4c900c]
push 0x4c900c
mov eax, dword [ecx + eax + 0x3058]
lea ecx, [ebp - 0x14898]
mov dword [ebp - 0x148a4], eax
call fcn.0045bb50
mov ecx, dword [0x4b685c]
mov eax, dword [0x4bd974]
neg ecx
mov dword [ebp - 0x1489c], eax
mov eax, dword [0x4b688c]
sbb ecx, ecx
and ecx, 8
neg eax
sbb eax, eax
xor edx, edx
and eax, 4
or ecx, eax
cmp dword [0x4b6888], edx
mov eax, esi
cmovne eax, edx
or ecx, eax
lea eax, [ebp - 0x148a8]
push eax
push edx
mov dword [ebp - 0x148a0], ecx
call fcn.00429da0
mov ebx, eax
push ebx
push str.WinMain____Dialog_choiceLang:__d
call fcn.00469290
add esp, 0x10
cmp ebx, 1
jne 0x465499
push dword [ebp - 0x1489c]
call fcn.0045bd10
add esp, 4
cmp dword [0x4b65f8], 0
je 0x463ca1
push dword [0x4b6604]
imul eax, dword [0x4bd974], 0x306c
lea ecx, [ebp - 0x14868]
push dword [0x4b6600]
push ecx
push 0x4ccd10
add eax, 0x2a3e
add eax, dword [0x4c900c]
push eax
call fcn.00445ad0
mov ecx, eax
add esp, 0x14
mov dword [0x4b65f8], ecx
test ecx, ecx
je 0x463c94
cmp dword [0x4b6610], 0
je 0x463c82
cmp dword [0x4b5538], 0
jne 0x463c82
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4c900c]
push dword [ecx + eax + 0x3058]
lea eax, [ebp - 0x9b4]
push 0x100
push eax
push 0x2ca
push dword [0x4b5510]
call fcn.00467110
add esp, 0x14
lea eax, [ebp - 0x9b4]
push 0x40024
push 0x4c82d0
push eax
push 0
call edi
xor ecx, ecx
cmp eax, 6
sete cl
mov dword [0x4b65f8], ecx
test ecx, ecx
jne 0x463ca1
cmp dword [0x4b6608], ecx
jne 0x465a78
jmp 0x463ca1
cmp dword [0x4b660c], 0
jne 0x4654c5
cmp dword [0x4b6880], 0
je 0x463dd0
mov ecx, dword [0x4b51b4]
mov eax, 0x14d843bf
sub ecx, dword [0x4b51b0]
xor esi, esi
imul ecx
mov dword [ebp - 0x1486c], esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x465532
xor edi, edi
jmp 0x463ce0
test esi, esi
jne 0x463dca
mov eax, dword [0x4b51b0]
add eax, 0x200
add eax, edi
push eax
push str.WinMain____Platform:__s
call fcn.00469290
mov eax, dword [0x4b51b0]
add eax, 0x400
add eax, edi
push str.Win32
push eax
call fcn.0047054b
add esp, 0x10
test eax, eax
jne 0x463d2a
xor ecx, ecx
cmp dword [0x4b51a4], ecx
sete cl
jmp 0x463d52
mov eax, dword [0x4b51b0]
add eax, 0x400
add eax, edi
push str.Win64
push eax
call fcn.0047054b
add esp, 8
mov ecx, 1
test eax, eax
cmove ecx, dword [0x4b51a4]
push ecx
push str.WinMain____ProcArchitecture:_Continue:__d
mov dword [ebp - 0x14870], ecx
call fcn.00469290
mov esi, dword [ebp - 0x14870]
add esp, 8
test esi, esi
je 0x463d8d
mov eax, dword [0x4b51b0]
push dword [ebp - 0x1486c]
add eax, 0x600
add eax, edi
push eax
call fcn.0043b070
add esp, 8
mov esi, eax
mov ecx, dword [0x4b51b4]
mov eax, 0x14d843bf
sub ecx, dword [0x4b51b0]
add edi, 0x624
inc dword [ebp - 0x1486c]
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x1486c], eax
jb 0x463ce0
test esi, esi
je 0x46552c
mov esi, 2
nop
cmp dword [0x4b6860], 0
je 0x463ef5
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x497b08
push 0x498a44
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
jne 0x463e2b
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x497b08
push str._PASSWORD:
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x463e8f
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
push 0x10
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0xc320]
push 0x11
push eax
call fcn.004702d1
add esp, 0x10
lea eax, [ebp - 0x20c]
mov ecx, 0x4b5fbe
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x463e86
test dx, dx
je 0x463e82
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x463e86
add eax, 4
add ecx, 4
test dx, dx
jne 0x463e60
xor eax, eax
jmp 0x463e8b
sbb eax, eax
or eax, 1
test eax, eax
je 0x463ef5
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4b5510]
mov dword [ebp - 0xc32c], eax
mov eax, dword [0x4c900c]
mov eax, dword [ecx + eax + 0x3058]
mov ecx, dword [0x4b688c]
neg ecx
mov dword [ebp - 0xc328], eax
mov eax, esi
sbb ecx, ecx
xor edx, edx
and ecx, 4
cmp dword [0x4b6888], edx
cmovne eax, edx
or ecx, eax
lea eax, [ebp - 0xc32c]
push eax
push edx
mov dword [ebp - 0xc324], ecx
call fcn.0042b1c0
mov ebx, eax
push ebx
push str.WinMain____Dialog_password:__d
call fcn.00469290
add esp, 0x10
cmp ebx, 3
je 0x463afe
cmp ebx, 1
je 0x463f0b
test ebx, ebx
jne 0x465499
mov edi, ebx
mov dword [ebp - 0x1486c], edi
cmp dword [0x4b6864], 0
je 0x46433c
cmp dword [0x4b5538], 0
jne 0x46433c
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4b5510]
mov dword [ebp - 0x14864], eax
mov eax, dword [0x4c900c]
push 0x4cf3a8
push 0x104
mov eax, dword [ecx + eax + 0x3058]
mov dword [ebp - 0x14860], eax
lea eax, [ebp - 0x14858]
push eax
call fcn.0046fd12
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4c900c]
add ecx, 0x836
add eax, ecx
push eax
lea eax, [ebp - 0x14650]
push 0x800
push eax
call fcn.0046fd12
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4c900c]
add eax, 0x1836
add eax, ecx
push eax
lea eax, [ebp - 0x13650]
push 0x800
push eax
call fcn.0046fd12
add esp, 0x24
mov dword [ebp - 0x1485c], 8
cmp dword [0x4b686c], 0
jne 0x463fdb
mov eax, dword [0x4b6864]
cmp eax, 2
jne 0x464056
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4b5510]
mov dword [ebp - 0xc78c], eax
mov eax, dword [0x4c900c]
push 0x4b771c
push 0x104
mov eax, dword [ecx + eax + 0x3058]
mov dword [ebp - 0xc788], eax
mov eax, dword [0x4b68b4]
mov dword [ebp - 0xc578], eax
mov eax, dword [0x4b68b8]
mov dword [ebp - 0xc574], eax
mov eax, dword [0x4b68bc]
mov dword [ebp - 0xc570], eax
mov eax, dword [0x4b68c0]
mov dword [ebp - 0xc56c], eax
lea eax, [ebp - 0xc780]
push eax
call fcn.0046fd12
mov eax, dword [0x4b6864]
add esp, 0xc
mov dword [ebp - 0xc784], 0x20
cmp eax, 1
mov eax, dword [0x4b5510]
push 0x4c900c
jne 0x4641dc
mov dword [ebp - 0x12650], eax
mov eax, dword [0x4bd974]
imul ecx, eax, 0x306c
mov dword [ebp - 0x1243c], eax
mov eax, dword [0x4c900c]
mov eax, dword [ecx + eax + 0x3058]
lea ecx, [ebp - 0x12438]
mov dword [ebp - 0x1264c], eax
call fcn.0045bb50
mov eax, dword [0x4b68cc]
mov dword [ebp - 0x12420], eax
mov eax, dword [0x4b68d0]
mov dword [ebp - 0x1241c], eax
mov eax, dword [0x4b686c]
mov dword [ebp - 0x1242c], eax
lea eax, [ebp - 0x14864]
push 0x2214
push eax
lea eax, [ebp - 0x12418]
push eax
call fcn.0046f090
mov eax, dword [0x4b68c4]
lea esi, [ebp - 0xc78c]
mov ecx, 0x89
lea edi, [ebp - 0x10204]
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x12428], eax
mov eax, dword [0x4b68c8]
mov dword [ebp - 0x12424], eax
mov eax, dword [0x4b68d4]
mov dword [ebp - 0xffe0], eax
mov eax, dword [0x4b68d8]
push 0x4b7308
mov dword [ebp - 0xffdc], eax
lea eax, [ebp - 0x12644]
push 0x104
push eax
call fcn.0046fd12
mov edx, dword [ebp - 0x12648]
test ebx, ebx
mov ecx, dword [0x4b688c]
mov eax, 1
cmovne edx, eax
mov esi, 2
neg ecx
mov eax, esi
sbb ecx, ecx
xor edi, edi
and ecx, 4
cmp dword [0x4b6888], edi
cmovne eax, edi
or ecx, eax
lea eax, [ebp - 0x12650]
push eax
or edx, ecx
push edi
mov dword [ebp - 0x12648], edx
call fcn.0042b5b0
mov ebx, eax
push ebx
push str.WinMain____Dialog_Welcome:__d
call fcn.00469290
add esp, 0x28
cmp ebx, 1
je 0x464194
cmp ebx, 3
je 0x464194
cmp ebx, 0xd
jne 0x4643d3
mov eax, dword [ebp - 0x12428]
mov dword [0x4b68c4], eax
cmp dword [ebp - 0x1242c], edi
je 0x464336
lea eax, [ebp - 0x101f8]
push eax
push 0x104
push 0x4b771c
call fcn.0046fd12
mov eax, dword [ebp - 0xfff0]
mov dword [0x4b68b4], eax
mov eax, dword [ebp - 0xffe8]
mov dword [0x4b68bc], eax
jmp 0x464333
mov dword [ebp - 0xffd8], eax
mov eax, dword [0x4bd974]
imul ecx, eax, 0x306c
mov dword [ebp - 0xfdc4], eax
mov eax, dword [0x4c900c]
mov eax, dword [ecx + eax + 0x3058]
lea ecx, [ebp - 0xfdc0]
mov dword [ebp - 0xffd4], eax
call fcn.0045bb50
mov eax, dword [0x4b68cc]
mov dword [ebp - 0xfdac], eax
mov eax, dword [0x4b68d0]
mov dword [ebp - 0xfda8], eax
lea eax, [ebp - 0x14864]
push 0x2214
push eax
lea eax, [ebp - 0xfda4]
push eax
call fcn.0046f090
mov eax, dword [0x4b68c4]
lea esi, [ebp - 0xc78c]
mov ecx, 0x89
lea edi, [ebp - 0xdb90]
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xfdb4], eax
mov eax, dword [0x4b68c8]
mov dword [ebp - 0xfdb0], eax
mov eax, dword [0x4b68d4]
mov dword [ebp - 0xd96c], eax
mov eax, dword [0x4b68d8]
push 0x4b7308
mov dword [ebp - 0xd968], eax
lea eax, [ebp - 0xffcc]
push 0x104
push eax
call fcn.0046fd12
mov edx, dword [ebp - 0xffd0]
test ebx, ebx
mov ecx, dword [0x4b688c]
mov eax, 1
cmovne edx, eax
mov esi, 2
neg ecx
mov eax, esi
sbb ecx, ecx
xor edi, edi
and ecx, 4
cmp dword [0x4b6888], edi
cmovne eax, edi
or ecx, eax
lea eax, [ebp - 0xffd8]
push eax
or edx, ecx
push edi
mov dword [ebp - 0xffd0], edx
call fcn.0042bd10
mov ebx, eax
push ebx
push str.WinMain____Dialog_Welcome2:__d
call fcn.00469290
add esp, 0x28
cmp ebx, 1
je 0x4642fc
cmp ebx, 3
je 0x4642fc
cmp ebx, 0xd
jne 0x4643d3
lea eax, [ebp - 0xdb84]
push eax
push 0x104
push 0x4b771c
call fcn.0046fd12
mov eax, dword [ebp - 0xd97c]
mov dword [0x4b68b4], eax
mov eax, dword [ebp - 0xd974]
mov dword [0x4b68bc], eax
mov eax, dword [ebp - 0xfdb4]
mov dword [0x4b68c4], eax
add esp, 0xc
mov edi, dword [ebp - 0x1486c]
cmp ebx, 0xd
jne 0x4643d3
cmp dword [0x4b6864], 1
mov eax, dword [ebp - 0x1243c]
push 0x4ced90
je 0x46435f
mov eax, dword [ebp - 0xfdc4]
push eax
mov dword [0x4bd974], eax
call fcn.0045c3c0
mov eax, dword [0x4b5510]
add esp, 8
test eax, eax
je 0x464398
cmp eax, dword [0x4b550c]
je 0x464398
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push eax
push 0x4cf1a0
push str.WinMain____unload__s___d
call fcn.00469290
add esp, 0xc
push 1
push 0
push 0x4cf1a0
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov ecx, dword [0x4b550c]
test eax, eax
cmovne ecx, eax
push ecx
push eax
push 0x4cf1a0
push str.WinMain____LoadLibrary__s____d__hInstRes:__d_
mov dword [0x4b5510], ecx
call fcn.00469290
add esp, 0x10
mov ebx, edi
jmp 0x463f13
cmp ebx, 3
je 0x463dd0
cmp ebx, 1
je 0x4643f0
test ebx, ebx
jne 0x465499
lea esp, [esp]
cmp dword [0x4b6868], 0
je 0x4644a5
cmp dword [0x4b5538], 0
jne 0x4644a5
cmp dword [0x4b6864], 0
jne 0x4644a5
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4b5510]
mov dword [ebp - 0x14864], eax
mov eax, dword [0x4c900c]
push 0x4cf3a8
push 0x104
mov eax, dword [ecx + eax + 0x3058]
mov dword [ebp - 0x14860], eax
lea eax, [ebp - 0x14858]
push eax
call fcn.0046fd12
mov edx, dword [ebp - 0x1485c]
test ebx, ebx
mov ecx, dword [0x4b688c]
mov eax, 1
cmovne edx, eax
neg ecx
mov eax, esi
sbb ecx, ecx
xor edi, edi
and ecx, 4
cmp dword [0x4b6888], edi
cmovne eax, edi
or ecx, eax
lea eax, [ebp - 0x14864]
push eax
or edx, ecx
push edi
mov dword [ebp - 0x1485c], edx
call fcn.0042ad20
mov ebx, eax
push ebx
push str.WinMain____Dialog_license:__d
call fcn.00469290
add esp, 0x1c
cmp ebx, 3
je 0x4654ba
cmp ebx, 1
je 0x4644bb
test ebx, ebx
jne 0x465499
xor eax, eax
push 0xa0
push eax
mov word [ebp - 0x7b4], ax
lea eax, [ebp - 0x7b2]
push eax
call fcn.0046f6e0
xor eax, eax
push 0xa0
push eax
mov word [ebp - 0x710], ax
lea eax, [ebp - 0x70e]
push eax
call fcn.0046f6e0
lea eax, [ebp - 0x7b4]
push 0x51
push eax
call fcn.00430890
lea eax, [ebp - 0x710]
push 0x51
push eax
call fcn.00430f50
lea eax, [ebp - 0x7b4]
push eax
push str.WinMain____CompanyName:__s
call fcn.00469290
lea eax, [ebp - 0x710]
push eax
push str.WinMain____UserName:__s
call fcn.00469290
add esp, 0x38
mov dword [ebp - 0x14870], 0
mov edi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
mov al, byte [0x4be9d8]
cmp al, 1
je 0x464569
cmp al, 2
je 0x464569
cmp al, 3
je 0x464569
cmp dword [0x4be9dc], 0
jne 0x464569
cmp dword [0x4be9e4], 0
je 0x46486c
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x497b08
push 0x498bd4
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
jne 0x4645bb
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x497b08
push str._SERIAL:
push 0x4bf2e8
call fcn.0043c1a0
add esp, 0x14
test eax, eax
je 0x464638
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
lea ecx, [ebp - 0x20c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4645d1
sub ecx, edx
sar ecx, 1
inc ecx
cmp ecx, 0x3fffffff
jg 0x46461d
lea edi, [ecx + ecx]
mov eax, edi
call fcn.004704a0
mov esi, esp
test esi, esi
je 0x46461d
push 0
push 0
push edi
push esi
push 0xffffffffffffffff
lea eax, [ebp - 0x20c]
mov byte [esi], 0
push eax
push 0
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
neg eax
sbb eax, eax
and eax, esi
jmp 0x46461f
xor eax, eax
push eax
push 0x104
push 0x4be9f0
call fcn.0046fcbd
mov edi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
add esp, 0xc
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xdbc], ax
lea eax, [ebp - 0xdba]
push eax
call fcn.0046f6e0
add esp, 0xc
lea eax, [ebp - 0xfc4]
push eax
push 0x4ca060
lea eax, [ebp - 0xdbc]
push eax
call edi
lea eax, [ebp - 0x15d4]
push eax
lea eax, [ebp - 0xdbc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0xdbc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4646ba
push 3
lea eax, [ebp - 0xdbc]
push 0x10000000
push eax
call fcn.0043a8d0
push eax
lea eax, [ebp - 0xdbc]
push eax
push str.AddAccessRights__s____d
call fcn.00469290
add esp, 0x18
jmp 0x4646e6
cmp dword [0x4b518c], 0
je 0x4646e6
lea eax, [ebp - 0xfc4]
push eax
push 0x23
call fcn.0043b490
push eax
lea eax, [ebp - 0xfc4]
push eax
push str.CreateFreeDirectory__s____d
call fcn.00469290
add esp, 0x14
lea eax, [ebp - 0xdbc]
push eax
call fcn.0043b250
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xc538], ax
lea eax, [ebp - 0xc536]
push eax
call fcn.0046f6e0
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.00430a40
push 0x4bebf8
lea eax, [ebp - 0xc538]
push 0x104
push eax
call fcn.0046fd12
push 0x104
lea eax, [ebp - 0xc538]
push eax
push 1
push 0x498c64
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.00430ff0
push 0x104
lea eax, [ebp - 0xdbc]
push eax
push 1
push 0x498c74
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.00430ff0
add esp, 0x54
lea eax, [ebp - 0x66c]
push 0x104
push 0x4b70fc
push 1
push str.MainPath
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
cmp byte [0x4be9d8], 1
jne 0x4647d4
push 0x27
push 0x4bf048
push 1
push str.Guid
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.00430ff0
add esp, 0x18
jmp 0x46486c
cmp byte [0x4be9d8], 3
jne 0x46486c
mov ecx, 0x4c781a
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4647f0
sub ecx, edx
lea edi, [ecx + 1]
cmp edi, 0x3fffffff
jg 0x464831
lea eax, [edi + edi]
call fcn.004704a0
mov esi, esp
test esi, esi
je 0x464831
push edi
push esi
push 0xffffffffffffffff
xor eax, eax
push 0x4c781a
push eax
push 3
mov word [esi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
neg eax
sbb eax, eax
and eax, esi
jmp 0x464833
xor eax, eax
push eax
lea eax, [ebp - 0xc538]
push 0x104
push eax
call fcn.0046fd12
push 0x104
lea eax, [ebp - 0xc538]
push eax
push 1
push str.SerialId
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.00430ff0
add esp, 0x24
xor esi, esi
cmp byte [0x4be9d8], 1
jne 0x464a9e
push 0x574
lea eax, [ebp - 0xcd04]
mov dword [ebp - 0xcd08], esi
push esi
push eax
call fcn.0046f6e0
lea eax, [ebp - 0xcd00]
push eax
push 0x4bf048
call fcn.004406e0
add esp, 0x14
cmp dword [ebp - 0x14870], esi
je 0x4648cd
movdqu xmm0, xmmword [ebp - 0xcd00]
push 0x4be9f0
sub esp, 0x10
mov eax, esp
movdqu xmmword [eax], xmm0
call fcn.00432dc0
add esp, 0x14
cmp dword [0x4bee38], esi
je 0x4648f8
movdqu xmm0, xmmword [ebp - 0xcd00]
sub esp, 0x10
mov eax, esp
movdqu xmmword [eax], xmm0
call fcn.00432e90
mov esi, eax
add esp, 0x10
test esi, esi
jne 0x464ccb
imul edx, dword [0x4bd974], 0x306c
mov ecx, dword [0x4b5510]
cmp dword [0x4bee34], 0
mov dword [ebp - 0xcd08], ecx
mov ecx, dword [0x4c900c]
sete al
inc al
mov ecx, dword [edx + ecx + 0x3058]
mov dword [ebp - 0xcd04], ecx
mov ecx, dword [0x4b688c]
neg ecx
mov byte [ebp - 0xccf0], al
mov eax, 0x400
sbb ecx, ecx
xor edx, edx
and ecx, 0x800
cmp dword [0x4b6888], edx
cmovne eax, edx
or ecx, eax
or ecx, dword [0x4bee3c]
mov dword [ebp - 0xccef], ecx
test ebx, ebx
je 0x464971
or ecx, 0x200
mov dword [ebp - 0xccef], ecx
push ecx
push str.WinMain____SNV3Info.uiDlgOption:__d
call fcn.00469290
mov al, byte [0x4bf096]
mov byte [ebp - 0xcceb], al
movzx eax, al
push eax
push eax
push str.WinMain____SNV3Info.byProductCode:__d___x_
call fcn.00469290
mov al, byte [0x4bee1b]
mov byte [ebp - 0xcce9], al
mov al, byte [0x4bee1c]
mov byte [ebp - 0xccea], al
mov al, byte [0x4bf097]
mov byte [ebp - 0xcce8], al
mov al, byte [0x4bf098]
mov byte [ebp - 0xcce6], al
mov al, byte [0x4bee1e]
mov byte [ebp - 0xcce7], al
lea eax, [ebp - 0x7b4]
push eax
lea eax, [ebp - 0xc8d4]
push 0x51
push eax
call fcn.0046fd12
lea eax, [ebp - 0x710]
push eax
lea eax, [ebp - 0xc832]
push 0x51
push eax
call fcn.0046fd12
push 0x4bee40
lea eax, [ebp - 0xcadc]
push 0x104
push eax
call fcn.0046fd12
push 0x4be9f0
lea eax, [ebp - 0xcce4]
push 0x104
push eax
call fcn.0046fcbd
add esp, 0x44
lea eax, [ebp - 0xcbe0]
push 0x4beaf4
push 0x104
push eax
call fcn.0046fcbd
add esp, 0xc
cmp dword [0x4b5538], 0
jne 0x464a7c
lea eax, [ebp - 0xcd08]
push eax
push 0
call fcn.00431db0
mov ebx, eax
push ebx
push str.WinMain____Dialog_SerialV3:__d
call fcn.00469290
add esp, 0x10
cmp ebx, 3
je 0x4654b0
cmp ebx, 1
je 0x464a7c
test ebx, ebx
jne 0x465499
lea eax, [ebp - 0xcd08]
push eax
call fcn.00432f50
add esp, 4
test eax, eax
je 0x465598
lea eax, [ebp - 0xcce4]
jmp 0x464cb8
cmp byte [0x4be9d8], 3
jne 0x464ccb
push 0x775
lea eax, [ebp - 0xcf04]
mov dword [ebp - 0xcf08], esi
push 0
push eax
call fcn.0046f6e0
push 0x4c781a
lea eax, [ebp - 0xcf00]
push 0xf
push eax
call fcn.0046fcbd
add esp, 0x18
cmp dword [ebp - 0x14870], esi
je 0x464af8
lea eax, [ebp - 0xcf00]
push eax
lea eax, [ebp - 0x66c]
push eax
call fcn.00434740
add esp, 8
cmp dword [0x4c7608], esi
je 0x464b20
lea eax, [ebp - 0xcf00]
push eax
lea eax, [ebp - 0x66c]
push eax
call fcn.00434790
mov esi, eax
add esp, 8
test esi, esi
jne 0x464ccb
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4b5510]
cmp dword [0x4c7604], 0
mov dword [ebp - 0xcf08], eax
mov eax, dword [0x4c900c]
mov eax, dword [ecx + eax + 0x3058]
mov ecx, dword [0x4b688c]
mov dword [ebp - 0xcf04], eax
sete al
inc al
neg ecx
mov byte [ebp - 0xcef1], al
mov eax, 0x400
sbb ecx, ecx
xor edx, edx
and ecx, 0x800
cmp dword [0x4b6888], edx
cmovne eax, edx
or ecx, eax
or ecx, dword [0x4c760c]
mov dword [ebp - 0xcef0], ecx
test ebx, ebx
je 0x464b97
or ecx, 0x200
mov dword [ebp - 0xcef0], ecx
lea eax, [ebp - 0x7b4]
push eax
lea eax, [ebp - 0xc8d3]
push 0x51
push eax
call fcn.0046fd12
lea eax, [ebp - 0x710]
push eax
lea eax, [ebp - 0xc831]
push 0x51
push eax
call fcn.0046fd12
push 0x4c7612
lea eax, [ebp - 0xcadb]
push 0x104
push eax
call fcn.0046fd12
push 0x4be9f0
lea eax, [ebp - 0xceeb]
push 0x104
push eax
call fcn.0046fcbd
push 0x4beaf4
lea eax, [ebp - 0xcde7]
push 0x104
push eax
call fcn.0046fcbd
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0xcce3]
push 0x104
push eax
call fcn.0046fd12
add esp, 0x48
lea eax, [ebp - 0x66c]
push eax
push str.WinMain____AQTOOLSINFO.szProductKey:__s
call fcn.00469290
push 0x4c781a
push str.WinMain____AQTOOLSSERIALV5.szSerialID:__s
call fcn.004695f0
add esp, 0x10
cmp dword [0x4b5538], 0
jne 0x464c7e
lea eax, [ebp - 0xcf08]
push eax
push 0
call fcn.00433ad0
mov ebx, eax
push ebx
push str.WinMain____Dialog_SerialV5_d
call fcn.00469290
add esp, 0x10
cmp ebx, 3
je 0x4654b0
cmp ebx, 1
je 0x464c7e
test ebx, ebx
jne 0x465499
lea eax, [ebp - 0xceeb]
push eax
push str.WinMain____SNV5Info.szSerial:__s
call fcn.004695f0
lea eax, [ebp - 0xceeb]
push eax
lea eax, [ebp - 0x66c]
push 0x4c781a
push eax
call fcn.00434840
add esp, 0x14
test eax, eax
je 0x465598
lea eax, [ebp - 0xceeb]
push eax
push 0x104
push 0x4be9f0
call fcn.0046fcbd
add esp, 0xc
cmp dword [0x4be9dc], 0
je 0x464fab
test esi, esi
jne 0x464fab
cmp dword [0x4bf09c], esi
je 0x464da2
cmp dword [ebp - 0x14878], esi
jne 0x464da2
cmp dword [0x4b5538], esi
jne 0x465626
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4c900c]
push dword [ecx + eax + 0x3058]
lea eax, [ebp - 0xbb4]
push 0x100
push eax
push 0x258
push dword [0x4b5510]
call fcn.00467110
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4c900c]
push dword [ecx + eax + 0x3058]
lea eax, [ebp - 0x9b4]
push 0x100
push eax
push 0x2c3
push dword [0x4b5510]
call fcn.00467110
add esp, 0x28
jmp 0x464d70
push 0x25
lea eax, [ebp - 0xbb4]
push eax
lea eax, [ebp - 0x9b4]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
je 0x465499
push 0
call fcn.0041a8e0
mov dword [ebp - 0x14878], eax
test eax, eax
je 0x464d70
mov ecx, 0x4be9f0
lea edx, [ecx + 1]
lea ebx, [ebx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x464db0
sub ecx, edx
lea edi, [ecx + 1]
cmp edi, 0x3fffffff
jg 0x464df1
lea eax, [edi + edi]
call fcn.004704a0
mov esi, esp
test esi, esi
je 0x464df1
push edi
push esi
push 0xffffffffffffffff
xor eax, eax
push 0x4be9f0
push eax
push 3
mov word [esi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
neg eax
sbb eax, eax
and eax, esi
jmp 0x464df3
xor eax, eax
push eax
lea eax, [ebp - 0x66c]
push eax
call fcn.0041a9a0
mov edx, 0x4be9f0
mov dword [ebp - 0x14884], eax
lea esi, [edx + 1]
mov edi, edi
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x464e10
sub edx, esi
lea edi, [edx + 1]
cmp edi, 0x3fffffff
jg 0x464e51
lea eax, [edi + edi]
call fcn.004704a0
mov esi, esp
test esi, esi
je 0x464e51
push edi
push esi
push 0xffffffffffffffff
xor eax, eax
push 0x4be9f0
push eax
push 3
mov word [esi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
neg eax
sbb eax, eax
and eax, esi
jmp 0x464e53
xor eax, eax
push dword [ebp - 0x14884]
push eax
lea eax, [ebp - 0x66c]
push eax
push str.WinMain____ActivProd_SetSerialNumber__s___s____d
call fcn.00469290
add esp, 0x10
lea eax, [ebp - 0x66c]
push 0
push 0
push 1
push 0
push 0
push 0
push 0xfffffffffffffffe
push closesocket
push 0
push eax
call fcn.0041aa90
mov esi, eax
lea eax, [ebp - 0x66c]
push esi
push 0
push eax
push str.WinMain____ActivProdEx__s___d____d
call fcn.00469290
add esp, 0x10
test esi, esi
jne 0x464fab
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4c900c]
push dword [ecx + eax + 0x3058]
lea eax, [ebp - 0xbb4]
push 0x100
push eax
push 0x258
push dword [0x4b5510]
call fcn.00467110
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4c900c]
push dword [ecx + eax + 0x3058]
lea eax, [ebp - 0x9b4]
push 0x100
push eax
push 0x2c2
push dword [0x4b5510]
call fcn.00467110
mov ecx, 0x4be9f0
add esp, 0x28
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x464f20
sub ecx, edx
lea edi, [ecx + 1]
cmp edi, 0x3fffffff
jg 0x464f61
lea eax, [edi + edi]
call fcn.004704a0
mov esi, esp
test esi, esi
je 0x464f61
push edi
push esi
push 0xffffffffffffffff
xor eax, eax
push 0x4be9f0
push eax
push 3
mov word [esi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
neg eax
sbb eax, eax
and eax, esi
jmp 0x464f63
xor eax, eax
push 0x4b5540
push eax
lea eax, [ebp - 0x9b4]
push eax
lea eax, [ebp - 0x19d4]
push 0x200
push eax
call fcn.0046ebde
add esp, 0x14
lea eax, [ebp - 0xbb4]
push 0
push eax
lea eax, [ebp - 0x19d4]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0x14870], 1
jmp 0x46453c
cmp dword [0x4be9e0], 0
je 0x465135
push 0x236
lea eax, [ebp - 0xc564]
push 0
push eax
call fcn.0046f6e0
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4b5510]
mov dword [ebp - 0xc568], eax
mov eax, dword [0x4c900c]
push 0x4c7840
push 0xb
mov eax, dword [ecx + eax + 0x3058]
mov ecx, dword [0x4b688c]
mov dword [ebp - 0xc564], eax
neg ecx
mov eax, dword [0x4c7830]
mov dword [ebp - 0xc554], eax
sbb ecx, ecx
mov eax, dword [0x4c783c]
xor edx, edx
mov dword [ebp - 0xc55c], eax
and ecx, 4
mov eax, dword [0x4c7838]
cmp dword [0x4b6888], edx
mov dword [ebp - 0xc558], eax
mov eax, dword [0x4c7834]
mov dword [ebp - 0xc560], eax
mov eax, 2
cmovne eax, edx
or ecx, eax
lea eax, [ebp - 0xc550]
or dword [ebp - 0xc332], ecx
push eax
call fcn.0046fd12
mov edi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0xc53a]
add esp, 0x18
push str.Toolbar.bmp
push 0x4ce980
push eax
call edi
cmp dword [0x4b5538], 0
jne 0x4650a2
lea eax, [ebp - 0xc568]
push eax
push 0
call fcn.00427410
mov ebx, eax
push ebx
push str.WinMain____Dialog_Toolbar:__d
call fcn.00469290
add esp, 0x10
cmp ebx, 1
jne 0x465499
cmp dword [ebp - 0xc560], 0
je 0x46513b
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4c900c]
push dword [ecx + eax + 0x3058]
lea eax, [ebp - 0x19d4]
push 0x200
push eax
push 0x2c7
push dword [0x4b5510]
call fcn.00467110
push 1
lea eax, [ebp - 0x19d4]
push eax
push 0x4c82d0
push dword [0x4b5510]
call fcn.00441a20
push dword [ebp - 0xc558]
lea eax, [ebp - 0x13cc]
push dword [ebp - 0xc55c]
push dword [ebp - 0x14874]
push 0x4c7840
push eax
push 0
call fcn.00427d40
push 0
push 0
push 0
push dword [0x4b5510]
call fcn.00441a20
add esp, 0x4c
jmp 0x46513b
mov edi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [0x4be9e4], 0
je 0x465392
push 0x736
lea eax, [ebp - 0xcec8]
push 0
push eax
call fcn.0046f6e0
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4b5510]
mov dword [ebp - 0xcecc], eax
mov eax, dword [0x4c900c]
mov eax, dword [ecx + eax + 0x3058]
mov dword [ebp - 0xcec8], eax
mov al, byte [0x4c7a61]
mov byte [ebp - 0xccc4], al
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0xccc3]
push 0x104
push eax
call fcn.0046fd12
push 0x1f
lea eax, [ebp - 0xfc4]
push eax
lea eax, [ebp - 0xc9db]
push 0x20
push eax
call fcn.004702d1
push 0x1f
lea eax, [ebp - 0x15d4]
push eax
lea eax, [ebp - 0xc99b]
push 0x20
push eax
call fcn.004702d1
push 0x10
push 0x20
lea eax, [ebp - 0xc7db]
push eax
movzx eax, byte [0x4bee1a]
push eax
call fcn.00472d9a
add esp, 0x48
lea eax, [ebp - 0xc95b]
push 0x1f
push 0x4b5540
push 0x20
push eax
call fcn.004702d1
push 0x4bebf8
lea eax, [ebp - 0xca1b]
push 0x20
push eax
call fcn.0046fd12
lea eax, [ebp - 0x7b4]
push eax
lea eax, [ebp - 0xca7b]
push 0x20
push eax
call fcn.0046fd12
lea eax, [ebp - 0x710]
push eax
lea eax, [ebp - 0xcabb]
push 0x20
push eax
call fcn.0046fd12
mov ecx, 0x4be9f0
add esp, 0x34
lea edx, [ecx + 1]
jmp 0x465250
mov al, byte [ecx]
inc ecx
test al, al
jne 0x465250
sub ecx, edx
lea edi, [ecx + 1]
cmp edi, 0x3fffffff
jg 0x465291
lea eax, [edi + edi]
call fcn.004704a0
mov esi, esp
test esi, esi
je 0x465291
push edi
push esi
push 0xffffffffffffffff
xor eax, eax
push 0x4be9f0
push eax
push 3
mov word [esi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
neg eax
sbb eax, eax
and eax, esi
jmp 0x465293
xor eax, eax
push eax
lea eax, [ebp - 0xc89b]
push 0x40
push eax
call fcn.0046fd12
push 0x4c84b6
lea eax, [ebp - 0xc91b]
push 0x20
push eax
call fcn.0046fd12
push 0xa
push 0x10
lea eax, [ebp - 0xca3b]
push eax
movzx eax, byte [0x4bee1c]
push eax
call fcn.00472d9a
mov al, byte [0x4bee1d]
mov byte [ebp - 0xc797], al
mov eax, dword [0x4c7c74]
mov dword [ebp - 0xc796], eax
lea eax, [ebp - 0xc8db]
push 0x20
push eax
movzx eax, byte [0x4bee1b]
push eax
call fcn.0042e890
push 0x4c7a6c
lea eax, [ebp - 0xcec4]
push 0x100
push eax
call fcn.0046fd12
add esp, 0x40
push str.WinMain____before_OLRDisplay
call fcn.00469290
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xc538], ax
lea eax, [ebp - 0xc536]
push eax
call fcn.0046f6e0
mov edi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0xc538]
add esp, 0x10
push str.OLRegistu.dll
push 0x4cef98
push eax
call edi
xor eax, eax
cmp dword [0x4b5538], eax
sete al
push eax
lea eax, [ebp - 0xc538]
push eax
lea eax, [ebp - 0xcecc]
push eax
push 0
call fcn.0042e8d0
mov ebx, eax
push ebx
push str.WinMain____Dialog_OLRv3:__d
call fcn.00469290
add esp, 0x18
cmp ebx, 1
je 0x465392
cmp ebx, 3
jne 0x465499
cmp dword [0x4b686c], 0
je 0x46547f
cmp dword [0x4b6864], 0
jne 0x46547f
cmp dword [0x4b5538], 0
jne 0x46547f
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4b5510]
mov dword [ebp - 0xc78c], eax
mov eax, dword [0x4c900c]
push 0x4b771c
push 0x104
mov eax, dword [ecx + eax + 0x3058]
mov dword [ebp - 0xc788], eax
mov eax, dword [0x4b68b4]
mov dword [ebp - 0xc578], eax
mov eax, dword [0x4b68b8]
mov dword [ebp - 0xc574], eax
lea eax, [ebp - 0xc780]
push eax
call fcn.0046fd12
mov eax, dword [0x4b68bc]
test ebx, ebx
mov edx, dword [ebp - 0xc784]
mov ecx, dword [0x4b688c]
mov dword [ebp - 0xc570], eax
mov eax, dword [0x4b68c0]
mov dword [ebp - 0xc56c], eax
mov eax, 1
cmovne edx, eax
neg ecx
mov eax, 2
sbb ecx, ecx
xor esi, esi
and ecx, 4
cmp dword [0x4b6888], esi
cmovne eax, esi
or ecx, eax
lea eax, [ebp - 0xc78c]
push eax
or edx, ecx
push esi
mov dword [ebp - 0xc784], edx
call fcn.0042a210
mov ebx, eax
push ebx
push str.WinMain____Dialog_license:__d
call fcn.00469290
add esp, 0x1c
cmp ebx, 1
je 0x465635
cmp ebx, 3
je 0x464542
cmp ebx, 1
je 0x465664
test ebx, ebx
je 0x465664
mov dword [ebp - 0x14868], 0x4c7
jmp 0x465a78
mov esi, 2
jmp 0x4643f0
mov edi, dword [ebp - 0x1486c]
jmp 0x463f13
push 0
push 0x100
lea eax, [ebp - 0x9b4]
push eax
push dword [ebp - 0x14868]
call fcn.0045c680
add esp, 0x10
test eax, eax
je 0x465a78
cmp dword [0x4b5538], 0
jne 0x465a78
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4c900c]
push 0
add eax, 0x2a3e
push 0
add eax, ecx
push eax
lea eax, [ebp - 0x9b4]
push eax
push 0x4c82d0
push 0
call fcn.0045d600
add esp, 0x18
jmp 0x465a78
mov edi, dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [0x4b5538], 0
mov dword [ebp - 0x14868], 0xa
jne 0x465a78
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4c900c]
push dword [ecx + eax + 0x3058]
lea eax, [ebp - 0x9b4]
push 0x100
push eax
push 0x25f
push dword [0x4b5510]
call fcn.00467110
add esp, 0x14
lea eax, [ebp - 0x9b4]
push 0x40010
push 0x4c82d0
push eax
push 0
call edi
jmp 0x465a78
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4c900c]
push dword [ecx + eax + 0x3058]
lea eax, [ebp - 0xbb4]
push 0x100
push eax
push 0x258
push dword [0x4b5510]
call fcn.00467110
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4c900c]
push dword [ecx + eax + 0x3058]
lea eax, [ebp - 0x9b4]
push 0x100
push eax
push 0x2bf
push dword [0x4b5510]
call fcn.00467110
add esp, 0x28
lea eax, [ebp - 0xbb4]
push 0
push eax
lea eax, [ebp - 0x9b4]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0x14868], 0xd
jmp 0x465a78
mov dword [ebp - 0x14868], 0x4cd
jmp 0x465a78
lea eax, [ebp - 0xc780]
push eax
push 0x104
push 0x4b771c
call fcn.0046fd12
mov eax, dword [ebp - 0xc578]
add esp, 0xc
mov dword [0x4b68b4], eax
mov eax, dword [ebp - 0xc570]
mov dword [0x4b68bc], eax
push 0x4c3168
push str.WinMain____CmdExeLine:__s
call fcn.00469290
push 0x2df
push 0
push 0x4c8d18
call fcn.0046f6e0
mov eax, dword [0x4b5510]
add esp, 0x14
mov ecx, dword [0x4c9010]
mov esi, dword [0x4c900c]
sub ecx, esi
mov dword [ebp - 0xd128], eax
mov eax, 0x2a4b80c9
imul ecx
mov dword [0x4c8d18], 0
sar edx, 0xb
mov eax, edx
mov dword [0x4c8d81], 0x40002
shr eax, 0x1f
mov dword [0x4c8dea], 0x40001
mov dword [0x4c8e53], 0x40008
mov dword [0x4c8ebc], 0x40004
mov dword [0x4c8f25], 0x10
mov dword [0x4c8f8e], 0xffffffff
add eax, edx
je 0x465712
imul eax, dword [0x4bd974], 0x306c
mov eax, dword [eax + esi + 0x3058]
mov dword [ebp - 0xd124], eax
jmp 0x46571c
mov dword [ebp - 0xd124], 0x809
mov ecx, dword [0x4b688c]
neg ecx
push str.PackImages_
sbb ecx, ecx
xor eax, eax
and ecx, 2
cmp dword [0x4b6888], eax
push 0x4ce980
sete al
or ecx, eax
mov al, byte [0x4b8794]
or dword [ebp - 0xd120], ecx
mov byte [ebp - 0xd114], al
mov eax, dword [0x4b7f40]
mov dword [ebp - 0xd11c], eax
mov eax, dword [0x4b7f44]
mov dword [ebp - 0xd118], eax
lea eax, [ebp - 0xd113]
push eax
call edi
lea eax, [ebp - 0xd128]
push eax
push 0
call fcn.00441f40
push dword [0x4af524]
mov dword [0x4b5524], eax
push dword [ebp - 0x14868]
push str.WinMain____Error:__d___ExitCode:__d
call fcn.00469290
add esp, 0x14
cmp dword [ebp - 0x14868], 0
jne 0x465983
cmp dword [0x4af524], 0
jne 0x465983
cmp dword [0x4b5538], 0
jne 0x465983
imul ecx, dword [0x4bd974], 0x306c
mov eax, dword [0x4b5510]
mov dword [ebp - 0xd964], eax
mov eax, dword [0x4c900c]
push 0x4b7308
push 0x104
mov eax, dword [ecx + eax + 0x3058]
mov dword [ebp - 0xd960], eax
lea eax, [ebp - 0xd958]
push eax
call fcn.0046fd12
lea eax, [ebp - 0xd750]
push 0x104
push eax
call fcn.004619d0
push 0x4b7b2c
lea eax, [ebp - 0xd548]
push 0x104
push eax
call fcn.0046fd12
mov eax, dword [0x4b7f3c]
add esp, 0x20
cmp dword [0x4b6870], 0
mov dword [ebp - 0xd138], eax
mov eax, dword [0x4b68bc]
mov dword [ebp - 0xd134], eax
je 0x4658e2
cmp dword [0x4b65f8], 0
je 0x46585d
push 0x4b63f0
jmp 0x465872
cmp dword [0x4b6850], 0
je 0x46586d
push 0x48c8a4
jmp 0x465872
push 0x4b70fc
lea eax, [ebp - 0xd340]
push 0x104
push eax
call fcn.0046fd12
mov eax, dword [0x4b68d4]
add esp, 0xc
mov dword [ebp - 0xd130], eax
mov ecx, 2
mov eax, dword [0x4b68d8]
mov dword [ebp - 0xd12c], eax
mov eax, dword [0x4b688c]
neg eax
sbb eax, eax
xor edx, edx
and eax, 4
cmp dword [0x4b6888], edx
cmovne ecx, edx
or eax, ecx
or dword [ebp - 0xd95c], eax
lea eax, [ebp - 0xd964]
push eax
push edx
call fcn.0042a770
mov ebx, eax
push ebx
push str.WinMain____Dialog_Finish:__d
call fcn.00469290
add esp, 0x10
jmp 0x465983
test eax, eax
je 0x465983
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xc538], ax
lea eax, [ebp - 0xc536]
push eax
call fcn.0046f6e0
add esp, 0xc
lea eax, [ebp - 0xd750]
push eax
lea eax, [ebp - 0xc538]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0xc538]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
mov eax, dword [ebp - 0xd138]
cmp eax, 2
jne 0x46594c
lea eax, [ebp - 0xd548]
push eax
lea eax, [ebp - 0xd750]
push eax
call fcn.0043b5a0
add esp, 8
jmp 0x465983
push 0
push 0
push 1
test eax, eax
lea eax, [ebp - 0xc538]
push 0
jne 0x465965
push str.open
jmp 0x46596a
push str.Runas
push eax
lea eax, [ebp - 0xd548]
push eax
lea eax, [ebp - 0xd750]
push eax
push 0
call fcn.004667d0
add esp, 0x24
cmp ebx, 1
je 0x46599e
mov eax, dword [ebp - 0x14868]
test ebx, ebx
mov ecx, 0x4c7
cmovne eax, ecx
mov dword [ebp - 0x14868], eax
cmp dword [0x4bd988], 0
je 0x465a78
cmp dword [ebp - 0x14868], 0
jne 0x465a78
cmp dword [0x4af524], 0
jne 0x465a78
cmp dword [0x4b6864], 0
je 0x465a78
cmp dword [0x4b68c8], 0
jne 0x465a78
cmp dword [0x4b5538], 0
jne 0x465a78
push str.event
lea eax, [ebp - 0x7efb]
push 0x1e
push eax
call fcn.0046fd12
push 0x4be0f8
lea eax, [ebp - 0x7ebb]
push 0x1e
push eax
call fcn.0046fd12
push str.AvanquestMessage
lea eax, [ebp - 0x7d8d]
push 0x1e
push eax
call fcn.0046fd12
add esp, 0x24
lea eax, [ebp - 0x7b85]
cmp dword [0x4b68c4], 0
je 0x465a3e
push str.Tick
jmp 0x465a43
push str.Untick
push 0x104
push eax
call fcn.0046fd12
add esp, 0xc
lea eax, [ebp - 0x797d]
push 0x48c8a4
push 0x1f
push eax
call fcn.0046fd12
add esp, 0xc
lea eax, [ebp - 0x7f74]
push eax
push 0x4bd990
call fcn.004445b0
mov edi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x4ced90
call fcn.0043d560
add esp, 4
test eax, eax
je 0x465aa0
push 0x4ced90
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [0x4b5514]
test eax, eax
je 0x465ab0
push eax
call dword [sym.imp.KERNEL32.dll_FreeResource]
mov eax, dword [ebp - 0x14888]
test eax, eax
je 0x465abd
push eax
call edi
mov eax, dword [0x4b551c]
test eax, eax
je 0x465ac9
push eax
call edi
mov eax, dword [0x4b5518]
test eax, eax
je 0x465b0e
push str.ISnuiShutdown
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x465ae6
call eax
jmp 0x465af8
push str.ISnuiShutdown
push str.Function__s_failed_
call fcn.004695f0
add esp, 8
push dword [0x4b5518]
call edi
push eax
push str.WinMain____unload_NewUI___d
call fcn.00469290
add esp, 8
mov eax, dword [0x4b5510]
test eax, eax
je 0x465b35
cmp eax, dword [0x4b550c]
je 0x465b35
push eax
call edi
push eax
push 0x4cf1a0
push str.WinMain____unload__s___d
call fcn.00469290
add esp, 0xc
call dword [sym.imp.ole32.dll_CoUninitialize]
mov esi, dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
push 0x4ce980
call esi
test eax, eax
je 0x465b6b
push 2
push 0x4ce980
call fcn.00467490
push eax
push 0x4ce980
push str.WinMain____Remove_folder__s___d_
call fcn.00469290
add esp, 0x14
push 0x4ceb88
call esi
test eax, eax
je 0x465bae
cmp dword [0x4b7f6c], 0
je 0x465b8c
push 0x4ceb88
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x465b9b
push 2
push 0x4ceb88
call fcn.00467490
add esp, 8
push eax
push 0x4ceb88
push str.WinMain____Remove_folder__s___d_
call fcn.00469290
add esp, 0xc
cmp dword [0x4b684c], 0
je 0x465bf9
push 0x4b70fc
call esi
test eax, eax
je 0x465bf9
push 0x4cd120
push 0x4b70fc
call fcn.0047054b
add esp, 8
test eax, eax
je 0x465bf9
push 2
push 0x4b70fc
call fcn.00467490
push eax
push 0x4b70fc
push str.WinMain____Remove_folder__s___d_
call fcn.00469290
add esp, 0x14
jmp 0x465c0b
push 0x4b70fc
push str.WinMain____the_folder__s_will_not_be_removed_
call fcn.00469290
add esp, 8
cmp dword [ebp - 0x1487c], 0
je 0x465c4d
push 0
lea eax, [ebp - 0x14868]
push eax
push dword [ebp + 0x14]
push 0
push str.Runas
push 0x48c8a4
push dword [ebp - 0x1488c]
push 0x4ccd10
push 0
call fcn.004667d0
add esp, 0x24
test eax, eax
jne 0x465c4d
call ebx
mov dword [ebp - 0x14868], eax
mov eax, dword [ebp - 0x14880]
test eax, eax
je 0x465c5e
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x4af524]
test eax, eax
mov ecx, dword [ebp - 0x14868]
cmovne ecx, eax
push ecx
push str.WinMain____End__x_
mov dword [ebp - 0x14868], ecx
call fcn.00469290
add esp, 8
mov eax, dword [ebp - 0xfdc0]
mov esi, dword [ebp - 0x14868]
test eax, eax
je 0x465cb9
push eax
call fcn.0046e000
add esp, 4
mov dword [ebp - 0xfdc0], 0
mov dword [ebp - 0xfdbc], 0
mov dword [ebp - 0xfdb8], 0
mov eax, dword [ebp - 0x12438]
test eax, eax
je 0x465cea
push eax
call fcn.0046e000
add esp, 4
mov dword [ebp - 0x12438], 0
mov dword [ebp - 0x12434], 0
mov dword [ebp - 0x12430], 0
mov ecx, dword [ebp - 0x14898]
test ecx, ecx
je 0x465cfd
push ecx
call fcn.0046e000
add esp, 4
mov eax, esi
lea esp, [ebp - 0x148b4]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0046ebfa
mov esp, ebp
pop ebp
ret 0x10