Function at 0x444ebd
Capabilities:
Accept command line arguments
Check for peb ntglobalflag flag
Check for sandbox username or hostname
Check for time delay via gettickcount
Check if file exists
Check os version
Contain obfuscated stackstrings
Copy file
Create process on windows
Delete file
Get file attributes
Get hostname
Get number of processors
Move file
Parse pe header
Print debug messages
Resolve function by parsing pe exports
Set current directory
Set environment variable
Set registry value
Terminate process
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4e1633
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x36e4
call fcn.004bf6f0
mov eax, dword [0x522f10]
xor eax, esp
mov dword [esp + 0x36e0], eax
push ebx
push esi
push edi
mov eax, dword [0x522f10]
xor eax, esp
push eax
lea eax, [esp + 0x36f8]
mov dword fs:[0], eax
lea eax, [esp + 0x2a4]
xor esi, esi
mov dword [esp + 0x4c], esi
push eax
mov dword [esp + 0x68], ecx
mov dword [esp + 0x2a8], 8
mov dword [esp + 0x2ac], 0xff
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov ecx, dword [esp + 0x64]
call fcn.004b31c2
mov ebx, 0x4eaa5c
push ebx
lea ecx, [esp + 0x64]
call fcn.004247f3
push ebx
lea ecx, [esp + 0x6c]
mov dword [esp + 0x3704], esi
call fcn.004247f3
push ebx
lea ecx, [esp + 0x7c]
mov byte [esp + 0x3704], 1
call fcn.004247f3
lea eax, [esp + 0x1c]
push eax
mov byte [esp + 0x3704], 2
call fcn.00469b30
pop ecx
lea ecx, [esp + 0x48]
call fcn.00422487
mov byte [esp + 0x3700], 4
mov edi, dword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea eax, [esp + 0x54]
push eax
mov dword [esp + 0x80], esi
call edi
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x2a0]
push eax
mov dword [esp + 0x38], esi
mov dword [esp + 0x5c], esi
mov dword [esp + 0x54], esi
mov dword [esp + 0x44], esi
call fcn.00469b30
pop ecx
push eax
mov ecx, 0x528fa0
mov byte [esp + 0x3704], 5
call fcn.00424837
mov byte [esp + 0x3700], 4
mov ecx, dword [esp + 0x2a0]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x1d4]
push eax
call fcn.00469b30
pop ecx
mov dword [esp + 0x2c], eax
mov byte [esp + 0x3700], 6
call edi
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
mov eax, dword [esp + 0x34]
push dword [eax]
push str.Loader:__s__CmdLine_s
push ecx
call fcn.0046aaf0
add esp, 0x10
call fcn.00443d79
pop ecx
mov byte [esp + 0x3700], 4
mov ecx, dword [esp + 0x1d4]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push str._CEK_
mov edi, 0x400
call fcn.004247f3
lea eax, [esp + 0x1ac]
push eax
mov ecx, edi
call fcn.00470db0
mov byte [esp + 0x3708], 7
mov eax, dword [eax]
mov eax, dword [eax - 0xc]
add esp, 4
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
push str.Loader:_CEK:_Len_d
push ecx
call fcn.0046aaf0
add esp, 0xc
call fcn.00443d79
pop ecx
mov byte [esp + 0x3700], 4
mov ecx, dword [esp + 0x1a8]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
push 1
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x528bf0], eax
cmp dword [esp + 0x30], esi
je 0x446043
xor eax, eax
inc eax
cmp dword [esp + 0x54], eax
jle 0x446043
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x30]
push ecx
lea edi, [eax + ecx*4]
mov ecx, esp
mov dword [esp + 0x3c], esp
push dword [edi]
call fcn.004247f3
call fcn.00443da9
mov dword [esp], 0x4f983c
call fcn.004b8970
pop ecx
push eax
push str._ExeFile:
push dword [edi]
call fcn.004baf86
add esp, 0xc
test eax, eax
jne 0x445136
push 0x4f983c
call fcn.004b8970
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x1c]
jmp 0x44602b
push str._Confirm
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
jne 0x445155
mov dword [esp + 0x58], 1
jmp 0x446031
push str._Quiet
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
jne 0x445177
or dword [esp + 0x40], 2
mov dword [0x5254a0], esi
jmp 0x446031
push str._AllUsers
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
jne 0x4451ca
mov dword [esp + 0x50], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.00469910
test eax, eax
je 0x44613c
call fcn.00469ae0
test eax, eax
jne 0x446031
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Admin_rights_required
jmp 0x446157
push str._ErrorsOnly
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
jne 0x4451eb
mov dword [0x5254a0], 1
jmp 0x446031
push str._Wait
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
jne 0x445207
or dword [esp + 0x40], 1
jmp 0x446031
push 0x4f9908
call fcn.004b8970
pop ecx
push eax
push str._Password:
push dword [edi]
call fcn.004baf86
add esp, 0xc
test eax, eax
je 0x44600c
push 0x4f992c
call fcn.004b8970
pop ecx
push eax
push str._Password
push dword [edi]
call fcn.004baf86
add esp, 0xc
test eax, eax
je 0x44600c
push 0x4f9968
call fcn.004b8970
pop ecx
push eax
push str._Properties:
push dword [edi]
call fcn.004baf86
add esp, 0xc
test eax, eax
jne 0x4455cd
push str._Properties_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247de
lea eax, [esp + 0xee0]
push eax
call fcn.00481b10
mov byte [esp + 0x3700], 8
push dword [0x5254a0]
lea eax, [esp + 0x4c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247de
lea eax, [esp + 0xee0]
push eax
call fcn.00444689
add esp, 0x10
lea eax, [esp + 0xed4]
call fcn.004829f0
lea ecx, [esp + 0x24]
call fcn.00422487
lea ecx, [esp + 0x2c]
call fcn.00422487
lea ecx, [esp + 0x6c]
call fcn.00422487
push 0x4f9968
mov byte [esp + 0x3704], 0xb
call fcn.004b8970
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x148]
call fcn.004247f3
lea eax, [esp + 0x2ac]
push eax
mov byte [esp + 0x3704], 0xc
call fcn.00430a47
mov byte [esp + 0x3700], 0xd
mov dword [esp + 0x154], esi
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 0x4f9238
lea edi, [esp + 0x15c]
call fcn.004247f3
push ecx
mov byte [esp + 0x3708], 0xe
lea eax, [esp + 0x14c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x1b8]
push eax
mov byte [esp + 0x370c], 0xd
call fcn.0046e840
add esp, 0xc
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x3704], 0xf
call fcn.00424837
mov byte [esp + 0x3700], 0xd
mov ecx, dword [esp + 0x1b0]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
push 0x3d
lea ecx, [esp + 0x2c]
call fcn.00426ece
mov edi, eax
cmp edi, 0xffffffff
je 0x44544e
push edi
lea eax, [esp + 0x1bc]
push eax
lea ecx, [esp + 0x2c]
call fcn.004249e2
mov byte [esp + 0x3700], 0x10
call fcn.00424939
push eax
lea ecx, [esp + 0x30]
call fcn.00424837
mov byte [esp + 0x3700], 0xd
mov ecx, dword [esp + 0x1b8]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x2c]
cmp dword [eax - 0xc], esi
je 0x44544e
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x70]
call fcn.00424837
push esi
lea ecx, [esp + 0x70]
lea eax, [edi + 1]
push ecx
call fcn.0042488a
lea eax, [esp + 0x6c]
push eax
push ecx
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x2b8]
push eax
call fcn.00430a98
pop ecx
mov ecx, eax
call fcn.00424837
cmp dword [esp + 0x154], 0xffffffff
jne 0x44533d
mov eax, dword [esp + 0x2c4]
mov eax, dword [eax]
lea edi, [esp + 0x2ac]
lea esi, [esp + 0x88]
call fcn.0042bc70
jmp 0x44553c
lea esi, [esp + 0x88]
call fcn.0042b8a6
push eax
lea ecx, [esp + 0x100]
call fcn.004247de
mov byte [esp + 0x3700], 0x11
call fcn.0042b8a6
add eax, 4
push eax
lea ecx, [esp + 0x24]
call fcn.004247de
push str.Branding
lea eax, [esp + 0x100]
mov byte [esp + 0x3704], 0x12
call fcn.00424876
test eax, eax
je 0x446168
lea edi, [esp + 0xfc]
call fcn.0042b6d7
push dword [eax]
lea eax, [esp + 0x1d0]
push str.CAMEYO__s
push eax
call fcn.0046aaf0
mov esi, dword [esp + 0x2c]
mov eax, dword [eax]
add esp, 0xc
push esi
push eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov ecx, dword [esp + 0x1cc]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [esi - 0x10]
call fcn.0042201a
mov byte [esp + 0x3700], 0xd
mov ecx, dword [esp + 0xfc]
add ecx, 0xfffffff0
call fcn.0042201a
lea esi, [esp + 0x88]
call fcn.0042eba2
mov eax, dword [esp + 0x2c4]
lea edi, [esp + 0x2ac]
lea esi, [esp + 0xb8]
call fcn.0042bc70
mov edi, esi
lea esi, [esp + 0x88]
call fcn.0042e8c0
test al, al
je 0x44547d
lea eax, [esp + 0x2ac]
push eax
mov byte [esp + 0x3704], 0xc
call fcn.00430813
mov ecx, dword [esp + 0x144]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x6c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x2c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0xed4]
mov byte [esp + 0x3700], 4
call fcn.00427913
jmp 0x445d64
push str._SafeMode
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
jne 0x445619
push str._SafeMode_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov edi, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
push 0x4ece08
push str.CAMEYO_LEGACYREG
call edi
push str.Disk
push str.CAMEYO_VIRTMODE
call edi
push 0x4ecd4c
push str.CAMEYO_EARLYINJECTION
call edi
jmp 0x446031
push 0x4f9a90
call fcn.004b8970
pop ecx
push eax
push str._Services:
push dword [edi]
call fcn.004baf86
add esp, 0xc
test eax, eax
jne 0x44568d
push dword [edi]
lea ecx, [esp + 0x10c]
call fcn.004247f3
push 0x4f9a90
mov byte [esp + 0x3704], 0x13
call fcn.004b8970
pop ecx
push esi
lea ecx, [esp + 0x10c]
push ecx
call fcn.0042488a
push dword [esp + 0x108]
push str.CAMEYO_SERVICES
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov byte [esp + 0x3700], 4
mov ecx, dword [esp + 0x108]
jmp 0x446002
push str._Register
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44617c
push str._Stop
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44622d
push str._Remove
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44cd46
push str._RemoveSelf
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44cd46
push str._Remove:Proc
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x446350
push str._Remove:Reg
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x446538
push str._LearnStreaming
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44cb65
push 0x4fa044
call fcn.004b8970
pop ecx
push eax
push str._LearnStreaming:
push dword [edi]
call fcn.004baf86
add esp, 0xc
test eax, eax
je 0x44cb65
push str._UpdateBasicSettings
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
jne 0x445769
mov dword [esp + 0x34], 1
jmp 0x446031
push str._Repackage
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44673f
push str._CreateDiff
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44c9ac
push 0x4fa268
call fcn.004b8970
pop ecx
push eax
push str._CreateDiff:
push dword [edi]
call fcn.004baf86
add esp, 0xc
test eax, eax
je 0x44c9ac
push str._exec
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44691b
push 0x4fa2ac
call fcn.004b8970
pop ecx
push eax
push str._Patch
push dword [edi]
call fcn.004baf86
add esp, 0xc
test eax, eax
je 0x44c460
push 0x4fa2c4
call fcn.004b8970
pop ecx
push eax
push str._InstSandbox
push dword [edi]
call fcn.004baf86
add esp, 0xc
test eax, eax
je 0x44c460
push str._ShowStreaming
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x446ae0
push str._Break
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x446bc2
push str._Unbreak
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x4472e5
push str._Integrate
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44c02c
push str._Integrate:once
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44c02c
push str._FullIntegrate
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44c02c
push str._Unintegrate
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x447b10
push str._CreateShortcuts
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44b99a
push 0x4fad88
call fcn.004b8970
pop ecx
push eax
push str._CreateShortcuts:
push dword [edi]
call fcn.004baf86
add esp, 0xc
test eax, eax
je 0x44b99a
push str._Perf
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x447b78
push str._ExtractLog
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x447f7e
push str._ExtractAll
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x448178
push str._AutoUpdateXml
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x448259
push str._Info
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x4483ac
push str._Sandbox
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x448461
push 0x4fb058
call fcn.004b8970
pop ecx
push eax
push str._AddSandbox:
push dword [edi]
call fcn.004baf86
add esp, 0xc
test eax, eax
je 0x448664
push 0x4fb0c0
call fcn.004b8970
pop ecx
push eax
push str._GetProperty:
push dword [edi]
call fcn.004baf86
add esp, 0xc
test eax, eax
je 0x44895c
push str._ExportProperties
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44b7ca
push str._ExportAllProperties
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44b7ca
push str._InfoLog
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x448b76
push str._Ini
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44b6a1
push str._ShowIni
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44b6a1
push str._ExtractIni
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x448d78
push str._csv
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x448f0d
push str._EngineVer
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x4492de
push str._ChangeLoader
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
jne 0x445a82
mov eax, dword [esp + 0x28]
inc eax
cmp dword [esp + 0x54], eax
jg 0x44941f
push str._ChangeEngine
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
jne 0x445aa3
mov eax, dword [esp + 0x28]
inc eax
cmp dword [esp + 0x54], eax
jg 0x449749
push str._ChangeIni
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
jne 0x445ac4
mov eax, dword [esp + 0x28]
inc eax
cmp dword [esp + 0x54], eax
jg 0x449ae1
push str._TestAutoUpdate
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
jne 0x445ae7
mov eax, dword [esp + 0x28]
add eax, 5
cmp dword [esp + 0x54], eax
jg 0x449c9a
push str._Debug
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x449da9
push str._ForceMenu
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
jne 0x445b1c
mov dword [esp + 0x7c], 1
jmp 0x446031
push str._ShowTree
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x449dea
push str._RegDump
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x449eb6
push str._SetFileFlags
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
jne 0x445b6b
mov eax, dword [esp + 0x28]
add eax, 2
cmp dword [esp + 0x54], eax
jg 0x44a031
push str._DbgZip:
call fcn.004b8a1a
pop ecx
push eax
push str._DbgZip:
push dword [edi]
call fcn.004baf86
add esp, 0xc
test eax, eax
je 0x44a242
push str._DbgNow
call fcn.004b8a1a
pop ecx
push eax
push str._DbgNow
push dword [edi]
call fcn.004baf86
add esp, 0xc
test eax, eax
je 0x44a282
push str._Vintegrate
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44b522
push 0x4fbb28
call fcn.004b8970
pop ecx
push eax
push str._Vintegrate:
push dword [edi]
call fcn.004baf86
add esp, 0xc
test eax, eax
je 0x44b522
push str._VintegrateRecursive
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44b522
push 0x4fbb80
call fcn.004b8970
pop ecx
push eax
push str._VintegrateRecursive:
push dword [edi]
call fcn.004baf86
add esp, 0xc
test eax, eax
je 0x44b522
push str._Vunintegrate
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44a370
push str._Vmanager
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44a51d
push 0x4fbc40
call fcn.004b8970
pop ecx
push eax
push str._ProcessList
push dword [edi]
call fcn.004baf86
add esp, 0xc
test eax, eax
je 0x44a5ca
push 0x4fbdc8
call fcn.004b8970
pop ecx
push eax
push str._WaitFor
push dword [edi]
call fcn.004baf86
add esp, 0xc
test eax, eax
je 0x44a93b
push str._GfxSvr
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
jne 0x445cef
call fcn.0042ff44
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x401
mov edi, 0x528f38
call fcn.00488250
mov dword [esp], 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x403
call fcn.00488250
mov dword [esp], 0x493e0
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x446031
push 0x4fbdf8
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
jne 0x445d6b
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.open
xor ebx, ebx
call fcn.004247f3
push esi
push ecx
mov dword [esp + 0x370c], 0x170
mov ecx, esp
mov dword [esp + 0x44], esp
push str._Troubleshoot
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x71
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247de
mov edi, esi
mov dword [esp + 0x3710], 4
call fcn.00469590
add esp, 0x10
mov ebx, 0x4eaa5c
xor esi, esi
jmp 0x446031
push str._Troubleshoot
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44a9fc
push str._AutoUpdate
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44aa22
push str._VirtRegSyncExport
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44aab7
push str._StartStreaming
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44ab1f
push str._JumpTo
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44ab3d
push str._SvcRegister
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44abdc
push str._SvcStart
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44ace5
push str._SvcRegisterStart
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44ada0
push str._SvcStop
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44af01
push str._SvcRemove
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44afbe
push 0x4fc1f8
call fcn.004b8970
pop ecx
push eax
push str._ScmDirectInit:
push dword [edi]
call fcn.004baf86
add esp, 0xc
test eax, eax
je 0x44b07c
push str._AuthCheck
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44b412
push str._AuthCheck:Force
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44b412
push str._RepoSync
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
jne 0x445eb7
mov eax, dword [esp + 0x28]
inc eax
cmp dword [esp + 0x54], eax
jg 0x44b124
push str._MergeRegistry
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44b1fc
push dword [edi]
lea ecx, [esp + 0xe0]
call fcn.004247f3
push esi
push ecx
mov dword [esp + 0x3708], 0x182
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x4e94d0
call fcn.004247f3
push ecx
mov edi, esp
mov byte [esp + 0x370c], 0x83
mov dword [esp + 0x24], esp
push 0x5c
push ecx
lea eax, [esp + 0xf0]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247de
push edi
call fcn.0046ae20
add esp, 0xc
mov byte [esp + 0x370c], 0x82
call fcn.0046ed70
add esp, 0xc
cmp eax, esi
je 0x445f75
push 0x4f584c
push ecx
lea eax, [esp + 0xe4]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247de
lea eax, [esp + 0x16c]
push eax
call fcn.0046ab80
or dword [esp + 0x58], 4
pop ecx
pop ecx
call fcn.00424876
mov byte [esp + 0x47], 1
test eax, eax
je 0x445f7a
mov byte [esp + 0x47], 0
test byte [esp + 0x4c], 4
je 0x445f95
mov ecx, dword [esp + 0x164]
and dword [esp + 0x4c], 0xfffffffb
add ecx, 0xfffffff0
call fcn.0042201a
cmp byte [esp + 0x47], 0
jne 0x44b2f4
push 0x4f3d44
lea ecx, [esp + 0x6c]
call fcn.0042484c
mov eax, dword [esp + 0x30]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
call fcn.004247f3
lea eax, [esp + 0x23c]
push eax
call fcn.004704f0
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x7c]
mov byte [esp + 0x3704], 0x88
call fcn.00424837
mov ecx, dword [esp + 0x238]
add ecx, 0xfffffff0
call fcn.0042201a
mov dword [esp + 0x3700], 4
mov ecx, dword [esp + 0xdc]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x446031
push str._Password_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x4f9908
call fcn.004b8970
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x48]
push eax
call fcn.0042484c
inc dword [esp + 0x28]
mov eax, dword [esp + 0x28]
cmp eax, dword [esp + 0x54]
jl 0x4450de
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x1000]
push eax
call fcn.00481b10
push 0xffffffffffffffff
mov dword [esp + 0x3704], 0x189
push dword [esp + 0x44]
lea eax, [esp + 0x80]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
push ecx
mov byte [esp + 0x3710], 0x8a
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247de
push ecx
mov byte [esp + 0x3714], 0x8b
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247de
mov byte [esp + 0x3714], 0x8c
push dword [esp + 0x90]
lea eax, [esp + 0x34]
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
lea eax, [esp + 0x1010]
push eax
mov byte [esp + 0x3720], 0x89
call fcn.004380c5
add esp, 0x20
cmp eax, 2
jne 0x44d07e
call fcn.00444543
push esi
push dword [0x528f44]
push str.Application_is_now_integrated_into_your_system
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
lea eax, [esp + 0xff4]
call fcn.004829f0
lea eax, [esp + 0xff4]
mov dword [esp + 0x3700], 4
call fcn.00427913
jmp 0x4461cb
call fcn.00469960
test eax, eax
jne 0x446161
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Elevation_failed
call fcn.004247f3
call fcn.004445c0
push esi
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.License_required.
jmp 0x446157
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
mov esi, 0x528f38
push esi
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x4461b2
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_obtain_INI_info_from_resource_
jmp 0x446157
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
mov ecx, esi
call fcn.004371a9
pop ecx
mov ecx, dword [esp + 0x48]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x78]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x68]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x60]
add ecx, 0xfffffff0
call fcn.0042201a
xor eax, eax
mov ecx, dword [esp + 0x36f8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x36e0]
xor ecx, esp
call fcn.004b80af
mov esp, ebp
pop ebp
ret
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
push 0x528f38
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x446260
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x528f90
call fcn.004247de
push ecx
mov byte [esp + 0x3708], 0x14
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x528fa0
call fcn.004247de
push ecx
mov byte [esp + 0x370c], 0x15
mov ecx, esp
mov dword [esp + 0x44], esp
push 0x528f94
call fcn.004247de
push ecx
mov byte [esp + 0x3710], 0x16
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x528f44
call fcn.004247de
mov byte [esp + 0x3710], 4
call fcn.004403b6
add esp, 0x10
cmp eax, esi
je 0x4462f6
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x528f44]
push str.Cannot_stop_application__s
push eax
call fcn.0046aaf0
add esp, 0xc
jmp 0x44615c
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.__Stopped_successfully
call fcn.004247f3
call fcn.00443da9
pop ecx
mov ecx, dword [esp + 0x48]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x78]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x68]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x60]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, esi
jmp 0x446209
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
push 0x528f38
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x446383
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
mov eax, dword [0x528f94]
cmp dword [eax - 0xc], esi
jne 0x4463aa
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x528f44]
push str.Cannot_obtain_base_dir_for__s
jmp 0x4462e8
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov edi, 0x528f94
push edi
call fcn.004247de
call fcn.0046d1a0
pop ecx
cmp eax, esi
jne 0x4463f5
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x528f44]
push str.Application_is_not_deployed_on_this_machine:__s
push eax
call fcn.0046aaf0
add esp, 0xc
call fcn.0044460f
pop ecx
pop ecx
push 5
jmp 0x446162
cmp dword [esp + 0x58], esi
je 0x446418
push 3
push dword [0x528f44]
push str.Do_you_want_to_stop_the_application_
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x44ce11
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x528f44]
push str.Removing_processes:__s
push eax
call fcn.0046aaf0
add esp, 0xc
call fcn.00443da9
pop ecx
lea ecx, [esp + 0x128]
call fcn.00422487
push 0x4e8fa8
mov byte [esp + 0x3704], 0x1d
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push esi
push esi
push 1
lea eax, [esp + 0x134]
push eax
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x528f90
call fcn.004247de
push ecx
mov byte [esp + 0x371c], 0x1e
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x528fa0
call fcn.004247de
push ecx
mov byte [esp + 0x3720], 0x1f
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x528f9c
call fcn.004247de
push ecx
mov byte [esp + 0x3724], 0x20
mov ecx, esp
mov dword [esp + 0x44], esp
push edi
call fcn.004247de
push ecx
mov byte [esp + 0x3728], 0x21
mov ecx, esp
mov dword [esp + 0xa4], esp
push 0x528f44
call fcn.004247de
mov byte [esp + 0x3728], 0x1d
call fcn.004407bb
add esp, 0x24
mov ecx, esp
mov dword [esp + 0x18], esp
push str.__Stopped_successfully
call fcn.004247f3
call fcn.00443da9
pop ecx
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x528f44]
push str.Application__s_stopped_successfully
push eax
call fcn.0046aaf0
add esp, 0xc
call fcn.0044460f
pop ecx
pop ecx
mov ecx, dword [esp + 0x128]
jmp 0x44d071
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
push 0x528f38
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x44656b
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
mov eax, dword [0x528f94]
cmp dword [eax - 0xc], esi
jne 0x446587
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
jmp 0x44639a
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov edi, 0x528f94
push edi
call fcn.004247de
call fcn.0046d1a0
pop ecx
cmp eax, esi
jne 0x4465b5
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
jmp 0x4463d3
cmp dword [esp + 0x58], esi
je 0x4465d8
push 3
push dword [0x528f44]
push str.Do_you_want_to_remove_the_applications_registry_
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x44ce11
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x528f44]
push str.Removing_registry:__s
push eax
call fcn.0046aaf0
add esp, 0xc
call fcn.00443da9
pop ecx
lea ecx, [esp + 0x130]
call fcn.00422487
push 0x4e8fa8
mov byte [esp + 0x3704], 0x22
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push esi
push 1
push esi
lea eax, [esp + 0x13c]
push eax
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x528f90
call fcn.004247de
push ecx
mov byte [esp + 0x371c], 0x23
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x528fa0
call fcn.004247de
push ecx
mov byte [esp + 0x3720], 0x24
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x528f9c
call fcn.004247de
push ecx
mov byte [esp + 0x3724], 0x25
mov ecx, esp
mov dword [esp + 0x44], esp
push edi
call fcn.004247de
push ecx
mov byte [esp + 0x3728], 0x26
mov ecx, esp
mov dword [esp + 0xa4], esp
push 0x528f44
call fcn.004247de
mov byte [esp + 0x3728], 0x22
call fcn.004407bb
add esp, 0x24
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x528f44]
push str.SoftwareVOS_s
push eax
call fcn.0046aaf0
add esp, 0xc
mov edx, SysReAllocStringLen
call fcn.0046bbd0
pop ecx
cmp eax, esi
je 0x4466f4
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x528f44]
push str.Registry_could_not_be_emptied_for__s
jmp 0x4462e8
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.__Registry_removed_successfully
call fcn.004247f3
call fcn.00443da9
pop ecx
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x528f44]
push str.Application__ss_registry_removed_successfully
push eax
call fcn.0046aaf0
add esp, 0xc
call fcn.0044460f
pop ecx
pop ecx
mov ecx, dword [esp + 0x130]
jmp 0x44d071
lea ecx, [esp + 0x2c]
call fcn.00422487
lea ecx, [esp + 0x40]
call fcn.00422487
mov byte [esp + 0x3700], 0x2f
mov eax, dword [esp + 0x28]
lea ecx, [eax + 1]
cmp dword [esp + 0x54], ecx
jle 0x446779
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x30]
call fcn.0042484c
jmp 0x446787
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
call fcn.00424837
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..new.exe
call fcn.004247f3
push ecx
mov byte [esp + 0x3708], 0x30
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x174]
push eax
mov byte [esp + 0x370c], 0x2f
call fcn.0046acb0
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x3704], 0x31
call fcn.00424837
mov byte [esp + 0x3700], 0x2f
mov ecx, dword [esp + 0x16c]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
call fcn.0046dbf0
mov edi, dword [esp + 0x44]
mov ebx, dword [esp + 0x30]
pop ecx
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x40]
jne 0x44683a
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247de
jmp 0x44615c
push dword [esp + 0x34]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247de
call fcn.0043f880
pop ecx
pop ecx
mov dword [esp + 0x34], eax
cmp eax, esi
jne 0x4468c7
push dword [0x5254a0]
lea eax, [esp + 0x44]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x24c]
push eax
call fcn.0046ae20
add esp, 8
mov byte [esp + 0x3708], 0x32
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Successfully_repackaged_into:__s
push ecx
call fcn.0046aaf0
add esp, 0xc
call fcn.0044460f
pop ecx
pop ecx
mov ecx, dword [esp + 0x240]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [edi - 0x10]
call fcn.0042201a
lea ecx, [ebx - 0x10]
jmp 0x44d074
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esp + 0x34], 0x10
push dword [0x5254a0]
jne 0x4468ec
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Application_not_deployed_on_this_machine._Nothing_to_repackage.
jmp 0x446157
push dword [esp + 0x38]
lea eax, [esp + 0x2d4]
push eax
call fcn.00471aa0
add esp, 4
mov byte [esp + 0x3708], 0x33
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Could_not_repackage:__s
push ecx
jmp 0x4462e9
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x28]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax + edx*4]
call fcn.004247f3
lea eax, [esp + 0x178]
push eax
call fcn.004704f0
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x7c]
mov byte [esp + 0x3704], 0x3a
call fcn.00424837
push eax
lea ecx, [esp + 0x6c]
call fcn.00424837
push eax
lea ecx, [esp + 0xe8]
call fcn.004247de
mov byte [esp + 0x3700], 0x3c
mov ecx, dword [esp + 0x174]
add ecx, 0xfffffff0
call fcn.0042201a
push 1
lea eax, [esp + 0x24c]
push eax
lea ecx, [esp + 0xec]
call fcn.004249e2
push 0x4f467c
push eax
call fcn.00424aec
pop ecx
pop ecx
mov ecx, dword [esp + 0x248]
add ecx, 0xfffffff0
mov byte [esp + 0x47], al
call fcn.0042201a
cmp byte [esp + 0x47], 0
lea ecx, [esp + 0x68]
je 0x4469c8
push 1
push 0x22
jmp 0x4469cb
push esi
push 0x20
call fcn.00426ece
mov edi, eax
cmp edi, 0xffffffff
je 0x446a3f
push edi
lea eax, [esp + 0x180]
push eax
lea ecx, [esp + 0x70]
call fcn.004249e2
push 0x4f4568
mov byte [esp + 0x3704], 0x3d
call fcn.0043d85f
push eax
lea ecx, [esp + 0x6c]
call fcn.00424837
mov byte [esp + 0x3700], 0x3c
mov ecx, dword [esp + 0x17c]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
lea ecx, [esp + 0x7c]
lea eax, [edi + 1]
push ecx
call fcn.0042488a
lea eax, [esp + 0x78]
call fcn.00424939
push eax
lea ecx, [esp + 0x7c]
call fcn.00424837
jmp 0x446a64
push 0x4f4568
lea eax, [esp + 0xe8]
call fcn.0043d85f
push eax
lea ecx, [esp + 0x6c]
call fcn.00424837
push ebx
lea ecx, [esp + 0x7c]
call fcn.0042484c
xor ecx, ecx
lea eax, [esp + 0x68]
call fcn.0042b720
movzx eax, ax
cmp ax, 0x25
jne 0x446a83
lea eax, [esp + 0x68]
push eax
call fcn.0047a880
pop ecx
push ecx
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
lea eax, [esp + 0x254]
push eax
call fcn.0047b610
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x3704], 0x3e
call fcn.00424837
mov ecx, dword [esp + 0x250]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3700], 4
mov ecx, dword [esp + 0xe4]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x446043
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.ShowStreaming:
call fcn.004247f3
call fcn.00443da9
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x8b0]
push eax
call fcn.00481b10
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x370c], 0x4c
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x4d
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3714], 0x4e
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247de
push 2
push ecx
mov byte [esp + 0x371c], 0x4f
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
lea eax, [esp + 0x8c0]
push eax
mov byte [esp + 0x3720], 0x4c
call fcn.004380c5
add esp, 0x20
lea ecx, [esp + 0x8a4]
call fcn.00436cbc
lea eax, [esp + 0x8a4]
call fcn.004829f0
mov byte [esp + 0x3700], 4
lea eax, [esp + 0x8a4]
call fcn.00427913
jmp 0x44630d
lea ecx, [esp + 0x2c]
call fcn.00422487
mov byte [esp + 0x3700], 0x50
mov eax, dword [esp + 0x28]
lea ecx, [eax + 1]
cmp dword [esp + 0x54], ecx
jle 0x446bf3
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x30]
call fcn.0042484c
jmp 0x446c01
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
call fcn.00424837
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..break
call fcn.004247f3
push ecx
mov byte [esp + 0x3708], 0x51
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x64]
push eax
mov byte [esp + 0x370c], 0x50
call fcn.0046acb0
add esp, 0xc
push 1
push esi
push ecx
mov byte [esp + 0x370c], 0x52
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x3e8]
push eax
call fcn.00481b10
mov byte [esp + 0x3700], 0x53
push dword [0x5254a0]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x3e8]
push eax
call fcn.00444689
add esp, 0x10
cmp dword [esp + 0x464], esi
jne 0x446cba
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_load_containers_
jmp 0x446157
push ecx
lea eax, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
call fcn.0046c880
pop ecx
push dword [esp + 0x5c]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x446cfb
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x64]
push str.Cant_empty__s
jmp 0x4462e8
mov esi, dword [esp + 0x5c]
call fcn.0046d280
test eax, eax
jne 0x446d23
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x64]
push str.Cant_create__s
jmp 0x4462e8
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
mov ebx, 0x4e8fa8
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x370c], 0x54
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtApp.ini
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x55
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247de
mov byte [esp + 0x3710], 0x53
call fcn.0046a3b0
add esp, 8
mov byte [esp + 0x3708], 0x56
mov ecx, esp
mov dword [esp + 0x20], esp
mov esi, str.Main
push esi
call fcn.004247f3
push 3
pop ecx
lea edi, [esp + 0x3e4]
mov byte [esp + 0x3708], 0x53
call fcn.00483f00
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x370c], 0x57
mov ecx, esp
mov dword [esp + 0x44], esp
push str.AppVirtDll.dll
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x58
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247de
mov byte [esp + 0x3710], 0x53
call fcn.0046a3b0
add esp, 8
mov byte [esp + 0x3708], 0x59
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247f3
push 2
pop ecx
lea edi, [esp + 0x3e4]
mov byte [esp + 0x3708], 0x53
call fcn.00483f00
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x370c], 0x5a
mov ecx, esp
mov dword [esp + 0x44], esp
push str.AppVirtDll64.dll
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x5b
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247de
mov byte [esp + 0x3710], 0x53
call fcn.0046a3b0
add esp, 8
mov byte [esp + 0x3708], 0x5c
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247f3
push 8
pop ecx
lea edi, [esp + 0x3e4]
mov byte [esp + 0x3708], 0x53
call fcn.00483f00
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x370c], 0x5d
mov ecx, esp
mov dword [esp + 0x44], esp
push str.StubExe.exe
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x5e
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247de
mov byte [esp + 0x3710], 0x53
call fcn.0046a3b0
add esp, 8
mov byte [esp + 0x3708], 0x5f
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247f3
push 9
pop ecx
lea edi, [esp + 0x3e4]
mov byte [esp + 0x3708], 0x53
call fcn.00483f00
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x370c], 0x60
mov ecx, esp
mov dword [esp + 0x44], esp
push str.StubExe64.exe
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x61
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247de
mov byte [esp + 0x3710], 0x53
call fcn.0046a3b0
add esp, 8
mov byte [esp + 0x3708], 0x62
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247f3
push 0xa
pop ecx
lea edi, [esp + 0x3e4]
mov byte [esp + 0x3708], 0x53
call fcn.00483f00
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x370c], 0x63
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtFiles.db
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x64
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247de
mov byte [esp + 0x3710], 0x53
call fcn.0046a3b0
add esp, 8
mov byte [esp + 0x3708], 0x65
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247f3
push 4
pop ecx
lea edi, [esp + 0x3e4]
mov byte [esp + 0x3708], 0x53
call fcn.00483f00
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x370c], 0x66
mov ecx, esp
mov dword [esp + 0x44], esp
push str.SandboxCfg.db
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x67
mov ecx, esp
lea eax, [esp + 0x6c]
mov dword [esp + 0x30], esp
push eax
call fcn.004247de
mov byte [esp + 0x3710], 0x53
call fcn.0046a3b0
add esp, 8
mov byte [esp + 0x3708], 0x68
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247f3
push 5
pop ecx
lea edi, [esp + 0x3e4]
mov byte [esp + 0x3708], 0x53
call fcn.00483f00
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x370c], 0x69
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtReg.export
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x6a
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247de
mov byte [esp + 0x3710], 0x53
call fcn.0046a3b0
add esp, 8
mov byte [esp + 0x3708], 0x6b
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247f3
push 6
pop ecx
lea edi, [esp + 0x3e4]
mov byte [esp + 0x3708], 0x53
call fcn.00483f00
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x370c], 0x6c
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtReg.dat
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x6d
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247de
mov byte [esp + 0x3710], 0x53
call fcn.0046a3b0
add esp, 8
mov byte [esp + 0x3708], 0x6e
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247f3
push 0xb
pop ecx
lea edi, [esp + 0x3e4]
mov byte [esp + 0x3708], 0x53
call fcn.00483f00
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x370c], 0x6f
mov ecx, esp
mov dword [esp + 0x44], esp
push str.SysDllSubdirs.txt
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x70
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247de
mov byte [esp + 0x3710], 0x53
call fcn.0046a3b0
add esp, 8
mov byte [esp + 0x3708], 0x71
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247f3
push 7
pop ecx
lea edi, [esp + 0x3e4]
mov byte [esp + 0x3708], 0x53
call fcn.00483f00
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x370c], 0x72
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtFiles.vfc
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x73
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247de
mov byte [esp + 0x3710], 0x53
call fcn.0046a3b0
add esp, 8
mov byte [esp + 0x3708], 0x74
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247f3
mov byte [esp + 0x3708], 0x53
xor ecx, ecx
inc ecx
lea edi, [esp + 0x3e4]
call fcn.00483f00
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x64]
push 0x4fa79c
push eax
call fcn.0046aaf0
add esp, 0xc
call fcn.0044460f
pop ecx
pop ecx
push 0
jmp 0x446162
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Unbreak:
call fcn.004247f3
call fcn.00443da9
mov ecx, esp
mov dword [esp + 0x18], esp
push str..break
call fcn.004247f3
push ecx
mov byte [esp + 0x3708], 0x75
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x7c]
push eax
mov byte [esp + 0x370c], 4
call fcn.0046acb0
add esp, 0xc
mov byte [esp + 0x3700], 0x76
push dword [esp + 0x74]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x44736b
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x7c]
push str.Dir_doesnt_exist:__s
jmp 0x4462e8
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x44]
call fcn.004247de
mov edi, str..old
push edi
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x18c]
push eax
mov byte [esp + 0x370c], 0x77
call fcn.00424a42
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x184]
add ecx, 0xfffffff0
call fcn.0042201a
push edi
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x260]
push eax
call fcn.00424a42
add esp, 0xc
push dword [eax]
push dword [esp + 0x44]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov ecx, dword [esp + 0x258]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.0042201a
test bl, bl
je 0x447407
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_rename_myself_to_.old
jmp 0x446157
push edi
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x194]
push eax
call fcn.00424a42
mov eax, dword [eax]
add esp, 0xc
push esi
push dword [esp + 0x44]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [esp + 0x18c]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.0042201a
test bl, bl
je 0x44745d
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_copy_myself
jmp 0x446157
push 1
push ecx
mov dword [esp + 0x1c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
mov dword [esp + 0xf8], esi
push 0x4e8fa8
lea ebx, [esp + 0xfc]
lea esi, [esp + 0x148]
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x78
mov ecx, esp
mov dword [esp + 0x28], esp
push str.VirtApp.ini
call fcn.004247f3
push ecx
mov byte [esp + 0x3714], 0x79
lea eax, [esp + 0x88]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247de
mov byte [esp + 0x3714], 0x77
call fcn.0046a3b0
add esp, 0xc
mov edi, esi
call fcn.0046b280
pop ecx
pop ecx
cmp eax, 0xffffffff
je 0x447af9
xor edi, edi
cmp dword [esp + 0xec], edi
je 0x447af9
push dword [esp + 0xec]
mov ecx, dword [esp + 0x13c]
lea eax, [esp + 0x38]
push eax
call fcn.0046afe0
mov byte [esp + 0x3708], 0x7a
push dword [esp + 0x140]
call fcn.004b9165
add esp, 0xc
push 1
push 1
push ecx
lea eax, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x358]
push eax
call fcn.00481b10
mov byte [esp + 0x3700], 0x7b
push dword [0x5254a0]
lea eax, [esp + 0x4c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x358]
push eax
call fcn.00444689
add esp, 0x10
cmp dword [esp + 0x3d4], edi
jne 0x447594
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_begin_to_update_resource
jmp 0x446157
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov esi, str.Main
push esi
call fcn.004247f3
mov byte [esp + 0x3704], 0x7c
mov eax, dword [esp + 0x38]
mov eax, dword [eax - 0xc]
add eax, eax
push edi
push eax
lea ecx, [esp + 0x40]
call fcn.00424f98
push eax
lea eax, [esp + 0x35c]
push eax
mov byte [esp + 0x3714], 0x7b
call fcn.004833c0
cmp eax, edi
je 0x4475f3
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_update_INI_resource
jmp 0x446157
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247f3
push 0
push 2
push ecx
mov byte [esp + 0x3710], 0x7d
mov dword [esp + 0x28], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
mov ebx, 0x4e8fa8
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3718], 0x7e
mov ecx, esp
mov dword [esp + 0x50], esp
push str.AppVirtDll.dll
call fcn.004247f3
push ecx
mov byte [esp + 0x371c], 0x7f
lea eax, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
mov byte [esp + 0x371c], 0x7d
call fcn.0046a3b0
add esp, 0xc
lea eax, [esp + 0x35c]
push eax
mov byte [esp + 0x3714], 0x7b
call fcn.00483720
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247f3
push 0
push 8
push ecx
mov byte [esp + 0x3710], 0x80
mov dword [esp + 0x28], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3718], 0x81
mov ecx, esp
mov dword [esp + 0x50], esp
push str.AppVirtDll64.dll
call fcn.004247f3
push ecx
mov byte [esp + 0x371c], 0x82
lea eax, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
mov byte [esp + 0x371c], 0x80
call fcn.0046a3b0
add esp, 0xc
lea eax, [esp + 0x35c]
push eax
mov byte [esp + 0x3714], 0x7b
call fcn.00483720
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247f3
push 0
push 9
push ecx
mov byte [esp + 0x3710], 0x83
mov dword [esp + 0x28], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3718], 0x84
mov ecx, esp
mov dword [esp + 0x50], esp
push str.StubExe.exe
call fcn.004247f3
push ecx
mov byte [esp + 0x371c], 0x85
lea eax, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
mov byte [esp + 0x371c], 0x83
call fcn.0046a3b0
add esp, 0xc
lea eax, [esp + 0x35c]
push eax
mov byte [esp + 0x3714], 0x7b
call fcn.00483720
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247f3
push 0
push 0xa
push ecx
mov byte [esp + 0x3710], 0x86
mov dword [esp + 0x28], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3718], 0x87
mov ecx, esp
mov dword [esp + 0x50], esp
push str.StubExe64.exe
call fcn.004247f3
push ecx
mov byte [esp + 0x371c], 0x88
lea eax, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
mov byte [esp + 0x371c], 0x86
call fcn.0046a3b0
add esp, 0xc
lea eax, [esp + 0x35c]
push eax
mov byte [esp + 0x3714], 0x7b
call fcn.00483720
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247f3
push 0x4000
push 4
push ecx
mov byte [esp + 0x3710], 0x89
mov dword [esp + 0x28], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3718], 0x8a
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtFiles.db
call fcn.004247f3
push ecx
mov byte [esp + 0x371c], 0x8b
lea eax, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
mov byte [esp + 0x371c], 0x89
call fcn.0046a3b0
add esp, 0xc
lea eax, [esp + 0x35c]
push eax
mov byte [esp + 0x3714], 0x7b
call fcn.00483720
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247f3
push 0x4000
push 5
push ecx
mov byte [esp + 0x3710], 0x8c
mov dword [esp + 0x28], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3718], 0x8d
mov ecx, esp
mov dword [esp + 0x50], esp
push str.SandboxCfg.db
call fcn.004247f3
push ecx
mov byte [esp + 0x371c], 0x8e
lea eax, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
mov byte [esp + 0x371c], 0x8c
call fcn.0046a3b0
add esp, 0xc
lea eax, [esp + 0x35c]
push eax
mov byte [esp + 0x3714], 0x7b
call fcn.00483720
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247f3
mov byte [esp + 0x3704], 0x8f
push 0x4000
push 0xb
push ecx
mov dword [esp + 0x28], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3718], 0x90
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtReg.dat
call fcn.004247f3
push ecx
mov byte [esp + 0x371c], 0x91
lea eax, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
mov byte [esp + 0x371c], 0x8f
call fcn.0046a3b0
add esp, 0xc
lea eax, [esp + 0x35c]
push eax
mov byte [esp + 0x3714], 0x7b
call fcn.00483720
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247f3
push 0
push 7
push ecx
mov byte [esp + 0x3710], 0x92
mov dword [esp + 0x28], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3718], 0x93
mov ecx, esp
mov dword [esp + 0x50], esp
push str.SysDllSubdirs.txt
call fcn.004247f3
push ecx
mov byte [esp + 0x371c], 0x94
lea eax, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
mov byte [esp + 0x371c], 0x92
call fcn.0046a3b0
add esp, 0xc
lea eax, [esp + 0x35c]
push eax
mov byte [esp + 0x3714], 0x7b
call fcn.00483720
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247f3
push 0x4000
push 1
push ecx
mov byte [esp + 0x3710], 0x95
mov edi, esp
mov dword [esp + 0x28], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3718], 0x96
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtFiles.vfc
call fcn.004247f3
push ecx
mov byte [esp + 0x371c], 0x97
lea eax, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
mov byte [esp + 0x371c], 0x95
call fcn.0046a3b0
add esp, 0xc
lea eax, [esp + 0x35c]
push eax
mov byte [esp + 0x3714], 0x7b
call fcn.00483720
lea eax, [esp + 0x34c]
call fcn.004829f0
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
test eax, eax
je 0x447aea
push str.Could_not_commit_resource
jmp 0x446157
push str.Success
call fcn.004247f3
jmp 0x4472d7
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_load_VirtApp.ini
jmp 0x446157
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
mov edi, 0x528f38
push edi
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x447b44
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
push edi
call fcn.0043c152
pop ecx
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x528f44]
push str._s_is_no_longer_integrated.
push eax
call fcn.0046aaf0
add esp, 0xc
call fcn.0044460f
pop ecx
pop ecx
jmp 0x446161
lea ecx, [esp + 0x2c]
call fcn.00422487
lea ecx, [esp + 0x34]
call fcn.00422487
mov byte [esp + 0x3700], 0xc3
mov edi, dword [esp + 0x28]
or dword [esp + 0x24], 0xffffffff
lea eax, [edi + 1]
cmp dword [esp + 0x54], eax
jle 0x447bb5
mov eax, dword [esp + 0x30]
push dword [eax + edi*4 + 4]
lea ecx, [esp + 0x30]
call fcn.0042484c
lea eax, [edi + 2]
cmp dword [esp + 0x54], eax
jle 0x447bce
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4]
lea ecx, [esp + 0x38]
call fcn.0042484c
lea ecx, [esp + 0x260]
call fcn.00422487
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x3704], 0xc4
call fcn.004247de
push ecx
mov byte [esp + 0x3704], 0xc5
lea eax, [esp + 0x5c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
push 0x528f38
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x447c2b
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
push 1
push esi
push ecx
lea eax, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0xe50]
push eax
call fcn.00481b10
lea edi, [esp + 0xe44]
mov byte [esp + 0x3700], 0xc6
call fcn.0042a23b
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x34]
cmp dword [eax - 0xc], esi
je 0x447c88
push esi
push 0x80
push 4
push esi
push 3
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [esp + 0x24], eax
push 1
push 1
push 1
lea eax, [esp + 0x26c]
push eax
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x528f90
call fcn.004247de
push ecx
mov byte [esp + 0x371c], 0xc7
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x528fa0
call fcn.004247de
push ecx
mov byte [esp + 0x3720], 0xc8
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x528f9c
call fcn.004247de
push ecx
mov byte [esp + 0x3724], 0xc9
mov ecx, esp
mov dword [esp + 0xa0], esp
push 0x528f94
call fcn.004247de
push ecx
mov byte [esp + 0x3728], 0xca
mov ecx, esp
mov dword [esp + 0x8c], esp
push 0x528f44
call fcn.004247de
mov byte [esp + 0x3728], 0xc6
call fcn.004407bb
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0x28
call edi
push esi
push 2
mov dword [esp + 0x74], eax
push 0x528f38
lea eax, [esp + 0xe50]
push eax
push dword [esp + 0x30]
call fcn.00434780
add esp, 0x14
cmp eax, esi
je 0x447d6a
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Failed_BasicDeploy_
jmp 0x446157
call edi
sub eax, dword [esp + 0x6c]
mov dword [esp + 0x6c], eax
call edi
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x2c]
cmp dword [eax - 0xc], esi
je 0x447e25
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0xcb
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x4f3d44
call fcn.004247f3
push ecx
mov byte [esp + 0x3714], 0xcc
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247f3
push 2
push ecx
mov byte [esp + 0x371c], 0xcd
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x98], esp
push eax
call fcn.004247de
lea eax, [esp + 0xe60]
push eax
mov byte [esp + 0x3720], 0xc6
call fcn.004380c5
add esp, 0x20
push esi
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247de
call fcn.004711a0
pop ecx
pop ecx
cmp eax, esi
jne 0x447e25
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x447dfb
call edi
push ecx
mov edi, eax
sub edi, dword [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x528f90
call fcn.004247de
push ecx
mov byte [esp + 0x3708], 0xce
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x528fa0
call fcn.004247de
push ecx
mov byte [esp + 0x370c], 0xcf
mov ecx, esp
mov dword [esp + 0x44], esp
push 0x528f94
call fcn.004247de
push ecx
mov byte [esp + 0x3710], 0xd0
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x528f44
call fcn.004247de
mov byte [esp + 0x3710], 0xc6
call fcn.004403b6
add esp, 0x10
lea ecx, [esp + 0x50]
call fcn.00422487
lea ecx, [esp + 0x194]
mov eax, 0x100
push ecx
mov byte [esp + 0x3704], 0xd1
push eax
lea ecx, [esp + 0x58]
mov dword [esp + 0x19c], eax
call fcn.004224cd
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push 0xffffffffffffffff
lea ecx, [esp + 0x54]
call fcn.00424b01
push edi
push dword [esp + 0x70]
lea eax, [esp + 0x148]
push dword [esp + 0x58]
push dword [0x528f44]
push str._s__s__d_d_r_n
push eax
call fcn.0046aaf0
add esp, 0x18
mov byte [esp + 0x3700], 0xd2
push dword [esp + 0x140]
lea ecx, [esp + 0x26c]
call fcn.004261ef
mov byte [esp + 0x3700], 0xd3
mov edi, dword [esp + 0x24]
cmp edi, 0xffffffff
je 0x447f5f
push 2
push esi
push esi
push edi
mov dword [esp + 0x1ac], esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [esp + 0x268]
mov ecx, dword [eax - 0xc]
push esi
lea edx, [esp + 0x1a0]
push edx
push ecx
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [0x5254a0]
lea eax, [esp + 0x144]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247de
jmp 0x447b6c
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..Packager.log
call fcn.004247f3
push ecx
mov byte [esp + 0x3708], 0xd4
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0xfc]
push eax
mov byte [esp + 0x370c], 4
call fcn.0046acb0
add esp, 8
mov byte [esp + 0x3704], 0xd5
lea eax, [esp + 0xf8]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
call fcn.0046dbf0
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
mov dword [esp + 0x44], esi
call fcn.004247de
lea eax, [esp + 0x940]
push eax
call fcn.00481b10
mov byte [esp + 0x3700], 0xd6
push dword [0x5254a0]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x940]
push eax
call fcn.00444689
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0xd7
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3714], 0xd8
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247de
push 2
push ecx
mov byte [esp + 0x371c], 0xd9
mov ecx, esp
mov dword [esp + 0x3c], esp
lea eax, [esp + 0x38]
push eax
call fcn.004247de
lea eax, [esp + 0x950]
push eax
mov byte [esp + 0x3720], 0xd6
call fcn.004380c5
add esp, 0x20
lea edi, [esp + 0x934]
call fcn.0042a23b
mov ebx, eax
cmp ebx, esi
je 0x44811c
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push eax
call fcn.00469c20
mov byte [esp + 0x3708], 0xda
mov ecx, esp
mov dword [esp + 0x20], esp
push str.LogsPackager.log
call fcn.004247f3
push ebx
mov byte [esp + 0x370c], 0xd6
call fcn.00427e02
add esp, 0xc
cmp eax, esi
jne 0x44810b
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_extract_Packager.log_
jmp 0x446157
mov dword [esp + 0x34], 1
call fcn.00480ea0
xor esi, esi
jmp 0x44813e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
push str.Loader__ExtractLog_:_OpenVfc_failed__LE_d
push ecx
call fcn.0046aaf0
add esp, 0xc
call fcn.00443d79
pop ecx
lea eax, [esp + 0x934]
call fcn.004829f0
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xfc]
cmp dword [esp + 0x40], esi
je 0x44816e
push str.Success:__s
jmp 0x447b63
push str.Failed_saving__s
jmp 0x447b63
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
mov ebx, 0x528f38
push ebx
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x4481ac
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x820]
push eax
call fcn.00481b10
mov byte [esp + 0x3700], 0xdb
push dword [0x5254a0]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x820]
push eax
call fcn.00444689
lea edi, [esp + 0x824]
call fcn.0042a23b
push 1
push 2
push ebx
mov ecx, edi
push ecx
push eax
call fcn.00434780
mov edi, eax
add esp, 0x24
lea eax, [esp + 0x814]
call fcn.004829f0
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
cmp edi, esi
jne 0x448247
push dword [0x528f94]
push str.Success:_n_s
jmp 0x447b63
push str.Failed_extracting.
push eax
call fcn.0046aaf0
pop ecx
pop ecx
jmp 0x447b6c
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
mov esi, 0x528f38
push esi
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x44828d
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
lea eax, [esp + 0x270]
push eax
call fcn.00497950
pop ecx
mov byte [esp + 0x3700], 0xdc
push dword [eax]
lea ecx, [esp + 0x1a8]
call fcn.004261ef
mov byte [esp + 0x3700], 0xde
mov ecx, dword [esp + 0x270]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x1a4]
mov edi, dword [eax - 0xc]
push eax
push ecx
mov dword [esp + 0x1c], esp
mov ebx, esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
mov esi, str..xml
push esi
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0xdf
mov eax, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00469b30
pop ecx
push ebx
mov byte [esp + 0x3714], 0xde
call fcn.0046acb0
add esp, 0xc
call fcn.0046b4c0
pop ecx
pop ecx
push dword [0x5254a0]
push ecx
mov dword [esp + 0x1c], esp
test eax, eax
je 0x448398
mov ecx, esp
push esi
call fcn.004247f3
push ecx
mov byte [esp + 0x370c], 0xe0
mov eax, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00469b30
pop ecx
lea eax, [esp + 0x284]
push eax
mov byte [esp + 0x3710], 0xde
call fcn.0046acb0
add esp, 8
mov byte [esp + 0x3708], 0xe1
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Success:_n_s
push ecx
call fcn.0046aaf0
add esp, 0xc
call fcn.0044460f
pop ecx
pop ecx
mov ecx, dword [esp + 0x278]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x4472de
mov eax, esp
push str.Failed_extracting.
push eax
call fcn.0046aaf0
pop ecx
pop ecx
jmp 0x4472d7
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x38]
call fcn.004247de
mov byte [esp + 0x3700], 0xe2
mov eax, dword [esp + 0x28]
lea ecx, [eax + 1]
cmp dword [esp + 0x54], ecx
jle 0x4483e0
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x38]
call fcn.0042484c
push 1
push esi
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x12d0]
push eax
call fcn.00481b10
mov byte [esp + 0x3700], 0xe3
push dword [0x5254a0]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x12d0]
push eax
call fcn.00444689
push esi
lea eax, [esp + 0x12d8]
push eax
lea eax, [esp + 0x1c4]
push eax
call fcn.00444722
add esp, 0x1c
push esi
push str.Info
push dword [esp + 0x1b4]
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x446161
push str._Sandbox_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
push 0x528f38
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x44849f
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x38]
call fcn.004247de
mov byte [esp + 0x3700], 0xe4
mov eax, dword [esp + 0x28]
lea ecx, [eax + 1]
cmp dword [esp + 0x54], ecx
jle 0x4484d3
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x38]
call fcn.0042484c
push 1
push esi
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0xd30]
push eax
call fcn.00481b10
mov byte [esp + 0x3700], 0xe5
push dword [0x5254a0]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0xd30]
push eax
call fcn.00444689
add esp, 0x10
cmp dword [esp + 0xdac], esi
jne 0x448545
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.FAILED_LOADING_CONTAINERS_
jmp 0x446157
lea eax, [esp + 0xd24]
push eax
lea eax, [esp + 0x284]
push eax
call fcn.00444aa9
pop ecx
pop ecx
mov byte [esp + 0x3700], 0xe6
mov ecx, dword [esp + 0x280]
mov eax, dword [ecx - 0xc]
cmp eax, 0x800
jge 0x448581
push esi
push str.Sandbox
push ecx
jmp 0x448455
push ecx
push ecx
mov dword [esp + 0x1c], esp
mov edi, esp
push ecx
add eax, eax
mov ecx, esp
mov dword [esp + 0x20], esp
mov ebx, str..sandbox.txt
push ebx
mov dword [esp + 0x30], eax
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0xe7
mov eax, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00469b30
pop ecx
push edi
mov byte [esp + 0x3714], 0xe6
call fcn.0046acb0
mov edi, dword [esp + 0x34]
add esp, 0xc
call fcn.0046b4c0
add esp, 4
mov ecx, esp
mov dword [esp + 0x18], esp
push str.open
call fcn.004247f3
push 1
push ecx
mov byte [esp + 0x370c], 0xe8
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
xor edi, edi
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0xe9
mov eax, esp
mov dword [esp + 0x48], esp
push ecx
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
mov dword [esp + 0x38], eax
call fcn.004247f3
push ecx
mov byte [esp + 0x3718], 0xea
mov eax, esp
mov dword [esp + 0x94], esp
push eax
call fcn.00469b30
mov eax, dword [esp + 0x3c]
pop ecx
push eax
mov byte [esp + 0x371c], 0xe9
call fcn.0046acb0
add esp, 0xc
mov ebx, esi
mov byte [esp + 0x3710], 0xe6
call fcn.00469590
add esp, 0x10
xor esi, esi
jmp 0x446161
push str._AddSandbox_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x4fb058
call fcn.004b8970
mov edx, dword [esp + 0x2c]
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x1b8]
call fcn.004247f3
push 1
push esi
push ecx
mov byte [esp + 0x370c], 0xeb
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0xa60]
push eax
call fcn.00481b10
mov byte [esp + 0x3700], 0xec
push dword [0x5254a0]
lea eax, [esp + 0x4c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0xa60]
push eax
call fcn.00444689
add esp, 0x10
cmp dword [esp + 0xadc], esi
jne 0x44870a
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44853b
lea eax, [esp + 0x32c]
push eax
call fcn.00424bec
push ebx
lea ecx, [esp + 0x14c]
mov byte [esp + 0x3704], 0xed
call fcn.004247f3
lea eax, [esp + 0x148]
push eax
lea eax, [esp + 0x330]
push eax
push ecx
mov byte [esp + 0x370c], 0xee
lea eax, [esp + 0x1c0]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
call fcn.0047e510
add esp, 0xc
cmp eax, esi
jne 0x44877d
push dword [0x5254a0]
lea eax, [esp + 0x14c]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44682f
push 0xffffffffffffffff
xor esi, esi
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0xef
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3714], 0xf0
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247f3
push 2
push ecx
mov byte [esp + 0x371c], 0xf1
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
lea eax, [esp + 0xa70]
push eax
mov byte [esp + 0x3720], 0xee
call fcn.004380c5
add esp, 0x20
push 6
pop ecx
push dword [0x528fb8]
xor eax, eax
mov dword [esp + 0x314], esi
lea edi, [esp + 0x318]
rep stosd dword es:[edi], eax
push ecx
mov dword [esp + 0x1c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.SandboxCfg.db
call fcn.004247f3
push edi
mov ecx, esi
call fcn.0047bce0
pop ecx
pop ecx
lea ecx, [esp + 0x318]
call fcn.00475e10
pop ecx
pop ecx
lea esi, [esp + 0x88]
lea edi, [esp + 0x32c]
call fcn.0044d42d
lea esi, [esp + 0x344]
lea edi, [esp + 0x32c]
call fcn.0044d449
mov esi, eax
mov eax, dword [esp + 0x88]
test eax, eax
je 0x44886e
cmp eax, dword [esi]
je 0x448873
call fcn.004b8b91
mov eax, dword [esp + 0x8c]
cmp eax, dword [esi + 4]
je 0x448925
lea esi, [esp + 0x88]
call fcn.0044d38f
push eax
lea ecx, [esp + 0x24]
call fcn.004247de
mov byte [esp + 0x3700], 0xf2
call fcn.0044d38f
mov edi, dword [eax + 4]
mov eax, edi
lea esi, [esp + 0x288]
call fcn.004780d0
push ecx
mov byte [esp + 0x3704], 0xf3
mov esi, dword [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push esi
push str.Setting___s__s
push ecx
call fcn.0046aaf0
add esp, 0x10
call fcn.00443d79
pop ecx
mov ecx, dword [esp + 0x288]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x310]
push edi
push eax
xor eax, eax
mov edx, esi
call fcn.00478130
pop ecx
pop ecx
lea ecx, [esi - 0x10]
mov byte [esp + 0x3700], 0xee
call fcn.0042201a
lea esi, [esp + 0x88]
call fcn.0044d465
jmp 0x44884a
mov ebx, dword [esp + 0x310]
lea eax, [esp + 0x310]
push eax
call fcn.0048c040
lea eax, [esp + 0xa54]
call fcn.004829f0
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Done
jmp 0x447aef
push str._GetProperty_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x4fb0c0
call fcn.004b8970
mov edx, dword [esp + 0x2c]
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x1c0]
call fcn.004247f3
push 1
push esi
push ecx
mov byte [esp + 0x370c], 0xf4
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x11b0]
push eax
call fcn.00481b10
mov byte [esp + 0x3700], 0xf5
push dword [0x5254a0]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x11b0]
push eax
call fcn.00444689
add esp, 0x10
lea ecx, [esp + 0x150]
call fcn.00422487
lea eax, [esp + 0x2e8]
push eax
mov byte [esp + 0x3704], 0xf6
call fcn.0042b762
lea eax, [esp + 0x150]
push eax
push ecx
mov byte [esp + 0x3708], 0xf7
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Main
call fcn.004247f3
push 3
lea edi, [esp + 0x11b0]
call fcn.00483d60
mov ecx, dword [esp + 0x150]
mov eax, dword [ecx - 0xc]
cmp eax, esi
jne 0x448a4c
push 6
jmp 0x446162
lea edx, [esp + 0x2e8]
push edx
push eax
push ecx
call fcn.00472b50
mov eax, dword [esp + 0x30c]
mov eax, dword [eax]
add esp, 0xc
lea edi, [esp + 0x2e8]
lea esi, [esp + 0x88]
call fcn.0042bc70
mov eax, dword [esp + 0x300]
lea esi, [esp + 0xb8]
call fcn.0042bc70
mov edi, esi
lea esi, [esp + 0x88]
call fcn.0042b8d1
test al, al
je 0x4463ee
xor ebx, ebx
lea esi, [esp + 0x88]
call fcn.0042b8a6
push dword [eax]
lea eax, [esp + 0x1c0]
call fcn.00424876
test eax, eax
jne 0x448b2f
call fcn.0042b8a6
add eax, 4
push dword [eax]
lea ecx, [esp + 0xd0]
call fcn.004261ef
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
cmp eax, 0xffffffff
je 0x448b20
mov ecx, dword [esp + 0xcc]
push ebx
mov dword [esp + 0x15c], ebx
mov edx, dword [ecx - 0xc]
lea esi, [esp + 0x15c]
push esi
push edx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x448b20
mov eax, dword [esp + 0x158]
mov ecx, dword [esp + 0xcc]
cmp eax, dword [ecx - 0xc]
je 0x448b70
mov ecx, dword [esp + 0xcc]
add ecx, 0xfffffff0
call fcn.0042201a
lea esi, [esp + 0x88]
call fcn.0042eba2
mov eax, dword [esp + 0x300]
lea edi, [esp + 0x2e8]
lea esi, [esp + 0xb8]
call fcn.0042bc70
mov edi, esi
lea esi, [esp + 0x88]
call fcn.0042b8d1
test al, al
jne 0x448aa5
jmp 0x4463ee
push ebx
jmp 0x446162
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x38]
call fcn.004247de
mov byte [esp + 0x3700], 0xfe
mov eax, dword [esp + 0x28]
lea ecx, [eax + 1]
cmp dword [esp + 0x54], ecx
jle 0x448baa
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x38]
call fcn.0042484c
push 1
push esi
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x700]
push eax
call fcn.00481b10
mov byte [esp + 0x3700], 0xff
push dword [0x5254a0]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x700]
push eax
call fcn.00444689
add esp, 0x10
cmp dword [esp + 0x77c], esi
jne 0x448c17
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44853b
push 1
lea eax, [esp + 0x6f8]
push eax
lea eax, [esp + 0x10c]
push eax
call fcn.00444722
add esp, 0xc
push str._n_nSandboxing:_n_n
lea ecx, [esp + 0x108]
mov dword [esp + 0x3704], 0x100
call fcn.0042b495
lea eax, [esp + 0x6f4]
push eax
lea eax, [esp + 0x294]
push eax
call fcn.00444aa9
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x108]
mov byte [esp + 0x3704], 1
call fcn.00424861
mov byte [esp + 0x3700], 0
mov ecx, dword [esp + 0x290]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x104]
mov eax, dword [ecx - 0xc]
push ecx
push ecx
mov dword [esp + 0x1c], esp
mov edi, esp
push ecx
add eax, eax
mov ecx, esp
mov dword [esp + 0x20], esp
mov ebx, str..txt
push ebx
mov dword [esp + 0x30], eax
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 2
mov eax, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00469b30
pop ecx
push edi
mov byte [esp + 0x3714], 0
call fcn.0046acb0
mov edi, dword [esp + 0x34]
add esp, 0xc
call fcn.0046b4c0
pop ecx
pop ecx
push esi
push str.Package_info
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 3
mov eax, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00469b30
pop ecx
lea eax, [esp + 0x1d4]
push eax
mov byte [esp + 0x3714], 0
call fcn.0046acb0
add esp, 0xc
mov byte [esp + 0x3708], 4
push dword [eax]
lea eax, [esp + 0x2a4]
push str.Saved_in:__s
push eax
call fcn.0046aaf0
add esp, 0xc
push dword [eax]
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [esp + 0x298]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x1c4]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x446161
lea ecx, [esp + 0x14]
call fcn.00422487
lea ecx, [esp + 0x110]
mov dword [esp + 0x3700], 0x109
call fcn.00422487
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x3704], 0xa
call fcn.004247de
mov byte [esp + 0x3700], 0xb
mov eax, dword [esp + 0x28]
lea ecx, [eax + 1]
cmp dword [esp + 0x54], ecx
jle 0x448dd4
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x5c]
call fcn.0042484c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str..ini
call fcn.004247f3
push ecx
mov byte [esp + 0x3708], 0xc
lea eax, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.004247de
lea eax, [esp + 0x124]
push eax
mov byte [esp + 0x370c], 0xb
call fcn.0046acb0
add esp, 8
mov byte [esp + 0x3704], 0xd
lea eax, [esp + 0x120]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247de
call fcn.0046dbf0
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247de
lea eax, [esp + 0xf70]
push eax
call fcn.00481b10
mov byte [esp + 0x3700], 0xe
push dword [0x5254a0]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247de
lea eax, [esp + 0xf70]
push eax
call fcn.00444689
add esp, 0x10
cmp dword [esp + 0xfec], esi
jne 0x448ea4
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
jmp 0x44853b
lea eax, [esp + 0x110]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Main
call fcn.004247f3
push 3
lea edi, [esp + 0xf70]
call fcn.00483d60
mov ecx, dword [esp + 0x110]
mov eax, dword [ecx - 0xc]
cmp eax, esi
jne 0x448eeb
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
jmp 0x4461ab
push ecx
push ecx
lea edi, [eax + eax]
lea eax, [esp + 0x124]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
call fcn.0046b4c0
jmp 0x447b71
push str.AppID_ShortDesc_FriendlyName_Category_DownloadUrl_IconUrl_Version_BuildUid_Size_PopularityIndex_n
lea ecx, [esp + 0x74]
call fcn.004247f3
mov dword [esp + 0x3700], 0x10f
lea ecx, [esp + 0x24]
mov dword [esp + 0x13c], esi
mov dword [esp + 0x1dc], esi
call fcn.00422487
push 1
push esi
push ecx
mov byte [esp + 0x370c], 0x10
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x1510]
push eax
call fcn.00481b10
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x370c], 0x11
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x12
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3714], 0x13
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247de
push 2
push ecx
mov byte [esp + 0x371c], 0x14
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
lea eax, [esp + 0x1520]
push eax
mov byte [esp + 0x3720], 0x11
call fcn.004380c5
mov esi, 0x4eefa0
push esi
lea eax, [esp + 0x1ec]
push 0x528f44
push eax
call fcn.00424a42
add esp, 0x2c
push eax
lea ecx, [esp + 0x74]
mov byte [esp + 0x3704], 0x15
call fcn.00424861
mov byte [esp + 0x3700], 0x11
mov ecx, dword [esp + 0x1c8]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
lea ecx, [esp + 0x74]
call fcn.0042b495
push esi
push 0x528f50
lea eax, [esp + 0x274]
push eax
call fcn.00424a42
add esp, 0xc
push eax
lea ecx, [esp + 0x74]
mov byte [esp + 0x3704], 0x16
call fcn.00424861
mov byte [esp + 0x3700], 0x11
mov ecx, dword [esp + 0x26c]
add ecx, 0xfffffff0
call fcn.0042201a
push str.Productivity_
lea ecx, [esp + 0x74]
call fcn.0042b495
mov ebx, dword [esp + 0x28]
lea eax, [ebx + 1]
cmp dword [esp + 0x54], eax
mov edi, 0x4fb390
jle 0x4490a3
mov eax, dword [esp + 0x30]
push dword [eax + ebx*4 + 4]
lea ebx, [esp + 0x74]
push edi
call fcn.0042776a
mov ebx, dword [esp + 0x30]
pop ecx
pop ecx
jmp 0x4490b1
push str._Download_URL_here__
lea ecx, [esp + 0x74]
call fcn.0042b495
lea eax, [ebx + 2]
cmp dword [esp + 0x54], eax
jle 0x4490cf
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4]
lea ebx, [esp + 0x74]
push edi
call fcn.0042776a
pop ecx
pop ecx
jmp 0x4490dd
push str._Icon_here__
lea ecx, [esp + 0x74]
call fcn.0042b495
push esi
lea eax, [esp + 0x160]
push 0x528f58
push eax
call fcn.00424a42
add esp, 0xc
push eax
lea ecx, [esp + 0x74]
mov byte [esp + 0x3704], 0x17
call fcn.00424861
mov byte [esp + 0x3700], 0x11
mov ecx, dword [esp + 0x15c]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
lea eax, [esp + 0x240]
push 0x528f88
push eax
call fcn.00424a42
add esp, 0xc
push eax
lea ecx, [esp + 0x74]
mov byte [esp + 0x3704], 0x18
call fcn.00424861
mov byte [esp + 0x3700], 0x11
mov ecx, dword [esp + 0x23c]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push eax
lea edi, [esp + 0x1e4]
lea esi, [esp + 0x144]
call fcn.00469b30
pop ecx
call fcn.0046daf0
pop ecx
push dword [esp + 0x13c]
lea eax, [esp + 0x1e8]
push 0x4ebc30
push eax
call fcn.0046aaf0
add esp, 0xc
push 0x4eefa0
push eax
lea eax, [esp + 0x29c]
push eax
mov byte [esp + 0x370c], 0x19
call fcn.00424a42
add esp, 0xc
push eax
lea ecx, [esp + 0x74]
mov byte [esp + 0x3704], 0x1a
call fcn.00424861
mov ecx, dword [esp + 0x294]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3700], 0x11
mov ecx, dword [esp + 0x1e4]
add ecx, 0xfffffff0
call fcn.0042201a
push 0x4ecd4c
lea ecx, [esp + 0x74]
call fcn.0042b495
mov eax, dword [esp + 0x28]
add eax, 3
cmp dword [esp + 0x54], eax
jle 0x44921c
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4]
lea ecx, [esp + 0x28]
call fcn.0042484c
jmp 0x449284
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..csv
call fcn.004247f3
push ecx
mov byte [esp + 0x3708], 0x1b
mov eax, esp
mov dword [esp + 0x20], esp
push eax
call fcn.00469b30
pop ecx
lea eax, [esp + 0x24c]
push eax
mov byte [esp + 0x370c], 0x11
call fcn.0046acb0
add esp, 0xc
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x3704], 0x1c
call fcn.00424837
mov byte [esp + 0x3700], 0x11
mov ecx, dword [esp + 0x244]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x70]
mov eax, dword [ecx - 0xc]
push ecx
push ecx
lea edi, [eax + eax]
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247de
call fcn.0046b4c0
pop ecx
pop ecx
push dword [0x5254a0]
push ecx
mov dword [esp + 0x1c], esp
test eax, eax
jne 0x4492cd
mov eax, esp
lea ecx, [esp + 0x2c]
push ecx
push str.Could_not_save_to
push eax
call fcn.00424a97
jmp 0x4462ee
mov ecx, esp
lea eax, [esp + 0x2c]
push eax
call fcn.004247de
jmp 0x4472d7
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x1090]
push eax
call fcn.00481b10
mov dword [esp + 0x3700], 0x11d
cmp dword [esp + 0x110c], esi
jne 0x449325
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x446cb0
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x528f44]
push str._s.AppVirtDll.dll
push eax
call fcn.0046aaf0
lea eax, [esp + 0x11c]
add esp, 0xc
push eax
call fcn.0046a1c0
add esp, 4
mov byte [esp + 0x3704], 0x1e
lea eax, [esp + 0x110]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
push ecx
mov byte [esp + 0x3708], 0x1f
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Main
call fcn.004247f3
push 2
pop ecx
lea edi, [esp + 0x108c]
mov byte [esp + 0x3708], 0x1e
call fcn.00483f00
push dword [0x5254a0]
lea eax, [esp + 0x110]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247de
lea eax, [esp + 0x1f4]
push eax
call fcn.0048c7f0
add esp, 4
mov byte [esp + 0x3708], 0x20
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.EngineVersion_s
push ecx
call fcn.0046aaf0
add esp, 0xc
call fcn.0044460f
pop ecx
pop ecx
mov byte [esp + 0x3700], 0x1e
mov ecx, dword [esp + 0x1ec]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
lea eax, [esp + 0x110]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
call fcn.0046dbf0
jmp 0x447b72
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x28]
call fcn.004247de
push 0x2e
lea ecx, [esp + 0x28]
mov dword [esp + 0x3704], 0x121
call fcn.0043d83a
push eax
lea eax, [esp + 0x278]
push eax
lea ecx, [esp + 0x2c]
call fcn.004249e2
push str..new.exe
push eax
lea eax, [esp + 0xa0]
push eax
mov byte [esp + 0x370c], 0x22
call fcn.00424a42
add esp, 0xc
mov byte [esp + 0x3700], 0x24
mov ecx, dword [esp + 0x274]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x1f8]
call fcn.004247f3
push esi
mov byte [esp + 0x3704], 0x25
push dword [esp + 0x9c]
push dword [esp + 0x1fc]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x4494ee
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xa0]
push dword [esp + 0x30]
push str.Cant_copy__s_to__s
push eax
call fcn.0046aaf0
add esp, 0x10
jmp 0x44615c
push dword [esp + 0x98]
push dword [esp + 0x28]
call fcn.0043da5b
pop ecx
pop ecx
xor esi, esi
inc esi
push esi
push 0
push ecx
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x550]
push eax
call fcn.00481b10
push esi
push esi
push ecx
mov byte [esp + 0x370c], 0x26
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x1120]
push eax
call fcn.00481b10
mov byte [esp + 0x3700], 0x27
push dword [0x5254a0]
lea eax, [esp + 0x4c]
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x550]
push eax
call fcn.00444689
add esp, 0x10
lea eax, [esp + 0x38]
lea ecx, [esp + 0x5b4]
call fcn.0044d2d6
jmp 0x4496a6
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CEChangeEngine.tmp
call fcn.004247f3
lea eax, [esp + 0xac]
push eax
call fcn.0046a1c0
add esp, 4
mov byte [esp + 0x3704], 0x28
lea eax, [esp + 0xac]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
lea esi, [esp + 0x3c]
mov byte [esp + 0x3704], 0x29
call fcn.0044d38f
push ecx
add eax, 0x2c
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
call fcn.0044d38f
mov byte [esp + 0x3708], 0x28
mov ecx, dword [eax + 0x28]
lea edi, [esp + 0x54c]
call fcn.00483f00
test eax, eax
jne 0x449702
call fcn.0044d38f
push ecx
add eax, 0x2c
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
push 0x4000
mov byte [esp + 0x3708], 0x2a
call fcn.0044d38f
push dword [eax + 0x28]
lea eax, [esp + 0xb4]
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247de
lea eax, [esp + 0x1124]
push eax
mov byte [esp + 0x3714], 0x28
call fcn.00483720
test eax, eax
jne 0x44972e
push ecx
lea eax, [esp + 0xac]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
call fcn.0046dbf0
pop ecx
mov byte [esp + 0x3700], 0x27
mov ecx, dword [esp + 0xa8]
add ecx, 0xfffffff0
call fcn.0042201a
call fcn.0044d3b7
lea eax, [esp + 0x2d4]
lea ecx, [esp + 0x5b4]
call fcn.0044d2eb
mov edi, eax
lea esi, [esp + 0x38]
call fcn.00424d8d
test al, al
jne 0x449594
lea eax, [esp + 0x544]
call fcn.004829f0
lea eax, [esp + 0x1114]
call fcn.004829f0
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xa0]
push str.Successfully_changed_Loader:__s
jmp 0x4472ce
push dword [0x5254a0]
call fcn.0044d38f
push ecx
mov edi, esp
mov dword [esp + 0x1c], esp
push dword [eax + 0x2c]
lea esi, [esp + 0x44]
call fcn.0044d38f
push dword [eax + 0x28]
push str.Cannot_read_container__d__s_to_file
push edi
jmp 0x4494e1
push dword [0x5254a0]
lea esi, [esp + 0x3c]
call fcn.0044d38f
push ecx
mov edi, esp
mov dword [esp + 0x1c], esp
push dword [eax + 0x2c]
jmp 0x44971b
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
call fcn.004247de
push 0x2e
lea ecx, [esp + 0x30]
mov dword [esp + 0x3704], 0x12b
call fcn.0043d83a
push eax
lea eax, [esp + 0x250]
push eax
lea ecx, [esp + 0x34]
call fcn.004249e2
push str..new.exe
push eax
lea eax, [esp + 0xa8]
push eax
mov byte [esp + 0x370c], 0x2c
call fcn.00424a42
add esp, 0xc
mov byte [esp + 0x3700], 0x2e
mov ecx, dword [esp + 0x24c]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0xb4]
call fcn.004247f3
push esi
mov byte [esp + 0x3704], 0x2f
push dword [esp + 0xa4]
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x449807
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xa8]
push dword [esp + 0x38]
jmp 0x4494db
push 1
push 1
push ecx
lea eax, [esp + 0xac]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x4c0]
push eax
call fcn.00481b10
mov byte [esp + 0x3700], 0x30
push dword [0x5254a0]
lea eax, [esp + 0x4c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x4c0]
push eax
call fcn.00444689
add esp, 0x10
cmp dword [esp + 0x53c], esi
jne 0x44987d
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_open_PeContainer
jmp 0x446157
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov esi, str.Main
push esi
call fcn.004247f3
push 0
push 2
push ecx
mov byte [esp + 0x3710], 0x31
lea eax, [esp + 0xc0]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247de
lea eax, [esp + 0x4c4]
push eax
mov byte [esp + 0x3714], 0x30
call fcn.00483720
test eax, eax
je 0x4498df
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEDLL
jmp 0x446157
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247f3
push 0
push 8
push ecx
mov byte [esp + 0x3710], 0x32
mov dword [esp + 0x28], esp
mov edi, esp
push ecx
lea eax, [esp + 0xc4]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247de
push edi
call fcn.00478590
pop ecx
pop ecx
lea eax, [esp + 0x4c4]
push eax
mov byte [esp + 0x3714], 0x30
call fcn.00483720
test eax, eax
je 0x44994b
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEDLL64
jmp 0x446157
lea ecx, [esp + 0x124]
call fcn.00422487
lea ecx, [esp + 0x14c]
call fcn.00422487
lea eax, [esp + 0x124]
push eax
push ecx
mov byte [esp + 0x3708], 0x34
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f3
push 3
lea edi, [esp + 0x4c0]
call fcn.00483d60
test eax, eax
je 0x4499a9
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_Read_PeContainer_PECONTAINER_INI
jmp 0x446157
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
lea eax, [esp + 0xb8]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
lea ebx, [esp + 0x158]
call fcn.004247de
push edi
call fcn.0048c7f0
add esp, 4
mov byte [esp + 0x3708], 0x35
mov ecx, esp
mov dword [esp + 0x20], esp
push str.EngineVersion
call fcn.004247f3
push ecx
mov byte [esp + 0x370c], 0x36
lea eax, [esp + 0x130]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247de
mov byte [esp + 0x370c], 0x34
call fcn.0046f1e0
pop ecx
pop ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247f3
push 0x4000
push 3
pop esi
push ecx
mov byte [esp + 0x370c], 0x37
mov eax, ebx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247de
mov ecx, esi
lea ebx, [esp + 0x4c0]
mov byte [esp + 0x370c], 0x34
call fcn.00483500
test eax, eax
je 0x449a73
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_Add_PeContainerStr_PECONTAINER_INI
jmp 0x446157
lea eax, [esp + 0x4b4]
call fcn.004829f0
push dword [0x5254a0]
lea eax, [esp + 0xb4]
push ecx
mov dword [esp + 0x1c], esp
mov esi, esp
push dword [esp + 0xa8]
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247de
lea eax, [esp + 0x20c]
push eax
call fcn.0048c7f0
pop ecx
pop ecx
mov byte [esp + 0x370c], 0x38
push dword [eax]
push str.Successfully_changed_to_Engine__s._nNew_package_saved_in:_n_s
push esi
call fcn.0046aaf0
add esp, 0x10
call fcn.0044460f
pop ecx
pop ecx
mov ecx, dword [esp + 0x1fc]
jmp 0x44838b
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
call fcn.004247de
push 0x2e
lea ecx, [esp + 0x30]
mov dword [esp + 0x3704], 0x139
call fcn.0043d83a
push eax
lea eax, [esp + 0x290]
push eax
lea ecx, [esp + 0x34]
call fcn.004249e2
push str..new.exe
push eax
lea eax, [esp + 0xac]
push eax
mov byte [esp + 0x370c], 0x3a
call fcn.00424a42
add esp, 0xc
mov byte [esp + 0x3700], 0x3c
mov ecx, dword [esp + 0x28c]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x208]
call fcn.004247f3
push esi
mov byte [esp + 0x3704], 0x3d
push dword [esp + 0xa8]
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x449b9f
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xac]
push dword [esp + 0x38]
jmp 0x4494db
push 1
push 1
push ecx
lea eax, [esp + 0xb0]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x790]
push eax
call fcn.00481b10
mov byte [esp + 0x3700], 0x3e
push dword [0x5254a0]
lea eax, [esp + 0x4c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x790]
push eax
call fcn.00444689
add esp, 0x10
cmp dword [esp + 0x80c], esi
jne 0x449c10
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x449873
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Main
call fcn.004247f3
push esi
push 3
push ecx
mov byte [esp + 0x3710], 0x3f
lea eax, [esp + 0x214]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247de
lea eax, [esp + 0x794]
push eax
mov byte [esp + 0x3714], 0x3e
call fcn.00483720
cmp eax, esi
je 0x449c70
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEINI
jmp 0x446157
lea eax, [esp + 0x784]
call fcn.004829f0
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xac]
push str.Successfully_changed_INI._nNew_package_saved_in:_n_s
jmp 0x447b63
lea esi, [esp + 0x1594]
call fcn.00433767
mov dword [esp + 0x3700], 0x140
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x28]
push dword [edi + esi*4 + 4]
lea ecx, [esp + 0x15e0]
call fcn.0042484c
push dword [edi + esi*4 + 8]
lea ecx, [esp + 0x15b8]
call fcn.0042484c
push dword [edi + esi*4 + 0xc]
lea ecx, [esp + 0x15b0]
call fcn.0042484c
push eax
lea ecx, [esp + 0x15a4]
call fcn.00424837
push dword [edi + esi*4 + 0x10]
lea ecx, [esp + 0x15e8]
call fcn.0042484c
push dword [edi + esi*4 + 0x14]
lea ecx, [esp + 0x15e4]
call fcn.0042484c
lea eax, [esp + 0x16f4]
push eax
lea edi, [esp + 0x1598]
call fcn.00496540
lea eax, [esp + 0x16f4]
push eax
mov byte [esp + 0x3704], 0x41
call fcn.004966e0
test eax, eax
je 0x449d8e
xor esi, esi
mov eax, 0x4fb880
cmp dword [esp + 0x16f4], esi
jne 0x449d58
mov eax, 0x4fb888
push dword [esp + 0x1700]
push dword [esp + 0x1700]
push eax
lea eax, [esp + 0x260]
push str.Need_to_update:__s_nVersion:__s_nBuildUID:__s_n
push eax
call fcn.0046aaf0
add esp, 0x14
push esi
push str.Server_test:
push dword [esp + 0x25c]
jmp 0x448455
push 0
push str.Server_test:
push str.Failed
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 1
jmp 0x446162
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
mov edi, 0x528f38
push edi
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x449ddd
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
push esi
mov ecx, edi
call fcn.0043a216
jmp 0x44630c
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x670]
push eax
call fcn.00481b10
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x370c], 0x142
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x43
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3714], 0x44
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247de
push 2
push ecx
mov byte [esp + 0x371c], 0x45
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
lea eax, [esp + 0x680]
push eax
mov byte [esp + 0x3720], 0x42
call fcn.004380c5
add esp, 0x20
lea ecx, [esp + 0x664]
call fcn.00436ce8
lea eax, [esp + 0x664]
call fcn.004829f0
mov dword [esp + 0x3700], 4
lea eax, [esp + 0x664]
jmp 0x446bb8
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0xc10]
push eax
call fcn.00481b10
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x370c], 0x146
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x47
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3714], 0x48
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247de
push 2
push ecx
mov byte [esp + 0x371c], 0x49
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
lea eax, [esp + 0xc20]
push eax
mov byte [esp + 0x3720], 0x46
call fcn.004380c5
add esp, 0x20
push esi
push esi
push esi
push ecx
mov eax, esp
mov dword [esp + 0x24], esp
push eax
xor ecx, ecx
call fcn.0047c0c0
pop ecx
mov ecx, esi
call fcn.00494bd0
add esp, 0x10
lea eax, [esp + 0xc04]
call fcn.004829f0
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
mov edi, 0x528f38
push edi
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x449fb5
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_obtain_INI_info_from_resource_
call fcn.004247f3
call fcn.00443d79
pop ecx
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str.MountVirtReg
push eax
call fcn.0046aaf0
pop ecx
pop ecx
call fcn.00443d79
mov eax, esp
mov dword [esp + 0x18], esp
push str._____________
push eax
call fcn.0046aaf0
pop ecx
pop ecx
call fcn.00443d79
pop ecx
mov ecx, edi
call fcn.0042aeed
mov edi, eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
cmp edi, esi
jne 0x44a00c
push str.Cannot_mount_virtual_registry
call fcn.004247f3
call fcn.00443d79
jmp 0x44a019
push ebx
call fcn.004247f3
push edi
call fcn.00444b96
pop ecx
pop ecx
mov dword [esp + 0x3700], 4
lea eax, [esp + 0xc04]
jmp 0x446bb8
mov eax, dword [esp + 0x30]
mov edi, dword [esp + 0x28]
push dword [eax + edi*4 + 4]
lea ecx, [esp + 0x130]
call fcn.004247f3
mov dword [esp + 0x3700], 0x14a
mov eax, dword [esp + 0x30]
push dword [eax + edi*4 + 8]
lea ecx, [esp + 0xa0]
call fcn.004247f3
push 0x10
mov byte [esp + 0x3704], 0x4b
push esi
push dword [esp + 0x134]
call fcn.004bca8f
add esp, 8
mov edi, eax
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xa0]
push edi
push str.SetFileFlags:__0x_x____s_
push eax
call fcn.0046aaf0
add esp, 0x10
call fcn.00443d79
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0xca0]
push eax
call fcn.00481b10
mov byte [esp + 0x3700], 0x4c
push dword [0x5254a0]
lea eax, [esp + 0x4c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0xca0]
push eax
call fcn.00444689
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x4d
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3714], 0x4e
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247de
push 2
push ecx
mov byte [esp + 0x371c], 0x4f
mov ecx, esp
lea eax, [esp + 0x38]
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
lea eax, [esp + 0xcb0]
push eax
mov byte [esp + 0x3720], 0x4c
call fcn.004380c5
call fcn.00476000
mov ebx, 0x5287a4
mov eax, ebx
call fcn.0048b010
mov eax, dword [esp + 0xbc]
push esi
call fcn.004766b0
add esp, 0x24
push ecx
mov dword [esp + 0x18], esp
cmp eax, esi
je 0x44a1ef
mov eax, dword [eax + 0x24]
mov dword [eax], edi
mov ecx, esp
push dword [0x5287a4]
call fcn.004247f3
mov ecx, ebx
call fcn.004765e0
pop ecx
cmp eax, esi
je 0x44a1d9
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xa4]
push edi
push str.Success:_n__x___s
push eax
call fcn.0046aaf0
add esp, 0x10
call fcn.0044460f
pop ecx
jmp 0x44a20b
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str._SetFileFlags:_could_not_save_tree
push eax
call fcn.0046aaf0
pop ecx
pop ecx
jmp 0x44a206
mov eax, esp
push dword [esp + 0xa0]
push str._SetFileFlags:_could_not_find__s
push eax
call fcn.0046aaf0
add esp, 0xc
call fcn.00443d79
pop ecx
mov eax, ebx
call fcn.0048b020
lea eax, [esp + 0xc94]
mov byte [esp + 0x3700], 0x4b
call fcn.00427913
mov ecx, dword [esp + 0x9c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x12c]
jmp 0x44d071
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.DbgZip
call fcn.004247f3
call fcn.00443da9
mov dword [esp], str._DbgZip:
call fcn.004b8a1a
mov edx, dword [esp + 0x2c]
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x64]
call fcn.0042484c
jmp 0x446043
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x9d0]
push eax
call fcn.00481b10
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x370c], 0x150
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x51
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3714], 0x52
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247f3
push 2
push ecx
mov byte [esp + 0x371c], 0x53
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
lea eax, [esp + 0x9e0]
push eax
mov byte [esp + 0x3720], 0x50
call fcn.004380c5
add esp, 0x20
push dword [0x5254a0]
lea eax, [esp + 0x4c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x9d0]
push eax
call fcn.00444689
push dword [esp + 0x60]
lea edx, [esp + 0x9d8]
mov ecx, 0x528f38
call fcn.0043bfce
add esp, 0x14
mov dword [esp + 0x3700], 4
lea eax, [esp + 0x9c4]
jmp 0x446bb8
push 1
xor edi, edi
push edi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x1240]
push eax
call fcn.00481b10
push 0xffffffffffffffff
push edi
push ecx
mov dword [esp + 0x370c], 0x15a
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x5b
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3714], 0x5c
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247de
push 2
push ecx
mov byte [esp + 0x371c], 0x5d
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
lea eax, [esp + 0x1250]
push eax
mov byte [esp + 0x3720], 0x5a
call fcn.004380c5
add esp, 0x20
lea esi, [esp + 0xb8]
call fcn.00488c20
mov byte [esp + 0x3700], 0x5e
mov dword [esp + 0x34], edi
jmp 0x44a4c2
push dword [0x528f44]
lea eax, [esp + 0x2ac8]
push eax
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
jne 0x44a4c2
mov dword [esp + 0x2c], edi
cmp dword [esp + 0x26c0], edi
jbe 0x44a4c2
mov ebx, dword [esp + 0x2c]
shl ebx, 3
lea esi, [esp + ebx + 0x26c4]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [esi], eax
je 0x44a4b1
test byte [esp + ebx + 0x26c8], 3
je 0x44a4b1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x528f94
call fcn.004247de
push ecx
mov byte [esp + 0x3708], 0x5f
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x528f44
call fcn.004247de
mov byte [esp + 0x3708], 0x5e
mov ebx, dword [esi]
call fcn.00440278
pop ecx
pop ecx
xor edi, edi
inc dword [esp + 0x2c]
mov eax, dword [esp + 0x2c]
cmp eax, dword [esp + 0x26c0]
jb 0x44a452
push 1
lea eax, [esp + 0x22a0]
push eax
lea eax, [esp + 0xc0]
push eax
lea eax, [esp + 0x40]
call fcn.00488940
test eax, eax
jne 0x44a42c
push edi
push edi
push edi
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
lea eax, [esp + 0xb8]
call fcn.00488c40
lea eax, [esp + 0x1234]
mov dword [esp + 0x3700], 4
call fcn.00427913
xor esi, esi
jmp 0x44630d
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x13f0]
push eax
call fcn.00481b10
push 0xffffffffffffffff
mov dword [esp + 0x3704], 0x160
push dword [esp + 0x44]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x61
mov ecx, esp
mov dword [esp + 0x28], esp
push str._Vintegrate_
call fcn.004247f3
push ecx
mov byte [esp + 0x3714], 0x62
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247de
push esi
push ecx
mov byte [esp + 0x371c], 0x63
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
lea eax, [esp + 0x1400]
push eax
mov byte [esp + 0x3720], 0x60
call fcn.004380c5
add esp, 0x20
call fcn.00444543
jmp 0x446161
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
push str._ProcessList:all
push dword [eax + ecx*4]
call fcn.004b8761
mov edi, eax
neg edi
pop ecx
sbb edi, edi
pop ecx
lea esi, [esp + 0xb8]
inc edi
call fcn.00488c20
mov dword [esp + 0x3700], 0x164
and dword [esp + 0x2c], 0
lea ecx, [esp + 0x4c]
call fcn.00422487
xor eax, eax
test edi, edi
sete al
mov byte [esp + 0x3700], 0x65
mov dword [esp + 0x34], eax
jmp 0x44a8e4
lea eax, [esp + 0x209c]
push eax
lea eax, [esp + 0x210]
push str._AppID_ws_n
push eax
call fcn.0046aaf0
add esp, 0xc
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x3704], 0x66
call fcn.00424861
mov byte [esp + 0x3700], 0x65
mov ecx, dword [esp + 0x20c]
add ecx, 0xfffffff0
call fcn.0042201a
push dword [esp + 0x1878]
lea eax, [esp + 0x280]
push str.____SerialId:__d_n
push eax
call fcn.0046aaf0
add esp, 0xc
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x3704], 0x67
call fcn.00424861
mov byte [esp + 0x3700], 0x65
mov ecx, dword [esp + 0x27c]
add ecx, 0xfffffff0
call fcn.0042201a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x1c90]
mov esi, 0x3e8
xor edx, edx
mov ecx, esi
div ecx
push eax
lea eax, [esp + 0x218]
push str.____Started:__d_sec_ago_n
push eax
call fcn.0046aaf0
add esp, 0xc
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x3704], 0x68
call fcn.00424861
mov byte [esp + 0x3700], 0x65
mov ecx, dword [esp + 0x214]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x1c94]
xor edx, edx
div esi
push eax
lea eax, [esp + 0x260]
push str.____Blocking_buffering:__d_sec_n
push eax
call fcn.0046aaf0
add esp, 0xc
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x3704], 0x69
call fcn.00424861
mov byte [esp + 0x3700], 0x65
mov ecx, dword [esp + 0x25c]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x21c]
push str.____Processes:_n
push eax
call fcn.0046aaf0
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x3704], 0x6a
call fcn.00424861
mov byte [esp + 0x3700], 0x65
mov ecx, dword [esp + 0x21c]
add ecx, 0xfffffff0
call fcn.0042201a
and dword [esp + 0x58], 0
cmp dword [esp + 0x1c98], 0
jbe 0x44a8e4
push ebx
lea ecx, [esp + 0xb0]
call fcn.004247f3
mov byte [esp + 0x3700], 0x6b
mov edi, dword [esp + 0x58]
lea edi, [esp + edi*8 + 0x1c9c]
push dword [edi]
lea esi, [esp + 0xb0]
call fcn.00469370
pop ecx
test eax, eax
jne 0x44a7e0
push 0x4ed8a8
mov ecx, esi
call fcn.0042484c
push 0x5c
push ecx
lea eax, [esp + 0xb4]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247de
lea eax, [esp + 0x22c]
push eax
call fcn.0046ae20
add esp, 0xc
mov byte [esp + 0x3700], 0x6c
push dword [eax]
lea eax, [esp + 0x2a0]
push dword [edi]
push str._______wd:__ws
push eax
call fcn.0046aaf0
add esp, 0x10
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x3704], 0x6d
call fcn.00424861
mov ecx, dword [esp + 0x29c]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3700], 0x6b
mov ecx, dword [esp + 0x224]
add ecx, 0xfffffff0
call fcn.0042201a
mov esi, dword [esp + 0x58]
mov eax, dword [esp + esi*8 + 0x1ca0]
test eax, eax
je 0x44a8ad
push eax
lea eax, [esp + 0x268]
push str._0x_x_
push eax
call fcn.0046aaf0
add esp, 0xc
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x3704], 0x6e
call fcn.00424861
mov byte [esp + 0x3700], 0x6b
mov ecx, dword [esp + 0x264]
add ecx, 0xfffffff0
call fcn.0042201a
push 0x4e94cc
lea ecx, [esp + 0x50]
call fcn.0042b495
mov byte [esp + 0x3700], 0x65
mov ecx, dword [esp + 0xac]
add ecx, 0xfffffff0
call fcn.0042201a
inc esi
mov dword [esp + 0x58], esi
cmp esi, dword [esp + 0x1c98]
jb 0x44a7a1
push dword [esp + 0x34]
lea eax, [esp + 0x1878]
push eax
lea eax, [esp + 0xc0]
push eax
lea eax, [esp + 0x38]
call fcn.00488940
test eax, eax
jne 0x44a625
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
cmp dword [esp + 0x34], eax
jne 0x44a932
push str.No_active_virtual_apps
call fcn.004247f3
call fcn.0044460f
pop ecx
pop ecx
jmp 0x449da2
lea eax, [esp + 0x54]
jmp 0x4492d3
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
push 0x528f38
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x44a96e
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
lea esi, [esp + 0xb8]
call fcn.00488c20
mov dword [esp + 0x3700], 0x16f
and dword [esp + 0x34], 0
jmp 0x44a9a5
push dword [0x528f44]
lea eax, [esp + 0x34f0]
push eax
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44a9d5
push 1
lea eax, [esp + 0x2cc8]
push eax
lea eax, [esp + 0xc0]
push eax
lea eax, [esp + 0x40]
call fcn.00488940
test eax, eax
jne 0x44a98c
lea eax, [esp + 0xb8]
call fcn.00488c40
jmp 0x4472de
push 0x2bc
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0xb8]
mov dword [esp + 0x3700], 4
call fcn.00488c40
jmp 0x44a96e
lea eax, [esp + 0x22c]
push eax
mov eax, dword [esp + 0x68]
mov eax, dword [eax + 0x44]
call fcn.004315b6
lea eax, [esp + 0x22c]
push eax
call fcn.004316f3
jmp 0x446161
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.AutoUpdate
call fcn.004247f3
call fcn.00443da9
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
mov edi, 0x528f38
push edi
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x44aa6b
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x528f80]
push str.AutoUpdate_s
push eax
call fcn.0046aaf0
add esp, 0xc
call fcn.00443da9
mov ecx, 0x528f80
mov dword [esp], str.https:__online.cameyo.com
call fcn.0042484c
push str.0000
mov ecx, 0x528f84
call fcn.0042484c
mov ecx, edi
call fcn.00498350
jmp 0x44630d
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.VirtRegSyncExport
call fcn.004247f3
call fcn.00443da9
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
push 0x528f38
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x44aaff
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
call fcn.0044159b
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
push str.VirtRegSyncExport:_bRet_d
push ecx
call fcn.0046aaf0
add esp, 0xc
jmp 0x446307
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.StartStreaming:AppIDSkype
call fcn.004247f3
call fcn.0042761f
pop ecx
jmp 0x44630c
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
push 0x528f38
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x44ab70
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.open
xor ebx, ebx
call fcn.004247f3
push esi
push ecx
mov dword [esp + 0x370c], 0x172
mov eax, esp
mov dword [esp + 0x24], esp
push dword [0x528f94]
xor edi, edi
push str._select___s_
push eax
call fcn.0046aaf0
add esp, 8
mov byte [esp + 0x3710], 0x73
mov ecx, esp
mov dword [esp + 0x48], esp
push str.explorer.exe
call fcn.004247f3
mov dword [esp + 0x3710], 4
call fcn.00469590
add esp, 0x10
jmp 0x44a516
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SvcRegister
call fcn.004247f3
call fcn.00443da9
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
mov edi, 0x528f38
push edi
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x44ac25
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
mov ecx, edi
call fcn.0042aeed
mov ebx, eax
cmp ebx, esi
jne 0x44ac49
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_mount_virtual_registry
jmp 0x446157
call fcn.00476000
push dword [0x5254a0]
push ebx
push edi
call fcn.00423ab7
add esp, 0xc
push dword [0x5254a0]
mov edi, eax
cmp edi, esi
jne 0x44ac78
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Success
jmp 0x44ac89
cmp edi, 5
jne 0x44ac97
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_services_to_register
call fcn.004247f3
call fcn.0044460f
pop ecx
pop ecx
jmp 0x44acdf
lea eax, [esp + 0x288]
push edi
push eax
call fcn.00471aa0
add esp, 4
mov dword [esp + 0x3708], 0x174
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Failed_registering_services:__s
push ecx
call fcn.0046aaf0
add esp, 0xc
call fcn.0044460f
pop ecx
pop ecx
mov ecx, dword [esp + 0x284]
add ecx, 0xfffffff0
call fcn.0042201a
push edi
jmp 0x446162
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SvcStart
call fcn.004247f3
call fcn.00443da9
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
mov edi, 0x528f38
push edi
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x44ad2e
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
mov ecx, edi
call fcn.00424309
push dword [0x5254a0]
mov edi, eax
cmp edi, esi
je 0x44ac6a
cmp edi, 5
jne 0x44ad5b
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_services_to_start
jmp 0x44ac89
lea eax, [esp + 0x238]
push edi
push eax
call fcn.00471aa0
add esp, 4
mov dword [esp + 0x3708], 0x175
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Failed_starting_services:__s
push ecx
call fcn.0046aaf0
add esp, 0xc
call fcn.0044460f
pop ecx
pop ecx
mov ecx, dword [esp + 0x234]
jmp 0x44acd7
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SvcRegisterStart
call fcn.004247f3
call fcn.00443da9
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
mov edi, 0x528f38
push edi
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x44ade9
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
mov ecx, edi
call fcn.0042aeed
mov ebx, eax
cmp ebx, esi
jne 0x44ae08
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ac3f
call fcn.00476000
push dword [0x5254a0]
push ebx
push edi
call fcn.00423ab7
add esp, 0xc
mov ebx, str.Failed_registering_services:__s
cmp eax, 5
jne 0x44ae47
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_services_to_register
call fcn.004247f3
call fcn.0044460f
pop ecx
pop ecx
jmp 0x44aea0
cmp eax, esi
je 0x44aea0
push dword [0x5254a0]
push eax
lea eax, [esp + 0x1c8]
push eax
call fcn.00471aa0
add esp, 4
mov dword [esp + 0x3708], 0x176
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push ebx
push ecx
call fcn.0046aaf0
add esp, 0xc
call fcn.0044460f
pop ecx
pop ecx
mov dword [esp + 0x3700], 4
mov ecx, dword [esp + 0x1c0]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, edi
call fcn.00424309
push dword [0x5254a0]
mov edi, eax
cmp edi, esi
je 0x44ac6a
cmp edi, 5
je 0x44ac7d
lea eax, [esp + 0x1d4]
push edi
push eax
call fcn.00471aa0
add esp, 4
mov dword [esp + 0x3708], 0x177
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push ebx
push ecx
call fcn.0046aaf0
add esp, 0xc
call fcn.0044460f
pop ecx
pop ecx
mov ecx, dword [esp + 0x1d0]
jmp 0x44acd7
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SvcStop
call fcn.004247f3
call fcn.00443da9
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
mov edi, 0x528f38
push edi
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x44af4a
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
push esi
mov ecx, edi
call fcn.00423ea9
mov edi, eax
pop ecx
push dword [0x5254a0]
cmp edi, esi
je 0x44ac6a
cmp edi, 5
jne 0x44af79
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_services_to_stop
jmp 0x44ac89
lea eax, [esp + 0x1dc]
push edi
push eax
call fcn.00471aa0
add esp, 4
mov dword [esp + 0x3708], 0x178
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Failed_stopping_services:__s
push ecx
call fcn.0046aaf0
add esp, 0xc
call fcn.0044460f
pop ecx
pop ecx
mov ecx, dword [esp + 0x1d8]
jmp 0x44acd7
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SvcRemove
call fcn.004247f3
call fcn.00443da9
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
mov edi, 0x528f38
push edi
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x44b007
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
push 1
mov ecx, edi
call fcn.00423ea9
mov edi, eax
pop ecx
push dword [0x5254a0]
cmp edi, esi
je 0x44ac6a
cmp edi, 5
jne 0x44b037
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_services_to_remove
jmp 0x44ac89
lea eax, [esp + 0x1e4]
push edi
push eax
call fcn.00471aa0
add esp, 4
mov dword [esp + 0x3708], 0x179
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Failed_removing_services:__s
push ecx
call fcn.0046aaf0
add esp, 0xc
call fcn.0044460f
pop ecx
pop ecx
mov ecx, dword [esp + 0x1e0]
jmp 0x44acd7
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.ScmDirectInit
call fcn.004247f3
call fcn.00443da9
mov dword [esp], 0x4fc1f8
call fcn.004b8970
mov edx, dword [esp + 0x2c]
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x1ec]
call fcn.004247f3
push ecx
mov dword [esp + 0x3704], 0x17a
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
mov ebx, 0x528f38
push ebx
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x44b0f9
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
push ecx
lea eax, [esp + 0x1ec]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
mov edi, 0x528fd0
call fcn.004247de
call fcn.0042a925
pop ecx
mov edi, ebx
call fcn.004246eb
jmp 0x446161
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.RepoSync
call fcn.004247f3
call fcn.00443da9
mov eax, dword [esp + 0x34]
pop ecx
mov ecx, dword [esp + 0x28]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x138]
call fcn.004247f3
lea eax, [esp + 0x484]
push eax
mov dword [esp + 0x3704], 0x17b
call fcn.00424bec
lea eax, [esp + 0x46c]
push eax
mov byte [esp + 0x3704], 0x7c
call fcn.00424bec
lea eax, [esp + 0x49c]
push eax
mov byte [esp + 0x3704], 0x7d
call fcn.00424bec
push esi
lea eax, [esp + 0x4a0]
push eax
lea eax, [esp + 0x474]
push eax
lea eax, [esp + 0x490]
push eax
push ecx
mov byte [esp + 0x3714], 0x7e
lea eax, [esp + 0x148]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247de
push ecx
mov byte [esp + 0x3718], 0x7f
lea eax, [esp + 0x14c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247de
mov byte [esp + 0x3718], 0x7e
call fcn.0043c2ec
add esp, 0x18
push eax
jmp 0x446162
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.MergeRegistry
call fcn.004247f3
call fcn.00443da9
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
mov edi, 0x528f38
push edi
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x44b245
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
push edi
call fcn.0043d5e7
pop ecx
mov edi, eax
lea eax, [esp + 0x1f0]
push edi
push eax
call fcn.00471aa0
add esp, 4
mov ecx, esp
mov dword [esp + 0x3704], 0x180
mov dword [esp + 0x18], esp
push dword [eax]
push edi
push str.Loader_MergeRegistry___d__s_
push ecx
call fcn.0046aaf0
add esp, 0x10
call fcn.00443d79
pop ecx
mov dword [esp + 0x3700], 4
mov ecx, dword [esp + 0x1f0]
add ecx, 0xfffffff0
call fcn.0042201a
push dword [0x5254a0]
cmp edi, esi
je 0x44ac6a
lea eax, [esp + 0x1fc]
push edi
push eax
call fcn.00471aa0
add esp, 4
mov dword [esp + 0x3708], 0x181
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Failed:__s
push ecx
call fcn.0046aaf0
add esp, 0xc
call fcn.0044460f
pop ecx
pop ecx
mov ecx, dword [esp + 0x1f8]
jmp 0x44acd7
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cameyo.exe__UpgradePkg_
call fcn.004247f3
call fcn.00443da9
pop ecx
lea ecx, [esp + 0xd4]
call fcn.00422487
mov byte [esp + 0x3700], 0x84
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
push dword [eax + ecx*4]
lea ecx, [esp + 0xf4]
call fcn.004247f3
push ecx
mov byte [esp + 0x3704], 0x85
lea eax, [esp + 0xf4]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
call fcn.0046d1a0
pop ecx
cmp eax, esi
jne 0x44b37a
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xf8]
push str._s_not_found
jmp 0x4462e8
push esi
lea eax, [esp + 0xd8]
push eax
push ecx
lea eax, [esp + 0xfc]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
push ecx
mov byte [esp + 0x3710], 0x86
mov eax, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00469b30
pop ecx
mov byte [esp + 0x3710], 0x85
call fcn.004418b2
add esp, 0x10
push dword [0x5254a0]
cmp eax, esi
jne 0x44b3df
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xdc]
push 0x4fa79c
jmp 0x447b63
push eax
lea eax, [esp + 0x2e8]
push eax
call fcn.00471aa0
add esp, 4
mov byte [esp + 0x3708], 0x87
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xdc]
push dword [eax]
push str._s:__s
push ecx
jmp 0x4494e1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.AuthCheck
call fcn.004247f3
call fcn.00443da9
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
mov esi, 0x528f38
push esi
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x44b45b
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
call fcn.004335a0
xor edi, edi
mov dword [esp + 0x20], eax
cmp eax, edi
je 0x44b50b
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
push str._AuthCheck:Force
push dword [eax + ecx*4]
call fcn.004b8761
pop ecx
pop ecx
lea eax, [esp + 0x200]
push eax
push ecx
mov dword [esp + 0x1c], esp
mov ebx, esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.AuthToken.dat
mov dword [esp + 0x210], edi
call fcn.004247f3
push ebx
mov ecx, edi
call fcn.0047bce0
pop ecx
pop ecx
mov ecx, dword [esp + 0x28]
mov edx, esi
call fcn.00432cb7
push dword [0x5254a0]
mov esi, eax
push ecx
mov dword [esp + 0x1c], esp
test esi, esi
je 0x44b4e0
mov ecx, esp
push str.Allowed_to_run_this_package
call fcn.004247f3
jmp 0x44b4f5
mov eax, esp
push 0x529014
push str.Denied:_n
push eax
call fcn.00424a97
add esp, 0xc
call fcn.0044460f
neg esi
sbb esi, esi
pop ecx
and esi, 0xffffffef
pop ecx
add esi, 0x11
jmp 0x446161
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_authentication_server_specified_in_this_package
jmp 0x446157
push str.Vintegrate:
lea ecx, [esp + 0x104]
call fcn.004247f3
mov dword [esp + 0x3700], 0x154
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
lea edi, [eax + ecx*4]
push str._VintegrateRecursive
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
je 0x44b57a
push 0x4fbb80
call fcn.004b8970
pop ecx
push eax
push str._VintegrateRecursive:
push dword [edi]
call fcn.004baf86
add esp, 0xc
test eax, eax
jne 0x44b58b
push str.VintegrateRecursive:
lea ecx, [esp + 0x104]
call fcn.0042484c
push str._Windows_Explorer.exe
lea ecx, [esp + 0xdc]
call fcn.004247f3
mov byte [esp + 0x3700], 0x55
mov edi, dword [edi]
push 0x3a
push edi
call fcn.004b94c8
pop ecx
pop ecx
cmp eax, esi
je 0x44b5c4
add eax, 2
push eax
lea ecx, [esp + 0xdc]
call fcn.0042484c
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x1360]
push eax
call fcn.00481b10
push 0xffffffffffffffff
mov byte [esp + 0x3704], 0x56
push dword [esp + 0x44]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov eax, esp
mov byte [esp + 0x3710], 0x57
mov dword [esp + 0x28], esp
lea ecx, [esp + 0xe8]
push ecx
lea ecx, [esp + 0x114]
push ecx
push eax
call fcn.0042c68a
add esp, 8
mov byte [esp + 0x3714], 0x58
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247de
push esi
push ecx
mov byte [esp + 0x371c], 0x59
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
lea eax, [esp + 0x1370]
push eax
mov byte [esp + 0x3720], 0x56
call fcn.004380c5
add esp, 0x20
lea eax, [esp + 0x1354]
mov byte [esp + 0x3700], 0x55
call fcn.00427913
mov ecx, dword [esp + 0xd8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x100]
jmp 0x44d071
lea ecx, [esp + 0x2c]
call fcn.00422487
lea ecx, [esp + 0xe0]
mov dword [esp + 0x3700], 0x105
call fcn.00422487
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x68]
mov byte [esp + 0x3704], 6
call fcn.004247de
mov byte [esp + 0x3700], 7
mov eax, dword [esp + 0x28]
lea ecx, [eax + 1]
cmp dword [esp + 0x54], ecx
jle 0x44b6fd
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x68]
call fcn.0042484c
push 1
push esi
push ecx
lea eax, [esp + 0x70]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0xdc0]
push eax
call fcn.00481b10
mov byte [esp + 0x3700], 8
push dword [0x5254a0]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0xdc0]
push eax
call fcn.00444689
add esp, 0x10
cmp dword [esp + 0xe3c], esi
jne 0x44b769
push str.FAILED_LOADING_CONTAINERS__n
lea ebx, [esp + 0x30]
call fcn.0042776a
pop ecx
xor esi, esi
lea eax, [esp + 0xe0]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Main
call fcn.004247f3
push 3
lea edi, [esp + 0xdc0]
call fcn.00483d60
mov eax, dword [esp + 0xe0]
cmp dword [eax - 0xc], esi
jne 0x44b7aa
push str.Cannot_obtain_INI_info_from_resource__n
lea ecx, [esp + 0x30]
call fcn.0042bc86
lea eax, [esp + 0xe0]
push eax
lea ecx, [esp + 0x30]
call fcn.0042538d
push esi
push 0x4ed82c
push dword [esp + 0x34]
jmp 0x448455
push str._ExportProperties_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea ecx, [esp + 0x24]
call fcn.00422487
mov byte [esp + 0x3700], 0xf8
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
push str._ExportAllProperties
push dword [eax + ecx*4]
call fcn.004b8761
mov edi, eax
mov eax, dword [esp + 0x2c]
neg edi
sbb edi, edi
pop ecx
inc edi
pop ecx
cmp dword [eax - 0xc], esi
jne 0x44b878
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..xml
call fcn.004247f3
push ecx
mov byte [esp + 0x3708], 0xf9
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x210]
push eax
mov byte [esp + 0x370c], 0xf8
call fcn.0046acb0
add esp, 0xc
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x3704], 0xfa
call fcn.00424837
mov byte [esp + 0x3700], 0xf8
mov ecx, dword [esp + 0x208]
add ecx, 0xfffffff0
call fcn.0042201a
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0xaf0]
push eax
call fcn.00481b10
mov byte [esp + 0x3700], 0xfb
push dword [0x5254a0]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0xaf0]
push eax
call fcn.00444689
add esp, 0x10
cmp dword [esp + 0xb6c], esi
jne 0x44b8e5
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44853b
sub esp, 0x90
mov eax, esp
mov dword [esp + 0xa4], esp
lea ecx, [esp + 0xb74]
push ecx
push eax
call fcn.0044d103
push edi
push ecx
mov byte [esp + 0x3798], 0xfc
lea eax, [esp + 0xe0]
mov ecx, esp
mov dword [esp + 0xb0], esp
push eax
call fcn.004247de
push ecx
mov byte [esp + 0x379c], 0xfd
lea eax, [esp + 0xc0]
mov ecx, esp
mov dword [esp + 0xd4], esp
push eax
call fcn.004247de
mov byte [esp + 0x379c], 0xfb
call fcn.0042b121
add esp, 0x9c
cmp eax, esi
jne 0x44b973
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x2c]
push str.Cannot_save_into:__s
jmp 0x4462e8
lea eax, [esp + 0xae4]
call fcn.004829f0
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x2c]
push str.Properties_exported_to:_n_s
jmp 0x447b63
lea eax, [esp + 0x2c]
push eax
call fcn.00469c20
mov byte [esp + 0x3704], 0xa7
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x2c]
lea edi, [eax + ecx*4]
mov dword [esp], 0x4fad88
call fcn.004b8970
pop ecx
push eax
push str._CreateShortcuts:
push dword [edi]
call fcn.004baf86
add esp, 0xc
test eax, eax
jne 0x44b9f9
push dword [edi]
lea ecx, [esp + 0x30]
call fcn.0042484c
push 0x4fad88
call fcn.004b8970
pop ecx
push esi
lea ecx, [esp + 0x30]
push ecx
call fcn.0042488a
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
push 0x528f38
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x44ba2c
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x1480]
push eax
call fcn.00481b10
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x370c], 0xa8
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0xa9
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3714], 0xaa
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247f3
push 2
push ecx
mov byte [esp + 0x371c], 0xab
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
lea eax, [esp + 0x1490]
push eax
mov byte [esp + 0x3720], 0xa8
call fcn.004380c5
add esp, 0x20
push 0x528f48
lea ecx, [esp + 0x68]
call fcn.004247de
lea eax, [esp + 0x6c]
push eax
push 0x4eefa0
lea eax, [esp + 0x88]
mov byte [esp + 0x3708], 0xac
push eax
lea ecx, [esp + 0x70]
mov dword [esp + 0x78], esi
call fcn.0042b624
jmp 0x44bfed
lea ecx, [esp + 0x24]
call fcn.00422487
lea ecx, [esp + 0x28]
call fcn.00422487
lea ecx, [esp + 0x30]
call fcn.00422487
lea ecx, [esp + 0x40]
call fcn.00422487
push 0x3e
push ecx
mov byte [esp + 0x3708], 0xb1
lea eax, [esp + 0x88]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov dword [esp + 0x90], esi
lea edi, [esp + 0x90]
call fcn.004247de
lea eax, [esp + 0x218]
push eax
call fcn.0046e6f0
add esp, 0xc
mov byte [esp + 0x3700], 0xb2
call fcn.00424939
push eax
lea ecx, [esp + 0x28]
call fcn.00424837
mov byte [esp + 0x3700], 0xb1
mov ecx, dword [esp + 0x210]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0x84], 0xffffffff
je 0x44bf8b
push 0x3e
push ecx
lea eax, [esp + 0x88]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247de
lea eax, [esp + 0x220]
push eax
call fcn.0046e6f0
add esp, 0xc
mov byte [esp + 0x3700], 0xb3
call fcn.00424939
push eax
lea ecx, [esp + 0x2c]
call fcn.00424837
mov byte [esp + 0x3700], 0xb1
mov ecx, dword [esp + 0x218]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0x84], 0xffffffff
je 0x44bf8b
push 0x3e
push ecx
lea eax, [esp + 0x88]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247de
lea eax, [esp + 0x228]
push eax
call fcn.0046e6f0
add esp, 0xc
mov byte [esp + 0x3700], 0xb4
call fcn.00424939
push eax
lea ecx, [esp + 0x34]
call fcn.00424837
mov byte [esp + 0x3700], 0xb1
mov ecx, dword [esp + 0x220]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0x84], 0xffffffff
jne 0x44bc64
push ebx
lea ecx, [esp + 0x34]
call fcn.0042484c
jmp 0x44bcbf
push 0x3e
push ecx
lea eax, [esp + 0x88]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
lea edi, [esp + 0x90]
call fcn.004247de
lea eax, [esp + 0x230]
push eax
call fcn.0046e6f0
add esp, 0xc
mov byte [esp + 0x3700], 0xb5
call fcn.00424939
push eax
lea ecx, [esp + 0x44]
call fcn.00424837
mov byte [esp + 0x3700], 0xb1
mov ecx, dword [esp + 0x228]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0x84], 0xffffffff
jne 0x44bcd3
push ebx
lea ecx, [esp + 0x44]
call fcn.0042484c
push dword [esp + 0x24]
lea eax, [esp + 0xb8]
push str._exec___s_
push eax
call fcn.0046aaf0
add esp, 0xc
mov byte [esp + 0x3700], 0xb6
mov eax, dword [esp + 0x28]
cmp dword [eax - 0xc], esi
je 0x44bd1f
push 0x4f11ac
lea ecx, [esp + 0xb8]
call fcn.0042b495
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0xb8]
call fcn.00424861
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
push ecx
mov edi, esp
mov byte [esp + 0x3708], 0xb7
mov dword [esp + 0x20], esp
push 0x5c
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247de
push edi
call fcn.0046ae20
lea eax, [esp + 0x128]
add esp, 0xc
push eax
mov byte [esp + 0x370c], 0xb6
call fcn.0042aaac
add esp, 0xc
push esi
push esi
push esi
push ecx
mov byte [esp + 0x3710], 0xb8
lea eax, [esp + 0x124]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247de
lea eax, [esp + 0x108]
push esi
push eax
call fcn.0047b9e0
add esp, 0x14
mov byte [esp + 0x3704], 0xb9
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x4e8fa8
call fcn.004247f3
push ecx
mov eax, esp
mov byte [esp + 0x3708], 0xba
mov dword [esp + 0x20], esp
push str..lnk
lea ecx, [esp + 0x3c]
push ecx
push eax
call fcn.00424a42
add esp, 8
mov byte [esp + 0x370c], 0xbb
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247de
lea edi, [esp + 0x23c]
mov byte [esp + 0x370c], 0xb9
call fcn.0046a3b0
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x230]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
lea eax, [esp + 0xfc]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
call fcn.0046d1a0
pop ecx
cmp eax, esi
je 0x44be4a
lea eax, [esp + 0xf8]
jmp 0x44be64
push esi
lea ecx, [esp + 0x164]
call fcn.004247f3
mov byte [esp + 0x3700], 0xbc
or dword [esp + 0x4c], 2
mov eax, dword [eax]
push esi
push ecx
mov dword [esp + 0x28], eax
lea eax, [esp + 0x48]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247de
push ecx
mov dword [esp + 0x370c], 0xbd
lea eax, [esp + 0xc0]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247de
push ecx
mov byte [esp + 0x3710], 0xbe
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x48], esp
push eax
call fcn.004247de
push ecx
mov byte [esp + 0x3714], 0xbf
mov dword [esp + 0x90], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x94], esp
push 0x4e8fa8
call fcn.004247f3
push ecx
mov eax, esp
mov byte [esp + 0x371c], 0xc0
mov dword [esp + 0x50], esp
push str..lnk
lea ecx, [esp + 0x50]
push ecx
push eax
call fcn.00424a42
add esp, 8
mov byte [esp + 0x3720], 0xc1
lea eax, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x78], esp
push eax
call fcn.004247de
mov byte [esp + 0x3720], 0xbf
call fcn.0046a3b0
mov ecx, dword [esp + 0x40]
add esp, 0xc
mov byte [esp + 0x3714], 0xbc
call fcn.00495860
add esp, 0x14
mov dword [esp + 0x3700], 0xb9
test byte [esp + 0x4c], 2
je 0x44bf5e
mov ecx, dword [esp + 0x160]
and dword [esp + 0x4c], 0xfffffffd
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0xf8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x114]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0xb4]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x40]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x28]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3700], 0xac
mov ecx, dword [esp + 0x80]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x6c]
push eax
push 0x4eefa0
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0x70]
call fcn.0042b624
cmp dword [esp + 0x6c], 0xffffffff
jne 0x44bafc
mov byte [esp + 0x3700], 0xac
mov ecx, dword [esp + 0x80]
add ecx, 0xfffffff0
call fcn.0042201a
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x528f44]
push str.Shortcuts_created_for__s.
jmp 0x447b63
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x28]
call fcn.004247de
mov byte [esp + 0x3700], 0x98
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
lea edi, [eax + ecx*4]
push str._FullIntegrate
push dword [edi]
mov dword [esp + 0x60], edi
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
jne 0x44c1ed
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
push 0x528f38
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x44c09a
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
push dword [esp + 0x50]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x528f44
call fcn.004247de
lea eax, [esp + 0xf0]
push eax
call fcn.0044185c
add esp, 8
mov byte [esp + 0x3704], 0x99
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x4e8fa8
call fcn.004247f3
push ecx
mov byte [esp + 0x3708], 0x9a
mov eax, esp
mov dword [esp + 0x20], esp
push dword [0x528f44]
push str._s.host.exe
push eax
call fcn.0046aaf0
add esp, 8
mov byte [esp + 0x370c], 0x9b
lea eax, [esp + 0xf4]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247de
lea edi, [esp + 0x174]
mov byte [esp + 0x370c], 0x99
call fcn.0046a3b0
add esp, 0xc
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x3704], 0x9c
call fcn.00424837
mov byte [esp + 0x3700], 0x99
mov ecx, dword [esp + 0x168]
add ecx, 0xfffffff0
call fcn.0042201a
mov esi, dword [esp + 0xe8]
call fcn.0046d280
test eax, eax
jne 0x44c17c
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_create_virtual_repository
jmp 0x446157
lea eax, [esp + 0x170]
push eax
call fcn.00469b30
mov eax, dword [eax]
pop ecx
push 0
push dword [esp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [esp + 0x170]
neg eax
sbb al, al
inc al
add ecx, 0xfffffff0
mov byte [esp + 0x47], al
call fcn.0042201a
cmp byte [esp + 0x47], 0
je 0x44c1d0
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_copy_executable_to_repository
jmp 0x446157
mov byte [esp + 0x3700], 0x98
mov ecx, dword [esp + 0xe8]
add ecx, 0xfffffff0
call fcn.0042201a
mov edi, dword [esp + 0x58]
xor esi, esi
push 1
push esi
push ecx
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0xb80]
push eax
call fcn.00481b10
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x370c], 0x9d
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x9e
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3714], 0x9f
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247f3
push 2
push ecx
mov byte [esp + 0x371c], 0xa0
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
lea eax, [esp + 0xb90]
push eax
mov byte [esp + 0x3720], 0x9d
call fcn.004380c5
push str._Integrate:once
push dword [edi]
call fcn.004b8761
add esp, 0x28
test eax, eax
jne 0x44c3cd
push ebx
lea ecx, [esp + 0x98]
call fcn.004247f3
push esi
push esi
push esi
push ecx
mov byte [esp + 0x3710], 0xa1
mov ecx, esp
mov dword [esp + 0x24], esp
push str.Registered
lea edi, [esp + 0xa8]
call fcn.004247f3
mov byte [esp + 0x3710], 0xa2
push dword [0x528f44]
lea eax, [esp + 0x18c]
push str.SoftwareVOS_s
push eax
call fcn.0046aaf0
add esp, 8
mov byte [esp + 0x3714], 0xa3
or dword [esp + 0x60], 1
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.Integrated
push eax
push ecx
call fcn.00424a42
add esp, 0xc
mov dword [esp + 0x3714], 0xa4
call fcn.0047b0e0
push eax
mov byte [esp + 0x3718], 0xa5
call fcn.0046b5d0
add esp, 0x18
cmp eax, esi
je 0x44c341
mov eax, dword [esp + 0x94]
cmp dword [eax - 0xc], esi
je 0x44c341
mov bl, 1
jmp 0x44c343
xor bl, bl
mov dword [esp + 0x3700], 0xa1
test byte [esp + 0x4c], 1
je 0x44c364
mov ecx, dword [esp + 0x178]
add ecx, 0xfffffff0
call fcn.0042201a
test bl, bl
je 0x44c3b6
push str.Success
lea eax, [esp + 0x98]
call fcn.00424876
push ecx
test eax, eax
mov dword [esp + 0x18], esp
mov eax, esp
jne 0x44c39b
push str._Integrate:once:_already_registered_successfully._Quitting.
push eax
call fcn.0046aaf0
pop ecx
pop ecx
call fcn.00443d79
jmp 0x447b72
push dword [esp + 0x98]
push str._Integrate:once:_already_attempted_registration_before__but_failed:__s._Trying_integration_again.
push eax
call fcn.0046aaf0
add esp, 0xc
call fcn.00443d79
pop ecx
mov byte [esp + 0x3700], 0x9d
mov ecx, dword [esp + 0x94]
add ecx, 0xfffffff0
call fcn.0042201a
xor eax, eax
cmp dword [esp + 0x50], esi
push esi
setne al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.AllUsers
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0xa6
mov eax, esp
mov dword [esp + 0x28], esp
push dword [0x528f44]
push str.SoftwareVOS_s
push eax
call fcn.0046aaf0
add esp, 0xc
push SysReAllocStringLen
mov byte [esp + 0x3714], 0x9d
call fcn.0046bad0
add esp, 0x14
push dword [esp + 0x50]
lea edx, [esp + 0xb78]
mov ecx, 0x528f38
call fcn.0043bfce
pop ecx
lea eax, [esp + 0xb74]
call fcn.004829f0
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x528f44]
push str._s_is_now_integrated_into_your_system.
jmp 0x447b63
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.00469910
test eax, eax
jne 0x44c4da
mov eax, dword [esp + 0x30]
push esi
push ecx
mov edi, esp
mov dword [esp + 0x1c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push dword [eax]
call fcn.004247f3
push edi
call fcn.004704f0
add esp, 4
mov byte [esp + 0x370c], 0x3f
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247de
mov ecx, esi
xor edx, edx
mov byte [esp + 0x370c], 4
call fcn.00469700
add esp, 0xc
cmp eax, esi
jne 0x446161
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x446152
call fcn.00469ae0
test eax, eax
jne 0x44c4f5
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4451c0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
lea edi, [eax + ecx*4]
push 0x4fa2ac
mov dword [esp + 0x5c], edi
call fcn.004b8970
pop ecx
push eax
push str._Patch
push dword [edi]
call fcn.004baf86
add esp, 0xc
mov edi, eax
neg edi
lea eax, [esp + 0x1c]
sbb edi, edi
push eax
lea ecx, [esp + 0x68]
inc edi
call fcn.004247de
push ecx
mov byte [esp + 0x3704], 0x40
mov ecx, esp
mov dword [esp + 0x18], esp
push str..new.exe
call fcn.004247f3
push ecx
mov byte [esp + 0x3708], 0x41
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x98]
push eax
mov byte [esp + 0x370c], 0x40
call fcn.0046acb0
add esp, 0xc
mov byte [esp + 0x3700], 0x42
push dword [esp + 0x90]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [esp + 0x58]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
call fcn.004247f3
lea eax, [esp + 0xd4]
push eax
call fcn.004704f0
pop ecx
pop ecx
push 1
push esi
push ecx
mov byte [esp + 0x370c], 0x43
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x5e0]
push eax
call fcn.00481b10
mov byte [esp + 0x3700], 0x44
push dword [0x5254a0]
cmp dword [esp + 0x660], esi
jne 0x44c609
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x24]
push str.Cannot_load_newly_created_package__s
jmp 0x4462e8
push 1
push ecx
lea eax, [esp + 0x54]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x5e0]
push eax
call fcn.00444689
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x45
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f3
push ecx
mov byte [esp + 0x3714], 0x46
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247de
push 2
push ecx
mov byte [esp + 0x371c], 0x47
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247de
lea eax, [esp + 0x5f0]
push eax
mov byte [esp + 0x3720], 0x44
call fcn.004380c5
push dword [0x528f44]
lea eax, [esp + 0xec]
push dword [0x528f94]
push str._sAppVirtDll__s.dll
push eax
call fcn.0046aaf0
add esp, 0x2c
mov byte [esp + 0x3704], 0x48
lea eax, [esp + 0xcc]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
call fcn.00426dc0
pop ecx
cmp eax, esi
je 0x44c742
push dword [0x5254a0]
cmp eax, 0x11
jne 0x44c704
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push str.MsiTrackerStart:_Insufficient_permissions_
push eax
call fcn.0046aaf0
pop ecx
pop ecx
jmp 0x44615c
cmp eax, 0x12
jne 0x44c717
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push str.MsiTrackerStart:_Cant_access_services.exe._32_64_bit_mismatch_
jmp 0x44c6f7
push eax
lea eax, [esp + 0x2ec]
push eax
call fcn.00471aa0
add esp, 4
mov byte [esp + 0x3708], 0x49
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.MsiTrackerStart:_Failed:__s
jmp 0x446915
push dword [esp + 0xd0]
lea eax, [esp + 0x184]
push str._exec__s
push eax
call fcn.0046aaf0
mov eax, dword [eax]
add esp, 0xc
push esi
push esi
push eax
push dword [esp + 0x28]
push esi
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [esp + 0x180]
xor ebx, ebx
cmp eax, 0x20
setg bl
add ecx, 0xfffffff0
call fcn.0042201a
cmp ebx, esi
je 0x44c7d4
cmp edi, esi
je 0x44c79c
push 1
push 0x4e94d0
push str.Installation_launched_in_virtual_mode..._nWhen_installation_is_done__click_OK_and_Cameyo_will_turn_it_into_a_virtual_package._nInstallation_will_not_truly_install_anything_on_your_hard_drive__it_is_simulated_.
jmp 0x44c7a7
push esi
push 0x4e94d0
push str.When_installation_is_done__click_OK.
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
jne 0x44c7d4
push ecx
lea eax, [esp + 0xcc]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
call fcn.00426e47
pop ecx
push 0x14
jmp 0x446162
push ecx
lea eax, [esp + 0xcc]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
call fcn.00426e47
pop ecx
cmp eax, esi
je 0x44c84f
push dword [0x5254a0]
cmp eax, 0x11
jne 0x44c80e
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push str.MsiTrackerStop:_Insufficient_permissions_
jmp 0x44c6f7
cmp eax, 0x12
jne 0x44c824
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push str.MsiTrackerStop:_Cant_access_services.exe._32_64_bit_mismatch_
jmp 0x44c6f7
push eax
lea eax, [esp + 0x2d8]
push eax
call fcn.00471aa0
add esp, 4
mov byte [esp + 0x3708], 0x4a
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.MsiTrackerStop:_Failed:__s
jmp 0x446915
cmp ebx, esi
jne 0x44c871
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xd8]
push str.Failed_executing__s
jmp 0x4462e8
mov ebx, dword [esp + 0x64]
cmp edi, esi
je 0x44c936
call fcn.0042ff44
push 0x407
mov edi, 0x528f38
call fcn.00488250
pop ecx
push esi
push dword [esp + 0x94]
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x90]
jne 0x44c8be
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44682f
push dword [esp + 0x34]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247de
call fcn.0043f880
pop ecx
pop ecx
mov dword [esp + 0x34], eax
cmp eax, esi
je 0x44c92b
push dword [esp + 0x90]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esp + 0x34], 0x10
push dword [0x5254a0]
jne 0x44c904
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4468e2
push dword [esp + 0x38]
lea eax, [esp + 0x314]
push eax
call fcn.00471aa0
add esp, 4
mov byte [esp + 0x3708], 0x4b
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44690e
push 0x404
call fcn.00488250
pop ecx
lea eax, [esp + 0x5d4]
call fcn.004829f0
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x98]
push 0x4fa79c
push eax
call fcn.0046aaf0
add esp, 0xc
call fcn.0044460f
pop ecx
pop ecx
mov ecx, dword [esp + 0xc8]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x5d4]
mov byte [esp + 0x3700], 0x43
call fcn.00427913
mov ecx, dword [esp + 0xd0]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x90]
add ecx, 0xfffffff0
jmp 0x4468ba
lea ecx, [esp + 0x24]
call fcn.00422487
lea ecx, [esp + 0x50]
call fcn.00422487
mov byte [esp + 0x3700], 0x35
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
lea edi, [eax + ecx*4]
push str._CreateDiff
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
jne 0x44c9f3
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x28]
call fcn.00424837
jmp 0x44ca0d
push 0x4fa268
call fcn.004b8970
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x28]
call fcn.0042484c
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..mod
call fcn.004247f3
push ecx
mov byte [esp + 0x3708], 0x36
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x190]
push eax
mov byte [esp + 0x370c], 0x35
call fcn.0046acb0
add esp, 0xc
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x3704], 0x37
call fcn.00424837
mov byte [esp + 0x3700], 0x35
mov ecx, dword [esp + 0x188]
add ecx, 0xfffffff0
call fcn.0042201a
mov ebx, dword [esp + 0x50]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
call edi
push esi
push ebx
push dword [esp + 0x2c]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x50]
jne 0x44caab
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44682f
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247de
call fcn.0043f880
pop ecx
pop ecx
mov dword [esp + 0x64], eax
cmp eax, esi
jne 0x44cb22
push dword [0x5254a0]
lea eax, [esp + 0x54]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x19c]
push eax
call fcn.0046ae20
add esp, 8
mov byte [esp + 0x3708], 0x38
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Successfully_repackaged_into:__s
push ecx
call fcn.0046aaf0
add esp, 0xc
call fcn.0044460f
pop ecx
pop ecx
mov ecx, dword [esp + 0x190]
jmp 0x44ccf6
push ebx
call edi
cmp dword [esp + 0x64], 0x10
push dword [0x5254a0]
jne 0x44cb3e
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4468e2
push dword [esp + 0x68]
lea eax, [esp + 0x310]
push eax
call fcn.00471aa0
add esp, 4
mov byte [esp + 0x3708], 0x39
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44690e
lea ecx, [esp + 0x24]
call fcn.00422487
lea ecx, [esp + 0x50]
call fcn.00422487
mov byte [esp + 0x3700], 0x28
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
lea edi, [eax + ecx*4]
push str._LearnStreaming
push dword [edi]
call fcn.004b8761
pop ecx
pop ecx
test eax, eax
jne 0x44cbac
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x28]
call fcn.00424837
jmp 0x44cbc6
push 0x4fa044
call fcn.004b8970
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x28]
call fcn.0042484c
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..new.exe
call fcn.004247f3
push ecx
mov byte [esp + 0x3708], 0x29
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x1a0]
push eax
mov byte [esp + 0x370c], 0x28
call fcn.0046acb0
add esp, 0xc
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x3704], 0x2a
call fcn.00424837
mov byte [esp + 0x3700], 0x28
mov ecx, dword [esp + 0x198]
add ecx, 0xfffffff0
call fcn.0042201a
mov ebx, dword [esp + 0x50]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
call edi
push esi
push ebx
push dword [esp + 0x2c]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x50]
jne 0x44cc64
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44682f
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247de
push ecx
mov byte [esp + 0x3708], 0x2b
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
mov byte [esp + 0x3708], 0x28
call fcn.0043fe17
pop ecx
pop ecx
mov dword [esp + 0x20], eax
cmp eax, esi
jne 0x44cd0f
push dword [0x5254a0]
lea eax, [esp + 0x54]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247de
lea eax, [esp + 0x1ac]
push eax
call fcn.0046ae20
add esp, 8
mov byte [esp + 0x3708], 0x2c
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Successfully_learned_streaming_into:__s
push ecx
call fcn.0046aaf0
add esp, 0xc
call fcn.0044460f
pop ecx
pop ecx
mov ecx, dword [esp + 0x1a0]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [ebx - 0x10]
call fcn.0042201a
mov ecx, dword [esp + 0x24]
jmp 0x44d071
push ebx
call edi
push dword [0x5254a0]
lea eax, [esp + 0x2e0]
push dword [esp + 0x24]
push eax
call fcn.00471aa0
add esp, 4
mov byte [esp + 0x3708], 0x2d
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Could_not_learn_streaming:__s
jmp 0x446915
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
push str._RemoveSelf
push dword [eax + ecx*4]
call fcn.004b8761
mov ebx, eax
neg ebx
sbb ebx, ebx
add esp, 4
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
inc ebx
call fcn.004247de
push 0x528f38
call fcn.0042a1d0
pop ecx
pop ecx
test al, al
jne 0x44cd97
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4461ab
mov eax, dword [0x528f94]
cmp dword [eax - 0xc], esi
jne 0x44cdb3
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
jmp 0x44639a
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov edi, 0x528f94
push edi
call fcn.004247de
call fcn.0046d1a0
pop ecx
cmp eax, esi
jne 0x44cdf2
cmp ebx, esi
je 0x44cde0
call fcn.0046dcc0
test eax, eax
jne 0x446161
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
jmp 0x4463d3
cmp dword [esp + 0x58], esi
je 0x44ce19
push 3
push dword [0x528f44]
push str.Do_you_want_to_remove_the_application_and_all_of_its_settings__files_
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
je 0x44ce19
push 0x14
pop esi
jmp 0x44630d
push esi
lea eax, [esp + 0x11c]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.AllUsers
mov dword [esp + 0x128], esi
call fcn.004247f3
push ecx
mov byte [esp + 0x3710], 0x17
mov eax, esp
mov dword [esp + 0x28], esp
push dword [0x528f44]
push str.SoftwareVOS_s
push eax
call fcn.0046aaf0
add esp, 0xc
push SysReAllocStringLen
mov byte [esp + 0x3714], 4
call fcn.0046b850
add esp, 0x14
cmp eax, esi
je 0x44ceca
cmp dword [esp + 0x118], esi
je 0x44ceca
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.00469910
test eax, eax
jne 0x44ceaf
call fcn.00469960
test eax, eax
jne 0x446161
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x446152
call fcn.00469ae0
test eax, eax
jne 0x44ceca
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4451c0
push 0x528f38
call fcn.0043c152
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x528f44]
push str.Removing__s
push eax
call fcn.0046aaf0
add esp, 0xc
call fcn.00443da9
pop ecx
lea ecx, [esp + 0x120]
call fcn.00422487
push 0x4e8fa8
mov byte [esp + 0x3704], 0x18
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push 1
push 1
push 1
lea eax, [esp + 0x12c]
push eax
push dword [0x5254a0]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x528f90
call fcn.004247de
push ecx
mov byte [esp + 0x371c], 0x19
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x528fa0
call fcn.004247de
push ecx
mov byte [esp + 0x3720], 0x1a
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x528f9c
call fcn.004247de
push ecx
mov byte [esp + 0x3724], 0x1b
mov ecx, esp
mov dword [esp + 0x44], esp
push edi
call fcn.004247de
push ecx
mov byte [esp + 0x3728], 0x1c
mov ecx, esp
mov dword [esp + 0xa4], esp
push 0x528f44
call fcn.004247de
mov byte [esp + 0x3728], 0x18
call fcn.004407bb
add esp, 0x24
mov ecx, esp
mov dword [esp + 0x18], esp
push edi
call fcn.004247de
call fcn.0046d1e0
pop ecx
cmp eax, esi
je 0x44cfde
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x528f44]
push str.Base_dir_could_not_be_emptied_for__s
jmp 0x4462e8
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x528f44]
push str.SoftwareVOS_s
push eax
call fcn.0046aaf0
add esp, 0xc
mov edx, SysReAllocStringLen
call fcn.0046bbd0
pop ecx
cmp eax, esi
je 0x44d01a
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
jmp 0x4466e4
cmp ebx, esi
je 0x44d02b
call fcn.0046dcc0
test eax, eax
jne 0x446161
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.__Removed_successfully
call fcn.004247f3
call fcn.00443da9
pop ecx
push dword [0x5254a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x528f44]
push str.Application__s_removed_successfully
push eax
call fcn.0046aaf0
add esp, 0xc
call fcn.0044460f
pop ecx
pop ecx
mov ecx, dword [esp + 0x120]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x44630d
cmp dword [0x528bf0], esi
je 0x44d0b5
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x528f80]
push str.CLoaderApp:_waiting_for_LoaderCanQuit__AutoUpdate_s_
push eax
call fcn.0046aaf0
add esp, 0xc
call fcn.00443d79
pop ecx
push 0xffffffffffffffff
push dword [0x528bf0]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CLoaderApp:_done._Bye_
call fcn.004247f3
call fcn.00443d79
mov eax, dword [0x5254b0]
pop ecx
cmp eax, 0xa2c2a
je 0x446161
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
push str.CLoaderApp:_ExecWait:_g_LoaderExitCode_d
push ecx
call fcn.0046aaf0
add esp, 0xc
call fcn.00443d79
pop ecx
push dword [0x5254b0]
jmp 0x446162