Function at 0x445f97
Capabilities:
Accept command line arguments
Check for peb ntglobalflag flag
Check for sandbox username or hostname
Check for time delay via gettickcount
Check if file exists
Check os version
Contain obfuscated stackstrings
Copy file
Create process on windows
Delete file
Get file attributes
Get hostname
Get number of processors
Move file
Parse pe header
Print debug messages
Resolve function by parsing pe exports
Set current directory
Set environment variable
Set registry value
Terminate process
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4e29ee
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x36ec
call fcn.004c0850
mov eax, dword [0x523f10]
xor eax, esp
mov dword [esp + 0x36e8], eax
push ebx
push esi
push edi
mov eax, dword [0x523f10]
xor eax, esp
push eax
lea eax, [esp + 0x3700]
mov dword fs:[0], eax
lea eax, [esp + 0x2ac]
xor esi, esi
mov dword [esp + 0x4c], esi
push eax
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x2b0], 8
mov dword [esp + 0x2b4], 0xff
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov ecx, dword [esp + 0x68]
call fcn.004b4312
mov ebx, 0x4eba54
push ebx
lea ecx, [esp + 0x68]
call fcn.004247eb
push ebx
lea ecx, [esp + 0x64]
mov dword [esp + 0x370c], esi
call fcn.004247eb
push ebx
lea ecx, [esp + 0x7c]
mov byte [esp + 0x370c], 1
call fcn.004247eb
lea eax, [esp + 0x1c]
push eax
mov byte [esp + 0x370c], 2
call fcn.0046ad70
pop ecx
lea ecx, [esp + 0x48]
call fcn.0042248a
mov byte [esp + 0x3708], 4
mov edi, dword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea eax, [esp + 0x54]
push eax
mov dword [esp + 0x80], esi
call edi
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x2a8]
push eax
mov dword [esp + 0x38], esi
mov dword [esp + 0x5c], esi
mov dword [esp + 0x54], esi
mov dword [esp + 0x44], esi
call fcn.0046ad70
pop ecx
push eax
mov ecx, 0x529fb8
mov byte [esp + 0x370c], 5
call fcn.0042482f
mov byte [esp + 0x3708], 4
mov ecx, dword [esp + 0x2a8]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x274]
push eax
call fcn.0046ad70
pop ecx
mov dword [esp + 0x2c], eax
mov byte [esp + 0x3708], 6
call edi
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
mov eax, dword [esp + 0x34]
push dword [eax]
push str.Loader:__s__CmdLine_s
push ecx
call fcn.0046bd30
add esp, 0x10
call fcn.00444df8
pop ecx
mov byte [esp + 0x3708], 4
mov ecx, dword [esp + 0x274]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push str._CEK_
mov edi, 0x400
call fcn.004247eb
lea eax, [esp + 0x1b4]
push eax
mov ecx, edi
call fcn.00471ff0
mov byte [esp + 0x3710], 7
mov eax, dword [eax]
mov eax, dword [eax - 0xc]
add esp, 4
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
push str.Loader:_CEK:_Len_d
push ecx
call fcn.0046bd30
add esp, 0xc
call fcn.00444df8
pop ecx
mov byte [esp + 0x3708], 4
mov ecx, dword [esp + 0x1b0]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
push 1
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x529bf0], eax
cmp dword [esp + 0x30], esi
je 0x447186
xor eax, eax
inc eax
cmp dword [esp + 0x54], eax
mov dword [esp + 0x28], eax
jle 0x447186
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x30]
push ecx
lea edi, [eax + ecx*4]
mov ecx, esp
mov dword [esp + 0x3c], esp
push dword [edi]
call fcn.004247eb
call fcn.00444e28
mov dword [esp], 0x4faadc
call fcn.004b9ad0
pop ecx
push eax
push str._ExeFile:
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
test eax, eax
jne 0x446210
push 0x4faadc
call fcn.004b9ad0
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x1c]
jmp 0x44716e
push str._Confirm
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
jne 0x44622f
mov dword [esp + 0x58], 1
jmp 0x447174
push str._Quiet
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
jne 0x446251
or dword [esp + 0x40], 2
mov dword [0x5264a0], esi
jmp 0x447174
push str._AllUsers
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
jne 0x4462a4
mov dword [esp + 0x50], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.0046ab50
test eax, eax
je 0x44727f
call fcn.0046ad20
test eax, eax
jne 0x447174
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Admin_rights_required
jmp 0x44729a
push str._ErrorsOnly
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
jne 0x4462c5
mov dword [0x5264a0], 1
jmp 0x447174
push str._Wait
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
jne 0x4462e1
or dword [esp + 0x40], 1
jmp 0x447174
push 0x4faba8
call fcn.004b9ad0
pop ecx
push eax
push str._Password:
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
test eax, eax
je 0x44714f
push 0x4fabcc
call fcn.004b9ad0
pop ecx
push eax
push str._Password
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
test eax, eax
je 0x44714f
push 0x4fac08
call fcn.004b9ad0
pop ecx
push eax
push str._Properties:
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
test eax, eax
jne 0x4466a7
push str._Properties_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xee8]
push eax
call fcn.00482d70
mov byte [esp + 0x3708], 8
push dword [0x5264a0]
lea eax, [esp + 0x4c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xee8]
push eax
call fcn.00445708
add esp, 0x10
lea eax, [esp + 0xedc]
call fcn.00483c50
lea ecx, [esp + 0x24]
call fcn.0042248a
lea ecx, [esp + 0x2c]
call fcn.0042248a
lea ecx, [esp + 0x6c]
call fcn.0042248a
push 0x4fac08
mov byte [esp + 0x370c], 0xb
call fcn.004b9ad0
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x148]
call fcn.004247eb
lea eax, [esp + 0x2b4]
push eax
mov byte [esp + 0x370c], 0xc
call fcn.004306fd
mov byte [esp + 0x3708], 0xd
mov dword [esp + 0x154], esi
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 0x4fa4b8
lea edi, [esp + 0x15c]
call fcn.004247eb
push ecx
mov byte [esp + 0x3710], 0xe
lea eax, [esp + 0x14c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x1c0]
push eax
mov byte [esp + 0x3714], 0xd
call fcn.0046fa80
add esp, 0xc
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x370c], 0xf
call fcn.0042482f
mov byte [esp + 0x3708], 0xd
mov ecx, dword [esp + 0x1b8]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
push 0x3d
lea ecx, [esp + 0x2c]
call fcn.00426e7c
mov edi, eax
cmp edi, 0xffffffff
je 0x446528
push edi
lea eax, [esp + 0x1c4]
push eax
lea ecx, [esp + 0x2c]
call fcn.004249da
mov byte [esp + 0x3708], 0x10
call fcn.00424931
push eax
lea ecx, [esp + 0x30]
call fcn.0042482f
mov byte [esp + 0x3708], 0xd
mov ecx, dword [esp + 0x1c0]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x2c]
cmp dword [eax - 0xc], esi
je 0x446528
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x70]
call fcn.0042482f
push esi
lea ecx, [esp + 0x70]
lea eax, [edi + 1]
push ecx
call fcn.00424882
lea eax, [esp + 0x6c]
push eax
push ecx
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x2c0]
push eax
call fcn.0043074e
pop ecx
mov ecx, eax
call fcn.0042482f
cmp dword [esp + 0x154], 0xffffffff
jne 0x446417
mov eax, dword [esp + 0x2cc]
mov eax, dword [eax]
lea edi, [esp + 0x2b4]
lea esi, [esp + 0x88]
call fcn.00430a06
jmp 0x446616
lea esi, [esp + 0x88]
call fcn.0042b87c
push eax
lea ecx, [esp + 0xf8]
call fcn.004247d6
mov byte [esp + 0x3708], 0x11
call fcn.0042b87c
add eax, 4
push eax
lea ecx, [esp + 0x24]
call fcn.004247d6
push str.Branding
lea eax, [esp + 0xf8]
mov byte [esp + 0x370c], 0x12
call fcn.0042486e
test eax, eax
je 0x4472ab
lea edi, [esp + 0xf4]
call fcn.0042b6ad
push dword [eax]
lea eax, [esp + 0x1d8]
push str.CAMEYO__s
push eax
call fcn.0046bd30
mov esi, dword [esp + 0x2c]
mov eax, dword [eax]
add esp, 0xc
push esi
push eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov ecx, dword [esp + 0x1d4]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [esi - 0x10]
call fcn.0042201a
mov byte [esp + 0x3708], 0xd
mov ecx, dword [esp + 0xf4]
add ecx, 0xfffffff0
call fcn.0042201a
lea esi, [esp + 0x88]
call fcn.00430cfe
mov eax, dword [esp + 0x2cc]
lea edi, [esp + 0x2b4]
lea esi, [esp + 0xb4]
call fcn.00430a06
mov edi, esi
lea esi, [esp + 0x88]
call fcn.00430a1c
test al, al
je 0x446557
lea eax, [esp + 0x2b4]
push eax
mov byte [esp + 0x370c], 0xc
call fcn.004304c9
mov ecx, dword [esp + 0x144]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x6c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x2c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0xedc]
mov byte [esp + 0x3708], 4
call fcn.004278e9
jmp 0x446e3e
push str._SafeMode
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
jne 0x4466f3
push str._SafeMode_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov edi, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
push 0x4ede00
push str.CAMEYO_LEGACYREG
call edi
push str.Disk
push str.CAMEYO_VIRTMODE
call edi
push 0x4edd44
push str.CAMEYO_EARLYINJECTION
call edi
jmp 0x447174
push 0x4fad30
call fcn.004b9ad0
pop ecx
push eax
push str._Services:
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
test eax, eax
jne 0x446767
push dword [edi]
lea ecx, [esp + 0x10c]
call fcn.004247eb
push 0x4fad30
mov byte [esp + 0x370c], 0x13
call fcn.004b9ad0
pop ecx
push esi
lea ecx, [esp + 0x10c]
push ecx
call fcn.00424882
push dword [esp + 0x108]
push str.CAMEYO_SERVICES
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov byte [esp + 0x3708], 4
mov ecx, dword [esp + 0x108]
jmp 0x447145
push str._Register
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x4472bf
push str._Stop
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x447370
push str._Remove
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44dedb
push str._RemoveSelf
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44dedb
push str._Remove:Proc
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x447493
push str._Remove:Reg
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44767b
push str._LearnStreaming
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44dcfa
push 0x4fb2e4
call fcn.004b9ad0
pop ecx
push eax
push str._LearnStreaming:
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
test eax, eax
je 0x44dcfa
push str._UpdateBasicSettings
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
jne 0x446843
mov dword [esp + 0x34], 1
jmp 0x447174
push str._Repackage
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x447882
push str._CreateDiff
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44db41
push 0x4fb508
call fcn.004b9ad0
pop ecx
push eax
push str._CreateDiff:
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
test eax, eax
je 0x44db41
push str._exec
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x447a5e
push 0x4fb54c
call fcn.004b9ad0
pop ecx
push eax
push str._Patch
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
test eax, eax
je 0x44d5f5
push 0x4fb564
call fcn.004b9ad0
pop ecx
push eax
push str._InstSandbox
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
test eax, eax
je 0x44d5f5
push str._ShowStreaming
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x447c23
push str._Break
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x447d05
push str._Unbreak
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x448428
push str._Integrate
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44d1c1
push str._Integrate:once
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44d1c1
push str._FullIntegrate
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44d1c1
push str._Unintegrate
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x448c53
push str._CreateShortcuts
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44cb2f
push 0x4fc028
call fcn.004b9ad0
pop ecx
push eax
push str._CreateShortcuts:
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
test eax, eax
je 0x44cb2f
push str._Perf
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x448cbb
push str._ExtractLog
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x4490c1
push str._ExtractAll
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44930d
push str._AutoUpdateXml
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x4493ee
push str._Info
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x449541
push str._Sandbox
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x4495f6
push 0x4fc2f8
call fcn.004b9ad0
pop ecx
push eax
push str._AddSandbox:
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
test eax, eax
je 0x4497f9
push 0x4fc360
call fcn.004b9ad0
pop ecx
push eax
push str._GetProperty:
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
test eax, eax
je 0x449af1
push str._SaveProperties
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44c95f
push str._SaveAllProperties
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44c95f
push str._InfoLog
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x449d0b
push str._Ini
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44c836
push str._ShowIni
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44c836
push str._ExtractIni
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x449f0d
push str._csv
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44a0a2
push str._EngineVer
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44a473
push str._ChangeLoader
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
jne 0x446b5c
mov eax, dword [esp + 0x28]
inc eax
cmp dword [esp + 0x54], eax
jg 0x44a5b4
push str._ChangeEngine
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
jne 0x446b7d
mov eax, dword [esp + 0x28]
inc eax
cmp dword [esp + 0x54], eax
jg 0x44a8de
push str._ChangeIni
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
jne 0x446b9e
mov eax, dword [esp + 0x28]
inc eax
cmp dword [esp + 0x54], eax
jg 0x44ac76
push str._TestAutoUpdate
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
jne 0x446bc1
mov eax, dword [esp + 0x28]
add eax, 5
cmp dword [esp + 0x54], eax
jg 0x44ae2f
push str._Debug
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44af3e
push str._ForceMenu
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
jne 0x446bf6
mov dword [esp + 0x7c], 1
jmp 0x447174
push str._ShowTree
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44af7f
push str._RegDump
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44b04b
push str._SetFileFlags
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
jne 0x446c45
mov eax, dword [esp + 0x28]
add eax, 2
cmp dword [esp + 0x54], eax
jg 0x44b1c6
push str._DbgZip:
call fcn.004b9b7a
pop ecx
push eax
push str._DbgZip:
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
test eax, eax
je 0x44b3d7
push str._DbgNow
call fcn.004b9b7a
pop ecx
push eax
push str._DbgNow
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
test eax, eax
je 0x44b417
push str._Vintegrate
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44c6b7
push 0x4fcdc0
call fcn.004b9ad0
pop ecx
push eax
push str._Vintegrate:
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
test eax, eax
je 0x44c6b7
push str._VintegrateRecursive
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44c6b7
push 0x4fce18
call fcn.004b9ad0
pop ecx
push eax
push str._VintegrateRecursive:
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
test eax, eax
je 0x44c6b7
push str._Vunintegrate
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44b505
push str._Vmanager
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44b6b2
push 0x4fced8
call fcn.004b9ad0
pop ecx
push eax
push str._ProcessList
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
test eax, eax
je 0x44b75f
push 0x4fd060
call fcn.004b9ad0
pop ecx
push eax
push str._WaitFor
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
test eax, eax
je 0x44bad0
push str._GfxSvr
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
jne 0x446dc9
call fcn.0042fbf1
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x401
mov edi, 0x529f50
call fcn.004894b0
mov dword [esp], 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x403
call fcn.004894b0
mov dword [esp], 0x493e0
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x447174
push 0x4fd090
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
jne 0x446e45
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.open
xor ebx, ebx
call fcn.004247eb
push esi
push ecx
mov dword [esp + 0x3714], 0x170
mov ecx, esp
mov dword [esp + 0x44], esp
push str._Troubleshoot
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x71
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d6
mov edi, esi
mov dword [esp + 0x3718], 4
call fcn.0046a7d0
add esp, 0x10
mov ebx, 0x4eba54
xor esi, esi
jmp 0x447174
push str._Troubleshoot
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44bb91
push str._AutoUpdate
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44bbb7
push str._VirtRegSyncExport
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44bc4c
push str._StartStreaming
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44bcb4
push str._JumpTo
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44bcd2
push str._SvcRegister
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44bd71
push str._SvcStart
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44be7a
push str._SvcRegisterStart
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44bf35
push str._SvcStop
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44c096
push str._SvcRemove
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44c153
push 0x4fd490
call fcn.004b9ad0
pop ecx
push eax
push str._ScmDirectInit:
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
test eax, eax
je 0x44c211
push str._AuthCheck
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44c5a7
push str._AuthCheck:Force
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44c5a7
push str._RepoSync
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
jne 0x446f91
mov eax, dword [esp + 0x28]
inc eax
cmp dword [esp + 0x54], eax
jg 0x44c2b9
push str._MergeRegistry
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44c391
push dword [edi]
lea ecx, [esp + 0xe0]
call fcn.004247eb
push esi
push ecx
mov dword [esp + 0x3710], 0x182
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x4ea4c8
call fcn.004247eb
push ecx
mov edi, esp
mov byte [esp + 0x3714], 0x83
mov dword [esp + 0x24], esp
push 0x5c
push ecx
lea eax, [esp + 0xf0]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d6
push edi
call fcn.0046c060
add esp, 0xc
mov byte [esp + 0x3714], 0x82
call fcn.0046ffb0
add esp, 0xc
cmp eax, esi
je 0x44704f
push 0x4f689c
push ecx
lea eax, [esp + 0xe4]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x16c]
push eax
call fcn.0046bdc0
or dword [esp + 0x58], 4
pop ecx
pop ecx
call fcn.0042486e
mov byte [esp + 0x47], 1
test eax, eax
je 0x447054
mov byte [esp + 0x47], 0
test byte [esp + 0x4c], 4
je 0x44706f
mov ecx, dword [esp + 0x164]
and dword [esp + 0x4c], 0xfffffffb
add ecx, 0xfffffff0
call fcn.0042201a
cmp byte [esp + 0x47], 0
jne 0x44c489
call fcn.00445f3c
test eax, eax
je 0x4470e3
cmp dword [esp + 0x54], 1
jle 0x4470e3
call fcn.0040b6d8
test eax, eax
mov eax, str.Packager64.exe
jne 0x44709d
mov eax, str.Packager.exe
push eax
lea ecx, [esp + 0x64]
call fcn.00424844
mov eax, dword [esp + 0x30]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
call fcn.004247eb
lea eax, [esp + 0x23c]
push eax
call fcn.00471730
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x7c]
mov byte [esp + 0x370c], 0x88
call fcn.0042482f
mov ecx, dword [esp + 0x238]
jmp 0x44712b
push 0x4f4d94
lea ecx, [esp + 0x64]
call fcn.00424844
mov eax, dword [esp + 0x30]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
call fcn.004247eb
lea eax, [esp + 0x170]
push eax
call fcn.00471730
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x7c]
mov byte [esp + 0x370c], 0x89
call fcn.0042482f
mov ecx, dword [esp + 0x16c]
add ecx, 0xfffffff0
call fcn.0042201a
mov dword [esp + 0x3708], 4
mov ecx, dword [esp + 0xdc]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x447174
push str._Password_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x4faba8
call fcn.004b9ad0
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x48]
push eax
call fcn.00424844
inc dword [esp + 0x28]
mov eax, dword [esp + 0x28]
cmp eax, dword [esp + 0x54]
jl 0x4461b8
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x1008]
push eax
call fcn.00482d70
push 0xffffffffffffffff
mov dword [esp + 0x370c], 0x18a
push dword [esp + 0x44]
lea eax, [esp + 0x80]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
push ecx
mov byte [esp + 0x3718], 0x8b
lea eax, [esp + 0x70]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d6
push ecx
mov byte [esp + 0x371c], 0x8c
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d6
mov byte [esp + 0x371c], 0x8d
push dword [esp + 0x90]
lea eax, [esp + 0x34]
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x1018]
push eax
mov byte [esp + 0x3728], 0x8a
call fcn.0043809b
add esp, 0x20
cmp eax, 2
jne 0x44e213
call fcn.004455c2
push esi
push dword [0x529f5c]
push str.Application_is_now_integrated_into_your_system
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
lea eax, [esp + 0xffc]
call fcn.00483c50
lea eax, [esp + 0xffc]
mov dword [esp + 0x3708], 4
call fcn.004278e9
jmp 0x44730e
call fcn.0046aba0
test eax, eax
jne 0x4472a4
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Elevation_failed
call fcn.004247eb
call fcn.0044563f
push esi
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.License_required.
jmp 0x44729a
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
mov esi, 0x529f50
push esi
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x4472f5
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_obtain_INI_info_from_resource_
jmp 0x44729a
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
mov ecx, esi
call fcn.0043717f
pop ecx
mov ecx, dword [esp + 0x48]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x78]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x60]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x64]
add ecx, 0xfffffff0
call fcn.0042201a
xor eax, eax
mov ecx, dword [esp + 0x3700]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x36e8]
xor ecx, esp
call fcn.004b9212
mov esp, ebp
pop ebp
ret
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
push 0x529f50
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x4473a3
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x529fa8
call fcn.004247d6
push ecx
mov byte [esp + 0x3710], 0x14
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x529fb8
call fcn.004247d6
push ecx
mov byte [esp + 0x3714], 0x15
mov ecx, esp
mov dword [esp + 0x44], esp
push 0x529fac
call fcn.004247d6
push ecx
mov byte [esp + 0x3718], 0x16
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x529f5c
call fcn.004247d6
mov byte [esp + 0x3718], 4
call fcn.004406a8
add esp, 0x10
cmp eax, esi
je 0x447439
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x529f5c]
push str.Cannot_stop_application__s
push eax
call fcn.0046bd30
add esp, 0xc
jmp 0x44729f
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.__Stopped_successfully
call fcn.004247eb
call fcn.00444e28
pop ecx
mov ecx, dword [esp + 0x48]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x78]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x60]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x64]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, esi
jmp 0x44734c
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
push 0x529f50
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x4474c6
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
mov eax, dword [0x529fac]
cmp dword [eax - 0xc], esi
jne 0x4474ed
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x529f5c]
push str.Cannot_obtain_base_dir_for__s
jmp 0x44742b
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov edi, 0x529fac
push edi
call fcn.004247d6
call fcn.0046e3e0
pop ecx
cmp eax, esi
jne 0x447538
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x529f5c]
push str.Application_is_not_deployed_on_this_machine:__s
push eax
call fcn.0046bd30
add esp, 0xc
call fcn.0044568e
pop ecx
pop ecx
push 5
jmp 0x4472a5
cmp dword [esp + 0x58], esi
je 0x44755b
push 3
push dword [0x529f5c]
push str.Do_you_want_to_stop_the_application_
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x44dfa6
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x529f5c]
push str.Removing_processes:__s
push eax
call fcn.0046bd30
add esp, 0xc
call fcn.00444e28
pop ecx
lea ecx, [esp + 0x128]
call fcn.0042248a
push 0x4e9fa0
mov byte [esp + 0x370c], 0x1d
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push esi
push esi
push 1
lea eax, [esp + 0x134]
push eax
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x529fa8
call fcn.004247d6
push ecx
mov byte [esp + 0x3724], 0x1e
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x529fb8
call fcn.004247d6
push ecx
mov byte [esp + 0x3728], 0x1f
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x529fb4
call fcn.004247d6
push ecx
mov byte [esp + 0x372c], 0x20
mov ecx, esp
mov dword [esp + 0x44], esp
push edi
call fcn.004247d6
push ecx
mov byte [esp + 0x3730], 0x21
mov ecx, esp
mov dword [esp + 0xa4], esp
push 0x529f5c
call fcn.004247d6
mov byte [esp + 0x3730], 0x1d
call fcn.00440aad
add esp, 0x24
mov ecx, esp
mov dword [esp + 0x18], esp
push str.__Stopped_successfully
call fcn.004247eb
call fcn.00444e28
pop ecx
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x529f5c]
push str.Application__s_stopped_successfully
push eax
call fcn.0046bd30
add esp, 0xc
call fcn.0044568e
pop ecx
pop ecx
mov ecx, dword [esp + 0x128]
jmp 0x44e206
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
push 0x529f50
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x4476ae
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
mov eax, dword [0x529fac]
cmp dword [eax - 0xc], esi
jne 0x4476ca
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
jmp 0x4474dd
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov edi, 0x529fac
push edi
call fcn.004247d6
call fcn.0046e3e0
pop ecx
cmp eax, esi
jne 0x4476f8
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
jmp 0x447516
cmp dword [esp + 0x58], esi
je 0x44771b
push 3
push dword [0x529f5c]
push str.Do_you_want_to_remove_the_applications_registry_
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x44dfa6
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x529f5c]
push str.Removing_registry:__s
push eax
call fcn.0046bd30
add esp, 0xc
call fcn.00444e28
pop ecx
lea ecx, [esp + 0x130]
call fcn.0042248a
push 0x4e9fa0
mov byte [esp + 0x370c], 0x22
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push esi
push 1
push esi
lea eax, [esp + 0x13c]
push eax
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x529fa8
call fcn.004247d6
push ecx
mov byte [esp + 0x3724], 0x23
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x529fb8
call fcn.004247d6
push ecx
mov byte [esp + 0x3728], 0x24
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x529fb4
call fcn.004247d6
push ecx
mov byte [esp + 0x372c], 0x25
mov ecx, esp
mov dword [esp + 0x44], esp
push edi
call fcn.004247d6
push ecx
mov byte [esp + 0x3730], 0x26
mov ecx, esp
mov dword [esp + 0xa4], esp
push 0x529f5c
call fcn.004247d6
mov byte [esp + 0x3730], 0x22
call fcn.00440aad
add esp, 0x24
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x529f5c]
push str.SoftwareVOS_s
push eax
call fcn.0046bd30
add esp, 0xc
mov edx, SysReAllocStringLen
call fcn.0046ce10
pop ecx
cmp eax, esi
je 0x447837
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x529f5c]
push str.Registry_could_not_be_emptied_for__s
jmp 0x44742b
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.__Registry_removed_successfully
call fcn.004247eb
call fcn.00444e28
pop ecx
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x529f5c]
push str.Application__ss_registry_removed_successfully
push eax
call fcn.0046bd30
add esp, 0xc
call fcn.0044568e
pop ecx
pop ecx
mov ecx, dword [esp + 0x130]
jmp 0x44e206
lea ecx, [esp + 0x2c]
call fcn.0042248a
lea ecx, [esp + 0x40]
call fcn.0042248a
mov byte [esp + 0x3708], 0x2f
mov eax, dword [esp + 0x28]
lea ecx, [eax + 1]
cmp dword [esp + 0x54], ecx
jle 0x4478bc
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x30]
call fcn.00424844
jmp 0x4478ca
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
call fcn.0042482f
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..new.exe
call fcn.004247eb
push ecx
mov byte [esp + 0x3710], 0x30
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x248]
push eax
mov byte [esp + 0x3714], 0x2f
call fcn.0046bef0
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x370c], 0x31
call fcn.0042482f
mov byte [esp + 0x3708], 0x2f
mov ecx, dword [esp + 0x240]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
call fcn.0046ee30
mov edi, dword [esp + 0x44]
mov ebx, dword [esp + 0x30]
pop ecx
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x40]
jne 0x44797d
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d6
jmp 0x44729f
push dword [esp + 0x34]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d6
call fcn.0043fb72
pop ecx
pop ecx
mov dword [esp + 0x34], eax
cmp eax, esi
jne 0x447a0a
push dword [0x5264a0]
lea eax, [esp + 0x44]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x180]
push eax
call fcn.0046c060
add esp, 8
mov byte [esp + 0x3710], 0x32
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Successfully_repackaged_into:__s
push ecx
call fcn.0046bd30
add esp, 0xc
call fcn.0044568e
pop ecx
pop ecx
mov ecx, dword [esp + 0x174]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [edi - 0x10]
call fcn.0042201a
lea ecx, [ebx - 0x10]
jmp 0x44e209
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esp + 0x34], 0x10
push dword [0x5264a0]
jne 0x447a2f
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Application_not_deployed_on_this_machine._Nothing_to_repackage.
jmp 0x44729a
push dword [esp + 0x38]
lea eax, [esp + 0x2dc]
push eax
call fcn.00472ce0
add esp, 4
mov byte [esp + 0x3710], 0x33
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Could_not_repackage:__s
push ecx
jmp 0x44742c
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x28]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax + edx*4]
call fcn.004247eb
lea eax, [esp + 0x24c]
push eax
call fcn.00471730
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x7c]
mov byte [esp + 0x370c], 0x3a
call fcn.0042482f
push eax
lea ecx, [esp + 0x64]
call fcn.0042482f
push eax
lea ecx, [esp + 0xe8]
call fcn.004247d6
mov byte [esp + 0x3708], 0x3c
mov ecx, dword [esp + 0x248]
add ecx, 0xfffffff0
call fcn.0042201a
push 1
lea eax, [esp + 0x180]
push eax
lea ecx, [esp + 0xec]
call fcn.004249da
push 0x4f56cc
push eax
call fcn.00424ae4
pop ecx
pop ecx
mov ecx, dword [esp + 0x17c]
add ecx, 0xfffffff0
mov byte [esp + 0x47], al
call fcn.0042201a
cmp byte [esp + 0x47], 0
lea ecx, [esp + 0x60]
je 0x447b0b
push 1
push 0x22
jmp 0x447b0e
push esi
push 0x20
call fcn.00426e7c
mov edi, eax
cmp edi, 0xffffffff
je 0x447b82
push edi
lea eax, [esp + 0x254]
push eax
lea ecx, [esp + 0x68]
call fcn.004249da
push 0x4f55b8
mov byte [esp + 0x370c], 0x3d
call fcn.0043d838
push eax
lea ecx, [esp + 0x64]
call fcn.0042482f
mov byte [esp + 0x3708], 0x3c
mov ecx, dword [esp + 0x250]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
lea ecx, [esp + 0x7c]
lea eax, [edi + 1]
push ecx
call fcn.00424882
lea eax, [esp + 0x78]
call fcn.00424931
push eax
lea ecx, [esp + 0x7c]
call fcn.0042482f
jmp 0x447ba7
push 0x4f55b8
lea eax, [esp + 0xe8]
call fcn.0043d838
push eax
lea ecx, [esp + 0x64]
call fcn.0042482f
push ebx
lea ecx, [esp + 0x7c]
call fcn.00424844
xor ecx, ecx
lea eax, [esp + 0x60]
call fcn.0042b6f6
movzx eax, ax
cmp ax, 0x25
jne 0x447bc6
lea eax, [esp + 0x60]
push eax
call fcn.0047bae0
pop ecx
push ecx
lea eax, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x188]
push eax
call fcn.0047c870
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x64]
mov byte [esp + 0x370c], 0x3e
call fcn.0042482f
mov ecx, dword [esp + 0x184]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3708], 4
mov ecx, dword [esp + 0xe4]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x447186
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.ShowStreaming:
call fcn.004247eb
call fcn.00444e28
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x8b8]
push eax
call fcn.00482d70
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x3714], 0x4c
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x4d
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x371c], 0x4e
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d6
push 2
push ecx
mov byte [esp + 0x3724], 0x4f
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x8c8]
push eax
mov byte [esp + 0x3728], 0x4c
call fcn.0043809b
add esp, 0x20
lea ecx, [esp + 0x8ac]
call fcn.00436c92
lea eax, [esp + 0x8ac]
call fcn.00483c50
mov byte [esp + 0x3708], 4
lea eax, [esp + 0x8ac]
call fcn.004278e9
jmp 0x447450
lea ecx, [esp + 0x2c]
call fcn.0042248a
mov byte [esp + 0x3708], 0x50
mov eax, dword [esp + 0x28]
lea ecx, [eax + 1]
cmp dword [esp + 0x54], ecx
jle 0x447d36
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x30]
call fcn.00424844
jmp 0x447d44
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
call fcn.0042482f
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..break
call fcn.004247eb
push ecx
mov byte [esp + 0x3710], 0x51
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x64]
push eax
mov byte [esp + 0x3714], 0x50
call fcn.0046bef0
add esp, 0xc
push 1
push esi
push ecx
mov byte [esp + 0x3714], 0x52
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x3f0]
push eax
call fcn.00482d70
mov byte [esp + 0x3708], 0x53
push dword [0x5264a0]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x3f0]
push eax
call fcn.00445708
add esp, 0x10
cmp dword [esp + 0x46c], esi
jne 0x447dfd
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_load_containers_
jmp 0x44729a
push ecx
lea eax, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
call fcn.0046dac0
pop ecx
push dword [esp + 0x5c]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x447e3e
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x64]
push str.Cant_empty__s
jmp 0x44742b
mov esi, dword [esp + 0x5c]
call fcn.0046e4c0
test eax, eax
jne 0x447e66
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x64]
push str.Cant_create__s
jmp 0x44742b
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
mov ebx, 0x4e9fa0
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3714], 0x54
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtApp.ini
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x55
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3718], 0x53
call fcn.0046b5f0
add esp, 8
mov byte [esp + 0x3710], 0x56
mov ecx, esp
mov dword [esp + 0x20], esp
mov esi, str.Main
push esi
call fcn.004247eb
push 3
pop ecx
lea edi, [esp + 0x3ec]
mov byte [esp + 0x3710], 0x53
call fcn.00485160
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3714], 0x57
mov ecx, esp
mov dword [esp + 0x44], esp
push str.AppVirtDll.dll
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x58
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3718], 0x53
call fcn.0046b5f0
add esp, 8
mov byte [esp + 0x3710], 0x59
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247eb
push 2
pop ecx
lea edi, [esp + 0x3ec]
mov byte [esp + 0x3710], 0x53
call fcn.00485160
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3714], 0x5a
mov ecx, esp
mov dword [esp + 0x44], esp
push str.AppVirtDll64.dll
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x5b
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3718], 0x53
call fcn.0046b5f0
add esp, 8
mov byte [esp + 0x3710], 0x5c
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247eb
push 8
pop ecx
lea edi, [esp + 0x3ec]
mov byte [esp + 0x3710], 0x53
call fcn.00485160
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3714], 0x5d
mov ecx, esp
mov dword [esp + 0x44], esp
push str.StubExe.exe
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x5e
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3718], 0x53
call fcn.0046b5f0
add esp, 8
mov byte [esp + 0x3710], 0x5f
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247eb
push 9
pop ecx
lea edi, [esp + 0x3ec]
mov byte [esp + 0x3710], 0x53
call fcn.00485160
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3714], 0x60
mov ecx, esp
mov dword [esp + 0x44], esp
push str.StubExe64.exe
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x61
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3718], 0x53
call fcn.0046b5f0
add esp, 8
mov byte [esp + 0x3710], 0x62
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247eb
push 0xa
pop ecx
lea edi, [esp + 0x3ec]
mov byte [esp + 0x3710], 0x53
call fcn.00485160
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3714], 0x63
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtFiles.db
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x64
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3718], 0x53
call fcn.0046b5f0
add esp, 8
mov byte [esp + 0x3710], 0x65
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247eb
push 4
pop ecx
lea edi, [esp + 0x3ec]
mov byte [esp + 0x3710], 0x53
call fcn.00485160
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3714], 0x66
mov ecx, esp
mov dword [esp + 0x44], esp
push str.SandboxCfg.db
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x67
mov ecx, esp
lea eax, [esp + 0x6c]
mov dword [esp + 0x30], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3718], 0x53
call fcn.0046b5f0
add esp, 8
mov byte [esp + 0x3710], 0x68
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247eb
push 5
pop ecx
lea edi, [esp + 0x3ec]
mov byte [esp + 0x3710], 0x53
call fcn.00485160
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3714], 0x69
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtReg.export
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x6a
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3718], 0x53
call fcn.0046b5f0
add esp, 8
mov byte [esp + 0x3710], 0x6b
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247eb
push 6
pop ecx
lea edi, [esp + 0x3ec]
mov byte [esp + 0x3710], 0x53
call fcn.00485160
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3714], 0x6c
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtReg.dat
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x6d
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3718], 0x53
call fcn.0046b5f0
add esp, 8
mov byte [esp + 0x3710], 0x6e
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247eb
push 0xb
pop ecx
lea edi, [esp + 0x3ec]
mov byte [esp + 0x3710], 0x53
call fcn.00485160
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3714], 0x6f
mov ecx, esp
mov dword [esp + 0x44], esp
push str.SysDllSubdirs.txt
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x70
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3718], 0x53
call fcn.0046b5f0
add esp, 8
mov byte [esp + 0x3710], 0x71
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247eb
push 7
pop ecx
lea edi, [esp + 0x3ec]
mov byte [esp + 0x3710], 0x53
call fcn.00485160
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3714], 0x72
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtFiles.vfc
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x73
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3718], 0x53
call fcn.0046b5f0
add esp, 8
mov byte [esp + 0x3710], 0x74
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247eb
mov byte [esp + 0x3710], 0x53
xor ecx, ecx
inc ecx
lea edi, [esp + 0x3ec]
call fcn.00485160
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x64]
push 0x4fba3c
push eax
call fcn.0046bd30
add esp, 0xc
call fcn.0044568e
pop ecx
pop ecx
push 0
jmp 0x4472a5
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Unbreak:
call fcn.004247eb
call fcn.00444e28
mov ecx, esp
mov dword [esp + 0x18], esp
push str..break
call fcn.004247eb
push ecx
mov byte [esp + 0x3710], 0x75
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x7c]
push eax
mov byte [esp + 0x3714], 4
call fcn.0046bef0
add esp, 0xc
mov byte [esp + 0x3708], 0x76
push dword [esp + 0x74]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x4484ae
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x7c]
push str.Dir_doesnt_exist:__s
jmp 0x44742b
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x44]
call fcn.004247d6
mov edi, str..old
push edi
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x260]
push eax
mov byte [esp + 0x3714], 0x77
call fcn.00424a3a
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x258]
add ecx, 0xfffffff0
call fcn.0042201a
push edi
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x194]
push eax
call fcn.00424a3a
add esp, 0xc
push dword [eax]
push dword [esp + 0x44]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov ecx, dword [esp + 0x18c]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.0042201a
test bl, bl
je 0x44854a
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_rename_myself_to_.old
jmp 0x44729a
push edi
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x268]
push eax
call fcn.00424a3a
mov eax, dword [eax]
add esp, 0xc
push esi
push dword [esp + 0x44]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [esp + 0x260]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.0042201a
test bl, bl
je 0x4485a0
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_copy_myself
jmp 0x44729a
push 1
push ecx
mov dword [esp + 0x1c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
mov dword [esp + 0xf8], esi
push 0x4e9fa0
lea ebx, [esp + 0xfc]
lea esi, [esp + 0x148]
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x78
mov ecx, esp
mov dword [esp + 0x28], esp
push str.VirtApp.ini
call fcn.004247eb
push ecx
mov byte [esp + 0x371c], 0x79
lea eax, [esp + 0x88]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d6
mov byte [esp + 0x371c], 0x77
call fcn.0046b5f0
add esp, 0xc
mov edi, esi
call fcn.0046c4c0
pop ecx
pop ecx
cmp eax, 0xffffffff
je 0x448c3c
xor edi, edi
cmp dword [esp + 0xec], edi
je 0x448c3c
push dword [esp + 0xec]
mov ecx, dword [esp + 0x13c]
lea eax, [esp + 0x38]
push eax
call fcn.0046c220
mov byte [esp + 0x3710], 0x7a
push dword [esp + 0x140]
call fcn.004ba2c5
add esp, 0xc
push 1
push 1
push ecx
lea eax, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x360]
push eax
call fcn.00482d70
mov byte [esp + 0x3708], 0x7b
push dword [0x5264a0]
lea eax, [esp + 0x4c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x360]
push eax
call fcn.00445708
add esp, 0x10
cmp dword [esp + 0x3dc], edi
jne 0x4486d7
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_begin_to_update_resource
jmp 0x44729a
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov esi, str.Main
push esi
call fcn.004247eb
mov byte [esp + 0x370c], 0x7c
mov eax, dword [esp + 0x38]
mov eax, dword [eax - 0xc]
add eax, eax
push edi
push eax
lea ecx, [esp + 0x40]
call fcn.00424f73
push eax
lea eax, [esp + 0x364]
push eax
mov byte [esp + 0x371c], 0x7b
call fcn.00484620
cmp eax, edi
je 0x448736
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_update_INI_resource
jmp 0x44729a
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247eb
push 0
push 2
push ecx
mov byte [esp + 0x3718], 0x7d
mov dword [esp + 0x28], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
mov ebx, 0x4e9fa0
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3720], 0x7e
mov ecx, esp
mov dword [esp + 0x50], esp
push str.AppVirtDll.dll
call fcn.004247eb
push ecx
mov byte [esp + 0x3724], 0x7f
lea eax, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3724], 0x7d
call fcn.0046b5f0
add esp, 0xc
lea eax, [esp + 0x364]
push eax
mov byte [esp + 0x371c], 0x7b
call fcn.00484980
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247eb
push 0
push 8
push ecx
mov byte [esp + 0x3718], 0x80
mov dword [esp + 0x28], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3720], 0x81
mov ecx, esp
mov dword [esp + 0x50], esp
push str.AppVirtDll64.dll
call fcn.004247eb
push ecx
mov byte [esp + 0x3724], 0x82
lea eax, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3724], 0x80
call fcn.0046b5f0
add esp, 0xc
lea eax, [esp + 0x364]
push eax
mov byte [esp + 0x371c], 0x7b
call fcn.00484980
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247eb
push 0
push 9
push ecx
mov byte [esp + 0x3718], 0x83
mov dword [esp + 0x28], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3720], 0x84
mov ecx, esp
mov dword [esp + 0x50], esp
push str.StubExe.exe
call fcn.004247eb
push ecx
mov byte [esp + 0x3724], 0x85
lea eax, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3724], 0x83
call fcn.0046b5f0
add esp, 0xc
lea eax, [esp + 0x364]
push eax
mov byte [esp + 0x371c], 0x7b
call fcn.00484980
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247eb
push 0
push 0xa
push ecx
mov byte [esp + 0x3718], 0x86
mov dword [esp + 0x28], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3720], 0x87
mov ecx, esp
mov dword [esp + 0x50], esp
push str.StubExe64.exe
call fcn.004247eb
push ecx
mov byte [esp + 0x3724], 0x88
lea eax, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3724], 0x86
call fcn.0046b5f0
add esp, 0xc
lea eax, [esp + 0x364]
push eax
mov byte [esp + 0x371c], 0x7b
call fcn.00484980
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247eb
push 0x4000
push 4
push ecx
mov byte [esp + 0x3718], 0x89
mov dword [esp + 0x28], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3720], 0x8a
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtFiles.db
call fcn.004247eb
push ecx
mov byte [esp + 0x3724], 0x8b
lea eax, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3724], 0x89
call fcn.0046b5f0
add esp, 0xc
lea eax, [esp + 0x364]
push eax
mov byte [esp + 0x371c], 0x7b
call fcn.00484980
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247eb
push 0x4000
push 5
push ecx
mov byte [esp + 0x3718], 0x8c
mov dword [esp + 0x28], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3720], 0x8d
mov ecx, esp
mov dword [esp + 0x50], esp
push str.SandboxCfg.db
call fcn.004247eb
push ecx
mov byte [esp + 0x3724], 0x8e
lea eax, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3724], 0x8c
call fcn.0046b5f0
add esp, 0xc
lea eax, [esp + 0x364]
push eax
mov byte [esp + 0x371c], 0x7b
call fcn.00484980
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247eb
mov byte [esp + 0x370c], 0x8f
push 0x4000
push 0xb
push ecx
mov dword [esp + 0x28], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3720], 0x90
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtReg.dat
call fcn.004247eb
push ecx
mov byte [esp + 0x3724], 0x91
lea eax, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3724], 0x8f
call fcn.0046b5f0
add esp, 0xc
lea eax, [esp + 0x364]
push eax
mov byte [esp + 0x371c], 0x7b
call fcn.00484980
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247eb
push 0
push 7
push ecx
mov byte [esp + 0x3718], 0x92
mov dword [esp + 0x28], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3720], 0x93
mov ecx, esp
mov dword [esp + 0x50], esp
push str.SysDllSubdirs.txt
call fcn.004247eb
push ecx
mov byte [esp + 0x3724], 0x94
lea eax, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3724], 0x92
call fcn.0046b5f0
add esp, 0xc
lea eax, [esp + 0x364]
push eax
mov byte [esp + 0x371c], 0x7b
call fcn.00484980
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247eb
push 0x4000
push 1
push ecx
mov byte [esp + 0x3718], 0x95
mov edi, esp
mov dword [esp + 0x28], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3720], 0x96
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtFiles.vfc
call fcn.004247eb
push ecx
mov byte [esp + 0x3724], 0x97
lea eax, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3724], 0x95
call fcn.0046b5f0
add esp, 0xc
lea eax, [esp + 0x364]
push eax
mov byte [esp + 0x371c], 0x7b
call fcn.00484980
lea eax, [esp + 0x354]
call fcn.00483c50
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
test eax, eax
je 0x448c2d
push str.Could_not_commit_resource
jmp 0x44729a
push str.Success
call fcn.004247eb
jmp 0x44841a
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_load_VirtApp.ini
jmp 0x44729a
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
mov edi, 0x529f50
push edi
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x448c87
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
push edi
call fcn.0043c12b
pop ecx
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x529f5c]
push str._s_is_no_longer_integrated.
push eax
call fcn.0046bd30
add esp, 0xc
call fcn.0044568e
pop ecx
pop ecx
jmp 0x4472a4
lea ecx, [esp + 0x2c]
call fcn.0042248a
lea ecx, [esp + 0x34]
call fcn.0042248a
mov byte [esp + 0x3708], 0xc3
mov edi, dword [esp + 0x28]
or dword [esp + 0x24], 0xffffffff
lea eax, [edi + 1]
cmp dword [esp + 0x54], eax
jle 0x448cf8
mov eax, dword [esp + 0x30]
push dword [eax + edi*4 + 4]
lea ecx, [esp + 0x30]
call fcn.00424844
lea eax, [edi + 2]
cmp dword [esp + 0x54], eax
jle 0x448d11
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4]
lea ecx, [esp + 0x38]
call fcn.00424844
lea ecx, [esp + 0x194]
call fcn.0042248a
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x370c], 0xc4
call fcn.004247d6
push ecx
mov byte [esp + 0x370c], 0xc5
lea eax, [esp + 0x5c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
push 0x529f50
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x448d6e
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
push 1
push esi
push ecx
lea eax, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xe58]
push eax
call fcn.00482d70
lea edi, [esp + 0xe4c]
mov byte [esp + 0x3708], 0xc6
call fcn.0042a211
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x34]
cmp dword [eax - 0xc], esi
je 0x448dcb
push esi
push 0x80
push 4
push esi
push 3
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [esp + 0x24], eax
push 1
push 1
push 1
lea eax, [esp + 0x1a0]
push eax
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x529fa8
call fcn.004247d6
push ecx
mov byte [esp + 0x3724], 0xc7
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x529fb8
call fcn.004247d6
push ecx
mov byte [esp + 0x3728], 0xc8
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x529fb4
call fcn.004247d6
push ecx
mov byte [esp + 0x372c], 0xc9
mov ecx, esp
mov dword [esp + 0xa0], esp
push 0x529fac
call fcn.004247d6
push ecx
mov byte [esp + 0x3730], 0xca
mov ecx, esp
mov dword [esp + 0x90], esp
push 0x529f5c
call fcn.004247d6
mov byte [esp + 0x3730], 0xc6
call fcn.00440aad
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0x28
call edi
push esi
push 2
mov dword [esp + 0x74], eax
push 0x529f50
lea eax, [esp + 0xe58]
push eax
push dword [esp + 0x30]
call fcn.00434756
add esp, 0x14
cmp eax, esi
je 0x448ead
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Failed_BasicDeploy_
jmp 0x44729a
call edi
sub eax, dword [esp + 0x6c]
mov dword [esp + 0x6c], eax
call edi
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x2c]
cmp dword [eax - 0xc], esi
je 0x448f68
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0xcb
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x4f4d94
call fcn.004247eb
push ecx
mov byte [esp + 0x371c], 0xcc
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247eb
push 2
push ecx
mov byte [esp + 0x3724], 0xcd
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x98], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xe68]
push eax
mov byte [esp + 0x3728], 0xc6
call fcn.0043809b
add esp, 0x20
push esi
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d6
call fcn.004723e0
pop ecx
pop ecx
cmp eax, esi
jne 0x448f68
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x448f3e
call edi
push ecx
mov edi, eax
sub edi, dword [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x529fa8
call fcn.004247d6
push ecx
mov byte [esp + 0x3710], 0xce
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x529fb8
call fcn.004247d6
push ecx
mov byte [esp + 0x3714], 0xcf
mov ecx, esp
mov dword [esp + 0x44], esp
push 0x529fac
call fcn.004247d6
push ecx
mov byte [esp + 0x3718], 0xd0
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x529f5c
call fcn.004247d6
mov byte [esp + 0x3718], 0xc6
call fcn.004406a8
add esp, 0x10
lea ecx, [esp + 0x50]
call fcn.0042248a
lea ecx, [esp + 0x268]
mov eax, 0x100
push ecx
mov byte [esp + 0x370c], 0xd1
push eax
lea ecx, [esp + 0x58]
mov dword [esp + 0x270], eax
call fcn.004224d0
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push 0xffffffffffffffff
lea ecx, [esp + 0x54]
call fcn.00424af9
push edi
push dword [esp + 0x70]
lea eax, [esp + 0x148]
push dword [esp + 0x58]
push dword [0x529f5c]
push str._s__s__d_d_r_n
push eax
call fcn.0046bd30
add esp, 0x18
mov byte [esp + 0x3708], 0xd2
push dword [esp + 0x140]
lea ecx, [esp + 0x1a0]
call fcn.00426192
mov byte [esp + 0x3708], 0xd3
mov edi, dword [esp + 0x24]
cmp edi, 0xffffffff
je 0x4490a2
push 2
push esi
push esi
push edi
mov dword [esp + 0x280], esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [esp + 0x19c]
mov ecx, dword [eax - 0xc]
push esi
lea edx, [esp + 0x274]
push edx
push ecx
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [0x5264a0]
lea eax, [esp + 0x144]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d6
jmp 0x448caf
push ecx
mov dword [esp + 0x18], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str..Packager.log
call fcn.004247eb
push ecx
mov byte [esp + 0x3714], 0xd4
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d6
push edi
mov byte [esp + 0x3718], 4
call fcn.0046bef0
lea eax, [esp + 0xbc]
add esp, 0xc
push eax
call fcn.0046b300
add esp, 4
mov byte [esp + 0x370c], 0xd5
lea eax, [esp + 0xb0]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
call fcn.0046ee30
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
mov dword [esp + 0x44], esi
call fcn.004247d6
lea eax, [esp + 0x948]
push eax
call fcn.00482d70
mov byte [esp + 0x3708], 0xd6
push dword [0x5264a0]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x948]
push eax
call fcn.00445708
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0xd7
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x371c], 0xd8
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d6
push 2
push ecx
mov byte [esp + 0x3724], 0xd9
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x958]
push eax
mov byte [esp + 0x3728], 0xd6
call fcn.0043809b
add esp, 0x20
lea edi, [esp + 0x93c]
call fcn.0042a211
mov ebx, eax
cmp ebx, esi
je 0x4492b1
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push eax
call fcn.0046ae60
mov byte [esp + 0x3710], 0xda
mov ecx, esp
mov dword [esp + 0x20], esp
push str.LogsPackager.log
call fcn.004247eb
push ebx
mov byte [esp + 0x3714], 0xd6
call fcn.00427dd8
add esp, 0xc
cmp eax, esi
jne 0x449262
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_extract_Packager.log_
jmp 0x44729a
push dword [esp + 0xac]
mov dword [esp + 0x38], 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Packager.log
call fcn.004247eb
lea eax, [esp + 0x1ac]
push eax
call fcn.0046b300
pop ecx
pop ecx
push dword [eax]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov ecx, dword [esp + 0x1a4]
add ecx, 0xfffffff0
call fcn.0042201a
call fcn.00482100
xor esi, esi
jmp 0x4492d3
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
push str.Loader__ExtractLog_:_OpenVfc_failed__LE_d
push ecx
call fcn.0046bd30
add esp, 0xc
call fcn.00444df8
pop ecx
lea eax, [esp + 0x93c]
call fcn.00483c50
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xb4]
cmp dword [esp + 0x40], esi
je 0x449303
push str.Success:__s
jmp 0x448ca6
push str.Failed_saving__s
jmp 0x448ca6
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
mov ebx, 0x529f50
push ebx
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x449341
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x828]
push eax
call fcn.00482d70
mov byte [esp + 0x3708], 0xdb
push dword [0x5264a0]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x828]
push eax
call fcn.00445708
lea edi, [esp + 0x82c]
call fcn.0042a211
push 1
push 2
push ebx
mov ecx, edi
push ecx
push eax
call fcn.00434756
mov edi, eax
add esp, 0x24
lea eax, [esp + 0x81c]
call fcn.00483c50
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
cmp edi, esi
jne 0x4493dc
push dword [0x529fac]
push str.Success:_n_s
jmp 0x448ca6
push str.Failed_extracting.
push eax
call fcn.0046bd30
pop ecx
pop ecx
jmp 0x448caf
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
mov esi, 0x529f50
push esi
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x449422
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
lea eax, [esp + 0x278]
push eax
call fcn.00498ab0
pop ecx
mov byte [esp + 0x3708], 0xdc
push dword [eax]
lea ecx, [esp + 0x1b0]
call fcn.00426192
mov byte [esp + 0x3708], 0xde
mov ecx, dword [esp + 0x278]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x1ac]
mov edi, dword [eax - 0xc]
push eax
push ecx
mov dword [esp + 0x1c], esp
mov ebx, esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
mov esi, str..xml
push esi
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0xdf
mov eax, esp
mov dword [esp + 0x28], esp
push eax
call fcn.0046ad70
pop ecx
push ebx
mov byte [esp + 0x371c], 0xde
call fcn.0046bef0
add esp, 0xc
call fcn.0046c700
pop ecx
pop ecx
push dword [0x5264a0]
push ecx
mov dword [esp + 0x1c], esp
test eax, eax
je 0x44952d
mov ecx, esp
push esi
call fcn.004247eb
push ecx
mov byte [esp + 0x3714], 0xe0
mov eax, esp
mov dword [esp + 0x24], esp
push eax
call fcn.0046ad70
pop ecx
lea eax, [esp + 0x28c]
push eax
mov byte [esp + 0x3718], 0xde
call fcn.0046bef0
add esp, 8
mov byte [esp + 0x3710], 0xe1
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Success:_n_s
push ecx
call fcn.0046bd30
add esp, 0xc
call fcn.0044568e
pop ecx
pop ecx
mov ecx, dword [esp + 0x280]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x448421
mov eax, esp
push str.Failed_extracting.
push eax
call fcn.0046bd30
pop ecx
pop ecx
jmp 0x44841a
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x38]
call fcn.004247d6
mov byte [esp + 0x3708], 0xe2
mov eax, dword [esp + 0x28]
lea ecx, [eax + 1]
cmp dword [esp + 0x54], ecx
jle 0x449575
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x38]
call fcn.00424844
push 1
push esi
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x12d8]
push eax
call fcn.00482d70
mov byte [esp + 0x3708], 0xe3
push dword [0x5264a0]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x12d8]
push eax
call fcn.00445708
push esi
lea eax, [esp + 0x12e0]
push eax
lea eax, [esp + 0x1cc]
push eax
call fcn.004457a1
add esp, 0x1c
push esi
push str.Info
push dword [esp + 0x1bc]
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x4472a4
push str._Sandbox_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
push 0x529f50
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x449634
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x38]
call fcn.004247d6
mov byte [esp + 0x3708], 0xe4
mov eax, dword [esp + 0x28]
lea ecx, [eax + 1]
cmp dword [esp + 0x54], ecx
jle 0x449668
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x38]
call fcn.00424844
push 1
push esi
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xd38]
push eax
call fcn.00482d70
mov byte [esp + 0x3708], 0xe5
push dword [0x5264a0]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xd38]
push eax
call fcn.00445708
add esp, 0x10
cmp dword [esp + 0xdb4], esi
jne 0x4496da
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.FAILED_LOADING_CONTAINERS_
jmp 0x44729a
lea eax, [esp + 0xd2c]
push eax
lea eax, [esp + 0x28c]
push eax
call fcn.00445b28
pop ecx
pop ecx
mov byte [esp + 0x3708], 0xe6
mov ecx, dword [esp + 0x288]
mov eax, dword [ecx - 0xc]
cmp eax, 0x800
jge 0x449716
push esi
push str.Sandbox
push ecx
jmp 0x4495ea
push ecx
push ecx
mov dword [esp + 0x1c], esp
mov edi, esp
push ecx
add eax, eax
mov ecx, esp
mov dword [esp + 0x20], esp
mov ebx, str..sandbox.txt
push ebx
mov dword [esp + 0x30], eax
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0xe7
mov eax, esp
mov dword [esp + 0x28], esp
push eax
call fcn.0046ad70
pop ecx
push edi
mov byte [esp + 0x371c], 0xe6
call fcn.0046bef0
mov edi, dword [esp + 0x34]
add esp, 0xc
call fcn.0046c700
add esp, 4
mov ecx, esp
mov dword [esp + 0x18], esp
push str.open
call fcn.004247eb
push 1
push ecx
mov byte [esp + 0x3714], 0xe8
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
xor edi, edi
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0xe9
mov eax, esp
mov dword [esp + 0x48], esp
push ecx
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
mov dword [esp + 0x38], eax
call fcn.004247eb
push ecx
mov byte [esp + 0x3720], 0xea
mov eax, esp
mov dword [esp + 0x94], esp
push eax
call fcn.0046ad70
mov eax, dword [esp + 0x3c]
pop ecx
push eax
mov byte [esp + 0x3724], 0xe9
call fcn.0046bef0
add esp, 0xc
mov ebx, esi
mov byte [esp + 0x3718], 0xe6
call fcn.0046a7d0
add esp, 0x10
xor esi, esi
jmp 0x4472a4
push str._AddSandbox_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x4fc2f8
call fcn.004b9ad0
mov edx, dword [esp + 0x2c]
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x1c0]
call fcn.004247eb
push 1
push esi
push ecx
mov byte [esp + 0x3714], 0xeb
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xa68]
push eax
call fcn.00482d70
mov byte [esp + 0x3708], 0xec
push dword [0x5264a0]
lea eax, [esp + 0x4c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xa68]
push eax
call fcn.00445708
add esp, 0x10
cmp dword [esp + 0xae4], esi
jne 0x44989f
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4496d0
lea eax, [esp + 0x334]
push eax
call fcn.00424b59
push ebx
lea ecx, [esp + 0x14c]
mov byte [esp + 0x370c], 0xed
call fcn.004247eb
lea eax, [esp + 0x148]
push eax
lea eax, [esp + 0x338]
push eax
push ecx
mov byte [esp + 0x3714], 0xee
lea eax, [esp + 0x1c8]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
call fcn.0047f770
add esp, 0xc
cmp eax, esi
jne 0x449912
push dword [0x5264a0]
lea eax, [esp + 0x14c]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x447972
push 0xffffffffffffffff
xor esi, esi
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0xef
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x371c], 0xf0
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247eb
push 2
push ecx
mov byte [esp + 0x3724], 0xf1
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xa78]
push eax
mov byte [esp + 0x3728], 0xee
call fcn.0043809b
add esp, 0x20
push 6
pop ecx
push dword [0x529fd0]
xor eax, eax
mov dword [esp + 0x31c], esi
lea edi, [esp + 0x320]
rep stosd dword es:[edi], eax
push ecx
mov dword [esp + 0x1c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.SandboxCfg.db
call fcn.004247eb
push edi
mov ecx, esi
call fcn.0047cf40
pop ecx
pop ecx
lea ecx, [esp + 0x320]
call fcn.00477050
pop ecx
pop ecx
lea esi, [esp + 0x88]
lea edi, [esp + 0x334]
call fcn.004431e0
lea esi, [esp + 0x34c]
lea edi, [esp + 0x334]
call fcn.004431fc
mov esi, eax
mov eax, dword [esp + 0x88]
test eax, eax
je 0x449a03
cmp eax, dword [esi]
je 0x449a08
call fcn.004b9cf1
mov eax, dword [esp + 0x8c]
cmp eax, dword [esi + 4]
je 0x449aba
lea esi, [esp + 0x88]
call fcn.00426eb0
push eax
lea ecx, [esp + 0x24]
call fcn.004247d6
mov byte [esp + 0x3708], 0xf2
call fcn.00426eb0
mov edi, dword [eax + 4]
mov eax, edi
lea esi, [esp + 0x290]
call fcn.00479330
push ecx
mov byte [esp + 0x370c], 0xf3
mov esi, dword [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push esi
push str.Setting___s__s
push ecx
call fcn.0046bd30
add esp, 0x10
call fcn.00444df8
pop ecx
mov ecx, dword [esp + 0x290]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x318]
push edi
push eax
xor eax, eax
mov edx, esi
call fcn.00479390
pop ecx
pop ecx
lea ecx, [esi - 0x10]
mov byte [esp + 0x3708], 0xee
call fcn.0042201a
lea esi, [esp + 0x88]
call fcn.0044e576
jmp 0x4499df
mov ebx, dword [esp + 0x318]
lea eax, [esp + 0x318]
push eax
call fcn.0048d1a0
lea eax, [esp + 0xa5c]
call fcn.00483c50
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Done
jmp 0x448c32
push str._GetProperty_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x4fc360
call fcn.004b9ad0
mov edx, dword [esp + 0x2c]
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x1c8]
call fcn.004247eb
push 1
push esi
push ecx
mov byte [esp + 0x3714], 0xf4
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x11b8]
push eax
call fcn.00482d70
mov byte [esp + 0x3708], 0xf5
push dword [0x5264a0]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x11b8]
push eax
call fcn.00445708
add esp, 0x10
lea ecx, [esp + 0x150]
call fcn.0042248a
lea eax, [esp + 0x2f0]
push eax
mov byte [esp + 0x370c], 0xf6
call fcn.0042b738
lea eax, [esp + 0x150]
push eax
push ecx
mov byte [esp + 0x3710], 0xf7
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Main
call fcn.004247eb
push 3
lea edi, [esp + 0x11b8]
call fcn.00484fc0
mov ecx, dword [esp + 0x150]
mov eax, dword [ecx - 0xc]
cmp eax, esi
jne 0x449be1
push 6
jmp 0x4472a5
lea edx, [esp + 0x2f0]
push edx
push eax
push ecx
call fcn.00473d90
mov eax, dword [esp + 0x314]
mov eax, dword [eax]
add esp, 0xc
lea edi, [esp + 0x2f0]
lea esi, [esp + 0x88]
call fcn.00430a06
mov eax, dword [esp + 0x308]
lea esi, [esp + 0xb4]
call fcn.00430a06
mov edi, esi
lea esi, [esp + 0x88]
call fcn.0042b8a7
test al, al
je 0x447531
xor ebx, ebx
lea esi, [esp + 0x88]
call fcn.0042b87c
push dword [eax]
lea eax, [esp + 0x1c8]
call fcn.0042486e
test eax, eax
jne 0x449cc4
call fcn.0042b87c
add eax, 4
push dword [eax]
lea ecx, [esp + 0xd4]
call fcn.00426192
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
cmp eax, 0xffffffff
je 0x449cb5
mov ecx, dword [esp + 0xd0]
push ebx
mov dword [esp + 0x15c], ebx
mov edx, dword [ecx - 0xc]
lea esi, [esp + 0x15c]
push esi
push edx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x449cb5
mov eax, dword [esp + 0x158]
mov ecx, dword [esp + 0xd0]
cmp eax, dword [ecx - 0xc]
je 0x449d05
mov ecx, dword [esp + 0xd0]
add ecx, 0xfffffff0
call fcn.0042201a
lea esi, [esp + 0x88]
call fcn.00430cfe
mov eax, dword [esp + 0x308]
lea edi, [esp + 0x2f0]
lea esi, [esp + 0xb4]
call fcn.00430a06
mov edi, esi
lea esi, [esp + 0x88]
call fcn.0042b8a7
test al, al
jne 0x449c3a
jmp 0x447531
push ebx
jmp 0x4472a5
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x38]
call fcn.004247d6
mov byte [esp + 0x3708], 0xfe
mov eax, dword [esp + 0x28]
lea ecx, [eax + 1]
cmp dword [esp + 0x54], ecx
jle 0x449d3f
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x38]
call fcn.00424844
push 1
push esi
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x708]
push eax
call fcn.00482d70
mov byte [esp + 0x3708], 0xff
push dword [0x5264a0]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x708]
push eax
call fcn.00445708
add esp, 0x10
cmp dword [esp + 0x784], esi
jne 0x449dac
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4496d0
push 1
lea eax, [esp + 0x700]
push eax
lea eax, [esp + 0x104]
push eax
call fcn.004457a1
add esp, 0xc
push str._n_nSandboxing:_n_n
lea ecx, [esp + 0x100]
mov dword [esp + 0x370c], 0x100
call fcn.0042b46b
lea eax, [esp + 0x6fc]
push eax
lea eax, [esp + 0x29c]
push eax
call fcn.00445b28
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x100]
mov byte [esp + 0x370c], 1
call fcn.00424859
mov byte [esp + 0x3708], 0
mov ecx, dword [esp + 0x298]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0xfc]
mov eax, dword [ecx - 0xc]
push ecx
push ecx
mov dword [esp + 0x1c], esp
mov edi, esp
push ecx
add eax, eax
mov ecx, esp
mov dword [esp + 0x20], esp
mov ebx, str..txt
push ebx
mov dword [esp + 0x30], eax
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 2
mov eax, esp
mov dword [esp + 0x28], esp
push eax
call fcn.0046ad70
pop ecx
push edi
mov byte [esp + 0x371c], 0
call fcn.0046bef0
mov edi, dword [esp + 0x34]
add esp, 0xc
call fcn.0046c700
pop ecx
pop ecx
push esi
push str.Package_info
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 3
mov eax, esp
mov dword [esp + 0x28], esp
push eax
call fcn.0046ad70
pop ecx
lea eax, [esp + 0x1dc]
push eax
mov byte [esp + 0x371c], 0
call fcn.0046bef0
add esp, 0xc
mov byte [esp + 0x3710], 4
push dword [eax]
lea eax, [esp + 0x2ac]
push str.Saved_in:__s
push eax
call fcn.0046bd30
add esp, 0xc
push dword [eax]
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [esp + 0x2a0]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x1cc]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x4472a4
lea ecx, [esp + 0x14]
call fcn.0042248a
lea ecx, [esp + 0x110]
mov dword [esp + 0x3708], 0x109
call fcn.0042248a
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x370c], 0xa
call fcn.004247d6
mov byte [esp + 0x3708], 0xb
mov eax, dword [esp + 0x28]
lea ecx, [eax + 1]
cmp dword [esp + 0x54], ecx
jle 0x449f69
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x5c]
call fcn.00424844
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str..ini
call fcn.004247eb
push ecx
mov byte [esp + 0x3710], 0xc
lea eax, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x124]
push eax
mov byte [esp + 0x3714], 0xb
call fcn.0046bef0
add esp, 8
mov byte [esp + 0x370c], 0xd
lea eax, [esp + 0x120]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d6
call fcn.0046ee30
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xf78]
push eax
call fcn.00482d70
mov byte [esp + 0x3708], 0xe
push dword [0x5264a0]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xf78]
push eax
call fcn.00445708
add esp, 0x10
cmp dword [esp + 0xff4], esi
jne 0x44a039
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
jmp 0x4496d0
lea eax, [esp + 0x110]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Main
call fcn.004247eb
push 3
lea edi, [esp + 0xf78]
call fcn.00484fc0
mov ecx, dword [esp + 0x110]
mov eax, dword [ecx - 0xc]
cmp eax, esi
jne 0x44a080
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
jmp 0x4472ee
push ecx
push ecx
lea edi, [eax + eax]
lea eax, [esp + 0x124]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
call fcn.0046c700
jmp 0x448cb4
push str.AppID_ShortDesc_FriendlyName_Category_DownloadUrl_IconUrl_Version_BuildUid_Size_PopularityIndex_n
lea ecx, [esp + 0x74]
call fcn.004247eb
mov dword [esp + 0x3708], 0x10f
lea ecx, [esp + 0x24]
mov dword [esp + 0x13c], esi
mov dword [esp + 0x1e4], esi
call fcn.0042248a
push 1
push esi
push ecx
mov byte [esp + 0x3714], 0x10
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x1518]
push eax
call fcn.00482d70
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x3714], 0x11
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x12
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x371c], 0x13
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d6
push 2
push ecx
mov byte [esp + 0x3724], 0x14
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x1528]
push eax
mov byte [esp + 0x3728], 0x11
call fcn.0043809b
mov esi, 0x4effd0
push esi
lea eax, [esp + 0x1f4]
push 0x529f5c
push eax
call fcn.00424a3a
add esp, 0x2c
push eax
lea ecx, [esp + 0x74]
mov byte [esp + 0x370c], 0x15
call fcn.00424859
mov byte [esp + 0x3708], 0x11
mov ecx, dword [esp + 0x1d0]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
lea ecx, [esp + 0x74]
call fcn.0042b46b
push esi
push 0x529f68
lea eax, [esp + 0x164]
push eax
call fcn.00424a3a
add esp, 0xc
push eax
lea ecx, [esp + 0x74]
mov byte [esp + 0x370c], 0x16
call fcn.00424859
mov byte [esp + 0x3708], 0x11
mov ecx, dword [esp + 0x15c]
add ecx, 0xfffffff0
call fcn.0042201a
push str.Productivity_
lea ecx, [esp + 0x74]
call fcn.0042b46b
mov ebx, dword [esp + 0x28]
lea eax, [ebx + 1]
cmp dword [esp + 0x54], eax
mov edi, 0x4fc628
jle 0x44a238
mov eax, dword [esp + 0x30]
push dword [eax + ebx*4 + 4]
lea ebx, [esp + 0x74]
push edi
call fcn.00427740
mov ebx, dword [esp + 0x30]
pop ecx
pop ecx
jmp 0x44a246
push str._Download_URL_here__
lea ecx, [esp + 0x74]
call fcn.0042b46b
lea eax, [ebx + 2]
cmp dword [esp + 0x54], eax
jle 0x44a264
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4]
lea ebx, [esp + 0x74]
push edi
call fcn.00427740
pop ecx
pop ecx
jmp 0x44a272
push str._Icon_here__
lea ecx, [esp + 0x74]
call fcn.0042b46b
push esi
lea eax, [esp + 0x1e0]
push 0x529f70
push eax
call fcn.00424a3a
add esp, 0xc
push eax
lea ecx, [esp + 0x74]
mov byte [esp + 0x370c], 0x17
call fcn.00424859
mov byte [esp + 0x3708], 0x11
mov ecx, dword [esp + 0x1dc]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
lea eax, [esp + 0x248]
push 0x529fa0
push eax
call fcn.00424a3a
add esp, 0xc
push eax
lea ecx, [esp + 0x74]
mov byte [esp + 0x370c], 0x18
call fcn.00424859
mov byte [esp + 0x3708], 0x11
mov ecx, dword [esp + 0x244]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push eax
lea edi, [esp + 0x1ec]
lea esi, [esp + 0x144]
call fcn.0046ad70
pop ecx
call fcn.0046ed30
pop ecx
push dword [esp + 0x13c]
lea eax, [esp + 0x1f0]
push 0x4ecc28
push eax
call fcn.0046bd30
add esp, 0xc
push 0x4effd0
push eax
lea eax, [esp + 0x2a4]
push eax
mov byte [esp + 0x3714], 0x19
call fcn.00424a3a
add esp, 0xc
push eax
lea ecx, [esp + 0x74]
mov byte [esp + 0x370c], 0x1a
call fcn.00424859
mov ecx, dword [esp + 0x29c]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3708], 0x11
mov ecx, dword [esp + 0x1ec]
add ecx, 0xfffffff0
call fcn.0042201a
push 0x4edd44
lea ecx, [esp + 0x74]
call fcn.0042b46b
mov eax, dword [esp + 0x28]
add eax, 3
cmp dword [esp + 0x54], eax
jle 0x44a3b1
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4]
lea ecx, [esp + 0x28]
call fcn.00424844
jmp 0x44a419
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..csv
call fcn.004247eb
push ecx
mov byte [esp + 0x3710], 0x1b
mov eax, esp
mov dword [esp + 0x20], esp
push eax
call fcn.0046ad70
pop ecx
lea eax, [esp + 0x254]
push eax
mov byte [esp + 0x3714], 0x11
call fcn.0046bef0
add esp, 0xc
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x370c], 0x1c
call fcn.0042482f
mov byte [esp + 0x3708], 0x11
mov ecx, dword [esp + 0x24c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x70]
mov eax, dword [ecx - 0xc]
push ecx
push ecx
lea edi, [eax + eax]
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d6
call fcn.0046c700
pop ecx
pop ecx
push dword [0x5264a0]
push ecx
mov dword [esp + 0x1c], esp
test eax, eax
jne 0x44a462
mov eax, esp
lea ecx, [esp + 0x2c]
push ecx
push str.Could_not_save_to
push eax
call fcn.00424a8f
jmp 0x447431
mov ecx, esp
lea eax, [esp + 0x2c]
push eax
call fcn.004247d6
jmp 0x44841a
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x1098]
push eax
call fcn.00482d70
mov dword [esp + 0x3708], 0x11d
cmp dword [esp + 0x1114], esi
jne 0x44a4ba
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x447df3
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x529f5c]
push str._s.AppVirtDll.dll
push eax
call fcn.0046bd30
lea eax, [esp + 0x114]
add esp, 0xc
push eax
call fcn.0046b400
add esp, 4
mov byte [esp + 0x370c], 0x1e
lea eax, [esp + 0x108]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
push ecx
mov byte [esp + 0x3710], 0x1f
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Main
call fcn.004247eb
push 2
pop ecx
lea edi, [esp + 0x1094]
mov byte [esp + 0x3710], 0x1e
call fcn.00485160
push dword [0x5264a0]
lea eax, [esp + 0x108]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x1fc]
push eax
call fcn.0048d950
add esp, 4
mov byte [esp + 0x3710], 0x20
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.EngineVersion_s
push ecx
call fcn.0046bd30
add esp, 0xc
call fcn.0044568e
pop ecx
pop ecx
mov byte [esp + 0x3708], 0x1e
mov ecx, dword [esp + 0x1f4]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
lea eax, [esp + 0x108]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
call fcn.0046ee30
jmp 0x448cb5
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x28]
call fcn.004247d6
push 0x2e
lea ecx, [esp + 0x28]
mov dword [esp + 0x370c], 0x121
call fcn.0043d813
push eax
lea eax, [esp + 0x280]
push eax
lea ecx, [esp + 0x2c]
call fcn.004249da
push str..new.exe
push eax
lea eax, [esp + 0xa4]
push eax
mov byte [esp + 0x3714], 0x22
call fcn.00424a3a
add esp, 0xc
mov byte [esp + 0x3708], 0x24
mov ecx, dword [esp + 0x27c]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x200]
call fcn.004247eb
push esi
mov byte [esp + 0x370c], 0x25
push dword [esp + 0xa0]
push dword [esp + 0x204]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x44a683
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xa4]
push dword [esp + 0x30]
push str.Cant_copy__s_to__s
push eax
call fcn.0046bd30
add esp, 0x10
jmp 0x44729f
push dword [esp + 0x9c]
push dword [esp + 0x28]
call fcn.0043da34
pop ecx
pop ecx
xor esi, esi
inc esi
push esi
push 0
push ecx
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x558]
push eax
call fcn.00482d70
push esi
push esi
push ecx
mov byte [esp + 0x3714], 0x26
lea eax, [esp + 0xa8]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x1128]
push eax
call fcn.00482d70
mov byte [esp + 0x3708], 0x27
push dword [0x5264a0]
lea eax, [esp + 0x4c]
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x558]
push eax
call fcn.00445708
add esp, 0x10
lea eax, [esp + 0x38]
lea ecx, [esp + 0x5bc]
call fcn.0044e46b
jmp 0x44a83b
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CEChangeEngine.tmp
call fcn.004247eb
lea eax, [esp + 0xa4]
push eax
call fcn.0046b400
add esp, 4
mov byte [esp + 0x370c], 0x28
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
lea esi, [esp + 0x3c]
mov byte [esp + 0x370c], 0x29
call fcn.00426eb0
push ecx
add eax, 0x2c
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
call fcn.00426eb0
mov byte [esp + 0x3710], 0x28
mov ecx, dword [eax + 0x28]
lea edi, [esp + 0x554]
call fcn.00485160
test eax, eax
jne 0x44a897
call fcn.00426eb0
push ecx
add eax, 0x2c
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
push 0x4000
mov byte [esp + 0x3710], 0x2a
call fcn.00426eb0
push dword [eax + 0x28]
lea eax, [esp + 0xac]
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x112c]
push eax
mov byte [esp + 0x371c], 0x28
call fcn.00484980
test eax, eax
jne 0x44a8c3
push ecx
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
call fcn.0046ee30
pop ecx
mov byte [esp + 0x3708], 0x27
mov ecx, dword [esp + 0xa0]
add ecx, 0xfffffff0
call fcn.0042201a
call fcn.0044e4e3
lea eax, [esp + 0x2dc]
lea ecx, [esp + 0x5bc]
call fcn.0044e480
mov edi, eax
lea esi, [esp + 0x38]
call fcn.0044e50e
test al, al
jne 0x44a729
lea eax, [esp + 0x54c]
call fcn.00483c50
lea eax, [esp + 0x111c]
call fcn.00483c50
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xa4]
push str.Successfully_changed_Loader:__s
jmp 0x448411
push dword [0x5264a0]
call fcn.00426eb0
push ecx
mov edi, esp
mov dword [esp + 0x1c], esp
push dword [eax + 0x2c]
lea esi, [esp + 0x44]
call fcn.00426eb0
push dword [eax + 0x28]
push str.Cannot_read_container__d__s_to_file
push edi
jmp 0x44a676
push dword [0x5264a0]
lea esi, [esp + 0x3c]
call fcn.00426eb0
push ecx
mov edi, esp
mov dword [esp + 0x1c], esp
push dword [eax + 0x2c]
jmp 0x44a8b0
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
call fcn.004247d6
push 0x2e
lea ecx, [esp + 0x30]
mov dword [esp + 0x370c], 0x12b
call fcn.0043d813
push eax
lea eax, [esp + 0x258]
push eax
lea ecx, [esp + 0x34]
call fcn.004249da
push str..new.exe
push eax
lea eax, [esp + 0xac]
push eax
mov byte [esp + 0x3714], 0x2c
call fcn.00424a3a
add esp, 0xc
mov byte [esp + 0x3708], 0x2e
mov ecx, dword [esp + 0x254]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0xac]
call fcn.004247eb
push esi
mov byte [esp + 0x370c], 0x2f
push dword [esp + 0xa8]
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x44a99c
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xac]
push dword [esp + 0x38]
jmp 0x44a670
push 1
push 1
push ecx
lea eax, [esp + 0xb0]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x4c8]
push eax
call fcn.00482d70
mov byte [esp + 0x3708], 0x30
push dword [0x5264a0]
lea eax, [esp + 0x4c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x4c8]
push eax
call fcn.00445708
add esp, 0x10
cmp dword [esp + 0x544], esi
jne 0x44aa12
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_open_PeContainer
jmp 0x44729a
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov esi, str.Main
push esi
call fcn.004247eb
push 0
push 2
push ecx
mov byte [esp + 0x3718], 0x31
lea eax, [esp + 0xb8]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x4cc]
push eax
mov byte [esp + 0x371c], 0x30
call fcn.00484980
test eax, eax
je 0x44aa74
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEDLL
jmp 0x44729a
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247eb
push 0
push 8
push ecx
mov byte [esp + 0x3718], 0x32
mov dword [esp + 0x28], esp
mov edi, esp
push ecx
lea eax, [esp + 0xbc]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d6
push edi
call fcn.004797f0
pop ecx
pop ecx
lea eax, [esp + 0x4cc]
push eax
mov byte [esp + 0x371c], 0x30
call fcn.00484980
test eax, eax
je 0x44aae0
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEDLL64
jmp 0x44729a
lea ecx, [esp + 0x124]
call fcn.0042248a
lea ecx, [esp + 0x14c]
call fcn.0042248a
lea eax, [esp + 0x124]
push eax
push ecx
mov byte [esp + 0x3710], 0x34
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247eb
push 3
lea edi, [esp + 0x4c8]
call fcn.00484fc0
test eax, eax
je 0x44ab3e
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_Read_PeContainer_PECONTAINER_INI
jmp 0x44729a
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
lea eax, [esp + 0xb0]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
lea ebx, [esp + 0x158]
call fcn.004247d6
push edi
call fcn.0048d950
add esp, 4
mov byte [esp + 0x3710], 0x35
mov ecx, esp
mov dword [esp + 0x20], esp
push str.EngineVersion
call fcn.004247eb
push ecx
mov byte [esp + 0x3714], 0x36
lea eax, [esp + 0x130]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3714], 0x34
call fcn.00470420
pop ecx
pop ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247eb
push 0x4000
push 3
pop esi
push ecx
mov byte [esp + 0x3714], 0x37
mov eax, ebx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d6
mov ecx, esi
lea ebx, [esp + 0x4c8]
mov byte [esp + 0x3714], 0x34
call fcn.00484760
test eax, eax
je 0x44ac08
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_Add_PeContainerStr_PECONTAINER_INI
jmp 0x44729a
lea eax, [esp + 0x4bc]
call fcn.00483c50
push dword [0x5264a0]
lea eax, [esp + 0xac]
push ecx
mov dword [esp + 0x1c], esp
mov esi, esp
push dword [esp + 0xac]
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x214]
push eax
call fcn.0048d950
pop ecx
pop ecx
mov byte [esp + 0x3714], 0x38
push dword [eax]
push str.Successfully_changed_to_Engine__s._nNew_package_saved_in:_n_s
push esi
call fcn.0046bd30
add esp, 0x10
call fcn.0044568e
pop ecx
pop ecx
mov ecx, dword [esp + 0x204]
jmp 0x449520
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
call fcn.004247d6
push 0x2e
lea ecx, [esp + 0x30]
mov dword [esp + 0x370c], 0x139
call fcn.0043d813
push eax
lea eax, [esp + 0x298]
push eax
lea ecx, [esp + 0x34]
call fcn.004249da
push str..new.exe
push eax
lea eax, [esp + 0xb8]
push eax
mov byte [esp + 0x3714], 0x3a
call fcn.00424a3a
add esp, 0xc
mov byte [esp + 0x3708], 0x3c
mov ecx, dword [esp + 0x294]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x210]
call fcn.004247eb
push esi
mov byte [esp + 0x370c], 0x3d
push dword [esp + 0xb4]
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x44ad34
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xb8]
push dword [esp + 0x38]
jmp 0x44a670
push 1
push 1
push ecx
lea eax, [esp + 0xbc]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x798]
push eax
call fcn.00482d70
mov byte [esp + 0x3708], 0x3e
push dword [0x5264a0]
lea eax, [esp + 0x4c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x798]
push eax
call fcn.00445708
add esp, 0x10
cmp dword [esp + 0x814], esi
jne 0x44ada5
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44aa08
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Main
call fcn.004247eb
push esi
push 3
push ecx
mov byte [esp + 0x3718], 0x3f
lea eax, [esp + 0x21c]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x79c]
push eax
mov byte [esp + 0x371c], 0x3e
call fcn.00484980
cmp eax, esi
je 0x44ae05
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEINI
jmp 0x44729a
lea eax, [esp + 0x78c]
call fcn.00483c50
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xb8]
push str.Successfully_changed_INI._nNew_package_saved_in:_n_s
jmp 0x448ca6
lea esi, [esp + 0x159c]
call fcn.0043373d
mov dword [esp + 0x3708], 0x140
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x28]
push dword [edi + esi*4 + 4]
lea ecx, [esp + 0x15e8]
call fcn.00424844
push dword [edi + esi*4 + 8]
lea ecx, [esp + 0x15c0]
call fcn.00424844
push dword [edi + esi*4 + 0xc]
lea ecx, [esp + 0x15b8]
call fcn.00424844
push eax
lea ecx, [esp + 0x15ac]
call fcn.0042482f
push dword [edi + esi*4 + 0x10]
lea ecx, [esp + 0x15f0]
call fcn.00424844
push dword [edi + esi*4 + 0x14]
lea ecx, [esp + 0x15ec]
call fcn.00424844
lea eax, [esp + 0x16fc]
push eax
lea edi, [esp + 0x15a0]
call fcn.004976a0
lea eax, [esp + 0x16fc]
push eax
mov byte [esp + 0x370c], 0x41
call fcn.00497840
test eax, eax
je 0x44af23
xor esi, esi
mov eax, 0x4fcb18
cmp dword [esp + 0x16fc], esi
jne 0x44aeed
mov eax, 0x4fcb20
push dword [esp + 0x1708]
push dword [esp + 0x1708]
push eax
lea eax, [esp + 0x268]
push str.Need_to_update:__s_nVersion:__s_nBuildUID:__s_n
push eax
call fcn.0046bd30
add esp, 0x14
push esi
push str.Server_test:
push dword [esp + 0x264]
jmp 0x4495ea
push 0
push str.Server_test:
push str.Failed
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 1
jmp 0x4472a5
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
mov edi, 0x529f50
push edi
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x44af72
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
push esi
mov ecx, edi
call fcn.0043a1ef
jmp 0x44744f
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x678]
push eax
call fcn.00482d70
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x3714], 0x142
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x43
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x371c], 0x44
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d6
push 2
push ecx
mov byte [esp + 0x3724], 0x45
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x688]
push eax
mov byte [esp + 0x3728], 0x42
call fcn.0043809b
add esp, 0x20
lea ecx, [esp + 0x66c]
call fcn.00436cbe
lea eax, [esp + 0x66c]
call fcn.00483c50
mov dword [esp + 0x3708], 4
lea eax, [esp + 0x66c]
jmp 0x447cfb
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xc18]
push eax
call fcn.00482d70
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x3714], 0x146
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x47
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x371c], 0x48
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d6
push 2
push ecx
mov byte [esp + 0x3724], 0x49
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xc28]
push eax
mov byte [esp + 0x3728], 0x46
call fcn.0043809b
add esp, 0x20
push esi
push esi
push esi
push ecx
mov eax, esp
mov dword [esp + 0x24], esp
push eax
xor ecx, ecx
call fcn.0047d320
pop ecx
mov ecx, esi
call fcn.00495d30
add esp, 0x10
lea eax, [esp + 0xc0c]
call fcn.00483c50
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
mov edi, 0x529f50
push edi
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x44b14a
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_obtain_INI_info_from_resource_
call fcn.004247eb
call fcn.00444df8
pop ecx
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str.MountVirtReg
push eax
call fcn.0046bd30
pop ecx
pop ecx
call fcn.00444df8
mov eax, esp
mov dword [esp + 0x18], esp
push str._____________
push eax
call fcn.0046bd30
pop ecx
pop ecx
call fcn.00444df8
pop ecx
mov ecx, edi
call fcn.0042aec3
mov edi, eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
cmp edi, esi
jne 0x44b1a1
push str.Cannot_mount_virtual_registry
call fcn.004247eb
call fcn.00444df8
jmp 0x44b1ae
push ebx
call fcn.004247eb
push edi
call fcn.00445c15
pop ecx
pop ecx
mov dword [esp + 0x3708], 4
lea eax, [esp + 0xc0c]
jmp 0x447cfb
mov eax, dword [esp + 0x30]
mov edi, dword [esp + 0x28]
push dword [eax + edi*4 + 4]
lea ecx, [esp + 0x130]
call fcn.004247eb
mov dword [esp + 0x3708], 0x14a
mov eax, dword [esp + 0x30]
push dword [eax + edi*4 + 8]
lea ecx, [esp + 0x9c]
call fcn.004247eb
push 0x10
mov byte [esp + 0x370c], 0x4b
push esi
push dword [esp + 0x134]
call fcn.004bdbef
add esp, 8
mov edi, eax
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x9c]
push edi
push str.SetFileFlags:__0x_x____s_
push eax
call fcn.0046bd30
add esp, 0x10
call fcn.00444df8
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xca8]
push eax
call fcn.00482d70
mov byte [esp + 0x3708], 0x4c
push dword [0x5264a0]
lea eax, [esp + 0x4c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xca8]
push eax
call fcn.00445708
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x4d
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x371c], 0x4e
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d6
push 2
push ecx
mov byte [esp + 0x3724], 0x4f
mov ecx, esp
lea eax, [esp + 0x38]
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xcb8]
push eax
mov byte [esp + 0x3728], 0x4c
call fcn.0043809b
call fcn.00477240
mov ebx, 0x5297a4
mov eax, ebx
call fcn.0048c170
mov eax, dword [esp + 0xb8]
push esi
call fcn.004778f0
add esp, 0x24
push ecx
mov dword [esp + 0x18], esp
cmp eax, esi
je 0x44b384
mov eax, dword [eax + 0x24]
mov dword [eax], edi
mov ecx, esp
push dword [0x5297a4]
call fcn.004247eb
mov ecx, ebx
call fcn.00477820
pop ecx
cmp eax, esi
je 0x44b36e
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xa0]
push edi
push str.Success:_n__x___s
push eax
call fcn.0046bd30
add esp, 0x10
call fcn.0044568e
pop ecx
jmp 0x44b3a0
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str._SetFileFlags:_could_not_save_tree
push eax
call fcn.0046bd30
pop ecx
pop ecx
jmp 0x44b39b
mov eax, esp
push dword [esp + 0x9c]
push str._SetFileFlags:_could_not_find__s
push eax
call fcn.0046bd30
add esp, 0xc
call fcn.00444df8
pop ecx
mov eax, ebx
call fcn.0048c180
lea eax, [esp + 0xc9c]
mov byte [esp + 0x3708], 0x4b
call fcn.004278e9
mov ecx, dword [esp + 0x98]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x12c]
jmp 0x44e206
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.DbgZip
call fcn.004247eb
call fcn.00444e28
mov dword [esp], str._DbgZip:
call fcn.004b9b7a
mov edx, dword [esp + 0x2c]
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x68]
call fcn.00424844
jmp 0x447186
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x9d8]
push eax
call fcn.00482d70
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x3714], 0x150
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x51
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x371c], 0x52
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247eb
push 2
push ecx
mov byte [esp + 0x3724], 0x53
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x9e8]
push eax
mov byte [esp + 0x3728], 0x50
call fcn.0043809b
add esp, 0x20
push dword [0x5264a0]
lea eax, [esp + 0x4c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x9d8]
push eax
call fcn.00445708
push dword [esp + 0x60]
lea edx, [esp + 0x9e0]
mov ecx, 0x529f50
call fcn.0043bfa7
add esp, 0x14
mov dword [esp + 0x3708], 4
lea eax, [esp + 0x9cc]
jmp 0x447cfb
push 1
xor edi, edi
push edi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x1248]
push eax
call fcn.00482d70
push 0xffffffffffffffff
push edi
push ecx
mov dword [esp + 0x3714], 0x15a
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x5b
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x371c], 0x5c
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d6
push 2
push ecx
mov byte [esp + 0x3724], 0x5d
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x1258]
push eax
mov byte [esp + 0x3728], 0x5a
call fcn.0043809b
add esp, 0x20
lea esi, [esp + 0xb4]
call fcn.00489e80
mov byte [esp + 0x3708], 0x5e
mov dword [esp + 0x34], edi
jmp 0x44b657
push dword [0x529f5c]
lea eax, [esp + 0x2ad0]
push eax
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
jne 0x44b657
mov dword [esp + 0x2c], edi
cmp dword [esp + 0x26c8], edi
jbe 0x44b657
mov ebx, dword [esp + 0x2c]
shl ebx, 3
lea esi, [esp + ebx + 0x26cc]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [esi], eax
je 0x44b646
test byte [esp + ebx + 0x26d0], 3
je 0x44b646
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x529fac
call fcn.004247d6
push ecx
mov byte [esp + 0x3710], 0x5f
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x529f5c
call fcn.004247d6
mov byte [esp + 0x3710], 0x5e
mov ebx, dword [esi]
call fcn.0044056a
pop ecx
pop ecx
xor edi, edi
inc dword [esp + 0x2c]
mov eax, dword [esp + 0x2c]
cmp eax, dword [esp + 0x26c8]
jb 0x44b5e7
push 1
lea eax, [esp + 0x22a8]
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0x40]
call fcn.00489ba0
test eax, eax
jne 0x44b5c1
push edi
push edi
push edi
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
lea eax, [esp + 0xb4]
call fcn.00489ea0
lea eax, [esp + 0x123c]
mov dword [esp + 0x3708], 4
call fcn.004278e9
xor esi, esi
jmp 0x447450
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x13f8]
push eax
call fcn.00482d70
push 0xffffffffffffffff
mov dword [esp + 0x370c], 0x160
push dword [esp + 0x44]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x61
mov ecx, esp
mov dword [esp + 0x28], esp
push str._Vintegrate_
call fcn.004247eb
push ecx
mov byte [esp + 0x371c], 0x62
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d6
push esi
push ecx
mov byte [esp + 0x3724], 0x63
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x1408]
push eax
mov byte [esp + 0x3728], 0x60
call fcn.0043809b
add esp, 0x20
call fcn.004455c2
jmp 0x4472a4
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
push str._ProcessList:all
push dword [eax + ecx*4]
call fcn.004b98c4
mov edi, eax
neg edi
pop ecx
sbb edi, edi
pop ecx
lea esi, [esp + 0xb4]
inc edi
call fcn.00489e80
mov dword [esp + 0x3708], 0x164
and dword [esp + 0x2c], 0
lea ecx, [esp + 0x4c]
call fcn.0042248a
xor eax, eax
test edi, edi
sete al
mov byte [esp + 0x3708], 0x65
mov dword [esp + 0x34], eax
jmp 0x44ba79
lea eax, [esp + 0x20a4]
push eax
lea eax, [esp + 0x218]
push str._AppID_ws_n
push eax
call fcn.0046bd30
add esp, 0xc
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x370c], 0x66
call fcn.00424859
mov byte [esp + 0x3708], 0x65
mov ecx, dword [esp + 0x214]
add ecx, 0xfffffff0
call fcn.0042201a
push dword [esp + 0x1880]
lea eax, [esp + 0x288]
push str.____SerialId:__d_n
push eax
call fcn.0046bd30
add esp, 0xc
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x370c], 0x67
call fcn.00424859
mov byte [esp + 0x3708], 0x65
mov ecx, dword [esp + 0x284]
add ecx, 0xfffffff0
call fcn.0042201a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x1c98]
mov esi, 0x3e8
xor edx, edx
mov ecx, esi
div ecx
push eax
lea eax, [esp + 0x220]
push str.____Started:__d_sec_ago_n
push eax
call fcn.0046bd30
add esp, 0xc
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x370c], 0x68
call fcn.00424859
mov byte [esp + 0x3708], 0x65
mov ecx, dword [esp + 0x21c]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x1c9c]
xor edx, edx
div esi
push eax
lea eax, [esp + 0x268]
push str.____Blocking_buffering:__d_sec_n
push eax
call fcn.0046bd30
add esp, 0xc
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x370c], 0x69
call fcn.00424859
mov byte [esp + 0x3708], 0x65
mov ecx, dword [esp + 0x264]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x224]
push str.____Processes:_n
push eax
call fcn.0046bd30
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x370c], 0x6a
call fcn.00424859
mov byte [esp + 0x3708], 0x65
mov ecx, dword [esp + 0x224]
add ecx, 0xfffffff0
call fcn.0042201a
and dword [esp + 0x58], 0
cmp dword [esp + 0x1ca0], 0
jbe 0x44ba79
push ebx
lea ecx, [esp + 0xc8]
call fcn.004247eb
mov byte [esp + 0x3708], 0x6b
mov edi, dword [esp + 0x58]
lea edi, [esp + edi*8 + 0x1ca4]
push dword [edi]
lea esi, [esp + 0xc8]
call fcn.0046a5b0
pop ecx
test eax, eax
jne 0x44b975
push 0x4ee8a0
mov ecx, esi
call fcn.00424844
push 0x5c
push ecx
lea eax, [esp + 0xcc]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x234]
push eax
call fcn.0046c060
add esp, 0xc
mov byte [esp + 0x3708], 0x6c
push dword [eax]
lea eax, [esp + 0x2a8]
push dword [edi]
push str._______wd:__ws
push eax
call fcn.0046bd30
add esp, 0x10
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x370c], 0x6d
call fcn.00424859
mov ecx, dword [esp + 0x2a4]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3708], 0x6b
mov ecx, dword [esp + 0x22c]
add ecx, 0xfffffff0
call fcn.0042201a
mov esi, dword [esp + 0x58]
mov eax, dword [esp + esi*8 + 0x1ca8]
test eax, eax
je 0x44ba42
push eax
lea eax, [esp + 0x270]
push str._0x_x_
push eax
call fcn.0046bd30
add esp, 0xc
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x370c], 0x6e
call fcn.00424859
mov byte [esp + 0x3708], 0x6b
mov ecx, dword [esp + 0x26c]
add ecx, 0xfffffff0
call fcn.0042201a
push 0x4ea4c4
lea ecx, [esp + 0x50]
call fcn.0042b46b
mov byte [esp + 0x3708], 0x65
mov ecx, dword [esp + 0xc4]
add ecx, 0xfffffff0
call fcn.0042201a
inc esi
mov dword [esp + 0x58], esi
cmp esi, dword [esp + 0x1ca0]
jb 0x44b936
push dword [esp + 0x34]
lea eax, [esp + 0x1880]
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0x38]
call fcn.00489ba0
test eax, eax
jne 0x44b7ba
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
cmp dword [esp + 0x34], eax
jne 0x44bac7
push str.No_active_virtual_apps
call fcn.004247eb
call fcn.0044568e
pop ecx
pop ecx
jmp 0x44af37
lea eax, [esp + 0x54]
jmp 0x44a468
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
push 0x529f50
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x44bb03
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
lea esi, [esp + 0xb4]
call fcn.00489e80
mov dword [esp + 0x3708], 0x16f
and dword [esp + 0x34], 0
jmp 0x44bb3a
push dword [0x529f5c]
lea eax, [esp + 0x34f8]
push eax
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44bb6a
push 1
lea eax, [esp + 0x2cd0]
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0x40]
call fcn.00489ba0
test eax, eax
jne 0x44bb21
lea eax, [esp + 0xb4]
call fcn.00489ea0
jmp 0x448421
push 0x2bc
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0xb4]
mov dword [esp + 0x3708], 4
call fcn.00489ea0
jmp 0x44bb03
lea eax, [esp + 0x234]
push eax
mov eax, dword [esp + 0x6c]
mov eax, dword [eax + 0x44]
call fcn.0043158c
lea eax, [esp + 0x234]
push eax
call fcn.004316c9
jmp 0x4472a4
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.AutoUpdate
call fcn.004247eb
call fcn.00444e28
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
mov edi, 0x529f50
push edi
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x44bc00
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x529f98]
push str.AutoUpdate_s
push eax
call fcn.0046bd30
add esp, 0xc
call fcn.00444e28
mov ecx, 0x529f98
mov dword [esp], str.https:__online.cameyo.com
call fcn.00424844
push str.0000
mov ecx, 0x529f9c
call fcn.00424844
mov ecx, edi
call fcn.004994b0
jmp 0x447450
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.VirtRegSyncExport
call fcn.004247eb
call fcn.00444e28
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
push 0x529f50
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x44bc94
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
call fcn.00441f82
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
push str.VirtRegSyncExport:_bRet_d
push ecx
call fcn.0046bd30
add esp, 0xc
jmp 0x44744a
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.StartStreaming:AppIDSkype
call fcn.004247eb
call fcn.004275f5
pop ecx
jmp 0x44744f
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
push 0x529f50
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x44bd05
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.open
xor ebx, ebx
call fcn.004247eb
push esi
push ecx
mov dword [esp + 0x3714], 0x172
mov eax, esp
mov dword [esp + 0x24], esp
push dword [0x529fac]
xor edi, edi
push str._select___s_
push eax
call fcn.0046bd30
add esp, 8
mov byte [esp + 0x3718], 0x73
mov ecx, esp
mov dword [esp + 0x48], esp
push str.explorer.exe
call fcn.004247eb
mov dword [esp + 0x3718], 4
call fcn.0046a7d0
add esp, 0x10
jmp 0x44b6ab
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SvcRegister
call fcn.004247eb
call fcn.00444e28
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
mov edi, 0x529f50
push edi
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x44bdba
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
mov ecx, edi
call fcn.0042aec3
mov ebx, eax
cmp ebx, esi
jne 0x44bdde
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_mount_virtual_registry
jmp 0x44729a
call fcn.00477240
push dword [0x5264a0]
push ebx
push edi
call fcn.00423aaf
add esp, 0xc
push dword [0x5264a0]
mov edi, eax
cmp edi, esi
jne 0x44be0d
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Success
jmp 0x44be1e
cmp edi, 5
jne 0x44be2c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_services_to_register
call fcn.004247eb
call fcn.0044568e
pop ecx
pop ecx
jmp 0x44be74
lea eax, [esp + 0x290]
push edi
push eax
call fcn.00472ce0
add esp, 4
mov dword [esp + 0x3710], 0x174
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Failed_registering_services:__s
push ecx
call fcn.0046bd30
add esp, 0xc
call fcn.0044568e
pop ecx
pop ecx
mov ecx, dword [esp + 0x28c]
add ecx, 0xfffffff0
call fcn.0042201a
push edi
jmp 0x4472a5
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SvcStart
call fcn.004247eb
call fcn.00444e28
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
mov edi, 0x529f50
push edi
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x44bec3
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
mov ecx, edi
call fcn.00424301
push dword [0x5264a0]
mov edi, eax
cmp edi, esi
je 0x44bdff
cmp edi, 5
jne 0x44bef0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_services_to_start
jmp 0x44be1e
lea eax, [esp + 0x240]
push edi
push eax
call fcn.00472ce0
add esp, 4
mov dword [esp + 0x3710], 0x175
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Failed_starting_services:__s
push ecx
call fcn.0046bd30
add esp, 0xc
call fcn.0044568e
pop ecx
pop ecx
mov ecx, dword [esp + 0x23c]
jmp 0x44be6c
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SvcRegisterStart
call fcn.004247eb
call fcn.00444e28
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
mov edi, 0x529f50
push edi
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x44bf7e
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
mov ecx, edi
call fcn.0042aec3
mov ebx, eax
cmp ebx, esi
jne 0x44bf9d
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44bdd4
call fcn.00477240
push dword [0x5264a0]
push ebx
push edi
call fcn.00423aaf
add esp, 0xc
mov ebx, str.Failed_registering_services:__s
cmp eax, 5
jne 0x44bfdc
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_services_to_register
call fcn.004247eb
call fcn.0044568e
pop ecx
pop ecx
jmp 0x44c035
cmp eax, esi
je 0x44c035
push dword [0x5264a0]
push eax
lea eax, [esp + 0x1d0]
push eax
call fcn.00472ce0
add esp, 4
mov dword [esp + 0x3710], 0x176
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push ebx
push ecx
call fcn.0046bd30
add esp, 0xc
call fcn.0044568e
pop ecx
pop ecx
mov dword [esp + 0x3708], 4
mov ecx, dword [esp + 0x1c8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, edi
call fcn.00424301
push dword [0x5264a0]
mov edi, eax
cmp edi, esi
je 0x44bdff
cmp edi, 5
je 0x44be12
lea eax, [esp + 0x1dc]
push edi
push eax
call fcn.00472ce0
add esp, 4
mov dword [esp + 0x3710], 0x177
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push ebx
push ecx
call fcn.0046bd30
add esp, 0xc
call fcn.0044568e
pop ecx
pop ecx
mov ecx, dword [esp + 0x1d8]
jmp 0x44be6c
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SvcStop
call fcn.004247eb
call fcn.00444e28
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
mov edi, 0x529f50
push edi
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x44c0df
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
push esi
mov ecx, edi
call fcn.00423ea1
mov edi, eax
pop ecx
push dword [0x5264a0]
cmp edi, esi
je 0x44bdff
cmp edi, 5
jne 0x44c10e
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_services_to_stop
jmp 0x44be1e
lea eax, [esp + 0x1e4]
push edi
push eax
call fcn.00472ce0
add esp, 4
mov dword [esp + 0x3710], 0x178
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Failed_stopping_services:__s
push ecx
call fcn.0046bd30
add esp, 0xc
call fcn.0044568e
pop ecx
pop ecx
mov ecx, dword [esp + 0x1e0]
jmp 0x44be6c
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SvcRemove
call fcn.004247eb
call fcn.00444e28
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
mov edi, 0x529f50
push edi
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x44c19c
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
push 1
mov ecx, edi
call fcn.00423ea1
mov edi, eax
pop ecx
push dword [0x5264a0]
cmp edi, esi
je 0x44bdff
cmp edi, 5
jne 0x44c1cc
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_services_to_remove
jmp 0x44be1e
lea eax, [esp + 0x1ec]
push edi
push eax
call fcn.00472ce0
add esp, 4
mov dword [esp + 0x3710], 0x179
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Failed_removing_services:__s
push ecx
call fcn.0046bd30
add esp, 0xc
call fcn.0044568e
pop ecx
pop ecx
mov ecx, dword [esp + 0x1e8]
jmp 0x44be6c
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.ScmDirectInit
call fcn.004247eb
call fcn.00444e28
mov dword [esp], 0x4fd490
call fcn.004b9ad0
mov edx, dword [esp + 0x2c]
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x1f4]
call fcn.004247eb
push ecx
mov dword [esp + 0x370c], 0x17a
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
mov ebx, 0x529f50
push ebx
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x44c28e
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
push ecx
lea eax, [esp + 0x1f4]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
mov edi, 0x529fe8
call fcn.004247d6
call fcn.0042a8fb
pop ecx
mov edi, ebx
call fcn.004246e3
jmp 0x4472a4
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.RepoSync
call fcn.004247eb
call fcn.00444e28
mov eax, dword [esp + 0x34]
pop ecx
mov ecx, dword [esp + 0x28]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x138]
call fcn.004247eb
lea eax, [esp + 0x48c]
push eax
mov dword [esp + 0x370c], 0x17b
call fcn.00424b59
lea eax, [esp + 0x474]
push eax
mov byte [esp + 0x370c], 0x7c
call fcn.00424b59
lea eax, [esp + 0x4a4]
push eax
mov byte [esp + 0x370c], 0x7d
call fcn.00424b59
push esi
lea eax, [esp + 0x4a8]
push eax
lea eax, [esp + 0x47c]
push eax
lea eax, [esp + 0x498]
push eax
push ecx
mov byte [esp + 0x371c], 0x7e
lea eax, [esp + 0x148]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d6
push ecx
mov byte [esp + 0x3720], 0x7f
lea eax, [esp + 0x14c]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3720], 0x7e
call fcn.0043c2c5
add esp, 0x18
push eax
jmp 0x4472a5
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.MergeRegistry
call fcn.004247eb
call fcn.00444e28
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
mov edi, 0x529f50
push edi
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x44c3da
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
push edi
call fcn.0043d5c0
pop ecx
mov edi, eax
lea eax, [esp + 0x1f8]
push edi
push eax
call fcn.00472ce0
add esp, 4
mov ecx, esp
mov dword [esp + 0x370c], 0x180
mov dword [esp + 0x18], esp
push dword [eax]
push edi
push str.Loader_MergeRegistry___d__s_
push ecx
call fcn.0046bd30
add esp, 0x10
call fcn.00444df8
pop ecx
mov dword [esp + 0x3708], 4
mov ecx, dword [esp + 0x1f8]
add ecx, 0xfffffff0
call fcn.0042201a
push dword [0x5264a0]
cmp edi, esi
je 0x44bdff
lea eax, [esp + 0x204]
push edi
push eax
call fcn.00472ce0
add esp, 4
mov dword [esp + 0x3710], 0x181
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Failed:__s
push ecx
call fcn.0046bd30
add esp, 0xc
call fcn.0044568e
pop ecx
pop ecx
mov ecx, dword [esp + 0x200]
jmp 0x44be6c
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cameyo.exe__UpgradePkg_
call fcn.004247eb
call fcn.00444e28
pop ecx
lea ecx, [esp + 0xd8]
call fcn.0042248a
mov byte [esp + 0x3708], 0x84
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
push dword [eax + ecx*4]
lea ecx, [esp + 0x110]
call fcn.004247eb
push ecx
mov byte [esp + 0x370c], 0x85
lea eax, [esp + 0x110]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
call fcn.0046e3e0
pop ecx
cmp eax, esi
jne 0x44c50f
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x114]
push str._s_not_found
jmp 0x44742b
push esi
lea eax, [esp + 0xdc]
push eax
push ecx
lea eax, [esp + 0x118]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
push ecx
mov byte [esp + 0x3718], 0x86
mov eax, esp
mov dword [esp + 0x28], esp
push eax
call fcn.0046ad70
pop ecx
mov byte [esp + 0x3718], 0x85
call fcn.00442299
add esp, 0x10
push dword [0x5264a0]
cmp eax, esi
jne 0x44c574
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xe0]
push 0x4fba3c
jmp 0x448ca6
push eax
lea eax, [esp + 0x2f0]
push eax
call fcn.00472ce0
add esp, 4
mov byte [esp + 0x3710], 0x87
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xe0]
push dword [eax]
push str._s:__s
push ecx
jmp 0x44a676
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.AuthCheck
call fcn.004247eb
call fcn.00444e28
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
mov esi, 0x529f50
push esi
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x44c5f0
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
call fcn.00433576
xor edi, edi
mov dword [esp + 0x20], eax
cmp eax, edi
je 0x44c6a0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
push str._AuthCheck:Force
push dword [eax + ecx*4]
call fcn.004b98c4
pop ecx
pop ecx
lea eax, [esp + 0x208]
push eax
push ecx
mov dword [esp + 0x1c], esp
mov ebx, esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.AuthToken.dat
mov dword [esp + 0x218], edi
call fcn.004247eb
push ebx
mov ecx, edi
call fcn.0047cf40
pop ecx
pop ecx
mov ecx, dword [esp + 0x28]
mov edx, esi
call fcn.00432c8d
push dword [0x5264a0]
mov esi, eax
push ecx
mov dword [esp + 0x1c], esp
test esi, esi
je 0x44c675
mov ecx, esp
push str.Allowed_to_run_this_package
call fcn.004247eb
jmp 0x44c68a
mov eax, esp
push 0x52a02c
push str.Denied:_n
push eax
call fcn.00424a8f
add esp, 0xc
call fcn.0044568e
neg esi
sbb esi, esi
pop ecx
and esi, 0xffffffef
pop ecx
add esi, 0x11
jmp 0x4472a4
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_authentication_server_specified_in_this_package
jmp 0x44729a
push str.Vintegrate:
lea ecx, [esp + 0x104]
call fcn.004247eb
mov dword [esp + 0x3708], 0x154
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
lea edi, [eax + ecx*4]
push str._VintegrateRecursive
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
je 0x44c70f
push 0x4fce18
call fcn.004b9ad0
pop ecx
push eax
push str._VintegrateRecursive:
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
test eax, eax
jne 0x44c720
push str.VintegrateRecursive:
lea ecx, [esp + 0x104]
call fcn.00424844
push str._Windows_Explorer.exe
lea ecx, [esp + 0xd8]
call fcn.004247eb
mov byte [esp + 0x3708], 0x55
mov edi, dword [edi]
push 0x3a
push edi
call fcn.004ba628
pop ecx
pop ecx
cmp eax, esi
je 0x44c759
add eax, 2
push eax
lea ecx, [esp + 0xd8]
call fcn.00424844
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x1368]
push eax
call fcn.00482d70
push 0xffffffffffffffff
mov byte [esp + 0x370c], 0x56
push dword [esp + 0x44]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov eax, esp
mov byte [esp + 0x3718], 0x57
mov dword [esp + 0x28], esp
lea ecx, [esp + 0xe4]
push ecx
lea ecx, [esp + 0x114]
push ecx
push eax
call fcn.0042c30e
add esp, 8
mov byte [esp + 0x371c], 0x58
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d6
push esi
push ecx
mov byte [esp + 0x3724], 0x59
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x1378]
push eax
mov byte [esp + 0x3728], 0x56
call fcn.0043809b
add esp, 0x20
lea eax, [esp + 0x135c]
mov byte [esp + 0x3708], 0x55
call fcn.004278e9
mov ecx, dword [esp + 0xd4]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x100]
jmp 0x44e206
lea ecx, [esp + 0x2c]
call fcn.0042248a
lea ecx, [esp + 0xe0]
mov dword [esp + 0x3708], 0x105
call fcn.0042248a
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x370c], 6
call fcn.004247d6
mov byte [esp + 0x3708], 7
mov eax, dword [esp + 0x28]
lea ecx, [eax + 1]
cmp dword [esp + 0x54], ecx
jle 0x44c892
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x6c]
call fcn.00424844
push 1
push esi
push ecx
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xdc8]
push eax
call fcn.00482d70
mov byte [esp + 0x3708], 8
push dword [0x5264a0]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xdc8]
push eax
call fcn.00445708
add esp, 0x10
cmp dword [esp + 0xe44], esi
jne 0x44c8fe
push str.FAILED_LOADING_CONTAINERS__n
lea ebx, [esp + 0x30]
call fcn.00427740
pop ecx
xor esi, esi
lea eax, [esp + 0xe0]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Main
call fcn.004247eb
push 3
lea edi, [esp + 0xdc8]
call fcn.00484fc0
mov eax, dword [esp + 0xe0]
cmp dword [eax - 0xc], esi
jne 0x44c93f
push str.Cannot_obtain_INI_info_from_resource__n
lea ecx, [esp + 0x30]
call fcn.0042bc46
lea eax, [esp + 0xe0]
push eax
lea ecx, [esp + 0x30]
call fcn.00425368
push esi
push 0x4ee824
push dword [esp + 0x34]
jmp 0x4495ea
push str._SaveProperties_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea ecx, [esp + 0x24]
call fcn.0042248a
mov byte [esp + 0x3708], 0xf8
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
push str._SaveAllProperties
push dword [eax + ecx*4]
call fcn.004b98c4
mov edi, eax
mov eax, dword [esp + 0x2c]
neg edi
sbb edi, edi
pop ecx
inc edi
pop ecx
cmp dword [eax - 0xc], esi
jne 0x44ca0d
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..xml
call fcn.004247eb
push ecx
mov byte [esp + 0x3710], 0xf9
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x218]
push eax
mov byte [esp + 0x3714], 0xf8
call fcn.0046bef0
add esp, 0xc
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x370c], 0xfa
call fcn.0042482f
mov byte [esp + 0x3708], 0xf8
mov ecx, dword [esp + 0x210]
add ecx, 0xfffffff0
call fcn.0042201a
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xaf8]
push eax
call fcn.00482d70
mov byte [esp + 0x3708], 0xfb
push dword [0x5264a0]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xaf8]
push eax
call fcn.00445708
add esp, 0x10
cmp dword [esp + 0xb74], esi
jne 0x44ca7a
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4496d0
sub esp, 0x90
mov eax, esp
mov dword [esp + 0xa4], esp
lea ecx, [esp + 0xb7c]
push ecx
push eax
call fcn.0044e298
push edi
push ecx
mov byte [esp + 0x37a0], 0xfc
lea eax, [esp + 0xe0]
mov ecx, esp
mov dword [esp + 0xb0], esp
push eax
call fcn.004247d6
push ecx
mov byte [esp + 0x37a4], 0xfd
lea eax, [esp + 0xc0]
mov ecx, esp
mov dword [esp + 0xd4], esp
push eax
call fcn.004247d6
mov byte [esp + 0x37a4], 0xfb
call fcn.0042b0f7
add esp, 0x9c
cmp eax, esi
jne 0x44cb08
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x2c]
push str.Cannot_save_into:__s
jmp 0x44742b
lea eax, [esp + 0xaec]
call fcn.00483c50
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x2c]
push str.Properties_exported_to:_n_s
jmp 0x448ca6
lea eax, [esp + 0x2c]
push eax
call fcn.0046ae60
mov byte [esp + 0x370c], 0xa7
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x2c]
lea edi, [eax + ecx*4]
mov dword [esp], 0x4fc028
call fcn.004b9ad0
pop ecx
push eax
push str._CreateShortcuts:
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
test eax, eax
jne 0x44cb8e
push dword [edi]
lea ecx, [esp + 0x30]
call fcn.00424844
push 0x4fc028
call fcn.004b9ad0
pop ecx
push esi
lea ecx, [esp + 0x30]
push ecx
call fcn.00424882
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
push 0x529f50
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x44cbc1
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
push 1
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x1488]
push eax
call fcn.00482d70
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x3714], 0xa8
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0xa9
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x371c], 0xaa
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247eb
push 2
push ecx
mov byte [esp + 0x3724], 0xab
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x1498]
push eax
mov byte [esp + 0x3728], 0xa8
call fcn.0043809b
add esp, 0x20
push 0x529f60
lea ecx, [esp + 0x6c]
call fcn.004247d6
lea eax, [esp + 0x6c]
push eax
push 0x4effd0
lea eax, [esp + 0x88]
mov byte [esp + 0x3710], 0xac
push eax
lea ecx, [esp + 0x74]
mov dword [esp + 0x78], esi
call fcn.0042b5fa
jmp 0x44d182
lea ecx, [esp + 0x24]
call fcn.0042248a
lea ecx, [esp + 0x28]
call fcn.0042248a
lea ecx, [esp + 0x30]
call fcn.0042248a
lea ecx, [esp + 0x40]
call fcn.0042248a
push 0x3e
push ecx
mov byte [esp + 0x3710], 0xb1
lea eax, [esp + 0x88]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov dword [esp + 0x90], esi
lea edi, [esp + 0x90]
call fcn.004247d6
lea eax, [esp + 0x220]
push eax
call fcn.0046f930
add esp, 0xc
mov byte [esp + 0x3708], 0xb2
call fcn.00424931
push eax
lea ecx, [esp + 0x28]
call fcn.0042482f
mov byte [esp + 0x3708], 0xb1
mov ecx, dword [esp + 0x218]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0x84], 0xffffffff
je 0x44d120
push 0x3e
push ecx
lea eax, [esp + 0x88]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x228]
push eax
call fcn.0046f930
add esp, 0xc
mov byte [esp + 0x3708], 0xb3
call fcn.00424931
push eax
lea ecx, [esp + 0x2c]
call fcn.0042482f
mov byte [esp + 0x3708], 0xb1
mov ecx, dword [esp + 0x220]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0x84], 0xffffffff
je 0x44d120
push 0x3e
push ecx
lea eax, [esp + 0x88]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x230]
push eax
call fcn.0046f930
add esp, 0xc
mov byte [esp + 0x3708], 0xb4
call fcn.00424931
push eax
lea ecx, [esp + 0x34]
call fcn.0042482f
mov byte [esp + 0x3708], 0xb1
mov ecx, dword [esp + 0x228]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0x84], 0xffffffff
jne 0x44cdf9
push ebx
lea ecx, [esp + 0x34]
call fcn.00424844
jmp 0x44ce54
push 0x3e
push ecx
lea eax, [esp + 0x88]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
lea edi, [esp + 0x90]
call fcn.004247d6
lea eax, [esp + 0x238]
push eax
call fcn.0046f930
add esp, 0xc
mov byte [esp + 0x3708], 0xb5
call fcn.00424931
push eax
lea ecx, [esp + 0x44]
call fcn.0042482f
mov byte [esp + 0x3708], 0xb1
mov ecx, dword [esp + 0x230]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0x84], 0xffffffff
jne 0x44ce68
push ebx
lea ecx, [esp + 0x44]
call fcn.00424844
push dword [esp + 0x24]
lea eax, [esp + 0xd0]
push str._exec___s_
push eax
call fcn.0046bd30
add esp, 0xc
mov byte [esp + 0x3708], 0xb6
mov eax, dword [esp + 0x28]
cmp dword [eax - 0xc], esi
je 0x44ceb4
push 0x4f21dc
lea ecx, [esp + 0xd0]
call fcn.0042b46b
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0xd0]
call fcn.00424859
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
push ecx
mov edi, esp
mov byte [esp + 0x3710], 0xb7
mov dword [esp + 0x20], esp
push 0x5c
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d6
push edi
call fcn.0046c060
lea eax, [esp + 0x128]
add esp, 0xc
push eax
mov byte [esp + 0x3714], 0xb6
call fcn.0042aa82
add esp, 0xc
push esi
push esi
push esi
push ecx
mov byte [esp + 0x3718], 0xb8
lea eax, [esp + 0x124]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x108]
push esi
push eax
call fcn.0047cc40
add esp, 0x14
mov byte [esp + 0x370c], 0xb9
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x4e9fa0
call fcn.004247eb
push ecx
mov eax, esp
mov byte [esp + 0x3710], 0xba
mov dword [esp + 0x20], esp
push str..lnk
lea ecx, [esp + 0x3c]
push ecx
push eax
call fcn.00424a3a
add esp, 8
mov byte [esp + 0x3714], 0xbb
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d6
lea edi, [esp + 0x16c]
mov byte [esp + 0x3714], 0xb9
call fcn.0046b5f0
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x160]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
lea eax, [esp + 0xfc]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
call fcn.0046e3e0
pop ecx
cmp eax, esi
je 0x44cfdf
lea eax, [esp + 0xf8]
jmp 0x44cff9
push esi
lea ecx, [esp + 0x16c]
call fcn.004247eb
mov byte [esp + 0x3708], 0xbc
or dword [esp + 0x4c], 2
mov eax, dword [eax]
push esi
push ecx
mov dword [esp + 0x28], eax
lea eax, [esp + 0x48]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d6
push ecx
mov dword [esp + 0x3714], 0xbd
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d6
push ecx
mov byte [esp + 0x3718], 0xbe
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x48], esp
push eax
call fcn.004247d6
push ecx
mov byte [esp + 0x371c], 0xbf
mov dword [esp + 0x90], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x94], esp
push 0x4e9fa0
call fcn.004247eb
push ecx
mov eax, esp
mov byte [esp + 0x3724], 0xc0
mov dword [esp + 0x50], esp
push str..lnk
lea ecx, [esp + 0x50]
push ecx
push eax
call fcn.00424a3a
add esp, 8
mov byte [esp + 0x3728], 0xc1
lea eax, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x78], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3728], 0xbf
call fcn.0046b5f0
mov ecx, dword [esp + 0x40]
add esp, 0xc
mov byte [esp + 0x371c], 0xbc
call fcn.004969c0
add esp, 0x14
mov dword [esp + 0x3708], 0xb9
test byte [esp + 0x4c], 2
je 0x44d0f3
mov ecx, dword [esp + 0x168]
and dword [esp + 0x4c], 0xfffffffd
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0xf8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x114]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0xcc]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x40]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x28]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3708], 0xac
mov ecx, dword [esp + 0x80]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x6c]
push eax
push 0x4effd0
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0x74]
call fcn.0042b5fa
cmp dword [esp + 0x6c], 0xffffffff
jne 0x44cc91
mov byte [esp + 0x3708], 0xac
mov ecx, dword [esp + 0x80]
add ecx, 0xfffffff0
call fcn.0042201a
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x529f5c]
push str.Shortcuts_created_for__s.
jmp 0x448ca6
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x28]
call fcn.004247d6
mov byte [esp + 0x3708], 0x98
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
lea edi, [eax + ecx*4]
push str._FullIntegrate
push dword [edi]
mov dword [esp + 0x60], edi
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
jne 0x44d382
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
push 0x529f50
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x44d22f
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
push dword [esp + 0x50]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x529f5c
call fcn.004247d6
lea eax, [esp + 0xf0]
push eax
call fcn.00442243
add esp, 8
mov byte [esp + 0x370c], 0x99
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x4e9fa0
call fcn.004247eb
push ecx
mov byte [esp + 0x3710], 0x9a
mov eax, esp
mov dword [esp + 0x20], esp
push dword [0x529f5c]
push str._s.host.exe
push eax
call fcn.0046bd30
add esp, 8
mov byte [esp + 0x3714], 0x9b
lea eax, [esp + 0xf4]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d6
lea edi, [esp + 0x17c]
mov byte [esp + 0x3714], 0x99
call fcn.0046b5f0
add esp, 0xc
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x370c], 0x9c
call fcn.0042482f
mov byte [esp + 0x3708], 0x99
mov ecx, dword [esp + 0x170]
add ecx, 0xfffffff0
call fcn.0042201a
mov esi, dword [esp + 0xe8]
call fcn.0046e4c0
test eax, eax
jne 0x44d311
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_create_virtual_repository
jmp 0x44729a
lea eax, [esp + 0x178]
push eax
call fcn.0046ad70
mov eax, dword [eax]
pop ecx
push 0
push dword [esp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [esp + 0x178]
neg eax
sbb al, al
inc al
add ecx, 0xfffffff0
mov byte [esp + 0x47], al
call fcn.0042201a
cmp byte [esp + 0x47], 0
je 0x44d365
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_copy_executable_to_repository
jmp 0x44729a
mov byte [esp + 0x3708], 0x98
mov ecx, dword [esp + 0xe8]
add ecx, 0xfffffff0
call fcn.0042201a
mov edi, dword [esp + 0x58]
xor esi, esi
push 1
push esi
push ecx
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xb88]
push eax
call fcn.00482d70
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x3714], 0x9d
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x9e
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x371c], 0x9f
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247eb
push 2
push ecx
mov byte [esp + 0x3724], 0xa0
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
lea eax, [esp + 0xb98]
push eax
mov byte [esp + 0x3728], 0x9d
call fcn.0043809b
push str._Integrate:once
push dword [edi]
call fcn.004b98c4
add esp, 0x28
test eax, eax
jne 0x44d562
push ebx
lea ecx, [esp + 0x98]
call fcn.004247eb
push esi
push esi
push esi
push ecx
mov byte [esp + 0x3718], 0xa1
mov ecx, esp
mov dword [esp + 0x24], esp
push str.Registered
lea edi, [esp + 0xa8]
call fcn.004247eb
mov byte [esp + 0x3718], 0xa2
push dword [0x529f5c]
lea eax, [esp + 0x194]
push str.SoftwareVOS_s
push eax
call fcn.0046bd30
add esp, 8
mov byte [esp + 0x371c], 0xa3
or dword [esp + 0x60], 1
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.Integrated
push eax
push ecx
call fcn.00424a3a
add esp, 0xc
mov dword [esp + 0x371c], 0xa4
call fcn.0047c340
push eax
mov byte [esp + 0x3720], 0xa5
call fcn.0046c810
add esp, 0x18
cmp eax, esi
je 0x44d4d6
mov eax, dword [esp + 0x94]
cmp dword [eax - 0xc], esi
je 0x44d4d6
mov bl, 1
jmp 0x44d4d8
xor bl, bl
mov dword [esp + 0x3708], 0xa1
test byte [esp + 0x4c], 1
je 0x44d4f9
mov ecx, dword [esp + 0x180]
add ecx, 0xfffffff0
call fcn.0042201a
test bl, bl
je 0x44d54b
push str.Success
lea eax, [esp + 0x98]
call fcn.0042486e
push ecx
test eax, eax
mov dword [esp + 0x18], esp
mov eax, esp
jne 0x44d530
push str._Integrate:once:_already_registered_successfully._Quitting.
push eax
call fcn.0046bd30
pop ecx
pop ecx
call fcn.00444df8
jmp 0x448cb5
push dword [esp + 0x98]
push str._Integrate:once:_already_attempted_registration_before__but_failed:__s._Trying_integration_again.
push eax
call fcn.0046bd30
add esp, 0xc
call fcn.00444df8
pop ecx
mov byte [esp + 0x3708], 0x9d
mov ecx, dword [esp + 0x94]
add ecx, 0xfffffff0
call fcn.0042201a
xor eax, eax
cmp dword [esp + 0x50], esi
push esi
setne al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.AllUsers
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0xa6
mov eax, esp
mov dword [esp + 0x28], esp
push dword [0x529f5c]
push str.SoftwareVOS_s
push eax
call fcn.0046bd30
add esp, 0xc
push SysReAllocStringLen
mov byte [esp + 0x371c], 0x9d
call fcn.0046cd10
add esp, 0x14
push dword [esp + 0x50]
lea edx, [esp + 0xb80]
mov ecx, 0x529f50
call fcn.0043bfa7
pop ecx
lea eax, [esp + 0xb7c]
call fcn.00483c50
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x529f5c]
push str._s_is_now_integrated_into_your_system.
jmp 0x448ca6
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.0046ab50
test eax, eax
jne 0x44d66f
mov eax, dword [esp + 0x30]
push esi
push ecx
mov edi, esp
mov dword [esp + 0x1c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push dword [eax]
call fcn.004247eb
push edi
call fcn.00471730
add esp, 4
mov byte [esp + 0x3714], 0x3f
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d6
mov ecx, esi
xor edx, edx
mov byte [esp + 0x3714], 4
call fcn.0046a940
add esp, 0xc
cmp eax, esi
jne 0x4472a4
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x447295
call fcn.0046ad20
test eax, eax
jne 0x44d68a
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44629a
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
lea edi, [eax + ecx*4]
push 0x4fb54c
mov dword [esp + 0x5c], edi
call fcn.004b9ad0
pop ecx
push eax
push str._Patch
push dword [edi]
call fcn.004bc0e6
add esp, 0xc
mov edi, eax
neg edi
lea eax, [esp + 0x1c]
sbb edi, edi
push eax
lea ecx, [esp + 0x6c]
inc edi
call fcn.004247d6
push ecx
mov byte [esp + 0x370c], 0x40
mov ecx, esp
mov dword [esp + 0x18], esp
push str..new.exe
call fcn.004247eb
push ecx
mov byte [esp + 0x3710], 0x41
lea eax, [esp + 0x70]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x98]
push eax
mov byte [esp + 0x3714], 0x40
call fcn.0046bef0
add esp, 0xc
mov byte [esp + 0x3708], 0x42
push dword [esp + 0x90]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [esp + 0x58]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
call fcn.004247eb
lea eax, [esp + 0xf4]
push eax
call fcn.00471730
pop ecx
pop ecx
push 1
push esi
push ecx
mov byte [esp + 0x3714], 0x43
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x5e8]
push eax
call fcn.00482d70
mov byte [esp + 0x3708], 0x44
push dword [0x5264a0]
cmp dword [esp + 0x668], esi
jne 0x44d79e
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x24]
push str.Cannot_load_newly_created_package__s
jmp 0x44742b
push 1
push ecx
lea eax, [esp + 0x54]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x5e8]
push eax
call fcn.00445708
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x45
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247eb
push ecx
mov byte [esp + 0x371c], 0x46
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d6
push 2
push ecx
mov byte [esp + 0x3724], 0x47
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x5f8]
push eax
mov byte [esp + 0x3728], 0x44
call fcn.0043809b
push dword [0x529f5c]
lea eax, [esp + 0xec]
push dword [0x529fac]
push str._sAppVirtDll__s.dll
push eax
call fcn.0046bd30
add esp, 0x2c
mov byte [esp + 0x370c], 0x48
lea eax, [esp + 0xcc]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
call fcn.00426d6e
pop ecx
cmp eax, esi
je 0x44d8d7
push dword [0x5264a0]
cmp eax, 0x11
jne 0x44d899
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push str.MsiTrackerStart:_Insufficient_permissions_
push eax
call fcn.0046bd30
pop ecx
pop ecx
jmp 0x44729f
cmp eax, 0x12
jne 0x44d8ac
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push str.MsiTrackerStart:_Cant_access_services.exe._32_64_bit_mismatch_
jmp 0x44d88c
push eax
lea eax, [esp + 0x2f4]
push eax
call fcn.00472ce0
add esp, 4
mov byte [esp + 0x3710], 0x49
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.MsiTrackerStart:_Failed:__s
jmp 0x447a58
push dword [esp + 0xf0]
lea eax, [esp + 0x18c]
push str._exec__s
push eax
call fcn.0046bd30
mov eax, dword [eax]
add esp, 0xc
push esi
push esi
push eax
push dword [esp + 0x28]
push esi
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [esp + 0x188]
xor ebx, ebx
cmp eax, 0x20
setg bl
add ecx, 0xfffffff0
call fcn.0042201a
cmp ebx, esi
je 0x44d969
cmp edi, esi
je 0x44d931
push 1
push 0x4ea4c8
push str.Installation_launched_in_virtual_mode..._nWhen_installation_is_done__click_OK_and_Cameyo_will_turn_it_into_a_virtual_package._nInstallation_will_not_truly_install_anything_on_your_hard_drive__it_is_simulated_.
jmp 0x44d93c
push esi
push 0x4ea4c8
push str.When_installation_is_done__click_OK.
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
jne 0x44d969
push ecx
lea eax, [esp + 0xcc]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
call fcn.00426df5
pop ecx
push 0x14
jmp 0x4472a5
push ecx
lea eax, [esp + 0xcc]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
call fcn.00426df5
pop ecx
cmp eax, esi
je 0x44d9e4
push dword [0x5264a0]
cmp eax, 0x11
jne 0x44d9a3
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push str.MsiTrackerStop:_Insufficient_permissions_
jmp 0x44d88c
cmp eax, 0x12
jne 0x44d9b9
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push str.MsiTrackerStop:_Cant_access_services.exe._32_64_bit_mismatch_
jmp 0x44d88c
push eax
lea eax, [esp + 0x2e0]
push eax
call fcn.00472ce0
add esp, 4
mov byte [esp + 0x3710], 0x4a
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.MsiTrackerStop:_Failed:__s
jmp 0x447a58
cmp ebx, esi
jne 0x44da06
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xf8]
push str.Failed_executing__s
jmp 0x44742b
mov ebx, dword [esp + 0x68]
cmp edi, esi
je 0x44dacb
call fcn.0042fbf1
push 0x407
mov edi, 0x529f50
call fcn.004894b0
pop ecx
push esi
push dword [esp + 0x94]
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x90]
jne 0x44da53
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x447972
push dword [esp + 0x34]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d6
call fcn.0043fb72
pop ecx
pop ecx
mov dword [esp + 0x34], eax
cmp eax, esi
je 0x44dac0
push dword [esp + 0x90]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esp + 0x34], 0x10
push dword [0x5264a0]
jne 0x44da99
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x447a25
push dword [esp + 0x38]
lea eax, [esp + 0x31c]
push eax
call fcn.00472ce0
add esp, 4
mov byte [esp + 0x3710], 0x4b
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x447a51
push 0x404
call fcn.004894b0
pop ecx
lea eax, [esp + 0x5dc]
call fcn.00483c50
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x98]
push 0x4fba3c
push eax
call fcn.0046bd30
add esp, 0xc
call fcn.0044568e
pop ecx
pop ecx
mov ecx, dword [esp + 0xc8]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x5dc]
mov byte [esp + 0x3708], 0x43
call fcn.004278e9
mov ecx, dword [esp + 0xf0]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x90]
add ecx, 0xfffffff0
jmp 0x4479fd
lea ecx, [esp + 0x24]
call fcn.0042248a
lea ecx, [esp + 0x50]
call fcn.0042248a
mov byte [esp + 0x3708], 0x35
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
lea edi, [eax + ecx*4]
push str._CreateDiff
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
jne 0x44db88
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x28]
call fcn.0042482f
jmp 0x44dba2
push 0x4fb508
call fcn.004b9ad0
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x28]
call fcn.00424844
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..mod
call fcn.004247eb
push ecx
mov byte [esp + 0x3710], 0x36
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x198]
push eax
mov byte [esp + 0x3714], 0x35
call fcn.0046bef0
add esp, 0xc
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x370c], 0x37
call fcn.0042482f
mov byte [esp + 0x3708], 0x35
mov ecx, dword [esp + 0x190]
add ecx, 0xfffffff0
call fcn.0042201a
mov ebx, dword [esp + 0x50]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
call edi
push esi
push ebx
push dword [esp + 0x2c]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x50]
jne 0x44dc40
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x447972
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d6
call fcn.0043fb72
pop ecx
pop ecx
mov dword [esp + 0x68], eax
cmp eax, esi
jne 0x44dcb7
push dword [0x5264a0]
lea eax, [esp + 0x54]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x1a4]
push eax
call fcn.0046c060
add esp, 8
mov byte [esp + 0x3710], 0x38
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Successfully_repackaged_into:__s
push ecx
call fcn.0046bd30
add esp, 0xc
call fcn.0044568e
pop ecx
pop ecx
mov ecx, dword [esp + 0x198]
jmp 0x44de8b
push ebx
call edi
cmp dword [esp + 0x68], 0x10
push dword [0x5264a0]
jne 0x44dcd3
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x447a25
push dword [esp + 0x6c]
lea eax, [esp + 0x318]
push eax
call fcn.00472ce0
add esp, 4
mov byte [esp + 0x3710], 0x39
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x447a51
lea ecx, [esp + 0x24]
call fcn.0042248a
lea ecx, [esp + 0x50]
call fcn.0042248a
mov byte [esp + 0x3708], 0x28
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
lea edi, [eax + ecx*4]
push str._LearnStreaming
push dword [edi]
call fcn.004b98c4
pop ecx
pop ecx
test eax, eax
jne 0x44dd41
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x28]
call fcn.0042482f
jmp 0x44dd5b
push 0x4fb2e4
call fcn.004b9ad0
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x28]
call fcn.00424844
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..new.exe
call fcn.004247eb
push ecx
mov byte [esp + 0x3710], 0x29
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x1a8]
push eax
mov byte [esp + 0x3714], 0x28
call fcn.0046bef0
add esp, 0xc
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x370c], 0x2a
call fcn.0042482f
mov byte [esp + 0x3708], 0x28
mov ecx, dword [esp + 0x1a0]
add ecx, 0xfffffff0
call fcn.0042201a
mov ebx, dword [esp + 0x50]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
call edi
push esi
push ebx
push dword [esp + 0x2c]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x50]
jne 0x44ddf9
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x447972
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d6
push ecx
mov byte [esp + 0x3710], 0x2b
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
mov byte [esp + 0x3710], 0x28
call fcn.00440109
pop ecx
pop ecx
mov dword [esp + 0x20], eax
cmp eax, esi
jne 0x44dea4
push dword [0x5264a0]
lea eax, [esp + 0x54]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d6
lea eax, [esp + 0x1b4]
push eax
call fcn.0046c060
add esp, 8
mov byte [esp + 0x3710], 0x2c
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Successfully_learned_streaming_into:__s
push ecx
call fcn.0046bd30
add esp, 0xc
call fcn.0044568e
pop ecx
pop ecx
mov ecx, dword [esp + 0x1a8]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [ebx - 0x10]
call fcn.0042201a
mov ecx, dword [esp + 0x24]
jmp 0x44e206
push ebx
call edi
push dword [0x5264a0]
lea eax, [esp + 0x2e8]
push dword [esp + 0x24]
push eax
call fcn.00472ce0
add esp, 4
mov byte [esp + 0x3710], 0x2d
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Could_not_learn_streaming:__s
jmp 0x447a58
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
push str._RemoveSelf
push dword [eax + ecx*4]
call fcn.004b98c4
mov ebx, eax
neg ebx
sbb ebx, ebx
add esp, 4
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
inc ebx
call fcn.004247d6
push 0x529f50
call fcn.0042a1a6
pop ecx
pop ecx
test al, al
jne 0x44df2c
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x4472ee
mov eax, dword [0x529fac]
cmp dword [eax - 0xc], esi
jne 0x44df48
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
jmp 0x4474dd
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov edi, 0x529fac
push edi
call fcn.004247d6
call fcn.0046e3e0
pop ecx
cmp eax, esi
jne 0x44df87
cmp ebx, esi
je 0x44df75
call fcn.0046ef00
test eax, eax
jne 0x4472a4
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
jmp 0x447516
cmp dword [esp + 0x58], esi
je 0x44dfae
push 3
push dword [0x529f5c]
push str.Do_you_want_to_remove_the_application_and_all_of_its_settings__files_
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
je 0x44dfae
push 0x14
pop esi
jmp 0x447450
push esi
lea eax, [esp + 0x11c]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.AllUsers
mov dword [esp + 0x128], esi
call fcn.004247eb
push ecx
mov byte [esp + 0x3718], 0x17
mov eax, esp
mov dword [esp + 0x28], esp
push dword [0x529f5c]
push str.SoftwareVOS_s
push eax
call fcn.0046bd30
add esp, 0xc
push SysReAllocStringLen
mov byte [esp + 0x371c], 4
call fcn.0046ca90
add esp, 0x14
cmp eax, esi
je 0x44e05f
cmp dword [esp + 0x118], esi
je 0x44e05f
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.0046ab50
test eax, eax
jne 0x44e044
call fcn.0046aba0
test eax, eax
jne 0x4472a4
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x447295
call fcn.0046ad20
test eax, eax
jne 0x44e05f
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44629a
push 0x529f50
call fcn.0043c12b
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x529f5c]
push str.Removing__s
push eax
call fcn.0046bd30
add esp, 0xc
call fcn.00444e28
pop ecx
lea ecx, [esp + 0x120]
call fcn.0042248a
push 0x4e9fa0
mov byte [esp + 0x370c], 0x18
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push 1
push 1
push 1
lea eax, [esp + 0x12c]
push eax
push dword [0x5264a0]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x529fa8
call fcn.004247d6
push ecx
mov byte [esp + 0x3724], 0x19
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x529fb8
call fcn.004247d6
push ecx
mov byte [esp + 0x3728], 0x1a
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x529fb4
call fcn.004247d6
push ecx
mov byte [esp + 0x372c], 0x1b
mov ecx, esp
mov dword [esp + 0x44], esp
push edi
call fcn.004247d6
push ecx
mov byte [esp + 0x3730], 0x1c
mov ecx, esp
mov dword [esp + 0xa4], esp
push 0x529f5c
call fcn.004247d6
mov byte [esp + 0x3730], 0x18
call fcn.00440aad
add esp, 0x24
mov ecx, esp
mov dword [esp + 0x18], esp
push edi
call fcn.004247d6
call fcn.0046e420
pop ecx
cmp eax, esi
je 0x44e173
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x529f5c]
push str.Base_dir_could_not_be_emptied_for__s
jmp 0x44742b
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x529f5c]
push str.SoftwareVOS_s
push eax
call fcn.0046bd30
add esp, 0xc
mov edx, SysReAllocStringLen
call fcn.0046ce10
pop ecx
cmp eax, esi
je 0x44e1af
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
jmp 0x447827
cmp ebx, esi
je 0x44e1c0
call fcn.0046ef00
test eax, eax
jne 0x4472a4
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.__Removed_successfully
call fcn.004247eb
call fcn.00444e28
pop ecx
push dword [0x5264a0]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x529f5c]
push str.Application__s_removed_successfully
push eax
call fcn.0046bd30
add esp, 0xc
call fcn.0044568e
pop ecx
pop ecx
mov ecx, dword [esp + 0x120]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x447450
cmp dword [0x529bf0], esi
je 0x44e24a
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x529f98]
push str.CLoaderApp:_waiting_for_LoaderCanQuit__AutoUpdate_s_
push eax
call fcn.0046bd30
add esp, 0xc
call fcn.00444df8
pop ecx
push 0xffffffffffffffff
push dword [0x529bf0]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CLoaderApp:_done._Bye_
call fcn.004247eb
call fcn.00444df8
mov eax, dword [0x5264b0]
pop ecx
cmp eax, 0xa2c2a
je 0x4472a4
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
push str.CLoaderApp:_ExecWait:_g_LoaderExitCode_d
push ecx
call fcn.0046bd30
add esp, 0xc
call fcn.00444df8
pop ecx
push dword [0x5264b0]
jmp 0x4472a5