Function at 0x44c60e
Capabilities:
Accept command line arguments
Check for sandbox username or hostname
Check for time delay via gettickcount
Check if file exists
Contain obfuscated stackstrings
Copy file
Create process on windows
Delete file
Get file attributes
Get hostname
Move file
Parse pe header
Print debug messages
Query environment variable
Resolve function by parsing pe exports
Set current directory
Set environment variable
Set registry value
Terminate process
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4f7d1c
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x66d4
call fcn.004d3fb0
mov eax, dword [0x541100]
xor eax, esp
mov dword [esp + 0x66d0], eax
push ebx
push esi
push edi
mov eax, dword [0x541100]
xor eax, esp
push eax
lea eax, [esp + 0x66e8]
mov dword fs:[0], eax
lea eax, [esp + 0x340]
xor esi, esi
mov dword [esp + 0x3c], esi
push eax
mov dword [esp + 0x78], ecx
mov dword [esp + 0x344], 8
mov dword [esp + 0x348], 0xff
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov ecx, dword [esp + 0x74]
call fcn.004c7d29
mov ebx, 0x50206c
push ebx
lea ecx, [esp + 0x64]
call fcn.00422827
push ebx
lea ecx, [esp + 0x58]
mov dword [esp + 0x66f4], esi
call fcn.00422827
push ebx
lea ecx, [esp + 0x70]
mov byte [esp + 0x66f4], 1
call fcn.00422827
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x66f4], 2
call fcn.004766c0
pop ecx
lea ecx, [esp + 0x48]
call fcn.0042048d
mov byte [esp + 0x66f0], 4
mov edi, dword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea eax, [esp + 0x5c]
push eax
mov dword [esp + 0x7c], esi
call edi
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [esp + 0x38], eax
lea eax, [esp + 0x33c]
push eax
mov dword [esp + 0x34], esi
mov dword [esp + 0x54], esi
mov dword [esp + 0x5c], esi
mov dword [esp + 0x50], esi
call fcn.004766c0
pop ecx
push eax
mov ecx, 0x547320
mov byte [esp + 0x66f4], 5
call fcn.0042286b
mov byte [esp + 0x66f0], 4
mov ecx, dword [esp + 0x33c]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [esp + 0x230]
push eax
call fcn.004766c0
pop ecx
mov dword [esp + 0x2c], eax
mov byte [esp + 0x66f0], 6
call edi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov eax, dword [esp + 0x34]
push dword [eax]
push str.Loader:__s__CmdLine_s
push ecx
call fcn.004777e0
add esp, 0x10
call fcn.0044b362
pop ecx
mov byte [esp + 0x66f0], 4
mov ecx, dword [esp + 0x230]
add ecx, 0xfffffff0
call fcn.0042001a
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str._CEK_
mov edi, 0x400
call fcn.00422827
lea eax, [esp + 0x228]
push eax
mov ecx, edi
call fcn.0047df50
mov byte [esp + 0x66f8], 7
mov eax, dword [eax]
mov eax, dword [eax - 0xc]
add esp, 4
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
push str.Loader:_CEK:_Len_d
push ecx
call fcn.004777e0
add esp, 0xc
call fcn.0044b362
pop ecx
mov byte [esp + 0x66f0], 4
mov ecx, dword [esp + 0x224]
add ecx, 0xfffffff0
call fcn.0042001a
push esi
push 1
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x546f24], eax
cmp dword [esp + 0x38], esi
je 0x44d989
xor eax, eax
inc eax
cmp dword [esp + 0x5c], eax
mov dword [esp + 0x24], eax
jle 0x44d989
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x38]
push ecx
lea edi, [eax + ecx*4]
mov ecx, esp
mov dword [esp + 0x44], esp
push dword [edi]
call fcn.00422827
call fcn.0044b392
mov dword [esp], 0x512f40
call fcn.004ccc70
pop ecx
push eax
push str._ExeFile:
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
jne 0x44c884
push 0x512f40
call fcn.004ccc70
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x14]
jmp 0x44d971
push str._Confirm
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x44c8a3
mov dword [esp + 0x50], 1
jmp 0x44d977
push str._Quiet
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x44c8c5
or dword [esp + 0x4c], 2
mov dword [0x5433cc], esi
jmp 0x44d977
push str._AllUsers
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x44c918
mov dword [esp + 0x58], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.004764a0
test eax, eax
je 0x44da6f
call fcn.00476670
test eax, eax
jne 0x44d977
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Admin_rights_required
jmp 0x44da8a
push str._ErrorsOnly
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x44c939
mov dword [0x5433cc], 1
jmp 0x44d977
push str._Wait
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x44c955
or dword [esp + 0x4c], 1
jmp 0x44d977
push 0x51300c
call fcn.004ccc70
pop ecx
push eax
push str._Password:
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
je 0x44d952
push 0x513030
call fcn.004ccc70
pop ecx
push eax
push str._Password
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
je 0x44d952
push 0x51306c
call fcn.004ccc70
pop ecx
push eax
push str._EncryptionPwd:
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
jne 0x44c9e6
push str._EncryptionPwd_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x51306c
call fcn.004ccc70
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
push str.CYO_ENCRYPTION_PWD
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
jmp 0x44d977
push 0x5130bc
call fcn.004ccc70
pop ecx
push eax
push str._Properties:
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
jne 0x44cd66
push str._Properties_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 1
push esi
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x11b8]
push eax
call fcn.00490280
mov byte [esp + 0x66f0], 8
push dword [0x5433cc]
lea eax, [esp + 0x4c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x11b8]
push eax
call fcn.0044bc72
add esp, 0x10
lea eax, [esp + 0x11ac]
call fcn.00491160
lea ecx, [esp + 0x28]
call fcn.0042048d
lea ecx, [esp + 0x2c]
call fcn.0042048d
lea ecx, [esp + 0x68]
call fcn.0042048d
push 0x5130bc
mov byte [esp + 0x66f4], 0xb
call fcn.004ccc70
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x170]
call fcn.00422827
lea eax, [esp + 0x348]
push eax
mov byte [esp + 0x66f4], 0xc
call fcn.00430cc8
mov byte [esp + 0x66f0], 0xd
mov dword [esp + 0x188], esi
push ecx
mov ecx, esp
mov dword [esp + 0x44], esp
push 0x512848
lea edi, [esp + 0x190]
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0xe
lea eax, [esp + 0x174]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
lea eax, [esp + 0x234]
push eax
mov byte [esp + 0x66fc], 0xd
call fcn.0047b9d0
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x66f4], 0xf
call fcn.0042286b
mov byte [esp + 0x66f0], 0xd
mov ecx, dword [esp + 0x22c]
add ecx, 0xfffffff0
call fcn.0042001a
push esi
push 0x3d
lea ecx, [esp + 0x30]
call fcn.00424fc5
mov edi, eax
cmp edi, 0xffffffff
je 0x44cbe7
push edi
lea eax, [esp + 0x238]
push eax
lea ecx, [esp + 0x30]
call fcn.00422a16
mov byte [esp + 0x66f0], 0x10
call fcn.0042296d
push eax
lea ecx, [esp + 0x30]
call fcn.0042286b
mov byte [esp + 0x66f0], 0xd
mov ecx, dword [esp + 0x234]
add ecx, 0xfffffff0
call fcn.0042001a
mov eax, dword [esp + 0x2c]
cmp dword [eax - 0xc], esi
je 0x44cbe7
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x6c]
call fcn.0042286b
push esi
lea ecx, [esp + 0x6c]
lea eax, [edi + 1]
push ecx
call fcn.004228be
lea eax, [esp + 0x68]
push eax
push ecx
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x354]
push eax
call fcn.00430d19
pop ecx
mov ecx, eax
call fcn.0042286b
cmp dword [esp + 0x188], 0xffffffff
jne 0x44cad6
mov eax, dword [esp + 0x360]
mov eax, dword [eax]
lea edi, [esp + 0x348]
lea esi, [esp + 0x84]
call fcn.00430fc8
jmp 0x44ccd5
lea esi, [esp + 0x84]
call fcn.00429d7f
push eax
lea ecx, [esp + 0x128]
call fcn.00422812
mov byte [esp + 0x66f0], 0x11
call fcn.00429d7f
add eax, 4
push eax
lea ecx, [esp + 0x1c]
call fcn.00422812
push str.Branding
lea eax, [esp + 0x128]
mov byte [esp + 0x66f4], 0x12
call fcn.004228aa
test eax, eax
je 0x44da9b
lea edi, [esp + 0x124]
call fcn.00429b78
push dword [eax]
lea eax, [esp + 0x24c]
push str.CAMEYO__s
push eax
call fcn.004777e0
mov esi, dword [esp + 0x24]
mov eax, dword [eax]
add esp, 0xc
push esi
push eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov ecx, dword [esp + 0x248]
add ecx, 0xfffffff0
call fcn.0042001a
lea ecx, [esi - 0x10]
call fcn.0042001a
mov byte [esp + 0x66f0], 0xd
mov ecx, dword [esp + 0x124]
add ecx, 0xfffffff0
call fcn.0042001a
lea esi, [esp + 0x84]
call fcn.0042a149
mov eax, dword [esp + 0x360]
lea edi, [esp + 0x348]
lea esi, [esp + 0xb4]
call fcn.00430fc8
mov edi, esi
lea esi, [esp + 0x84]
call fcn.0042cdc6
test al, al
je 0x44cc16
lea eax, [esp + 0x348]
push eax
mov byte [esp + 0x66f4], 0xc
call fcn.00430a94
mov ecx, dword [esp + 0x16c]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x68]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x2c]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x28]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [esp + 0x11ac]
mov byte [esp + 0x66f0], 4
call fcn.004259b3
jmp 0x44d5a5
push str._SafeMode
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x44cdb2
push str._SafeMode_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov edi, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
push 0x5044a0
push str.CAMEYO_LEGACYREG
call edi
push str.Disk
push str.CAMEYO_VIRTMODE
call edi
push 0x5043e4
push str.CAMEYO_EARLYINJECTION
call edi
jmp 0x44d977
push 0x5131d8
call fcn.004ccc70
pop ecx
push eax
push str._Services:
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
jne 0x44ce2e
push dword [edi]
lea ecx, [esp + 0x13c]
call fcn.00422827
push 0x5131d8
mov byte [esp + 0x66f4], 0x13
call fcn.004ccc70
pop ecx
push esi
lea ecx, [esp + 0x13c]
push ecx
call fcn.004228be
push dword [esp + 0x138]
push str.CAMEYO_SERVICES
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov byte [esp + 0x66f0], 4
mov ecx, dword [esp + 0x138]
add ecx, 0xfffffff0
call fcn.0042001a
jmp 0x44d977
push str._Register
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x44daaf
push str._Stop
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x44db60
push str._Remove
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x455b9b
push str._RemoveSelf
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x455b9b
push str._Remove:Proc
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x44dc83
push str._Remove:Reg
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x44de6b
push str._LearnStreaming
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x4559ba
push 0x51378c
call fcn.004ccc70
pop ecx
push eax
push str._LearnStreaming:
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
je 0x4559ba
push str._UpdateBasicSettings
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x44cf0a
mov dword [esp + 0x30], 1
jmp 0x44d977
push str._Repackage
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x44e072
push str._CreateDiff
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x455801
push 0x5139b0
call fcn.004ccc70
pop ecx
push eax
push str._CreateDiff:
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
je 0x455801
push str._exec
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x44e24e
push 0x5139f4
call fcn.004ccc70
pop ecx
push eax
push str._Patch
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
je 0x4552b7
push 0x513a0c
call fcn.004ccc70
pop ecx
push eax
push str._InstSandbox
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
je 0x4552b7
push str._ShowStreaming
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x44e413
push str._Break
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x44e4f5
push str._Unbreak
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x44ec39
push str._Integrate
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x454e83
push str._Integrate:once
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x454e83
push str._FullIntegrate
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x454e83
push str._Unintegrate
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x44f46d
push str._CreateShortcuts
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x4547ee
push 0x5144d0
call fcn.004ccc70
pop ecx
push eax
push str._CreateShortcuts:
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
je 0x4547ee
push str._Perf
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x44f4d5
push str._ExtractLog
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x44f8db
push str._ExtractAll
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x44fb27
push 0x514708
call fcn.004ccc70
pop ecx
push eax
push str._Extract:
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
je 0x44fc08
push str._AutoUpdateXml
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x44fe15
push str._Info
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x44ff68
push str._Sandbox
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x45001d
push 0x514848
call fcn.004ccc70
pop ecx
push eax
push str._AddSandbox:
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
je 0x450220
push 0x5148b0
call fcn.004ccc70
pop ecx
push eax
push str._GetProperty:
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
je 0x450518
push str._SaveProperties
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x454615
push str._SaveAllProperties
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x454615
push str._InfoLog
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x450730
push str._Ini
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x4544ec
push str._ShowIni
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x4544ec
push str._ExtractIni
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x450932
push str._csv
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x450ac7
push str._EngineVer
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x450ebf
push str._ChangeLoader
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x44d246
mov eax, dword [esp + 0x24]
inc eax
cmp dword [esp + 0x5c], eax
jg 0x451000
push str._ChangeEngine
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x44d267
mov eax, dword [esp + 0x24]
inc eax
cmp dword [esp + 0x5c], eax
jg 0x45132a
push str._ChangeIni
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x44d288
mov eax, dword [esp + 0x24]
inc eax
cmp dword [esp + 0x5c], eax
jg 0x4516bd
push str._TestAutoUpdate
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x44d2ab
mov eax, dword [esp + 0x24]
add eax, 5
cmp dword [esp + 0x5c], eax
jg 0x451876
push str._Debug
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x4544b5
push str._DbgNow
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x4544b5
push str._ForceMenu
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x44d347
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x506d88
mov dword [esp + 0x80], 1
call fcn.00422827
push ecx
mov dword [esp + 0x66f8], 0x148
mov eax, esp
mov dword [esp + 0x48], esp
push dword [0x5472c4]
push str.SoftwareVOS_s
push eax
call fcn.004777e0
add esp, 0xc
mov edx, SysReAllocStringLen
mov dword [esp + 0x66f8], 4
call fcn.00478e00
pop ecx
pop ecx
jmp 0x44d977
push str._ShowTree
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x451985
push str._RegDump
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x451a51
push str._SetFileFlags
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x44d396
mov eax, dword [esp + 0x24]
add eax, 2
cmp dword [esp + 0x5c], eax
jg 0x451bcc
push str._DbgZip:
call fcn.004ccd1a
pop ecx
push eax
push str._DbgZip:
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
je 0x451df1
push str._DbgNow
call fcn.004ccd1a
pop ecx
push eax
push str._DbgNow
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
je 0x451e31
push str._Vintegrate
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x454319
push 0x5152e0
call fcn.004ccc70
pop ecx
push eax
push str._Vintegrate:
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
je 0x454319
push str._VintegrateRecursive
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x454319
push 0x515338
call fcn.004ccc70
pop ecx
push eax
push str._VintegrateRecursive:
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
je 0x454319
push str._Vunintegrate
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x451f5a
push str._Vmanager
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x4520f3
push 0x5153f8
call fcn.004ccc70
pop ecx
push eax
push str._ProcessList
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
je 0x4521a0
push str._WaitFor
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x4524f6
push 0x515594
call fcn.004ccc70
pop ecx
push eax
push str._WaitForInactivity:
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
je 0x4525b7
push str._GfxSvr
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x44d530
call fcn.004301c2
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x401
mov edi, 0x5472b8
call fcn.004969c0
mov dword [esp], 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x403
call fcn.004969c0
mov dword [esp], 0x493e0
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x44d977
push 0x51597c
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x44d5ac
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.open
xor ebx, ebx
call fcn.00422827
push esi
push ecx
mov dword [esp + 0x66fc], 0x181
mov ecx, esp
mov dword [esp + 0x4c], esp
push str._Troubleshoot
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x82
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.00422812
mov edi, esi
mov dword [esp + 0x6700], 4
call fcn.00476120
add esp, 0x10
mov ebx, 0x50206c
xor esi, esi
jmp 0x44d977
push str._Troubleshoot
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x452b14
push str._AutoUpdate
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x452b3a
push str._VirtRegSyncExport
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x452bcf
push str._StartStreaming
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x452c3d
push str._JumpTo
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x452c58
push str._SvcRegister
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x452cf7
push str._SvcStart
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x452dfd
push str._SvcRegisterStart
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x452eb8
push str._SvcStop
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x453016
push str._SvcRemove
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x4530d3
push 0x515d78
call fcn.004ccc70
pop ecx
push eax
push str._ScmDirectInit:
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
je 0x453191
push str._AuthCheck
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x454209
push str._AuthCheck:Force
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x454209
push str._RepoSync
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x44d6f8
mov eax, dword [esp + 0x24]
inc eax
cmp dword [esp + 0x5c], eax
jg 0x453239
push str._MergeRegistry
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x453311
push str._OpenFile
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x44d72f
mov eax, dword [esp + 0x24]
inc eax
cmp dword [esp + 0x5c], eax
jg 0x453406
push 0x5160a8
call fcn.004ccd1a
pop ecx
push eax
push 0x5160a8
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
je 0x4537a8
push dword [edi]
lea ecx, [esp + 0x100]
call fcn.00422827
push esi
push ecx
mov dword [esp + 0x66f8], 0x1be
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x500aa0
call fcn.00422827
push ecx
mov esi, esp
mov byte [esp + 0x66fc], 0xbf
mov dword [esp + 0x28], esp
push 0x5c
push ecx
lea eax, [esp + 0x110]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.00422812
push esi
call fcn.00477b10
add esp, 0xc
mov byte [esp + 0x66fc], 0xbe
call fcn.0047bf00
xor esi, esi
add esp, 0xc
cmp eax, esi
je 0x44d7fc
push 0x50ebd0
push ecx
lea eax, [esp + 0x104]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.00422812
lea eax, [esp + 0x1b0]
push eax
call fcn.00477870
or dword [esp + 0x48], 0x10
pop ecx
pop ecx
call fcn.004228aa
mov byte [esp + 0x37], 1
test eax, eax
je 0x44d801
mov byte [esp + 0x37], 0
test byte [esp + 0x3c], 0x10
je 0x44d819
and dword [esp + 0x3c], 0xffffffef
lea ecx, [esp + 0x1a8]
call fcn.004204c9
cmp byte [esp + 0x37], 0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
jne 0x4540f2
mov eax, dword [esp + 0x3c]
push dword [eax]
call fcn.00422827
lea eax, [esp + 0x2a0]
push eax
call fcn.0047d690
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x70]
mov byte [esp + 0x66f4], 0xc4
call fcn.0042286b
lea ecx, [esp + 0x29c]
mov byte [esp + 0x66f0], 0xbe
call fcn.004204c9
call fcn.0044c5b3
test eax, eax
je 0x44d92b
cmp dword [esp + 0x5c], 1
jle 0x44d92b
cmp dword [esp + 0x5c], 2
jne 0x44d8df
push 0x50ebd0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [edi]
call fcn.00422827
lea eax, [esp + 0x1b8]
push eax
call fcn.00477870
pop ecx
pop ecx
mov byte [esp + 0x66f4], 0xc5
or dword [esp + 0x40], 0x20
call fcn.004228aa
test eax, eax
jne 0x44d8df
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push dword [edi]
call fcn.00422827
call fcn.0047a330
pop ecx
mov byte [esp + 0x37], 1
cmp eax, esi
jne 0x44d8e4
mov byte [esp + 0x37], 0
mov dword [esp + 0x66f0], 0x1be
test byte [esp + 0x3c], 0x20
je 0x44d907
and dword [esp + 0x3c], 0xffffffdf
lea ecx, [esp + 0x1b0]
call fcn.004204c9
cmp byte [esp + 0x37], 0
je 0x44d915
push str.PackageEditor.exe
jmp 0x44d930
call fcn.0040b668
test eax, eax
mov eax, str.Packager64.exe
jne 0x44d928
mov eax, str.Packager.exe
push eax
jmp 0x44d930
push 0x50d0dc
lea ecx, [esp + 0x58]
call fcn.00422880
lea ecx, [esp + 0xfc]
mov dword [esp + 0x66f0], 4
call fcn.004204c9
jmp 0x44d977
push str._Password_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x51300c
call fcn.004ccc70
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x48]
push eax
call fcn.00422880
inc dword [esp + 0x24]
mov eax, dword [esp + 0x24]
cmp eax, dword [esp + 0x5c]
jl 0x44c82c
push 1
push esi
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0xd38]
push eax
call fcn.00490280
push 0xffffffffffffffff
mov dword [esp + 0x66f4], 0x1c6
push dword [esp + 0x50]
lea eax, [esp + 0x74]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
push ecx
mov byte [esp + 0x6700], 0xc7
lea eax, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00422812
push ecx
mov byte [esp + 0x6704], 0xc8
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
call fcn.00422812
mov byte [esp + 0x6704], 0xc9
push dword [esp + 0x8c]
lea eax, [esp + 0x2c]
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
lea eax, [esp + 0xd48]
push eax
mov byte [esp + 0x6710], 0xc6
call fcn.0043e6ec
add esp, 0x20
cmp eax, 2
jne 0x455ed3
call fcn.0044bb2c
push esi
push dword [0x5472c4]
push str.Application_is_now_integrated_into_your_system
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
lea eax, [esp + 0xd2c]
call fcn.00491160
lea eax, [esp + 0xd2c]
jmp 0x4520de
call fcn.004764f0
test eax, eax
jne 0x44da94
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Elevation_failed
call fcn.00422827
call fcn.0044bba9
push esi
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.License_required.
jmp 0x44da8a
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
mov esi, 0x5472b8
push esi
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x44dae5
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_obtain_INI_info_from_resource_
jmp 0x44da8a
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
mov ecx, esi
call fcn.0043d731
pop ecx
mov ecx, dword [esp + 0x48]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x6c]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x54]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x60]
add ecx, 0xfffffff0
call fcn.0042001a
xor eax, eax
mov ecx, dword [esp + 0x66e8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x66d0]
xor ecx, esp
call fcn.004cc3b2
mov esp, ebp
pop ebp
ret
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
push 0x5472b8
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x44db93
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x547310
call fcn.00422812
push ecx
mov byte [esp + 0x66f8], 0x14
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x547320
call fcn.00422812
push ecx
mov byte [esp + 0x66fc], 0x15
mov ecx, esp
mov dword [esp + 0x4c], esp
push 0x547314
call fcn.00422812
push ecx
mov byte [esp + 0x6700], 0x16
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x5472c4
call fcn.00422812
mov byte [esp + 0x6700], 4
call fcn.00446d96
add esp, 0x10
cmp eax, esi
je 0x44dc29
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5472c4]
push str.Cannot_stop_application__s
push eax
call fcn.004777e0
add esp, 0xc
jmp 0x44da8f
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.__Stopped_successfully
call fcn.00422827
call fcn.0044b392
pop ecx
mov ecx, dword [esp + 0x48]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x6c]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x54]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x60]
add ecx, 0xfffffff0
call fcn.0042001a
mov eax, esi
jmp 0x44db3c
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
push 0x5472b8
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x44dcb6
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
mov eax, dword [0x547314]
cmp dword [eax - 0xc], esi
jne 0x44dcdd
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5472c4]
push str.Cannot_obtain_base_dir_for__s
jmp 0x44dc1b
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
mov edi, 0x547314
push edi
call fcn.00422812
call fcn.0047a330
pop ecx
cmp eax, esi
jne 0x44dd28
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5472c4]
push str.Application_is_not_deployed_on_this_machine:__s
push eax
call fcn.004777e0
add esp, 0xc
call fcn.0044bbf8
pop ecx
pop ecx
push 5
jmp 0x44da95
cmp dword [esp + 0x50], esi
je 0x44dd4b
push 3
push dword [0x5472c4]
push str.Do_you_want_to_stop_the_application_
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x455c66
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x5472c4]
push str.Removing_processes:__s
push eax
call fcn.004777e0
add esp, 0xc
call fcn.0044b392
pop ecx
lea ecx, [esp + 0x174]
call fcn.0042048d
push 0x50057c
mov byte [esp + 0x66f4], 0x1d
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push esi
push esi
push 1
lea eax, [esp + 0x180]
push eax
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x547310
call fcn.00422812
push ecx
mov byte [esp + 0x670c], 0x1e
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x547320
call fcn.00422812
push ecx
mov byte [esp + 0x6710], 0x1f
mov ecx, esp
mov dword [esp + 0x60], esp
push 0x54731c
call fcn.00422812
push ecx
mov byte [esp + 0x6714], 0x20
mov ecx, esp
mov dword [esp + 0x3c], esp
push edi
call fcn.00422812
push ecx
mov byte [esp + 0x6718], 0x21
mov ecx, esp
mov dword [esp + 0xa0], esp
push 0x5472c4
call fcn.00422812
mov byte [esp + 0x6718], 0x1d
call fcn.00447190
add esp, 0x24
mov ecx, esp
mov dword [esp + 0x14], esp
push str.__Stopped_successfully
call fcn.00422827
call fcn.0044b392
pop ecx
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5472c4]
push str.Application__s_stopped_successfully
push eax
call fcn.004777e0
add esp, 0xc
call fcn.0044bbf8
pop ecx
pop ecx
mov ecx, dword [esp + 0x174]
jmp 0x455ec6
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
push 0x5472b8
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x44de9e
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
mov eax, dword [0x547314]
cmp dword [eax - 0xc], esi
jne 0x44deba
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
jmp 0x44dccd
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
mov edi, 0x547314
push edi
call fcn.00422812
call fcn.0047a330
pop ecx
cmp eax, esi
jne 0x44dee8
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
jmp 0x44dd06
cmp dword [esp + 0x50], esi
je 0x44df0b
push 3
push dword [0x5472c4]
push str.Do_you_want_to_remove_the_applications_registry_
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x455c66
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x5472c4]
push str.Removing_registry:__s
push eax
call fcn.004777e0
add esp, 0xc
call fcn.0044b392
pop ecx
lea ecx, [esp + 0x17c]
call fcn.0042048d
push 0x50057c
mov byte [esp + 0x66f4], 0x22
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push esi
push 1
push esi
lea eax, [esp + 0x188]
push eax
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x547310
call fcn.00422812
push ecx
mov byte [esp + 0x670c], 0x23
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x547320
call fcn.00422812
push ecx
mov byte [esp + 0x6710], 0x24
mov ecx, esp
mov dword [esp + 0x60], esp
push 0x54731c
call fcn.00422812
push ecx
mov byte [esp + 0x6714], 0x25
mov ecx, esp
mov dword [esp + 0x3c], esp
push edi
call fcn.00422812
push ecx
mov byte [esp + 0x6718], 0x26
mov ecx, esp
mov dword [esp + 0xa0], esp
push 0x5472c4
call fcn.00422812
mov byte [esp + 0x6718], 0x22
call fcn.00447190
add esp, 0x24
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x5472c4]
push str.SoftwareVOS_s
push eax
call fcn.004777e0
add esp, 0xc
mov edx, SysReAllocStringLen
call fcn.004788c0
pop ecx
cmp eax, esi
je 0x44e027
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5472c4]
push str.Registry_could_not_be_emptied_for__s
jmp 0x44dc1b
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.__Registry_removed_successfully
call fcn.00422827
call fcn.0044b392
pop ecx
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5472c4]
push str.Application__ss_registry_removed_successfully
push eax
call fcn.004777e0
add esp, 0xc
call fcn.0044bbf8
pop ecx
pop ecx
mov ecx, dword [esp + 0x17c]
jmp 0x455ec6
lea ecx, [esp + 0x2c]
call fcn.0042048d
lea ecx, [esp + 0x4c]
call fcn.0042048d
mov byte [esp + 0x66f0], 0x2f
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x5c], ecx
jle 0x44e0ac
mov ecx, dword [esp + 0x38]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x30]
call fcn.00422880
jmp 0x44e0ba
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x30]
call fcn.0042286b
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..new.exe
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0x30
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
lea eax, [esp + 0x2ac]
push eax
mov byte [esp + 0x66fc], 0x2f
call fcn.004779a0
add esp, 0xc
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x66f4], 0x31
call fcn.0042286b
mov byte [esp + 0x66f0], 0x2f
mov ecx, dword [esp + 0x2a4]
add ecx, 0xfffffff0
call fcn.0042001a
push ecx
lea eax, [esp + 0x50]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
call fcn.0047ad80
mov edi, dword [esp + 0x50]
mov ebx, dword [esp + 0x30]
pop ecx
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x4c]
jne 0x44e16d
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.00422812
jmp 0x44da8f
push dword [esp + 0x30]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.00422812
call fcn.0044625d
pop ecx
pop ecx
mov dword [esp + 0x30], eax
cmp eax, esi
jne 0x44e1fa
push dword [0x5433cc]
lea eax, [esp + 0x50]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x1c4]
push eax
call fcn.00477b10
add esp, 8
mov byte [esp + 0x66f8], 0x32
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Successfully_repackaged_into:__s
push ecx
call fcn.004777e0
add esp, 0xc
call fcn.0044bbf8
pop ecx
pop ecx
mov ecx, dword [esp + 0x1b8]
add ecx, 0xfffffff0
call fcn.0042001a
lea ecx, [edi - 0x10]
call fcn.0042001a
lea ecx, [ebx - 0x10]
jmp 0x455ec9
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esp + 0x30], 0x10
push dword [0x5433cc]
jne 0x44e21f
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Application_not_deployed_on_this_machine._Nothing_to_repackage.
jmp 0x44da8a
push dword [esp + 0x34]
lea eax, [esp + 0x370]
push eax
call fcn.0047ec40
add esp, 4
mov byte [esp + 0x66f8], 0x33
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Could_not_repackage:__s
push ecx
jmp 0x44dc1c
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x24]
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push dword [eax + edx*4]
call fcn.00422827
lea eax, [esp + 0x2b0]
push eax
call fcn.0047d690
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x70]
mov byte [esp + 0x66f4], 0x3a
call fcn.0042286b
push eax
lea ecx, [esp + 0x58]
call fcn.0042286b
push eax
lea ecx, [esp + 0x118]
call fcn.00422812
mov byte [esp + 0x66f0], 0x3c
mov ecx, dword [esp + 0x2ac]
add ecx, 0xfffffff0
call fcn.0042001a
push 1
lea eax, [esp + 0x1c4]
push eax
lea ecx, [esp + 0x11c]
call fcn.00422a16
push 0x50da14
push eax
call fcn.00422b20
pop ecx
pop ecx
mov ecx, dword [esp + 0x1c0]
add ecx, 0xfffffff0
mov byte [esp + 0x37], al
call fcn.0042001a
cmp byte [esp + 0x37], 0
lea ecx, [esp + 0x54]
je 0x44e2fb
push 1
push 0x22
jmp 0x44e2fe
push esi
push 0x20
call fcn.00424fc5
mov edi, eax
cmp edi, 0xffffffff
je 0x44e372
push edi
lea eax, [esp + 0x2b8]
push eax
lea ecx, [esp + 0x5c]
call fcn.00422a16
push 0x50d900
mov byte [esp + 0x66f4], 0x3d
call fcn.00443f14
push eax
lea ecx, [esp + 0x58]
call fcn.0042286b
mov byte [esp + 0x66f0], 0x3c
mov ecx, dword [esp + 0x2b4]
add ecx, 0xfffffff0
call fcn.0042001a
push esi
lea ecx, [esp + 0x70]
lea eax, [edi + 1]
push ecx
call fcn.004228be
lea eax, [esp + 0x6c]
call fcn.0042296d
push eax
lea ecx, [esp + 0x70]
call fcn.0042286b
jmp 0x44e397
push 0x50d900
lea eax, [esp + 0x118]
call fcn.00443f14
push eax
lea ecx, [esp + 0x58]
call fcn.0042286b
push ebx
lea ecx, [esp + 0x70]
call fcn.00422880
xor ecx, ecx
lea eax, [esp + 0x54]
call fcn.00429bc1
movzx eax, ax
cmp ax, 0x25
jne 0x44e3b6
lea eax, [esp + 0x54]
push eax
call fcn.00488b60
pop ecx
push ecx
lea eax, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
lea eax, [esp + 0x1cc]
push eax
call fcn.00489990
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x66f4], 0x3e
call fcn.0042286b
mov ecx, dword [esp + 0x1c8]
add ecx, 0xfffffff0
call fcn.0042001a
mov byte [esp + 0x66f0], 4
mov ecx, dword [esp + 0x114]
add ecx, 0xfffffff0
call fcn.0042001a
jmp 0x44d989
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.ShowStreaming:
call fcn.00422827
call fcn.0044b392
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x8b8]
push eax
call fcn.00490280
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x66fc], 0x4c
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x4d
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6704], 0x4e
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
call fcn.00422812
push 2
push ecx
mov byte [esp + 0x670c], 0x4f
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
lea eax, [esp + 0x8c8]
push eax
mov byte [esp + 0x6710], 0x4c
call fcn.0043e6ec
add esp, 0x20
lea ecx, [esp + 0x8ac]
call fcn.0043d1f9
lea eax, [esp + 0x8ac]
call fcn.00491160
mov byte [esp + 0x66f0], 4
lea eax, [esp + 0x8ac]
call fcn.004259b3
jmp 0x44dc40
lea ecx, [esp + 0x2c]
call fcn.0042048d
mov byte [esp + 0x66f0], 0x50
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x5c], ecx
jle 0x44e526
mov ecx, dword [esp + 0x38]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x30]
call fcn.00422880
jmp 0x44e534
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x30]
call fcn.0042286b
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..break
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0x51
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
lea eax, [esp + 0x78]
push eax
mov byte [esp + 0x66fc], 0x50
call fcn.004779a0
add esp, 0xc
push 1
push esi
push ecx
mov byte [esp + 0x66fc], 0x52
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x4f0]
push eax
call fcn.00490280
mov byte [esp + 0x66f0], 0x53
push dword [0x5433cc]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x4f0]
push eax
call fcn.0044bc72
add esp, 0x10
cmp dword [esp + 0x56c], esi
jne 0x44e5ed
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_load_containers_
jmp 0x44da8a
push ecx
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
call fcn.00479570
pop ecx
push dword [esp + 0x70]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x44e62e
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x78]
push str.Cant_empty__s
jmp 0x44dc1b
mov esi, dword [esp + 0x70]
call fcn.0047a410
test eax, eax
jne 0x44e656
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x78]
push str.Cant_create__s
jmp 0x44dc1b
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
mov ebx, 0x50057c
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x66fc], 0x54
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.VirtApp.ini
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x55
lea eax, [esp + 0x80]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00422812
mov byte [esp + 0x6700], 0x53
call fcn.004770a0
add esp, 8
mov byte [esp + 0x66f8], 0x56
mov ecx, esp
mov dword [esp + 0x24], esp
mov esi, str.Main
push esi
call fcn.00422827
push 3
pop ecx
lea edi, [esp + 0x4ec]
mov byte [esp + 0x66f8], 0x53
call fcn.00492670
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x66fc], 0x57
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.AppVirtDll.dll
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x58
lea eax, [esp + 0x80]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00422812
mov byte [esp + 0x6700], 0x53
call fcn.004770a0
add esp, 8
mov byte [esp + 0x66f8], 0x59
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.00422827
push 2
pop ecx
lea edi, [esp + 0x4ec]
mov byte [esp + 0x66f8], 0x53
call fcn.00492670
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x66fc], 0x5a
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.AppVirtDll64.dll
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x5b
lea eax, [esp + 0x80]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00422812
mov byte [esp + 0x6700], 0x53
call fcn.004770a0
add esp, 8
mov byte [esp + 0x66f8], 0x5c
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.00422827
push 8
pop ecx
lea edi, [esp + 0x4ec]
mov byte [esp + 0x66f8], 0x53
call fcn.00492670
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x66fc], 0x5d
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.StubExe.exe
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x5e
lea eax, [esp + 0x80]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00422812
mov byte [esp + 0x6700], 0x53
call fcn.004770a0
add esp, 8
mov byte [esp + 0x66f8], 0x5f
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.00422827
push 9
pop ecx
lea edi, [esp + 0x4ec]
mov byte [esp + 0x66f8], 0x53
call fcn.00492670
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x66fc], 0x60
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.StubExe64.exe
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x61
lea eax, [esp + 0x80]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00422812
mov byte [esp + 0x6700], 0x53
call fcn.004770a0
add esp, 8
mov byte [esp + 0x66f8], 0x62
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.00422827
push 0xa
pop ecx
lea edi, [esp + 0x4ec]
mov byte [esp + 0x66f8], 0x53
call fcn.00492670
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x66fc], 0x63
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.VirtFiles.db
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x64
lea eax, [esp + 0x80]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00422812
mov byte [esp + 0x6700], 0x53
call fcn.004770a0
add esp, 8
mov byte [esp + 0x66f8], 0x65
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.00422827
push 4
pop ecx
lea edi, [esp + 0x4ec]
mov byte [esp + 0x66f8], 0x53
call fcn.00492670
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x66fc], 0x66
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.SandboxCfg.db
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x67
mov ecx, esp
lea eax, [esp + 0x80]
mov dword [esp + 0x28], esp
push eax
call fcn.00422812
mov byte [esp + 0x6700], 0x53
call fcn.004770a0
add esp, 8
mov byte [esp + 0x66f8], 0x68
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.00422827
push 5
pop ecx
lea edi, [esp + 0x4ec]
mov byte [esp + 0x66f8], 0x53
call fcn.00492670
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x66fc], 0x69
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.VirtReg.export
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x6a
lea eax, [esp + 0x80]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00422812
mov byte [esp + 0x6700], 0x53
call fcn.004770a0
add esp, 8
mov byte [esp + 0x66f8], 0x6b
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.00422827
push 6
pop ecx
lea edi, [esp + 0x4ec]
mov byte [esp + 0x66f8], 0x53
call fcn.00492670
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x66fc], 0x6c
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.VirtReg.dat
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x6d
lea eax, [esp + 0x80]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00422812
mov byte [esp + 0x6700], 0x53
call fcn.004770a0
add esp, 8
mov byte [esp + 0x66f8], 0x6e
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.00422827
push 0xb
pop ecx
lea edi, [esp + 0x4ec]
mov byte [esp + 0x66f8], 0x53
call fcn.00492670
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x66fc], 0x6f
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.SysDllSubdirs.txt
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x70
lea eax, [esp + 0x80]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00422812
mov byte [esp + 0x6700], 0x53
call fcn.004770a0
add esp, 8
mov byte [esp + 0x66f8], 0x71
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.00422827
push 7
pop ecx
lea edi, [esp + 0x4ec]
mov byte [esp + 0x66f8], 0x53
call fcn.00492670
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x66fc], 0x72
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.VirtFiles.vfc
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x73
lea eax, [esp + 0x80]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00422812
mov byte [esp + 0x6700], 0x53
call fcn.004770a0
add esp, 8
mov byte [esp + 0x66f8], 0x74
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.00422827
mov byte [esp + 0x66f8], 0x53
xor ecx, ecx
inc ecx
lea edi, [esp + 0x4ec]
call fcn.00492670
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x78]
push 0x513ee4
push eax
call fcn.004777e0
add esp, 0xc
call fcn.0044bbf8
pop ecx
pop ecx
push 0
jmp 0x44da95
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.Unbreak:
call fcn.00422827
call fcn.0044b392
mov ecx, esp
mov dword [esp + 0x14], esp
push str..break
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0x75
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
lea eax, [esp + 0x88]
push eax
mov byte [esp + 0x66fc], 4
call fcn.004779a0
add esp, 0xc
mov byte [esp + 0x66f0], 0x76
push dword [esp + 0x80]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x44ecc8
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x88]
push str.Dir_doesnt_exist:__s
jmp 0x44dc1b
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x50]
call fcn.00422812
mov edi, str..old
push edi
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x2c4]
push eax
mov byte [esp + 0x66fc], 0x77
call fcn.00422a76
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x2bc]
add ecx, 0xfffffff0
call fcn.0042001a
push edi
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x1d8]
push eax
call fcn.00422a76
add esp, 0xc
push dword [eax]
push dword [esp + 0x50]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov ecx, dword [esp + 0x1d0]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.0042001a
test bl, bl
je 0x44ed64
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_rename_myself_to_.old
jmp 0x44da8a
push edi
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x2cc]
push eax
call fcn.00422a76
mov eax, dword [eax]
add esp, 0xc
push esi
push dword [esp + 0x50]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [esp + 0x2c4]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.0042001a
test bl, bl
je 0x44edba
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_copy_myself
jmp 0x44da8a
push 1
push ecx
mov dword [esp + 0x18], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov dword [esp + 0x128], esi
push 0x50057c
lea ebx, [esp + 0x12c]
lea esi, [esp + 0x194]
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x78
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.VirtApp.ini
call fcn.00422827
push ecx
mov byte [esp + 0x6704], 0x79
lea eax, [esp + 0x94]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
call fcn.00422812
mov byte [esp + 0x6704], 0x77
call fcn.004770a0
add esp, 0xc
mov edi, esi
call fcn.00477f70
pop ecx
pop ecx
cmp eax, 0xffffffff
je 0x44f456
xor edi, edi
cmp dword [esp + 0x11c], edi
je 0x44f456
push dword [esp + 0x11c]
mov ecx, dword [esp + 0x188]
lea eax, [esp + 0x34]
push eax
call fcn.00477cd0
mov byte [esp + 0x66f8], 0x7a
push dword [esp + 0x18c]
call fcn.004ccf97
add esp, 0xc
push 1
push 1
push ecx
lea eax, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x460]
push eax
call fcn.00490280
mov byte [esp + 0x66f0], 0x7b
push dword [0x5433cc]
lea eax, [esp + 0x4c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x460]
push eax
call fcn.0044bc72
add esp, 0x10
cmp dword [esp + 0x4dc], edi
jne 0x44eef1
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_begin_to_update_resource
jmp 0x44da8a
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
mov esi, str.Main
push esi
call fcn.00422827
mov byte [esp + 0x66f4], 0x7c
mov eax, dword [esp + 0x34]
mov eax, dword [eax - 0xc]
add eax, eax
push edi
push eax
lea ecx, [esp + 0x3c]
call fcn.00422fbb
push eax
lea eax, [esp + 0x464]
push eax
mov byte [esp + 0x6704], 0x7b
call fcn.00491b30
cmp eax, edi
je 0x44ef50
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_update_INI_resource
jmp 0x44da8a
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.00422827
push 0
push 2
push ecx
mov byte [esp + 0x6700], 0x7d
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
mov ebx, 0x50057c
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6708], 0x7e
mov ecx, esp
mov dword [esp + 0x58], esp
push str.AppVirtDll.dll
call fcn.00422827
push ecx
mov byte [esp + 0x670c], 0x7f
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
mov byte [esp + 0x670c], 0x7d
call fcn.004770a0
add esp, 0xc
lea eax, [esp + 0x464]
push eax
mov byte [esp + 0x6704], 0x7b
call fcn.00491e90
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.00422827
push 0
push 8
push ecx
mov byte [esp + 0x6700], 0x80
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6708], 0x81
mov ecx, esp
mov dword [esp + 0x58], esp
push str.AppVirtDll64.dll
call fcn.00422827
push ecx
mov byte [esp + 0x670c], 0x82
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
mov byte [esp + 0x670c], 0x80
call fcn.004770a0
add esp, 0xc
lea eax, [esp + 0x464]
push eax
mov byte [esp + 0x6704], 0x7b
call fcn.00491e90
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.00422827
push 0
push 9
push ecx
mov byte [esp + 0x6700], 0x83
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6708], 0x84
mov ecx, esp
mov dword [esp + 0x58], esp
push str.StubExe.exe
call fcn.00422827
push ecx
mov byte [esp + 0x670c], 0x85
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
mov byte [esp + 0x670c], 0x83
call fcn.004770a0
add esp, 0xc
lea eax, [esp + 0x464]
push eax
mov byte [esp + 0x6704], 0x7b
call fcn.00491e90
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.00422827
push 0
push 0xa
push ecx
mov byte [esp + 0x6700], 0x86
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6708], 0x87
mov ecx, esp
mov dword [esp + 0x58], esp
push str.StubExe64.exe
call fcn.00422827
push ecx
mov byte [esp + 0x670c], 0x88
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
mov byte [esp + 0x670c], 0x86
call fcn.004770a0
add esp, 0xc
lea eax, [esp + 0x464]
push eax
mov byte [esp + 0x6704], 0x7b
call fcn.00491e90
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.00422827
push 0x4000
push 4
push ecx
mov byte [esp + 0x6700], 0x89
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6708], 0x8a
mov ecx, esp
mov dword [esp + 0x58], esp
push str.VirtFiles.db
call fcn.00422827
push ecx
mov byte [esp + 0x670c], 0x8b
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
mov byte [esp + 0x670c], 0x89
call fcn.004770a0
add esp, 0xc
lea eax, [esp + 0x464]
push eax
mov byte [esp + 0x6704], 0x7b
call fcn.00491e90
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.00422827
push 0x4000
push 5
push ecx
mov byte [esp + 0x6700], 0x8c
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6708], 0x8d
mov ecx, esp
mov dword [esp + 0x58], esp
push str.SandboxCfg.db
call fcn.00422827
push ecx
mov byte [esp + 0x670c], 0x8e
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
mov byte [esp + 0x670c], 0x8c
call fcn.004770a0
add esp, 0xc
lea eax, [esp + 0x464]
push eax
mov byte [esp + 0x6704], 0x7b
call fcn.00491e90
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.00422827
mov byte [esp + 0x66f4], 0x8f
push 0x4000
push 0xb
push ecx
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6708], 0x90
mov ecx, esp
mov dword [esp + 0x58], esp
push str.VirtReg.dat
call fcn.00422827
push ecx
mov byte [esp + 0x670c], 0x91
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
mov byte [esp + 0x670c], 0x8f
call fcn.004770a0
add esp, 0xc
lea eax, [esp + 0x464]
push eax
mov byte [esp + 0x6704], 0x7b
call fcn.00491e90
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.00422827
push 0
push 7
push ecx
mov byte [esp + 0x6700], 0x92
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6708], 0x93
mov ecx, esp
mov dword [esp + 0x58], esp
push str.SysDllSubdirs.txt
call fcn.00422827
push ecx
mov byte [esp + 0x670c], 0x94
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
mov byte [esp + 0x670c], 0x92
call fcn.004770a0
add esp, 0xc
lea eax, [esp + 0x464]
push eax
mov byte [esp + 0x6704], 0x7b
call fcn.00491e90
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.00422827
push 0x4000
push 1
push ecx
mov byte [esp + 0x6700], 0x95
mov edi, esp
mov dword [esp + 0x2c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6708], 0x96
mov ecx, esp
mov dword [esp + 0x58], esp
push str.VirtFiles.vfc
call fcn.00422827
push ecx
mov byte [esp + 0x670c], 0x97
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
mov byte [esp + 0x670c], 0x95
call fcn.004770a0
add esp, 0xc
lea eax, [esp + 0x464]
push eax
mov byte [esp + 0x6704], 0x7b
call fcn.00491e90
lea eax, [esp + 0x454]
call fcn.00491160
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
test eax, eax
je 0x44f447
push str.Could_not_commit_resource
jmp 0x44da8a
push str.Success
call fcn.00422827
jmp 0x44ec2b
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_load_VirtApp.ini
jmp 0x44da8a
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
mov edi, 0x5472b8
push edi
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x44f4a1
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
push edi
call fcn.0044286d
pop ecx
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5472c4]
push str._s_is_no_longer_integrated.
push eax
call fcn.004777e0
add esp, 0xc
call fcn.0044bbf8
pop ecx
pop ecx
jmp 0x44da94
lea ecx, [esp + 0x2c]
call fcn.0042048d
lea ecx, [esp + 0x30]
call fcn.0042048d
mov byte [esp + 0x66f0], 0xc3
mov edi, dword [esp + 0x24]
or dword [esp + 0x74], 0xffffffff
lea eax, [edi + 1]
cmp dword [esp + 0x5c], eax
jle 0x44f512
mov eax, dword [esp + 0x38]
push dword [eax + edi*4 + 4]
lea ecx, [esp + 0x30]
call fcn.00422880
lea eax, [edi + 2]
cmp dword [esp + 0x5c], eax
jle 0x44f52b
mov ecx, dword [esp + 0x38]
push dword [ecx + eax*4]
lea ecx, [esp + 0x34]
call fcn.00422880
lea ecx, [esp + 0x1d8]
call fcn.0042048d
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x66f4], 0xc4
call fcn.00422812
push ecx
mov byte [esp + 0x66f4], 0xc5
lea eax, [esp + 0x54]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
push 0x5472b8
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x44f588
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
push 1
push esi
push ecx
lea eax, [esp + 0x5c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x1008]
push eax
call fcn.00490280
lea edi, [esp + 0xffc]
mov byte [esp + 0x66f0], 0xc6
call fcn.004286aa
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x30]
cmp dword [eax - 0xc], esi
je 0x44f5e5
push esi
push 0x80
push 4
push esi
push 3
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [esp + 0x74], eax
push 1
push 1
push 1
lea eax, [esp + 0x1e4]
push eax
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x547310
call fcn.00422812
push ecx
mov byte [esp + 0x670c], 0xc7
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x547320
call fcn.00422812
push ecx
mov byte [esp + 0x6710], 0xc8
mov ecx, esp
mov dword [esp + 0x60], esp
push 0x54731c
call fcn.00422812
push ecx
mov byte [esp + 0x6714], 0xc9
mov ecx, esp
mov dword [esp + 0x9c], esp
push 0x547314
call fcn.00422812
push ecx
mov byte [esp + 0x6718], 0xca
mov ecx, esp
mov dword [esp + 0x90], esp
push 0x5472c4
call fcn.00422812
mov byte [esp + 0x6718], 0xc6
call fcn.00447190
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0x28
call edi
push esi
push 2
mov dword [esp + 0x70], eax
push 0x5472b8
lea eax, [esp + 0x1008]
push eax
push dword [esp + 0x28]
call fcn.0043ac4d
add esp, 0x14
cmp eax, esi
je 0x44f6c7
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Failed_BasicDeploy_
jmp 0x44da8a
call edi
sub eax, dword [esp + 0x68]
mov dword [esp + 0x68], eax
call edi
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x2c]
cmp dword [eax - 0xc], esi
je 0x44f782
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0xcb
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x50d0dc
call fcn.00422827
push ecx
mov byte [esp + 0x6704], 0xcc
mov ecx, esp
mov dword [esp + 0x54], esp
push ebx
call fcn.00422827
push 2
push ecx
mov byte [esp + 0x670c], 0xcd
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x94], esp
push eax
call fcn.00422812
lea eax, [esp + 0x1018]
push eax
mov byte [esp + 0x6710], 0xc6
call fcn.0043e6ec
add esp, 0x20
push esi
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.00422812
call fcn.0047e340
pop ecx
pop ecx
cmp eax, esi
jne 0x44f782
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x44f758
call edi
push ecx
mov edi, eax
sub edi, dword [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x547310
call fcn.00422812
push ecx
mov byte [esp + 0x66f8], 0xce
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x547320
call fcn.00422812
push ecx
mov byte [esp + 0x66fc], 0xcf
mov ecx, esp
mov dword [esp + 0x4c], esp
push 0x547314
call fcn.00422812
push ecx
mov byte [esp + 0x6700], 0xd0
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x5472c4
call fcn.00422812
mov byte [esp + 0x6700], 0xc6
call fcn.00446d96
add esp, 0x10
lea ecx, [esp + 0x58]
call fcn.0042048d
lea ecx, [esp + 0x2cc]
mov eax, pe_nt_image_headers32
push ecx
mov byte [esp + 0x66f4], 0xd1
push eax
lea ecx, [esp + 0x60]
mov dword [esp + 0x2d4], eax
call fcn.004204d3
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push 0xffffffffffffffff
lea ecx, [esp + 0x5c]
call fcn.00422b35
push edi
push dword [esp + 0x6c]
lea eax, [esp + 0x194]
push dword [esp + 0x60]
push dword [0x5472c4]
push str._s__s__d_d_r_n
push eax
call fcn.004777e0
add esp, 0x18
mov byte [esp + 0x66f0], 0xd2
push dword [esp + 0x18c]
lea ecx, [esp + 0x1e4]
call fcn.004242f2
mov byte [esp + 0x66f0], 0xd3
mov edi, dword [esp + 0x74]
cmp edi, 0xffffffff
je 0x44f8bc
push 2
push esi
push esi
push edi
mov dword [esp + 0x2e4], esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [esp + 0x1e0]
mov ecx, dword [eax - 0xc]
push esi
lea edx, [esp + 0x2d8]
push edx
push ecx
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [0x5433cc]
lea eax, [esp + 0x190]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.00422812
jmp 0x44f4c9
push ecx
mov dword [esp + 0x14], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..Packager.log
call fcn.00422827
push ecx
mov byte [esp + 0x66fc], 0xd4
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00422812
push edi
mov byte [esp + 0x6700], 4
call fcn.004779a0
lea eax, [esp + 0xd8]
add esp, 0xc
push eax
call fcn.00476db0
add esp, 4
mov byte [esp + 0x66f4], 0xd5
lea eax, [esp + 0xcc]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
call fcn.0047ad80
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov dword [esp + 0x40], esi
call fcn.00422812
lea eax, [esp + 0xaf8]
push eax
call fcn.00490280
mov byte [esp + 0x66f0], 0xd6
push dword [0x5433cc]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0xaf8]
push eax
call fcn.0044bc72
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0xd7
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6704], 0xd8
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
call fcn.00422812
push 2
push ecx
mov byte [esp + 0x670c], 0xd9
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
lea eax, [esp + 0xb08]
push eax
mov byte [esp + 0x6710], 0xd6
call fcn.0043e6ec
add esp, 0x20
lea edi, [esp + 0xaec]
call fcn.004286aa
mov ebx, eax
cmp ebx, esi
je 0x44facb
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004767b0
mov byte [esp + 0x66f8], 0xda
mov ecx, esp
mov dword [esp + 0x24], esp
push str.LogsPackager.log
call fcn.00422827
push ebx
mov byte [esp + 0x66fc], 0xd6
call fcn.00425ea1
add esp, 0xc
cmp eax, esi
jne 0x44fa7c
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_extract_Packager.log_
jmp 0x44da8a
push dword [esp + 0xc8]
mov dword [esp + 0x34], 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Packager.log
call fcn.00422827
lea eax, [esp + 0x1f0]
push eax
call fcn.00476db0
pop ecx
pop ecx
push dword [eax]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov ecx, dword [esp + 0x1e8]
add ecx, 0xfffffff0
call fcn.0042001a
call fcn.0048f610
xor esi, esi
jmp 0x44faed
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
push str.Loader__ExtractLog_:_OpenVfc_failed__LE_d
push ecx
call fcn.004777e0
add esp, 0xc
call fcn.0044b362
pop ecx
lea eax, [esp + 0xaec]
call fcn.00491160
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xd0]
cmp dword [esp + 0x3c], esi
je 0x44fb1d
push str.Success:__s
jmp 0x44f4c0
push str.Failed_saving__s
jmp 0x44f4c0
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
mov ebx, 0x5472b8
push ebx
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x44fb5b
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
push 1
push esi
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x9d8]
push eax
call fcn.00490280
mov byte [esp + 0x66f0], 0xdb
push dword [0x5433cc]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x9d8]
push eax
call fcn.0044bc72
lea edi, [esp + 0x9dc]
call fcn.004286aa
push 1
push 2
push ebx
mov ecx, edi
push ecx
push eax
call fcn.0043ac4d
mov edi, eax
add esp, 0x24
lea eax, [esp + 0x9cc]
call fcn.00491160
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
cmp edi, esi
jne 0x44fbf6
push dword [0x547314]
push str.Success:_n_s
jmp 0x44f4c0
push str.Failed_extracting.
push eax
call fcn.004777e0
pop ecx
pop ecx
jmp 0x44f4c9
push str._Extract_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x514708
call fcn.004ccc70
mov edx, dword [esp + 0x28]
pop ecx
mov ecx, dword [esp + 0x38]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0xf4]
call fcn.00422827
push ecx
mov byte [esp + 0x66f4], 0xdc
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
push 0x5472b8
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x44fc74
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
push 1
push esi
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x708]
push eax
call fcn.00490280
mov byte [esp + 0x66f0], 0xdd
push dword [0x5433cc]
cmp dword [esp + 0x788], esi
jne 0x44fcbd
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_open_PeContainer
jmp 0x44da8a
push 2
push ecx
lea eax, [esp + 0x54]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x708]
push eax
call fcn.0044bc72
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0xde
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6704], 0xdf
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
call fcn.00422812
push 2
push ecx
mov byte [esp + 0x670c], 0xe0
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
lea eax, [esp + 0x718]
push eax
mov byte [esp + 0x6710], 0xdd
call fcn.0043e6ec
add esp, 0x20
lea edi, [esp + 0x6fc]
call fcn.004286aa
mov edi, eax
cmp edi, esi
jne 0x44fd7a
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.VFC_error
jmp 0x44da8a
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0xe1
lea eax, [esp + 0xf8]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
push edi
mov byte [esp + 0x66fc], 0xdd
call fcn.00425ea1
add esp, 0xc
cmp eax, esi
jne 0x44fdd6
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xf8]
push str.Cannot_extract_file:_n_s
jmp 0x44dc1b
mov ebx, edi
call fcn.0048f610
mov ebx, dword [esp + 0xf0]
push 1
call fcn.00484770
pop ecx
lea eax, [esp + 0x6fc]
call fcn.00491160
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x547314]
push str.Success:_n_s
jmp 0x44ec22
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
mov esi, 0x5472b8
push esi
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x44fe49
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
lea eax, [esp + 0x2dc]
push eax
call fcn.004ab410
pop ecx
mov byte [esp + 0x66f0], 0xe2
push dword [eax]
lea ecx, [esp + 0x1f4]
call fcn.004242f2
mov byte [esp + 0x66f0], 0xe4
mov ecx, dword [esp + 0x2dc]
add ecx, 0xfffffff0
call fcn.0042001a
mov eax, dword [esp + 0x1f0]
mov edi, dword [eax - 0xc]
push eax
push ecx
mov dword [esp + 0x18], esp
mov ebx, esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov esi, str..xml
push esi
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0xe5
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004766c0
pop ecx
push ebx
mov byte [esp + 0x6704], 0xe4
call fcn.004779a0
add esp, 0xc
call fcn.004781b0
pop ecx
pop ecx
push dword [0x5433cc]
push ecx
mov dword [esp + 0x18], esp
test eax, eax
je 0x44ff54
mov ecx, esp
push esi
call fcn.00422827
push ecx
mov byte [esp + 0x66fc], 0xe6
mov eax, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004766c0
pop ecx
lea eax, [esp + 0x2f0]
push eax
mov byte [esp + 0x6700], 0xe4
call fcn.004779a0
add esp, 8
mov byte [esp + 0x66f8], 0xe7
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Success:_n_s
push ecx
call fcn.004777e0
add esp, 0xc
call fcn.0044bbf8
pop ecx
pop ecx
mov ecx, dword [esp + 0x2e4]
add ecx, 0xfffffff0
call fcn.0042001a
jmp 0x44ec32
mov eax, esp
push str.Failed_extracting.
push eax
call fcn.004777e0
pop ecx
pop ecx
jmp 0x44ec2b
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x34]
call fcn.00422812
mov byte [esp + 0x66f0], 0xe8
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x5c], ecx
jle 0x44ff9c
mov ecx, dword [esp + 0x38]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x34]
call fcn.00422880
push 1
push esi
push ecx
lea eax, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x12d8]
push eax
call fcn.00490280
mov byte [esp + 0x66f0], 0xe9
push dword [0x5433cc]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x12d8]
push eax
call fcn.0044bc72
push esi
lea eax, [esp + 0x12e0]
push eax
lea eax, [esp + 0x210]
push eax
call fcn.0044bd0b
add esp, 0x1c
push esi
push str.Info
push dword [esp + 0x200]
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x44da94
push str._Sandbox_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
push 0x5472b8
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x45005b
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x34]
call fcn.00422812
mov byte [esp + 0x66f0], 0xea
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x5c], ecx
jle 0x45008f
mov ecx, dword [esp + 0x38]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x34]
call fcn.00422880
push 1
push esi
push ecx
lea eax, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0xee8]
push eax
call fcn.00490280
mov byte [esp + 0x66f0], 0xeb
push dword [0x5433cc]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0xee8]
push eax
call fcn.0044bc72
add esp, 0x10
cmp dword [esp + 0xf64], esi
jne 0x450101
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.FAILED_LOADING_CONTAINERS_
jmp 0x44da8a
lea eax, [esp + 0xedc]
push eax
lea eax, [esp + 0x2f0]
push eax
call fcn.0044c092
pop ecx
pop ecx
mov byte [esp + 0x66f0], 0xec
mov ecx, dword [esp + 0x2ec]
mov eax, dword [ecx - 0xc]
cmp eax, 0x800
jge 0x45013d
push esi
push str.Sandbox
push ecx
jmp 0x450011
push ecx
push ecx
mov dword [esp + 0x18], esp
mov edi, esp
push ecx
add eax, eax
mov ecx, esp
mov dword [esp + 0x1c], esp
mov ebx, str..sandbox.txt
push ebx
mov dword [esp + 0x28], eax
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0xed
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004766c0
pop ecx
push edi
mov byte [esp + 0x6704], 0xec
call fcn.004779a0
mov edi, dword [esp + 0x2c]
add esp, 0xc
call fcn.004781b0
add esp, 4
mov ecx, esp
mov dword [esp + 0x14], esp
push str.open
call fcn.00422827
push 1
push ecx
mov byte [esp + 0x66fc], 0xee
mov ecx, esp
mov dword [esp + 0x28], esp
push esi
xor edi, edi
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0xef
mov eax, esp
mov dword [esp + 0x50], esp
push ecx
mov ecx, esp
mov dword [esp + 0x54], esp
push ebx
mov dword [esp + 0x30], eax
call fcn.00422827
push ecx
mov byte [esp + 0x6708], 0xf0
mov eax, esp
mov dword [esp + 0x90], esp
push eax
call fcn.004766c0
mov eax, dword [esp + 0x34]
pop ecx
push eax
mov byte [esp + 0x670c], 0xef
call fcn.004779a0
add esp, 0xc
mov ebx, esi
mov byte [esp + 0x6700], 0xec
call fcn.00476120
add esp, 0x10
xor esi, esi
jmp 0x44da94
push str._AddSandbox_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x514848
call fcn.004ccc70
mov edx, dword [esp + 0x28]
pop ecx
mov ecx, dword [esp + 0x38]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x204]
call fcn.00422827
push 1
push esi
push ecx
mov byte [esp + 0x66fc], 0xf1
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0xc18]
push eax
call fcn.00490280
mov byte [esp + 0x66f0], 0xf2
push dword [0x5433cc]
lea eax, [esp + 0x4c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0xc18]
push eax
call fcn.0044bc72
add esp, 0x10
cmp dword [esp + 0xc94], esi
jne 0x4502c6
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x4500f7
lea eax, [esp + 0x3ec]
push eax
call fcn.00429c03
push ebx
lea ecx, [esp + 0x198]
mov byte [esp + 0x66f4], 0xf3
call fcn.00422827
lea eax, [esp + 0x194]
push eax
lea eax, [esp + 0x3f0]
push eax
push ecx
mov byte [esp + 0x66fc], 0xf4
lea eax, [esp + 0x20c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
call fcn.0048c8b0
add esp, 0xc
cmp eax, esi
jne 0x450339
push dword [0x5433cc]
lea eax, [esp + 0x198]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44e162
push 0xffffffffffffffff
xor esi, esi
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0xf5
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6704], 0xf6
mov ecx, esp
mov dword [esp + 0x54], esp
push ebx
call fcn.00422827
push 2
push ecx
mov byte [esp + 0x670c], 0xf7
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
lea eax, [esp + 0xc28]
push eax
mov byte [esp + 0x6710], 0xf4
call fcn.0043e6ec
add esp, 0x20
push 7
pop ecx
push dword [0x547338]
xor eax, eax
mov dword [esp + 0x3d0], esi
lea edi, [esp + 0x3d4]
rep stosd dword es:[edi], eax
push ecx
mov dword [esp + 0x18], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.SandboxCfg.db
call fcn.00422827
push edi
mov ecx, esi
call fcn.0048a080
pop ecx
pop ecx
lea ecx, [esp + 0x3d4]
call fcn.00483110
pop ecx
pop ecx
lea esi, [esp + 0x84]
lea edi, [esp + 0x3ec]
call fcn.00436639
lea esi, [esp + 0x434]
lea edi, [esp + 0x3ec]
call fcn.00449879
mov esi, eax
mov eax, dword [esp + 0x84]
test eax, eax
je 0x45042a
cmp eax, dword [esi]
je 0x45042f
call fcn.004cce91
mov eax, dword [esp + 0x88]
cmp eax, dword [esi + 4]
je 0x4504e1
lea esi, [esp + 0x84]
call fcn.00422da5
push eax
lea ecx, [esp + 0x1c]
call fcn.00422812
mov byte [esp + 0x66f0], 0xf8
call fcn.00422da5
mov edi, dword [eax + 4]
mov eax, edi
lea esi, [esp + 0x2f4]
call fcn.00485840
push ecx
mov byte [esp + 0x66f4], 0xf9
mov esi, dword [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push dword [eax]
push esi
push str.Setting___s__s
push ecx
call fcn.004777e0
add esp, 0x10
call fcn.0044b362
pop ecx
mov ecx, dword [esp + 0x2f4]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [esp + 0x3cc]
push edi
push eax
xor eax, eax
mov edx, esi
call fcn.004860a0
pop ecx
pop ecx
lea ecx, [esi - 0x10]
mov byte [esp + 0x66f0], 0xf4
call fcn.0042001a
lea esi, [esp + 0x84]
call fcn.004563b9
jmp 0x450406
mov ebx, dword [esp + 0x3cc]
lea eax, [esp + 0x3cc]
push eax
call fcn.0049a940
lea eax, [esp + 0xc0c]
call fcn.00491160
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Done
jmp 0x44f44c
push str._GetProperty_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x5148b0
call fcn.004ccc70
mov edx, dword [esp + 0x28]
pop ecx
mov ecx, dword [esp + 0x38]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x20c]
call fcn.00422827
push 1
push esi
push ecx
mov byte [esp + 0x66fc], 0xfa
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x1368]
push eax
call fcn.00490280
mov byte [esp + 0x66f0], 0xfb
push dword [0x5433cc]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x1368]
push eax
call fcn.0044bc72
add esp, 0x10
lea ecx, [esp + 0x19c]
call fcn.0042048d
lea eax, [esp + 0x370]
push eax
mov byte [esp + 0x66f4], 0xfc
call fcn.00429c3b
lea eax, [esp + 0x19c]
push eax
push ecx
mov byte [esp + 0x66f8], 0xfd
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Main
call fcn.00422827
push 3
lea edi, [esp + 0x1368]
call fcn.004924d0
mov ecx, dword [esp + 0x19c]
mov eax, dword [ecx - 0xc]
cmp eax, esi
jne 0x450608
push 6
jmp 0x44da95
lea edx, [esp + 0x370]
push edx
push eax
push ecx
call fcn.0047fcf0
mov eax, dword [esp + 0x394]
mov eax, dword [eax]
add esp, 0xc
lea edi, [esp + 0x370]
lea esi, [esp + 0x84]
call fcn.00430fc8
mov eax, dword [esp + 0x388]
lea esi, [esp + 0xb4]
call fcn.00430fc8
mov edi, esi
lea esi, [esp + 0x84]
call fcn.00429db6
test al, al
je 0x44dd21
xor ebx, ebx
lea esi, [esp + 0x84]
call fcn.00429d7f
push dword [eax]
lea eax, [esp + 0x20c]
call fcn.004228aa
test eax, eax
jne 0x4506ef
call fcn.00429d7f
add eax, 4
push dword [eax]
lea ecx, [esp + 0x130]
call fcn.004242f2
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
cmp eax, 0xffffffff
je 0x4506e0
mov ecx, dword [esp + 0x12c]
push ebx
mov dword [esp + 0x14c], ebx
mov edx, dword [ecx - 0xc]
lea esi, [esp + 0x14c]
push esi
push edx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x4506e0
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x12c]
cmp eax, dword [ecx - 0xc]
je 0x452a08
mov ecx, dword [esp + 0x12c]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [esp + 0x84]
call fcn.00429daa
mov eax, dword [esp + 0x388]
lea edi, [esp + 0x370]
lea esi, [esp + 0xb4]
call fcn.00430fc8
mov edi, esi
lea esi, [esp + 0x84]
call fcn.00429db6
test al, al
jne 0x450661
jmp 0x44dd21
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x34]
call fcn.00422812
mov dword [esp + 0x66f0], 0x104
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x5c], ecx
jle 0x450767
mov ecx, dword [esp + 0x38]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x34]
call fcn.00422880
push 1
push esi
push ecx
lea eax, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x828]
push eax
call fcn.00490280
mov byte [esp + 0x66f0], 5
push dword [0x5433cc]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x828]
push eax
call fcn.0044bc72
add esp, 0x10
cmp dword [esp + 0x8a4], esi
jne 0x4507d4
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x4500f7
push 1
lea eax, [esp + 0x820]
push eax
lea eax, [esp + 0x13c]
push eax
call fcn.0044bd0b
add esp, 0xc
push str._n_nSandboxing:_n_n
lea ecx, [esp + 0x138]
mov byte [esp + 0x66f4], 6
call fcn.0042421e
lea eax, [esp + 0x81c]
push eax
lea eax, [esp + 0x300]
push eax
call fcn.0044c092
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x138]
mov byte [esp + 0x66f4], 7
call fcn.00422895
mov byte [esp + 0x66f0], 6
mov ecx, dword [esp + 0x2fc]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x134]
mov eax, dword [ecx - 0xc]
push ecx
push ecx
mov dword [esp + 0x18], esp
mov edi, esp
push ecx
add eax, eax
mov ecx, esp
mov dword [esp + 0x1c], esp
mov ebx, str..txt
push ebx
mov dword [esp + 0x28], eax
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 8
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004766c0
pop ecx
push edi
mov byte [esp + 0x6704], 6
call fcn.004779a0
mov edi, dword [esp + 0x2c]
add esp, 0xc
call fcn.004781b0
pop ecx
pop ecx
push esi
push str.Package_info
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 9
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004766c0
pop ecx
lea eax, [esp + 0x314]
push eax
mov byte [esp + 0x6704], 6
call fcn.004779a0
add esp, 0xc
mov byte [esp + 0x66f8], 0xa
push dword [eax]
lea eax, [esp + 0x21c]
push str.Saved_in:__s
push eax
call fcn.004777e0
add esp, 0xc
push dword [eax]
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [esp + 0x210]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x304]
add ecx, 0xfffffff0
call fcn.0042001a
jmp 0x44da94
lea ecx, [esp + 0x10]
call fcn.0042048d
lea ecx, [esp + 0x140]
mov dword [esp + 0x66f0], 0x10f
call fcn.0042048d
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x66f4], 0x10
call fcn.00422812
mov byte [esp + 0x66f0], 0x11
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x5c], ecx
jle 0x45098e
mov ecx, dword [esp + 0x38]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x54]
call fcn.00422880
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str..ini
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0x12
lea eax, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x48], esp
push eax
call fcn.00422812
lea eax, [esp + 0x158]
push eax
mov byte [esp + 0x66fc], 0x11
call fcn.004779a0
add esp, 8
mov byte [esp + 0x66f4], 0x13
lea eax, [esp + 0x154]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.00422812
call fcn.0047ad80
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x5c]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00422812
lea eax, [esp + 0x1128]
push eax
call fcn.00490280
mov byte [esp + 0x66f0], 0x14
push dword [0x5433cc]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00422812
lea eax, [esp + 0x1128]
push eax
call fcn.0044bc72
add esp, 0x10
cmp dword [esp + 0x11a4], esi
jne 0x450a5e
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
jmp 0x4500f7
lea eax, [esp + 0x140]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push str.Main
call fcn.00422827
push 3
lea edi, [esp + 0x1128]
call fcn.004924d0
mov ecx, dword [esp + 0x140]
mov eax, dword [ecx - 0xc]
cmp eax, esi
jne 0x450aa5
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
jmp 0x44dade
push ecx
push ecx
lea edi, [eax + eax]
lea eax, [esp + 0x158]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
call fcn.004781b0
jmp 0x44f4ce
push str.AppID_ShortDesc_FriendlyName_Category_DownloadUrl_IconUrl_Version_BuildUid_Size_PopularityIndex_n
lea ecx, [esp + 0x80]
call fcn.00422827
mov dword [esp + 0x66f0], 0x115
lea ecx, [esp + 0x28]
mov dword [esp + 0x178], esi
mov dword [esp + 0x228], esi
call fcn.0042048d
push 1
push esi
push ecx
mov byte [esp + 0x66fc], 0x16
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x1638]
push eax
call fcn.00490280
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x66fc], 0x17
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x18
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6704], 0x19
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
call fcn.00422812
push 2
push ecx
mov byte [esp + 0x670c], 0x1a
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
lea eax, [esp + 0x1648]
push eax
mov byte [esp + 0x6710], 0x17
call fcn.0043e6ec
mov esi, 0x502014
push esi
lea eax, [esp + 0x23c]
push 0x5472c4
push eax
call fcn.00422a76
add esp, 0x2c
push eax
lea ecx, [esp + 0x80]
mov byte [esp + 0x66f4], 0x1b
call fcn.00422895
mov byte [esp + 0x66f0], 0x17
mov ecx, dword [esp + 0x218]
add ecx, 0xfffffff0
call fcn.0042001a
push esi
lea ecx, [esp + 0x80]
call fcn.0042421e
push esi
push 0x5472d0
lea eax, [esp + 0x314]
push eax
call fcn.00422a76
add esp, 0xc
push eax
lea ecx, [esp + 0x80]
mov byte [esp + 0x66f4], 0x1c
call fcn.00422895
mov byte [esp + 0x66f0], 0x17
mov ecx, dword [esp + 0x30c]
add ecx, 0xfffffff0
call fcn.0042001a
push str.Productivity_
lea ecx, [esp + 0x80]
call fcn.0042421e
mov ebx, dword [esp + 0x24]
lea eax, [ebx + 1]
cmp dword [esp + 0x5c], eax
mov edi, 0x514b78
jle 0x450c6f
mov eax, dword [esp + 0x38]
push dword [eax + ebx*4 + 4]
lea ebx, [esp + 0x80]
push edi
call fcn.0042580a
mov ebx, dword [esp + 0x2c]
pop ecx
pop ecx
jmp 0x450c80
push str._Download_URL_here__
lea ecx, [esp + 0x80]
call fcn.0042421e
lea eax, [ebx + 2]
cmp dword [esp + 0x5c], eax
jle 0x450ca1
mov ecx, dword [esp + 0x38]
push dword [ecx + eax*4]
lea ebx, [esp + 0x80]
push edi
call fcn.0042580a
pop ecx
pop ecx
jmp 0x450cb2
push str._Icon_here__
lea ecx, [esp + 0x80]
call fcn.0042421e
push esi
lea eax, [esp + 0x224]
push 0x5472d8
push eax
call fcn.00422a76
add esp, 0xc
push eax
lea ecx, [esp + 0x80]
mov byte [esp + 0x66f4], 0x1d
call fcn.00422895
mov byte [esp + 0x66f0], 0x17
mov ecx, dword [esp + 0x220]
add ecx, 0xfffffff0
call fcn.0042001a
push esi
lea eax, [esp + 0x318]
push 0x547308
push eax
call fcn.00422a76
add esp, 0xc
push eax
lea ecx, [esp + 0x80]
mov byte [esp + 0x66f4], 0x1e
call fcn.00422895
mov byte [esp + 0x66f0], 0x17
mov ecx, dword [esp + 0x314]
add ecx, 0xfffffff0
call fcn.0042001a
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push eax
lea edi, [esp + 0x230]
lea esi, [esp + 0x180]
call fcn.004766c0
pop ecx
call fcn.0047ac80
pop ecx
push dword [esp + 0x178]
lea eax, [esp + 0x1a4]
push 0x503240
push eax
call fcn.004777e0
add esp, 0xc
push 0x502014
push eax
lea eax, [esp + 0x324]
push eax
mov byte [esp + 0x66fc], 0x1f
call fcn.00422a76
add esp, 0xc
push eax
lea ecx, [esp + 0x80]
mov byte [esp + 0x66f4], 0x20
call fcn.00422895
mov ecx, dword [esp + 0x31c]
add ecx, 0xfffffff0
call fcn.0042001a
mov byte [esp + 0x66f0], 0x17
mov ecx, dword [esp + 0x1a0]
add ecx, 0xfffffff0
call fcn.0042001a
push 0x5043e4
lea ecx, [esp + 0x80]
call fcn.0042421e
mov eax, dword [esp + 0x24]
add eax, 3
cmp dword [esp + 0x5c], eax
jle 0x450dfd
mov ecx, dword [esp + 0x38]
push dword [ecx + eax*4]
lea ecx, [esp + 0x2c]
call fcn.00422880
jmp 0x450e65
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..csv
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0x21
mov eax, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004766c0
pop ecx
lea eax, [esp + 0x32c]
push eax
mov byte [esp + 0x66fc], 0x17
call fcn.004779a0
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x66f4], 0x22
call fcn.0042286b
mov byte [esp + 0x66f0], 0x17
mov ecx, dword [esp + 0x324]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx - 0xc]
push ecx
push ecx
lea edi, [eax + eax]
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.00422812
call fcn.004781b0
pop ecx
pop ecx
push dword [0x5433cc]
push ecx
mov dword [esp + 0x18], esp
test eax, eax
jne 0x450eae
mov eax, esp
lea ecx, [esp + 0x30]
push ecx
push str.Could_not_save_to
push eax
call fcn.00422acb
jmp 0x44dc21
mov ecx, esp
lea eax, [esp + 0x30]
push eax
call fcn.00422812
jmp 0x44ec2b
push 1
push esi
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x1488]
push eax
call fcn.00490280
mov dword [esp + 0x66f0], 0x123
cmp dword [esp + 0x1504], esi
jne 0x450f06
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44e5e3
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x5472c4]
push str._s.AppVirtDll.dll
push eax
call fcn.004777e0
lea eax, [esp + 0x14c]
add esp, 0xc
push eax
call fcn.00476eb0
add esp, 4
mov byte [esp + 0x66f4], 0x24
lea eax, [esp + 0x140]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
push ecx
mov byte [esp + 0x66f8], 0x25
mov ecx, esp
mov dword [esp + 0x24], esp
push str.Main
call fcn.00422827
push 2
pop ecx
lea edi, [esp + 0x1484]
mov byte [esp + 0x66f8], 0x24
call fcn.00492670
push dword [0x5433cc]
lea eax, [esp + 0x140]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.00422812
lea eax, [esp + 0x240]
push eax
call fcn.0049b2c0
add esp, 4
mov byte [esp + 0x66f8], 0x26
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.EngineVersion_s
push ecx
call fcn.004777e0
add esp, 0xc
call fcn.0044bbf8
pop ecx
pop ecx
mov byte [esp + 0x66f0], 0x24
mov ecx, dword [esp + 0x238]
add ecx, 0xfffffff0
call fcn.0042001a
push ecx
lea eax, [esp + 0x140]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
call fcn.0047ad80
jmp 0x44f4cf
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x2c]
call fcn.00422812
push 0x2e
lea ecx, [esp + 0x2c]
mov dword [esp + 0x66f4], 0x127
call fcn.004364f7
push eax
lea eax, [esp + 0x330]
push eax
lea ecx, [esp + 0x30]
call fcn.00422a16
push str..new.exe
push eax
lea eax, [esp + 0xb0]
push eax
mov byte [esp + 0x66fc], 0x28
call fcn.00422a76
add esp, 0xc
mov byte [esp + 0x66f0], 0x2a
mov ecx, dword [esp + 0x32c]
add ecx, 0xfffffff0
call fcn.0042001a
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x338]
call fcn.00422827
push esi
mov byte [esp + 0x66f4], 0x2b
push dword [esp + 0xac]
push dword [esp + 0x33c]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x4510cf
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xb0]
push dword [esp + 0x34]
push str.Cant_copy__s_to__s
push eax
call fcn.004777e0
add esp, 0x10
jmp 0x44da8f
push dword [esp + 0xa8]
push dword [esp + 0x2c]
call fcn.004440bd
pop ecx
pop ecx
xor esi, esi
inc esi
push esi
push 0
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x678]
push eax
call fcn.00490280
push esi
push esi
push ecx
mov byte [esp + 0x66fc], 0x2c
lea eax, [esp + 0xb4]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x1248]
push eax
call fcn.00490280
mov byte [esp + 0x66f0], 0x2d
push dword [0x5433cc]
lea eax, [esp + 0x4c]
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x678]
push eax
call fcn.0044bc72
add esp, 0x10
lea eax, [esp + 0x40]
lea ecx, [esp + 0x6dc]
call fcn.00422bc1
jmp 0x451287
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.CEChangeEngine.tmp
call fcn.00422827
lea eax, [esp + 0xd0]
push eax
call fcn.00476eb0
add esp, 4
mov byte [esp + 0x66f4], 0x2e
lea eax, [esp + 0xd0]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
lea esi, [esp + 0x44]
mov byte [esp + 0x66f4], 0x2f
call fcn.00422da5
push ecx
add eax, 0x2c
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
call fcn.00422da5
mov byte [esp + 0x66f8], 0x2e
mov ecx, dword [eax + 0x28]
lea edi, [esp + 0x674]
call fcn.00492670
test eax, eax
jne 0x4512e3
call fcn.00422da5
push ecx
add eax, 0x2c
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
push 0x4000
mov byte [esp + 0x66f8], 0x30
call fcn.00422da5
push dword [eax + 0x28]
lea eax, [esp + 0xd8]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x124c]
push eax
mov byte [esp + 0x6704], 0x2e
call fcn.00491e90
test eax, eax
jne 0x45130f
push ecx
lea eax, [esp + 0xd0]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
call fcn.0047ad80
pop ecx
mov byte [esp + 0x66f0], 0x2d
mov ecx, dword [esp + 0xcc]
add ecx, 0xfffffff0
call fcn.0042001a
call fcn.004561cf
lea eax, [esp + 0x390]
lea ecx, [esp + 0x6dc]
call fcn.00422bd6
mov edi, eax
lea esi, [esp + 0x40]
call fcn.00422d88
test al, al
jne 0x451175
lea eax, [esp + 0x66c]
call fcn.00491160
lea eax, [esp + 0x123c]
call fcn.00491160
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xb0]
push str.Successfully_changed_Loader:__s
jmp 0x44ec22
push dword [0x5433cc]
call fcn.00422da5
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push dword [eax + 0x2c]
lea esi, [esp + 0x4c]
call fcn.00422da5
push dword [eax + 0x28]
push str.Cannot_read_container__d__s_to_file
push edi
jmp 0x4510c2
push dword [0x5433cc]
lea esi, [esp + 0x44]
call fcn.00422da5
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push dword [eax + 0x2c]
jmp 0x4512fc
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x30]
call fcn.00422812
push 0x2e
lea ecx, [esp + 0x30]
mov dword [esp + 0x66f4], 0x131
call fcn.004364f7
push eax
lea eax, [esp + 0x244]
push eax
lea ecx, [esp + 0x34]
call fcn.00422a16
push str..new.exe
push eax
lea eax, [esp + 0xdc]
push eax
mov byte [esp + 0x66fc], 0x32
call fcn.00422a76
add esp, 0xc
mov byte [esp + 0x66f0], 0x34
mov ecx, dword [esp + 0x240]
add ecx, 0xfffffff0
call fcn.0042001a
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0xe0]
call fcn.00422827
push esi
mov byte [esp + 0x66f4], 0x35
push dword [esp + 0xd8]
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x4513e8
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xdc]
push dword [esp + 0x38]
jmp 0x4510bc
push 1
push 1
push ecx
lea eax, [esp + 0xe0]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x5e8]
push eax
call fcn.00490280
mov byte [esp + 0x66f0], 0x36
push dword [0x5433cc]
lea eax, [esp + 0x4c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x5e8]
push eax
call fcn.0044bc72
add esp, 0x10
cmp dword [esp + 0x664], esi
jne 0x451459
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44fcb3
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
mov esi, str.Main
push esi
call fcn.00422827
push 0
push 2
push ecx
mov byte [esp + 0x6700], 0x37
lea eax, [esp + 0xec]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x5ec]
push eax
mov byte [esp + 0x6704], 0x36
call fcn.00491e90
test eax, eax
je 0x4514bb
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEDLL
jmp 0x44da8a
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.00422827
push 0
push 8
push ecx
mov byte [esp + 0x6700], 0x38
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
lea eax, [esp + 0xf0]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.00422812
push edi
call fcn.00486500
pop ecx
pop ecx
lea eax, [esp + 0x5ec]
push eax
mov byte [esp + 0x6704], 0x36
call fcn.00491e90
test eax, eax
je 0x451527
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEDLL64
jmp 0x44da8a
lea ecx, [esp + 0x158]
call fcn.0042048d
lea ecx, [esp + 0x198]
call fcn.0042048d
lea eax, [esp + 0x158]
push eax
push ecx
mov byte [esp + 0x66f8], 0x3a
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.00422827
push 3
lea edi, [esp + 0x5e8]
call fcn.004924d0
test eax, eax
je 0x451585
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_Read_PeContainer_PECONTAINER_INI
jmp 0x44da8a
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
lea eax, [esp + 0xe4]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
lea ebx, [esp + 0x1a4]
call fcn.00422812
push edi
call fcn.0049b2c0
add esp, 4
mov byte [esp + 0x66f8], 0x3b
mov ecx, esp
mov dword [esp + 0x24], esp
push str.EngineVersion
call fcn.00422827
push ecx
mov byte [esp + 0x66fc], 0x3c
lea eax, [esp + 0x164]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.00422812
mov byte [esp + 0x66fc], 0x3a
call fcn.0047c370
pop ecx
pop ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.00422827
push 0x4000
push 3
pop esi
push ecx
mov byte [esp + 0x66fc], 0x3d
mov eax, ebx
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00422812
mov ecx, esi
lea ebx, [esp + 0x5e8]
mov byte [esp + 0x66fc], 0x3a
call fcn.00491c70
test eax, eax
je 0x45164f
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_Add_PeContainerStr_PECONTAINER_INI
jmp 0x44da8a
lea eax, [esp + 0x5dc]
call fcn.00491160
push dword [0x5433cc]
lea eax, [esp + 0xe0]
push ecx
mov dword [esp + 0x18], esp
mov esi, esp
push dword [esp + 0xdc]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.00422812
lea eax, [esp + 0x254]
push eax
call fcn.0049b2c0
pop ecx
pop ecx
mov byte [esp + 0x66fc], 0x3e
push dword [eax]
push str.Successfully_changed_to_Engine__s._nNew_package_saved_in:_n_s
push esi
call fcn.004777e0
add esp, 0x10
call fcn.0044bbf8
pop ecx
pop ecx
mov ecx, dword [esp + 0x244]
jmp 0x44ff47
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x30]
call fcn.00422812
push 0x2e
lea ecx, [esp + 0x30]
mov dword [esp + 0x66f4], 0x13f
call fcn.004364f7
push eax
lea eax, [esp + 0x304]
push eax
lea ecx, [esp + 0x34]
call fcn.00422a16
push str..new.exe
push eax
lea eax, [esp + 0xec]
push eax
mov byte [esp + 0x66fc], 0x40
call fcn.00422a76
add esp, 0xc
mov byte [esp + 0x66f0], 0x42
mov ecx, dword [esp + 0x300]
add ecx, 0xfffffff0
call fcn.0042001a
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x254]
call fcn.00422827
push esi
mov byte [esp + 0x66f4], 0x43
push dword [esp + 0xe8]
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x45177b
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xec]
push dword [esp + 0x38]
jmp 0x4510bc
push 1
push 1
push ecx
lea eax, [esp + 0xf0]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x948]
push eax
call fcn.00490280
mov byte [esp + 0x66f0], 0x44
push dword [0x5433cc]
lea eax, [esp + 0x4c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x948]
push eax
call fcn.0044bc72
add esp, 0x10
cmp dword [esp + 0x9c4], esi
jne 0x4517ec
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44fcb3
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.Main
call fcn.00422827
push esi
push 3
push ecx
mov byte [esp + 0x6700], 0x45
lea eax, [esp + 0x260]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x94c]
push eax
mov byte [esp + 0x6704], 0x44
call fcn.00491e90
cmp eax, esi
je 0x45184c
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEINI
jmp 0x44da8a
lea eax, [esp + 0x93c]
call fcn.00491160
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xec]
push str.Successfully_changed_INI._nNew_package_saved_in:_n_s
jmp 0x44f4c0
lea esi, [esp + 0x174c]
call fcn.00439b8f
mov dword [esp + 0x66f0], 0x146
mov edi, dword [esp + 0x38]
mov esi, dword [esp + 0x24]
push dword [edi + esi*4 + 4]
lea ecx, [esp + 0x1798]
call fcn.00422880
push dword [edi + esi*4 + 8]
lea ecx, [esp + 0x1770]
call fcn.00422880
push dword [edi + esi*4 + 0xc]
lea ecx, [esp + 0x1768]
call fcn.00422880
push eax
lea ecx, [esp + 0x175c]
call fcn.0042286b
push dword [edi + esi*4 + 0x10]
lea ecx, [esp + 0x17a0]
call fcn.00422880
push dword [edi + esi*4 + 0x14]
lea ecx, [esp + 0x179c]
call fcn.00422880
lea eax, [esp + 0x18cc]
push eax
lea edi, [esp + 0x1750]
call fcn.004aa000
lea eax, [esp + 0x18cc]
push eax
mov byte [esp + 0x66f4], 0x47
call fcn.004aa1a0
test eax, eax
je 0x45196a
xor esi, esi
mov eax, 0x515038
cmp dword [esp + 0x18cc], esi
jne 0x451934
mov eax, 0x515040
push dword [esp + 0x18d8]
push dword [esp + 0x18d8]
push eax
lea eax, [esp + 0x2d4]
push str.Need_to_update:__s_nVersion:__s_nBuildUID:__s_n
push eax
call fcn.004777e0
add esp, 0x14
push esi
push str.Server_test:
push dword [esp + 0x2d0]
jmp 0x450011
push 0
push str.Server_test:
push str.Failed
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 1
jmp 0x44da95
push 1
push esi
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0xa68]
push eax
call fcn.00490280
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x66fc], 0x149
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x4a
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6704], 0x4b
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
call fcn.00422812
push 2
push ecx
mov byte [esp + 0x670c], 0x4c
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
lea eax, [esp + 0xa78]
push eax
mov byte [esp + 0x6710], 0x49
call fcn.0043e6ec
add esp, 0x20
lea ecx, [esp + 0xa5c]
call fcn.0043d225
lea eax, [esp + 0xa5c]
call fcn.00491160
mov dword [esp + 0x66f0], 4
lea eax, [esp + 0xa5c]
jmp 0x44e4eb
push 1
push esi
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0xdc8]
push eax
call fcn.00490280
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x66fc], 0x14d
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x4e
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6704], 0x4f
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
call fcn.00422812
push 2
push ecx
mov byte [esp + 0x670c], 0x50
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
lea eax, [esp + 0xdd8]
push eax
mov byte [esp + 0x6710], 0x4d
call fcn.0043e6ec
add esp, 0x20
push esi
push esi
push esi
push ecx
mov eax, esp
mov dword [esp + 0x20], esp
push eax
xor ecx, ecx
call fcn.0048a460
pop ecx
mov ecx, esi
call fcn.004a6ad0
add esp, 0x10
lea eax, [esp + 0xdbc]
call fcn.00491160
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
mov edi, 0x5472b8
push edi
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x451b50
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.Cannot_obtain_INI_info_from_resource_
call fcn.00422827
call fcn.0044b362
pop ecx
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push str.MountVirtReg
push eax
call fcn.004777e0
pop ecx
pop ecx
call fcn.0044b362
mov eax, esp
mov dword [esp + 0x14], esp
push str._____________
push eax
call fcn.004777e0
pop ecx
pop ecx
call fcn.0044b362
pop ecx
mov ecx, edi
call fcn.004293a3
mov edi, eax
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
cmp edi, esi
jne 0x451ba7
push str.Cannot_mount_virtual_registry
call fcn.00422827
call fcn.0044b362
jmp 0x451bb4
push ebx
call fcn.00422827
push edi
call fcn.0044c17f
pop ecx
pop ecx
mov dword [esp + 0x66f0], 4
lea eax, [esp + 0xdbc]
jmp 0x44e4eb
mov eax, dword [esp + 0x38]
mov edi, dword [esp + 0x24]
push dword [eax + edi*4 + 4]
lea ecx, [esp + 0x164]
call fcn.00422827
mov dword [esp + 0x66f0], 0x151
mov eax, dword [esp + 0x38]
push dword [eax + edi*4 + 8]
lea ecx, [esp + 0xb0]
call fcn.00422827
push 0x10
mov byte [esp + 0x66f4], 0x52
push esi
push dword [esp + 0x168]
call fcn.004d1032
add esp, 8
mov ecx, esp
mov dword [esp + 0x14], esp
push dword [esp + 0xb0]
mov dword [esp + 0x20], eax
push eax
push str.SetFileFlags:__0x_x____s_
push ecx
call fcn.004777e0
add esp, 0x10
call fcn.0044b362
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0xe58]
push eax
call fcn.00490280
mov byte [esp + 0x66f0], 0x53
push dword [0x5433cc]
lea eax, [esp + 0x4c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0xe58]
push eax
call fcn.0044bc72
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x54
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6704], 0x55
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
call fcn.00422812
push 2
push ecx
mov byte [esp + 0x670c], 0x56
mov ecx, esp
lea eax, [esp + 0x30]
mov dword [esp + 0x94], esp
push eax
call fcn.00422812
lea eax, [esp + 0xe68]
push eax
mov byte [esp + 0x6710], 0x53
call fcn.0043e6ec
add esp, 0x20
call fcn.00483300
mov edi, 0x546a98
call fcn.004997f0
mov edx, dword [esp + 0xac]
call fcn.00483c60
push ecx
mov dword [esp + 0x14], esp
cmp eax, esi
je 0x451d90
mov eax, dword [eax + 0x24]
mov ebx, dword [esp + 0x1c]
mov dword [eax], ebx
mov ecx, esp
push dword [0x546a98]
call fcn.00422827
mov ecx, edi
call fcn.00483b90
pop ecx
cmp eax, esi
je 0x451d7a
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xb4]
push ebx
push str.Success:_n__x___s
push eax
call fcn.004777e0
add esp, 0x10
call fcn.0044bbf8
pop ecx
jmp 0x451dac
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push str._SetFileFlags:_could_not_save_tree
push eax
call fcn.004777e0
pop ecx
pop ecx
jmp 0x451da7
mov eax, esp
push dword [esp + 0xb0]
push str._SetFileFlags:_could_not_find__s
push eax
call fcn.004777e0
add esp, 0xc
call fcn.0044b362
pop ecx
push dword [0x546aa8]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
test eax, eax
jne 0x451dc2
call fcn.00499880
lea eax, [esp + 0xe4c]
mov byte [esp + 0x66f0], 0x52
call fcn.004259b3
mov ecx, dword [esp + 0xac]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x160]
jmp 0x455ec6
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.DbgZip
call fcn.00422827
call fcn.0044b392
mov dword [esp], str._DbgZip:
call fcn.004ccd1a
mov edx, dword [esp + 0x28]
pop ecx
mov ecx, dword [esp + 0x38]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x64]
call fcn.00422880
jmp 0x44d989
push 1
push esi
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0xb88]
push eax
call fcn.00490280
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x66fc], 0x157
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x58
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6704], 0x59
mov ecx, esp
mov dword [esp + 0x54], esp
push ebx
call fcn.00422827
push 2
push ecx
mov byte [esp + 0x670c], 0x5a
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
lea eax, [esp + 0xb98]
push eax
mov byte [esp + 0x6710], 0x57
call fcn.0043e6ec
add esp, 0x20
push dword [0x5433cc]
lea eax, [esp + 0x4c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0xb88]
push eax
call fcn.0044bc72
push dword [esp + 0x68]
lea edx, [esp + 0xb90]
mov ecx, 0x5472b8
call fcn.004426e9
add esp, 0x14
lea eax, [esp + 0xb7c]
mov dword [esp + 0x66f0], 4
call fcn.004259b3
mov ecx, dword [esp + 0x48]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x6c]
add ecx, 0xfffffff0
call fcn.0042001a
lea ecx, [esp + 0x54]
call fcn.004204c9
lea ecx, [esp + 0x60]
call fcn.004204c9
jmp 0x44db3a
push 1
xor edi, edi
push edi
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x13f8]
push eax
call fcn.00490280
push 0xffffffffffffffff
push edi
push ecx
mov dword [esp + 0x66fc], 0x161
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x62
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6704], 0x63
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
call fcn.00422812
push 2
push ecx
mov byte [esp + 0x670c], 0x64
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
lea eax, [esp + 0x1408]
push eax
mov byte [esp + 0x6710], 0x61
call fcn.0043e6ec
add esp, 0x20
lea esi, [esp + 0xb4]
call fcn.00497390
mov byte [esp + 0x66f0], 0x65
mov dword [esp + 0x30], edi
jmp 0x45209a
push dword [0x5472c4]
lea eax, [esp + 0x36e8]
push eax
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x45209a
xor edi, edi
cmp dword [esp + 0x32e0], edi
jbe 0x45209a
lea esi, [esp + edi*8 + 0x32e4]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [esi], eax
je 0x452090
test byte [esp + edi*8 + 0x32e8], 3
je 0x452090
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x547314
call fcn.00422812
push ecx
mov byte [esp + 0x66f8], 0x66
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x5472c4
call fcn.00422812
mov byte [esp + 0x66f8], 0x65
mov ebx, dword [esi]
call fcn.00446c58
pop ecx
pop ecx
inc edi
cmp edi, dword [esp + 0x32e0]
jb 0x45203a
push 1
lea eax, [esp + 0x2ec0]
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0x3c]
call fcn.004970b0
test eax, eax
jne 0x452016
push eax
push eax
push eax
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
lea eax, [esp + 0xb4]
call fcn.004973b0
lea eax, [esp + 0x13ec]
mov dword [esp + 0x66f0], 4
call fcn.004259b3
jmp 0x454495
push 1
push esi
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x16c8]
push eax
call fcn.00490280
push 0xffffffffffffffff
mov dword [esp + 0x66f4], 0x167
push dword [esp + 0x50]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x68
mov ecx, esp
mov dword [esp + 0x2c], esp
push str._Vintegrate_
call fcn.00422827
push ecx
mov byte [esp + 0x6704], 0x69
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
call fcn.00422812
push esi
push ecx
mov byte [esp + 0x670c], 0x6a
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
lea eax, [esp + 0x16d8]
push eax
mov byte [esp + 0x6710], 0x67
call fcn.0043e6ec
add esp, 0x20
call fcn.0044bb2c
jmp 0x44da94
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x24]
push str._ProcessList:all
push dword [eax + ecx*4]
call fcn.004cca64
mov edi, eax
neg edi
pop ecx
sbb edi, edi
pop ecx
lea esi, [esp + 0xb4]
inc edi
call fcn.00497390
mov dword [esp + 0x66f0], 0x16b
and dword [esp + 0x2c], 0
lea ecx, [esp + 0x3c]
call fcn.0042048d
xor eax, eax
test edi, edi
sete al
mov byte [esp + 0x66f0], 0x6c
mov dword [esp + 0x30], eax
jmp 0x45249f
lea eax, [esp + 0x2294]
push eax
lea eax, [esp + 0x25c]
push str._AppID_ws_n
push eax
call fcn.004777e0
add esp, 0xc
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x66f4], 0x6d
call fcn.00422895
lea ecx, [esp + 0x258]
mov byte [esp + 0x66f0], 0x6c
call fcn.004204c9
push dword [esp + 0x1a70]
lea eax, [esp + 0x324]
push str.____SerialId:__d_n
push eax
call fcn.004777e0
add esp, 0xc
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x66f4], 0x6e
call fcn.00422895
lea ecx, [esp + 0x320]
mov byte [esp + 0x66f0], 0x6c
call fcn.004204c9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x1e88]
mov esi, 0x3e8
xor edx, edx
mov ecx, esi
div ecx
push eax
lea eax, [esp + 0x264]
push str.____Started:__d_sec_ago_n
push eax
call fcn.004777e0
add esp, 0xc
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x66f4], 0x6f
call fcn.00422895
lea ecx, [esp + 0x260]
mov byte [esp + 0x66f0], 0x6c
call fcn.004204c9
mov eax, dword [esp + 0x1e8c]
xor edx, edx
div esi
push eax
lea eax, [esp + 0x2d4]
push str.____Blocking_buffering:__d_sec_n
push eax
call fcn.004777e0
add esp, 0xc
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x66f4], 0x70
call fcn.00422895
lea ecx, [esp + 0x2d0]
mov byte [esp + 0x66f0], 0x6c
call fcn.004204c9
lea eax, [esp + 0x268]
push str.____Processes:_n
push eax
call fcn.004777e0
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x66f4], 0x71
call fcn.00422895
lea ecx, [esp + 0x268]
mov byte [esp + 0x66f0], 0x6c
call fcn.004204c9
and dword [esp + 0x50], 0
cmp dword [esp + 0x1e90], 0
jbe 0x45249f
push ebx
lea ecx, [esp + 0xf0]
call fcn.00422827
mov byte [esp + 0x66f0], 0x72
mov edi, dword [esp + 0x50]
lea edi, [esp + edi*8 + 0x1e94]
push dword [edi]
lea esi, [esp + 0xf0]
call fcn.00475f00
pop ecx
test eax, eax
jne 0x4523a7
push 0x505048
mov ecx, esi
call fcn.00422880
push 0x5c
push ecx
lea eax, [esp + 0xf4]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.00422812
lea eax, [esp + 0x278]
push eax
call fcn.00477b10
add esp, 0xc
mov byte [esp + 0x66f0], 0x73
push dword [eax]
lea eax, [esp + 0x30c]
push dword [edi]
push str._______wd:__ws
push eax
call fcn.004777e0
add esp, 0x10
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x66f4], 0x74
call fcn.00422895
lea ecx, [esp + 0x308]
call fcn.004204c9
lea ecx, [esp + 0x270]
mov byte [esp + 0x66f0], 0x72
call fcn.004204c9
mov esi, dword [esp + 0x50]
mov eax, dword [esp + esi*8 + 0x1e98]
test eax, eax
je 0x45246b
push eax
lea eax, [esp + 0x2dc]
push str._0x_x_
push eax
call fcn.004777e0
add esp, 0xc
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x66f4], 0x75
call fcn.00422895
lea ecx, [esp + 0x2d8]
mov byte [esp + 0x66f0], 0x72
call fcn.004204c9
push 0x500a9c
lea ecx, [esp + 0x40]
call fcn.0042421e
lea ecx, [esp + 0xec]
mov byte [esp + 0x66f0], 0x6c
call fcn.004204c9
inc esi
mov dword [esp + 0x50], esi
cmp esi, dword [esp + 0x1e90]
jb 0x452368
push dword [esp + 0x30]
lea eax, [esp + 0x1a70]
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0x38]
call fcn.004970b0
test eax, eax
jne 0x4521fb
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
cmp dword [esp + 0x34], eax
jne 0x4524ed
push str.No_active_virtual_apps
call fcn.00422827
call fcn.0044bbf8
pop ecx
pop ecx
jmp 0x45197e
lea eax, [esp + 0x44]
jmp 0x450eb4
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
push 0x5472b8
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x452529
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
lea esi, [esp + 0xb4]
call fcn.00497390
mov dword [esp + 0x66f0], 0x176
and dword [esp + 0x30], 0
jmp 0x452560
push dword [0x5472c4]
lea eax, [esp + 0x4110]
push eax
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x452590
push 1
lea eax, [esp + 0x38e8]
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0x3c]
call fcn.004970b0
test eax, eax
jne 0x452547
lea eax, [esp + 0xb4]
call fcn.004973b0
jmp 0x44ec32
push 0x2bc
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0xb4]
mov dword [esp + 0x66f0], 4
call fcn.004973b0
jmp 0x452529
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
push 0x5472b8
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x4525ea
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
push 0x515594
call fcn.004ccc70
mov edx, dword [esp + 0x28]
pop ecx
mov ecx, dword [esp + 0x38]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0xfc]
call fcn.00422827
push ecx
mov dword [esp + 0x66f4], 0x177
mov ecx, esp
mov dword [esp + 0x14], esp
mov ebx, 0x50504c
push ebx
mov dword [esp + 0xa8], esi
lea edi, [esp + 0xa8]
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0x78
lea eax, [esp + 0x100]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
lea eax, [esp + 0x280]
push eax
mov byte [esp + 0x66fc], 0x77
call fcn.0047b9d0
add esp, 0xc
mov byte [esp + 0x66f0], 0x79
cmp dword [esp + 0xa0], 0xffffffff
jne 0x452698
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.InactivitySec_not_specified
jmp 0x44da8a
push dword [esp + 0x278]
call fcn.004cf5e1
pop ecx
mov dword [esp + 0x78], eax
cmp eax, esi
jne 0x4526c4
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Incorrect_InactivitySec
jmp 0x44da8a
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push ebx
lea edi, [esp + 0xa8]
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0x7a
lea eax, [esp + 0x100]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
lea eax, [esp + 0x338]
push eax
mov byte [esp + 0x66fc], 0x79
call fcn.0047b9d0
add esp, 0xc
mov byte [esp + 0x66f0], 0x7b
cmp dword [esp + 0xa0], 0xffffffff
jne 0x452735
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.TimeoutSec_not_specified
jmp 0x44da8a
push dword [esp + 0x330]
call fcn.004cf5e1
mov ecx, esp
mov dword [esp + 0x14], esp
push ebx
mov dword [esp + 0x54], eax
lea edi, [esp + 0xa8]
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0x7c
lea eax, [esp + 0x100]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
lea eax, [esp + 0x288]
push eax
mov byte [esp + 0x66fc], 0x7b
call fcn.0047b9d0
add esp, 0xc
mov byte [esp + 0x66f0], 0x7d
cmp dword [esp + 0xa0], 0xffffffff
jne 0x4527b0
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x45272b
push str.true
lea eax, [esp + 0x284]
call fcn.004228aa
mov edi, eax
neg edi
sbb edi, edi
lea eax, [esp + 0x574]
inc edi
push eax
mov dword [esp + 0x1c], edi
call fcn.004563e4
lea eax, [esp + 0x3b4]
mov byte [esp + 0x66f0], 0x7e
push eax
mov dword [esp + 0x2c], esi
mov dword [esp + 0x6c], esi
call fcn.00429c03
mov byte [esp + 0x66f0], 0x7f
xor ebx, ebx
lea esi, [esp + 0xb4]
mov dword [esp + 0x58], ebx
call fcn.00497390
mov byte [esp + 0x66f0], 0x80
lea eax, [esp + 0x3b4]
mov dword [esp + 0x74], ebx
call fcn.004562f3
push 1
lea eax, [esp + 0x2498]
push eax
mov eax, esi
push eax
lea eax, [esp + 0x80]
call fcn.004970b0
test eax, eax
je 0x452aa3
push dword [0x5472c4]
lea eax, [esp + 0x2cc0]
push eax
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x452a3e
mov dword [esp + 0x58], 1
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x2c], ebx
cmp dword [esp + 0x28b8], ebx
jbe 0x45297c
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + eax*8 + 0x28bc]
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x3b8]
mov dword [esp + 0x54], esi
call fcn.00456295
push esi
push ebx
push 0x400
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [esp + 0x30], eax
cmp eax, ebx
je 0x45294d
and dword [esp + 0x404], 0
and dword [esp + 0x408], 0
push 0xa
pop ecx
xor eax, eax
lea edi, [esp + 0x40c]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x404]
push eax
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
mov edi, dword [esp + 0x424]
add edi, dword [esp + 0x41c]
mov esi, dword [esp + 0x428]
adc esi, dword [esp + 0x420]
lea eax, [esp + 0x50]
push eax
lea ebx, [esp + 0x578]
call fcn.00456435
mov ecx, edi
sub ecx, dword [eax]
mov edx, esi
sbb edx, dword [eax + 4]
add dword [esp + 0x1c], ecx
lea eax, [esp + 0x50]
push eax
adc dword [esp + 0x24], edx
call fcn.00456435
push dword [esp + 0x30]
mov dword [eax], edi
mov dword [eax + 4], esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [esp + 0x18]
xor ebx, ebx
inc dword [esp + 0x2c]
mov eax, dword [esp + 0x2c]
cmp eax, dword [esp + 0x28b8]
jb 0x452887
cmp dword [esp + 0x20], ebx
ja 0x452a0e
jb 0x45297c
cmp dword [esp + 0x1c], 0x2800
ja 0x452a0e
add dword [esp + 0x28], 0x1f4
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [esp + 0x2c]
push dword [esp + 0x24]
push dword [esp + 0x28c4]
push dword [0x5472c4]
push str.WaitForInactivity__s_:__d_processes:_overall_disk_activity_delta_d_bytes___Inactive___d_msec
push eax
call fcn.004777e0
add esp, 0x18
call fcn.0044b362
mov eax, dword [esp + 0x7c]
imul eax, eax, 0x3e8
cmp dword [esp + 0x2c], eax
pop ecx
jl 0x452a3e
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x5472c4]
push str.WaitForInactivity__s_:_inactivity_threshold_reached__quitting__success_
push eax
call fcn.004777e0
add esp, 0xc
call fcn.0044b362
pop ecx
cmp edi, ebx
je 0x452a08
sub esp, 0x18
mov eax, esp
mov dword [esp + 0x28], esp
lea ecx, [esp + 0x3cc]
push ecx
push eax
call fcn.004561fa
call fcn.0044c596
add esp, 0x18
push ebx
jmp 0x44da95
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [esp + 0x20]
mov dword [esp + 0x30], ebx
push dword [esp + 0x28c0]
push dword [0x5472c4]
push str.WaitForInactivity__s_:__d_processes:_overall_disk_activity_delta_d_bytes___Active
push eax
call fcn.004777e0
add esp, 0x14
call fcn.0044b362
pop ecx
push 1
lea eax, [esp + 0x2498]
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0x80]
call fcn.004970b0
test eax, eax
jne 0x452849
cmp dword [esp + 0x58], ebx
je 0x452aa3
mov esi, 0x1f4
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esp + 0x4c]
add dword [esp + 0x68], esi
imul eax, eax, 0x3e8
cmp dword [esp + 0x68], eax
jge 0x452ac9
lea eax, [esp + 0xb4]
mov byte [esp + 0x66f0], 0x7f
call fcn.004973b0
jmp 0x452800
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x5472c4]
push str.WaitForInactivity__s_:_no_longer_running__quitting__success_
push eax
call fcn.004777e0
add esp, 0xc
call fcn.0044b362
pop ecx
jmp 0x452a08
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x5472c4]
push str.WaitForInactivity__s_:_timeout_reached__quitting__cancelled_
push eax
call fcn.004777e0
add esp, 0xc
call fcn.0044b362
pop ecx
cmp edi, ebx
je 0x452b0d
sub esp, 0x18
mov eax, esp
mov dword [esp + 0x28], esp
lea ecx, [esp + 0x3cc]
push ecx
push eax
call fcn.004561fa
call fcn.0044c596
add esp, 0x18
push 0x14
jmp 0x44da95
lea eax, [esp + 0x2e0]
push eax
mov eax, dword [esp + 0x78]
mov eax, dword [eax + 0x44]
call fcn.0043199e
lea eax, [esp + 0x2e0]
push eax
call fcn.00431adb
jmp 0x44da94
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.AutoUpdate
call fcn.00422827
call fcn.0044b392
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
mov esi, 0x5472b8
push esi
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x452b83
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x547300]
push str.AutoUpdate_s
push eax
call fcn.004777e0
add esp, 0xc
call fcn.0044b392
mov ecx, 0x547300
mov dword [esp], str.https:__online.cameyo.com
call fcn.00422880
push str.0000
mov ecx, 0x547304
call fcn.00422880
mov ecx, esi
call fcn.004abe10
jmp 0x454495
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.VirtRegSyncExport
call fcn.00422827
call fcn.0044b392
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
push 0x5472b8
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x452c17
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
call fcn.0044867f
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
push str.VirtRegSyncExport:_bRet_d
push ecx
call fcn.004777e0
add esp, 0xc
call fcn.0044b392
pop ecx
jmp 0x454495
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.StartStreaming:AppIDSkype
call fcn.00422827
call fcn.004256e3
pop ecx
jmp 0x452c37
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
push 0x5472b8
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x452c8b
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.open
xor ebx, ebx
call fcn.00422827
push esi
push ecx
mov dword [esp + 0x66fc], 0x183
mov eax, esp
mov dword [esp + 0x28], esp
push dword [0x547314]
xor edi, edi
push str._select___s_
push eax
call fcn.004777e0
add esp, 8
mov byte [esp + 0x6700], 0x84
mov ecx, esp
mov dword [esp + 0x50], esp
push str.explorer.exe
call fcn.00422827
mov dword [esp + 0x6700], 4
call fcn.00476120
add esp, 0x10
jmp 0x454495
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.SvcRegister
call fcn.00422827
call fcn.0044b392
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
mov edi, 0x5472b8
push edi
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x452d40
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
mov ecx, edi
call fcn.004293a3
mov ebx, eax
cmp ebx, esi
jne 0x452d64
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_mount_virtual_registry
jmp 0x44da8a
call fcn.00483300
push dword [0x5433cc]
push ebx
push edi
call fcn.00421aeb
add esp, 0xc
push dword [0x5433cc]
mov edi, eax
cmp edi, esi
jne 0x452d93
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Success
jmp 0x452da4
cmp edi, 5
jne 0x452db2
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_services_to_register
call fcn.00422827
call fcn.0044bbf8
pop ecx
pop ecx
jmp 0x452df7
lea eax, [esp + 0x28c]
push edi
push eax
call fcn.0047ec40
add esp, 4
mov dword [esp + 0x66f8], 0x185
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Failed_registering_services:__s
push ecx
call fcn.004777e0
add esp, 0xc
call fcn.0044bbf8
pop ecx
pop ecx
lea ecx, [esp + 0x288]
call fcn.004204c9
push edi
jmp 0x44da95
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.SvcStart
call fcn.00422827
call fcn.0044b392
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
mov edi, 0x5472b8
push edi
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x452e46
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
mov ecx, edi
call fcn.0042233d
push dword [0x5433cc]
mov edi, eax
cmp edi, esi
je 0x452d85
cmp edi, 5
jne 0x452e73
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_services_to_start
jmp 0x452da4
lea eax, [esp + 0x314]
push edi
push eax
call fcn.0047ec40
add esp, 4
mov dword [esp + 0x66f8], 0x186
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Failed_starting_services:__s
push ecx
call fcn.004777e0
add esp, 0xc
call fcn.0044bbf8
pop ecx
pop ecx
lea ecx, [esp + 0x310]
jmp 0x452df2
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.SvcRegisterStart
call fcn.00422827
call fcn.0044b392
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
mov edi, 0x5472b8
push edi
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x452f01
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
mov ecx, edi
call fcn.004293a3
mov ebx, eax
cmp ebx, esi
jne 0x452f20
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x452d5a
call fcn.00483300
push dword [0x5433cc]
push ebx
push edi
call fcn.00421aeb
add esp, 0xc
mov ebx, str.Failed_registering_services:__s
cmp eax, 5
jne 0x452f5f
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_services_to_register
call fcn.00422827
call fcn.0044bbf8
pop ecx
pop ecx
jmp 0x452fb5
cmp eax, esi
je 0x452fb5
push dword [0x5433cc]
push eax
lea eax, [esp + 0x298]
push eax
call fcn.0047ec40
add esp, 4
mov dword [esp + 0x66f8], 0x187
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push ebx
push ecx
call fcn.004777e0
add esp, 0xc
call fcn.0044bbf8
pop ecx
pop ecx
lea ecx, [esp + 0x290]
mov dword [esp + 0x66f0], 4
call fcn.004204c9
mov ecx, edi
call fcn.0042233d
push dword [0x5433cc]
mov edi, eax
cmp edi, esi
je 0x452d85
cmp edi, 5
je 0x452d98
lea eax, [esp + 0x2ec]
push edi
push eax
call fcn.0047ec40
add esp, 4
mov dword [esp + 0x66f8], 0x188
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push ebx
push ecx
call fcn.004777e0
add esp, 0xc
call fcn.0044bbf8
pop ecx
pop ecx
lea ecx, [esp + 0x2e8]
jmp 0x452df2
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.SvcStop
call fcn.00422827
call fcn.0044b392
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
mov edi, 0x5472b8
push edi
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x45305f
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
push esi
mov ecx, edi
call fcn.00421edd
mov edi, eax
pop ecx
push dword [0x5433cc]
cmp edi, esi
je 0x452d85
cmp edi, 5
jne 0x45308e
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_services_to_stop
jmp 0x452da4
lea eax, [esp + 0x29c]
push edi
push eax
call fcn.0047ec40
add esp, 4
mov dword [esp + 0x66f8], 0x189
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Failed_stopping_services:__s
push ecx
call fcn.004777e0
add esp, 0xc
call fcn.0044bbf8
pop ecx
pop ecx
lea ecx, [esp + 0x298]
jmp 0x452df2
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.SvcRemove
call fcn.00422827
call fcn.0044b392
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
mov edi, 0x5472b8
push edi
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x45311c
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
push 1
mov ecx, edi
call fcn.00421edd
mov edi, eax
pop ecx
push dword [0x5433cc]
cmp edi, esi
je 0x452d85
cmp edi, 5
jne 0x45314c
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_services_to_remove
jmp 0x452da4
lea eax, [esp + 0x32c]
push edi
push eax
call fcn.0047ec40
add esp, 4
mov dword [esp + 0x66f8], 0x18a
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Failed_removing_services:__s
push ecx
call fcn.004777e0
add esp, 0xc
call fcn.0044bbf8
pop ecx
pop ecx
lea ecx, [esp + 0x328]
jmp 0x452df2
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.ScmDirectInit
call fcn.00422827
call fcn.0044b392
mov dword [esp], 0x515d78
call fcn.004ccc70
mov edx, dword [esp + 0x28]
pop ecx
mov ecx, dword [esp + 0x38]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x2a4]
call fcn.00422827
push ecx
mov dword [esp + 0x66f4], 0x18b
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
mov ebx, 0x5472b8
push ebx
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x45320e
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
push ecx
lea eax, [esp + 0x2a4]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
mov edi, 0x547350
call fcn.00422812
call fcn.00428ddb
pop ecx
mov edi, ebx
call fcn.0042271f
jmp 0x44da94
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.RepoSync
call fcn.00422827
call fcn.0044b392
mov eax, dword [esp + 0x3c]
pop ecx
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x184]
call fcn.00422827
lea eax, [esp + 0x5ac]
push eax
mov dword [esp + 0x66f4], 0x18c
call fcn.00429c03
lea eax, [esp + 0x594]
push eax
mov byte [esp + 0x66f4], 0x8d
call fcn.00429c03
lea eax, [esp + 0x5c4]
push eax
mov byte [esp + 0x66f4], 0x8e
call fcn.00429c03
push esi
lea eax, [esp + 0x5c8]
push eax
lea eax, [esp + 0x59c]
push eax
lea eax, [esp + 0x5b8]
push eax
push ecx
mov byte [esp + 0x6704], 0x8f
lea eax, [esp + 0x194]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
push ecx
mov byte [esp + 0x6708], 0x90
lea eax, [esp + 0x198]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
mov byte [esp + 0x6708], 0x8f
call fcn.00442a07
add esp, 0x18
push eax
jmp 0x44da95
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.MergeRegistry
call fcn.00422827
call fcn.0044b392
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
mov edi, 0x5472b8
push edi
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x45335a
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
push edi
call fcn.00443d05
pop ecx
mov edi, eax
lea eax, [esp + 0x2f0]
push edi
push eax
call fcn.0047ec40
add esp, 4
mov ecx, esp
mov dword [esp + 0x66f4], 0x191
mov dword [esp + 0x14], esp
push dword [eax]
push edi
push str.Loader_MergeRegistry___d__s_
push ecx
call fcn.004777e0
add esp, 0x10
call fcn.0044b362
pop ecx
lea ecx, [esp + 0x2f0]
mov dword [esp + 0x66f0], 4
call fcn.004204c9
push dword [0x5433cc]
cmp edi, esi
je 0x452d85
lea eax, [esp + 0x2ac]
push edi
push eax
call fcn.0047ec40
add esp, 4
mov dword [esp + 0x66f8], 0x192
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Failed:__s
push ecx
call fcn.004777e0
add esp, 0xc
call fcn.0044bbf8
pop ecx
pop ecx
lea ecx, [esp + 0x2a8]
jmp 0x452df2
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.OpenFile
call fcn.00422827
call fcn.0044b392
mov eax, dword [esp + 0x3c]
pop ecx
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x174]
call fcn.00422827
push ecx
mov dword [esp + 0x66f4], 0x193
lea eax, [esp + 0x174]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
lea eax, [esp + 0x31c]
push eax
call fcn.00477870
pop ecx
pop ecx
mov edi, eax
mov byte [esp + 0x66f0], 0x94
call fcn.0042ca5c
push eax
lea ecx, [esp + 0x30]
call fcn.00422812
lea ecx, [esp + 0x318]
mov byte [esp + 0x66f0], 0x96
call fcn.004204c9
mov eax, dword [esp + 0x2c]
cmp dword [eax - 0xc], esi
jne 0x4534b0
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.File_has_no_extension
jmp 0x44da8a
lea ebx, [esp + 0x2c]
call fcn.00456091
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
push 0x5472b8
call fcn.0042863f
xor ebx, ebx
pop ecx
pop ecx
cmp al, bl
jne 0x4534ee
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
mov dword [esp + 0x168], ebx
push 0x3b
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x547394
lea edi, [esp + 0x174]
call fcn.00422812
lea eax, [esp + 0x9c]
push eax
call fcn.0047b880
add esp, 0xc
or esi, 0xffffffff
mov byte [esp + 0x66f0], 0x97
cmp dword [esp + 0x168], esi
je 0x453779
mov eax, dword [esp + 0x94]
cmp dword [eax - 0xc], ebx
jne 0x453559
lea ecx, [esp + 0x94]
mov byte [esp + 0x66f0], 0x96
call fcn.004204c9
jmp 0x4534f5
push 0x3e
push ecx
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
mov dword [esp + 0xd0], ebx
lea edi, [esp + 0xd0]
call fcn.00422812
lea eax, [esp + 0xe8]
push eax
call fcn.0047b880
add esp, 0xc
mov byte [esp + 0x66f0], 0x98
cmp dword [esp + 0xc4], esi
je 0x4535e1
push 0x3e
push ecx
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.00422812
lea eax, [esp + 0x114]
push eax
call fcn.0047b880
add esp, 0xc
mov byte [esp + 0x66f0], 0x99
cmp dword [esp + 0xc4], esi
jne 0x4535f2
lea ecx, [esp + 0x10c]
call fcn.004204c9
lea ecx, [esp + 0xe0]
call fcn.004204c9
jmp 0x453543
mov dword [esp + 0x190], ebx
push 0x2c
push ecx
lea eax, [esp + 0xe8]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
lea edi, [esp + 0x19c]
call fcn.00422812
lea eax, [esp + 0xac]
push eax
call fcn.0047b880
add esp, 0xc
mov byte [esp + 0x66f0], 0x9a
cmp dword [esp + 0x190], esi
je 0x453768
mov eax, dword [esp + 0xa4]
cmp dword [eax - 0xc], ebx
jne 0x45365d
lea ecx, [esp + 0xa4]
mov byte [esp + 0x66f0], 0x99
call fcn.004204c9
jmp 0x4535f9
push dword [esp + 0x2c]
lea eax, [esp + 0xa8]
call fcn.004228aa
test eax, eax
jne 0x453647
lea eax, [esp + 0x10c]
push eax
lea ecx, [esp + 0x54]
call fcn.00422812
mov byte [esp + 0x66f0], 0x9b
push dword [esp + 0x170]
lea eax, [esp + 0x54]
push 0x511d3c
push eax
call fcn.0042994b
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [esp + 0x54]
push str.OpenFile:_executing:__s
push eax
call fcn.004777e0
add esp, 0xc
call fcn.0044b362
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
push dword [esp + 0x50]
lea eax, [esp + 0x2b4]
push str._exec__s
push eax
call fcn.004777e0
mov eax, dword [eax]
add esp, 0xc
push ebx
push ebx
push eax
push dword [esp + 0x20]
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
xor ecx, ecx
cmp eax, 0x20
setg cl
mov dword [esp + 0x30], ecx
lea ecx, [esp + 0x2b0]
call fcn.004204c9
push dword [esp + 0x30]
lea eax, [esp + 0x2fc]
push eax
call fcn.0047ed20
pop ecx
pop ecx
mov edi, eax
mov byte [esp + 0x66f0], 0x9c
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
push dword [edi]
push str.OpenFile:_bExecOK_s__LE_d
push ecx
call fcn.004777e0
add esp, 0x10
call fcn.0044b362
pop ecx
lea ecx, [esp + 0x2f8]
call fcn.004204c9
cmp dword [esp + 0x30], ebx
jne 0x452a08
call esi
jmp 0x45330b
lea ecx, [esp + 0xa4]
call fcn.004204c9
jmp 0x4535d5
lea ecx, [esp + 0x94]
mov byte [esp + 0x66f0], 0x96
call fcn.004204c9
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x34]
push str.Application_does_not_handle_this_type_of_files:__s
jmp 0x44dc1b
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.c:_now
call fcn.00422827
call fcn.0047a370
pop ecx
cmp eax, esi
je 0x453834
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.CAMEYO_VIRTUALSTORAGE
mov edi, 0x104
call fcn.00422827
lea eax, [esp + 0x33c]
push eax
mov ecx, edi
call fcn.0047df50
pop ecx
pop ecx
mov dword [esp + 0x66f0], 0x19d
mov eax, dword [eax]
or dword [esp + 0x3c], 4
cmp dword [eax - 0xc], esi
jne 0x453834
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.CAMEYO_STORAGEFILEDIALOGPATHS
call fcn.00422827
lea eax, [esp + 0x2bc]
push eax
mov ecx, edi
call fcn.0047df50
mov eax, dword [eax]
or dword [esp + 0x44], 8
pop ecx
pop ecx
mov byte [esp + 0x37], 1
cmp dword [eax - 0xc], esi
je 0x453839
mov byte [esp + 0x37], 0
test byte [esp + 0x3c], 8
je 0x453851
and dword [esp + 0x3c], 0xfffffff7
lea ecx, [esp + 0x2b8]
call fcn.004204c9
mov dword [esp + 0x66f0], 4
test byte [esp + 0x3c], 4
je 0x45386f
lea ecx, [esp + 0x338]
call fcn.004204c9
cmp byte [esp + 0x37], 0
je 0x4538e4
mov edi, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
push 0x51613c
push 0x516140
call edi
lea eax, [esp + 0x23c]
push eax
call fcn.0048cfd0
pop ecx
mov dword [esp + 0x66f0], 0x19e
push dword [eax]
lea eax, [esp + 0x2c4]
push str.FS:_Profile_Outbound:_sDownload:1
push eax
call fcn.004777e0
add esp, 0xc
push dword [eax]
push str.CAMEYO_VIRTUALSTORAGE
call edi
lea ecx, [esp + 0x2c0]
call fcn.004204c9
lea ecx, [esp + 0x23c]
mov dword [esp + 0x66f0], 4
call fcn.004204c9
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.FileDialog
call fcn.00422827
call fcn.0044b392
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
push 0x5472b8
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x45392c
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x54741c
call fcn.00422812
call fcn.004a1ff0
pop ecx
lea eax, [esp + 0x430c]
push eax
call fcn.00432428
mov dword [esp + 0x66f0], 0x19f
mov ecx, dword [esp + 0x74]
lea eax, [esp + 0x430c]
push str._FileDialog:
mov dword [ecx + 0x20], eax
call fcn.004ccc70
mov edx, dword [esp + 0x28]
pop ecx
mov ecx, dword [esp + 0x38]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x94]
call fcn.00422827
lea ecx, [esp + 0x3c]
call fcn.0042048d
push ecx
mov byte [esp + 0x66f4], 0xa1
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x5092e8
mov dword [esp + 0x6c], esi
lea edi, [esp + 0x6c]
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0xa2
lea eax, [esp + 0x98]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
lea eax, [esp + 0x254]
push eax
mov byte [esp + 0x66fc], 0xa1
call fcn.0047b9d0
add esp, 0xc
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x66f4], 0xa3
call fcn.0042286b
lea ecx, [esp + 0x24c]
mov byte [esp + 0x66f0], 0xa1
call fcn.004204c9
cmp dword [esp + 0x64], 0xffffffff
jne 0x453a31
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Invalid_FileDialog_arguments
jmp 0x44da8a
push dword [esp + 0x3c]
call fcn.004cf5e1
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x5092e8
mov dword [esp + 0x7c], eax
lea edi, [esp + 0x6c]
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0xa4
lea eax, [esp + 0x98]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
lea eax, [esp + 0x25c]
push eax
mov byte [esp + 0x66fc], 0xa1
call fcn.0047b9d0
add esp, 0xc
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x66f4], 0xa5
call fcn.0042286b
lea ecx, [esp + 0x254]
mov byte [esp + 0x66f0], 0xa1
call fcn.004204c9
cmp dword [esp + 0x64], 0xffffffff
jne 0x453ac5
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x453a27
push dword [esp + 0x3c]
call fcn.004cf5e1
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x5092e8
mov dword [esp + 0x38], eax
lea edi, [esp + 0x6c]
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0xa6
lea eax, [esp + 0x98]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
lea eax, [esp + 0x294]
push eax
mov byte [esp + 0x66fc], 0xa1
call fcn.0047b9d0
add esp, 0xc
mov byte [esp + 0x66f0], 0xa7
cmp dword [esp + 0x64], 0xffffffff
jne 0x453b3b
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x453a27
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x5092e8
lea edi, [esp + 0x6c]
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0xa8
lea eax, [esp + 0x98]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
lea eax, [esp + 0x28c]
push eax
mov byte [esp + 0x66fc], 0xa7
call fcn.0047b9d0
add esp, 0xc
mov byte [esp + 0x66f0], 0xa9
cmp dword [esp + 0x64], 0xffffffff
jne 0x453ba5
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x453a27
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x5092e8
lea edi, [esp + 0x6c]
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0xaa
lea eax, [esp + 0x98]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
lea eax, [esp + 0x284]
push eax
mov byte [esp + 0x66fc], 0xa9
call fcn.0047b9d0
add esp, 0xc
mov byte [esp + 0x66f0], 0xab
cmp dword [esp + 0x64], 0xffffffff
jne 0x453c0f
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x453a27
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x5092e8
lea edi, [esp + 0x6c]
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0xac
lea eax, [esp + 0x98]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
lea eax, [esp + 0x27c]
push eax
mov byte [esp + 0x66fc], 0xab
call fcn.0047b9d0
add esp, 0xc
mov byte [esp + 0x66f0], 0xad
cmp dword [esp + 0x64], 0xffffffff
jne 0x453c79
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x453a27
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x5092e8
lea edi, [esp + 0x6c]
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0xae
lea eax, [esp + 0x98]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
lea eax, [esp + 0x264]
push eax
mov byte [esp + 0x66fc], 0xad
call fcn.0047b9d0
add esp, 0xc
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x66f4], 0xaf
call fcn.0042286b
lea ecx, [esp + 0x25c]
mov byte [esp + 0x66f0], 0xad
call fcn.004204c9
cmp dword [esp + 0x64], 0xffffffff
jne 0x453d01
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x453a27
push dword [esp + 0x3c]
call fcn.004cf5e1
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x5092e8
mov dword [esp + 0x80], eax
lea edi, [esp + 0x6c]
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0xb0
lea eax, [esp + 0x98]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
lea eax, [esp + 0x26c]
push eax
mov byte [esp + 0x66fc], 0xad
call fcn.0047b9d0
add esp, 0xc
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x66f4], 0xb1
call fcn.0042286b
lea ecx, [esp + 0x264]
mov byte [esp + 0x66f0], 0xad
call fcn.004204c9
cmp dword [esp + 0x64], 0xffffffff
jne 0x453d98
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x453a27
push dword [esp + 0x3c]
call fcn.004cf5e1
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
push str.CE.Dlg._x
push ecx
call fcn.004777e0
lea eax, [esp + 0x15c]
add esp, 0xc
push eax
call fcn.00476eb0
pop ecx
pop ecx
lea eax, [esp + 0x43c]
push eax
mov byte [esp + 0x66f4], 0xb2
call fcn.00429c03
push esi
push esi
mov edi, str.CYO_FILEDIALOG_FILTERS
push edi
mov byte [esp + 0x66fc], 0xb3
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push edi
mov dword [esp + 0x20], eax
call fcn.00422827
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x270]
push eax
call fcn.0047df50
pop ecx
pop ecx
mov byte [esp + 0x66f0], 0xb4
mov dword [esp + 0x64], esi
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x5092e8
lea edi, [esp + 0x6c]
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0xb5
lea eax, [esp + 0x274]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
lea eax, [esp + 0x108]
push eax
mov byte [esp + 0x66fc], 0xb4
call fcn.0047b9d0
add esp, 0xc
mov byte [esp + 0x66f0], 0xb6
cmp dword [esp + 0x64], 0xffffffff
je 0x453ea5
lea eax, [esp + 0x100]
push eax
lea eax, [esp + 0x440]
call fcn.00422beb
lea ecx, [esp + 0x100]
mov byte [esp + 0x66f0], 0xb4
call fcn.004204c9
jmp 0x453e20
lea ecx, [esp + 0x100]
mov byte [esp + 0x66f0], 0xb4
call fcn.004204c9
sub esp, 0x18
mov eax, esp
mov dword [esp + 0x28], esp
lea ecx, [esp + 0x454]
push ecx
push eax
call fcn.0042aa92
mov byte [esp + 0x6708], 0xb7
push dword [esp + 0x90]
lea eax, [esp + 0x290]
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.00422812
push ecx
mov byte [esp + 0x6714], 0xb8
lea eax, [esp + 0x2a0]
mov ecx, esp
mov dword [esp + 0x64], esp
push eax
call fcn.00422812
push ecx
mov byte [esp + 0x6718], 0xb9
lea eax, [esp + 0x2ac]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00422812
push ecx
mov byte [esp + 0x671c], 0xba
lea eax, [esp + 0x2b8]
mov ecx, esp
mov dword [esp + 0xa4], esp
push eax
call fcn.00422812
push dword [esp + 0x5c]
lea esi, [esp + 0x433c]
push dword [esp + 0xa4]
mov byte [esp + 0x6724], 0xb4
call fcn.00432852
mov ecx, esi
call fcn.004bf4e3
cmp eax, 1
jne 0x4540e8
push ebx
lea ecx, [esp + 0x148]
call fcn.00422827
push ecx
mov byte [esp + 0x66f4], 0xbb
mov eax, esp
mov dword [esp + 0x14], esp
push dword [esp + 0x150]
push str.FileDialog:_writing_response_to__s:
push eax
call fcn.004777e0
add esp, 0xc
call fcn.0044b362
mov eax, dword [esp + 0x4444]
pop ecx
push ebx
lea ecx, [esp + 0xec]
mov dword [esp + 0x1c], eax
call fcn.00422827
lea eax, [esp + 0x84]
lea ecx, [esp + 0x447c]
mov byte [esp + 0x66f0], 0xbc
call fcn.00422bc1
jmp 0x45404a
lea esi, [esp + 0x84]
call fcn.00422da5
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push dword [eax]
push str.___FileDialog:__s
push ecx
call fcn.004777e0
add esp, 0xc
call fcn.0044b362
mov eax, dword [esp + 0xec]
cmp dword [eax - 0xc], 0
pop ecx
je 0x45402c
push 0x5092e8
lea ecx, [esp + 0xec]
call fcn.0042421e
lea esi, [esp + 0x84]
call fcn.00422da5
push eax
lea ecx, [esp + 0xec]
call fcn.00422895
call fcn.00422dcd
lea eax, [esp + 0x39c]
lea ecx, [esp + 0x447c]
call fcn.00422bd6
mov edi, eax
lea esi, [esp + 0x84]
call fcn.00422d88
test al, al
jne 0x453fe5
push dword [esp + 0xe8]
lea eax, [esp + 0x298]
push dword [esp + 0x1c]
push str._d__s
push eax
call fcn.004777e0
add esp, 0x10
push eax
lea ecx, [esp + 0x148]
mov byte [esp + 0x66f4], 0xbd
call fcn.0042286b
lea ecx, [esp + 0x294]
mov byte [esp + 0x66f0], 0xbc
call fcn.004204c9
mov ecx, dword [esp + 0x144]
mov eax, dword [ecx - 0xc]
push ecx
push ecx
lea edi, [eax + eax]
lea eax, [esp + 0x154]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.00422812
call fcn.004781b0
jmp 0x44ec30
push 0x800704c7
jmp 0x44da95
push str.Cameyo.exe__UpgradePkg_
call fcn.00422827
call fcn.0044b392
pop ecx
lea ecx, [esp + 0x108]
call fcn.0042048d
mov byte [esp + 0x66f0], 0xc0
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4]
lea ecx, [esp + 0x124]
call fcn.00422827
push ecx
mov byte [esp + 0x66f4], 0xc1
lea eax, [esp + 0x124]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
call fcn.0047a330
pop ecx
cmp eax, esi
jne 0x454171
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x128]
push str._s_not_found
jmp 0x44dc1b
push esi
lea eax, [esp + 0x10c]
push eax
push ecx
lea eax, [esp + 0x12c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
push ecx
mov byte [esp + 0x6700], 0xc2
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004766c0
pop ecx
mov byte [esp + 0x6700], 0xc1
call fcn.00448996
add esp, 0x10
push dword [0x5433cc]
cmp eax, esi
jne 0x4541d6
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x110]
push 0x513ee4
jmp 0x44f4c0
push eax
lea eax, [esp + 0x3a0]
push eax
call fcn.0047ec40
add esp, 4
mov byte [esp + 0x66f8], 0xc3
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x110]
push dword [eax]
push str._s:__s
push ecx
jmp 0x4510c2
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.AuthCheck
call fcn.00422827
call fcn.0044b392
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
mov esi, 0x5472b8
push esi
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x454252
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
call fcn.004399d4
xor edi, edi
mov dword [esp + 0x18], eax
cmp eax, edi
je 0x454302
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x24]
push str._AuthCheck:Force
push dword [eax + ecx*4]
call fcn.004cca64
pop ecx
pop ecx
lea eax, [esp + 0x1a4]
push eax
push ecx
mov dword [esp + 0x18], esp
mov ebx, esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.AuthToken.dat
mov dword [esp + 0x1b4], edi
call fcn.00422827
push ebx
mov ecx, edi
call fcn.0048a080
pop ecx
pop ecx
mov ecx, dword [esp + 0x20]
mov edx, esi
call fcn.004390eb
push dword [0x5433cc]
mov esi, eax
push ecx
mov dword [esp + 0x18], esp
test esi, esi
je 0x4542d7
mov ecx, esp
push str.Allowed_to_run_this_package
call fcn.00422827
jmp 0x4542ec
mov eax, esp
push 0x5473a0
push str.Denied:_n
push eax
call fcn.00422acb
add esp, 0xc
call fcn.0044bbf8
neg esi
sbb esi, esi
pop ecx
and esi, 0xffffffef
pop ecx
add esi, 0x11
jmp 0x44da94
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_authentication_server_specified_in_this_package
jmp 0x44da8a
push str.Vintegrate:
lea ecx, [esp + 0x114]
call fcn.00422827
mov dword [esp + 0x66f0], 0x15b
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x24]
lea edi, [eax + ecx*4]
push str._VintegrateRecursive
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
je 0x454371
push 0x515338
call fcn.004ccc70
pop ecx
push eax
push str._VintegrateRecursive:
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
jne 0x454382
push str.VintegrateRecursive:
lea ecx, [esp + 0x114]
call fcn.00422880
push str._Windows_Explorer.exe
lea ecx, [esp + 0x134]
call fcn.00422827
mov byte [esp + 0x66f0], 0x5c
mov edi, dword [edi]
push 0x3a
push edi
call fcn.004cdc18
pop ecx
pop ecx
cmp eax, esi
je 0x4543bb
add eax, 2
push eax
lea ecx, [esp + 0x134]
call fcn.00422880
push 1
push esi
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x1518]
push eax
call fcn.00490280
push 0xffffffffffffffff
mov byte [esp + 0x66f4], 0x5d
push dword [esp + 0x50]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.00422827
push ecx
mov eax, esp
mov byte [esp + 0x6700], 0x5e
mov dword [esp + 0x2c], esp
lea ecx, [esp + 0x140]
push ecx
lea ecx, [esp + 0x124]
push ecx
push eax
call fcn.0042a9ee
add esp, 8
mov byte [esp + 0x6704], 0x5f
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
call fcn.00422812
push esi
push ecx
mov byte [esp + 0x670c], 0x60
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
lea eax, [esp + 0x1528]
push eax
mov byte [esp + 0x6710], 0x5d
call fcn.0043e6ec
add esp, 0x20
lea eax, [esp + 0x150c]
mov byte [esp + 0x66f0], 0x5c
call fcn.004259b3
lea ecx, [esp + 0x130]
call fcn.004204c9
lea ecx, [esp + 0x110]
call fcn.004204c9
lea ecx, [esp + 0x48]
call fcn.004204c9
lea ecx, [esp + 0x14]
call fcn.004204c9
lea ecx, [esp + 0x6c]
call fcn.004204c9
jmp 0x451f43
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
push 0x5472b8
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x44dc40
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
lea ecx, [esp + 0x2c]
call fcn.0042048d
lea ecx, [esp + 0x128]
mov dword [esp + 0x66f0], 0x10b
call fcn.0042048d
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x66f4], 0xc
call fcn.00422812
mov byte [esp + 0x66f0], 0xd
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x5c], ecx
jle 0x454548
mov ecx, dword [esp + 0x38]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x34]
call fcn.00422880
push 1
push esi
push ecx
lea eax, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0xf78]
push eax
call fcn.00490280
mov byte [esp + 0x66f0], 0xe
push dword [0x5433cc]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0xf78]
push eax
call fcn.0044bc72
add esp, 0x10
cmp dword [esp + 0xff4], esi
jne 0x4545b4
push str.FAILED_LOADING_CONTAINERS__n
lea ebx, [esp + 0x30]
call fcn.0042580a
pop ecx
xor esi, esi
lea eax, [esp + 0x128]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Main
call fcn.00422827
push 3
lea edi, [esp + 0xf78]
call fcn.004924d0
mov eax, dword [esp + 0x128]
cmp dword [eax - 0xc], esi
jne 0x4545f5
push str.Cannot_obtain_INI_info_from_resource__n
lea ecx, [esp + 0x30]
call fcn.00424248
lea eax, [esp + 0x128]
push eax
lea ecx, [esp + 0x30]
call fcn.0042337e
push esi
push 0x504fcc
push dword [esp + 0x34]
jmp 0x450011
push str._SaveProperties_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea ecx, [esp + 0x28]
call fcn.0042048d
mov byte [esp + 0x66f0], 0xfe
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x24]
push str._SaveAllProperties
push dword [eax + ecx*4]
call fcn.004cca64
mov edi, eax
mov eax, dword [esp + 0x30]
neg edi
sbb edi, edi
pop ecx
inc edi
pop ecx
cmp dword [eax - 0xc], esi
jne 0x4546c9
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..xml
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0xff
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
lea eax, [esp + 0x1b4]
push eax
mov byte [esp + 0x66fc], 0xfe
call fcn.004779a0
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
mov dword [esp + 0x66f4], 0x100
call fcn.0042286b
mov dword [esp + 0x66f0], 0xfe
mov ecx, dword [esp + 0x1ac]
add ecx, 0xfffffff0
call fcn.0042001a
push 1
push esi
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0xca8]
push eax
call fcn.00490280
mov dword [esp + 0x66f0], 0x101
push dword [0x5433cc]
lea eax, [esp + 0x4c]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0xca8]
push eax
call fcn.0044bc72
add esp, 0x10
cmp dword [esp + 0xd24], esi
jne 0x454739
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x4500f7
sub esp, 0x90
mov eax, esp
mov dword [esp + 0xa0], esp
lea ecx, [esp + 0xd2c]
push ecx
push eax
call fcn.00455f58
push edi
push ecx
mov byte [esp + 0x6788], 2
lea eax, [esp + 0xe0]
mov ecx, esp
mov dword [esp + 0xb4], esp
push eax
call fcn.00422812
push ecx
mov byte [esp + 0x678c], 3
lea eax, [esp + 0xc4]
mov ecx, esp
mov dword [esp + 0xdc], esp
push eax
call fcn.00422812
mov byte [esp + 0x678c], 1
call fcn.004295d7
add esp, 0x9c
cmp eax, esi
jne 0x4547c7
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x30]
push str.Cannot_save_into:__s
jmp 0x44dc1b
lea eax, [esp + 0xc9c]
call fcn.00491160
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x30]
push str.Properties_exported_to:_n_s
jmp 0x44f4c0
lea eax, [esp + 0x2c]
push eax
call fcn.004767b0
mov byte [esp + 0x66f4], 0xa7
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x28]
lea edi, [eax + ecx*4]
mov dword [esp], 0x5144d0
call fcn.004ccc70
pop ecx
push eax
push str._CreateShortcuts:
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
test eax, eax
jne 0x45484d
push dword [edi]
lea ecx, [esp + 0x30]
call fcn.00422880
push 0x5144d0
call fcn.004ccc70
pop ecx
push esi
lea ecx, [esp + 0x30]
push ecx
call fcn.004228be
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
push 0x5472b8
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x454880
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
push 1
push esi
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x15a8]
push eax
call fcn.00490280
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x66fc], 0xa8
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0xa9
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6704], 0xaa
mov ecx, esp
mov dword [esp + 0x54], esp
push ebx
call fcn.00422827
push 2
push ecx
mov byte [esp + 0x670c], 0xab
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
lea eax, [esp + 0x15b8]
push eax
mov byte [esp + 0x6710], 0xa8
call fcn.0043e6ec
add esp, 0x20
push 0x5472c8
lea ecx, [esp + 0x34]
call fcn.00422812
lea eax, [esp + 0x68]
push eax
push 0x502014
lea eax, [esp + 0x94]
mov byte [esp + 0x66f8], 0xac
push eax
lea ecx, [esp + 0x3c]
mov dword [esp + 0x74], esi
call fcn.00429ac5
jmp 0x454e44
lea ecx, [esp + 0x28]
call fcn.0042048d
lea ecx, [esp + 0x24]
call fcn.0042048d
lea ecx, [esp + 0x38]
call fcn.0042048d
lea ecx, [esp + 0x4c]
call fcn.0042048d
push 0x3e
push ecx
mov byte [esp + 0x66f8], 0xb1
lea eax, [esp + 0x94]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
mov dword [esp + 0xa4], esi
lea edi, [esp + 0xa4]
call fcn.00422812
lea eax, [esp + 0x1bc]
push eax
call fcn.0047b880
add esp, 0xc
mov byte [esp + 0x66f0], 0xb2
call fcn.0042296d
push eax
lea ecx, [esp + 0x2c]
call fcn.0042286b
mov byte [esp + 0x66f0], 0xb1
mov ecx, dword [esp + 0x1b4]
add ecx, 0xfffffff0
call fcn.0042001a
cmp dword [esp + 0x98], 0xffffffff
je 0x454de2
push 0x3e
push ecx
lea eax, [esp + 0x94]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.00422812
lea eax, [esp + 0x1c4]
push eax
call fcn.0047b880
add esp, 0xc
mov byte [esp + 0x66f0], 0xb3
call fcn.0042296d
push eax
lea ecx, [esp + 0x28]
call fcn.0042286b
mov byte [esp + 0x66f0], 0xb1
mov ecx, dword [esp + 0x1bc]
add ecx, 0xfffffff0
call fcn.0042001a
cmp dword [esp + 0x98], 0xffffffff
je 0x454de2
push 0x3e
push ecx
lea eax, [esp + 0x94]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.00422812
lea eax, [esp + 0x1cc]
push eax
call fcn.0047b880
add esp, 0xc
mov byte [esp + 0x66f0], 0xb4
call fcn.0042296d
push eax
lea ecx, [esp + 0x3c]
call fcn.0042286b
mov byte [esp + 0x66f0], 0xb1
mov ecx, dword [esp + 0x1c4]
add ecx, 0xfffffff0
call fcn.0042001a
cmp dword [esp + 0x98], 0xffffffff
jne 0x454ab8
push ebx
lea ecx, [esp + 0x3c]
call fcn.00422880
jmp 0x454b13
push 0x3e
push ecx
lea eax, [esp + 0x94]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
lea edi, [esp + 0xa4]
call fcn.00422812
lea eax, [esp + 0x1d4]
push eax
call fcn.0047b880
add esp, 0xc
mov byte [esp + 0x66f0], 0xb5
call fcn.0042296d
push eax
lea ecx, [esp + 0x50]
call fcn.0042286b
mov byte [esp + 0x66f0], 0xb1
mov ecx, dword [esp + 0x1cc]
add ecx, 0xfffffff0
call fcn.0042001a
cmp dword [esp + 0x98], 0xffffffff
jne 0x454b27
push ebx
lea ecx, [esp + 0x50]
call fcn.00422880
push dword [esp + 0x28]
lea eax, [esp + 0xd4]
push str._exec___s_
push eax
call fcn.004777e0
add esp, 0xc
mov byte [esp + 0x66f0], 0xb6
mov eax, dword [esp + 0x24]
cmp dword [eax - 0xc], esi
je 0x454b73
push 0x50a26c
lea ecx, [esp + 0xd4]
call fcn.0042421e
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0xd4]
call fcn.00422895
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
push ecx
mov edi, esp
mov byte [esp + 0x66f8], 0xb7
mov dword [esp + 0x24], esp
push 0x5c
push ecx
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00422812
push edi
call fcn.00477b10
lea eax, [esp + 0x168]
add esp, 0xc
push eax
mov byte [esp + 0x66fc], 0xb6
call fcn.00428f62
add esp, 0xc
push esi
push esi
push esi
push ecx
mov byte [esp + 0x6700], 0xb8
lea eax, [esp + 0x164]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.00422812
lea eax, [esp + 0x128]
push esi
push eax
call fcn.00489d60
add esp, 0x14
mov byte [esp + 0x66f4], 0xb9
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x50057c
call fcn.00422827
push ecx
mov eax, esp
mov byte [esp + 0x66f8], 0xba
mov dword [esp + 0x24], esp
push str..lnk
lea ecx, [esp + 0x44]
push ecx
push eax
call fcn.00422a76
add esp, 8
mov byte [esp + 0x66fc], 0xbb
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.00422812
lea edi, [esp + 0x1e0]
mov byte [esp + 0x66fc], 0xb9
call fcn.004770a0
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x1d4]
add ecx, 0xfffffff0
call fcn.0042001a
push ecx
lea eax, [esp + 0x11c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
call fcn.0047a330
pop ecx
cmp eax, esi
je 0x454c9e
lea eax, [esp + 0x118]
jmp 0x454cb8
push esi
lea ecx, [esp + 0x1e0]
call fcn.00422827
mov byte [esp + 0x66f0], 0xbc
or dword [esp + 0x3c], 2
mov eax, dword [eax]
push esi
push ecx
mov dword [esp + 0x20], eax
lea eax, [esp + 0x54]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.00422812
push ecx
mov dword [esp + 0x66fc], 0xbd
lea eax, [esp + 0xdc]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00422812
push ecx
mov byte [esp + 0x6700], 0xbe
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call fcn.00422812
push ecx
mov byte [esp + 0x6704], 0xbf
mov dword [esp + 0x8c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x90], esp
push 0x50057c
call fcn.00422827
push ecx
mov eax, esp
mov byte [esp + 0x670c], 0xc0
mov dword [esp + 0x90], esp
push str..lnk
lea ecx, [esp + 0x58]
push ecx
push eax
call fcn.00422a76
add esp, 8
mov byte [esp + 0x6710], 0xc1
lea eax, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x70], esp
push eax
call fcn.00422812
mov byte [esp + 0x6710], 0xbf
call fcn.004770a0
mov ecx, dword [esp + 0x38]
add esp, 0xc
mov byte [esp + 0x6704], 0xbc
call fcn.004a9320
add esp, 0x14
mov dword [esp + 0x66f0], 0xb9
test byte [esp + 0x3c], 2
je 0x454db5
mov ecx, dword [esp + 0x1dc]
and dword [esp + 0x3c], 0xfffffffd
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x118]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x154]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0xd0]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x38]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x28]
add ecx, 0xfffffff0
call fcn.0042001a
mov byte [esp + 0x66f0], 0xac
mov ecx, dword [esp + 0x8c]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [esp + 0x68]
push eax
push 0x502014
lea eax, [esp + 0x94]
push eax
lea ecx, [esp + 0x3c]
call fcn.00429ac5
cmp dword [esp + 0x68], 0xffffffff
jne 0x454950
mov byte [esp + 0x66f0], 0xac
mov ecx, dword [esp + 0x8c]
add ecx, 0xfffffff0
call fcn.0042001a
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5472c4]
push str.Shortcuts_created_for__s.
jmp 0x44f4c0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x2c]
call fcn.00422812
mov byte [esp + 0x66f0], 0x98
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x24]
lea edi, [eax + ecx*4]
push str._FullIntegrate
push dword [edi]
mov dword [esp + 0x7c], edi
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x455044
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
push 0x5472b8
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x454ef1
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
push dword [esp + 0x58]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x5472c4
call fcn.00422812
lea eax, [esp + 0xfc]
push eax
call fcn.00448940
add esp, 8
mov byte [esp + 0x66f4], 0x99
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x50057c
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0x9a
mov eax, esp
mov dword [esp + 0x24], esp
push dword [0x5472c4]
push str._s.host.exe
push eax
call fcn.004777e0
add esp, 8
mov byte [esp + 0x66fc], 0x9b
lea eax, [esp + 0x100]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.00422812
lea edi, [esp + 0x1f0]
mov byte [esp + 0x66fc], 0x99
call fcn.004770a0
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x66f4], 0x9c
call fcn.0042286b
mov byte [esp + 0x66f0], 0x99
mov ecx, dword [esp + 0x1e4]
add ecx, 0xfffffff0
call fcn.0042001a
mov esi, dword [esp + 0xf4]
call fcn.0047a410
test eax, eax
jne 0x454fd3
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_create_virtual_repository
jmp 0x44da8a
lea eax, [esp + 0x1ec]
push eax
call fcn.004766c0
mov eax, dword [eax]
pop ecx
push 0
push dword [esp + 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [esp + 0x1ec]
neg eax
sbb al, al
inc al
add ecx, 0xfffffff0
mov byte [esp + 0x37], al
call fcn.0042001a
cmp byte [esp + 0x37], 0
je 0x455027
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_copy_executable_to_repository
jmp 0x44da8a
mov byte [esp + 0x66f0], 0x98
mov ecx, dword [esp + 0xf4]
add ecx, 0xfffffff0
call fcn.0042001a
mov edi, dword [esp + 0x74]
xor esi, esi
push 1
push esi
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x1098]
push eax
call fcn.00490280
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x66fc], 0x9d
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x9e
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6704], 0x9f
mov ecx, esp
mov dword [esp + 0x54], esp
push ebx
call fcn.00422827
push 2
push ecx
mov byte [esp + 0x670c], 0xa0
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
lea eax, [esp + 0x10a8]
push eax
mov byte [esp + 0x6710], 0x9d
call fcn.0043e6ec
push str._Integrate:once
push dword [edi]
call fcn.004cca64
add esp, 0x28
test eax, eax
jne 0x455224
push ebx
lea ecx, [esp + 0xb4]
call fcn.00422827
push esi
push esi
push esi
push ecx
mov byte [esp + 0x6700], 0xa1
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Registered
lea edi, [esp + 0xc4]
call fcn.00422827
mov byte [esp + 0x6700], 0xa2
push dword [0x5472c4]
lea eax, [esp + 0x208]
push str.SoftwareVOS_s
push eax
call fcn.004777e0
add esp, 8
mov byte [esp + 0x6704], 0xa3
or dword [esp + 0x50], 1
mov ecx, esp
mov dword [esp + 0x30], esp
push str.Integrated
push eax
push ecx
call fcn.00422a76
add esp, 0xc
mov dword [esp + 0x6704], 0xa4
call fcn.004893c0
push eax
mov byte [esp + 0x6708], 0xa5
call fcn.004782c0
add esp, 0x18
cmp eax, esi
je 0x455198
mov eax, dword [esp + 0xb0]
cmp dword [eax - 0xc], esi
je 0x455198
mov bl, 1
jmp 0x45519a
xor bl, bl
mov dword [esp + 0x66f0], 0xa1
test byte [esp + 0x3c], 1
je 0x4551bb
mov ecx, dword [esp + 0x1f4]
add ecx, 0xfffffff0
call fcn.0042001a
test bl, bl
je 0x45520d
push str.Success
lea eax, [esp + 0xb4]
call fcn.004228aa
push ecx
test eax, eax
mov dword [esp + 0x14], esp
mov eax, esp
jne 0x4551f2
push str._Integrate:once:_already_registered_successfully._Quitting.
push eax
call fcn.004777e0
pop ecx
pop ecx
call fcn.0044b362
jmp 0x44f4cf
push dword [esp + 0xb4]
push str._Integrate:once:_already_attempted_registration_before__but_failed:__s._Trying_integration_again.
push eax
call fcn.004777e0
add esp, 0xc
call fcn.0044b362
pop ecx
mov byte [esp + 0x66f0], 0x9d
mov ecx, dword [esp + 0xb0]
add ecx, 0xfffffff0
call fcn.0042001a
xor eax, eax
cmp dword [esp + 0x58], esi
push esi
setne al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.AllUsers
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0xa6
mov eax, esp
mov dword [esp + 0x2c], esp
push dword [0x5472c4]
push str.SoftwareVOS_s
push eax
call fcn.004777e0
add esp, 0xc
push SysReAllocStringLen
mov byte [esp + 0x6704], 0x9d
call fcn.004787c0
add esp, 0x14
push dword [esp + 0x58]
lea edx, [esp + 0x1090]
mov ecx, 0x5472b8
call fcn.004426e9
pop ecx
lea eax, [esp + 0x108c]
call fcn.00491160
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5472c4]
push str._s_is_now_integrated_into_your_system.
jmp 0x44f4c0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.004764a0
test eax, eax
jne 0x455331
mov eax, dword [esp + 0x38]
push esi
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push dword [eax]
call fcn.00422827
push edi
call fcn.0047d690
add esp, 4
mov byte [esp + 0x66fc], 0x3f
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00422812
mov ecx, esi
xor edx, edx
mov byte [esp + 0x66fc], 4
call fcn.00476290
add esp, 0xc
cmp eax, esi
jne 0x44da94
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44da85
call fcn.00476670
test eax, eax
jne 0x45534c
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c90e
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x24]
lea edi, [eax + ecx*4]
push 0x5139f4
mov dword [esp + 0x78], edi
call fcn.004ccc70
pop ecx
push eax
push str._Patch
push dword [edi]
call fcn.004cf6d6
add esp, 0xc
mov edi, eax
neg edi
lea eax, [esp + 0x14]
sbb edi, edi
push eax
lea ecx, [esp + 0x54]
inc edi
call fcn.00422812
push ecx
mov byte [esp + 0x66f4], 0x40
mov ecx, esp
mov dword [esp + 0x14], esp
push str..new.exe
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0x41
lea eax, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
lea eax, [esp + 0xa4]
push eax
mov byte [esp + 0x66fc], 0x40
call fcn.004779a0
add esp, 0xc
mov byte [esp + 0x66f0], 0x42
push dword [esp + 0x9c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [esp + 0x74]
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push dword [eax]
call fcn.00422827
lea eax, [esp + 0x108]
push eax
call fcn.0047d690
pop ecx
pop ecx
push 1
push esi
push ecx
mov byte [esp + 0x66fc], 0x43
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x798]
push eax
call fcn.00490280
mov byte [esp + 0x66f0], 0x44
push dword [0x5433cc]
cmp dword [esp + 0x818], esi
jne 0x455460
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x1c]
push str.Cannot_load_newly_created_package__s
jmp 0x44dc1b
push 1
push ecx
lea eax, [esp + 0x54]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x798]
push eax
call fcn.0044bc72
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x45
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.00422827
push ecx
mov byte [esp + 0x6704], 0x46
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
call fcn.00422812
push 2
push ecx
mov byte [esp + 0x670c], 0x47
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00422812
lea eax, [esp + 0x7a8]
push eax
mov byte [esp + 0x6710], 0x44
call fcn.0043e6ec
push dword [0x5472c4]
lea eax, [esp + 0xfc]
push dword [0x547314]
push str._sAppVirtDll__s.dll
push eax
call fcn.004777e0
add esp, 0x2c
mov byte [esp + 0x66f4], 0x48
lea eax, [esp + 0xdc]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
call fcn.00424eb7
pop ecx
cmp eax, esi
je 0x455599
push dword [0x5433cc]
cmp eax, 0x11
jne 0x45555b
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str.MsiTrackerStart:_Insufficient_permissions_
push eax
call fcn.004777e0
pop ecx
pop ecx
jmp 0x44da8f
cmp eax, 0x12
jne 0x45556e
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str.MsiTrackerStart:_Cant_access_services.exe._32_64_bit_mismatch_
jmp 0x45554e
push eax
lea eax, [esp + 0x3b4]
push eax
call fcn.0047ec40
add esp, 4
mov byte [esp + 0x66f8], 0x49
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.MsiTrackerStart:_Failed:__s
jmp 0x44e248
push dword [esp + 0x104]
lea eax, [esp + 0x200]
push str._exec__s
push eax
call fcn.004777e0
mov eax, dword [eax]
add esp, 0xc
push esi
push esi
push eax
push dword [esp + 0x20]
push esi
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [esp + 0x1fc]
xor ebx, ebx
cmp eax, 0x20
setg bl
add ecx, 0xfffffff0
call fcn.0042001a
cmp ebx, esi
je 0x455629
cmp edi, esi
je 0x4555f3
push 1
push 0x500aa0
push str.Installation_launched_in_virtual_mode..._nWhen_installation_is_done__click_OK_and_Cameyo_will_turn_it_into_a_virtual_package._nInstallation_will_not_truly_install_anything_on_your_hard_drive__it_is_simulated_.
jmp 0x4555fe
push esi
push 0x500aa0
push str.When_installation_is_done__click_OK.
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
jne 0x455629
push ecx
lea eax, [esp + 0xdc]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
call fcn.00424f3e
pop ecx
jmp 0x452b0d
push ecx
lea eax, [esp + 0xdc]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
call fcn.00424f3e
pop ecx
cmp eax, esi
je 0x4556a4
push dword [0x5433cc]
cmp eax, 0x11
jne 0x455663
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str.MsiTrackerStop:_Insufficient_permissions_
jmp 0x45554e
cmp eax, 0x12
jne 0x455679
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str.MsiTrackerStop:_Cant_access_services.exe._32_64_bit_mismatch_
jmp 0x45554e
push eax
lea eax, [esp + 0x374]
push eax
call fcn.0047ec40
add esp, 4
mov byte [esp + 0x66f8], 0x4a
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.MsiTrackerStop:_Failed:__s
jmp 0x44e248
cmp ebx, esi
jne 0x4556c6
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x10c]
push str.Failed_executing__s
jmp 0x44dc1b
mov ebx, dword [esp + 0x50]
cmp edi, esi
je 0x45578b
call fcn.004301c2
push 0x407
mov edi, 0x5472b8
call fcn.004969c0
pop ecx
push esi
push dword [esp + 0xa0]
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x9c]
jne 0x455713
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44e162
push dword [esp + 0x30]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.00422812
call fcn.0044625d
pop ecx
pop ecx
mov dword [esp + 0x30], eax
cmp eax, esi
je 0x455780
push dword [esp + 0x9c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esp + 0x30], 0x10
push dword [0x5433cc]
jne 0x455759
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44e215
push dword [esp + 0x34]
lea eax, [esp + 0x3b8]
push eax
call fcn.0047ec40
add esp, 4
mov byte [esp + 0x66f8], 0x4b
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44e241
push 0x404
call fcn.004969c0
pop ecx
lea eax, [esp + 0x78c]
call fcn.00491160
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xa4]
push 0x513ee4
push eax
call fcn.004777e0
add esp, 0xc
call fcn.0044bbf8
pop ecx
pop ecx
mov ecx, dword [esp + 0xd8]
add ecx, 0xfffffff0
call fcn.0042001a
lea eax, [esp + 0x78c]
mov byte [esp + 0x66f0], 0x43
call fcn.004259b3
mov ecx, dword [esp + 0x104]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [esp + 0x9c]
add ecx, 0xfffffff0
jmp 0x44e1ed
lea ecx, [esp + 0x28]
call fcn.0042048d
lea ecx, [esp + 0x58]
call fcn.0042048d
mov byte [esp + 0x66f0], 0x35
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x24]
lea edi, [eax + ecx*4]
push str._CreateDiff
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x455848
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x2c]
call fcn.0042286b
jmp 0x455862
push 0x5139b0
call fcn.004ccc70
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x2c]
call fcn.00422880
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..mod
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0x36
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
lea eax, [esp + 0x20c]
push eax
mov byte [esp + 0x66fc], 0x35
call fcn.004779a0
add esp, 0xc
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x66f4], 0x37
call fcn.0042286b
mov byte [esp + 0x66f0], 0x35
mov ecx, dword [esp + 0x204]
add ecx, 0xfffffff0
call fcn.0042001a
mov ebx, dword [esp + 0x58]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
call edi
push esi
push ebx
push dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x58]
jne 0x455900
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44e162
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.00422812
call fcn.0044625d
pop ecx
pop ecx
mov dword [esp + 0x30], eax
cmp eax, esi
jne 0x455977
push dword [0x5433cc]
lea eax, [esp + 0x5c]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x218]
push eax
call fcn.00477b10
add esp, 8
mov byte [esp + 0x66f8], 0x38
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Successfully_repackaged_into:__s
push ecx
call fcn.004777e0
add esp, 0xc
call fcn.0044bbf8
pop ecx
pop ecx
mov ecx, dword [esp + 0x20c]
jmp 0x455b4b
push ebx
call edi
cmp dword [esp + 0x30], 0x10
push dword [0x5433cc]
jne 0x455993
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44e215
push dword [esp + 0x34]
lea eax, [esp + 0x3b0]
push eax
call fcn.0047ec40
add esp, 4
mov byte [esp + 0x66f8], 0x39
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44e241
lea ecx, [esp + 0x28]
call fcn.0042048d
lea ecx, [esp + 0x58]
call fcn.0042048d
mov byte [esp + 0x66f0], 0x28
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x24]
lea edi, [eax + ecx*4]
push str._LearnStreaming
push dword [edi]
call fcn.004cca64
pop ecx
pop ecx
test eax, eax
jne 0x455a01
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x2c]
call fcn.0042286b
jmp 0x455a1b
push 0x51378c
call fcn.004ccc70
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x2c]
call fcn.00422880
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..new.exe
call fcn.00422827
push ecx
mov byte [esp + 0x66f8], 0x29
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
lea eax, [esp + 0x21c]
push eax
mov byte [esp + 0x66fc], 0x28
call fcn.004779a0
add esp, 0xc
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x66f4], 0x2a
call fcn.0042286b
mov byte [esp + 0x66f0], 0x28
mov ecx, dword [esp + 0x214]
add ecx, 0xfffffff0
call fcn.0042001a
mov ebx, dword [esp + 0x58]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
call edi
push esi
push ebx
push dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x58]
jne 0x455ab9
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44e162
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00422812
push ecx
mov byte [esp + 0x66f8], 0x2b
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00422812
mov byte [esp + 0x66f8], 0x28
call fcn.004467f7
pop ecx
pop ecx
mov dword [esp + 0x18], eax
cmp eax, esi
jne 0x455b64
push dword [0x5433cc]
lea eax, [esp + 0x5c]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00422812
lea eax, [esp + 0x228]
push eax
call fcn.00477b10
add esp, 8
mov byte [esp + 0x66f8], 0x2c
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Successfully_learned_streaming_into:__s
push ecx
call fcn.004777e0
add esp, 0xc
call fcn.0044bbf8
pop ecx
pop ecx
mov ecx, dword [esp + 0x21c]
add ecx, 0xfffffff0
call fcn.0042001a
lea ecx, [ebx - 0x10]
call fcn.0042001a
mov ecx, dword [esp + 0x28]
jmp 0x455ec6
push ebx
call edi
push dword [0x5433cc]
lea eax, [esp + 0x3a8]
push dword [esp + 0x1c]
push eax
call fcn.0047ec40
add esp, 4
mov byte [esp + 0x66f8], 0x2d
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Could_not_learn_streaming:__s
jmp 0x44e248
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x24]
push str._RemoveSelf
push dword [eax + ecx*4]
call fcn.004cca64
mov ebx, eax
neg ebx
sbb ebx, ebx
add esp, 4
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
inc ebx
call fcn.00422812
push 0x5472b8
call fcn.0042863f
pop ecx
pop ecx
test al, al
jne 0x455bec
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44dade
mov eax, dword [0x547314]
cmp dword [eax - 0xc], esi
jne 0x455c08
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
jmp 0x44dccd
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
mov edi, 0x547314
push edi
call fcn.00422812
call fcn.0047a330
pop ecx
cmp eax, esi
jne 0x455c47
cmp ebx, esi
je 0x455c35
call fcn.0047ae50
test eax, eax
jne 0x44da94
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
jmp 0x44dd06
cmp dword [esp + 0x50], esi
je 0x455c6e
push 3
push dword [0x5472c4]
push str.Do_you_want_to_remove_the_application_and_all_of_its_settings__files_
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
je 0x455c6e
push 0x14
pop esi
jmp 0x44dc40
push esi
lea eax, [esp + 0x160]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.AllUsers
mov dword [esp + 0x16c], esi
call fcn.00422827
push ecx
mov byte [esp + 0x6700], 0x17
mov eax, esp
mov dword [esp + 0x2c], esp
push dword [0x5472c4]
push str.SoftwareVOS_s
push eax
call fcn.004777e0
add esp, 0xc
push SysReAllocStringLen
mov byte [esp + 0x6704], 4
call fcn.00478540
add esp, 0x14
cmp eax, esi
je 0x455d1f
cmp dword [esp + 0x15c], esi
je 0x455d1f
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.004764a0
test eax, eax
jne 0x455d04
call fcn.004764f0
test eax, eax
jne 0x44da94
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44da85
call fcn.00476670
test eax, eax
jne 0x455d1f
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44c90e
push 0x5472b8
call fcn.0044286d
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x5472c4]
push str.Removing__s
push eax
call fcn.004777e0
add esp, 0xc
call fcn.0044b392
pop ecx
lea ecx, [esp + 0x164]
call fcn.0042048d
push 0x50057c
mov byte [esp + 0x66f4], 0x18
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push 1
push 1
push 1
lea eax, [esp + 0x170]
push eax
push dword [0x5433cc]
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x547310
call fcn.00422812
push ecx
mov byte [esp + 0x670c], 0x19
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x547320
call fcn.00422812
push ecx
mov byte [esp + 0x6710], 0x1a
mov ecx, esp
mov dword [esp + 0x60], esp
push 0x54731c
call fcn.00422812
push ecx
mov byte [esp + 0x6714], 0x1b
mov ecx, esp
mov dword [esp + 0x3c], esp
push edi
call fcn.00422812
push ecx
mov byte [esp + 0x6718], 0x1c
mov ecx, esp
mov dword [esp + 0xa0], esp
push 0x5472c4
call fcn.00422812
mov byte [esp + 0x6718], 0x18
call fcn.00447190
add esp, 0x24
mov ecx, esp
mov dword [esp + 0x14], esp
push edi
call fcn.00422812
call fcn.0047a370
pop ecx
cmp eax, esi
je 0x455e33
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5472c4]
push str.Base_dir_could_not_be_emptied_for__s
jmp 0x44dc1b
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x5472c4]
push str.SoftwareVOS_s
push eax
call fcn.004777e0
add esp, 0xc
mov edx, SysReAllocStringLen
call fcn.004788c0
pop ecx
cmp eax, esi
je 0x455e6f
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
jmp 0x44e017
cmp ebx, esi
je 0x455e80
call fcn.0047ae50
test eax, eax
jne 0x44da94
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.__Removed_successfully
call fcn.00422827
call fcn.0044b392
pop ecx
push dword [0x5433cc]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5472c4]
push str.Application__s_removed_successfully
push eax
call fcn.004777e0
add esp, 0xc
call fcn.0044bbf8
pop ecx
pop ecx
mov ecx, dword [esp + 0x164]
add ecx, 0xfffffff0
call fcn.0042001a
jmp 0x44dc40
cmp dword [0x546f24], esi
je 0x455f0a
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x547300]
push str.CLoaderApp:_waiting_for_LoaderCanQuit__AutoUpdate_s_
push eax
call fcn.004777e0
add esp, 0xc
call fcn.0044b362
pop ecx
push 0xffffffffffffffff
push dword [0x546f24]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.CLoaderApp:_done._Bye_
call fcn.00422827
call fcn.0044b362
mov eax, dword [0x5433dc]
pop ecx
cmp eax, 0xa2c2a
je 0x44da94
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
push str.CLoaderApp:_ExecWait:_g_LoaderExitCode_d
push ecx
call fcn.004777e0
add esp, 0xc
call fcn.0044b362
pop ecx
push dword [0x5433dc]
jmp 0x44da95