Function at 0x42f9e7
Capabilities:
Contain obfuscated stackstrings
Delete file
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c1fb5
mov eax, dword fs:[0]
push eax
mov eax, 0x2584
call fcn.004a9ab0
mov eax, dword [0x4eec64]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [ebp - 4], ebx
lea esi, [ebp - 0x2378]
call fcn.0042f1b5
mov byte [ebp - 4], 2
xor eax, eax
mov dword [ebp - 0x2420], ebx
lea edi, [ebp - 0x241c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push ecx
stosd dword es:[edi], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x228c], esp
mov ecx, esp
push eax
call fcn.00423ac9
call fcn.00464300
pop ecx
cmp eax, ebx
jne 0x42fa87
push 5
pop edi
lea esi, [ebp - 0x2378]
call fcn.004312bd
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042101a
mov eax, edi
jmp 0x4312a3
push 1
push ebx
push ecx
lea eax, [ebp + 8]
mov dword [ebp - 0x228c], esp
mov ecx, esp
push eax
call fcn.00423ac9
lea eax, [ebp - 0x2408]
push eax
call fcn.00426045
mov byte [ebp - 4], 3
lea eax, [ebp - 0x2408]
push eax
cmp dword [ebp - 0x237c], ebx
jne 0x42fac8
mov byte [ebp - 4], 2
call fcn.00426104
push 0xe
jmp 0x42fa5e
lea eax, [ebp - 0x2378]
push eax
call fcn.00427120
pop ecx
pop ecx
test al, al
jne 0x42faf1
lea eax, [ebp - 0x2408]
push eax
mov byte [ebp - 4], 2
call fcn.00426104
push 0xf
jmp 0x42fa5e
mov esi, 0x4cc11c
push esi
lea ecx, [ebp - 0x22a0]
call fcn.0042342e
push esi
lea ecx, [ebp - 0x2294]
mov byte [ebp - 4], 4
call fcn.0042342e
push esi
lea ecx, [ebp - 0x2298]
mov byte [ebp - 4], 5
call fcn.0042342e
push ecx
mov byte [ebp - 4], 6
lea eax, [ebp - 0x232c]
mov dword [ebp - 0x228c], esp
mov ecx, esp
push eax
call fcn.00423ac9
call fcn.00464340
pop ecx
cmp eax, ebx
jne 0x42fb86
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a0]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x2408]
push eax
mov byte [ebp - 4], 2
call fcn.00426104
push 0x10
jmp 0x42fa5e
push ecx
mov dword [ebp - 0x228c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x228c], esp
mov esi, 0x4ca088
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 7
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push 0x4ccab0
call fcn.0042342e
push ecx
mov byte [ebp - 4], 8
lea eax, [ebp - 0x232c]
mov dword [ebp - 0x22c4], esp
mov ecx, esp
push eax
call fcn.00423ac9
mov byte [ebp - 4], 6
call fcn.00461470
add esp, 0xc
call fcn.00464300
pop ecx
cmp eax, ebx
je 0x431245
push ecx
mov dword [ebp - 0x228c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x228c], esp
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 9
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push str.VirtFiles.db
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x232c]
mov dword [ebp - 0x22c4], esp
mov ecx, esp
push eax
call fcn.00423ac9
mov byte [ebp - 4], 6
call fcn.00461470
add esp, 0xc
call fcn.00464300
pop ecx
cmp eax, ebx
je 0x431245
push ecx
mov eax, esp
mov dword [ebp - 0x228c], esp
push dword [ebp - 0x2370]
push str._s.TmpVirtZip.zip
push eax
call fcn.00461920
lea eax, [ebp - 0x229c]
add esp, 0xc
push eax
call fcn.00461020
add esp, 4
mov byte [ebp - 4], 0xb
mov eax, esp
mov dword [ebp - 0x228c], esp
push dword [ebp - 0x2370]
push str._s.diff
push eax
call fcn.00461920
lea eax, [ebp - 0x22ac]
add esp, 0xc
push eax
call fcn.00461020
pop ecx
pop ecx
mov byte [ebp - 4], 0xc
push dword [ebp - 0x229c]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call edi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push ecx
mov ecx, esp
mov dword [ebp - 0x228c], esp
push eax
push str.CE__d_OldZip.tmp
push ecx
call fcn.00461920
lea eax, [ebp - 0x22b4]
add esp, 0xc
push eax
call fcn.00461020
add esp, 4
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x22b4]
mov dword [ebp - 0x228c], esp
mov ecx, esp
push eax
call fcn.00423ac9
push ecx
mov byte [ebp - 4], 0xe
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push str.Main
call fcn.0042342e
push 1
lea eax, [ebp - 0x2408]
push eax
mov byte [ebp - 4], 0xd
call fcn.0047a660
cmp eax, ebx
je 0x42fd98
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22ac]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a0]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x2408]
push eax
mov byte [ebp - 4], 2
call fcn.00426104
push 8
jmp 0x42fa5e
push dword [ebp - 0x229c]
call fcn.00485320
pop ecx
mov dword [ebp - 0x22bc], eax
cmp eax, ebx
jne 0x42fe19
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22ac]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a0]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x2408]
push eax
mov byte [ebp - 4], 2
call fcn.00426104
push 3
jmp 0x42fa5e
push ecx
mov eax, esp
mov dword [ebp - 0x228c], esp
push dword [ebp - 0x2370]
push str._s.VirtApp.ini
push eax
call fcn.00461920
lea eax, [ebp - 0x22a8]
add esp, 0xc
push eax
call fcn.00461020
pop ecx
pop ecx
mov byte [ebp - 4], 0xf
push dword [ebp - 0x22a8]
call edi
push ecx
lea eax, [ebp - 0x22a8]
mov dword [ebp - 0x228c], esp
mov ecx, esp
push eax
call fcn.00423ac9
push ecx
mov byte [ebp - 4], 0x10
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push str.Main
call fcn.0042342e
push 3
lea eax, [ebp - 0x2408]
push eax
mov byte [ebp - 4], 0xf
call fcn.0047a660
push ecx
mov eax, esp
mov dword [ebp - 0x228c], esp
push dword [ebp - 0x2370]
push str._s.VirtFiles.db
push eax
call fcn.00461920
lea eax, [ebp - 0x22b8]
add esp, 0xc
push eax
call fcn.00461020
pop ecx
pop ecx
mov byte [ebp - 4], 0x11
push dword [ebp - 0x22b8]
call edi
push ecx
lea eax, [ebp - 0x22b8]
mov dword [ebp - 0x228c], esp
mov ecx, esp
push eax
call fcn.00423ac9
push ecx
mov byte [ebp - 4], 0x12
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push str.Main
call fcn.0042342e
push 4
lea eax, [ebp - 0x2408]
push eax
mov byte [ebp - 4], 0x11
call fcn.0047a660
cmp eax, ebx
je 0x42ff28
mov ecx, dword [ebp - 0x22b8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffff0
call fcn.0042101a
jmp 0x42fd2d
xor eax, eax
mov dword [ebp - 0x22f0], ebx
lea edi, [ebp - 0x22ec]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push ecx
stosd dword es:[edi], eax
lea eax, [ebp - 0x22b8]
mov dword [ebp - 0x228c], esp
mov ecx, esp
push eax
lea edi, [ebp - 0x22f0]
call fcn.00423ac9
call fcn.0046c580
mov dword [ebp - 0x228c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x228c], esp
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x13
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push str.VirtFiles.db
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x232c]
mov dword [ebp - 0x22c4], esp
mov ecx, esp
push eax
call fcn.00423ac9
mov byte [ebp - 4], 0x11
call fcn.00461470
add esp, 0xc
mov edi, 0x4f3430
call fcn.0046c580
pop ecx
cmp dword [ebp + 0x14], ebx
jne 0x4302c1
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x228c], esp
push str.Main
call fcn.0042342e
lea eax, [ebp - 0x2408]
push eax
call fcn.004785f0
mov edi, eax
add esp, 0xc
mov dword [ebp - 0x22cc], edi
cmp edi, ebx
jne 0x430031
mov ebx, dword [ebp - 0x22bc]
mov eax, ebx
call fcn.00485560
test al, al
je 0x43000b
mov edi, ebx
call fcn.00485510
jmp 0x430010
call fcn.004787e0
mov ecx, dword [ebp - 0x22b8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffff0
call fcn.0042101a
jmp 0x42fdae
push 0x2024
lea eax, [ebp - 0x2284]
push ebx
push eax
mov dword [ebp - 0x22c4], ebx
mov dword [ebp - 0x22b0], ebx
mov dword [ebp - 0x2288], ebx
call fcn.004a4b50
add esp, 0xc
lea ecx, [ebp - 0x2288]
or edx, 0xffffffff
mov eax, edi
call fcn.00478690
mov eax, dword [ebp - 0x2288]
cmp eax, ebx
mov dword [ebp - 0x228c], eax
mov dword [ebp - 0x22d4], ebx
jle 0x430270
mov edx, dword [ebp - 0x22d4]
lea ecx, [ebp - 0x2288]
mov eax, edi
call fcn.00478690
cmp eax, ebx
jne 0x4300bd
test byte [ebp - 0x284], 0x10
lea eax, [ebp - 0x2284]
push eax
je 0x4300d6
mov eax, dword [ebp - 0x22bc]
call fcn.004854c0
pop ecx
cmp eax, ebx
je 0x4301ac
mov eax, edi
call fcn.00485560
test al, al
je 0x430282
call fcn.00485510
jmp 0x430289
lea ecx, [ebp - 0x22d0]
call fcn.0042342e
push 0x5c
push 0x2f
lea ebx, [ebp - 0x22d0]
mov byte [ebp - 4], 0x15
call fcn.00432f0d
push ecx
mov dword [ebp - 0x22c0], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x22c0], esp
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x16
mov eax, ebx
mov dword [ebp - 0x22a4], esp
mov ecx, esp
push eax
call fcn.00423ac9
push ecx
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x232c]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423ac9
mov byte [ebp - 4], 0x15
call fcn.00461470
add esp, 0xc
call fcn.00464300
pop ecx
test eax, eax
je 0x430192
push ecx
mov eax, esp
mov dword [ebp - 0x2290], esp
push dword [ebp - 0x22d0]
push str.PackUtils_MergeDirToExe:_Skipping:__s
push eax
call fcn.00461920
add esp, 0xc
call fcn.0042f28e
pop ecx
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x22d0]
add ecx, 0xfffffff0
call fcn.0042101a
mov edi, dword [ebp - 0x22cc]
xor ebx, ebx
jmp 0x430258
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x22d0]
add ecx, 0xfffffff0
call fcn.0042101a
mov edi, dword [ebp - 0x22cc]
xor ebx, ebx
mov eax, dword [ebp - 0x264]
cmp eax, 0xffffffff
je 0x4301ea
cmp eax, dword [ebp - 0x22c4]
jbe 0x4301ea
add eax, eax
mov dword [ebp - 0x22c4], eax
push eax
cmp dword [ebp - 0x22b0], ebx
jne 0x4301d7
call fcn.004a4a82
jmp 0x4301e3
push dword [ebp - 0x22b0]
call fcn.004a4bf0
pop ecx
mov dword [ebp - 0x22b0], eax
pop ecx
push ecx
mov eax, esp
mov dword [ebp - 0x2290], esp
lea ecx, [ebp - 0x2284]
push ecx
push str.PackUtils_MergeDirToExe:_Keeping__unzipping__zipping_:__s
push eax
call fcn.00461920
add esp, 0xc
call fcn.0042f28e
mov edx, dword [ebp - 0x22b0]
pop ecx
push dword [ebp - 0x22c4]
mov eax, edi
push dword [ebp - 0x22d4]
call fcn.00478760
pop ecx
pop ecx
cmp eax, ebx
jne 0x4300bd
push dword [ebp - 0x264]
mov eax, dword [ebp - 0x22bc]
push dword [ebp - 0x22b0]
lea ecx, [ebp - 0x2284]
call fcn.00485470
pop ecx
pop ecx
cmp eax, ebx
jne 0x4300bd
inc dword [ebp - 0x22d4]
mov eax, dword [ebp - 0x22d4]
cmp eax, dword [ebp - 0x228c]
jl 0x430082
mov eax, edi
call fcn.00485560
test al, al
je 0x4302b8
call fcn.00485510
jmp 0x4302c1
mov ebx, edi
call fcn.004787e0
mov ebx, dword [ebp - 0x22bc]
mov eax, ebx
call fcn.00485560
test al, al
je 0x4302a3
mov edi, ebx
call fcn.00485510
jmp 0x4302a8
call fcn.004787e0
lea eax, [ebp - 0x2408]
call fcn.004792b0
jmp 0x430010
mov ebx, edi
call fcn.004787e0
xor ebx, ebx
push ecx
lea eax, [ebp - 0x22ac]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
mov dword [ebp - 0x22d8], ebx
call fcn.00423ac9
call fcn.004287e3
pop ecx
cmp dword [ebp + 0x14], ebx
je 0x430304
push 0x4f3a90
push 0x44bc60
push ebx
push dword [ebp - 0x22e8]
lea eax, [ebp - 0x22f0]
push eax
call fcn.00480a30
lea ecx, [ebp - 0x2590]
call fcn.00458540
push ecx
mov byte [ebp - 4], 0x18
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x19
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push str._Windows_WinSxs
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x232c]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423ac9
lea edi, [ebp - 0x228c]
mov byte [ebp - 4], 0x18
call fcn.00461470
add esp, 0xc
push eax
lea ecx, [ebp - 0x2590]
mov byte [ebp - 4], 0x1b
call fcn.00423aea
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x228c]
add ecx, 0xfffffff0
call fcn.0042101a
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x1c
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push str._Windows_
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x232c]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423ac9
lea edi, [ebp - 0x228c]
mov byte [ebp - 4], 0x18
call fcn.00461470
add esp, 0xc
push eax
lea ecx, [ebp - 0x258c]
mov byte [ebp - 4], 0x1e
call fcn.00423aea
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x228c]
add ecx, 0xfffffff0
call fcn.0042101a
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x1f
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push str._System_
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x232c]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423ac9
lea edi, [ebp - 0x228c]
mov byte [ebp - 4], 0x18
call fcn.00461470
add esp, 0xc
push eax
lea ecx, [ebp - 0x2588]
mov byte [ebp - 4], 0x21
call fcn.00423aea
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x228c]
add ecx, 0xfffffff0
call fcn.0042101a
push 0x4cc11c
lea ecx, [ebp - 0x2584]
call fcn.00423ef3
lea eax, [ebp - 0x232c]
push eax
mov ecx, 0x4f3ac8
call fcn.00423aea
push 0x24c
lea eax, [ebp - 0x25c]
push ebx
push eax
mov dword [ebp - 0x260], ebx
call fcn.004a4b50
add esp, 0xc
lea eax, [ebp - 0x260]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x22
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push 0x4cfea8
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x232c]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423ac9
lea edi, [ebp - 0x228c]
mov byte [ebp - 4], 0x18
call fcn.00461470
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ecx, dword [ebp - 0x228c]
add ecx, 0xfffffff0
mov dword [ebp - 0x22c4], eax
call fcn.0042101a
cmp dword [ebp - 0x22c4], 0xffffffff
je 0x430603
test byte [ebp - 0x260], 0x10
je 0x4305dc
lea eax, [ebp - 0x234]
push eax
push 0x4cd44c
call fcn.004a45c0
pop ecx
pop ecx
test eax, eax
je 0x4305dc
lea eax, [ebp - 0x234]
push eax
push 0x4cfeac
call fcn.004a45c0
pop ecx
pop ecx
test eax, eax
je 0x4305dc
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x234]
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push eax
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x232c]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423ac9
lea edi, [ebp - 0x22cc]
mov byte [ebp - 4], 0x18
call fcn.00461470
add esp, 0xc
push eax
mov eax, 0x4f3ab0
mov byte [ebp - 4], 0x26
call fcn.00428c29
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x22cc]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x260]
push eax
push dword [ebp - 0x22c4]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x430529
push dword [ebp - 0x22c4]
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x2438]
push eax
call fcn.00425651
mov byte [ebp - 4], 0x27
cmp dword [ebp + 0x14], ebx
je 0x4306f2
push ecx
mov dword [ebp - 0x2290], esp
mov edi, esp
push ecx
lea eax, [ebp - 0x2420]
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
mov dword [ebp - 0x22b0], eax
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x28
mov ecx, esp
mov dword [ebp - 0x22a4], esp
mov ebx, str.VirtFiles.db
push ebx
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x22ac]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423ac9
mov byte [ebp - 4], 0x27
call fcn.00461470
add esp, 0xc
call fcn.00464fa0
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x2a
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push ebx
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0x22ac]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423ac9
lea edi, [ebp - 0x228c]
mov byte [ebp - 4], 0x27
call fcn.00461470
mov esi, dword [eax]
add esp, 0xc
lea ebx, [ebp - 0x2420]
call fcn.0047fc20
mov ecx, dword [ebp - 0x228c]
add ecx, 0xfffffff0
call fcn.0042101a
mov esi, 0x4ca088
xor ebx, ebx
jmp 0x4306fe
lea eax, [ebp - 0x22f0]
mov dword [ebp - 0x22b0], eax
push dword [ebp - 0x22b0]
mov edi, dword [ebp - 0x22bc]
push edi
lea eax, [ebp - 0x22d8]
push eax
lea eax, [ebp - 0x2438]
push eax
lea eax, [ebp - 0x2590]
push eax
call fcn.0044a570
add esp, 0x14
lea eax, [ebp - 0x2298]
push eax
lea eax, [ebp - 0x2294]
push eax
lea eax, [ebp - 0x22a0]
push eax
lea eax, [ebp - 0x2438]
push edi
push eax
call fcn.0044e9f0
add esp, 0x14
lea eax, [ebp - 0x2438]
push eax
mov byte [ebp - 4], 0x18
call fcn.00423922
lea eax, [ebp - 0x2590]
push eax
mov byte [ebp - 4], 0x11
call fcn.0045d830
mov eax, edi
call fcn.00485560
test al, al
je 0x43077f
call fcn.00485510
jmp 0x430788
mov ebx, edi
call fcn.004787e0
xor ebx, ebx
push ecx
mov eax, esp
mov dword [ebp - 0x2290], esp
push dword [ebp - 0x2370]
push str._s.VirtReg.export
push eax
call fcn.00461920
lea eax, [ebp - 0x22c8]
add esp, 0xc
push eax
call fcn.00461020
add esp, 4
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x22c8]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423ac9
push ecx
mov byte [ebp - 4], 0x2d
mov dword [ebp - 0x22a4], esp
mov edi, esp
push ecx
lea eax, [ebp - 0x2370]
mov dword [ebp - 0x22a4], esp
mov ecx, esp
push eax
call fcn.00423ac9
push edi
call fcn.0042f2e6
pop ecx
pop ecx
mov byte [ebp - 4], 0x2c
call fcn.0043f110
pop ecx
pop ecx
cmp dword [ebp + 0x10], ebx
je 0x430c39
call fcn.00495d32
push eax
lea ecx, [ebp - 0x22d4]
call fcn.004249e1
mov byte [ebp - 4], 0x2e
call fcn.00495d32
push eax
lea ecx, [ebp - 0x22cc]
call fcn.004249e1
mov byte [ebp - 4], 0x2f
call fcn.00495d32
push eax
lea ecx, [ebp - 0x228c]
call fcn.004249e1
mov byte [ebp - 4], 0x30
call fcn.00495d32
push eax
lea ecx, [ebp - 0x22bc]
call fcn.004249e1
mov byte [ebp - 4], 0x31
call fcn.00495d32
push eax
lea ecx, [ebp - 0x22c4]
call fcn.004249e1
lea eax, [ebp - 0x2360]
push eax
lea eax, [ebp - 0x2364]
push eax
lea eax, [ebp - 0x22d4]
push eax
push ecx
mov byte [ebp - 4], 0x32
mov dword [ebp - 0x2290], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x33
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push str.RegistryMACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x34
mov dword [ebp - 0x22c0], esp
mov esi, esp
push ecx
lea eax, [ebp - 0x2370]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423ac9
push esi
call fcn.0042f32b
pop ecx
pop ecx
mov byte [ebp - 4], 0x32
call fcn.00461470
add esp, 0xc
call fcn.00432556
add esp, 0x10
lea eax, [ebp - 0x22c4]
push eax
lea eax, [ebp - 0x22bc]
push eax
push dword [ebp - 0x22d8]
lea eax, [ebp - 0x2294]
push ecx
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423ac9
push ecx
mov byte [ebp - 4], 0x35
lea eax, [ebp - 0x22d4]
mov dword [ebp - 0x22a4], esp
mov ecx, esp
push eax
call fcn.00423ac9
mov byte [ebp - 4], 0x32
call fcn.00432882
add esp, 0x14
push ebx
push ecx
lea eax, [ebp - 0x22bc]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423ac9
push ecx
mov byte [ebp - 4], 0x36
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push str.NewAppId
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x37
mov dword [ebp - 0x22c0], esp
mov esi, esp
push ecx
lea eax, [ebp - 0x2370]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423ac9
push esi
call fcn.0042f32b
pop ecx
pop ecx
push SysReAllocStringLen
mov byte [ebp - 4], 0x32
call fcn.00462b70
add esp, 0x14
lea eax, [ebp - 0x22bc]
push eax
lea ecx, [ebp - 0x2370]
call fcn.00423aea
lea eax, [ebp - 0x22c4]
push eax
lea ecx, [ebp - 0x2368]
call fcn.00423aea
mov ecx, dword [ebp - 0x22c4]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22bc]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x228c]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22cc]
add ecx, 0xfffffff0
call fcn.0042101a
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x22d4]
add ecx, 0xfffffff0
call fcn.0042101a
mov eax, dword [ebp - 0x2298]
cmp dword [eax - 0xc], ebx
je 0x430c39
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push eax
push str._d_CeIconChange.tmp
push ecx
call fcn.00461920
lea eax, [ebp - 0x22d0]
add esp, 0xc
push eax
call fcn.00461020
pop ecx
pop ecx
push ebx
push ebx
push ecx
mov byte [ebp - 4], 0x38
lea eax, [ebp - 0x22d0]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423ac9
lea eax, [ebp - 0x2408]
call fcn.0047a950
push ecx
lea eax, [ebp + 0xc]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423ac9
call fcn.0047abe0
pop ecx
cmp eax, ebx
je 0x430ab7
mov ecx, dword [ebp - 0x22d0]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22c8]
add ecx, 0xfffffff0
call fcn.0042101a
jmp 0x42ff07
push ecx
lea eax, [ebp + 0xc]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423ac9
push ecx
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x2298]
mov dword [ebp - 0x22a4], esp
mov ecx, esp
push eax
call fcn.00423ac9
lea eax, [ebp - 0x228c]
push eax
mov byte [ebp - 4], 0x38
call fcn.0042f366
mov ecx, dword [ebp - 0x228c]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.0042101a
push ebx
push ebx
push ecx
lea eax, [ebp - 0x22d0]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423ac9
lea eax, [ebp - 0x2558]
push eax
call fcn.00426045
push 0xffffffffffffffff
push 0xffffffffffffffff
push ecx
mov byte [ebp - 4], 0x3a
lea eax, [ebp + 0xc]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423ac9
lea eax, [ebp - 0x2558]
call fcn.0047a950
mov edi, eax
lea eax, [ebp - 0x2558]
cmp edi, ebx
je 0x430c06
push eax
mov byte [ebp - 4], 0x38
call fcn.00426104
mov ecx, dword [ebp - 0x22d0]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22c8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22b8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22ac]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a0]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x2408]
push eax
mov byte [ebp - 4], 2
call fcn.00426104
jmp 0x42fa5f
call fcn.004792b0
push dword [ebp - 0x22d0]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0x2558]
push eax
mov byte [ebp - 4], 0x38
call fcn.00426104
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x22d0]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x2408]
call fcn.004792b0
push 1
push 1
push ecx
lea eax, [ebp + 0xc]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423ac9
lea eax, [ebp - 0x24c8]
push eax
call fcn.00426045
mov byte [ebp - 4], 0x3b
cmp dword [ebp - 0x243c], ebx
jne 0x430d1b
lea eax, [ebp - 0x24c8]
push eax
mov byte [ebp - 4], 0x2c
call fcn.00426104
mov ecx, dword [ebp - 0x22c8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22b8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22ac]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a0]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x2408]
push eax
mov byte [ebp - 4], 2
call fcn.00426104
push 7
jmp 0x42fa5e
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
mov edi, str.Main
push edi
call fcn.0042342e
mov esi, 0x4000
push esi
push 1
push ecx
mov byte [ebp - 4], 0x3c
lea eax, [ebp - 0x229c]
mov dword [ebp - 0x22a4], esp
mov ecx, esp
push eax
call fcn.00423ac9
lea eax, [ebp - 0x24c8]
push eax
mov byte [ebp - 4], 0x3b
call fcn.00479f70
push dword [ebp - 0x229c]
mov dword [ebp - 0x228c], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [ebp - 0x228c], ebx
je 0x430d8f
lea eax, [ebp - 0x24c8]
push eax
mov byte [ebp - 4], 0x2c
call fcn.00426104
jmp 0x430aa4
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push edi
call fcn.0042342e
push esi
push 4
mov byte [ebp - 4], 0x3d
mov eax, dword [ebp - 0x22b0]
push ecx
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push dword [eax]
call fcn.0042342e
lea eax, [ebp - 0x24c8]
push eax
mov byte [ebp - 4], 0x3b
call fcn.00479f70
cmp eax, ebx
jne 0x430d7a
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push edi
call fcn.0042342e
push esi
push 6
push ecx
mov byte [ebp - 4], 0x3e
lea eax, [ebp - 0x22c8]
mov dword [ebp - 0x22a4], esp
mov ecx, esp
push eax
call fcn.00423ac9
lea eax, [ebp - 0x24c8]
push eax
mov byte [ebp - 4], 0x3b
call fcn.00479f70
cmp eax, ebx
jne 0x430d7a
cmp dword [ebp + 0x10], ebx
je 0x430fd8
push 0x4cc11c
lea ecx, [ebp - 0x22bc]
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x22a8]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
lea ebx, [ebp - 0x22bc]
call fcn.00423ac9
call fcn.004624b0
pop ecx
test eax, eax
je 0x4310ec
mov eax, ebx
push eax
lea ecx, [ebp - 0x22b0]
call fcn.00423ac9
lea eax, [ebp - 0x22b0]
push eax
push ecx
mov byte [ebp - 4], 0x40
lea eax, [ebp - 0x2370]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423ac9
push ecx
mov byte [ebp - 4], 0x41
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push str.AppID
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x42
lea eax, [ebp - 0x22b0]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423ac9
mov byte [ebp - 4], 0x40
call fcn.00466000
add esp, 0x10
lea eax, [ebp - 0x22b0]
push eax
push ecx
lea eax, [ebp - 0x22a0]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423ac9
push ecx
mov byte [ebp - 4], 0x43
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push str.AutoLaunch
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x44
lea eax, [ebp - 0x22b0]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423ac9
mov byte [ebp - 4], 0x40
call fcn.00466000
add esp, 0x10
lea eax, [ebp - 0x22b0]
push eax
push ecx
lea eax, [ebp - 0x2294]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423ac9
push ecx
mov byte [ebp - 4], 0x45
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push str.Shortcuts
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x46
lea eax, [ebp - 0x22b0]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423ac9
mov byte [ebp - 4], 0x40
call fcn.00466000
mov ebx, dword [ebp - 0x22b0]
mov eax, dword [ebx - 0xc]
add esp, 0x10
push ebx
push ecx
lea edi, [eax + eax]
lea eax, [ebp - 0x22a8]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423ac9
call fcn.00462670
pop ecx
pop ecx
lea ecx, [ebx - 0x10]
test eax, eax
jne 0x430fba
call fcn.0042101a
mov ecx, dword [ebp - 0x22bc]
add ecx, 0xfffffff0
call fcn.0042101a
jmp 0x430c76
call fcn.0042101a
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x22bc]
add ecx, 0xfffffff0
call fcn.0042101a
xor ebx, ebx
mov edi, str.Main
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push edi
call fcn.0042342e
push esi
push 3
push ecx
mov byte [ebp - 4], 0x47
lea eax, [ebp - 0x22a8]
mov dword [ebp - 0x22a4], esp
mov ecx, esp
push eax
call fcn.00423ac9
lea eax, [ebp - 0x24c8]
push eax
mov byte [ebp - 4], 0x3b
call fcn.00479f70
cmp eax, ebx
jne 0x430d7a
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push str.PackUtils_MergeDirToExe:_Committing
call fcn.0042342e
call fcn.0042f28e
pop ecx
lea eax, [ebp - 0x24c8]
call fcn.004792b0
test eax, eax
lea eax, [ebp - 0x24c8]
mov byte [ebp - 4], 0x2c
push eax
je 0x43118d
call fcn.00426104
mov ecx, dword [ebp - 0x22c8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22b8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22ac]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a0]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x2408]
push eax
mov byte [ebp - 4], 2
call fcn.00426104
push 0xa
jmp 0x42fa5e
mov ecx, dword [ebp - 0x22bc]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x24c8]
push eax
mov byte [ebp - 4], 0x2c
call fcn.00426104
mov ecx, dword [ebp - 0x22c8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22b8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22ac]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a0]
add ecx, 0xfffffff0
call fcn.0042101a
jmp 0x42fada
call fcn.00426104
mov ecx, dword [ebp - 0x22c8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22b8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22ac]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a0]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x2408]
push eax
mov byte [ebp - 4], 2
call fcn.00426104
lea esi, [ebp - 0x2378]
call fcn.004312bd
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042101a
xor eax, eax
jmp 0x4312a3
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a0]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x2408]
push eax
mov byte [ebp - 4], 2
call fcn.00426104
lea esi, [ebp - 0x2378]
call fcn.004312bd
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042101a
push 6
pop eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a3a81
leave
ret