Function at 0x4309ff
Capabilities:
Contain obfuscated stackstrings
Delete file
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c29f5
mov eax, dword fs:[0]
push eax
mov eax, 0x257c
call fcn.004aa250
mov eax, dword [0x4eec64]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [ebp - 4], ebx
lea esi, [ebp - 0x2370]
call fcn.004306dc
mov byte [ebp - 4], 2
xor eax, eax
mov dword [ebp - 0x2418], ebx
lea edi, [ebp - 0x2414]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push ecx
stosd dword es:[edi], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x228c], esp
mov ecx, esp
push eax
call fcn.00423b01
call fcn.00464c80
pop ecx
cmp eax, ebx
jne 0x430a9f
push 5
pop edi
lea esi, [ebp - 0x2370]
call fcn.004322d5
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042101a
mov eax, edi
jmp 0x4322bb
push 1
push ebx
push ecx
lea eax, [ebp + 8]
mov dword [ebp - 0x228c], esp
mov ecx, esp
push eax
call fcn.00423b01
lea eax, [ebp - 0x2400]
push eax
call fcn.0042601c
mov byte [ebp - 4], 3
lea eax, [ebp - 0x2400]
push eax
cmp dword [ebp - 0x2374], ebx
jne 0x430ae0
mov byte [ebp - 4], 2
call fcn.004260db
push 0xe
jmp 0x430a76
lea eax, [ebp - 0x2370]
push eax
call fcn.00427093
pop ecx
pop ecx
test al, al
jne 0x430b09
lea eax, [ebp - 0x2400]
push eax
mov byte [ebp - 4], 2
call fcn.004260db
push 0xf
jmp 0x430a76
mov esi, 0x4cc12c
push esi
lea ecx, [ebp - 0x22a0]
call fcn.0042342e
push esi
lea ecx, [ebp - 0x2294]
mov byte [ebp - 4], 4
call fcn.0042342e
push esi
lea ecx, [ebp - 0x2298]
mov byte [ebp - 4], 5
call fcn.0042342e
push ecx
mov byte [ebp - 4], 6
lea eax, [ebp - 0x232c]
mov dword [ebp - 0x228c], esp
mov ecx, esp
push eax
call fcn.00423b01
call fcn.00464cc0
pop ecx
cmp eax, ebx
jne 0x430b9e
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a0]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x2400]
push eax
mov byte [ebp - 4], 2
call fcn.004260db
push 0x10
jmp 0x430a76
push ecx
mov dword [ebp - 0x228c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x228c], esp
mov esi, 0x4ca098
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 7
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push 0x4ccac0
call fcn.0042342e
push ecx
mov byte [ebp - 4], 8
lea eax, [ebp - 0x232c]
mov dword [ebp - 0x22c4], esp
mov ecx, esp
push eax
call fcn.00423b01
mov byte [ebp - 4], 6
call fcn.00461df0
add esp, 0xc
call fcn.00464c80
pop ecx
cmp eax, ebx
je 0x43225d
push ecx
mov dword [ebp - 0x228c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x228c], esp
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 9
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push str.VirtFiles.db
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x232c]
mov dword [ebp - 0x22c4], esp
mov ecx, esp
push eax
call fcn.00423b01
mov byte [ebp - 4], 6
call fcn.00461df0
add esp, 0xc
call fcn.00464c80
pop ecx
cmp eax, ebx
je 0x43225d
push ecx
mov eax, esp
mov dword [ebp - 0x228c], esp
push dword [ebp - 0x2368]
push str._s.TmpVirtZip.zip
push eax
call fcn.004622a0
lea eax, [ebp - 0x229c]
add esp, 0xc
push eax
call fcn.004619a0
add esp, 4
mov byte [ebp - 4], 0xb
mov eax, esp
mov dword [ebp - 0x228c], esp
push dword [ebp - 0x2368]
push str._s.diff
push eax
call fcn.004622a0
lea eax, [ebp - 0x22ac]
add esp, 0xc
push eax
call fcn.004619a0
pop ecx
pop ecx
mov byte [ebp - 4], 0xc
push dword [ebp - 0x229c]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call edi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push ecx
mov ecx, esp
mov dword [ebp - 0x228c], esp
push eax
push str.CE__d_OldZip.tmp
push ecx
call fcn.004622a0
lea eax, [ebp - 0x22b4]
add esp, 0xc
push eax
call fcn.004619a0
add esp, 4
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x22b4]
mov dword [ebp - 0x228c], esp
mov ecx, esp
push eax
call fcn.00423b01
push ecx
mov byte [ebp - 4], 0xe
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push str.Main
call fcn.0042342e
push 1
lea eax, [ebp - 0x2400]
push eax
mov byte [ebp - 4], 0xd
call fcn.0047ae10
cmp eax, ebx
je 0x430db0
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22ac]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a0]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x2400]
push eax
mov byte [ebp - 4], 2
call fcn.004260db
push 8
jmp 0x430a76
push dword [ebp - 0x229c]
call fcn.00485aa0
pop ecx
mov dword [ebp - 0x22bc], eax
cmp eax, ebx
jne 0x430e31
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22ac]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a0]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x2400]
push eax
mov byte [ebp - 4], 2
call fcn.004260db
push 3
jmp 0x430a76
push ecx
mov eax, esp
mov dword [ebp - 0x228c], esp
push dword [ebp - 0x2368]
push str._s.VirtApp.ini
push eax
call fcn.004622a0
lea eax, [ebp - 0x22a8]
add esp, 0xc
push eax
call fcn.004619a0
pop ecx
pop ecx
mov byte [ebp - 4], 0xf
push dword [ebp - 0x22a8]
call edi
push ecx
lea eax, [ebp - 0x22a8]
mov dword [ebp - 0x228c], esp
mov ecx, esp
push eax
call fcn.00423b01
push ecx
mov byte [ebp - 4], 0x10
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push str.Main
call fcn.0042342e
push 3
lea eax, [ebp - 0x2400]
push eax
mov byte [ebp - 4], 0xf
call fcn.0047ae10
push ecx
mov eax, esp
mov dword [ebp - 0x228c], esp
push dword [ebp - 0x2368]
push str._s.VirtFiles.db
push eax
call fcn.004622a0
lea eax, [ebp - 0x22b8]
add esp, 0xc
push eax
call fcn.004619a0
pop ecx
pop ecx
mov byte [ebp - 4], 0x11
push dword [ebp - 0x22b8]
call edi
push ecx
lea eax, [ebp - 0x22b8]
mov dword [ebp - 0x228c], esp
mov ecx, esp
push eax
call fcn.00423b01
push ecx
mov byte [ebp - 4], 0x12
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push str.Main
call fcn.0042342e
push 4
lea eax, [ebp - 0x2400]
push eax
mov byte [ebp - 4], 0x11
call fcn.0047ae10
cmp eax, ebx
je 0x430f40
mov ecx, dword [ebp - 0x22b8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffff0
call fcn.0042101a
jmp 0x430d45
xor eax, eax
mov dword [ebp - 0x22f0], ebx
lea edi, [ebp - 0x22ec]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push ecx
stosd dword es:[edi], eax
lea eax, [ebp - 0x22b8]
mov dword [ebp - 0x228c], esp
mov ecx, esp
push eax
lea edi, [ebp - 0x22f0]
call fcn.00423b01
call fcn.0046cf50
mov dword [ebp - 0x228c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x228c], esp
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x13
mov ecx, esp
mov dword [ebp - 0x22cc], esp
push str.VirtFiles.db
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x232c]
mov dword [ebp - 0x22c4], esp
mov ecx, esp
push eax
call fcn.00423b01
mov byte [ebp - 4], 0x11
call fcn.00461df0
add esp, 0xc
mov edi, 0x4f3410
call fcn.0046cf50
pop ecx
cmp dword [ebp + 0x14], ebx
jne 0x4312d9
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x228c], esp
push str.Main
call fcn.0042342e
lea eax, [ebp - 0x2400]
push eax
call fcn.00478da0
mov edi, eax
add esp, 0xc
mov dword [ebp - 0x22cc], edi
cmp edi, ebx
jne 0x431049
mov ebx, dword [ebp - 0x22bc]
mov eax, ebx
call fcn.00485ce0
test al, al
je 0x431023
mov edi, ebx
call fcn.00485c90
jmp 0x431028
call fcn.00478f90
mov ecx, dword [ebp - 0x22b8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffff0
call fcn.0042101a
jmp 0x430dc6
push 0x2024
lea eax, [ebp - 0x2284]
push ebx
push eax
mov dword [ebp - 0x22c4], ebx
mov dword [ebp - 0x22b0], ebx
mov dword [ebp - 0x2288], ebx
call fcn.004a52f0
add esp, 0xc
lea ecx, [ebp - 0x2288]
or edx, 0xffffffff
mov eax, edi
call fcn.00478e40
mov eax, dword [ebp - 0x2288]
cmp eax, ebx
mov dword [ebp - 0x228c], eax
mov dword [ebp - 0x22d4], ebx
jle 0x431288
mov edx, dword [ebp - 0x22d4]
lea ecx, [ebp - 0x2288]
mov eax, edi
call fcn.00478e40
cmp eax, ebx
jne 0x4310d5
test byte [ebp - 0x284], 0x10
lea eax, [ebp - 0x2284]
push eax
je 0x4310ee
mov eax, dword [ebp - 0x22bc]
call fcn.00485c40
pop ecx
cmp eax, ebx
je 0x4311c4
mov eax, edi
call fcn.00485ce0
test al, al
je 0x43129a
call fcn.00485c90
jmp 0x4312a1
lea ecx, [ebp - 0x22d0]
call fcn.0042342e
push 0x5c
push 0x2f
lea ebx, [ebp - 0x22d0]
mov byte [ebp - 4], 0x15
call fcn.00433f11
push ecx
mov dword [ebp - 0x22c0], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x22c0], esp
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x16
mov eax, ebx
mov dword [ebp - 0x22a4], esp
mov ecx, esp
push eax
call fcn.00423b01
push ecx
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x232c]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423b01
mov byte [ebp - 4], 0x15
call fcn.00461df0
add esp, 0xc
call fcn.00464c80
pop ecx
test eax, eax
je 0x4311aa
push ecx
mov eax, esp
mov dword [ebp - 0x2290], esp
push dword [ebp - 0x22d0]
push str.PackUtils_MergeDirToExe:_Skipping:__s
push eax
call fcn.004622a0
add esp, 0xc
call fcn.004307a2
pop ecx
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x22d0]
add ecx, 0xfffffff0
call fcn.0042101a
mov edi, dword [ebp - 0x22cc]
xor ebx, ebx
jmp 0x431270
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x22d0]
add ecx, 0xfffffff0
call fcn.0042101a
mov edi, dword [ebp - 0x22cc]
xor ebx, ebx
mov eax, dword [ebp - 0x264]
cmp eax, 0xffffffff
je 0x431202
cmp eax, dword [ebp - 0x22c4]
jbe 0x431202
add eax, eax
mov dword [ebp - 0x22c4], eax
push eax
cmp dword [ebp - 0x22b0], ebx
jne 0x4311ef
call fcn.004a5222
jmp 0x4311fb
push dword [ebp - 0x22b0]
call fcn.004a5390
pop ecx
mov dword [ebp - 0x22b0], eax
pop ecx
push ecx
mov eax, esp
mov dword [ebp - 0x2290], esp
lea ecx, [ebp - 0x2284]
push ecx
push str.PackUtils_MergeDirToExe:_Keeping__unzipping__zipping_:__s
push eax
call fcn.004622a0
add esp, 0xc
call fcn.004307a2
mov edx, dword [ebp - 0x22b0]
pop ecx
push dword [ebp - 0x22c4]
mov eax, edi
push dword [ebp - 0x22d4]
call fcn.00478f10
pop ecx
pop ecx
cmp eax, ebx
jne 0x4310d5
push dword [ebp - 0x264]
mov eax, dword [ebp - 0x22bc]
push dword [ebp - 0x22b0]
lea ecx, [ebp - 0x2284]
call fcn.00485bf0
pop ecx
pop ecx
cmp eax, ebx
jne 0x4310d5
inc dword [ebp - 0x22d4]
mov eax, dword [ebp - 0x22d4]
cmp eax, dword [ebp - 0x228c]
jl 0x43109a
mov eax, edi
call fcn.00485ce0
test al, al
je 0x4312d0
call fcn.00485c90
jmp 0x4312d9
mov ebx, edi
call fcn.00478f90
mov ebx, dword [ebp - 0x22bc]
mov eax, ebx
call fcn.00485ce0
test al, al
je 0x4312bb
mov edi, ebx
call fcn.00485c90
jmp 0x4312c0
call fcn.00478f90
lea eax, [ebp - 0x2400]
call fcn.00479a60
jmp 0x431028
mov ebx, edi
call fcn.00478f90
xor ebx, ebx
push ecx
lea eax, [ebp - 0x22ac]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
mov dword [ebp - 0x22d8], ebx
call fcn.00423b01
call fcn.0042871e
pop ecx
cmp dword [ebp + 0x14], ebx
je 0x43131c
push 0x4f3a70
push 0x44c4e0
push ebx
push dword [ebp - 0x22e8]
lea eax, [ebp - 0x22f0]
push eax
call fcn.004811b0
lea ecx, [ebp - 0x2588]
call fcn.00458e00
push ecx
mov byte [ebp - 4], 0x18
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x19
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push str._Windows_WinSxs
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x232c]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423b01
lea edi, [ebp - 0x228c]
mov byte [ebp - 4], 0x18
call fcn.00461df0
add esp, 0xc
push eax
lea ecx, [ebp - 0x2588]
mov byte [ebp - 4], 0x1b
call fcn.00423b22
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x228c]
add ecx, 0xfffffff0
call fcn.0042101a
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x1c
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push str._Windows_
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x232c]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423b01
lea edi, [ebp - 0x228c]
mov byte [ebp - 4], 0x18
call fcn.00461df0
add esp, 0xc
push eax
lea ecx, [ebp - 0x2584]
mov byte [ebp - 4], 0x1e
call fcn.00423b22
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x228c]
add ecx, 0xfffffff0
call fcn.0042101a
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x1f
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push str._System_
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x232c]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423b01
lea edi, [ebp - 0x228c]
mov byte [ebp - 4], 0x18
call fcn.00461df0
add esp, 0xc
push eax
lea ecx, [ebp - 0x2580]
mov byte [ebp - 4], 0x21
call fcn.00423b22
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x228c]
add ecx, 0xfffffff0
call fcn.0042101a
push 0x4cc12c
lea ecx, [ebp - 0x257c]
call fcn.00423f2b
lea eax, [ebp - 0x232c]
push eax
mov ecx, 0x4f3aa8
call fcn.00423b22
push 0x24c
lea eax, [ebp - 0x25c]
push ebx
push eax
mov dword [ebp - 0x260], ebx
call fcn.004a52f0
add esp, 0xc
lea eax, [ebp - 0x260]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x22
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push 0x4d01e8
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x232c]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423b01
lea edi, [ebp - 0x228c]
mov byte [ebp - 4], 0x18
call fcn.00461df0
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ecx, dword [ebp - 0x228c]
add ecx, 0xfffffff0
mov dword [ebp - 0x22c4], eax
call fcn.0042101a
cmp dword [ebp - 0x22c4], 0xffffffff
je 0x43161b
test byte [ebp - 0x260], 0x10
je 0x4315f4
lea eax, [ebp - 0x234]
push eax
push 0x4cd40c
call fcn.004a4d60
pop ecx
pop ecx
test eax, eax
je 0x4315f4
lea eax, [ebp - 0x234]
push eax
push 0x4d01ec
call fcn.004a4d60
pop ecx
pop ecx
test eax, eax
je 0x4315f4
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x234]
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push eax
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x232c]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423b01
lea edi, [ebp - 0x22cc]
mov byte [ebp - 4], 0x18
call fcn.00461df0
add esp, 0xc
push eax
mov eax, 0x4f3a90
mov byte [ebp - 4], 0x26
call fcn.00428b64
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x22cc]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x260]
push eax
push dword [ebp - 0x22c4]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x431541
push dword [ebp - 0x22c4]
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x2430]
push eax
call fcn.0042392d
mov byte [ebp - 4], 0x27
cmp dword [ebp + 0x14], ebx
je 0x43170a
push ecx
mov dword [ebp - 0x2290], esp
mov edi, esp
push ecx
lea eax, [ebp - 0x2418]
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
mov dword [ebp - 0x22b0], eax
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x28
mov ecx, esp
mov dword [ebp - 0x22a4], esp
mov ebx, str.VirtFiles.db
push ebx
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x22ac]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423b01
mov byte [ebp - 4], 0x27
call fcn.00461df0
add esp, 0xc
call fcn.00465920
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x2a
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push ebx
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0x22ac]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423b01
lea edi, [ebp - 0x228c]
mov byte [ebp - 4], 0x27
call fcn.00461df0
mov esi, dword [eax]
add esp, 0xc
lea ebx, [ebp - 0x2418]
call fcn.004803c0
mov ecx, dword [ebp - 0x228c]
add ecx, 0xfffffff0
call fcn.0042101a
mov esi, 0x4ca098
xor ebx, ebx
jmp 0x431716
lea eax, [ebp - 0x22f0]
mov dword [ebp - 0x22b0], eax
push dword [ebp - 0x22b0]
mov edi, dword [ebp - 0x22bc]
push edi
lea eax, [ebp - 0x22d8]
push eax
lea eax, [ebp - 0x2430]
push eax
lea eax, [ebp - 0x2588]
push eax
call fcn.0044adf0
add esp, 0x14
lea eax, [ebp - 0x2298]
push eax
lea eax, [ebp - 0x2294]
push eax
lea eax, [ebp - 0x22a0]
push eax
lea eax, [ebp - 0x2430]
push edi
push eax
call fcn.0044f3b0
add esp, 0x14
lea eax, [ebp - 0x2430]
push eax
mov byte [ebp - 4], 0x18
call fcn.00423965
lea eax, [ebp - 0x2588]
push eax
mov byte [ebp - 4], 0x11
call fcn.0045e0f0
mov eax, edi
call fcn.00485ce0
test al, al
je 0x431797
call fcn.00485c90
jmp 0x4317a0
mov ebx, edi
call fcn.00478f90
xor ebx, ebx
push ecx
mov eax, esp
mov dword [ebp - 0x2290], esp
push dword [ebp - 0x2368]
push str._s.VirtReg.export
push eax
call fcn.004622a0
lea eax, [ebp - 0x22c8]
add esp, 0xc
push eax
call fcn.004619a0
add esp, 4
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x22c8]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423b01
push ecx
mov byte [ebp - 4], 0x2d
mov dword [ebp - 0x22a4], esp
mov edi, esp
push ecx
lea eax, [ebp - 0x2368]
mov dword [ebp - 0x22a4], esp
mov ecx, esp
push eax
call fcn.00423b01
push edi
call fcn.004307fa
pop ecx
pop ecx
mov byte [ebp - 4], 0x2c
call fcn.0043faf0
pop ecx
pop ecx
cmp dword [ebp + 0x10], ebx
je 0x431c51
call fcn.004964ca
push eax
lea ecx, [ebp - 0x22d4]
call fcn.004249f9
mov byte [ebp - 4], 0x2e
call fcn.004964ca
push eax
lea ecx, [ebp - 0x22cc]
call fcn.004249f9
mov byte [ebp - 4], 0x2f
call fcn.004964ca
push eax
lea ecx, [ebp - 0x228c]
call fcn.004249f9
mov byte [ebp - 4], 0x30
call fcn.004964ca
push eax
lea ecx, [ebp - 0x22bc]
call fcn.004249f9
mov byte [ebp - 4], 0x31
call fcn.004964ca
push eax
lea ecx, [ebp - 0x22c4]
call fcn.004249f9
lea eax, [ebp - 0x2358]
push eax
lea eax, [ebp - 0x235c]
push eax
lea eax, [ebp - 0x22d4]
push eax
push ecx
mov byte [ebp - 4], 0x32
mov dword [ebp - 0x2290], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push esi
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x33
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push str.RegistryMACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x34
mov dword [ebp - 0x22c0], esp
mov esi, esp
push ecx
lea eax, [ebp - 0x2368]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423b01
push esi
call fcn.0043083f
pop ecx
pop ecx
mov byte [ebp - 4], 0x32
call fcn.00461df0
add esp, 0xc
call fcn.0043355a
add esp, 0x10
lea eax, [ebp - 0x22c4]
push eax
lea eax, [ebp - 0x22bc]
push eax
push dword [ebp - 0x22d8]
lea eax, [ebp - 0x2294]
push ecx
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423b01
push ecx
mov byte [ebp - 4], 0x35
lea eax, [ebp - 0x22d4]
mov dword [ebp - 0x22a4], esp
mov ecx, esp
push eax
call fcn.00423b01
mov byte [ebp - 4], 0x32
call fcn.00433886
add esp, 0x14
push ebx
push ecx
lea eax, [ebp - 0x22bc]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423b01
push ecx
mov byte [ebp - 4], 0x36
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push str.NewAppId
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x37
mov dword [ebp - 0x22c0], esp
mov esi, esp
push ecx
lea eax, [ebp - 0x2368]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423b01
push esi
call fcn.0043083f
pop ecx
pop ecx
push SysReAllocStringLen
mov byte [ebp - 4], 0x32
call fcn.004634f0
add esp, 0x14
lea eax, [ebp - 0x22bc]
push eax
lea ecx, [ebp - 0x2368]
call fcn.00423b22
lea eax, [ebp - 0x22c4]
push eax
lea ecx, [ebp - 0x2360]
call fcn.00423b22
mov ecx, dword [ebp - 0x22c4]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22bc]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x228c]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22cc]
add ecx, 0xfffffff0
call fcn.0042101a
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x22d4]
add ecx, 0xfffffff0
call fcn.0042101a
mov eax, dword [ebp - 0x2298]
cmp dword [eax - 0xc], ebx
je 0x431c51
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push eax
push str._d_CeIconChange.tmp
push ecx
call fcn.004622a0
lea eax, [ebp - 0x22d0]
add esp, 0xc
push eax
call fcn.004619a0
pop ecx
pop ecx
push ebx
push ebx
push ecx
mov byte [ebp - 4], 0x38
lea eax, [ebp - 0x22d0]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423b01
lea eax, [ebp - 0x2400]
call fcn.0047b100
push ecx
lea eax, [ebp + 0xc]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423b01
call fcn.0047b390
pop ecx
cmp eax, ebx
je 0x431acf
mov ecx, dword [ebp - 0x22d0]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22c8]
add ecx, 0xfffffff0
call fcn.0042101a
jmp 0x430f1f
push ecx
lea eax, [ebp + 0xc]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423b01
push ecx
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x2298]
mov dword [ebp - 0x22a4], esp
mov ecx, esp
push eax
call fcn.00423b01
lea eax, [ebp - 0x228c]
push eax
mov byte [ebp - 4], 0x38
call fcn.0043087a
mov ecx, dword [ebp - 0x228c]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.0042101a
push ebx
push ebx
push ecx
lea eax, [ebp - 0x22d0]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423b01
lea eax, [ebp - 0x2550]
push eax
call fcn.0042601c
push 0xffffffffffffffff
push 0xffffffffffffffff
push ecx
mov byte [ebp - 4], 0x3a
lea eax, [ebp + 0xc]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423b01
lea eax, [ebp - 0x2550]
call fcn.0047b100
mov edi, eax
lea eax, [ebp - 0x2550]
cmp edi, ebx
je 0x431c1e
push eax
mov byte [ebp - 4], 0x38
call fcn.004260db
mov ecx, dword [ebp - 0x22d0]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22c8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22b8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22ac]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a0]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x2400]
push eax
mov byte [ebp - 4], 2
call fcn.004260db
jmp 0x430a77
call fcn.00479a60
push dword [ebp - 0x22d0]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0x2550]
push eax
mov byte [ebp - 4], 0x38
call fcn.004260db
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x22d0]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x2400]
call fcn.00479a60
push 1
push 1
push ecx
lea eax, [ebp + 0xc]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423b01
lea eax, [ebp - 0x24c0]
push eax
call fcn.0042601c
mov byte [ebp - 4], 0x3b
cmp dword [ebp - 0x2434], ebx
jne 0x431d33
lea eax, [ebp - 0x24c0]
push eax
mov byte [ebp - 4], 0x2c
call fcn.004260db
mov ecx, dword [ebp - 0x22c8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22b8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22ac]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a0]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x2400]
push eax
mov byte [ebp - 4], 2
call fcn.004260db
push 7
jmp 0x430a76
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
mov edi, str.Main
push edi
call fcn.0042342e
mov esi, 0x4000
push esi
push 1
push ecx
mov byte [ebp - 4], 0x3c
lea eax, [ebp - 0x229c]
mov dword [ebp - 0x22a4], esp
mov ecx, esp
push eax
call fcn.00423b01
lea eax, [ebp - 0x24c0]
push eax
mov byte [ebp - 4], 0x3b
call fcn.0047a720
push dword [ebp - 0x229c]
mov dword [ebp - 0x228c], eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [ebp - 0x228c], ebx
je 0x431da7
lea eax, [ebp - 0x24c0]
push eax
mov byte [ebp - 4], 0x2c
call fcn.004260db
jmp 0x431abc
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push edi
call fcn.0042342e
push esi
push 4
mov byte [ebp - 4], 0x3d
mov eax, dword [ebp - 0x22b0]
push ecx
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push dword [eax]
call fcn.0042342e
lea eax, [ebp - 0x24c0]
push eax
mov byte [ebp - 4], 0x3b
call fcn.0047a720
cmp eax, ebx
jne 0x431d92
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push edi
call fcn.0042342e
push esi
push 6
push ecx
mov byte [ebp - 4], 0x3e
lea eax, [ebp - 0x22c8]
mov dword [ebp - 0x22a4], esp
mov ecx, esp
push eax
call fcn.00423b01
lea eax, [ebp - 0x24c0]
push eax
mov byte [ebp - 4], 0x3b
call fcn.0047a720
cmp eax, ebx
jne 0x431d92
cmp dword [ebp + 0x10], ebx
je 0x431ff0
push 0x4cc12c
lea ecx, [ebp - 0x22bc]
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x22a8]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
lea ebx, [ebp - 0x22bc]
call fcn.00423b01
call fcn.00462e30
pop ecx
test eax, eax
je 0x432104
mov eax, ebx
push eax
lea ecx, [ebp - 0x22b0]
call fcn.00423b01
lea eax, [ebp - 0x22b0]
push eax
push ecx
mov byte [ebp - 4], 0x40
lea eax, [ebp - 0x2368]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423b01
push ecx
mov byte [ebp - 4], 0x41
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push str.AppID
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x42
lea eax, [ebp - 0x22b0]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423b01
mov byte [ebp - 4], 0x40
call fcn.00466980
add esp, 0x10
lea eax, [ebp - 0x22b0]
push eax
push ecx
lea eax, [ebp - 0x22a0]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423b01
push ecx
mov byte [ebp - 4], 0x43
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push str.AutoLaunch
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x44
lea eax, [ebp - 0x22b0]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423b01
mov byte [ebp - 4], 0x40
call fcn.00466980
add esp, 0x10
lea eax, [ebp - 0x22b0]
push eax
push ecx
lea eax, [ebp - 0x2294]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423b01
push ecx
mov byte [ebp - 4], 0x45
mov ecx, esp
mov dword [ebp - 0x22a4], esp
push str.Shortcuts
call fcn.0042342e
push ecx
mov byte [ebp - 4], 0x46
lea eax, [ebp - 0x22b0]
mov dword [ebp - 0x22c0], esp
mov ecx, esp
push eax
call fcn.00423b01
mov byte [ebp - 4], 0x40
call fcn.00466980
mov ebx, dword [ebp - 0x22b0]
mov eax, dword [ebx - 0xc]
add esp, 0x10
push ebx
push ecx
lea edi, [eax + eax]
lea eax, [ebp - 0x22a8]
mov dword [ebp - 0x2290], esp
mov ecx, esp
push eax
call fcn.00423b01
call fcn.00462ff0
pop ecx
pop ecx
lea ecx, [ebx - 0x10]
test eax, eax
jne 0x431fd2
call fcn.0042101a
mov ecx, dword [ebp - 0x22bc]
add ecx, 0xfffffff0
call fcn.0042101a
jmp 0x431c8e
call fcn.0042101a
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x22bc]
add ecx, 0xfffffff0
call fcn.0042101a
xor ebx, ebx
mov edi, str.Main
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push edi
call fcn.0042342e
push esi
push 3
push ecx
mov byte [ebp - 4], 0x47
lea eax, [ebp - 0x22a8]
mov dword [ebp - 0x22a4], esp
mov ecx, esp
push eax
call fcn.00423b01
lea eax, [ebp - 0x24c0]
push eax
mov byte [ebp - 4], 0x3b
call fcn.0047a720
cmp eax, ebx
jne 0x431d92
push ecx
mov ecx, esp
mov dword [ebp - 0x2290], esp
push str.PackUtils_MergeDirToExe:_Committing
call fcn.0042342e
call fcn.004307a2
pop ecx
lea eax, [ebp - 0x24c0]
call fcn.00479a60
test eax, eax
lea eax, [ebp - 0x24c0]
mov byte [ebp - 4], 0x2c
push eax
je 0x4321a5
call fcn.004260db
mov ecx, dword [ebp - 0x22c8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22b8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22ac]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a0]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x2400]
push eax
mov byte [ebp - 4], 2
call fcn.004260db
push 0xa
jmp 0x430a76
mov ecx, dword [ebp - 0x22bc]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x24c0]
push eax
mov byte [ebp - 4], 0x2c
call fcn.004260db
mov ecx, dword [ebp - 0x22c8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22b8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22ac]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a0]
add ecx, 0xfffffff0
call fcn.0042101a
jmp 0x430af2
call fcn.004260db
mov ecx, dword [ebp - 0x22c8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22b8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22b4]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22ac]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x229c]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a0]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x2400]
push eax
mov byte [ebp - 4], 2
call fcn.004260db
lea esi, [ebp - 0x2370]
call fcn.004322d5
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042101a
xor eax, eax
jmp 0x4322bb
mov ecx, dword [ebp - 0x2298]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x2294]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp - 0x22a0]
add ecx, 0xfffffff0
call fcn.0042101a
lea eax, [ebp - 0x2400]
push eax
mov byte [ebp - 4], 2
call fcn.004260db
lea esi, [ebp - 0x2370]
call fcn.004322d5
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042101a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0042101a
push 6
pop eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a4220
leave
ret