Function at 0x446049
Capabilities:
Accept command line arguments
Check for sandbox username or hostname
Check for time delay via gettickcount
Check if file exists
Contain obfuscated stackstrings
Copy file
Create process on windows
Delete file
Get file attributes
Get hostname
Move file
Parse pe header
Print debug messages
Resolve function by parsing pe exports
Set current directory
Set environment variable
Set registry value
Terminate process
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4e4b48
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x3724
call fcn.004c27c0
mov eax, dword [0x527f10]
xor eax, esp
mov dword [esp + 0x3720], eax
push ebx
push esi
push edi
mov eax, dword [0x527f10]
xor eax, esp
push eax
lea eax, [esp + 0x3738]
mov dword fs:[0], eax
lea eax, [esp + 0x2d4]
xor esi, esi
mov dword [esp + 0x44], esi
push eax
mov dword [esp + 0x68], ecx
mov dword [esp + 0x2d8], 8
mov dword [esp + 0x2dc], 0xff
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov ecx, dword [esp + 0x64]
call fcn.004b6294
mov ebx, 0x4eea54
push ebx
lea ecx, [esp + 0x64]
call fcn.004247f7
push ebx
lea ecx, [esp + 0x60]
mov dword [esp + 0x3744], esi
call fcn.004247f7
push ebx
lea ecx, [esp + 0x78]
mov byte [esp + 0x3744], 1
call fcn.004247f7
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x3744], 2
call fcn.0046c7a0
pop ecx
lea ecx, [esp + 0x4c]
call fcn.00422487
mov byte [esp + 0x3740], 4
mov edi, dword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea eax, [esp + 0x50]
push eax
mov dword [esp + 0x7c], esi
call edi
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x2d0]
push eax
mov dword [esp + 0x38], esi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x58], esi
mov dword [esp + 0x44], esi
call fcn.0046c7a0
pop ecx
push eax
mov ecx, 0x52dfb8
mov byte [esp + 0x3744], 5
call fcn.0042483b
mov byte [esp + 0x3740], 4
mov ecx, dword [esp + 0x2d0]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x2b8]
push eax
call fcn.0046c7a0
pop ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x3740], 6
call edi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
mov eax, dword [esp + 0x28]
push dword [eax]
push str.Loader:__s__CmdLine_s
push ecx
call fcn.0046d760
add esp, 0x10
call fcn.00444eaa
pop ecx
mov byte [esp + 0x3740], 4
mov ecx, dword [esp + 0x2b8]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str._CEK_
mov edi, 0x400
call fcn.004247f7
lea eax, [esp + 0x1dc]
push eax
mov ecx, edi
call fcn.00473a20
mov byte [esp + 0x3748], 7
mov eax, dword [eax]
mov eax, dword [eax - 0xc]
add esp, 4
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
push str.Loader:_CEK:_Len_d
push ecx
call fcn.0046d760
add esp, 0xc
call fcn.00444eaa
pop ecx
mov byte [esp + 0x3740], 4
mov ecx, dword [esp + 0x1d8]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
push 1
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x52dbf0], eax
cmp dword [esp + 0x2c], esi
je 0x4472ba
xor eax, eax
inc eax
cmp dword [esp + 0x50], eax
mov dword [esp + 0x24], eax
jle 0x4472ba
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x2c]
push ecx
lea edi, [eax + ecx*4]
mov ecx, esp
mov dword [esp + 0x3c], esp
push dword [edi]
call fcn.004247f7
call fcn.00444eda
mov dword [esp], 0x4fdb3c
call fcn.004bba40
pop ecx
push eax
push str._ExeFile:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
jne 0x4462bf
push 0x4fdb3c
call fcn.004bba40
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x18]
jmp 0x4472a2
push str._Confirm
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x4462de
mov dword [esp + 0x48], 1
jmp 0x4472a8
push str._Quiet
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x446300
or dword [esp + 0x40], 2
mov dword [0x52a4b0], esi
jmp 0x4472a8
push str._AllUsers
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x446353
mov dword [esp + 0x54], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.0046c580
test eax, eax
je 0x4473b0
call fcn.0046c750
test eax, eax
jne 0x4472a8
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Admin_rights_required
jmp 0x4473cb
push str._ErrorsOnly
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x446374
mov dword [0x52a4b0], 1
jmp 0x4472a8
push str._Wait
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x446390
or dword [esp + 0x40], 1
jmp 0x4472a8
push 0x4fdc08
call fcn.004bba40
pop ecx
push eax
push str._Password:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x447283
push 0x4fdc2c
call fcn.004bba40
pop ecx
push eax
push str._Password
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x447283
push 0x4fdc68
call fcn.004bba40
pop ecx
push eax
push str._Properties:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
jne 0x446756
push str._Properties_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xf10]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 8
push dword [0x52a4b0]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xf10]
push eax
call fcn.004457ba
add esp, 0x10
lea eax, [esp + 0xf04]
call fcn.00485920
lea ecx, [esp + 0x28]
call fcn.00422487
lea ecx, [esp + 0x20]
call fcn.00422487
lea ecx, [esp + 0x6c]
call fcn.00422487
push 0x4fdc68
mov byte [esp + 0x3744], 0xb
call fcn.004bba40
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x144]
call fcn.004247f7
lea eax, [esp + 0x2dc]
push eax
mov byte [esp + 0x3744], 0xc
call fcn.0043093f
mov byte [esp + 0x3740], 0xd
mov dword [esp + 0x150], esi
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 0x4fd518
lea edi, [esp + 0x158]
call fcn.004247f7
push ecx
mov byte [esp + 0x3748], 0xe
lea eax, [esp + 0x148]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x1e8]
push eax
mov byte [esp + 0x374c], 0xd
call fcn.004714b0
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x3744], 0xf
call fcn.0042483b
mov byte [esp + 0x3740], 0xd
mov ecx, dword [esp + 0x1e0]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
push 0x3d
lea ecx, [esp + 0x30]
call fcn.00426eb1
mov edi, eax
cmp edi, 0xffffffff
je 0x4465d7
push edi
lea eax, [esp + 0x1ec]
push eax
lea ecx, [esp + 0x30]
call fcn.004249e6
mov byte [esp + 0x3740], 0x10
call fcn.0042493d
push eax
lea ecx, [esp + 0x24]
call fcn.0042483b
mov byte [esp + 0x3740], 0xd
mov ecx, dword [esp + 0x1e8]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], esi
je 0x4465d7
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x70]
call fcn.0042483b
push esi
lea ecx, [esp + 0x70]
lea eax, [edi + 1]
push ecx
call fcn.0042488e
lea eax, [esp + 0x6c]
push eax
push ecx
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x2e8]
push eax
call fcn.00430990
pop ecx
mov ecx, eax
call fcn.0042483b
cmp dword [esp + 0x150], 0xffffffff
jne 0x4464c6
mov eax, dword [esp + 0x2f4]
mov eax, dword [eax]
lea edi, [esp + 0x2dc]
lea esi, [esp + 0x80]
call fcn.0042bc74
jmp 0x4466c5
lea esi, [esp + 0x80]
call fcn.00430c3f
push eax
lea ecx, [esp + 0x108]
call fcn.004247e2
mov byte [esp + 0x3740], 0x11
call fcn.00430c3f
add eax, 4
push eax
lea ecx, [esp + 0x20]
call fcn.004247e2
push str.Branding
lea eax, [esp + 0x108]
mov byte [esp + 0x3744], 0x12
call fcn.0042487a
test eax, eax
je 0x4473dc
lea edi, [esp + 0x104]
call fcn.0042b6fa
push dword [eax]
lea eax, [esp + 0x200]
push str.CAMEYO__s
push eax
call fcn.0046d760
mov esi, dword [esp + 0x28]
mov eax, dword [eax]
add esp, 0xc
push esi
push eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov ecx, dword [esp + 0x1fc]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [esi - 0x10]
call fcn.0042201a
mov byte [esp + 0x3740], 0xd
mov ecx, dword [esp + 0x104]
add ecx, 0xfffffff0
call fcn.0042201a
lea esi, [esp + 0x80]
call fcn.0042bc8a
mov eax, dword [esp + 0x2f4]
lea edi, [esp + 0x2dc]
lea esi, [esp + 0xb0]
call fcn.0042bc74
mov edi, esi
lea esi, [esp + 0x80]
call fcn.00430c6a
test al, al
je 0x446606
lea eax, [esp + 0x2dc]
push eax
mov byte [esp + 0x3744], 0xc
call fcn.0043070b
mov ecx, dword [esp + 0x140]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x6c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x28]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0xf04]
mov byte [esp + 0x3740], 4
call fcn.00427901
jmp 0x446eed
push str._SafeMode
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x4467a2
push str._SafeMode_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov edi, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
push 0x4f0e18
push str.CAMEYO_LEGACYREG
call edi
push str.Disk
push str.CAMEYO_VIRTMODE
call edi
push 0x4f0d5c
push str.CAMEYO_EARLYINJECTION
call edi
jmp 0x4472a8
push 0x4fdd84
call fcn.004bba40
pop ecx
push eax
push str._Services:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
jne 0x446816
push dword [edi]
lea ecx, [esp + 0x11c]
call fcn.004247f7
push 0x4fdd84
mov byte [esp + 0x3744], 0x13
call fcn.004bba40
pop ecx
push esi
lea ecx, [esp + 0x11c]
push ecx
call fcn.0042488e
push dword [esp + 0x118]
push str.CAMEYO_SERVICES
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov byte [esp + 0x3740], 4
mov ecx, dword [esp + 0x118]
jmp 0x447279
push str._Register
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x4473f0
push str._Stop
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x4474a1
push str._Remove
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44e3c7
push str._RemoveSelf
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44e3c7
push str._Remove:Proc
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x4475c4
push str._Remove:Reg
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x4477ac
push str._LearnStreaming
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44e1e6
push 0x4fe33c
call fcn.004bba40
pop ecx
push eax
push str._LearnStreaming:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44e1e6
push str._UpdateBasicSettings
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x4468f2
mov dword [esp + 0x34], 1
jmp 0x4472a8
push str._Repackage
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x4479b3
push str._CreateDiff
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44e02d
push 0x4fe560
call fcn.004bba40
pop ecx
push eax
push str._CreateDiff:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44e02d
push str._exec
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x447b8f
push 0x4fe5a4
call fcn.004bba40
pop ecx
push eax
push str._Patch
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44dae1
push 0x4fe5bc
call fcn.004bba40
pop ecx
push eax
push str._InstSandbox
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44dae1
push str._ShowStreaming
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x447d54
push str._Break
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x447e36
push str._Unbreak
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x448559
push str._Integrate
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44d6ad
push str._Integrate:once
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44d6ad
push str._FullIntegrate
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44d6ad
push str._Unintegrate
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x448d84
push str._CreateShortcuts
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44d021
push 0x4ff080
call fcn.004bba40
pop ecx
push eax
push str._CreateShortcuts:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44d021
push str._Perf
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x448dec
push str._ExtractLog
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x4491f2
push str._ExtractAll
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44943e
push str._AutoUpdateXml
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44951f
push str._Info
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x449672
push str._Sandbox
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x449727
push 0x4ff350
call fcn.004bba40
pop ecx
push eax
push str._AddSandbox:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44992a
push 0x4ff3b8
call fcn.004bba40
pop ecx
push eax
push str._GetProperty:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x449c22
push str._SaveProperties
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44ce51
push str._SaveAllProperties
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44ce51
push str._InfoLog
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x449e3c
push str._Ini
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44cd28
push str._ShowIni
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44cd28
push str._ExtractIni
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44a03e
push str._csv
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44a1d3
push str._EngineVer
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44a5a4
push str._ChangeLoader
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x446c0b
mov eax, dword [esp + 0x24]
inc eax
cmp dword [esp + 0x50], eax
jg 0x44a6e5
push str._ChangeEngine
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x446c2c
mov eax, dword [esp + 0x24]
inc eax
cmp dword [esp + 0x50], eax
jg 0x44aa0f
push str._ChangeIni
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x446c4d
mov eax, dword [esp + 0x24]
inc eax
cmp dword [esp + 0x50], eax
jg 0x44ada7
push str._TestAutoUpdate
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x446c70
mov eax, dword [esp + 0x24]
add eax, 5
cmp dword [esp + 0x50], eax
jg 0x44af60
push str._Debug
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44b06f
push str._ForceMenu
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x446ca5
mov dword [esp + 0x78], 1
jmp 0x4472a8
push str._ShowTree
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44b0b0
push str._RegDump
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44b17c
push str._SetFileFlags
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x446cf4
mov eax, dword [esp + 0x24]
add eax, 2
cmp dword [esp + 0x50], eax
jg 0x44b2f7
push str._DbgZip:
call fcn.004bbaea
pop ecx
push eax
push str._DbgZip:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44b508
push str._DbgNow
call fcn.004bbaea
pop ecx
push eax
push str._DbgNow
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44b548
push str._Vintegrate
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44cba9
push 0x4ffe18
call fcn.004bba40
pop ecx
push eax
push str._Vintegrate:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44cba9
push str._VintegrateRecursive
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44cba9
push 0x4ffe70
call fcn.004bba40
pop ecx
push eax
push str._VintegrateRecursive:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44cba9
push str._Vunintegrate
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44b636
push str._Vmanager
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44b7e3
push 0x4fff30
call fcn.004bba40
pop ecx
push eax
push str._ProcessList
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44b890
push 0x5000b8
call fcn.004bba40
pop ecx
push eax
push str._WaitFor
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44bc01
push str._GfxSvr
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x446e78
call fcn.0042fe3c
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x401
mov edi, 0x52df50
call fcn.0048b180
mov dword [esp], 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x403
call fcn.0048b180
mov dword [esp], 0x493e0
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4472a8
push 0x5000e8
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x446ef4
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.open
xor ebx, ebx
call fcn.004247f7
push esi
push ecx
mov dword [esp + 0x374c], 0x170
mov ecx, esp
mov dword [esp + 0x44], esp
push str._Troubleshoot
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x71
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247e2
mov edi, esi
mov dword [esp + 0x3750], 4
call fcn.0046c200
add esp, 0x10
mov ebx, 0x4eea54
xor esi, esi
jmp 0x4472a8
push str._Troubleshoot
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44bcc2
push str._AutoUpdate
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44bce8
push str._VirtRegSyncExport
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44bd7d
push str._StartStreaming
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44bde5
push str._JumpTo
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44be03
push str._SvcRegister
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44bea2
push str._SvcStart
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44bfab
push str._SvcRegisterStart
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44c066
push str._SvcStop
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44c1c7
push str._SvcRemove
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44c284
push 0x5004e8
call fcn.004bba40
pop ecx
push eax
push str._ScmDirectInit:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
je 0x44c342
push str._AuthCheck
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44ca99
push str._AuthCheck:Force
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44ca99
push str._RepoSync
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x447040
mov eax, dword [esp + 0x24]
inc eax
cmp dword [esp + 0x50], eax
jg 0x44c3ea
push str._MergeRegistry
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44c4c2
push str._OpenFile
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x447077
mov eax, dword [esp + 0x24]
inc eax
cmp dword [esp + 0x50], eax
jg 0x44c5ba
push dword [edi]
lea ecx, [esp + 0xf0]
call fcn.004247f7
push esi
push ecx
mov dword [esp + 0x3748], 0x18c
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x4ed4c8
call fcn.004247f7
push ecx
mov esi, esp
mov byte [esp + 0x374c], 0x8d
mov dword [esp + 0x20], esp
push 0x5c
push ecx
lea eax, [esp + 0x100]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247e2
push esi
call fcn.0046da90
add esp, 0xc
mov byte [esp + 0x374c], 0x8c
call fcn.004719e0
xor esi, esi
add esp, 0xc
cmp eax, esi
je 0x447121
push 0x4f98ac
push ecx
lea eax, [esp + 0xf4]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x258]
push eax
call fcn.0046d7f0
or dword [esp + 0x50], 4
pop ecx
pop ecx
call fcn.0042487a
mov byte [esp + 0x33], 1
test eax, eax
je 0x447126
mov byte [esp + 0x33], 0
test byte [esp + 0x44], 4
je 0x447141
mov ecx, dword [esp + 0x250]
and dword [esp + 0x44], 0xfffffffb
add ecx, 0xfffffff0
call fcn.0042201a
cmp byte [esp + 0x33], 0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
jne 0x44c982
mov eax, dword [esp + 0x30]
push dword [eax]
call fcn.004247f7
lea eax, [esp + 0x188]
push eax
call fcn.00473160
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x78]
mov byte [esp + 0x3744], 0x92
call fcn.0042483b
mov byte [esp + 0x3740], 0x8c
mov ecx, dword [esp + 0x184]
add ecx, 0xfffffff0
call fcn.0042201a
call fcn.00445fee
test eax, eax
je 0x447259
cmp dword [esp + 0x50], 1
jle 0x447259
cmp dword [esp + 0x50], 2
jne 0x44720a
push 0x4f98ac
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [edi]
call fcn.004247f7
lea eax, [esp + 0x260]
push eax
call fcn.0046d7f0
pop ecx
pop ecx
mov byte [esp + 0x3744], 0x93
or dword [esp + 0x48], 8
call fcn.0042487a
test eax, eax
jne 0x44720a
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push dword [edi]
call fcn.004247f7
call fcn.0046fe10
pop ecx
mov byte [esp + 0x33], 1
cmp eax, esi
jne 0x44720f
mov byte [esp + 0x33], 0
mov dword [esp + 0x3740], 0x18c
test byte [esp + 0x44], 8
je 0x447235
mov ecx, dword [esp + 0x258]
and dword [esp + 0x44], 0xfffffff7
add ecx, 0xfffffff0
call fcn.0042201a
cmp byte [esp + 0x33], 0
je 0x447243
push str.PackageEditor.exe
jmp 0x44725e
call fcn.0040b6d8
test eax, eax
mov eax, str.Packager64.exe
jne 0x447256
mov eax, str.Packager.exe
push eax
jmp 0x44725e
push 0x4f7da4
lea ecx, [esp + 0x60]
call fcn.00424850
mov dword [esp + 0x3740], 4
mov ecx, dword [esp + 0xec]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x4472a8
push str._Password_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x4fdc08
call fcn.004bba40
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x4c]
push eax
call fcn.00424850
inc dword [esp + 0x24]
mov eax, dword [esp + 0x24]
cmp eax, dword [esp + 0x50]
jl 0x446267
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x1030]
push eax
call fcn.00484a40
push 0xffffffffffffffff
mov dword [esp + 0x3744], 0x194
push dword [esp + 0x44]
lea eax, [esp + 0x7c]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
push ecx
mov byte [esp + 0x3750], 0x95
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247e2
push ecx
mov byte [esp + 0x3754], 0x96
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e2
mov byte [esp + 0x3754], 0x97
push dword [esp + 0x8c]
lea eax, [esp + 0x30]
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x1040]
push eax
mov byte [esp + 0x3760], 0x94
call fcn.00438115
add esp, 0x20
cmp eax, 2
jne 0x44e6ff
call fcn.00445674
push esi
push dword [0x52df5c]
push str.Application_is_now_integrated_into_your_system
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
lea eax, [esp + 0x1024]
call fcn.00485920
lea eax, [esp + 0x1024]
mov dword [esp + 0x3740], 4
call fcn.00427901
jmp 0x44743f
call fcn.0046c5d0
test eax, eax
jne 0x4473d5
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Elevation_failed
call fcn.004247f7
call fcn.004456f1
push esi
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.License_required.
jmp 0x4473cb
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
mov esi, 0x52df50
push esi
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x447426
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_obtain_INI_info_from_resource_
jmp 0x4473cb
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
mov ecx, esi
call fcn.004371f9
pop ecx
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x74]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x5c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x60]
add ecx, 0xfffffff0
call fcn.0042201a
xor eax, eax
mov ecx, dword [esp + 0x3738]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3720]
xor ecx, esp
call fcn.004bb182
mov esp, ebp
pop ebp
ret
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
push 0x52df50
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x4474d4
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x52dfa8
call fcn.004247e2
push ecx
mov byte [esp + 0x3748], 0x14
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x52dfb8
call fcn.004247e2
push ecx
mov byte [esp + 0x374c], 0x15
mov ecx, esp
mov dword [esp + 0x44], esp
push 0x52dfac
call fcn.004247e2
push ecx
mov byte [esp + 0x3750], 0x16
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x52df5c
call fcn.004247e2
mov byte [esp + 0x3750], 4
call fcn.00440722
add esp, 0x10
cmp eax, esi
je 0x44756a
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52df5c]
push str.Cannot_stop_application__s
push eax
call fcn.0046d760
add esp, 0xc
jmp 0x4473d0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.__Stopped_successfully
call fcn.004247f7
call fcn.00444eda
pop ecx
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x74]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x5c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x60]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, esi
jmp 0x44747d
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
push 0x52df50
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x4475f7
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
mov eax, dword [0x52dfac]
cmp dword [eax - 0xc], esi
jne 0x44761e
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52df5c]
push str.Cannot_obtain_base_dir_for__s
jmp 0x44755c
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
mov edi, 0x52dfac
push edi
call fcn.004247e2
call fcn.0046fe10
pop ecx
cmp eax, esi
jne 0x447669
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52df5c]
push str.Application_is_not_deployed_on_this_machine:__s
push eax
call fcn.0046d760
add esp, 0xc
call fcn.00445740
pop ecx
pop ecx
push 5
jmp 0x4473d6
cmp dword [esp + 0x48], esi
je 0x44768c
push 3
push dword [0x52df5c]
push str.Do_you_want_to_stop_the_application_
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x44e492
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x52df5c]
push str.Removing_processes:__s
push eax
call fcn.0046d760
add esp, 0xc
call fcn.00444eda
pop ecx
lea ecx, [esp + 0x144]
call fcn.00422487
push 0x4ecfa0
mov byte [esp + 0x3744], 0x1d
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push esi
push esi
push 1
lea eax, [esp + 0x150]
push eax
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x52dfa8
call fcn.004247e2
push ecx
mov byte [esp + 0x375c], 0x1e
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x52dfb8
call fcn.004247e2
push ecx
mov byte [esp + 0x3760], 0x1f
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x52dfb4
call fcn.004247e2
push ecx
mov byte [esp + 0x3764], 0x20
mov ecx, esp
mov dword [esp + 0x40], esp
push edi
call fcn.004247e2
push ecx
mov byte [esp + 0x3768], 0x21
mov ecx, esp
mov dword [esp + 0xa0], esp
push 0x52df5c
call fcn.004247e2
mov byte [esp + 0x3768], 0x1d
call fcn.00440b27
add esp, 0x24
mov ecx, esp
mov dword [esp + 0x14], esp
push str.__Stopped_successfully
call fcn.004247f7
call fcn.00444eda
pop ecx
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52df5c]
push str.Application__s_stopped_successfully
push eax
call fcn.0046d760
add esp, 0xc
call fcn.00445740
pop ecx
pop ecx
mov ecx, dword [esp + 0x144]
jmp 0x44e6f2
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
push 0x52df50
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x4477df
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
mov eax, dword [0x52dfac]
cmp dword [eax - 0xc], esi
jne 0x4477fb
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
jmp 0x44760e
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
mov edi, 0x52dfac
push edi
call fcn.004247e2
call fcn.0046fe10
pop ecx
cmp eax, esi
jne 0x447829
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
jmp 0x447647
cmp dword [esp + 0x48], esi
je 0x44784c
push 3
push dword [0x52df5c]
push str.Do_you_want_to_remove_the_applications_registry_
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x44e492
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x52df5c]
push str.Removing_registry:__s
push eax
call fcn.0046d760
add esp, 0xc
call fcn.00444eda
pop ecx
lea ecx, [esp + 0x14c]
call fcn.00422487
push 0x4ecfa0
mov byte [esp + 0x3744], 0x22
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push esi
push 1
push esi
lea eax, [esp + 0x158]
push eax
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x52dfa8
call fcn.004247e2
push ecx
mov byte [esp + 0x375c], 0x23
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x52dfb8
call fcn.004247e2
push ecx
mov byte [esp + 0x3760], 0x24
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x52dfb4
call fcn.004247e2
push ecx
mov byte [esp + 0x3764], 0x25
mov ecx, esp
mov dword [esp + 0x40], esp
push edi
call fcn.004247e2
push ecx
mov byte [esp + 0x3768], 0x26
mov ecx, esp
mov dword [esp + 0xa0], esp
push 0x52df5c
call fcn.004247e2
mov byte [esp + 0x3768], 0x22
call fcn.00440b27
add esp, 0x24
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x52df5c]
push str.SoftwareVOS_s
push eax
call fcn.0046d760
add esp, 0xc
mov edx, SysReAllocStringLen
call fcn.0046e840
pop ecx
cmp eax, esi
je 0x447968
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52df5c]
push str.Registry_could_not_be_emptied_for__s
jmp 0x44755c
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.__Registry_removed_successfully
call fcn.004247f7
call fcn.00444eda
pop ecx
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52df5c]
push str.Application__ss_registry_removed_successfully
push eax
call fcn.0046d760
add esp, 0xc
call fcn.00445740
pop ecx
pop ecx
mov ecx, dword [esp + 0x14c]
jmp 0x44e6f2
lea ecx, [esp + 0x20]
call fcn.00422487
lea ecx, [esp + 0x40]
call fcn.00422487
mov byte [esp + 0x3740], 0x2f
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x50], ecx
jle 0x4479ed
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x24]
call fcn.00424850
jmp 0x4479fb
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x24]
call fcn.0042483b
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..new.exe
call fcn.004247f7
push ecx
mov byte [esp + 0x3748], 0x30
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x194]
push eax
mov byte [esp + 0x374c], 0x2f
call fcn.0046d920
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x3744], 0x31
call fcn.0042483b
mov byte [esp + 0x3740], 0x2f
mov ecx, dword [esp + 0x18c]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
call fcn.00470860
mov edi, dword [esp + 0x44]
mov ebx, dword [esp + 0x24]
pop ecx
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x40]
jne 0x447aae
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e2
jmp 0x4473d0
push dword [esp + 0x34]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e2
call fcn.0043fbec
pop ecx
pop ecx
mov dword [esp + 0x34], eax
cmp eax, esi
jne 0x447b3b
push dword [0x52a4b0]
lea eax, [esp + 0x44]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x26c]
push eax
call fcn.0046da90
add esp, 8
mov byte [esp + 0x3748], 0x32
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Successfully_repackaged_into:__s
push ecx
call fcn.0046d760
add esp, 0xc
call fcn.00445740
pop ecx
pop ecx
mov ecx, dword [esp + 0x260]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [edi - 0x10]
call fcn.0042201a
lea ecx, [ebx - 0x10]
jmp 0x44e6f5
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esp + 0x34], 0x10
push dword [0x52a4b0]
jne 0x447b60
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Application_not_deployed_on_this_machine._Nothing_to_repackage.
jmp 0x4473cb
push dword [esp + 0x38]
lea eax, [esp + 0x304]
push eax
call fcn.00474710
add esp, 4
mov byte [esp + 0x3748], 0x33
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Could_not_repackage:__s
push ecx
jmp 0x44755d
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x24]
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push dword [eax + edx*4]
call fcn.004247f7
lea eax, [esp + 0x198]
push eax
call fcn.00473160
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x78]
mov byte [esp + 0x3744], 0x3a
call fcn.0042483b
push eax
lea ecx, [esp + 0x60]
call fcn.0042483b
push eax
lea ecx, [esp + 0xf8]
call fcn.004247e2
mov byte [esp + 0x3740], 0x3c
mov ecx, dword [esp + 0x194]
add ecx, 0xfffffff0
call fcn.0042201a
push 1
lea eax, [esp + 0x26c]
push eax
lea ecx, [esp + 0xfc]
call fcn.004249e6
push 0x4f86dc
push eax
call fcn.00424af0
pop ecx
pop ecx
mov ecx, dword [esp + 0x268]
add ecx, 0xfffffff0
mov byte [esp + 0x33], al
call fcn.0042201a
cmp byte [esp + 0x33], 0
lea ecx, [esp + 0x5c]
je 0x447c3c
push 1
push 0x22
jmp 0x447c3f
push esi
push 0x20
call fcn.00426eb1
mov edi, eax
cmp edi, 0xffffffff
je 0x447cb3
push edi
lea eax, [esp + 0x1a0]
push eax
lea ecx, [esp + 0x64]
call fcn.004249e6
push 0x4f85c8
mov byte [esp + 0x3744], 0x3d
call fcn.0043d8b2
push eax
lea ecx, [esp + 0x60]
call fcn.0042483b
mov byte [esp + 0x3740], 0x3c
mov ecx, dword [esp + 0x19c]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
lea ecx, [esp + 0x78]
lea eax, [edi + 1]
push ecx
call fcn.0042488e
lea eax, [esp + 0x74]
call fcn.0042493d
push eax
lea ecx, [esp + 0x78]
call fcn.0042483b
jmp 0x447cd8
push 0x4f85c8
lea eax, [esp + 0xf8]
call fcn.0043d8b2
push eax
lea ecx, [esp + 0x60]
call fcn.0042483b
push ebx
lea ecx, [esp + 0x78]
call fcn.00424850
xor ecx, ecx
lea eax, [esp + 0x5c]
call fcn.0042b743
movzx eax, ax
cmp ax, 0x25
jne 0x447cf7
lea eax, [esp + 0x5c]
push eax
call fcn.0047d7b0
pop ecx
push ecx
lea eax, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x274]
push eax
call fcn.0047e540
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x60]
mov byte [esp + 0x3744], 0x3e
call fcn.0042483b
mov ecx, dword [esp + 0x270]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3740], 4
mov ecx, dword [esp + 0xf4]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x4472ba
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.ShowStreaming:
call fcn.004247f7
call fcn.00444eda
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x8e0]
push eax
call fcn.00484a40
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x374c], 0x4c
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x4d
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3754], 0x4e
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e2
push 2
push ecx
mov byte [esp + 0x375c], 0x4f
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x8f0]
push eax
mov byte [esp + 0x3760], 0x4c
call fcn.00438115
add esp, 0x20
lea ecx, [esp + 0x8d4]
call fcn.00436d0c
lea eax, [esp + 0x8d4]
call fcn.00485920
mov byte [esp + 0x3740], 4
lea eax, [esp + 0x8d4]
call fcn.00427901
jmp 0x447581
lea ecx, [esp + 0x20]
call fcn.00422487
mov byte [esp + 0x3740], 0x50
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x50], ecx
jle 0x447e67
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x24]
call fcn.00424850
jmp 0x447e75
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x24]
call fcn.0042483b
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..break
call fcn.004247f7
push ecx
mov byte [esp + 0x3748], 0x51
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x60]
push eax
mov byte [esp + 0x374c], 0x50
call fcn.0046d920
add esp, 0xc
push 1
push esi
push ecx
mov byte [esp + 0x374c], 0x52
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x418]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0x53
push dword [0x52a4b0]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x418]
push eax
call fcn.004457ba
add esp, 0x10
cmp dword [esp + 0x494], esi
jne 0x447f2e
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_load_containers_
jmp 0x4473cb
push ecx
lea eax, [esp + 0x5c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
call fcn.0046f4f0
pop ecx
push dword [esp + 0x58]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x447f6f
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x60]
push str.Cant_empty__s
jmp 0x44755c
mov esi, dword [esp + 0x58]
call fcn.0046fef0
test eax, eax
jne 0x447f97
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x60]
push str.Cant_create__s
jmp 0x44755c
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov ebx, 0x4ecfa0
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x374c], 0x54
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtApp.ini
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x55
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e2
mov byte [esp + 0x3750], 0x53
call fcn.0046d020
add esp, 8
mov byte [esp + 0x3748], 0x56
mov ecx, esp
mov dword [esp + 0x1c], esp
mov esi, str.Main
push esi
call fcn.004247f7
push 3
pop ecx
lea edi, [esp + 0x414]
mov byte [esp + 0x3748], 0x53
call fcn.00486e30
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x374c], 0x57
mov ecx, esp
mov dword [esp + 0x44], esp
push str.AppVirtDll.dll
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x58
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e2
mov byte [esp + 0x3750], 0x53
call fcn.0046d020
add esp, 8
mov byte [esp + 0x3748], 0x59
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f7
push 2
pop ecx
lea edi, [esp + 0x414]
mov byte [esp + 0x3748], 0x53
call fcn.00486e30
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x374c], 0x5a
mov ecx, esp
mov dword [esp + 0x44], esp
push str.AppVirtDll64.dll
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x5b
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e2
mov byte [esp + 0x3750], 0x53
call fcn.0046d020
add esp, 8
mov byte [esp + 0x3748], 0x5c
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f7
push 8
pop ecx
lea edi, [esp + 0x414]
mov byte [esp + 0x3748], 0x53
call fcn.00486e30
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x374c], 0x5d
mov ecx, esp
mov dword [esp + 0x44], esp
push str.StubExe.exe
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x5e
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e2
mov byte [esp + 0x3750], 0x53
call fcn.0046d020
add esp, 8
mov byte [esp + 0x3748], 0x5f
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f7
push 9
pop ecx
lea edi, [esp + 0x414]
mov byte [esp + 0x3748], 0x53
call fcn.00486e30
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x374c], 0x60
mov ecx, esp
mov dword [esp + 0x44], esp
push str.StubExe64.exe
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x61
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e2
mov byte [esp + 0x3750], 0x53
call fcn.0046d020
add esp, 8
mov byte [esp + 0x3748], 0x62
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f7
push 0xa
pop ecx
lea edi, [esp + 0x414]
mov byte [esp + 0x3748], 0x53
call fcn.00486e30
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x374c], 0x63
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtFiles.db
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x64
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e2
mov byte [esp + 0x3750], 0x53
call fcn.0046d020
add esp, 8
mov byte [esp + 0x3748], 0x65
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f7
push 4
pop ecx
lea edi, [esp + 0x414]
mov byte [esp + 0x3748], 0x53
call fcn.00486e30
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x374c], 0x66
mov ecx, esp
mov dword [esp + 0x44], esp
push str.SandboxCfg.db
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x67
mov ecx, esp
lea eax, [esp + 0x68]
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e2
mov byte [esp + 0x3750], 0x53
call fcn.0046d020
add esp, 8
mov byte [esp + 0x3748], 0x68
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f7
push 5
pop ecx
lea edi, [esp + 0x414]
mov byte [esp + 0x3748], 0x53
call fcn.00486e30
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x374c], 0x69
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtReg.export
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x6a
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e2
mov byte [esp + 0x3750], 0x53
call fcn.0046d020
add esp, 8
mov byte [esp + 0x3748], 0x6b
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f7
push 6
pop ecx
lea edi, [esp + 0x414]
mov byte [esp + 0x3748], 0x53
call fcn.00486e30
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x374c], 0x6c
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtReg.dat
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x6d
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e2
mov byte [esp + 0x3750], 0x53
call fcn.0046d020
add esp, 8
mov byte [esp + 0x3748], 0x6e
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f7
push 0xb
pop ecx
lea edi, [esp + 0x414]
mov byte [esp + 0x3748], 0x53
call fcn.00486e30
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x374c], 0x6f
mov ecx, esp
mov dword [esp + 0x44], esp
push str.SysDllSubdirs.txt
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x70
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e2
mov byte [esp + 0x3750], 0x53
call fcn.0046d020
add esp, 8
mov byte [esp + 0x3748], 0x71
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f7
push 7
pop ecx
lea edi, [esp + 0x414]
mov byte [esp + 0x3748], 0x53
call fcn.00486e30
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x374c], 0x72
mov ecx, esp
mov dword [esp + 0x44], esp
push str.VirtFiles.vfc
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x73
lea eax, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e2
mov byte [esp + 0x3750], 0x53
call fcn.0046d020
add esp, 8
mov byte [esp + 0x3748], 0x74
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f7
mov byte [esp + 0x3748], 0x53
xor ecx, ecx
inc ecx
lea edi, [esp + 0x414]
call fcn.00486e30
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x60]
push 0x4fea94
push eax
call fcn.0046d760
add esp, 0xc
call fcn.00445740
pop ecx
pop ecx
push 0
jmp 0x4473d6
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.Unbreak:
call fcn.004247f7
call fcn.00444eda
mov ecx, esp
mov dword [esp + 0x14], esp
push str..break
call fcn.004247f7
push ecx
mov byte [esp + 0x3748], 0x75
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x78]
push eax
mov byte [esp + 0x374c], 4
call fcn.0046d920
add esp, 0xc
mov byte [esp + 0x3740], 0x76
push dword [esp + 0x70]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x4485df
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x78]
push str.Dir_doesnt_exist:__s
jmp 0x44755c
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x44]
call fcn.004247e2
mov edi, str..old
push edi
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x1ac]
push eax
mov byte [esp + 0x374c], 0x77
call fcn.00424a46
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x1a4]
add ecx, 0xfffffff0
call fcn.0042201a
push edi
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x280]
push eax
call fcn.00424a46
add esp, 0xc
push dword [eax]
push dword [esp + 0x44]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov ecx, dword [esp + 0x278]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.0042201a
test bl, bl
je 0x44867b
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_rename_myself_to_.old
jmp 0x4473cb
push edi
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x1b4]
push eax
call fcn.00424a46
mov eax, dword [eax]
add esp, 0xc
push esi
push dword [esp + 0x44]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [esp + 0x1ac]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.0042201a
test bl, bl
je 0x4486d1
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_copy_myself
jmp 0x4473cb
push 1
push ecx
mov dword [esp + 0x18], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov dword [esp + 0x108], esi
push 0x4ecfa0
lea ebx, [esp + 0x10c]
lea esi, [esp + 0x164]
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x78
mov ecx, esp
mov dword [esp + 0x24], esp
push str.VirtApp.ini
call fcn.004247f7
push ecx
mov byte [esp + 0x3754], 0x79
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e2
mov byte [esp + 0x3754], 0x77
call fcn.0046d020
add esp, 0xc
mov edi, esi
call fcn.0046def0
pop ecx
pop ecx
cmp eax, 0xffffffff
je 0x448d6d
xor edi, edi
cmp dword [esp + 0xfc], edi
je 0x448d6d
push dword [esp + 0xfc]
mov ecx, dword [esp + 0x158]
lea eax, [esp + 0x38]
push eax
call fcn.0046dc50
mov byte [esp + 0x3748], 0x7a
push dword [esp + 0x15c]
call fcn.004bc235
add esp, 0xc
push 1
push 1
push ecx
lea eax, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x388]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0x7b
push dword [0x52a4b0]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x388]
push eax
call fcn.004457ba
add esp, 0x10
cmp dword [esp + 0x404], edi
jne 0x448808
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_begin_to_update_resource
jmp 0x4473cb
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
mov esi, str.Main
push esi
call fcn.004247f7
mov byte [esp + 0x3744], 0x7c
mov eax, dword [esp + 0x38]
mov eax, dword [eax - 0xc]
add eax, eax
push edi
push eax
lea ecx, [esp + 0x40]
call fcn.00424f64
push eax
lea eax, [esp + 0x38c]
push eax
mov byte [esp + 0x3754], 0x7b
call fcn.004862f0
cmp eax, edi
je 0x448867
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_update_INI_resource
jmp 0x4473cb
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f7
push 0
push 2
push ecx
mov byte [esp + 0x3750], 0x7d
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
mov ebx, 0x4ecfa0
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3758], 0x7e
mov ecx, esp
mov dword [esp + 0x50], esp
push str.AppVirtDll.dll
call fcn.004247f7
push ecx
mov byte [esp + 0x375c], 0x7f
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
mov byte [esp + 0x375c], 0x7d
call fcn.0046d020
add esp, 0xc
lea eax, [esp + 0x38c]
push eax
mov byte [esp + 0x3754], 0x7b
call fcn.00486650
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f7
push 0
push 8
push ecx
mov byte [esp + 0x3750], 0x80
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3758], 0x81
mov ecx, esp
mov dword [esp + 0x50], esp
push str.AppVirtDll64.dll
call fcn.004247f7
push ecx
mov byte [esp + 0x375c], 0x82
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
mov byte [esp + 0x375c], 0x80
call fcn.0046d020
add esp, 0xc
lea eax, [esp + 0x38c]
push eax
mov byte [esp + 0x3754], 0x7b
call fcn.00486650
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f7
push 0
push 9
push ecx
mov byte [esp + 0x3750], 0x83
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3758], 0x84
mov ecx, esp
mov dword [esp + 0x50], esp
push str.StubExe.exe
call fcn.004247f7
push ecx
mov byte [esp + 0x375c], 0x85
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
mov byte [esp + 0x375c], 0x83
call fcn.0046d020
add esp, 0xc
lea eax, [esp + 0x38c]
push eax
mov byte [esp + 0x3754], 0x7b
call fcn.00486650
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f7
push 0
push 0xa
push ecx
mov byte [esp + 0x3750], 0x86
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3758], 0x87
mov ecx, esp
mov dword [esp + 0x50], esp
push str.StubExe64.exe
call fcn.004247f7
push ecx
mov byte [esp + 0x375c], 0x88
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
mov byte [esp + 0x375c], 0x86
call fcn.0046d020
add esp, 0xc
lea eax, [esp + 0x38c]
push eax
mov byte [esp + 0x3754], 0x7b
call fcn.00486650
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f7
push 0x4000
push 4
push ecx
mov byte [esp + 0x3750], 0x89
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3758], 0x8a
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtFiles.db
call fcn.004247f7
push ecx
mov byte [esp + 0x375c], 0x8b
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
mov byte [esp + 0x375c], 0x89
call fcn.0046d020
add esp, 0xc
lea eax, [esp + 0x38c]
push eax
mov byte [esp + 0x3754], 0x7b
call fcn.00486650
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f7
push 0x4000
push 5
push ecx
mov byte [esp + 0x3750], 0x8c
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3758], 0x8d
mov ecx, esp
mov dword [esp + 0x50], esp
push str.SandboxCfg.db
call fcn.004247f7
push ecx
mov byte [esp + 0x375c], 0x8e
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
mov byte [esp + 0x375c], 0x8c
call fcn.0046d020
add esp, 0xc
lea eax, [esp + 0x38c]
push eax
mov byte [esp + 0x3754], 0x7b
call fcn.00486650
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f7
mov byte [esp + 0x3744], 0x8f
push 0x4000
push 0xb
push ecx
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3758], 0x90
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtReg.dat
call fcn.004247f7
push ecx
mov byte [esp + 0x375c], 0x91
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
mov byte [esp + 0x375c], 0x8f
call fcn.0046d020
add esp, 0xc
lea eax, [esp + 0x38c]
push eax
mov byte [esp + 0x3754], 0x7b
call fcn.00486650
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f7
push 0
push 7
push ecx
mov byte [esp + 0x3750], 0x92
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3758], 0x93
mov ecx, esp
mov dword [esp + 0x50], esp
push str.SysDllSubdirs.txt
call fcn.004247f7
push ecx
mov byte [esp + 0x375c], 0x94
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
mov byte [esp + 0x375c], 0x92
call fcn.0046d020
add esp, 0xc
lea eax, [esp + 0x38c]
push eax
mov byte [esp + 0x3754], 0x7b
call fcn.00486650
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f7
push 0x4000
push 1
push ecx
mov byte [esp + 0x3750], 0x95
mov edi, esp
mov dword [esp + 0x24], esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3758], 0x96
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtFiles.vfc
call fcn.004247f7
push ecx
mov byte [esp + 0x375c], 0x97
lea eax, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
mov byte [esp + 0x375c], 0x95
call fcn.0046d020
add esp, 0xc
lea eax, [esp + 0x38c]
push eax
mov byte [esp + 0x3754], 0x7b
call fcn.00486650
lea eax, [esp + 0x37c]
call fcn.00485920
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
test eax, eax
je 0x448d5e
push str.Could_not_commit_resource
jmp 0x4473cb
push str.Success
call fcn.004247f7
jmp 0x44854b
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_load_VirtApp.ini
jmp 0x4473cb
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
mov edi, 0x52df50
push edi
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x448db8
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
push edi
call fcn.0043c1a5
pop ecx
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52df5c]
push str._s_is_no_longer_integrated.
push eax
call fcn.0046d760
add esp, 0xc
call fcn.00445740
pop ecx
pop ecx
jmp 0x4473d5
lea ecx, [esp + 0x20]
call fcn.00422487
lea ecx, [esp + 0x34]
call fcn.00422487
mov byte [esp + 0x3740], 0xc3
mov edi, dword [esp + 0x24]
or dword [esp + 0x28], 0xffffffff
lea eax, [edi + 1]
cmp dword [esp + 0x50], eax
jle 0x448e29
mov eax, dword [esp + 0x2c]
push dword [eax + edi*4 + 4]
lea ecx, [esp + 0x24]
call fcn.00424850
lea eax, [edi + 2]
cmp dword [esp + 0x50], eax
jle 0x448e42
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4]
lea ecx, [esp + 0x38]
call fcn.00424850
lea ecx, [esp + 0x280]
call fcn.00422487
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x3744], 0xc4
call fcn.004247e2
push ecx
mov byte [esp + 0x3744], 0xc5
lea eax, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
push 0x52df50
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x448e9f
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
push 1
push esi
push ecx
lea eax, [esp + 0x54]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xe80]
push eax
call fcn.00484a40
lea edi, [esp + 0xe74]
mov byte [esp + 0x3740], 0xc6
call fcn.0042a25e
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x34]
cmp dword [eax - 0xc], esi
je 0x448efc
push esi
push 0x80
push 4
push esi
push 3
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [esp + 0x28], eax
push 1
push 1
push 1
lea eax, [esp + 0x28c]
push eax
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x52dfa8
call fcn.004247e2
push ecx
mov byte [esp + 0x375c], 0xc7
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x52dfb8
call fcn.004247e2
push ecx
mov byte [esp + 0x3760], 0xc8
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x52dfb4
call fcn.004247e2
push ecx
mov byte [esp + 0x3764], 0xc9
mov ecx, esp
mov dword [esp + 0x9c], esp
push 0x52dfac
call fcn.004247e2
push ecx
mov byte [esp + 0x3768], 0xca
mov ecx, esp
mov dword [esp + 0x8c], esp
push 0x52df5c
call fcn.004247e2
mov byte [esp + 0x3768], 0xc6
call fcn.00440b27
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0x28
call edi
push esi
push 2
mov dword [esp + 0x74], eax
push 0x52df50
lea eax, [esp + 0xe80]
push eax
push dword [esp + 0x2c]
call fcn.004347b1
add esp, 0x14
cmp eax, esi
je 0x448fde
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Failed_BasicDeploy_
jmp 0x4473cb
call edi
sub eax, dword [esp + 0x6c]
mov dword [esp + 0x6c], eax
call edi
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], esi
je 0x449099
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0xcb
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x4f7da4
call fcn.004247f7
push ecx
mov byte [esp + 0x3754], 0xcc
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247f7
push 2
push ecx
mov byte [esp + 0x375c], 0xcd
lea eax, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x94], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xe90]
push eax
mov byte [esp + 0x3760], 0xc6
call fcn.00438115
add esp, 0x20
push esi
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e2
call fcn.00473e10
pop ecx
pop ecx
cmp eax, esi
jne 0x449099
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x44906f
call edi
push ecx
mov edi, eax
sub edi, dword [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x52dfa8
call fcn.004247e2
push ecx
mov byte [esp + 0x3748], 0xce
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x52dfb8
call fcn.004247e2
push ecx
mov byte [esp + 0x374c], 0xcf
mov ecx, esp
mov dword [esp + 0x44], esp
push 0x52dfac
call fcn.004247e2
push ecx
mov byte [esp + 0x3750], 0xd0
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x52df5c
call fcn.004247e2
mov byte [esp + 0x3750], 0xc6
call fcn.00440722
add esp, 0x10
lea ecx, [esp + 0x54]
call fcn.00422487
lea ecx, [esp + 0x1b4]
mov eax, 0x100
push ecx
mov byte [esp + 0x3744], 0xd1
push eax
lea ecx, [esp + 0x5c]
mov dword [esp + 0x1bc], eax
call fcn.004224c3
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push 0xffffffffffffffff
lea ecx, [esp + 0x58]
call fcn.00424b05
push edi
push dword [esp + 0x70]
lea eax, [esp + 0x164]
push dword [esp + 0x5c]
push dword [0x52df5c]
push str._s__s__d_d_r_n
push eax
call fcn.0046d760
add esp, 0x18
mov byte [esp + 0x3740], 0xd2
push dword [esp + 0x15c]
lea ecx, [esp + 0x28c]
call fcn.004261c8
mov byte [esp + 0x3740], 0xd3
mov edi, dword [esp + 0x28]
cmp edi, 0xffffffff
je 0x4491d3
push 2
push esi
push esi
push edi
mov dword [esp + 0x1cc], esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [esp + 0x288]
mov ecx, dword [eax - 0xc]
push esi
lea edx, [esp + 0x1c0]
push edx
push ecx
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [0x52a4b0]
lea eax, [esp + 0x160]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e2
jmp 0x448de0
push ecx
mov dword [esp + 0x14], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..Packager.log
call fcn.004247f7
push ecx
mov byte [esp + 0x374c], 0xd4
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247e2
push edi
mov byte [esp + 0x3750], 4
call fcn.0046d920
lea eax, [esp + 0xd0]
add esp, 0xc
push eax
call fcn.0046cd30
add esp, 4
mov byte [esp + 0x3744], 0xd5
lea eax, [esp + 0xc4]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
call fcn.00470860
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov dword [esp + 0x44], esi
call fcn.004247e2
lea eax, [esp + 0x970]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0xd6
push dword [0x52a4b0]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x970]
push eax
call fcn.004457ba
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0xd7
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3754], 0xd8
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e2
push 2
push ecx
mov byte [esp + 0x375c], 0xd9
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x980]
push eax
mov byte [esp + 0x3760], 0xd6
call fcn.00438115
add esp, 0x20
lea edi, [esp + 0x964]
call fcn.0042a25e
mov ebx, eax
cmp ebx, esi
je 0x4493e2
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push eax
call fcn.0046c890
mov byte [esp + 0x3748], 0xda
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.LogsPackager.log
call fcn.004247f7
push ebx
mov byte [esp + 0x374c], 0xd6
call fcn.00427df0
add esp, 0xc
cmp eax, esi
jne 0x449393
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_extract_Packager.log_
jmp 0x4473cb
push dword [esp + 0xc0]
mov dword [esp + 0x38], 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Packager.log
call fcn.004247f7
lea eax, [esp + 0x298]
push eax
call fcn.0046cd30
pop ecx
pop ecx
push dword [eax]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov ecx, dword [esp + 0x290]
add ecx, 0xfffffff0
call fcn.0042201a
call fcn.00483dd0
xor esi, esi
jmp 0x449404
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
push str.Loader__ExtractLog_:_OpenVfc_failed__LE_d
push ecx
call fcn.0046d760
add esp, 0xc
call fcn.00444eaa
pop ecx
lea eax, [esp + 0x964]
call fcn.00485920
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xc8]
cmp dword [esp + 0x40], esi
je 0x449434
push str.Success:__s
jmp 0x448dd7
push str.Failed_saving__s
jmp 0x448dd7
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
mov ebx, 0x52df50
push ebx
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x449472
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x850]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0xdb
push dword [0x52a4b0]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x850]
push eax
call fcn.004457ba
lea edi, [esp + 0x854]
call fcn.0042a25e
push 1
push 2
push ebx
mov ecx, edi
push ecx
push eax
call fcn.004347b1
mov edi, eax
add esp, 0x24
lea eax, [esp + 0x844]
call fcn.00485920
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
cmp edi, esi
jne 0x44950d
push dword [0x52dfac]
push str.Success:_n_s
jmp 0x448dd7
push str.Failed_extracting.
push eax
call fcn.0046d760
pop ecx
pop ecx
jmp 0x448de0
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
mov esi, 0x52df50
push esi
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x449553
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
lea eax, [esp + 0x1c4]
push eax
call fcn.0049aa20
pop ecx
mov byte [esp + 0x3740], 0xdc
push dword [eax]
lea ecx, [esp + 0x29c]
call fcn.004261c8
mov byte [esp + 0x3740], 0xde
mov ecx, dword [esp + 0x1c4]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x298]
mov edi, dword [eax - 0xc]
push eax
push ecx
mov dword [esp + 0x18], esp
mov ebx, esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov esi, str..xml
push esi
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0xdf
mov eax, esp
mov dword [esp + 0x24], esp
push eax
call fcn.0046c7a0
pop ecx
push ebx
mov byte [esp + 0x3754], 0xde
call fcn.0046d920
add esp, 0xc
call fcn.0046e130
pop ecx
pop ecx
push dword [0x52a4b0]
push ecx
mov dword [esp + 0x18], esp
test eax, eax
je 0x44965e
mov ecx, esp
push esi
call fcn.004247f7
push ecx
mov byte [esp + 0x374c], 0xe0
mov eax, esp
mov dword [esp + 0x20], esp
push eax
call fcn.0046c7a0
pop ecx
lea eax, [esp + 0x1d8]
push eax
mov byte [esp + 0x3750], 0xde
call fcn.0046d920
add esp, 8
mov byte [esp + 0x3748], 0xe1
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Success:_n_s
push ecx
call fcn.0046d760
add esp, 0xc
call fcn.00445740
pop ecx
pop ecx
mov ecx, dword [esp + 0x1cc]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x448552
mov eax, esp
push str.Failed_extracting.
push eax
call fcn.0046d760
pop ecx
pop ecx
jmp 0x44854b
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x38]
call fcn.004247e2
mov byte [esp + 0x3740], 0xe2
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x50], ecx
jle 0x4496a6
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x38]
call fcn.00424850
push 1
push esi
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x1300]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0xe3
push dword [0x52a4b0]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x1300]
push eax
call fcn.004457ba
push esi
lea eax, [esp + 0x1308]
push eax
lea eax, [esp + 0x2b8]
push eax
call fcn.00445853
add esp, 0x1c
push esi
push str.Info
push dword [esp + 0x2a8]
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x4473d5
push str._Sandbox_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
push 0x52df50
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x449765
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x38]
call fcn.004247e2
mov byte [esp + 0x3740], 0xe4
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x50], ecx
jle 0x449799
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x38]
call fcn.00424850
push 1
push esi
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xd60]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0xe5
push dword [0x52a4b0]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xd60]
push eax
call fcn.004457ba
add esp, 0x10
cmp dword [esp + 0xddc], esi
jne 0x44980b
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.FAILED_LOADING_CONTAINERS_
jmp 0x4473cb
lea eax, [esp + 0xd54]
push eax
lea eax, [esp + 0x1d8]
push eax
call fcn.00445bda
pop ecx
pop ecx
mov byte [esp + 0x3740], 0xe6
mov ecx, dword [esp + 0x1d4]
mov eax, dword [ecx - 0xc]
cmp eax, 0x800
jge 0x449847
push esi
push str.Sandbox
push ecx
jmp 0x44971b
push ecx
push ecx
mov dword [esp + 0x18], esp
mov edi, esp
push ecx
add eax, eax
mov ecx, esp
mov dword [esp + 0x1c], esp
mov ebx, str..sandbox.txt
push ebx
mov dword [esp + 0x2c], eax
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0xe7
mov eax, esp
mov dword [esp + 0x24], esp
push eax
call fcn.0046c7a0
pop ecx
push edi
mov byte [esp + 0x3754], 0xe6
call fcn.0046d920
mov edi, dword [esp + 0x30]
add esp, 0xc
call fcn.0046e130
add esp, 4
mov ecx, esp
mov dword [esp + 0x14], esp
push str.open
call fcn.004247f7
push 1
push ecx
mov byte [esp + 0x374c], 0xe8
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
xor edi, edi
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0xe9
mov eax, esp
mov dword [esp + 0x48], esp
push ecx
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
mov dword [esp + 0x34], eax
call fcn.004247f7
push ecx
mov byte [esp + 0x3758], 0xea
mov eax, esp
mov dword [esp + 0x90], esp
push eax
call fcn.0046c7a0
mov eax, dword [esp + 0x38]
pop ecx
push eax
mov byte [esp + 0x375c], 0xe9
call fcn.0046d920
add esp, 0xc
mov ebx, esi
mov byte [esp + 0x3750], 0xe6
call fcn.0046c200
add esp, 0x10
xor esi, esi
jmp 0x4473d5
push str._AddSandbox_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x4ff350
call fcn.004bba40
mov edx, dword [esp + 0x28]
pop ecx
mov ecx, dword [esp + 0x2c]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x2ac]
call fcn.004247f7
push 1
push esi
push ecx
mov byte [esp + 0x374c], 0xeb
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xa90]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0xec
push dword [0x52a4b0]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xa90]
push eax
call fcn.004457ba
add esp, 0x10
cmp dword [esp + 0xb0c], esi
jne 0x4499d0
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x449801
lea eax, [esp + 0x35c]
push eax
call fcn.00443229
push ebx
lea ecx, [esp + 0x168]
mov byte [esp + 0x3744], 0xed
call fcn.004247f7
lea eax, [esp + 0x164]
push eax
lea eax, [esp + 0x360]
push eax
push ecx
mov byte [esp + 0x374c], 0xee
lea eax, [esp + 0x2b4]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
call fcn.00481440
add esp, 0xc
cmp eax, esi
jne 0x449a43
push dword [0x52a4b0]
lea eax, [esp + 0x168]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x447aa3
push 0xffffffffffffffff
xor esi, esi
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0xef
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3754], 0xf0
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247f7
push 2
push ecx
mov byte [esp + 0x375c], 0xf1
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xaa0]
push eax
mov byte [esp + 0x3760], 0xee
call fcn.00438115
add esp, 0x20
push 6
pop ecx
push dword [0x52dfd0]
xor eax, eax
mov dword [esp + 0x344], esi
lea edi, [esp + 0x348]
rep stosd dword es:[edi], eax
push ecx
mov dword [esp + 0x18], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.SandboxCfg.db
call fcn.004247f7
push edi
mov ecx, esi
call fcn.0047ec10
pop ecx
pop ecx
lea ecx, [esp + 0x348]
call fcn.00478d20
pop ecx
pop ecx
lea esi, [esp + 0x80]
lea edi, [esp + 0x35c]
call fcn.004432ac
lea esi, [esp + 0x374]
lea edi, [esp + 0x35c]
call fcn.004432c8
mov esi, eax
mov eax, dword [esp + 0x80]
test eax, eax
je 0x449b34
cmp eax, dword [esi]
je 0x449b39
call fcn.004bbc61
mov eax, dword [esp + 0x84]
cmp eax, dword [esi + 4]
je 0x449beb
lea esi, [esp + 0x80]
call fcn.0044ea8a
push eax
lea ecx, [esp + 0x20]
call fcn.004247e2
mov byte [esp + 0x3740], 0xf2
call fcn.0044ea8a
mov edi, dword [eax + 4]
mov eax, edi
lea esi, [esp + 0x1dc]
call fcn.0047b000
push ecx
mov byte [esp + 0x3744], 0xf3
mov esi, dword [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x14], esp
push dword [eax]
push esi
push str.Setting___s__s
push ecx
call fcn.0046d760
add esp, 0x10
call fcn.00444eaa
pop ecx
mov ecx, dword [esp + 0x1dc]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x340]
push edi
push eax
xor eax, eax
mov edx, esi
call fcn.0047b060
pop ecx
pop ecx
lea ecx, [esi - 0x10]
mov byte [esp + 0x3740], 0xee
call fcn.0042201a
lea esi, [esp + 0x80]
call fcn.0044eab2
jmp 0x449b10
mov ebx, dword [esp + 0x340]
lea eax, [esp + 0x340]
push eax
call fcn.0048ef30
lea eax, [esp + 0xa84]
call fcn.00485920
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Done
jmp 0x448d63
push str._GetProperty_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x4ff3b8
call fcn.004bba40
mov edx, dword [esp + 0x28]
pop ecx
mov ecx, dword [esp + 0x2c]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x2b4]
call fcn.004247f7
push 1
push esi
push ecx
mov byte [esp + 0x374c], 0xf4
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x11e0]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0xf5
push dword [0x52a4b0]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x11e0]
push eax
call fcn.004457ba
add esp, 0x10
lea ecx, [esp + 0x16c]
call fcn.00422487
lea eax, [esp + 0x318]
push eax
mov byte [esp + 0x3744], 0xf6
call fcn.0042b785
lea eax, [esp + 0x16c]
push eax
push ecx
mov byte [esp + 0x3748], 0xf7
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Main
call fcn.004247f7
push 3
lea edi, [esp + 0x11e0]
call fcn.00486c90
mov ecx, dword [esp + 0x16c]
mov eax, dword [ecx - 0xc]
cmp eax, esi
jne 0x449d12
push 6
jmp 0x4473d6
lea edx, [esp + 0x318]
push edx
push eax
push ecx
call fcn.004757c0
mov eax, dword [esp + 0x33c]
mov eax, dword [eax]
add esp, 0xc
lea edi, [esp + 0x318]
lea esi, [esp + 0x80]
call fcn.0042bc74
mov eax, dword [esp + 0x330]
lea esi, [esp + 0xb0]
call fcn.0042bc74
mov edi, esi
lea esi, [esp + 0x80]
call fcn.0042b8d5
test al, al
je 0x447662
xor ebx, ebx
lea esi, [esp + 0x80]
call fcn.00430c3f
push dword [eax]
lea eax, [esp + 0x2b4]
call fcn.0042487a
test eax, eax
jne 0x449df5
call fcn.00430c3f
add eax, 4
push dword [eax]
lea ecx, [esp + 0xe0]
call fcn.004261c8
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
cmp eax, 0xffffffff
je 0x449de6
mov ecx, dword [esp + 0xdc]
push ebx
mov dword [esp + 0x178], ebx
mov edx, dword [ecx - 0xc]
lea esi, [esp + 0x178]
push esi
push edx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x449de6
mov eax, dword [esp + 0x174]
mov ecx, dword [esp + 0xdc]
cmp eax, dword [ecx - 0xc]
je 0x449e36
mov ecx, dword [esp + 0xdc]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x80]
call fcn.0042b8c9
mov eax, dword [esp + 0x330]
lea edi, [esp + 0x318]
lea esi, [esp + 0xb0]
call fcn.0042bc74
mov edi, esi
lea esi, [esp + 0x80]
call fcn.0042b8d5
test al, al
jne 0x449d6b
jmp 0x447662
push ebx
jmp 0x4473d6
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x38]
call fcn.004247e2
mov byte [esp + 0x3740], 0xfe
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x50], ecx
jle 0x449e70
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x38]
call fcn.00424850
push 1
push esi
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x730]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0xff
push dword [0x52a4b0]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x730]
push eax
call fcn.004457ba
add esp, 0x10
cmp dword [esp + 0x7ac], esi
jne 0x449edd
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x449801
push 1
lea eax, [esp + 0x728]
push eax
lea eax, [esp + 0x114]
push eax
call fcn.00445853
add esp, 0xc
push str._n_nSandboxing:_n_n
lea ecx, [esp + 0x110]
mov dword [esp + 0x3744], 0x100
call fcn.0042b4b8
lea eax, [esp + 0x724]
push eax
lea eax, [esp + 0x1e8]
push eax
call fcn.00445bda
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x110]
mov byte [esp + 0x3744], 1
call fcn.00424865
mov byte [esp + 0x3740], 0
mov ecx, dword [esp + 0x1e4]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x10c]
mov eax, dword [ecx - 0xc]
push ecx
push ecx
mov dword [esp + 0x18], esp
mov edi, esp
push ecx
add eax, eax
mov ecx, esp
mov dword [esp + 0x1c], esp
mov ebx, str..txt
push ebx
mov dword [esp + 0x2c], eax
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 2
mov eax, esp
mov dword [esp + 0x24], esp
push eax
call fcn.0046c7a0
pop ecx
push edi
mov byte [esp + 0x3754], 0
call fcn.0046d920
mov edi, dword [esp + 0x30]
add esp, 0xc
call fcn.0046e130
pop ecx
pop ecx
push esi
push str.Package_info
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 3
mov eax, esp
mov dword [esp + 0x24], esp
push eax
call fcn.0046c7a0
pop ecx
lea eax, [esp + 0x1fc]
push eax
mov byte [esp + 0x3754], 0
call fcn.0046d920
add esp, 0xc
mov byte [esp + 0x3748], 4
push dword [eax]
lea eax, [esp + 0x184]
push str.Saved_in:__s
push eax
call fcn.0046d760
add esp, 0xc
push dword [eax]
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [esp + 0x178]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x1ec]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x4473d5
lea ecx, [esp + 0x10]
call fcn.00422487
lea ecx, [esp + 0x128]
mov dword [esp + 0x3740], 0x109
call fcn.00422487
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x3744], 0xa
call fcn.004247e2
mov byte [esp + 0x3740], 0xb
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x50], ecx
jle 0x44a09a
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x4c]
call fcn.00424850
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..ini
call fcn.004247f7
push ecx
mov byte [esp + 0x3748], 0xc
lea eax, [esp + 0x50]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x128]
push eax
mov byte [esp + 0x374c], 0xb
call fcn.0046d920
add esp, 8
mov byte [esp + 0x3744], 0xd
lea eax, [esp + 0x124]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e2
call fcn.00470860
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x54]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xfa0]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0xe
push dword [0x52a4b0]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xfa0]
push eax
call fcn.004457ba
add esp, 0x10
cmp dword [esp + 0x101c], esi
jne 0x44a16a
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x449801
lea eax, [esp + 0x128]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Main
call fcn.004247f7
push 3
lea edi, [esp + 0xfa0]
call fcn.00486c90
mov ecx, dword [esp + 0x128]
mov eax, dword [ecx - 0xc]
cmp eax, esi
jne 0x44a1b1
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44741f
push ecx
push ecx
lea edi, [eax + eax]
lea eax, [esp + 0x128]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
call fcn.0046e130
jmp 0x448de5
push str.AppID_ShortDesc_FriendlyName_Category_DownloadUrl_IconUrl_Version_BuildUid_Size_PopularityIndex_n
lea ecx, [esp + 0x6c]
call fcn.004247f7
mov dword [esp + 0x3740], 0x10f
lea ecx, [esp + 0x28]
mov dword [esp + 0x130], esi
mov dword [esp + 0x29c], esi
call fcn.00422487
push 1
push esi
push ecx
mov byte [esp + 0x374c], 0x10
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x1540]
push eax
call fcn.00484a40
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x374c], 0x11
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x12
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3754], 0x13
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e2
push 2
push ecx
mov byte [esp + 0x375c], 0x14
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x1550]
push eax
mov byte [esp + 0x3760], 0x11
call fcn.00438115
mov esi, 0x4f2fd8
push esi
lea eax, [esp + 0x2e4]
push 0x52df5c
push eax
call fcn.00424a46
add esp, 0x2c
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x3744], 0x15
call fcn.00424865
mov byte [esp + 0x3740], 0x11
mov ecx, dword [esp + 0x2c0]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
lea ecx, [esp + 0x6c]
call fcn.0042b4b8
push esi
push 0x52df68
lea eax, [esp + 0x2d0]
push eax
call fcn.00424a46
add esp, 0xc
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x3744], 0x16
call fcn.00424865
mov byte [esp + 0x3740], 0x11
mov ecx, dword [esp + 0x2c8]
add ecx, 0xfffffff0
call fcn.0042201a
push str.Productivity_
lea ecx, [esp + 0x6c]
call fcn.0042b4b8
mov ebx, dword [esp + 0x24]
lea eax, [ebx + 1]
cmp dword [esp + 0x50], eax
mov edi, 0x4ff680
jle 0x44a369
mov eax, dword [esp + 0x2c]
push dword [eax + ebx*4 + 4]
lea ebx, [esp + 0x6c]
push edi
call fcn.00427758
mov ebx, dword [esp + 0x2c]
pop ecx
pop ecx
jmp 0x44a377
push str._Download_URL_here__
lea ecx, [esp + 0x6c]
call fcn.0042b4b8
lea eax, [ebx + 2]
cmp dword [esp + 0x50], eax
jle 0x44a395
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4]
lea ebx, [esp + 0x6c]
push edi
call fcn.00427758
pop ecx
pop ecx
jmp 0x44a3a3
push str._Icon_here__
lea ecx, [esp + 0x6c]
call fcn.0042b4b8
push esi
lea eax, [esp + 0x1f8]
push 0x52df70
push eax
call fcn.00424a46
add esp, 0xc
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x3744], 0x17
call fcn.00424865
mov byte [esp + 0x3740], 0x11
mov ecx, dword [esp + 0x1f4]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
lea eax, [esp + 0x1fc]
push 0x52dfa0
push eax
call fcn.00424a46
add esp, 0xc
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x3744], 0x18
call fcn.00424865
mov byte [esp + 0x3740], 0x11
mov ecx, dword [esp + 0x1f8]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push eax
lea edi, [esp + 0x2a4]
lea esi, [esp + 0x138]
call fcn.0046c7a0
pop ecx
call fcn.00470760
pop ecx
push dword [esp + 0x130]
lea eax, [esp + 0x270]
push 0x4efc28
push eax
call fcn.0046d760
add esp, 0xc
push 0x4f2fd8
push eax
lea eax, [esp + 0x20c]
push eax
mov byte [esp + 0x374c], 0x19
call fcn.00424a46
add esp, 0xc
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x3744], 0x1a
call fcn.00424865
mov ecx, dword [esp + 0x204]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3740], 0x11
mov ecx, dword [esp + 0x26c]
add ecx, 0xfffffff0
call fcn.0042201a
push 0x4f0d5c
lea ecx, [esp + 0x6c]
call fcn.0042b4b8
mov eax, dword [esp + 0x24]
add eax, 3
cmp dword [esp + 0x50], eax
jle 0x44a4e2
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4]
lea ecx, [esp + 0x2c]
call fcn.00424850
jmp 0x44a54a
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..csv
call fcn.004247f7
push ecx
mov byte [esp + 0x3748], 0x1b
mov eax, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.0046c7a0
pop ecx
lea eax, [esp + 0x214]
push eax
mov byte [esp + 0x374c], 0x11
call fcn.0046d920
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x3744], 0x1c
call fcn.0042483b
mov byte [esp + 0x3740], 0x11
mov ecx, dword [esp + 0x20c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x68]
mov eax, dword [ecx - 0xc]
push ecx
push ecx
lea edi, [eax + eax]
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e2
call fcn.0046e130
pop ecx
pop ecx
push dword [0x52a4b0]
push ecx
mov dword [esp + 0x18], esp
test eax, eax
jne 0x44a593
mov eax, esp
lea ecx, [esp + 0x30]
push ecx
push str.Could_not_save_to
push eax
call fcn.00424a9b
jmp 0x447562
mov ecx, esp
lea eax, [esp + 0x30]
push eax
call fcn.004247e2
jmp 0x44854b
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x10c0]
push eax
call fcn.00484a40
mov dword [esp + 0x3740], 0x11d
cmp dword [esp + 0x113c], esi
jne 0x44a5eb
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x447f24
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x52df5c]
push str._s.AppVirtDll.dll
push eax
call fcn.0046d760
lea eax, [esp + 0x124]
add esp, 0xc
push eax
call fcn.0046ce30
add esp, 4
mov byte [esp + 0x3744], 0x1e
lea eax, [esp + 0x118]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
push ecx
mov byte [esp + 0x3748], 0x1f
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Main
call fcn.004247f7
push 2
pop ecx
lea edi, [esp + 0x10bc]
mov byte [esp + 0x3748], 0x1e
call fcn.00486e30
push dword [0x52a4b0]
lea eax, [esp + 0x118]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x2cc]
push eax
call fcn.0048f8a0
add esp, 4
mov byte [esp + 0x3748], 0x20
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.EngineVersion_s
push ecx
call fcn.0046d760
add esp, 0xc
call fcn.00445740
pop ecx
pop ecx
mov byte [esp + 0x3740], 0x1e
mov ecx, dword [esp + 0x2c4]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
lea eax, [esp + 0x118]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
call fcn.00470860
jmp 0x448de6
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
call fcn.004247e2
push 0x2e
lea ecx, [esp + 0x2c]
mov dword [esp + 0x3744], 0x121
call fcn.0043d88d
push eax
lea eax, [esp + 0x218]
push eax
lea ecx, [esp + 0x30]
call fcn.004249e6
push str..new.exe
push eax
lea eax, [esp + 0x9c]
push eax
mov byte [esp + 0x374c], 0x22
call fcn.00424a46
add esp, 0xc
mov byte [esp + 0x3740], 0x24
mov ecx, dword [esp + 0x214]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x278]
call fcn.004247f7
push esi
mov byte [esp + 0x3744], 0x25
push dword [esp + 0x98]
push dword [esp + 0x27c]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x44a7b4
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x9c]
push dword [esp + 0x34]
push str.Cant_copy__s_to__s
push eax
call fcn.0046d760
add esp, 0x10
jmp 0x4473d0
push dword [esp + 0x94]
push dword [esp + 0x2c]
call fcn.0043daae
pop ecx
pop ecx
xor esi, esi
inc esi
push esi
push 0
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x580]
push eax
call fcn.00484a40
push esi
push esi
push ecx
mov byte [esp + 0x374c], 0x26
lea eax, [esp + 0xa0]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x1150]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0x27
push dword [0x52a4b0]
lea eax, [esp + 0x50]
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x580]
push eax
call fcn.004457ba
add esp, 0x10
lea eax, [esp + 0x38]
lea ecx, [esp + 0x5e4]
call fcn.0044e99c
jmp 0x44a96c
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.CEChangeEngine.tmp
call fcn.004247f7
lea eax, [esp + 0xd8]
push eax
call fcn.0046ce30
add esp, 4
mov byte [esp + 0x3744], 0x28
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
lea esi, [esp + 0x3c]
mov byte [esp + 0x3744], 0x29
call fcn.0044ea8a
push ecx
add eax, 0x2c
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
call fcn.0044ea8a
mov byte [esp + 0x3748], 0x28
mov ecx, dword [eax + 0x28]
lea edi, [esp + 0x57c]
call fcn.00486e30
test eax, eax
jne 0x44a9c8
call fcn.0044ea8a
push ecx
add eax, 0x2c
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
push 0x4000
mov byte [esp + 0x3748], 0x2a
call fcn.0044ea8a
push dword [eax + 0x28]
lea eax, [esp + 0xe0]
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x1154]
push eax
mov byte [esp + 0x3754], 0x28
call fcn.00486650
test eax, eax
jne 0x44a9f4
push ecx
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
call fcn.00470860
pop ecx
mov byte [esp + 0x3740], 0x27
mov ecx, dword [esp + 0xd4]
add ecx, 0xfffffff0
call fcn.0042201a
call fcn.0044ea14
lea eax, [esp + 0x304]
lea ecx, [esp + 0x5e4]
call fcn.0044e9b1
mov edi, eax
lea esi, [esp + 0x38]
call fcn.00424d59
test al, al
jne 0x44a85a
lea eax, [esp + 0x574]
call fcn.00485920
lea eax, [esp + 0x1144]
call fcn.00485920
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x9c]
push str.Successfully_changed_Loader:__s
jmp 0x448542
push dword [0x52a4b0]
call fcn.0044ea8a
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push dword [eax + 0x2c]
lea esi, [esp + 0x44]
call fcn.0044ea8a
push dword [eax + 0x28]
push str.Cannot_read_container__d__s_to_file
push edi
jmp 0x44a7a7
push dword [0x52a4b0]
lea esi, [esp + 0x3c]
call fcn.0044ea8a
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push dword [eax + 0x2c]
jmp 0x44a9e1
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x24]
call fcn.004247e2
push 0x2e
lea ecx, [esp + 0x24]
mov dword [esp + 0x3744], 0x12b
call fcn.0043d88d
push eax
lea eax, [esp + 0x220]
push eax
lea ecx, [esp + 0x28]
call fcn.004249e6
push str..new.exe
push eax
lea eax, [esp + 0xd4]
push eax
mov byte [esp + 0x374c], 0x2c
call fcn.00424a46
add esp, 0xc
mov byte [esp + 0x3740], 0x2e
mov ecx, dword [esp + 0x21c]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0xc8]
call fcn.004247f7
push esi
mov byte [esp + 0x3744], 0x2f
push dword [esp + 0xd0]
push dword [esp + 0x28]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x44aacd
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xd4]
push dword [esp + 0x2c]
jmp 0x44a7a1
push 1
push 1
push ecx
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x4f0]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0x30
push dword [0x52a4b0]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x4f0]
push eax
call fcn.004457ba
add esp, 0x10
cmp dword [esp + 0x56c], esi
jne 0x44ab43
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_open_PeContainer
jmp 0x4473cb
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
mov esi, str.Main
push esi
call fcn.004247f7
push 0
push 2
push ecx
mov byte [esp + 0x3750], 0x31
lea eax, [esp + 0xd4]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x4f4]
push eax
mov byte [esp + 0x3754], 0x30
call fcn.00486650
test eax, eax
je 0x44aba5
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEDLL
jmp 0x4473cb
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f7
push 0
push 8
push ecx
mov byte [esp + 0x3750], 0x32
mov dword [esp + 0x24], esp
mov edi, esp
push ecx
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247e2
push edi
call fcn.0047b4c0
pop ecx
pop ecx
lea eax, [esp + 0x4f4]
push eax
mov byte [esp + 0x3754], 0x30
call fcn.00486650
test eax, eax
je 0x44ac11
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEDLL64
jmp 0x4473cb
lea ecx, [esp + 0x170]
call fcn.00422487
lea ecx, [esp + 0x138]
call fcn.00422487
lea eax, [esp + 0x170]
push eax
push ecx
mov byte [esp + 0x3748], 0x34
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247f7
push 3
lea edi, [esp + 0x4f0]
call fcn.00486c90
test eax, eax
je 0x44ac6f
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_Read_PeContainer_PECONTAINER_INI
jmp 0x4473cb
push ecx
mov edi, esp
mov dword [esp + 0x14], esp
push ecx
lea eax, [esp + 0xcc]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
lea ebx, [esp + 0x144]
call fcn.004247e2
push edi
call fcn.0048f8a0
add esp, 4
mov byte [esp + 0x3748], 0x35
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.EngineVersion
call fcn.004247f7
push ecx
mov byte [esp + 0x374c], 0x36
lea eax, [esp + 0x17c]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247e2
mov byte [esp + 0x374c], 0x34
call fcn.00471e50
pop ecx
pop ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.004247f7
push 0x4000
push 3
pop esi
push ecx
mov byte [esp + 0x374c], 0x37
mov eax, ebx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247e2
mov ecx, esi
lea ebx, [esp + 0x4f0]
mov byte [esp + 0x374c], 0x34
call fcn.00486430
test eax, eax
je 0x44ad39
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_Add_PeContainerStr_PECONTAINER_INI
jmp 0x4473cb
lea eax, [esp + 0x4e4]
call fcn.00485920
push dword [0x52a4b0]
lea eax, [esp + 0xc8]
push ecx
mov dword [esp + 0x18], esp
mov esi, esp
push dword [esp + 0xd4]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x2b4]
push eax
call fcn.0048f8a0
pop ecx
pop ecx
mov byte [esp + 0x374c], 0x38
push dword [eax]
push str.Successfully_changed_to_Engine__s._nNew_package_saved_in:_n_s
push esi
call fcn.0046d760
add esp, 0x10
call fcn.00445740
pop ecx
pop ecx
mov ecx, dword [esp + 0x2a4]
jmp 0x449651
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x24]
call fcn.004247e2
push 0x2e
lea ecx, [esp + 0x24]
mov dword [esp + 0x3744], 0x139
call fcn.0043d88d
push eax
lea eax, [esp + 0x228]
push eax
lea ecx, [esp + 0x28]
call fcn.004249e6
push str..new.exe
push eax
lea eax, [esp + 0xac]
push eax
mov byte [esp + 0x374c], 0x3a
call fcn.00424a46
add esp, 0xc
mov byte [esp + 0x3740], 0x3c
mov ecx, dword [esp + 0x224]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x280]
call fcn.004247f7
push esi
mov byte [esp + 0x3744], 0x3d
push dword [esp + 0xa8]
push dword [esp + 0x28]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x44ae65
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xac]
push dword [esp + 0x2c]
jmp 0x44a7a1
push 1
push 1
push ecx
lea eax, [esp + 0xb0]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x7c0]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0x3e
push dword [0x52a4b0]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x7c0]
push eax
call fcn.004457ba
add esp, 0x10
cmp dword [esp + 0x83c], esi
jne 0x44aed6
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44ab39
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.Main
call fcn.004247f7
push esi
push 3
push ecx
mov byte [esp + 0x3750], 0x3f
lea eax, [esp + 0x28c]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x7c4]
push eax
mov byte [esp + 0x3754], 0x3e
call fcn.00486650
cmp eax, esi
je 0x44af36
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEINI
jmp 0x4473cb
lea eax, [esp + 0x7b4]
call fcn.00485920
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xac]
push str.Successfully_changed_INI._nNew_package_saved_in:_n_s
jmp 0x448dd7
lea esi, [esp + 0x15c4]
call fcn.0043378d
mov dword [esp + 0x3740], 0x140
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x24]
push dword [edi + esi*4 + 4]
lea ecx, [esp + 0x1610]
call fcn.00424850
push dword [edi + esi*4 + 8]
lea ecx, [esp + 0x15e8]
call fcn.00424850
push dword [edi + esi*4 + 0xc]
lea ecx, [esp + 0x15e0]
call fcn.00424850
push eax
lea ecx, [esp + 0x15d4]
call fcn.0042483b
push dword [edi + esi*4 + 0x10]
lea ecx, [esp + 0x1618]
call fcn.00424850
push dword [edi + esi*4 + 0x14]
lea ecx, [esp + 0x1614]
call fcn.00424850
lea eax, [esp + 0x172c]
push eax
lea edi, [esp + 0x15c8]
call fcn.00499610
lea eax, [esp + 0x172c]
push eax
mov byte [esp + 0x3744], 0x41
call fcn.004997b0
test eax, eax
je 0x44b054
xor esi, esi
mov eax, 0x4ffb70
cmp dword [esp + 0x172c], esi
jne 0x44b01e
mov eax, 0x4ffb78
push dword [esp + 0x1738]
push dword [esp + 0x1738]
push eax
lea eax, [esp + 0x238]
push str.Need_to_update:__s_nVersion:__s_nBuildUID:__s_n
push eax
call fcn.0046d760
add esp, 0x14
push esi
push str.Server_test:
push dword [esp + 0x234]
jmp 0x44971b
push 0
push str.Server_test:
push str.Failed
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 1
jmp 0x4473d6
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
mov edi, 0x52df50
push edi
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x44b0a3
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
push esi
mov ecx, edi
call fcn.0043a269
jmp 0x447580
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x6a0]
push eax
call fcn.00484a40
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x374c], 0x142
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x43
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3754], 0x44
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e2
push 2
push ecx
mov byte [esp + 0x375c], 0x45
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x6b0]
push eax
mov byte [esp + 0x3760], 0x42
call fcn.00438115
add esp, 0x20
lea ecx, [esp + 0x694]
call fcn.00436d38
lea eax, [esp + 0x694]
call fcn.00485920
mov dword [esp + 0x3740], 4
lea eax, [esp + 0x694]
jmp 0x447e2c
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xc40]
push eax
call fcn.00484a40
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x374c], 0x146
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x47
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3754], 0x48
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e2
push 2
push ecx
mov byte [esp + 0x375c], 0x49
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xc50]
push eax
mov byte [esp + 0x3760], 0x46
call fcn.00438115
add esp, 0x20
push esi
push esi
push esi
push ecx
mov eax, esp
mov dword [esp + 0x20], esp
push eax
xor ecx, ecx
call fcn.0047eff0
pop ecx
mov ecx, esi
call fcn.00497ca0
add esp, 0x10
lea eax, [esp + 0xc34]
call fcn.00485920
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
mov edi, 0x52df50
push edi
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x44b27b
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.Cannot_obtain_INI_info_from_resource_
call fcn.004247f7
call fcn.00444eaa
pop ecx
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push str.MountVirtReg
push eax
call fcn.0046d760
pop ecx
pop ecx
call fcn.00444eaa
mov eax, esp
mov dword [esp + 0x14], esp
push str._____________
push eax
call fcn.0046d760
pop ecx
pop ecx
call fcn.00444eaa
pop ecx
mov ecx, edi
call fcn.0042af10
mov edi, eax
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
cmp edi, esi
jne 0x44b2d2
push str.Cannot_mount_virtual_registry
call fcn.004247f7
call fcn.00444eaa
jmp 0x44b2df
push ebx
call fcn.004247f7
push edi
call fcn.00445cc7
pop ecx
pop ecx
mov dword [esp + 0x3740], 4
lea eax, [esp + 0xc34]
jmp 0x447e2c
mov eax, dword [esp + 0x2c]
mov edi, dword [esp + 0x24]
push dword [eax + edi*4 + 4]
lea ecx, [esp + 0x15c]
call fcn.004247f7
mov dword [esp + 0x3740], 0x14a
mov eax, dword [esp + 0x2c]
push dword [eax + edi*4 + 8]
lea ecx, [esp + 0x9c]
call fcn.004247f7
push 0x10
mov byte [esp + 0x3744], 0x4b
push esi
push dword [esp + 0x160]
call fcn.004bfb5f
add esp, 8
mov edi, eax
mov eax, esp
mov dword [esp + 0x14], esp
push dword [esp + 0x9c]
push edi
push str.SetFileFlags:__0x_x____s_
push eax
call fcn.0046d760
add esp, 0x10
call fcn.00444eaa
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xcd0]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0x4c
push dword [0x52a4b0]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xcd0]
push eax
call fcn.004457ba
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x4d
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3754], 0x4e
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e2
push 2
push ecx
mov byte [esp + 0x375c], 0x4f
mov ecx, esp
lea eax, [esp + 0x34]
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xce0]
push eax
mov byte [esp + 0x3760], 0x4c
call fcn.00438115
call fcn.00478f10
mov ebx, 0x52d7a4
mov eax, ebx
call fcn.0048df40
mov eax, dword [esp + 0xb8]
push esi
call fcn.004795c0
add esp, 0x24
push ecx
mov dword [esp + 0x14], esp
cmp eax, esi
je 0x44b4b5
mov eax, dword [eax + 0x24]
mov dword [eax], edi
mov ecx, esp
push dword [0x52d7a4]
call fcn.004247f7
mov ecx, ebx
call fcn.004794f0
pop ecx
cmp eax, esi
je 0x44b49f
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xa0]
push edi
push str.Success:_n__x___s
push eax
call fcn.0046d760
add esp, 0x10
call fcn.00445740
pop ecx
jmp 0x44b4d1
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push str._SetFileFlags:_could_not_save_tree
push eax
call fcn.0046d760
pop ecx
pop ecx
jmp 0x44b4cc
mov eax, esp
push dword [esp + 0x9c]
push str._SetFileFlags:_could_not_find__s
push eax
call fcn.0046d760
add esp, 0xc
call fcn.00444eaa
pop ecx
mov eax, ebx
call fcn.0048df50
lea eax, [esp + 0xcc4]
mov byte [esp + 0x3740], 0x4b
call fcn.00427901
mov ecx, dword [esp + 0x98]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x158]
jmp 0x44e6f2
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.DbgZip
call fcn.004247f7
call fcn.00444eda
mov dword [esp], str._DbgZip:
call fcn.004bbaea
mov edx, dword [esp + 0x28]
pop ecx
mov ecx, dword [esp + 0x2c]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x64]
call fcn.00424850
jmp 0x4472ba
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xa00]
push eax
call fcn.00484a40
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x374c], 0x150
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x51
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3754], 0x52
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247f7
push 2
push ecx
mov byte [esp + 0x375c], 0x53
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xa10]
push eax
mov byte [esp + 0x3760], 0x50
call fcn.00438115
add esp, 0x20
push dword [0x52a4b0]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xa00]
push eax
call fcn.004457ba
push dword [esp + 0x64]
lea edx, [esp + 0xa08]
mov ecx, 0x52df50
call fcn.0043c021
add esp, 0x14
mov dword [esp + 0x3740], 4
lea eax, [esp + 0x9f4]
jmp 0x447e2c
push 1
xor edi, edi
push edi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x1270]
push eax
call fcn.00484a40
push 0xffffffffffffffff
push edi
push ecx
mov dword [esp + 0x374c], 0x15a
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x5b
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3754], 0x5c
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e2
push 2
push ecx
mov byte [esp + 0x375c], 0x5d
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x1280]
push eax
mov byte [esp + 0x3760], 0x5a
call fcn.00438115
add esp, 0x20
lea esi, [esp + 0xb0]
call fcn.0048bb50
mov byte [esp + 0x3740], 0x5e
mov dword [esp + 0x34], edi
jmp 0x44b788
push dword [0x52df5c]
lea eax, [esp + 0x2b08]
push eax
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x44b788
mov dword [esp + 0x20], edi
cmp dword [esp + 0x2700], edi
jbe 0x44b788
mov ebx, dword [esp + 0x20]
shl ebx, 3
lea esi, [esp + ebx + 0x2704]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [esi], eax
je 0x44b777
test byte [esp + ebx + 0x2708], 3
je 0x44b777
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x52dfac
call fcn.004247e2
push ecx
mov byte [esp + 0x3748], 0x5f
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x52df5c
call fcn.004247e2
mov byte [esp + 0x3748], 0x5e
mov ebx, dword [esi]
call fcn.004405e4
pop ecx
pop ecx
xor edi, edi
inc dword [esp + 0x20]
mov eax, dword [esp + 0x20]
cmp eax, dword [esp + 0x2700]
jb 0x44b718
push 1
lea eax, [esp + 0x22e0]
push eax
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0x40]
call fcn.0048b870
test eax, eax
jne 0x44b6f2
push edi
push edi
push edi
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
lea eax, [esp + 0xb0]
call fcn.0048bb70
lea eax, [esp + 0x1264]
mov dword [esp + 0x3740], 4
call fcn.00427901
xor esi, esi
jmp 0x447581
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x1420]
push eax
call fcn.00484a40
push 0xffffffffffffffff
mov dword [esp + 0x3744], 0x160
push dword [esp + 0x44]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x61
mov ecx, esp
mov dword [esp + 0x24], esp
push str._Vintegrate_
call fcn.004247f7
push ecx
mov byte [esp + 0x3754], 0x62
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e2
push esi
push ecx
mov byte [esp + 0x375c], 0x63
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x1430]
push eax
mov byte [esp + 0x3760], 0x60
call fcn.00438115
add esp, 0x20
call fcn.00445674
jmp 0x4473d5
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push str._ProcessList:all
push dword [eax + ecx*4]
call fcn.004bb834
mov edi, eax
neg edi
pop ecx
sbb edi, edi
pop ecx
lea esi, [esp + 0xb0]
inc edi
call fcn.0048bb50
mov dword [esp + 0x3740], 0x164
and dword [esp + 0x20], 0
lea ecx, [esp + 0x44]
call fcn.00422487
xor eax, eax
test edi, edi
sete al
mov byte [esp + 0x3740], 0x65
mov dword [esp + 0x34], eax
jmp 0x44bbaa
lea eax, [esp + 0x20dc]
push eax
lea eax, [esp + 0x2c0]
push str._AppID_ws_n
push eax
call fcn.0046d760
add esp, 0xc
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x3744], 0x66
call fcn.00424865
mov byte [esp + 0x3740], 0x65
mov ecx, dword [esp + 0x2bc]
add ecx, 0xfffffff0
call fcn.0042201a
push dword [esp + 0x18b8]
lea eax, [esp + 0x238]
push str.____SerialId:__d_n
push eax
call fcn.0046d760
add esp, 0xc
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x3744], 0x67
call fcn.00424865
mov byte [esp + 0x3740], 0x65
mov ecx, dword [esp + 0x234]
add ecx, 0xfffffff0
call fcn.0042201a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x1cd0]
mov esi, 0x3e8
xor edx, edx
mov ecx, esi
div ecx
push eax
lea eax, [esp + 0x288]
push str.____Started:__d_sec_ago_n
push eax
call fcn.0046d760
add esp, 0xc
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x3744], 0x68
call fcn.00424865
mov byte [esp + 0x3740], 0x65
mov ecx, dword [esp + 0x284]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x1cd4]
xor edx, edx
div esi
push eax
lea eax, [esp + 0x240]
push str.____Blocking_buffering:__d_sec_n
push eax
call fcn.0046d760
add esp, 0xc
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x3744], 0x69
call fcn.00424865
mov byte [esp + 0x3740], 0x65
mov ecx, dword [esp + 0x23c]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x2ac]
push str.____Processes:_n
push eax
call fcn.0046d760
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x3744], 0x6a
call fcn.00424865
mov byte [esp + 0x3740], 0x65
mov ecx, dword [esp + 0x2ac]
add ecx, 0xfffffff0
call fcn.0042201a
and dword [esp + 0x48], 0
cmp dword [esp + 0x1cd8], 0
jbe 0x44bbaa
push ebx
lea ecx, [esp + 0xb0]
call fcn.004247f7
mov byte [esp + 0x3740], 0x6b
mov edi, dword [esp + 0x48]
lea edi, [esp + edi*8 + 0x1cdc]
push dword [edi]
lea esi, [esp + 0xb0]
call fcn.0046bfe0
pop ecx
test eax, eax
jne 0x44baa6
push 0x4f18b8
mov ecx, esi
call fcn.00424850
push 0x5c
push ecx
lea eax, [esp + 0xb4]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x294]
push eax
call fcn.0046da90
add esp, 0xc
mov byte [esp + 0x3740], 0x6c
push dword [eax]
lea eax, [esp + 0x248]
push dword [edi]
push str._______wd:__ws
push eax
call fcn.0046d760
add esp, 0x10
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x3744], 0x6d
call fcn.00424865
mov ecx, dword [esp + 0x244]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3740], 0x6b
mov ecx, dword [esp + 0x28c]
add ecx, 0xfffffff0
call fcn.0042201a
mov esi, dword [esp + 0x48]
mov eax, dword [esp + esi*8 + 0x1ce0]
test eax, eax
je 0x44bb73
push eax
lea eax, [esp + 0x250]
push str._0x_x_
push eax
call fcn.0046d760
add esp, 0xc
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x3744], 0x6e
call fcn.00424865
mov byte [esp + 0x3740], 0x6b
mov ecx, dword [esp + 0x24c]
add ecx, 0xfffffff0
call fcn.0042201a
push 0x4ed4c4
lea ecx, [esp + 0x48]
call fcn.0042b4b8
mov byte [esp + 0x3740], 0x65
mov ecx, dword [esp + 0xac]
add ecx, 0xfffffff0
call fcn.0042201a
inc esi
mov dword [esp + 0x48], esi
cmp esi, dword [esp + 0x1cd8]
jb 0x44ba67
push dword [esp + 0x34]
lea eax, [esp + 0x18b8]
push eax
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0x2c]
call fcn.0048b870
test eax, eax
jne 0x44b8eb
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
cmp dword [esp + 0x28], eax
jne 0x44bbf8
push str.No_active_virtual_apps
call fcn.004247f7
call fcn.00445740
pop ecx
pop ecx
jmp 0x44b068
lea eax, [esp + 0x4c]
jmp 0x44a599
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
push 0x52df50
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x44bc34
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
lea esi, [esp + 0xb0]
call fcn.0048bb50
mov dword [esp + 0x3740], 0x16f
and dword [esp + 0x34], 0
jmp 0x44bc6b
push dword [0x52df5c]
lea eax, [esp + 0x3530]
push eax
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44bc9b
push 1
lea eax, [esp + 0x2d08]
push eax
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0x40]
call fcn.0048b870
test eax, eax
jne 0x44bc52
lea eax, [esp + 0xb0]
call fcn.0048bb70
jmp 0x448552
push 0x2bc
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0xb0]
mov dword [esp + 0x3740], 4
call fcn.0048bb70
jmp 0x44bc34
lea eax, [esp + 0x2cc]
push eax
mov eax, dword [esp + 0x68]
mov eax, dword [eax + 0x44]
call fcn.004315dc
lea eax, [esp + 0x2cc]
push eax
call fcn.00431719
jmp 0x4473d5
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.AutoUpdate
call fcn.004247f7
call fcn.00444eda
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
mov edi, 0x52df50
push edi
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x44bd31
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x52df98]
push str.AutoUpdate_s
push eax
call fcn.0046d760
add esp, 0xc
call fcn.00444eda
mov ecx, 0x52df98
mov dword [esp], str.https:__online.cameyo.com
call fcn.00424850
push str.0000
mov ecx, 0x52df9c
call fcn.00424850
mov ecx, edi
call fcn.0049b420
jmp 0x447581
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.VirtRegSyncExport
call fcn.004247f7
call fcn.00444eda
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
push 0x52df50
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x44bdc5
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
call fcn.00442016
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
push str.VirtRegSyncExport:_bRet_d
push ecx
call fcn.0046d760
add esp, 0xc
jmp 0x44757b
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.StartStreaming:AppIDSkype
call fcn.004247f7
call fcn.0042760d
pop ecx
jmp 0x447580
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
push 0x52df50
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x44be36
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.open
xor ebx, ebx
call fcn.004247f7
push esi
push ecx
mov dword [esp + 0x374c], 0x172
mov eax, esp
mov dword [esp + 0x20], esp
push dword [0x52dfac]
xor edi, edi
push str._select___s_
push eax
call fcn.0046d760
add esp, 8
mov byte [esp + 0x3750], 0x73
mov ecx, esp
mov dword [esp + 0x48], esp
push str.explorer.exe
call fcn.004247f7
mov dword [esp + 0x3750], 4
call fcn.0046c200
add esp, 0x10
jmp 0x44b7dc
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.SvcRegister
call fcn.004247f7
call fcn.00444eda
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
mov edi, 0x52df50
push edi
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x44beeb
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
mov ecx, edi
call fcn.0042af10
mov ebx, eax
cmp ebx, esi
jne 0x44bf0f
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_mount_virtual_registry
jmp 0x4473cb
call fcn.00478f10
push dword [0x52a4b0]
push ebx
push edi
call fcn.00423abb
add esp, 0xc
push dword [0x52a4b0]
mov edi, eax
cmp edi, esi
jne 0x44bf3e
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Success
jmp 0x44bf4f
cmp edi, 5
jne 0x44bf5d
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_services_to_register
call fcn.004247f7
call fcn.00445740
pop ecx
pop ecx
jmp 0x44bfa5
lea eax, [esp + 0x258]
push edi
push eax
call fcn.00474710
add esp, 4
mov dword [esp + 0x3748], 0x174
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Failed_registering_services:__s
push ecx
call fcn.0046d760
add esp, 0xc
call fcn.00445740
pop ecx
pop ecx
mov ecx, dword [esp + 0x254]
add ecx, 0xfffffff0
call fcn.0042201a
push edi
jmp 0x4473d6
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.SvcStart
call fcn.004247f7
call fcn.00444eda
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
mov edi, 0x52df50
push edi
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x44bff4
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
mov ecx, edi
call fcn.0042430d
push dword [0x52a4b0]
mov edi, eax
cmp edi, esi
je 0x44bf30
cmp edi, 5
jne 0x44c021
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_services_to_start
jmp 0x44bf4f
lea eax, [esp + 0x298]
push edi
push eax
call fcn.00474710
add esp, 4
mov dword [esp + 0x3748], 0x175
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Failed_starting_services:__s
push ecx
call fcn.0046d760
add esp, 0xc
call fcn.00445740
pop ecx
pop ecx
mov ecx, dword [esp + 0x294]
jmp 0x44bf9d
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.SvcRegisterStart
call fcn.004247f7
call fcn.00444eda
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
mov edi, 0x52df50
push edi
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x44c0af
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
mov ecx, edi
call fcn.0042af10
mov ebx, eax
cmp ebx, esi
jne 0x44c0ce
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44bf05
call fcn.00478f10
push dword [0x52a4b0]
push ebx
push edi
call fcn.00423abb
add esp, 0xc
mov ebx, str.Failed_registering_services:__s
cmp eax, 5
jne 0x44c10d
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_services_to_register
call fcn.004247f7
call fcn.00445740
pop ecx
pop ecx
jmp 0x44c166
cmp eax, esi
je 0x44c166
push dword [0x52a4b0]
push eax
lea eax, [esp + 0x264]
push eax
call fcn.00474710
add esp, 4
mov dword [esp + 0x3748], 0x176
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push ebx
push ecx
call fcn.0046d760
add esp, 0xc
call fcn.00445740
pop ecx
pop ecx
mov dword [esp + 0x3740], 4
mov ecx, dword [esp + 0x25c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, edi
call fcn.0042430d
push dword [0x52a4b0]
mov edi, eax
cmp edi, esi
je 0x44bf30
cmp edi, 5
je 0x44bf43
lea eax, [esp + 0x2b8]
push edi
push eax
call fcn.00474710
add esp, 4
mov dword [esp + 0x3748], 0x177
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push ebx
push ecx
call fcn.0046d760
add esp, 0xc
call fcn.00445740
pop ecx
pop ecx
mov ecx, dword [esp + 0x2b4]
jmp 0x44bf9d
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.SvcStop
call fcn.004247f7
call fcn.00444eda
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
mov edi, 0x52df50
push edi
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x44c210
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
push esi
mov ecx, edi
call fcn.00423ead
mov edi, eax
pop ecx
push dword [0x52a4b0]
cmp edi, esi
je 0x44bf30
cmp edi, 5
jne 0x44c23f
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_services_to_stop
jmp 0x44bf4f
lea eax, [esp + 0x268]
push edi
push eax
call fcn.00474710
add esp, 4
mov dword [esp + 0x3748], 0x178
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Failed_stopping_services:__s
push ecx
call fcn.0046d760
add esp, 0xc
call fcn.00445740
pop ecx
pop ecx
mov ecx, dword [esp + 0x264]
jmp 0x44bf9d
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.SvcRemove
call fcn.004247f7
call fcn.00444eda
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
mov edi, 0x52df50
push edi
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x44c2cd
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
push 1
mov ecx, edi
call fcn.00423ead
mov edi, eax
pop ecx
push dword [0x52a4b0]
cmp edi, esi
je 0x44bf30
cmp edi, 5
jne 0x44c2fd
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_services_to_remove
jmp 0x44bf4f
lea eax, [esp + 0x1f4]
push edi
push eax
call fcn.00474710
add esp, 4
mov dword [esp + 0x3748], 0x179
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Failed_removing_services:__s
push ecx
call fcn.0046d760
add esp, 0xc
call fcn.00445740
pop ecx
pop ecx
mov ecx, dword [esp + 0x1f0]
jmp 0x44bf9d
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.ScmDirectInit
call fcn.004247f7
call fcn.00444eda
mov dword [esp], 0x5004e8
call fcn.004bba40
mov edx, dword [esp + 0x28]
pop ecx
mov ecx, dword [esp + 0x2c]
mov ecx, dword [ecx + edx*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x204]
call fcn.004247f7
push ecx
mov dword [esp + 0x3744], 0x17a
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
mov ebx, 0x52df50
push ebx
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x44c3bf
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
push ecx
lea eax, [esp + 0x204]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
mov edi, 0x52dfe8
call fcn.004247e2
call fcn.0042a948
pop ecx
mov edi, ebx
call fcn.004246ef
jmp 0x4473d5
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.RepoSync
call fcn.004247f7
call fcn.00444eda
mov eax, dword [esp + 0x30]
pop ecx
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x16c]
call fcn.004247f7
lea eax, [esp + 0x4b4]
push eax
mov dword [esp + 0x3744], 0x17b
call fcn.00443229
lea eax, [esp + 0x49c]
push eax
mov byte [esp + 0x3744], 0x7c
call fcn.00443229
lea eax, [esp + 0x4cc]
push eax
mov byte [esp + 0x3744], 0x7d
call fcn.00443229
push esi
lea eax, [esp + 0x4d0]
push eax
lea eax, [esp + 0x4a4]
push eax
lea eax, [esp + 0x4c0]
push eax
push ecx
mov byte [esp + 0x3754], 0x7e
lea eax, [esp + 0x17c]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247e2
push ecx
mov byte [esp + 0x3758], 0x7f
lea eax, [esp + 0x180]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247e2
mov byte [esp + 0x3758], 0x7e
call fcn.0043c33f
add esp, 0x18
push eax
jmp 0x4473d6
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.MergeRegistry
call fcn.004247f7
call fcn.00444eda
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
mov edi, 0x52df50
push edi
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x44c50b
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
push edi
call fcn.0043d63a
pop ecx
mov edi, eax
lea eax, [esp + 0x208]
push edi
push eax
call fcn.00474710
add esp, 4
mov ecx, esp
mov dword [esp + 0x3744], 0x180
mov dword [esp + 0x14], esp
push dword [eax]
push edi
push str.Loader_MergeRegistry___d__s_
push ecx
call fcn.0046d760
add esp, 0x10
call fcn.00444eaa
pop ecx
mov dword [esp + 0x3740], 4
mov ecx, dword [esp + 0x208]
add ecx, 0xfffffff0
call fcn.0042201a
push dword [0x52a4b0]
cmp edi, esi
je 0x44bf30
lea eax, [esp + 0x214]
push edi
push eax
call fcn.00474710
add esp, 4
mov dword [esp + 0x3748], 0x181
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Failed:__s
push ecx
call fcn.0046d760
add esp, 0xc
call fcn.00445740
pop ecx
pop ecx
mov ecx, dword [esp + 0x210]
jmp 0x44bf9d
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.OpenFile
call fcn.004247f7
call fcn.00444eda
mov eax, dword [esp + 0x30]
pop ecx
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4 + 4]
lea ecx, [esp + 0x128]
call fcn.004247f7
push ecx
mov dword [esp + 0x3744], 0x182
lea eax, [esp + 0x128]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x21c]
push eax
call fcn.0046d7f0
pop ecx
pop ecx
mov edi, eax
mov byte [esp + 0x3740], 0x83
call fcn.0042e4b6
push eax
lea ecx, [esp + 0x24]
call fcn.004247e2
mov byte [esp + 0x3740], 0x85
mov ecx, dword [esp + 0x218]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], esi
jne 0x44c667
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.File_has_no_extension
jmp 0x4473cb
lea ebx, [esp + 0x20]
call fcn.0044e8ac
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
push 0x52df50
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x44c6a3
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
xor esi, esi
mov dword [esp + 0x148], esi
push 0x3b
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x52e024
lea edi, [esp + 0x154]
call fcn.004247e2
lea eax, [esp + 0x98]
push eax
call fcn.00471360
add esp, 0xc
or ebx, 0xffffffff
mov byte [esp + 0x3740], 0x86
cmp dword [esp + 0x148], ebx
je 0x44c85c
mov eax, dword [esp + 0x90]
cmp dword [eax - 0xc], esi
jne 0x44c70c
mov byte [esp + 0x3740], 0x85
lea ecx, [eax - 0x10]
call fcn.0042201a
jmp 0x44c6ac
push 0x3e
push ecx
lea eax, [esp + 0x98]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
mov dword [esp + 0xac], esi
lea edi, [esp + 0xac]
call fcn.004247e2
lea eax, [esp + 0xd8]
push eax
call fcn.00471360
add esp, 0xc
mov byte [esp + 0x3740], 0x87
cmp dword [esp + 0xa0], ebx
je 0x44c797
push 0x3e
push ecx
lea eax, [esp + 0x98]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x124]
push eax
call fcn.00471360
add esp, 0xc
mov byte [esp + 0x3740], 0x88
cmp dword [esp + 0xa0], ebx
jne 0x44c7bd
mov ecx, dword [esp + 0x11c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0xd0]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3740], 0x85
mov ecx, dword [esp + 0x90]
add ecx, 0xfffffff0
jmp 0x44c705
mov dword [esp + 0x160], esi
push 0x2c
push ecx
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
lea edi, [esp + 0x16c]
call fcn.004247e2
lea eax, [esp + 0xd0]
push eax
call fcn.00471360
add esp, 0xc
mov byte [esp + 0x3740], 0x89
cmp dword [esp + 0x160], ebx
je 0x44c848
mov eax, dword [esp + 0xc8]
cmp dword [eax - 0xc], esi
jne 0x44c820
mov byte [esp + 0x3740], 0x88
lea ecx, [eax - 0x10]
call fcn.0042201a
jmp 0x44c7c4
push dword [esp + 0x20]
lea eax, [esp + 0xcc]
call fcn.0042487a
test eax, eax
je 0x44c88e
mov byte [esp + 0x3740], 0x88
mov ecx, dword [esp + 0xc8]
add ecx, 0xfffffff0
jmp 0x44c819
mov ecx, dword [esp + 0xc8]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x44c788
mov byte [esp + 0x3740], 0x85
mov ecx, dword [esp + 0x90]
add ecx, 0xfffffff0
call fcn.0042201a
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x28]
push str.Application_does_not_handle_this_type_of_files:__s
jmp 0x44755c
lea eax, [esp + 0x11c]
push eax
lea ecx, [esp + 0x4c]
call fcn.004247e2
mov byte [esp + 0x3740], 0x8a
push dword [esp + 0x124]
lea eax, [esp + 0x4c]
push 0x4fc9fc
push eax
call fcn.0042b4cd
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [esp + 0x4c]
push str.OpenFile:_executing:__s
push eax
call fcn.0046d760
add esp, 0xc
call fcn.00444eaa
pop ecx
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
push dword [esp + 0x48]
lea eax, [esp + 0x224]
push str._exec__s
push eax
call fcn.0046d760
mov eax, dword [eax]
add esp, 0xc
push esi
push esi
push eax
push dword [esp + 0x24]
push esi
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [esp + 0x220]
xor ebx, ebx
cmp eax, 0x20
setg bl
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x228]
push ebx
push eax
call fcn.004747f0
pop ecx
pop ecx
mov edi, eax
mov byte [esp + 0x3740], 0x8b
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
push dword [edi]
push str.OpenFile:_bExecOK_s__LE_d
push ecx
call fcn.0046d760
add esp, 0x10
call fcn.00444eaa
pop ecx
mov ecx, dword [esp + 0x228]
add ecx, 0xfffffff0
call fcn.0042201a
test ebx, ebx
jne 0x448552
call esi
jmp 0x44c4bc
push str.Cameyo.exe__UpgradePkg_
call fcn.004247f7
call fcn.00444eda
pop ecx
lea ecx, [esp + 0xe4]
call fcn.00422487
mov byte [esp + 0x3740], 0x8e
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push dword [eax + ecx*4]
lea ecx, [esp + 0x104]
call fcn.004247f7
push ecx
mov byte [esp + 0x3744], 0x8f
lea eax, [esp + 0x104]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
call fcn.0046fe10
pop ecx
cmp eax, esi
jne 0x44ca01
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x108]
push str._s_not_found
jmp 0x44755c
push esi
lea eax, [esp + 0xe8]
push eax
push ecx
lea eax, [esp + 0x10c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
push ecx
mov byte [esp + 0x3750], 0x90
mov eax, esp
mov dword [esp + 0x24], esp
push eax
call fcn.0046c7a0
pop ecx
mov byte [esp + 0x3750], 0x8f
call fcn.0044232d
add esp, 0x10
push dword [0x52a4b0]
cmp eax, esi
jne 0x44ca66
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xec]
push 0x4fea94
jmp 0x448dd7
push eax
lea eax, [esp + 0x318]
push eax
call fcn.00474710
add esp, 4
mov byte [esp + 0x3748], 0x91
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xec]
push dword [eax]
push str._s:__s
push ecx
jmp 0x44a7a7
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.AuthCheck
call fcn.004247f7
call fcn.00444eda
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
mov esi, 0x52df50
push esi
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x44cae2
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
call fcn.004335c6
xor edi, edi
mov dword [esp + 0x1c], eax
cmp eax, edi
je 0x44cb92
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push str._AuthCheck:Force
push dword [eax + ecx*4]
call fcn.004bb834
pop ecx
pop ecx
lea eax, [esp + 0x230]
push eax
push ecx
mov dword [esp + 0x18], esp
mov ebx, esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.AuthToken.dat
mov dword [esp + 0x240], edi
call fcn.004247f7
push ebx
mov ecx, edi
call fcn.0047ec10
pop ecx
pop ecx
mov ecx, dword [esp + 0x24]
mov edx, esi
call fcn.00432cdd
push dword [0x52a4b0]
mov esi, eax
push ecx
mov dword [esp + 0x18], esp
test esi, esi
je 0x44cb67
mov ecx, esp
push str.Allowed_to_run_this_package
call fcn.004247f7
jmp 0x44cb7c
mov eax, esp
push 0x52e030
push str.Denied:_n
push eax
call fcn.00424a9b
add esp, 0xc
call fcn.00445740
neg esi
sbb esi, esi
pop ecx
and esi, 0xffffffef
pop ecx
add esi, 0x11
jmp 0x4473d5
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.No_authentication_server_specified_in_this_package
jmp 0x4473cb
push str.Vintegrate:
lea ecx, [esp + 0x114]
call fcn.004247f7
mov dword [esp + 0x3740], 0x154
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
lea edi, [eax + ecx*4]
push str._VintegrateRecursive
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
je 0x44cc01
push 0x4ffe70
call fcn.004bba40
pop ecx
push eax
push str._VintegrateRecursive:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
jne 0x44cc12
push str.VintegrateRecursive:
lea ecx, [esp + 0x114]
call fcn.00424850
push str._Windows_Explorer.exe
lea ecx, [esp + 0xec]
call fcn.004247f7
mov byte [esp + 0x3740], 0x55
mov edi, dword [edi]
push 0x3a
push edi
call fcn.004bc598
pop ecx
pop ecx
cmp eax, esi
je 0x44cc4b
add eax, 2
push eax
lea ecx, [esp + 0xec]
call fcn.00424850
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x1390]
push eax
call fcn.00484a40
push 0xffffffffffffffff
mov byte [esp + 0x3744], 0x56
push dword [esp + 0x44]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov eax, esp
mov byte [esp + 0x3750], 0x57
mov dword [esp + 0x24], esp
lea ecx, [esp + 0xf8]
push ecx
lea ecx, [esp + 0x124]
push ecx
push eax
call fcn.0042c5b1
add esp, 8
mov byte [esp + 0x3754], 0x58
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e2
push esi
push ecx
mov byte [esp + 0x375c], 0x59
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x13a0]
push eax
mov byte [esp + 0x3760], 0x56
call fcn.00438115
add esp, 0x20
lea eax, [esp + 0x1384]
mov byte [esp + 0x3740], 0x55
call fcn.00427901
mov ecx, dword [esp + 0xe8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x110]
jmp 0x44e6f2
lea ecx, [esp + 0x20]
call fcn.00422487
lea ecx, [esp + 0xf0]
mov dword [esp + 0x3740], 0x105
call fcn.00422487
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x68]
mov byte [esp + 0x3744], 6
call fcn.004247e2
mov byte [esp + 0x3740], 7
mov eax, dword [esp + 0x24]
lea ecx, [eax + 1]
cmp dword [esp + 0x50], ecx
jle 0x44cd84
mov ecx, dword [esp + 0x2c]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x68]
call fcn.00424850
push 1
push esi
push ecx
lea eax, [esp + 0x70]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xdf0]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 8
push dword [0x52a4b0]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xdf0]
push eax
call fcn.004457ba
add esp, 0x10
cmp dword [esp + 0xe6c], esi
jne 0x44cdf0
push str.FAILED_LOADING_CONTAINERS__n
lea ebx, [esp + 0x24]
call fcn.00427758
pop ecx
xor esi, esi
lea eax, [esp + 0xf0]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Main
call fcn.004247f7
push 3
lea edi, [esp + 0xdf0]
call fcn.00486c90
mov eax, dword [esp + 0xf0]
cmp dword [eax - 0xc], esi
jne 0x44ce31
push str.Cannot_obtain_INI_info_from_resource__n
lea ecx, [esp + 0x24]
call fcn.0042bcd7
lea eax, [esp + 0xf0]
push eax
lea ecx, [esp + 0x24]
call fcn.00425359
push esi
push 0x4f183c
push dword [esp + 0x28]
jmp 0x44971b
push str._SaveProperties_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea ecx, [esp + 0x28]
call fcn.00422487
mov byte [esp + 0x3740], 0xf8
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push str._SaveAllProperties
push dword [eax + ecx*4]
call fcn.004bb834
mov edi, eax
mov eax, dword [esp + 0x30]
neg edi
sbb edi, edi
pop ecx
inc edi
pop ecx
cmp dword [eax - 0xc], esi
jne 0x44ceff
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..xml
call fcn.004247f7
push ecx
mov byte [esp + 0x3748], 0xf9
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x240]
push eax
mov byte [esp + 0x374c], 0xf8
call fcn.0046d920
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x3744], 0xfa
call fcn.0042483b
mov byte [esp + 0x3740], 0xf8
mov ecx, dword [esp + 0x238]
add ecx, 0xfffffff0
call fcn.0042201a
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xb20]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0xfb
push dword [0x52a4b0]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xb20]
push eax
call fcn.004457ba
add esp, 0x10
cmp dword [esp + 0xb9c], esi
jne 0x44cf6c
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x449801
sub esp, 0x90
mov eax, esp
mov dword [esp + 0xa0], esp
lea ecx, [esp + 0xba4]
push ecx
push eax
call fcn.0044e784
push edi
push ecx
mov byte [esp + 0x37d8], 0xfc
lea eax, [esp + 0xe4]
mov ecx, esp
mov dword [esp + 0xac], esp
push eax
call fcn.004247e2
push ecx
mov byte [esp + 0x37dc], 0xfd
lea eax, [esp + 0xc4]
mov ecx, esp
mov dword [esp + 0xd4], esp
push eax
call fcn.004247e2
mov byte [esp + 0x37dc], 0xfb
call fcn.0042b144
add esp, 0x9c
cmp eax, esi
jne 0x44cffa
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x30]
push str.Cannot_save_into:__s
jmp 0x44755c
lea eax, [esp + 0xb14]
call fcn.00485920
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x30]
push str.Properties_exported_to:_n_s
jmp 0x448dd7
lea eax, [esp + 0x20]
push eax
call fcn.0046c890
mov byte [esp + 0x3744], 0xa7
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
lea edi, [eax + ecx*4]
mov dword [esp], 0x4ff080
call fcn.004bba40
pop ecx
push eax
push str._CreateShortcuts:
push dword [edi]
call fcn.004be056
add esp, 0xc
test eax, eax
jne 0x44d080
push dword [edi]
lea ecx, [esp + 0x24]
call fcn.00424850
push 0x4ff080
call fcn.004bba40
pop ecx
push esi
lea ecx, [esp + 0x24]
push ecx
call fcn.0042488e
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
push 0x52df50
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x44d0b3
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x14b0]
push eax
call fcn.00484a40
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x374c], 0xa8
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0xa9
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3754], 0xaa
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247f7
push 2
push ecx
mov byte [esp + 0x375c], 0xab
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x14c0]
push eax
mov byte [esp + 0x3760], 0xa8
call fcn.00438115
add esp, 0x20
push 0x52df60
lea ecx, [esp + 0x68]
call fcn.004247e2
lea eax, [esp + 0x6c]
push eax
push 0x4f2fd8
lea eax, [esp + 0x84]
mov byte [esp + 0x3748], 0xac
push eax
lea ecx, [esp + 0x70]
mov dword [esp + 0x78], esi
call fcn.0042b647
jmp 0x44d671
lea ecx, [esp + 0x28]
call fcn.00422487
lea ecx, [esp + 0x24]
call fcn.00422487
lea ecx, [esp + 0x2c]
call fcn.00422487
lea ecx, [esp + 0x40]
call fcn.00422487
push 0x3e
push ecx
mov byte [esp + 0x3748], 0xb1
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
mov dword [esp + 0x94], esi
lea edi, [esp + 0x94]
call fcn.004247e2
lea eax, [esp + 0x248]
push eax
call fcn.00471360
add esp, 0xc
mov byte [esp + 0x3740], 0xb2
call fcn.0042493d
push eax
lea ecx, [esp + 0x2c]
call fcn.0042483b
mov byte [esp + 0x3740], 0xb1
mov ecx, dword [esp + 0x240]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0x88], 0xffffffff
je 0x44d612
push 0x3e
push ecx
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x250]
push eax
call fcn.00471360
add esp, 0xc
mov byte [esp + 0x3740], 0xb3
call fcn.0042493d
push eax
lea ecx, [esp + 0x28]
call fcn.0042483b
mov byte [esp + 0x3740], 0xb1
mov ecx, dword [esp + 0x248]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0x88], 0xffffffff
je 0x44d612
push 0x3e
push ecx
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x184]
push eax
call fcn.00471360
add esp, 0xc
mov byte [esp + 0x3740], 0xb4
call fcn.0042493d
push eax
lea ecx, [esp + 0x30]
call fcn.0042483b
mov byte [esp + 0x3740], 0xb1
mov ecx, dword [esp + 0x17c]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0x88], 0xffffffff
jne 0x44d2eb
push ebx
lea ecx, [esp + 0x30]
call fcn.00424850
jmp 0x44d346
push 0x3e
push ecx
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
lea edi, [esp + 0x94]
call fcn.004247e2
lea eax, [esp + 0x188]
push eax
call fcn.00471360
add esp, 0xc
mov byte [esp + 0x3740], 0xb5
call fcn.0042493d
push eax
lea ecx, [esp + 0x44]
call fcn.0042483b
mov byte [esp + 0x3740], 0xb1
mov ecx, dword [esp + 0x180]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0x88], 0xffffffff
jne 0x44d35a
push ebx
lea ecx, [esp + 0x44]
call fcn.00424850
push dword [esp + 0x28]
lea eax, [esp + 0xdc]
push str._exec___s_
push eax
call fcn.0046d760
add esp, 0xc
mov byte [esp + 0x3740], 0xb6
mov eax, dword [esp + 0x24]
cmp dword [eax - 0xc], esi
je 0x44d3a6
push 0x4f51e4
lea ecx, [esp + 0xdc]
call fcn.0042b4b8
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0xdc]
call fcn.00424865
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
push ecx
mov edi, esp
mov byte [esp + 0x3748], 0xb7
mov dword [esp + 0x1c], esp
push 0x5c
push ecx
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247e2
push edi
call fcn.0046da90
lea eax, [esp + 0x140]
add esp, 0xc
push eax
mov byte [esp + 0x374c], 0xb6
call fcn.0042aacf
add esp, 0xc
push esi
push esi
push esi
push ecx
mov byte [esp + 0x3750], 0xb8
lea eax, [esp + 0x13c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x118]
push esi
push eax
call fcn.0047e910
add esp, 0x14
mov byte [esp + 0x3744], 0xb9
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x4ecfa0
call fcn.004247f7
push ecx
mov eax, esp
mov byte [esp + 0x3748], 0xba
mov dword [esp + 0x1c], esp
push str..lnk
lea ecx, [esp + 0x38]
push ecx
push eax
call fcn.00424a46
add esp, 8
mov byte [esp + 0x374c], 0xbb
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247e2
lea edi, [esp + 0x194]
mov byte [esp + 0x374c], 0xb9
call fcn.0046d020
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x188]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
lea eax, [esp + 0x10c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
call fcn.0046fe10
pop ecx
cmp eax, esi
je 0x44d4d1
lea eax, [esp + 0x108]
jmp 0x44d4eb
push esi
lea ecx, [esp + 0x194]
call fcn.004247f7
mov byte [esp + 0x3740], 0xbc
or dword [esp + 0x44], 2
mov eax, dword [eax]
push esi
push ecx
mov dword [esp + 0x24], eax
lea eax, [esp + 0x48]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e2
push ecx
mov dword [esp + 0x374c], 0xbd
lea eax, [esp + 0xe4]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247e2
push ecx
mov byte [esp + 0x3750], 0xbe
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x48], esp
push eax
call fcn.004247e2
push ecx
mov byte [esp + 0x3754], 0xbf
mov dword [esp + 0x8c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x90], esp
push 0x4ecfa0
call fcn.004247f7
push ecx
mov eax, esp
mov byte [esp + 0x375c], 0xc0
mov dword [esp + 0x50], esp
push str..lnk
lea ecx, [esp + 0x4c]
push ecx
push eax
call fcn.00424a46
add esp, 8
mov byte [esp + 0x3760], 0xc1
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x68], esp
push eax
call fcn.004247e2
mov byte [esp + 0x3760], 0xbf
call fcn.0046d020
mov ecx, dword [esp + 0x3c]
add esp, 0xc
mov byte [esp + 0x3754], 0xbc
call fcn.00498930
add esp, 0x14
mov dword [esp + 0x3740], 0xb9
test byte [esp + 0x44], 2
je 0x44d5e5
mov ecx, dword [esp + 0x190]
and dword [esp + 0x44], 0xfffffffd
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x108]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x12c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0xd8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x40]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x2c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x28]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x3740], 0xac
mov ecx, dword [esp + 0x7c]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x6c]
push eax
push 0x4f2fd8
lea eax, [esp + 0x84]
push eax
lea ecx, [esp + 0x70]
call fcn.0042b647
cmp dword [esp + 0x6c], 0xffffffff
jne 0x44d183
mov byte [esp + 0x3740], 0xac
mov ecx, dword [esp + 0x7c]
add ecx, 0xfffffff0
call fcn.0042201a
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52df5c]
push str.Shortcuts_created_for__s.
jmp 0x448dd7
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
call fcn.004247e2
mov byte [esp + 0x3740], 0x98
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
lea edi, [eax + ecx*4]
push str._FullIntegrate
push dword [edi]
mov dword [esp + 0x50], edi
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x44d86e
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
push 0x52df50
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x44d71b
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
push dword [esp + 0x54]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x52df5c
call fcn.004247e2
lea eax, [esp + 0x100]
push eax
call fcn.004422d7
add esp, 8
mov byte [esp + 0x3744], 0x99
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x4ecfa0
call fcn.004247f7
push ecx
mov byte [esp + 0x3748], 0x9a
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x52df5c]
push str._s.host.exe
push eax
call fcn.0046d760
add esp, 8
mov byte [esp + 0x374c], 0x9b
lea eax, [esp + 0x104]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247e2
lea edi, [esp + 0x1a4]
mov byte [esp + 0x374c], 0x99
call fcn.0046d020
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x3744], 0x9c
call fcn.0042483b
mov byte [esp + 0x3740], 0x99
mov ecx, dword [esp + 0x198]
add ecx, 0xfffffff0
call fcn.0042201a
mov esi, dword [esp + 0xf8]
call fcn.0046fef0
test eax, eax
jne 0x44d7fd
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_create_virtual_repository
jmp 0x4473cb
lea eax, [esp + 0x1a0]
push eax
call fcn.0046c7a0
mov eax, dword [eax]
pop ecx
push 0
push dword [esp + 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [esp + 0x1a0]
neg eax
sbb al, al
inc al
add ecx, 0xfffffff0
mov byte [esp + 0x33], al
call fcn.0042201a
cmp byte [esp + 0x33], 0
je 0x44d851
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Could_not_copy_executable_to_repository
jmp 0x4473cb
mov byte [esp + 0x3740], 0x98
mov ecx, dword [esp + 0xf8]
add ecx, 0xfffffff0
call fcn.0042201a
mov edi, dword [esp + 0x48]
xor esi, esi
push 1
push esi
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xbb0]
push eax
call fcn.00484a40
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x374c], 0x9d
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x9e
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3754], 0x9f
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
call fcn.004247f7
push 2
push ecx
mov byte [esp + 0x375c], 0xa0
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
lea eax, [esp + 0xbc0]
push eax
mov byte [esp + 0x3760], 0x9d
call fcn.00438115
push str._Integrate:once
push dword [edi]
call fcn.004bb834
add esp, 0x28
test eax, eax
jne 0x44da4e
push ebx
lea ecx, [esp + 0xa0]
call fcn.004247f7
push esi
push esi
push esi
push ecx
mov byte [esp + 0x3750], 0xa1
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Registered
lea edi, [esp + 0xb0]
call fcn.004247f7
mov byte [esp + 0x3750], 0xa2
push dword [0x52df5c]
lea eax, [esp + 0x1bc]
push str.SoftwareVOS_s
push eax
call fcn.0046d760
add esp, 8
mov byte [esp + 0x3754], 0xa3
or dword [esp + 0x58], 1
mov ecx, esp
mov dword [esp + 0x28], esp
push str.Integrated
push eax
push ecx
call fcn.00424a46
add esp, 0xc
mov dword [esp + 0x3754], 0xa4
call fcn.0047e010
push eax
mov byte [esp + 0x3758], 0xa5
call fcn.0046e240
add esp, 0x18
cmp eax, esi
je 0x44d9c2
mov eax, dword [esp + 0x9c]
cmp dword [eax - 0xc], esi
je 0x44d9c2
mov bl, 1
jmp 0x44d9c4
xor bl, bl
mov dword [esp + 0x3740], 0xa1
test byte [esp + 0x44], 1
je 0x44d9e5
mov ecx, dword [esp + 0x1a8]
add ecx, 0xfffffff0
call fcn.0042201a
test bl, bl
je 0x44da37
push str.Success
lea eax, [esp + 0xa0]
call fcn.0042487a
push ecx
test eax, eax
mov dword [esp + 0x14], esp
mov eax, esp
jne 0x44da1c
push str._Integrate:once:_already_registered_successfully._Quitting.
push eax
call fcn.0046d760
pop ecx
pop ecx
call fcn.00444eaa
jmp 0x448de6
push dword [esp + 0xa0]
push str._Integrate:once:_already_attempted_registration_before__but_failed:__s._Trying_integration_again.
push eax
call fcn.0046d760
add esp, 0xc
call fcn.00444eaa
pop ecx
mov byte [esp + 0x3740], 0x9d
mov ecx, dword [esp + 0x9c]
add ecx, 0xfffffff0
call fcn.0042201a
xor eax, eax
cmp dword [esp + 0x54], esi
push esi
setne al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.AllUsers
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0xa6
mov eax, esp
mov dword [esp + 0x24], esp
push dword [0x52df5c]
push str.SoftwareVOS_s
push eax
call fcn.0046d760
add esp, 0xc
push SysReAllocStringLen
mov byte [esp + 0x3754], 0x9d
call fcn.0046e740
add esp, 0x14
push dword [esp + 0x54]
lea edx, [esp + 0xba8]
mov ecx, 0x52df50
call fcn.0043c021
pop ecx
lea eax, [esp + 0xba4]
call fcn.00485920
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52df5c]
push str._s_is_now_integrated_into_your_system.
jmp 0x448dd7
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.0046c580
test eax, eax
jne 0x44db5b
mov eax, dword [esp + 0x2c]
push esi
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push dword [eax]
call fcn.004247f7
push edi
call fcn.00473160
add esp, 4
mov byte [esp + 0x374c], 0x3f
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247e2
mov ecx, esi
xor edx, edx
mov byte [esp + 0x374c], 4
call fcn.0046c370
add esp, 0xc
cmp eax, esi
jne 0x4473d5
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x4473c6
call fcn.0046c750
test eax, eax
jne 0x44db76
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x446349
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
lea edi, [eax + ecx*4]
push 0x4fe5a4
mov dword [esp + 0x4c], edi
call fcn.004bba40
pop ecx
push eax
push str._Patch
push dword [edi]
call fcn.004be056
add esp, 0xc
mov edi, eax
neg edi
lea eax, [esp + 0x18]
sbb edi, edi
push eax
lea ecx, [esp + 0x68]
inc edi
call fcn.004247e2
push ecx
mov byte [esp + 0x3744], 0x40
mov ecx, esp
mov dword [esp + 0x14], esp
push str..new.exe
call fcn.004247f7
push ecx
mov byte [esp + 0x3748], 0x41
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x94]
push eax
mov byte [esp + 0x374c], 0x40
call fcn.0046d920
add esp, 0xc
mov byte [esp + 0x3740], 0x42
push dword [esp + 0x8c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [esp + 0x48]
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push dword [eax]
call fcn.004247f7
lea eax, [esp + 0xe4]
push eax
call fcn.00473160
pop ecx
pop ecx
push 1
push esi
push ecx
mov byte [esp + 0x374c], 0x43
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x610]
push eax
call fcn.00484a40
mov byte [esp + 0x3740], 0x44
push dword [0x52a4b0]
cmp dword [esp + 0x690], esi
jne 0x44dc8a
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x20]
push str.Cannot_load_newly_created_package__s
jmp 0x44755c
push 1
push ecx
lea eax, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x610]
push eax
call fcn.004457ba
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x45
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247f7
push ecx
mov byte [esp + 0x3754], 0x46
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247e2
push 2
push ecx
mov byte [esp + 0x375c], 0x47
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x620]
push eax
mov byte [esp + 0x3760], 0x44
call fcn.00438115
push dword [0x52df5c]
lea eax, [esp + 0xcc]
push dword [0x52dfac]
push str._sAppVirtDll__s.dll
push eax
call fcn.0046d760
add esp, 0x2c
mov byte [esp + 0x3744], 0x48
lea eax, [esp + 0xac]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
call fcn.00426da3
pop ecx
cmp eax, esi
je 0x44ddc3
push dword [0x52a4b0]
cmp eax, 0x11
jne 0x44dd85
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str.MsiTrackerStart:_Insufficient_permissions_
push eax
call fcn.0046d760
pop ecx
pop ecx
jmp 0x4473d0
cmp eax, 0x12
jne 0x44dd98
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str.MsiTrackerStart:_Cant_access_services.exe._32_64_bit_mismatch_
jmp 0x44dd78
push eax
lea eax, [esp + 0x31c]
push eax
call fcn.00474710
add esp, 4
mov byte [esp + 0x3748], 0x49
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.MsiTrackerStart:_Failed:__s
jmp 0x447b89
push dword [esp + 0xe0]
lea eax, [esp + 0x1b4]
push str._exec__s
push eax
call fcn.0046d760
mov eax, dword [eax]
add esp, 0xc
push esi
push esi
push eax
push dword [esp + 0x24]
push esi
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [esp + 0x1b0]
xor ebx, ebx
cmp eax, 0x20
setg bl
add ecx, 0xfffffff0
call fcn.0042201a
cmp ebx, esi
je 0x44de55
cmp edi, esi
je 0x44de1d
push 1
push 0x4ed4c8
push str.Installation_launched_in_virtual_mode..._nWhen_installation_is_done__click_OK_and_Cameyo_will_turn_it_into_a_virtual_package._nInstallation_will_not_truly_install_anything_on_your_hard_drive__it_is_simulated_.
jmp 0x44de28
push esi
push 0x4ed4c8
push str.When_installation_is_done__click_OK.
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
jne 0x44de55
push ecx
lea eax, [esp + 0xac]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
call fcn.00426e2a
pop ecx
push 0x14
jmp 0x4473d6
push ecx
lea eax, [esp + 0xac]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
call fcn.00426e2a
pop ecx
cmp eax, esi
je 0x44ded0
push dword [0x52a4b0]
cmp eax, 0x11
jne 0x44de8f
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str.MsiTrackerStop:_Insufficient_permissions_
jmp 0x44dd78
cmp eax, 0x12
jne 0x44dea5
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str.MsiTrackerStop:_Cant_access_services.exe._32_64_bit_mismatch_
jmp 0x44dd78
push eax
lea eax, [esp + 0x308]
push eax
call fcn.00474710
add esp, 4
mov byte [esp + 0x3748], 0x4a
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.MsiTrackerStop:_Failed:__s
jmp 0x447b89
cmp ebx, esi
jne 0x44def2
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xe8]
push str.Failed_executing__s
jmp 0x44755c
mov ebx, dword [esp + 0x64]
cmp edi, esi
je 0x44dfb7
call fcn.0042fe3c
push 0x407
mov edi, 0x52df50
call fcn.0048b180
pop ecx
push esi
push dword [esp + 0x90]
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x8c]
jne 0x44df3f
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x447aa3
push dword [esp + 0x34]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e2
call fcn.0043fbec
pop ecx
pop ecx
mov dword [esp + 0x34], eax
cmp eax, esi
je 0x44dfac
push dword [esp + 0x8c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esp + 0x34], 0x10
push dword [0x52a4b0]
jne 0x44df85
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x447b56
push dword [esp + 0x38]
lea eax, [esp + 0x344]
push eax
call fcn.00474710
add esp, 4
mov byte [esp + 0x3748], 0x4b
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x447b82
push 0x404
call fcn.0048b180
pop ecx
lea eax, [esp + 0x604]
call fcn.00485920
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x94]
push 0x4fea94
push eax
call fcn.0046d760
add esp, 0xc
call fcn.00445740
pop ecx
pop ecx
mov ecx, dword [esp + 0xa8]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x604]
mov byte [esp + 0x3740], 0x43
call fcn.00427901
mov ecx, dword [esp + 0xe0]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x8c]
add ecx, 0xfffffff0
jmp 0x447b2e
lea ecx, [esp + 0x28]
call fcn.00422487
lea ecx, [esp + 0x54]
call fcn.00422487
mov byte [esp + 0x3740], 0x35
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
lea edi, [eax + ecx*4]
push str._CreateDiff
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x44e074
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
call fcn.0042483b
jmp 0x44e08e
push 0x4fe560
call fcn.004bba40
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x2c]
call fcn.00424850
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..mod
call fcn.004247f7
push ecx
mov byte [esp + 0x3748], 0x36
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x1c0]
push eax
mov byte [esp + 0x374c], 0x35
call fcn.0046d920
add esp, 0xc
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x3744], 0x37
call fcn.0042483b
mov byte [esp + 0x3740], 0x35
mov ecx, dword [esp + 0x1b8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ebx, dword [esp + 0x54]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
call edi
push esi
push ebx
push dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x54]
jne 0x44e12c
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x447aa3
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247e2
call fcn.0043fbec
pop ecx
pop ecx
mov dword [esp + 0x64], eax
cmp eax, esi
jne 0x44e1a3
push dword [0x52a4b0]
lea eax, [esp + 0x58]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x1cc]
push eax
call fcn.0046da90
add esp, 8
mov byte [esp + 0x3748], 0x38
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Successfully_repackaged_into:__s
push ecx
call fcn.0046d760
add esp, 0xc
call fcn.00445740
pop ecx
pop ecx
mov ecx, dword [esp + 0x1c0]
jmp 0x44e377
push ebx
call edi
cmp dword [esp + 0x64], 0x10
push dword [0x52a4b0]
jne 0x44e1bf
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x447b56
push dword [esp + 0x68]
lea eax, [esp + 0x340]
push eax
call fcn.00474710
add esp, 4
mov byte [esp + 0x3748], 0x39
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x447b82
lea ecx, [esp + 0x28]
call fcn.00422487
lea ecx, [esp + 0x54]
call fcn.00422487
mov byte [esp + 0x3740], 0x28
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
lea edi, [eax + ecx*4]
push str._LearnStreaming
push dword [edi]
call fcn.004bb834
pop ecx
pop ecx
test eax, eax
jne 0x44e22d
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
call fcn.0042483b
jmp 0x44e247
push 0x4fe33c
call fcn.004bba40
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x2c]
call fcn.00424850
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str..new.exe
call fcn.004247f7
push ecx
mov byte [esp + 0x3748], 0x29
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x1d0]
push eax
mov byte [esp + 0x374c], 0x28
call fcn.0046d920
add esp, 0xc
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x3744], 0x2a
call fcn.0042483b
mov byte [esp + 0x3740], 0x28
mov ecx, dword [esp + 0x1c8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ebx, dword [esp + 0x54]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
call edi
push esi
push ebx
push dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x54]
jne 0x44e2e5
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x447aa3
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004247e2
push ecx
mov byte [esp + 0x3748], 0x2b
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
mov byte [esp + 0x3748], 0x28
call fcn.00440183
pop ecx
pop ecx
mov dword [esp + 0x1c], eax
cmp eax, esi
jne 0x44e390
push dword [0x52a4b0]
lea eax, [esp + 0x58]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247e2
lea eax, [esp + 0x1dc]
push eax
call fcn.0046da90
add esp, 8
mov byte [esp + 0x3748], 0x2c
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Successfully_learned_streaming_into:__s
push ecx
call fcn.0046d760
add esp, 0xc
call fcn.00445740
pop ecx
pop ecx
mov ecx, dword [esp + 0x1d0]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [ebx - 0x10]
call fcn.0042201a
mov ecx, dword [esp + 0x28]
jmp 0x44e6f2
push ebx
call edi
push dword [0x52a4b0]
lea eax, [esp + 0x310]
push dword [esp + 0x20]
push eax
call fcn.00474710
add esp, 4
mov byte [esp + 0x3748], 0x2d
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.Could_not_learn_streaming:__s
jmp 0x447b89
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push str._RemoveSelf
push dword [eax + ecx*4]
call fcn.004bb834
mov ebx, eax
neg ebx
sbb ebx, ebx
add esp, 4
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
inc ebx
call fcn.004247e2
push 0x52df50
call fcn.0042a1f3
pop ecx
pop ecx
test al, al
jne 0x44e418
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x44741f
mov eax, dword [0x52dfac]
cmp dword [eax - 0xc], esi
jne 0x44e434
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
jmp 0x44760e
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
mov edi, 0x52dfac
push edi
call fcn.004247e2
call fcn.0046fe10
pop ecx
cmp eax, esi
jne 0x44e473
cmp ebx, esi
je 0x44e461
call fcn.00470930
test eax, eax
jne 0x4473d5
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
jmp 0x447647
cmp dword [esp + 0x48], esi
je 0x44e49a
push 3
push dword [0x52df5c]
push str.Do_you_want_to_remove_the_application_and_all_of_its_settings__files_
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
je 0x44e49a
push 0x14
pop esi
jmp 0x447581
push esi
lea eax, [esp + 0x138]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.AllUsers
mov dword [esp + 0x144], esi
call fcn.004247f7
push ecx
mov byte [esp + 0x3750], 0x17
mov eax, esp
mov dword [esp + 0x24], esp
push dword [0x52df5c]
push str.SoftwareVOS_s
push eax
call fcn.0046d760
add esp, 0xc
push SysReAllocStringLen
mov byte [esp + 0x3754], 4
call fcn.0046e4c0
add esp, 0x14
cmp eax, esi
je 0x44e54b
cmp dword [esp + 0x134], esi
je 0x44e54b
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.0046c580
test eax, eax
jne 0x44e530
call fcn.0046c5d0
test eax, eax
jne 0x4473d5
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x4473c6
call fcn.0046c750
test eax, eax
jne 0x44e54b
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x446349
push 0x52df50
call fcn.0043c1a5
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x52df5c]
push str.Removing__s
push eax
call fcn.0046d760
add esp, 0xc
call fcn.00444eda
pop ecx
lea ecx, [esp + 0x13c]
call fcn.00422487
push 0x4ecfa0
mov byte [esp + 0x3744], 0x18
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push 1
push 1
push 1
lea eax, [esp + 0x148]
push eax
push dword [0x52a4b0]
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x52dfa8
call fcn.004247e2
push ecx
mov byte [esp + 0x375c], 0x19
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x52dfb8
call fcn.004247e2
push ecx
mov byte [esp + 0x3760], 0x1a
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x52dfb4
call fcn.004247e2
push ecx
mov byte [esp + 0x3764], 0x1b
mov ecx, esp
mov dword [esp + 0x40], esp
push edi
call fcn.004247e2
push ecx
mov byte [esp + 0x3768], 0x1c
mov ecx, esp
mov dword [esp + 0xa0], esp
push 0x52df5c
call fcn.004247e2
mov byte [esp + 0x3768], 0x18
call fcn.00440b27
add esp, 0x24
mov ecx, esp
mov dword [esp + 0x14], esp
push edi
call fcn.004247e2
call fcn.0046fe50
pop ecx
cmp eax, esi
je 0x44e65f
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52df5c]
push str.Base_dir_could_not_be_emptied_for__s
jmp 0x44755c
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x52df5c]
push str.SoftwareVOS_s
push eax
call fcn.0046d760
add esp, 0xc
mov edx, SysReAllocStringLen
call fcn.0046e840
pop ecx
cmp eax, esi
je 0x44e69b
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
jmp 0x447958
cmp ebx, esi
je 0x44e6ac
call fcn.00470930
test eax, eax
jne 0x4473d5
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.__Removed_successfully
call fcn.004247f7
call fcn.00444eda
pop ecx
push dword [0x52a4b0]
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x52df5c]
push str.Application__s_removed_successfully
push eax
call fcn.0046d760
add esp, 0xc
call fcn.00445740
pop ecx
pop ecx
mov ecx, dword [esp + 0x13c]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x447581
cmp dword [0x52dbf0], esi
je 0x44e736
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
push dword [0x52df98]
push str.CLoaderApp:_waiting_for_LoaderCanQuit__AutoUpdate_s_
push eax
call fcn.0046d760
add esp, 0xc
call fcn.00444eaa
pop ecx
push 0xffffffffffffffff
push dword [0x52dbf0]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.CLoaderApp:_done._Bye_
call fcn.004247f7
call fcn.00444eaa
mov eax, dword [0x52a4c0]
pop ecx
cmp eax, 0xa2c2a
je 0x4473d5
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
push str.CLoaderApp:_ExecWait:_g_LoaderExitCode_d
push ecx
call fcn.0046d760
add esp, 0xc
call fcn.00444eaa
pop ecx
push dword [0x52a4c0]
jmp 0x4473d6