Function at 0x502b00
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Delete file
Get common file path
Get file attributes
Get file size
Move file
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5c4d33
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1a38
call fcn.00570340
mov eax, dword [0x61f138]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
lea eax, [ebp - 0x618]
mov dword [ebp - 0xb80], ebx
push eax
push 0
push 0
push 0x23
push 0
mov dword [ebp - 0xba0], ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea edi, [ebp - 0x618]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x502b62
push 0
push 0x80
push 2
push 0
push 2
push 0x40000000
lea eax, [ebp - 0x618]
mov ecx, 9
mov esi, str.Aeroadminconfig
rep movsd dword es:[edi], dword [esi]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xb64], eax
cmp eax, 0xffffffff
je 0x503f5c
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb48]
push 0
mov byte [ebp - 0xb50], 0
call fcn.00508940
push 2
lea eax, [ebx + 0x1e0]
mov dword [ebp - 4], 1
push eax
lea eax, [ebp - 0xcf8]
push eax
call fcn.00449590
mov al, byte [ebp - 0xcf4]
mov byte [ebp - 0xbf8], 4
mov byte [ebp - 0xbf0], al
push str.useProxy
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 2
call fcn.0050b6a0
mov esi, eax
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0xbf0]
mov cl, byte [esi]
mov byte [esi], 4
mov edx, dword [esi + 0xc]
mov byte [ebp - 0xbf8], cl
mov ecx, dword [esi + 8]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0xbec]
mov dword [ebp - 0xbf0], ecx
lea ecx, [ebp - 0xbf8]
mov dword [esi + 0xc], eax
mov dword [ebp - 0xbec], edx
call fcn.00505b50
push 2
lea eax, [ebx + 0x1e8]
push eax
lea eax, [ebp - 0x730]
push eax
call fcn.004496b0
mov byte [ebp - 4], 3
push 0x18
mov byte [ebp - 0xcd8], 3
call fcn.0056eed3
mov edi, eax
add esp, 4
lea eax, [ebp - 0xb39]
mov dword [ebp - 0xcfc], edi
mov dword [ebp - 0xd00], eax
lea eax, [ebp - 0x72c]
mov byte [ebp - 4], 4
push eax
mov ecx, edi
call fcn.00441720
mov dword [ebp - 0xcd0], edi
push str.proxy_ip
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 5
call fcn.0050b6a0
mov esi, eax
mov eax, dword [ebp - 0xccc]
mov cl, byte [esi]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0xcd8], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0xcd0], ecx
lea ecx, [ebp - 0xcd8]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0xccc], edx
call fcn.00505b50
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x718]
cmp edx, 0x10
jb 0x502d24
mov ecx, dword [ebp - 0x72c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x502d1a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x505141
push edx
push ecx
call fcn.0056eec5
add esp, 8
push 2
lea eax, [ebx + 0x1f0]
push eax
lea eax, [ebp - 0x714]
push eax
call fcn.004496b0
mov byte [ebp - 4], 6
push 0x18
mov byte [ebp - 0xcc8], 3
call fcn.0056eed3
mov edi, eax
add esp, 4
lea eax, [ebp - 0xb31]
mov dword [ebp - 0xd04], edi
mov dword [ebp - 0xd08], eax
lea eax, [ebp - 0x710]
mov byte [ebp - 4], 7
push eax
mov ecx, edi
call fcn.00441720
mov dword [ebp - 0xcc0], edi
push str.proxy_user
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 8
call fcn.0050b6a0
mov esi, eax
mov eax, dword [ebp - 0xcbc]
mov cl, byte [esi]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0xcc8], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0xcc0], ecx
lea ecx, [ebp - 0xcc8]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0xcbc], edx
call fcn.00505b50
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x6fc]
cmp edx, 0x10
jb 0x502e02
mov ecx, dword [ebp - 0x710]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x502df8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x505146
push edx
push ecx
call fcn.0056eec5
add esp, 8
push 2
lea eax, [ebx + 0x1f8]
push eax
lea eax, [ebp - 0x6f8]
push eax
call fcn.004496b0
mov byte [ebp - 4], 9
push 0x18
mov byte [ebp - 0xcb8], 3
call fcn.0056eed3
mov edi, eax
add esp, 4
lea eax, [ebp - 0xb75]
mov dword [ebp - 0xd0c], edi
mov dword [ebp - 0xd10], eax
lea eax, [ebp - 0x6f4]
mov byte [ebp - 4], 0xa
push eax
mov ecx, edi
call fcn.00441720
mov dword [ebp - 0xcb0], edi
push str.proxy_pass
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0xb
call fcn.0050b6a0
mov esi, eax
mov eax, dword [ebp - 0xcac]
mov cl, byte [esi]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0xcb8], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0xcb0], ecx
lea ecx, [ebp - 0xcb8]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0xcac], edx
call fcn.00505b50
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x6e0]
cmp edx, 0x10
jb 0x502ee0
mov ecx, dword [ebp - 0x6f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x502ed6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x50514b
push edx
push ecx
call fcn.0056eec5
add esp, 8
push 2
lea eax, [ebx + 0x200]
push eax
lea eax, [ebp - 0xd18]
push eax
call fcn.004498f0
push dword [ebp - 0xd14]
lea ecx, [ebp - 0xc58]
call fcn.00505df0
push str.proxy_port
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0xc
call fcn.0050b6a0
mov byte [ebp - 4], 1
mov esi, eax
movzx ecx, byte [ebp - 0xc58]
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0xc50]
mov byte [ebp - 0xc58], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0xc4c]
mov dword [esi + 0xc], eax
mov dword [ebp - 0xc50], ecx
lea ecx, [ebp - 0xc58]
mov dword [ebp - 0xc4c], edx
call fcn.00505b50
push 2
lea eax, [ebx + 0x208]
push eax
lea eax, [ebp - 0x6dc]
push eax
call fcn.004496b0
mov byte [ebp - 4], 0xd
push 0x18
mov byte [ebp - 0xca8], 3
call fcn.0056eed3
mov edi, eax
add esp, 4
lea eax, [ebp - 0xb76]
mov dword [ebp - 0xd1c], edi
mov dword [ebp - 0xd20], eax
lea eax, [ebp - 0x6d8]
mov byte [ebp - 4], 0xe
push eax
mov ecx, edi
call fcn.00441720
mov dword [ebp - 0xca0], edi
push str.sa_ip
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0xf
call fcn.0050b6a0
mov esi, eax
mov eax, dword [ebp - 0xc9c]
mov cl, byte [esi]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0xca8], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0xca0], ecx
lea ecx, [ebp - 0xca8]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0xc9c], edx
call fcn.00505b50
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x6c4]
cmp edx, 0x10
jb 0x50303e
mov ecx, dword [ebp - 0x6d8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x503034
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x505150
push edx
push ecx
call fcn.0056eec5
add esp, 8
push 2
lea eax, [ebx + 0x210]
push eax
lea eax, [ebp - 0xd28]
push eax
call fcn.004498f0
push dword [ebp - 0xd24]
lea ecx, [ebp - 0xc68]
call fcn.00505df0
push str.sa_port
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x10
call fcn.0050b6a0
movzx ecx, byte [ebp - 0xc68]
mov esi, eax
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0xc60]
mov byte [ebp - 0xc68], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0xc5c]
mov dword [esi + 0xc], eax
mov dword [ebp - 0xc60], ecx
lea ecx, [ebp - 0xc68]
mov dword [ebp - 0xc5c], edx
call fcn.00505b50
push 2
lea eax, [ebx + 0x218]
push eax
lea eax, [ebp - 0xd30]
push eax
call fcn.004498f0
push dword [ebp - 0xd2c]
lea ecx, [ebp - 0xc88]
call fcn.00505df0
push str.out_port
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x11
call fcn.0050b6a0
movzx ecx, byte [ebp - 0xc88]
mov esi, eax
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0xc80]
mov byte [ebp - 0xc88], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0xc7c]
mov dword [esi + 0xc], eax
mov dword [ebp - 0xc80], ecx
lea ecx, [ebp - 0xc88]
mov dword [ebp - 0xc7c], edx
call fcn.00505b50
push 2
lea eax, [ebx + 0x220]
push eax
lea eax, [ebp - 0xdc0]
push eax
call fcn.004498f0
push dword [ebp - 0xdbc]
lea ecx, [ebp - 0xc28]
call fcn.00505df0
push str.base_port
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x12
call fcn.0050b6a0
movzx ecx, byte [ebp - 0xc28]
mov esi, eax
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0xc20]
mov byte [ebp - 0xc28], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0xc1c]
mov dword [esi + 0xc], eax
mov dword [ebp - 0xc20], ecx
lea ecx, [ebp - 0xc28]
mov dword [ebp - 0xc1c], edx
call fcn.00505b50
push 2
lea eax, [ebx + 0x160]
push eax
lea eax, [ebp - 0xdb8]
push eax
call fcn.00449590
mov al, byte [ebp - 0xdb4]
mov byte [ebp - 0xc38], 4
mov byte [ebp - 0xc30], al
push str.min_cpu
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x13
call fcn.0050b6a0
mov esi, eax
mov eax, dword [ebp - 0xc30]
mov cl, byte [esi]
mov byte [esi], 4
mov edx, dword [esi + 0xc]
mov byte [ebp - 0xc38], cl
mov ecx, dword [esi + 8]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0xc2c]
mov dword [ebp - 0xc30], ecx
lea ecx, [ebp - 0xc38]
mov dword [esi + 0xc], eax
mov dword [ebp - 0xc2c], edx
call fcn.00505b50
push 2
lea eax, [ebx + 0x168]
push eax
lea eax, [ebp - 0xdb0]
push eax
call fcn.00449590
mov al, byte [ebp - 0xdac]
mov byte [ebp - 0xc78], 4
mov byte [ebp - 0xc70], al
push str.hide_back
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x14
call fcn.0050b6a0
mov esi, eax
mov eax, dword [ebp - 0xc70]
mov cl, byte [esi]
mov byte [esi], 4
mov edx, dword [esi + 0xc]
mov byte [ebp - 0xc78], cl
mov ecx, dword [esi + 8]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0xc6c]
mov dword [ebp - 0xc70], ecx
lea ecx, [ebp - 0xc78]
mov dword [esi + 0xc], eax
mov dword [ebp - 0xc6c], edx
call fcn.00505b50
push 2
lea eax, [ebx + 0x170]
push eax
lea eax, [ebp - 0xda8]
push eax
call fcn.00449590
mov al, byte [ebp - 0xda4]
mov byte [ebp - 0xc48], 4
mov byte [ebp - 0xc40], al
push str.cursor_noblink
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x15
call fcn.0050b6a0
mov esi, eax
mov cl, byte [esi]
mov byte [esi], 4
mov byte [ebp - 0xc48], cl
mov ecx, dword [esi + 8]
mov eax, dword [ebp - 0xc40]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0xc3c]
mov dword [ebp - 0xc40], ecx
lea ecx, [ebp - 0xc48]
mov dword [esi + 0xc], eax
mov dword [ebp - 0xc3c], edx
call fcn.00505b50
push 2
lea eax, [ebx + 0x178]
push eax
lea eax, [ebp - 0xda0]
push eax
call fcn.00449800
fld dword [ebp - 0xd9c]
push ecx
lea ecx, [ebp - 0xbc8]
fstp dword [esp]
call fcn.0050bf20
push str.frame_rate
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x16
call fcn.0050b6a0
movzx ecx, byte [ebp - 0xbc8]
mov esi, eax
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0xbc0]
mov byte [ebp - 0xbc8], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0xbbc]
mov dword [esi + 0xc], eax
mov dword [ebp - 0xbc0], ecx
lea ecx, [ebp - 0xbc8]
mov dword [ebp - 0xbbc], edx
call fcn.00505b50
push 2
lea eax, [ebx + 0x180]
push eax
lea eax, [ebp - 0xd98]
push eax
call fcn.00449590
mov al, byte [ebp - 0xd94]
mov byte [ebp - 0xbd8], 4
mov byte [ebp - 0xbd0], al
push str.videoCompressionAuto
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x17
call fcn.0050b6a0
mov esi, eax
mov eax, dword [ebp - 0xbd0]
mov cl, byte [esi]
mov byte [esi], 4
mov edx, dword [esi + 0xc]
mov byte [ebp - 0xbd8], cl
mov ecx, dword [esi + 8]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0xbcc]
mov dword [ebp - 0xbd0], ecx
lea ecx, [ebp - 0xbd8]
mov dword [esi + 0xc], eax
mov dword [ebp - 0xbcc], edx
call fcn.00505b50
push 2
lea eax, [ebx + 0x188]
push eax
lea eax, [ebp - 0xd90]
push eax
call fcn.00449800
fld dword [ebp - 0xd8c]
push ecx
lea ecx, [ebp - 0xbe8]
fstp dword [esp]
call fcn.0050bf20
mov byte [ebp - 4], 0x18
push str.video_quality
lea ecx, [ebp - 0xb50]
call fcn.0050b6a0
movzx ecx, byte [ebp - 0xbe8]
mov esi, eax
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0xbe0]
mov byte [ebp - 0xbe8], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0xbdc]
mov dword [esi + 0xc], eax
mov dword [ebp - 0xbe0], ecx
lea ecx, [ebp - 0xbe8]
mov dword [ebp - 0xbdc], edx
call fcn.00505b50
push 2
lea eax, [ebx + 0x1c0]
push eax
lea eax, [ebp - 0xd88]
push eax
call fcn.004498f0
push dword [ebp - 0xd84]
lea ecx, [ebp - 0xc08]
call fcn.00505df0
push str.inputDevice
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x19
call fcn.0050b6a0
movzx ecx, byte [ebp - 0xc08]
mov esi, eax
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0xc00]
mov byte [ebp - 0xc08], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0xbfc]
mov dword [esi + 0xc], eax
mov dword [ebp - 0xc00], ecx
lea ecx, [ebp - 0xc08]
mov dword [ebp - 0xbfc], edx
call fcn.00505b50
push 2
lea eax, [ebx + 0x1c8]
push eax
lea eax, [ebp - 0xd68]
push eax
call fcn.004498f0
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0xb38], esp
push dword [ebp - 0xd64]
call fcn.00505df0
push str.outputDevice
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x1a
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.00505c80
push 2
lea eax, [ebx + 0x1d0]
push eax
lea eax, [ebp - 0xd80]
push eax
call fcn.00449800
fld dword [ebp - 0xd7c]
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0xb38], esp
push ecx
fstp dword [esp]
call fcn.0050bf20
mov byte [ebp - 4], 0x1b
push str.inputLevel
lea ecx, [ebp - 0xb50]
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.00505c80
push 2
lea eax, [ebx + 0x1d8]
push eax
lea eax, [ebp - 0xd78]
push eax
call fcn.00449800
fld dword [ebp - 0xd74]
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0xb38], esp
push ecx
fstp dword [esp]
call fcn.0050bf20
push str.outputLevel
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x1c
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.00505c80
push 2
lea eax, [ebx + 0x130]
push eax
lea eax, [ebp - 0xd70]
push eax
call fcn.00449590
mov al, byte [ebp - 0xd6c]
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0xb38], esp
mov byte [ecx], 4
mov byte [ecx + 8], al
push str.minimize
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x1d
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.00505c80
push 2
lea eax, [ebx + 0x140]
push eax
lea eax, [ebp - 0xd60]
push eax
call fcn.00449590
mov al, byte [ebp - 0xd5c]
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0xb38], esp
mov byte [ecx], 4
mov byte [ecx + 8], al
push str.sess_notif_minimize
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x1e
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.00505c80
push 2
lea eax, [ebx + 0x138]
push eax
lea eax, [ebp - 0xd40]
push eax
call fcn.00449590
mov al, byte [ebp - 0xd3c]
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0xb38], esp
mov byte [ecx], 4
mov byte [ecx + 8], al
mov byte [ebp - 4], 0x1f
push str.as_admin
lea ecx, [ebp - 0xb50]
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.00505c80
push 2
lea eax, [ebx + 0x150]
push eax
lea eax, [ebp - 0x7c8]
push eax
call fcn.004496b0
sub esp, 0x10
mov byte [ebp - 4], 0x20
mov edi, esp
mov dword [ebp - 0xb38], esp
push 0x18
mov byte [edi], 3
call fcn.0044b8f0
mov esi, eax
add esp, 4
lea eax, [ebp - 0xb77]
mov dword [ebp - 0xd34], esi
mov dword [ebp - 0xd38], eax
lea eax, [ebp - 0x7c4]
mov byte [ebp - 4], 0x21
push eax
mov ecx, esi
call fcn.00441720
mov dword [edi + 8], esi
push str.language
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x22
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 0x20
call fcn.00505c80
lea ecx, [ebp - 0x7c4]
call fcn.004414e0
push 2
lea eax, [ebx + 0x238]
push eax
lea eax, [ebp - 0xd58]
push eax
call fcn.00449590
mov al, byte [ebp - 0xd54]
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0xb38], esp
mov byte [ecx], 4
mov byte [ecx + 8], al
push str.sims
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x23
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.00505c80
push 2
lea eax, [ebx + 0x268]
push eax
lea eax, [ebp - 0xd50]
push eax
call fcn.00449590
mov al, byte [ebp - 0xd4c]
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0xb38], esp
mov byte [ecx], 4
mov byte [ecx + 8], al
push str.hide_access_rights
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x24
call fcn.0050b6a0
mov byte [ebp - 4], 1
mov ecx, eax
call fcn.00505c80
push 2
lea eax, [ebx + 0x278]
push eax
lea eax, [ebp - 0xd48]
push eax
call fcn.00449590
mov al, byte [ebp - 0xd44]
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0xb38], esp
mov byte [ecx], 4
mov byte [ecx + 8], al
push str.icon
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x25
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.00505c80
push 2
lea eax, [ebx + 0x240]
push eax
lea eax, [ebp - 0x7ac]
push eax
call fcn.00449440
lea edx, [ebp - 0x7a8]
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0xaa0]
call fcn.004c61c0
sub esp, 0x10
mov byte [ebp - 4], 0x27
mov ecx, esp
mov dword [ebp - 0xb38], esp
push eax
call fcn.00505e10
push str.sims_admin_email
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x28
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 0x27
call fcn.00505c80
lea ecx, [ebp - 0xaa0]
call fcn.004414e0
lea ecx, [ebp - 0x7a8]
mov byte [ebp - 4], 1
call fcn.00445c30
push 2
lea eax, [ebx + 0x248]
push eax
lea eax, [ebp - 0x8a8]
push eax
call fcn.00449440
lea edx, [ebp - 0x8a4]
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xab8]
call fcn.004c61c0
sub esp, 0x10
mov byte [ebp - 4], 0x2a
mov ecx, esp
mov dword [ebp - 0xb38], esp
push eax
call fcn.00505e10
push str.sims_client_email
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x2b
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 0x2a
call fcn.00505c80
lea ecx, [ebp - 0xab8]
call fcn.004414e0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x8a4]
call fcn.00445c30
push 2
lea eax, [ebx + 0x250]
push eax
lea eax, [ebp - 0x88c]
push eax
call fcn.00449440
lea edx, [ebp - 0x888]
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0xad0]
call fcn.004c61c0
sub esp, 0x10
mov byte [ebp - 4], 0x2d
mov ecx, esp
mov dword [ebp - 0xb38], esp
push eax
call fcn.00505e10
push str.sims_text
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x2e
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 0x2d
call fcn.00505c80
lea ecx, [ebp - 0xad0]
call fcn.004414e0
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 1
call fcn.00445c30
push 2
lea eax, [ebx + 0x258]
push eax
lea eax, [ebp - 0x870]
push eax
call fcn.00449440
lea edx, [ebp - 0x86c]
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0xae8]
call fcn.004c61c0
sub esp, 0x10
mov byte [ebp - 4], 0x30
mov ecx, esp
mov dword [ebp - 0xb38], esp
push eax
call fcn.00505e10
push str.contacts_folder
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x31
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 0x30
call fcn.00505c80
lea ecx, [ebp - 0xae8]
call fcn.004414e0
lea ecx, [ebp - 0x86c]
mov byte [ebp - 4], 1
call fcn.00445c30
push 2
lea eax, [ebx + 0x260]
push eax
lea eax, [ebp - 0x854]
push eax
call fcn.00449440
lea edx, [ebp - 0x850]
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xb00]
call fcn.004c61c0
sub esp, 0x10
mov byte [ebp - 4], 0x33
mov ecx, esp
mov dword [ebp - 0xb38], esp
push eax
call fcn.00505e10
push str.sims_lic_key
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x34
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 0x33
call fcn.00505c80
lea ecx, [ebp - 0xb00]
call fcn.004414e0
lea ecx, [ebp - 0x850]
mov byte [ebp - 4], 1
call fcn.00445c30
push 2
lea eax, [ebx + 0x128]
push eax
lea eax, [ebp - 0x838]
push eax
call fcn.00449440
lea edx, [ebp - 0x834]
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xb18]
call fcn.004c61c0
sub esp, 0x10
mov byte [ebp - 4], 0x36
mov ecx, esp
mov dword [ebp - 0xb38], esp
push eax
call fcn.00505e10
push str.fm_path
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x37
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 0x36
call fcn.00505c80
lea ecx, [ebp - 0xb18]
call fcn.004414e0
lea ecx, [ebp - 0x834]
mov byte [ebp - 4], 1
call fcn.00445c30
push 2
lea eax, [ebx + 0x158]
push eax
lea eax, [ebp - 0x81c]
push eax
call fcn.00449440
lea edx, [ebp - 0x818]
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0xb30]
call fcn.004c61c0
sub esp, 0x10
mov byte [ebp - 4], 0x39
mov ecx, esp
mov dword [ebp - 0xb38], esp
push eax
call fcn.00505e10
push str.contacts_folder
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x3a
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 0x39
call fcn.00505c80
lea ecx, [ebp - 0xb30]
call fcn.004414e0
lea ecx, [ebp - 0x818]
mov byte [ebp - 4], 1
call fcn.00445c30
push 2
lea eax, [ebx + 0x190]
push eax
lea eax, [ebp - 0x800]
push eax
call fcn.00449440
lea edx, [ebp - 0x7fc]
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0xa70]
call fcn.004c61c0
sub esp, 0x10
mov byte [ebp - 4], 0x3c
mov ecx, esp
mov dword [ebp - 0xb38], esp
push eax
call fcn.00505e10
push str.screen_recorder_path
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x3d
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 0x3c
call fcn.00505c80
lea ecx, [ebp - 0xa70]
call fcn.004414e0
lea ecx, [ebp - 0x7fc]
mov byte [ebp - 4], 1
call fcn.00445c30
push 2
lea eax, [ebx + 0x198]
push eax
lea eax, [ebp - 0x7e4]
push eax
call fcn.00449440
lea edx, [ebp - 0x7e0]
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x8c0]
call fcn.004c61c0
sub esp, 0x10
mov byte [ebp - 4], 0x3f
mov ecx, esp
mov dword [ebp - 0xb38], esp
push eax
call fcn.00505e10
push str.screen_recorder_videos_path
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x40
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 0x3f
call fcn.00505c80
lea ecx, [ebp - 0x8c0]
call fcn.004414e0
lea ecx, [ebp - 0x7e0]
call fcn.00445c30
push 2
lea eax, [ebx + 0x1a0]
push eax
lea eax, [ebp - 0xde4]
push eax
call fcn.00449590
mov al, byte [ebp - 0xde0]
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0xb38], esp
mov byte [ecx], 4
mov byte [ecx + 8], al
push str.screen_recorder_autostart
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x41
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.00505c80
push 2
lea eax, [ebx + 0x1a8]
push eax
lea eax, [ebp - 0xddc]
push eax
call fcn.00449590
mov al, byte [ebp - 0xdd8]
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0xb38], esp
mov byte [ecx], 4
mov byte [ecx + 8], al
push str.screen_recorder_show_btnrec_mw
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x42
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.00505c80
push 2
lea eax, [ebx + 0x1b0]
push eax
lea eax, [ebp - 0xdd0]
push eax
call fcn.00449800
fld dword [ebp - 0xdcc]
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0xb38], esp
push ecx
fstp dword [esp]
call fcn.0050bf20
push str.screen_recorder_frame_rate
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x43
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.00505c80
push 2
lea eax, [ebx + 0x1b8]
push eax
lea eax, [ebp - 0xdc8]
push eax
call fcn.004498f0
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0xb38], esp
push dword [ebp - 0xdc4]
call fcn.00505df0
push str.screen_recorder_quality
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x44
call fcn.0050b6a0
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.00505c80
push ecx
lea eax, [ebp - 0x6a8]
push eax
lea ecx, [ebp - 0xb50]
call fcn.005059b0
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x660]
push 2
push 0x5f1c74
mov dword [ebp - 0x650], 0
mov dword [ebp - 0x64c], 0xf
mov byte [ebp - 0x660], 0
call fcn.004462c0
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x678]
push 1
push 0x5f19a0
mov dword [ebp - 0x668], 0
mov dword [ebp - 0x664], 0xf
mov byte [ebp - 0x678], 0
call fcn.004462c0
mov byte [ebp - 4], 0x47
lea eax, [ebp - 0x6a8]
push eax
lea ecx, [ebp - 0xcf0]
call fcn.00441720
mov byte [ebp - 4], 0x48
xor esi, esi
mov edi, dword [ebp - 0x650]
cmp dword [ebp - 0x664], 0x10
lea eax, [ebp - 0x678]
push dword [ebp - 0x668]
cmovae eax, dword [ebp - 0x678]
lea ecx, [ebp - 0xcf0]
cmp dword [ebp - 0xcdc], 0x10
mov edx, dword [ebp - 0xce0]
cmovae ecx, dword [ebp - 0xcf0]
push eax
push esi
call fcn.004968c0
mov esi, eax
add esp, 0xc
cmp esi, 0xffffffff
je 0x503eaa
cmp dword [ebp - 0x64c], 0x10
lea ecx, [ebp - 0x660]
push edi
cmovae ecx, dword [ebp - 0x660]
push ecx
push dword [ebp - 0x668]
lea ecx, [ebp - 0xcf0]
push esi
call fcn.004762c0
mov edi, dword [ebp - 0x650]
add esi, edi
jmp 0x503e33
lea eax, [ebp - 0xcf0]
push eax
lea ecx, [ebp - 0x790]
call fcn.00441530
lea ecx, [ebp - 0xcf0]
call fcn.004414e0
lea eax, [ebp - 0x790]
push eax
lea ecx, [ebp - 0x6a8]
call fcn.004483b0
lea ecx, [ebp - 0x790]
call fcn.004414e0
lea ecx, [ebp - 0x678]
call fcn.004414e0
lea ecx, [ebp - 0x660]
call fcn.004414e0
cmp dword [ebp - 0x694], 0x10
lea ecx, [ebp - 0xb5c]
mov esi, dword [ebp - 0xb64]
lea eax, [ebp - 0x6a8]
cmovae eax, dword [ebp - 0x6a8]
push 0
push ecx
push dword [ebp - 0x698]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x618]
call fcn.004c2ae0
lea ecx, [ebp - 0x6a8]
call fcn.004414e0
lea ecx, [ebp - 0xb50]
mov dword [ebp - 4], 0xffffffff
call fcn.00505b50
jmp 0x503fd9
sub esp, 8
lea ecx, [ebp - 0x1998]
call fcn.00442390
mov edx, str.File_cant_be_accessed:
mov dword [ebp - 4], 0x49
lea ecx, [ebp - 0x1988]
call fcn.0044a500
lea edx, [ebp - 0x618]
mov ecx, eax
call fcn.0044a500
lea eax, [ebp - 0x778]
push eax
lea ecx, [ebp - 0x1980]
call fcn.004466f0
push 0x401
mov edx, str.settings.cpp
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x778]
call fcn.004c37b0
add esp, 4
lea ecx, [ebp - 0x778]
call fcn.00445c30
lea ecx, [ebp - 0x1998]
mov dword [ebp - 4], 0xffffffff
call fcn.0043ae30
mov al, byte [ebx + 0x120]
test al, al
je 0x505125
cmp byte [0x6c4e42], 0
lea eax, [ebp - 0x218]
je 0x504067
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push 0x5c
push eax
call fcn.00585f4e
xor ecx, ecx
add esp, 8
mov word [eax + 2], cx
lea ecx, [ebp - 0x218]
add ecx, 0xfffffffe
jmp 0x504030
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x504030
mov eax, dword [str.guid.bin]
mov dword [ecx], eax
mov eax, dword [0x5f6830]
mov dword [ecx + 4], eax
mov eax, dword [0x5f6834]
mov dword [ecx + 8], eax
mov eax, dword [0x5f6838]
mov dword [ecx + 0xc], eax
mov ax, word [0x5f683c]
mov word [ecx + 0x10], ax
jmp 0x504098
push eax
push 0
push 0
push 0x23
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea edi, [ebp - 0x218]
add edi, 0xfffffffe
nop
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x504080
mov ecx, 0xa
mov esi, str.Aeroadminguid.bin
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xbb8], 0
mov dword [ebp - 0xbb4], 0
mov dword [ebp - 0xbb0], 0
mov dword [ebp - 4], 0x4b
mov dword [ebp - 0x6b0], 0
mov dword [ebp - 0x6ac], 0xf
mov byte [ebp - 0x6c0], 0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x4c
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x5040f9
mov byte [ebp - 0xb31], 1
test al, 0x10
je 0x504100
mov byte [ebp - 0xb31], 0
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x5043be
push 0
push edi
mov byte [ebp - 0xb31], 1
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
mov dword [ebp - 0xb5c], esi
cmp esi, 0x14
jb 0x50434a
mov dword [ebp - 0xb9c], 0
mov dword [ebp - 0xb98], 0
mov dword [ebp - 0xb94], 0
mov dword [ebp - 0xb90], 0
lea eax, [ebp - 0xb98]
mov byte [ebp - 4], 0x4d
push eax
push esi
mov ecx, eax
call fcn.00461bf0
mov eax, dword [ebp - 0xb98]
lea ecx, [ebp - 0xb7c]
add eax, dword [ebp - 0xb9c]
push 0
push ecx
push esi
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push edi
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp esi, 1
jne 0x5042d4
mov eax, dword [ebp - 0xb5c]
cmp dword [ebp - 0xb7c], eax
jne 0x5042d4
push 4
lea eax, [ebp - 0xb68]
mov byte [ebp - 4], 0x4e
push eax
lea ecx, [ebp - 0xb9c]
call fcn.004fbaa0
push 4
lea eax, [ebp - 0xb60]
push eax
lea ecx, [ebp - 0xb9c]
call fcn.004fbaa0
mov esi, dword [ebp - 0xb60]
test esi, esi
je 0x50421f
lea eax, [ebp - 0xbb8]
push eax
push esi
mov ecx, eax
call fcn.00461bf0
push esi
push dword [ebp - 0xbb8]
lea ecx, [ebp - 0xb9c]
call fcn.004fbaa0
lea edx, [ebp - 0x6c0]
lea ecx, [ebp - 0xb9c]
call fcn.004fbd70
mov dword [ebp - 4], 0x4d
lea ecx, [ebp - 0xb98]
mov byte [ebp - 4], 0x4c
call fcn.0043afb0
jmp 0x504489
sub esp, 8
lea ecx, [ebp - 0x1a48]
call fcn.00443510
mov edx, str.guid.bin_read_failed
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x1a38]
call fcn.00449a40
lea eax, [ebp - 0x8f0]
push eax
lea ecx, [ebp - 0x1a48]
call fcn.004433d0
push 0x431
mov edx, str.settings.cpp
mov byte [ebp - 4], 0x53
mov ecx, eax
call fcn.004c2da0
add esp, 4
lea ecx, [ebp - 0x8f0]
call fcn.004414e0
lea ecx, [ebp - 0x1a48]
call fcn.0043aef0
lea ecx, [ebp - 0xb98]
mov byte [ebp - 4], 0x4c
call fcn.0043afb0
jmp 0x504489
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
sub esp, 8
lea ecx, [ebp - 0xe98]
call fcn.00443510
mov edx, str.guid.bin_is_corrupted
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0xe88]
call fcn.00449a40
lea eax, [ebp - 0x908]
push eax
lea ecx, [ebp - 0xe98]
call fcn.004433d0
push 0x436
mov edx, str.settings.cpp
mov byte [ebp - 4], 0x55
mov ecx, eax
call fcn.004c2da0
add esp, 4
lea ecx, [ebp - 0x908]
call fcn.004414e0
lea ecx, [ebp - 0xe98]
mov byte [ebp - 4], 0x4c
call fcn.0043aef0
jmp 0x50448f
sub esp, 8
cmp byte [ebp - 0xb31], 0
je 0x504426
lea ecx, [ebp - 0xf48]
call fcn.00443510
mov edx, str.guid.bin_exists_but_not_accessible
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0xf38]
call fcn.00449a40
lea eax, [ebp - 0x920]
push eax
lea ecx, [ebp - 0xf48]
call fcn.004433d0
push 0x43b
mov edx, str.settings.cpp
mov byte [ebp - 4], 0x57
mov ecx, eax
call fcn.004c2da0
add esp, 4
lea ecx, [ebp - 0x920]
call fcn.004414e0
lea ecx, [ebp - 0xf48]
jmp 0x504480
lea ecx, [ebp - 0xff8]
call fcn.00443510
mov edx, str.guid.bin_is_missing
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0xfe8]
call fcn.00449a40
lea eax, [ebp - 0x938]
push eax
lea ecx, [ebp - 0xff8]
call fcn.004433d0
push 0x43e
mov edx, str.settings.cpp
mov byte [ebp - 4], 0x59
mov ecx, eax
call fcn.004c2da0
add esp, 4
lea ecx, [ebp - 0x938]
call fcn.004414e0
lea ecx, [ebp - 0xff8]
mov byte [ebp - 4], 0x4c
call fcn.0043aef0
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
lea esi, [ebx + 0xf8]
mov edx, esi
mov dword [ebp - 0xb5c], esi
lea ecx, [ebp - 0xbb8]
call fcn.0050bf70
test al, al
je 0x504edf
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x630]
call fcn.00441310
mov byte [ebp - 4], 0x5a
cmp byte [ebp - 0xb31], 0
je 0x50450d
call fcn.005988f5
mov edx, eax
lea ecx, [ebp - 0x950]
call fcn.00436a50
mov byte [ebp - 4], 0x5b
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x5044ef
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x630]
call fcn.00448340
lea ecx, [ebp - 0x950]
mov byte [ebp - 4], 0x5a
call fcn.00445c30
cmp dword [ebp - 0x61c], 8
lea eax, [ebp - 0x630]
push 0
cmovae eax, dword [ebp - 0x630]
push 0x80
push 2
push 0
push 0
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xb58], eax
cmp eax, 0xffffffff
jne 0x5045f3
sub esp, 8
lea ecx, [ebp - 0x10a8]
call fcn.00442390
mov edx, str.Cant_create_file_for_writing:
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x1098]
call fcn.0044a500
cmp dword [ebp - 0x61c], 8
lea edx, [ebp - 0x630]
push dword [ebp - 0x620]
cmovae edx, dword [ebp - 0x630]
mov ecx, eax
call fcn.0044d4b0
add esp, 4
lea eax, [ebp - 0x760]
lea ecx, [ebp - 0x1090]
push eax
call fcn.004466f0
push 0x44c
mov edx, str.settings.cpp
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x760]
call fcn.004c37b0
add esp, 4
lea ecx, [ebp - 0x760]
call fcn.00445c30
lea ecx, [ebp - 0x10a8]
call fcn.0043ae30
cmp dword [ebp - 0x61c], 8
lea eax, [ebp - 0x630]
cmovae eax, dword [ebp - 0x630]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x504ed4
mov dword [ebp - 0xb8c], 0
mov dword [ebp - 0xb88], 0
mov dword [ebp - 0xb84], 0
lea ecx, [ebx + 0x11c]
mov byte [ebp - 4], 0x5e
push dword [ebp - 0xb68]
lea eax, [ecx + 4]
push eax
push ecx
push 0
lea ecx, [ebp - 0xb8c]
call fcn.00465ce0
mov eax, dword [esi + 4]
lea ecx, [ebp - 0xb8c]
sub eax, dword [esi]
push dword [ebp - 0xb68]
mov dword [ebp - 0xb54], eax
lea eax, [ebp - 0xb50]
push eax
lea eax, [ebp - 0xb54]
mov dword [ebp - 0xb7c], esi
push eax
push dword [ebp - 0xb88]
call fcn.00465ce0
mov eax, dword [ebp - 0xb54]
test eax, eax
je 0x504690
mov ecx, dword [esi]
add eax, ecx
push dword [ebp - 0xb68]
push eax
push ecx
push dword [ebp - 0xb88]
lea ecx, [ebp - 0xb8c]
call fcn.00465ce0
lea edx, [ebx + 0x104]
lea ecx, [ebp - 0xb8c]
call fcn.004fbaf0
mov eax, dword [ebp - 0xb8c]
lea edx, [ebp - 0xc0c]
mov ecx, dword [ebp - 0xb88]
push 0
push edx
sub ecx, eax
push ecx
push eax
push dword [ebp - 0xb58]
mov dword [ebp - 0xb60], ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
jne 0x5046e6
mov eax, dword [ebp - 0xb60]
mov byte [ebp - 0xb39], 1
cmp dword [ebp - 0xc0c], eax
je 0x5046ed
mov byte [ebp - 0xb39], 0
push dword [ebp - 0xb58]
call edi
cmp byte [ebp - 0xb39], 0
je 0x504e4c
cmp dword [ebp - 0x61c], 8
lea eax, [ebp - 0x630]
push 0
cmovae eax, dword [ebp - 0x630]
push 0x80
push 3
push 0
push 1
push SysReAllocString
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xb54], eax
cmp eax, 0xffffffff
je 0x504e4c
mov dword [ebp - 0xbac], 0
mov dword [ebp - 0xba8], 0
mov dword [ebp - 0xba4], 0
mov dword [ebp - 0x680], 0
mov dword [ebp - 0x67c], 0xf
mov byte [ebp - 0x690], 0
push 0
push eax
mov byte [ebp - 4], 0x62
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edx, eax
mov dword [ebp - 0xb60], edx
test edx, edx
jle 0x50497b
lea ecx, [ebp - 0xc98]
call fcn.004fb9f0
lea eax, [ebp - 0xc94]
mov byte [ebp - 4], 0x63
push eax
push edx
mov ecx, eax
call fcn.00461bf0
mov eax, dword [ebp - 0xc94]
lea ecx, [ebp - 0xc10]
add eax, dword [ebp - 0xc98]
push 0
push ecx
push dword [ebp - 0xb60]
push eax
push dword [ebp - 0xb54]
call dword [sym.imp.KERNEL32.dll_ReadFile]
push dword [ebp - 0xb54]
mov esi, eax
call edi
cmp esi, 1
jne 0x504902
cmp dword [ebp - 0xc10], 0
jbe 0x504902
lea edx, [ebp - 0xb38]
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0xc98]
call fcn.00449400
mov edi, eax
lea edx, [ebp - 0xc14]
mov ecx, edi
call fcn.00449400
mov esi, dword [ebp - 0xc14]
test esi, esi
je 0x504845
lea eax, [ebp - 0xbac]
push eax
push esi
mov ecx, eax
call fcn.00461bf0
push esi
push dword [ebp - 0xbac]
mov ecx, edi
call fcn.004fbaa0
lea edx, [ebp - 0x690]
mov ecx, edi
call fcn.004fbd70
mov dword [ebp - 4], 0x63
lea ecx, [ebp - 0xc94]
mov esi, dword [ebp - 0xb5c]
mov byte [ebp - 4], 0x62
call fcn.0043afb0
jmp 0x5049e9
sub esp, 8
lea ecx, [ebp - 0x1208]
call fcn.00443510
mov edx, str.guid_temp.bin_read_failed
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0x11f8]
call fcn.00449a40
lea eax, [ebp - 0x980]
push eax
lea ecx, [ebp - 0x1208]
call fcn.004433d0
push 0x475
mov edx, str.settings.cpp
mov byte [ebp - 4], 0x69
mov ecx, eax
call fcn.004c2da0
add esp, 4
lea ecx, [ebp - 0x980]
call fcn.004414e0
lea ecx, [ebp - 0x1208]
call fcn.0043aef0
mov esi, dword [ebp - 0xb5c]
lea ecx, [ebp - 0xc94]
mov byte [ebp - 4], 0x62
call fcn.0043afb0
jmp 0x5049e9
push dword [ebp - 0xb54]
call edi
sub esp, 8
lea ecx, [ebp - 0x12b8]
call fcn.00443510
mov edx, str.guid_temp.bin_size_is_zero
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x12a8]
call fcn.00449a40
lea eax, [ebp - 0x998]
push eax
lea ecx, [ebp - 0x12b8]
call fcn.004433d0
push 0x47a
mov edx, str.settings.cpp
mov byte [ebp - 4], 0x6b
mov ecx, eax
call fcn.004c2da0
add esp, 4
lea ecx, [ebp - 0x998]
call fcn.004414e0
lea ecx, [ebp - 0x12b8]
mov byte [ebp - 4], 0x62
call fcn.0043aef0
mov edx, esi
lea ecx, [ebp - 0xbac]
call fcn.0050bf70
test al, al
jne 0x504dae
mov eax, dword [ebp - 0xb38]
cmp eax, dword [ebx + 0x11c]
jne 0x504dae
cmp dword [ebx + 0x118], 0x10
lea edx, [ebx + 0x104]
jb 0x504a25
mov edx, dword [ebx + 0x104]
push dword [ebx + 0x114]
cmp dword [ebp - 0x67c], 0x10
lea ecx, [ebp - 0x690]
push edx
cmovae ecx, dword [ebp - 0x690]
mov edx, dword [ebp - 0x680]
call fcn.00456420
add esp, 8
test al, al
je 0x504dae
cmp byte [ebp - 0xb31], 0
je 0x504e34
call fcn.005988f5
mov edx, eax
lea ecx, [ebp - 0x9c8]
call fcn.00436a50
mov esi, eax
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x6e
push eax
lea ecx, [ebp - 0x9b0]
call fcn.00441310
push esi
mov edx, eax
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x648]
call fcn.0044a330
add esp, 4
lea ecx, [ebp - 0x9b0]
call fcn.00445c30
lea ecx, [ebp - 0x9c8]
mov byte [ebp - 4], 0x72
call fcn.00445c30
cmp dword [ebp - 0x634], 8
lea eax, [ebp - 0x648]
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileW]
cmovae eax, dword [ebp - 0x648]
push eax
lea eax, [ebp - 0x218]
push eax
call esi
cmp eax, 1
je 0x504b76
sub esp, 8
lea ecx, [ebp - 0x1368]
call fcn.00443510
mov edx, str.cant_rename_guid.bin_into_guid_temp.bin
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0x1358]
call fcn.00449a40
lea eax, [ebp - 0x9e0]
push eax
lea ecx, [ebp - 0x1368]
call fcn.004433d0
push 0x48a
mov edx, str.settings.cpp
mov byte [ebp - 4], 0x74
mov ecx, eax
call fcn.004c2da0
add esp, 4
lea ecx, [ebp - 0x9e0]
call fcn.004414e0
lea ecx, [ebp - 0x1368]
call fcn.0043aef0
cmp dword [ebp - 0x61c], 8
lea eax, [ebp - 0x630]
cmovae eax, dword [ebp - 0x630]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x648]
call fcn.00445c30
jmp 0x504e34
cmp dword [ebp - 0x61c], 8
lea ecx, [ebp - 0x218]
lea eax, [ebp - 0x630]
cmovae eax, dword [ebp - 0x630]
push ecx
push eax
call esi
cmp eax, 1
lea eax, [ebp - 0x648]
je 0x504cbc
cmp dword [ebp - 0x634], 8
lea ecx, [ebp - 0x218]
push ecx
cmovae eax, dword [ebp - 0x648]
push eax
call esi
cmp eax, 1
je 0x504c26
sub esp, 8
lea ecx, [ebp - 0x1418]
call fcn.00443510
mov edx, str.Cant_rename_guid_temp.bin_back_into_guid.bin
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x1408]
call fcn.00449a40
lea eax, [ebp - 0x9f8]
push eax
lea ecx, [ebp - 0x1418]
call fcn.004433d0
push 0x493
mov edx, str.settings.cpp
mov byte [ebp - 4], 0x76
mov ecx, eax
call fcn.004c2da0
add esp, 4
lea ecx, [ebp - 0x9f8]
call fcn.004414e0
lea ecx, [ebp - 0x1418]
mov byte [ebp - 4], 0x72
call fcn.0043aef0
cmp dword [ebp - 0x61c], 8
lea eax, [ebp - 0x630]
cmovae eax, dword [ebp - 0x630]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp eax, 1
je 0x504d9e
sub esp, 8
lea ecx, [ebp - 0x14c8]
call fcn.00443510
mov edx, str.Cant_delete_new_guid_file
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0x14b8]
call fcn.00449a40
lea eax, [ebp - 0xa10]
push eax
lea ecx, [ebp - 0x14c8]
call fcn.004433d0
push 0x497
mov edx, str.settings.cpp
mov byte [ebp - 4], 0x78
mov ecx, eax
call fcn.004c2da0
add esp, 4
lea ecx, [ebp - 0xa10]
call fcn.004414e0
lea ecx, [ebp - 0x14c8]
call fcn.0043aef0
lea ecx, [ebp - 0x648]
call fcn.00445c30
jmp 0x504e34
cmp dword [ebp - 0x634], 8
cmovae eax, dword [ebp - 0x648]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp eax, 1
je 0x504d3c
sub esp, 8
lea ecx, [ebp - 0x1578]
call fcn.00443510
mov edx, str.Cant_delete_temp_guid_file
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0x1568]
call fcn.00449a40
lea eax, [ebp - 0xa28]
push eax
lea ecx, [ebp - 0x1578]
call fcn.004433d0
push 0x49d
mov edx, str.settings.cpp
mov byte [ebp - 4], 0x7a
mov ecx, eax
call fcn.004c2da0
add esp, 4
lea ecx, [ebp - 0xa28]
call fcn.004414e0
lea ecx, [ebp - 0x1578]
mov byte [ebp - 4], 0x72
call fcn.0043aef0
sub esp, 8
lea ecx, [ebp - 0x1628]
call fcn.00443510
mov edx, str.guid.bin_is_written_correctly
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0x1618]
call fcn.00449a40
lea eax, [ebp - 0xa40]
push eax
lea ecx, [ebp - 0x1628]
call fcn.004433d0
push 0x49f
mov edx, str.settings.cpp
mov byte [ebp - 4], 0x7c
mov ecx, eax
call fcn.004c2da0
add esp, 4
lea ecx, [ebp - 0xa40]
call fcn.004414e0
lea ecx, [ebp - 0x1628]
call fcn.0043aef0
lea ecx, [ebp - 0x648]
call fcn.00445c30
jmp 0x504e34
sub esp, 8
lea ecx, [ebp - 0x16d8]
call fcn.00443510
mov edx, str.guid.bin_red_incorrectly
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x16c8]
call fcn.00449a40
lea eax, [ebp - 0xa88]
push eax
lea ecx, [ebp - 0x16d8]
call fcn.004433d0
push 0x47e
mov edx, str.settings.cpp
mov byte [ebp - 4], 0x6d
mov ecx, eax
call fcn.004c2da0
add esp, 4
lea ecx, [ebp - 0xa88]
call fcn.004414e0
lea ecx, [ebp - 0x16d8]
call fcn.0043aef0
cmp byte [ebp - 0xb31], 0
je 0x504e34
cmp dword [ebp - 0x61c], 8
lea eax, [ebp - 0x630]
cmovae eax, dword [ebp - 0x630]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x690]
call fcn.004414e0
lea ecx, [ebp - 0xbac]
call fcn.0043afb0
jmp 0x504ec9
sub esp, 8
lea ecx, [ebp - 0x1788]
call fcn.00443510
mov edx, str.guid.bin_is_written_incorrectly
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x1778]
call fcn.00449a40
lea eax, [ebp - 0xa58]
push eax
lea ecx, [ebp - 0x1788]
call fcn.004433d0
push 0x45d
mov edx, str.settings.cpp
mov byte [ebp - 4], 0x60
mov ecx, eax
call fcn.004c2da0
add esp, 4
lea ecx, [ebp - 0xa58]
call fcn.004414e0
lea ecx, [ebp - 0x1788]
call fcn.0043aef0
cmp dword [ebp - 0x61c], 8
lea eax, [ebp - 0x630]
cmovae eax, dword [ebp - 0x630]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0xb8c]
call fcn.0043afb0
lea ecx, [ebp - 0x630]
call fcn.00445c30
lea ecx, [ebp - 0x6c0]
call fcn.004414e0
lea ecx, [ebp - 0xbb8]
mov dword [ebp - 4], 0xffffffff
call fcn.0043afb0
mov eax, dword [ebp - 0xb80]
mov al, byte [eax + 0x120]
test al, al
je 0x505125
lea eax, [ebp - 0x418]
push eax
push 0
push 0
push 0x23
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea edi, [ebp - 0x418]
add edi, 0xfffffffe
mov edi, edi
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x504f30
push 0
push 0x80
push 2
push 0
push 2
push 0x40000000
lea eax, [ebp - 0x418]
mov ecx, 0xc
mov esi, str.Aeroadmin_settings.bin
rep movsd dword es:[edi], dword [esi]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xb80], eax
cmp eax, 0xffffffff
je 0x5050af
mov dword [ebp - 0xb58], 0
mov dword [ebp - 0xb74], 0
mov dword [ebp - 0xb70], 0
mov dword [ebp - 0xb6c], 0
mov dword [ebp - 4], 0x7d
lea eax, [ebp - 0xb54]
push dword [ebp - 0xb68]
lea ecx, [ebp - 0xb74]
push eax
lea eax, [ebp - 0xb58]
push eax
push 0
call fcn.00465ce0
lea edx, [ebx + 0x298]
lea ecx, [ebp - 0xb74]
call fcn.004fe2a0
push ecx
lea ecx, [ebp - 0xb64]
call fcn.0050b5e0
mov ecx, dword [ebp - 0xb74]
mov eax, dword [ebp - 0xb70]
sub eax, ecx
sub eax, 4
push eax
lea eax, [ecx + 4]
push eax
lea ecx, [ebp - 0xb64]
call fcn.0050b620
mov eax, dword [ebp - 0xb74]
mov ecx, dword [ebp - 0xb64]
not ecx
mov dword [ebp - 0xb58], ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0xb70]
sub eax, dword [ebp - 0xb74]
push eax
call fcn.0056f473
add esp, 4
mov ecx, ebx
mov edi, eax
push dword [ebx + 0xf4]
push dword [ebx + 0xe0]
push dword [ebx + 0xe4]
call fcn.00466590
mov eax, dword [ebp - 0xb70]
lea ecx, [ebx + 4]
mov edx, dword [ebp - 0xb74]
sub eax, edx
mov esi, dword [ecx]
push eax
push edx
push edi
call dword [esi + 0x20]
mov esi, dword [ebp - 0xb80]
lea eax, [ebp - 0xdd4]
push 0
push eax
mov eax, dword [ebp - 0xb70]
sub eax, dword [ebp - 0xb74]
push eax
push edi
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call fcn.0056ef26
add esp, 4
lea ecx, [ebp - 0x418]
call fcn.004c2ae0
lea ecx, [ebp - 0xb74]
call fcn.0043afb0
jmp 0x505125
sub esp, 8
lea ecx, [ebp - 0x1838]
call fcn.00442390
mov edx, str.File_cant_be_accessed:
mov dword [ebp - 4], 0x7e
lea ecx, [ebp - 0x1828]
call fcn.0044a500
lea edx, [ebp - 0x418]
mov ecx, eax
call fcn.0044a500
lea eax, [ebp - 0x748]
push eax
lea ecx, [ebp - 0x1820]
call fcn.004466f0
push 0x4cb
mov edx, str.settings.cpp
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x748]
call fcn.004c37b0
add esp, 4
lea ecx, [ebp - 0x748]
call fcn.00445c30
lea ecx, [ebp - 0x1838]
call fcn.0043ae30
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0056eeb4
mov esp, ebp
pop ebp
ret
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
int3