Function at 0x44da9b
Capabilities:
Accept command line arguments
Check for peb ntglobalflag flag
Check for sandbox username or hostname
Check for time delay via gettickcount
Check if file exists
Check os version
Contain obfuscated stackstrings
Copy file
Create process on windows
Delete file
Get file attributes
Get hostname
Get number of processors
Move file
Parse pe header
Print debug messages
Query environment variable
Resolve function by parsing pe exports
Set current directory
Set environment variable
Set registry value
Terminate process
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4f6a47
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x66b4
call fcn.004d3110
mov eax, dword [0x53f100]
xor eax, esp
mov dword [esp + 0x66b0], eax
push ebx
push esi
push edi
mov eax, dword [0x53f100]
xor eax, esp
push eax
lea eax, [esp + 0x66c8]
mov dword fs:[0], eax
lea eax, [esp + 0x338]
xor edi, edi
mov dword [esp + 0x70], edi
push eax
mov dword [esp + 0x84], ecx
mov dword [esp + 0x33c], 8
mov dword [esp + 0x340], 0xff
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov ecx, dword [esp + 0x80]
call fcn.004c7011
mov ebx, 0x50107c
push ebx
lea ecx, [esp + 0x68]
call fcn.004247e9
push ebx
lea ecx, [esp + 0x60]
mov dword [esp + 0x66d4], edi
call fcn.004247e9
push ebx
lea ecx, [esp + 0x7c]
mov byte [esp + 0x66d4], 1
call fcn.004247e9
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x66d4], 2
call fcn.004774f0
pop ecx
lea ecx, [esp + 0x4c]
call fcn.0042248a
mov byte [esp + 0x66d0], 4
mov esi, dword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea eax, [esp + 0x60]
push eax
mov dword [esp + 0x80], edi
call esi
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x334]
push eax
mov dword [esp + 0x3c], edi
mov dword [esp + 0x58], edi
mov dword [esp + 0x5c], edi
mov dword [esp + 0x54], edi
call fcn.004774f0
pop ecx
push eax
mov ecx, 0x545320
mov byte [esp + 0x66d4], 5
call fcn.0042482d
mov byte [esp + 0x66d0], 4
mov ecx, dword [esp + 0x334]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x230]
push eax
call fcn.004774f0
pop ecx
mov edi, eax
mov byte [esp + 0x66d0], 6
call esi
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
push dword [edi]
push str.Loader:__s__CmdLine_s
push ecx
call fcn.00478610
add esp, 0x10
call fcn.0044c7ef
pop ecx
mov byte [esp + 0x66d0], 4
mov ecx, dword [esp + 0x230]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push str._CEK_
mov esi, 0x400
call fcn.004247e9
lea eax, [esp + 0x220]
push eax
mov ecx, esi
call fcn.0047ed70
mov byte [esp + 0x66d8], 7
mov eax, dword [eax]
mov eax, dword [eax - 0xc]
add esp, 4
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
push str.Loader:_CEK:_Len_d
push ecx
call fcn.00478610
add esp, 0xc
call fcn.0044c7ef
pop ecx
mov byte [esp + 0x66d0], 4
mov ecx, dword [esp + 0x21c]
add ecx, 0xfffffff0
call fcn.0042201a
xor esi, esi
push esi
push 1
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x544f24], eax
cmp dword [esp + 0x30], esi
je 0x44ee08
inc esi
cmp dword [esp + 0x60], esi
mov dword [esp + 0x40], esi
jle 0x44ee08
mov eax, dword [esp + 0x30]
push ecx
lea edi, [eax + esi*4]
mov ecx, esp
mov dword [esp + 0x48], esp
push dword [edi]
call fcn.004247e9
call fcn.0044c81f
mov dword [esp], 0x511b80
call fcn.004cbdd0
pop ecx
push eax
push str._ExeFile:
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
jne 0x44dd10
push 0x511b80
call fcn.004cbdd0
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x18]
jmp 0x44edf3
push str._Confirm
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x44dd2f
mov dword [esp + 0x54], 1
jmp 0x44edf9
push str._Quiet
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x44dd51
and dword [0x5413cc], eax
or dword [esp + 0x50], 2
jmp 0x44edf9
push str._AllUsers
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x44dda4
mov dword [esp + 0x58], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.004772d0
test eax, eax
je 0x44eef3
call fcn.004774a0
test eax, eax
jne 0x44edf9
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Admin_rights_required
jmp 0x44ef0e
push str._ErrorsOnly
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x44ddc5
mov dword [0x5413cc], 1
jmp 0x44edf9
push str._Wait
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x44dde1
or dword [esp + 0x50], 1
jmp 0x44edf9
push 0x511c4c
call fcn.004cbdd0
pop ecx
push eax
push str._Password:
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
je 0x44edd4
push 0x511c70
call fcn.004cbdd0
pop ecx
push eax
push str._Password
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
je 0x44edd4
push 0x511cac
call fcn.004cbdd0
pop ecx
push eax
push str._EncryptionPwd:
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
jne 0x44de72
push str._EncryptionPwd_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x511cac
call fcn.004cbdd0
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
push str.CYO_ENCRYPTION_PWD
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
jmp 0x44edf9
push 0x511cfc
call fcn.004cbdd0
pop ecx
push eax
push str._Properties:
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
jne 0x44e1f4
push str._Properties_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x11b0]
push eax
call fcn.00490040
mov byte [esp + 0x66d0], 8
push dword [0x5413cc]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x11b0]
push eax
call fcn.0044d0ff
add esp, 0x10
lea eax, [esp + 0x11a4]
call fcn.00490f20
lea ecx, [esp + 0x34]
call fcn.0042248a
lea ecx, [esp + 0x2c]
call fcn.0042248a
lea ecx, [esp + 0x6c]
call fcn.0042248a
push 0x511cfc
mov byte [esp + 0x66d4], 0xb
call fcn.004cbdd0
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x178]
call fcn.004247e9
lea eax, [esp + 0x340]
push eax
mov byte [esp + 0x66d4], 0xc
call fcn.00432add
mov byte [esp + 0x66d0], 0xd
mov dword [esp + 0x190], esi
push ecx
mov ecx, esp
mov dword [esp + 0x48], esp
push 0x511488
lea edi, [esp + 0x198]
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0xe
lea eax, [esp + 0x17c]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x22c]
push eax
mov byte [esp + 0x66dc], 0xd
call fcn.0047c800
add esp, 0xc
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x66d4], 0xf
call fcn.0042482d
mov byte [esp + 0x66d0], 0xd
mov ecx, dword [esp + 0x224]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
push 0x3d
lea ecx, [esp + 0x3c]
call fcn.00426fbe
mov edi, eax
cmp edi, 0xffffffff
je 0x44e075
push edi
lea eax, [esp + 0x230]
push eax
lea ecx, [esp + 0x3c]
call fcn.004249d8
mov byte [esp + 0x66d0], 0x10
call fcn.0042492f
push eax
lea ecx, [esp + 0x30]
call fcn.0042482d
mov byte [esp + 0x66d0], 0xd
mov ecx, dword [esp + 0x22c]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x2c]
cmp dword [eax - 0xc], esi
je 0x44e075
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x70]
call fcn.0042482d
push esi
lea ecx, [esp + 0x70]
lea eax, [edi + 1]
push ecx
call fcn.00424880
lea eax, [esp + 0x6c]
push eax
push ecx
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x34c]
push eax
call fcn.00432b2e
pop ecx
mov ecx, eax
call fcn.0042482d
cmp dword [esp + 0x190], 0xffffffff
jne 0x44df64
mov eax, dword [esp + 0x358]
mov eax, dword [eax]
lea edi, [esp + 0x340]
lea esi, [esp + 0x8c]
call fcn.0042be87
jmp 0x44e163
lea esi, [esp + 0x8c]
call fcn.0042babd
push eax
lea ecx, [esp + 0x130]
call fcn.004247d4
mov byte [esp + 0x66d0], 0x11
call fcn.0042babd
add eax, 4
push eax
lea ecx, [esp + 0x2c]
call fcn.004247d4
push str.Branding
lea eax, [esp + 0x130]
mov byte [esp + 0x66d4], 0x12
call fcn.0042486c
test eax, eax
je 0x44ef20
lea edi, [esp + 0x12c]
call fcn.0042b8b6
push dword [eax]
lea eax, [esp + 0x244]
push str.CAMEYO__s
push eax
call fcn.00478610
mov esi, dword [esp + 0x34]
mov eax, dword [eax]
add esp, 0xc
push esi
push eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov ecx, dword [esp + 0x240]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [esi - 0x10]
call fcn.0042201a
mov byte [esp + 0x66d0], 0xd
mov ecx, dword [esp + 0x12c]
add ecx, 0xfffffff0
call fcn.0042201a
lea esi, [esp + 0x8c]
call fcn.0042ee26
mov eax, dword [esp + 0x358]
lea edi, [esp + 0x340]
lea esi, [esp + 0xbc]
call fcn.0042be87
mov edi, esi
lea esi, [esp + 0x8c]
call fcn.0042be9d
test al, al
je 0x44e0a4
lea eax, [esp + 0x340]
push eax
mov byte [esp + 0x66d4], 0xc
call fcn.004328a9
mov ecx, dword [esp + 0x174]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x6c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x2c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x34]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x11a4]
mov byte [esp + 0x66d0], 4
call fcn.0042796b
jmp 0x44edce
push str._SafeMode
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x44e240
push str._SafeMode_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov edi, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
push 0x5034b0
push str.CAMEYO_LEGACYREG
call edi
push str.Disk
push str.CAMEYO_VIRTMODE
call edi
push 0x5033f4
push str.CAMEYO_EARLYINJECTION
call edi
jmp 0x44edf9
push 0x511e18
call fcn.004cbdd0
pop ecx
push eax
push str._Services:
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
jne 0x44e2bd
push dword [edi]
lea ecx, [esp + 0x144]
call fcn.004247e9
push 0x511e18
mov byte [esp + 0x66d4], 0x13
call fcn.004cbdd0
pop ecx
push 0
lea ecx, [esp + 0x144]
push ecx
call fcn.00424880
push dword [esp + 0x140]
push str.CAMEYO_SERVICES
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov byte [esp + 0x66d0], 4
mov ecx, dword [esp + 0x140]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x44edf9
push str._Register
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x44ef34
push str._Stop
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x44efe5
push str._Remove
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x456ee2
push str._RemoveSelf
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x456ee2
push str._Remove:Proc
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x44f10a
push str._Remove:Reg
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x44f2fc
push str._LearnStreaming
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x456d04
push 0x5123cc
call fcn.004cbdd0
pop ecx
push eax
push str._LearnStreaming:
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
je 0x456d04
push str._UpdateBasicSettings
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x44e399
mov dword [esp + 0x38], 1
jmp 0x44edf9
push str._Repackage
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x44f505
push str._CreateDiff
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x456b4c
push 0x5125f0
call fcn.004cbdd0
pop ecx
push eax
push str._CreateDiff:
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
je 0x456b4c
push str._exec
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x44f6d3
push 0x512634
call fcn.004cbdd0
pop ecx
push eax
push str._Patch
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
je 0x4565fb
push 0x51264c
call fcn.004cbdd0
pop ecx
push eax
push str._InstSandbox
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
je 0x4565fb
push str._ShowStreaming
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x44f896
push str._Break
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x44f97a
push str._Unbreak
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x4500b6
push str._Integrate
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x4561c4
push str._Integrate:once
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x4561c4
push str._FullIntegrate
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x4561c4
push str._Unintegrate
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x4508ec
push str._CreateShortcuts
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x455ae2
push 0x513110
call fcn.004cbdd0
pop ecx
push eax
push str._CreateShortcuts:
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
je 0x455ae2
push str._Perf
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x450944
push str._ExtractLog
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x450d5d
push str._ExtractAll
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x450f9e
push 0x513348
call fcn.004cbdd0
pop ecx
push eax
push str._Extract:
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
je 0x45106f
push str._AutoUpdateXml
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x45127b
push str._Info
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x4513c1
push str._Sandbox
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x451475
push 0x513488
call fcn.004cbdd0
pop ecx
push eax
push str._AddSandbox:
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
je 0x45166f
push 0x5134f0
call fcn.004cbdd0
pop ecx
push eax
push str._GetProperty:
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
je 0x451965
push str._SaveProperties
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x455902
push str._SaveAllProperties
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x455902
push str._InfoLog
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x451b7a
push str._Ini
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x4557db
push str._ShowIni
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x4557db
push str._ExtractIni
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x451d75
push str._csv
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x451f0a
push str._EngineVer
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x452306
push str._ChangeLoader
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x44e6d3
lea eax, [esi + 1]
cmp dword [esp + 0x60], eax
jg 0x452449
push str._ChangeEngine
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x44e6f2
lea eax, [esi + 1]
cmp dword [esp + 0x60], eax
jg 0x452770
push str._ChangeIni
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x44e711
lea eax, [esi + 1]
cmp dword [esp + 0x60], eax
jg 0x452b01
push str._TestAutoUpdate
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x44e730
lea eax, [esi + 5]
cmp dword [esp + 0x60], eax
jg 0x452cc6
push str._Debug
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x4557a4
push str._DbgNow
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x4557a4
push str._ForceMenu
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x44e7cc
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.AutoLaunchAlways
mov dword [esp + 0x84], 1
call fcn.004247e9
push ecx
mov dword [esp + 0x66d8], 0x148
mov eax, esp
mov dword [esp + 0x4c], esp
push dword [0x5452c4]
push str.SoftwareVOS_s
push eax
call fcn.00478610
add esp, 0xc
mov edx, SysReAllocStringLen
mov dword [esp + 0x66d8], 4
call fcn.00479c30
pop ecx
pop ecx
jmp 0x44edf9
push str._ShowTree
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x452dd5
push str._RegDump
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x452ea3
push str._SetFileFlags
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x44e817
lea eax, [esi + 2]
cmp dword [esp + 0x60], eax
jg 0x453020
push str._DbgZip:
call fcn.004cbe7a
pop ecx
push eax
push str._DbgZip:
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
je 0x453236
push str._DbgNow
call fcn.004cbe7a
pop ecx
push eax
push str._DbgNow
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
je 0x453272
push str._Vintegrate
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x4555ef
push 0x513f20
call fcn.004cbdd0
pop ecx
push eax
push str._Vintegrate:
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
je 0x4555ef
push str._VintegrateRecursive
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x4555ef
push 0x513f78
call fcn.004cbdd0
pop ecx
push eax
push str._VintegrateRecursive:
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
je 0x4555ef
push str._Vunintegrate
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x453362
push str._Vmanager
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x453520
push 0x514038
call fcn.004cbdd0
pop ecx
push eax
push str._ProcessList
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
je 0x4535cf
push str._WaitFor
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x453925
push 0x5141d4
call fcn.004cbdd0
pop ecx
push eax
push str._WaitForInactivity:
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
je 0x4539e6
push str._GfxSvr
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x44e9b1
call fcn.00431fd7
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x401
mov edi, 0x5452b8
call fcn.00496780
mov dword [esp], 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x403
call fcn.00496780
mov dword [esp], 0x493e0
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x44edf9
push 0x5145bc
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x44ea2f
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.open
xor edi, edi
xor ebx, ebx
call fcn.004247e9
push edi
push ecx
mov dword [esp + 0x66dc], 0x181
mov ecx, esp
mov dword [esp + 0x50], esp
push str._Troubleshoot
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x82
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
mov dword [esp + 0x66e0], 4
call fcn.00476f50
mov esi, dword [esp + 0x50]
add esp, 0x10
mov ebx, 0x50107c
jmp 0x44edf9
push str._Troubleshoot
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x453f47
push str._AutoUpdate
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x453f70
push str._VirtRegSyncExport
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x454005
push str._StartStreaming
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x454073
push str._JumpTo
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x45408e
push str._SvcRegister
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x45412d
push str._SvcStart
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x45422e
push str._SvcRegisterStart
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x4542e9
push str._SvcStop
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x454451
push str._SvcRemove
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x45450f
push 0x5149b8
call fcn.004cbdd0
pop ecx
push eax
push str._ScmDirectInit:
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
je 0x4545cd
push str._AuthCheck
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x4554df
push str._AuthCheck:Force
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x4554df
push str._RepoSync
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x44eb79
lea eax, [esi + 1]
cmp dword [esp + 0x60], eax
jg 0x454671
push str._MergeRegistry
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x454746
push str._OpenFile
push dword [edi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x44ebae
lea eax, [esi + 1]
cmp dword [esp + 0x60], eax
jg 0x45483b
push 0x514ce8
call fcn.004cbe7a
pop ecx
push eax
push 0x514ce8
push dword [edi]
call fcn.004ce836
add esp, 0xc
test eax, eax
je 0x454bda
push dword [edi]
lea ecx, [esp + 0x108]
call fcn.004247e9
push 0
push ecx
mov dword [esp + 0x66d8], 0x1bc
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x4ffab0
call fcn.004247e9
push ecx
mov esi, esp
mov byte [esp + 0x66dc], 0xbd
mov dword [esp + 0x28], esp
push 0x5c
push ecx
lea eax, [esp + 0x118]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247d4
push esi
call fcn.00478940
add esp, 0xc
mov byte [esp + 0x66dc], 0xbc
call fcn.0047cd30
add esp, 0xc
test eax, eax
je 0x44ec7a
push 0x50d810
push ecx
lea eax, [esp + 0x10c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x1b8]
push eax
call fcn.004786a0
or dword [esp + 0x7c], 4
pop ecx
pop ecx
call fcn.0042486c
mov byte [esp + 0x3f], 1
test eax, eax
je 0x44ec7f
mov byte [esp + 0x3f], 0
test byte [esp + 0x70], 4
je 0x44ec97
and dword [esp + 0x70], 0xfffffffb
lea ecx, [esp + 0x1b0]
call fcn.0042249e
cmp byte [esp + 0x3f], 0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jne 0x4553cc
mov eax, dword [esp + 0x34]
push dword [eax]
call fcn.004247e9
lea eax, [esp + 0x2a8]
push eax
call fcn.0047e4b0
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x7c]
mov byte [esp + 0x66d4], 0xc2
call fcn.0042482d
lea ecx, [esp + 0x2a4]
mov byte [esp + 0x66d0], 0xbc
call fcn.0042249e
call fcn.0044da40
test eax, eax
je 0x44eda9
cmp dword [esp + 0x60], 1
jle 0x44eda9
cmp dword [esp + 0x60], 2
jne 0x44ed5d
push 0x50d810
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [edi]
call fcn.004247e9
lea eax, [esp + 0x1c0]
push eax
call fcn.004786a0
pop ecx
pop ecx
mov byte [esp + 0x66d4], 0xc3
or dword [esp + 0x74], 8
call fcn.0042486c
test eax, eax
jne 0x44ed5d
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [edi]
call fcn.004247e9
call fcn.0047b160
pop ecx
mov byte [esp + 0x3f], 1
test eax, eax
jne 0x44ed62
mov byte [esp + 0x3f], 0
mov dword [esp + 0x66d0], 0x1bc
test byte [esp + 0x70], 8
je 0x44ed85
and dword [esp + 0x70], 0xfffffff7
lea ecx, [esp + 0x1b8]
call fcn.0042249e
cmp byte [esp + 0x3f], 0
je 0x44ed93
push str.PackageEditor.exe
jmp 0x44edae
call fcn.0040b708
test eax, eax
mov eax, str.Packager64.exe
jne 0x44eda6
mov eax, str.Packager.exe
push eax
jmp 0x44edae
push 0x50bd1c
lea ecx, [esp + 0x60]
call fcn.00424842
lea ecx, [esp + 0x104]
mov dword [esp + 0x66d0], 4
call fcn.0042249e
mov esi, dword [esp + 0x40]
jmp 0x44edf9
push str._Password_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x511c4c
call fcn.004cbdd0
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x4c]
push eax
call fcn.00424842
inc esi
cmp esi, dword [esp + 0x60]
mov dword [esp + 0x40], esi
jl 0x44dcbc
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xd30]
push eax
call fcn.00490040
push 0xffffffffffffffff
mov dword [esp + 0x66d4], 0x1c4
push dword [esp + 0x54]
lea eax, [esp + 0x80]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
push ecx
mov byte [esp + 0x66e0], 0xc5
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d4
push ecx
mov byte [esp + 0x66e4], 0xc6
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66e4], 0xc7
push dword [esp + 0x90]
lea eax, [esp + 0x30]
push ecx
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xd40]
push eax
mov byte [esp + 0x66f0], 0xc4
call fcn.0043fbed
add esp, 0x20
cmp eax, 2
jne 0x45721b
call fcn.0044cfb9
push esi
push dword [0x5452c4]
push str.Application_is_now_integrated_into_your_system
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
lea eax, [esp + 0xd24]
call fcn.00490f20
lea eax, [esp + 0xd24]
jmp 0x453502
call fcn.00477320
test eax, eax
jne 0x44ef18
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Elevation_failed
call fcn.004247e9
call fcn.0044d036
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.License_required.
jmp 0x44ef0e
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
mov esi, 0x5452b8
push esi
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x44ef6a
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_obtain_INI_info_from_resource_
jmp 0x44ef0e
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
mov ecx, esi
call fcn.0043ec32
pop ecx
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x78]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x5c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x64]
add ecx, 0xfffffff0
call fcn.0042201a
xor eax, eax
mov ecx, dword [esp + 0x66c8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x66b0]
xor ecx, esp
call fcn.004cb516
mov esp, ebp
pop ebp
ret
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
push 0x5452b8
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x44f018
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x545310
call fcn.004247d4
push ecx
mov byte [esp + 0x66d8], 0x14
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x545320
call fcn.004247d4
push ecx
mov byte [esp + 0x66dc], 0x15
mov ecx, esp
mov dword [esp + 0x50], esp
push 0x545314
call fcn.004247d4
push ecx
mov byte [esp + 0x66e0], 0x16
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x5452c4
call fcn.004247d4
mov byte [esp + 0x66e0], 4
call fcn.004481df
add esp, 0x10
test eax, eax
je 0x44f0ae
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5452c4]
push str.Cannot_stop_application__s
push eax
call fcn.00478610
add esp, 0xc
jmp 0x44ef13
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.__Stopped_successfully
call fcn.004247e9
call fcn.0044c81f
pop ecx
xor esi, esi
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x78]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x5c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x64]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, esi
jmp 0x44efc1
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
push 0x5452b8
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x44f13d
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
mov eax, dword [0x545314]
xor edi, edi
cmp dword [eax - 0xc], edi
jne 0x44f166
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5452c4]
push str.Cannot_obtain_base_dir_for__s
jmp 0x44f0a0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov esi, 0x545314
push esi
call fcn.004247d4
call fcn.0047b160
pop ecx
cmp eax, edi
jne 0x44f1b1
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5452c4]
push str.Application_is_not_deployed_on_this_machine:__s
push eax
call fcn.00478610
add esp, 0xc
call fcn.0044d085
pop ecx
pop ecx
push 5
jmp 0x44ef1a
cmp dword [esp + 0x54], edi
je 0x44f1d4
push 3
push dword [0x5452c4]
push str.Do_you_want_to_stop_the_application_
push edi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x456fad
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5452c4]
push str.Removing_processes:__s
push eax
call fcn.00478610
add esp, 0xc
call fcn.0044c81f
pop ecx
lea ecx, [esp + 0x17c]
call fcn.0042248a
push 0x4ff58c
mov byte [esp + 0x66d4], 0x1d
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push edi
push edi
push 1
lea eax, [esp + 0x188]
push eax
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x545310
call fcn.004247d4
push ecx
mov byte [esp + 0x66ec], 0x1e
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x545320
call fcn.004247d4
push ecx
mov byte [esp + 0x66f0], 0x1f
mov ecx, esp
mov dword [esp + 0x64], esp
push 0x54531c
call fcn.004247d4
push ecx
mov byte [esp + 0x66f4], 0x20
mov ecx, esp
mov dword [esp + 0x4c], esp
push esi
call fcn.004247d4
push ecx
mov byte [esp + 0x66f8], 0x21
mov ecx, esp
mov dword [esp + 0xa4], esp
push 0x5452c4
call fcn.004247d4
mov byte [esp + 0x66f8], 0x1d
call fcn.004485d9
add esp, 0x24
mov ecx, esp
mov dword [esp + 0x18], esp
push str.__Stopped_successfully
call fcn.004247e9
call fcn.0044c81f
pop ecx
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5452c4]
push str.Application__s_stopped_successfully
push eax
call fcn.00478610
add esp, 0xc
call fcn.0044d085
pop ecx
pop ecx
mov ecx, dword [esp + 0x17c]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x44f0c5
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
push 0x5452b8
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x44f32f
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
mov eax, dword [0x545314]
xor edi, edi
cmp dword [eax - 0xc], edi
jne 0x44f34d
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
jmp 0x44f156
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov esi, 0x545314
push esi
call fcn.004247d4
call fcn.0047b160
pop ecx
cmp eax, edi
jne 0x44f37b
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
jmp 0x44f18f
cmp dword [esp + 0x54], edi
je 0x44f39e
push 3
push dword [0x5452c4]
push str.Do_you_want_to_remove_the_applications_registry_
push edi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x456fad
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5452c4]
push str.Removing_registry:__s
push eax
call fcn.00478610
add esp, 0xc
call fcn.0044c81f
pop ecx
lea ecx, [esp + 0x184]
call fcn.0042248a
push 0x4ff58c
mov byte [esp + 0x66d4], 0x22
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push edi
push 1
push edi
lea eax, [esp + 0x190]
push eax
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x545310
call fcn.004247d4
push ecx
mov byte [esp + 0x66ec], 0x23
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x545320
call fcn.004247d4
push ecx
mov byte [esp + 0x66f0], 0x24
mov ecx, esp
mov dword [esp + 0x64], esp
push 0x54531c
call fcn.004247d4
push ecx
mov byte [esp + 0x66f4], 0x25
mov ecx, esp
mov dword [esp + 0x4c], esp
push esi
call fcn.004247d4
push ecx
mov byte [esp + 0x66f8], 0x26
mov ecx, esp
mov dword [esp + 0xa4], esp
push 0x5452c4
call fcn.004247d4
mov byte [esp + 0x66f8], 0x22
call fcn.004485d9
add esp, 0x24
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5452c4]
push str.SoftwareVOS_s
push eax
call fcn.00478610
add esp, 0xc
mov edx, SysReAllocStringLen
call fcn.004796f0
pop ecx
cmp eax, edi
je 0x44f4ba
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5452c4]
push str.Registry_could_not_be_emptied_for__s
jmp 0x44f0a0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.__Registry_removed_successfully
call fcn.004247e9
call fcn.0044c81f
pop ecx
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5452c4]
push str.Application__ss_registry_removed_successfully
push eax
call fcn.00478610
add esp, 0xc
call fcn.0044d085
pop ecx
pop ecx
mov ecx, dword [esp + 0x184]
jmp 0x44f2ef
lea ecx, [esp + 0x2c]
call fcn.0042248a
lea ecx, [esp + 0x50]
call fcn.0042248a
lea eax, [esi + 1]
mov byte [esp + 0x66d0], 0x2f
cmp dword [esp + 0x60], eax
lea ecx, [esp + 0x2c]
jle 0x44f53b
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
call fcn.00424842
jmp 0x44f545
lea eax, [esp + 0x18]
push eax
call fcn.0042482d
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..new.exe
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0x30
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x2b4]
push eax
mov byte [esp + 0x66dc], 0x2f
call fcn.004787d0
add esp, 0xc
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x66d4], 0x31
call fcn.0042482d
mov byte [esp + 0x66d0], 0x2f
mov ecx, dword [esp + 0x2ac]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
lea eax, [esp + 0x54]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
call fcn.0047bbb0
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x30]
pop ecx
push 0
push esi
push edi
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x50]
jne 0x44f5f9
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d4
jmp 0x44ef13
push dword [esp + 0x38]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d4
call fcn.004476a6
mov ebx, eax
pop ecx
pop ecx
test ebx, ebx
jne 0x44f684
push dword [0x5413cc]
lea eax, [esp + 0x54]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x1cc]
push eax
call fcn.00478940
add esp, 8
mov byte [esp + 0x66d8], 0x32
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Successfully_repackaged_into:__s
push ecx
call fcn.00478610
add esp, 0xc
call fcn.0044d085
pop ecx
pop ecx
mov ecx, dword [esp + 0x1c0]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [esi - 0x10]
call fcn.0042201a
lea ecx, [edi - 0x10]
jmp 0x44f2f2
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push dword [0x5413cc]
cmp ebx, 0x10
jne 0x44f6a7
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Application_not_deployed_on_this_machine._Nothing_to_repackage.
jmp 0x44ef0e
lea eax, [esp + 0x364]
push ebx
push eax
call fcn.0047fa60
add esp, 4
mov byte [esp + 0x66d8], 0x33
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Could_not_repackage:__s
push ecx
jmp 0x44f0a1
mov eax, dword [esp + 0x30]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax + esi*4]
call fcn.004247e9
lea eax, [esp + 0x2b8]
push eax
call fcn.0047e4b0
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x7c]
mov byte [esp + 0x66d4], 0x3a
call fcn.0042482d
push eax
lea ecx, [esp + 0x60]
call fcn.0042482d
push eax
lea ecx, [esp + 0x120]
call fcn.004247d4
mov byte [esp + 0x66d0], 0x3c
mov ecx, dword [esp + 0x2b4]
add ecx, 0xfffffff0
call fcn.0042201a
push 1
lea eax, [esp + 0x1cc]
push eax
lea ecx, [esp + 0x124]
call fcn.004249d8
push 0x50c654
push eax
call fcn.00424ae2
pop ecx
pop ecx
mov ecx, dword [esp + 0x1c8]
add ecx, 0xfffffff0
mov byte [esp + 0x3f], al
call fcn.0042201a
cmp byte [esp + 0x3f], 0
lea ecx, [esp + 0x5c]
je 0x44f77c
push 1
push 0x22
jmp 0x44f780
push 0
push 0x20
call fcn.00426fbe
mov esi, eax
cmp esi, 0xffffffff
je 0x44f7f5
push esi
lea eax, [esp + 0x2c0]
push eax
lea ecx, [esp + 0x64]
call fcn.004249d8
push 0x50c540
mov byte [esp + 0x66d4], 0x3d
call fcn.0044535d
push eax
lea ecx, [esp + 0x60]
call fcn.0042482d
mov byte [esp + 0x66d0], 0x3c
mov ecx, dword [esp + 0x2bc]
add ecx, 0xfffffff0
call fcn.0042201a
push 0
lea ecx, [esp + 0x7c]
lea eax, [esi + 1]
push ecx
call fcn.00424880
lea eax, [esp + 0x78]
call fcn.0042492f
push eax
lea ecx, [esp + 0x7c]
call fcn.0042482d
jmp 0x44f81a
push 0x50c540
lea eax, [esp + 0x120]
call fcn.0044535d
push eax
lea ecx, [esp + 0x60]
call fcn.0042482d
push ebx
lea ecx, [esp + 0x7c]
call fcn.00424842
xor ecx, ecx
lea eax, [esp + 0x5c]
call fcn.0042b8ff
movzx eax, ax
cmp ax, 0x25
jne 0x44f839
lea eax, [esp + 0x5c]
push eax
call fcn.00488ca0
pop ecx
push ecx
lea eax, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x1d4]
push eax
call fcn.00489ad0
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x60]
mov byte [esp + 0x66d4], 0x3e
call fcn.0042482d
mov ecx, dword [esp + 0x1d0]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x66d0], 4
mov ecx, dword [esp + 0x11c]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x44ee08
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.ShowStreaming:
call fcn.004247e9
call fcn.0044c81f
pop ecx
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x8b0]
push eax
call fcn.00490040
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x66dc], 0x4c
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x4d
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e4], 0x4e
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d4
push 2
push ecx
mov byte [esp + 0x66ec], 0x4f
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x8c0]
push eax
mov byte [esp + 0x66f0], 0x4c
call fcn.0043fbed
add esp, 0x20
lea ecx, [esp + 0x8a4]
call fcn.0043e6fa
lea eax, [esp + 0x8a4]
call fcn.00490f20
mov byte [esp + 0x66d0], 4
lea eax, [esp + 0x8a4]
call fcn.0042796b
jmp 0x44f0c7
lea ecx, [esp + 0x2c]
call fcn.0042248a
lea eax, [esi + 1]
mov byte [esp + 0x66d0], 0x50
cmp dword [esp + 0x60], eax
lea ecx, [esp + 0x2c]
jle 0x44f9a7
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
call fcn.00424842
jmp 0x44f9b1
lea eax, [esp + 0x18]
push eax
call fcn.0042482d
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..break
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0x51
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x7c]
push eax
mov byte [esp + 0x66dc], 0x50
call fcn.004787d0
add esp, 0xc
push 1
push 0
push ecx
mov byte [esp + 0x66dc], 0x52
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x4e8]
push eax
call fcn.00490040
mov byte [esp + 0x66d0], 0x53
push dword [0x5413cc]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x4e8]
push eax
call fcn.0044d0ff
add esp, 0x10
cmp dword [esp + 0x564], 0
jne 0x44fa6c
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_load_containers_
jmp 0x44ef0e
push ecx
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
call fcn.0047a3a0
pop ecx
push dword [esp + 0x74]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x44faad
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x7c]
push str.Cant_empty__s
jmp 0x44f0a0
mov esi, dword [esp + 0x74]
call fcn.0047b240
test eax, eax
jne 0x44fad5
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x7c]
push str.Cant_create__s
jmp 0x44f0a0
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
mov ebx, 0x4ff58c
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66dc], 0x54
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtApp.ini
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x55
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66e0], 0x53
call fcn.00477ed0
add esp, 8
mov byte [esp + 0x66d8], 0x56
mov ecx, esp
mov dword [esp + 0x24], esp
mov esi, str.Main
push esi
call fcn.004247e9
push 3
pop ecx
lea edi, [esp + 0x4e4]
mov byte [esp + 0x66d8], 0x53
call fcn.00492430
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66dc], 0x57
mov ecx, esp
mov dword [esp + 0x50], esp
push str.AppVirtDll.dll
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x58
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66e0], 0x53
call fcn.00477ed0
add esp, 8
mov byte [esp + 0x66d8], 0x59
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.004247e9
push 2
pop ecx
lea edi, [esp + 0x4e4]
mov byte [esp + 0x66d8], 0x53
call fcn.00492430
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66dc], 0x5a
mov ecx, esp
mov dword [esp + 0x50], esp
push str.AppVirtDll64.dll
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x5b
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66e0], 0x53
call fcn.00477ed0
add esp, 8
mov byte [esp + 0x66d8], 0x5c
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.004247e9
push 8
pop ecx
lea edi, [esp + 0x4e4]
mov byte [esp + 0x66d8], 0x53
call fcn.00492430
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66dc], 0x5d
mov ecx, esp
mov dword [esp + 0x50], esp
push str.StubExe.exe
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x5e
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66e0], 0x53
call fcn.00477ed0
add esp, 8
mov byte [esp + 0x66d8], 0x5f
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.004247e9
push 9
pop ecx
lea edi, [esp + 0x4e4]
mov byte [esp + 0x66d8], 0x53
call fcn.00492430
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66dc], 0x60
mov ecx, esp
mov dword [esp + 0x50], esp
push str.StubExe64.exe
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x61
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66e0], 0x53
call fcn.00477ed0
add esp, 8
mov byte [esp + 0x66d8], 0x62
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.004247e9
push 0xa
pop ecx
lea edi, [esp + 0x4e4]
mov byte [esp + 0x66d8], 0x53
call fcn.00492430
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66dc], 0x63
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtFiles.db
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x64
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66e0], 0x53
call fcn.00477ed0
add esp, 8
mov byte [esp + 0x66d8], 0x65
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.004247e9
push 4
pop ecx
lea edi, [esp + 0x4e4]
mov byte [esp + 0x66d8], 0x53
call fcn.00492430
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66dc], 0x66
mov ecx, esp
mov dword [esp + 0x50], esp
push str.SandboxCfg.db
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x67
mov ecx, esp
lea eax, [esp + 0x84]
mov dword [esp + 0x38], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66e0], 0x53
call fcn.00477ed0
add esp, 8
mov byte [esp + 0x66d8], 0x68
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.004247e9
push 5
pop ecx
lea edi, [esp + 0x4e4]
mov byte [esp + 0x66d8], 0x53
call fcn.00492430
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66dc], 0x69
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtReg.export
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x6a
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66e0], 0x53
call fcn.00477ed0
add esp, 8
mov byte [esp + 0x66d8], 0x6b
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.004247e9
push 6
pop ecx
lea edi, [esp + 0x4e4]
mov byte [esp + 0x66d8], 0x53
call fcn.00492430
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66dc], 0x6c
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtReg.dat
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x6d
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66e0], 0x53
call fcn.00477ed0
add esp, 8
mov byte [esp + 0x66d8], 0x6e
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.004247e9
push 0xb
pop ecx
lea edi, [esp + 0x4e4]
mov byte [esp + 0x66d8], 0x53
call fcn.00492430
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66dc], 0x6f
mov ecx, esp
mov dword [esp + 0x50], esp
push str.SysDllSubdirs.txt
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x70
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66e0], 0x53
call fcn.00477ed0
add esp, 8
mov byte [esp + 0x66d8], 0x71
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.004247e9
push 7
pop ecx
lea edi, [esp + 0x4e4]
mov byte [esp + 0x66d8], 0x53
call fcn.00492430
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66dc], 0x72
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtFiles.vfc
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x73
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66e0], 0x53
call fcn.00477ed0
add esp, 8
mov byte [esp + 0x66d8], 0x74
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.004247e9
mov byte [esp + 0x66d8], 0x53
xor ecx, ecx
inc ecx
lea edi, [esp + 0x4e4]
call fcn.00492430
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x7c]
push 0x512b24
push eax
call fcn.00478610
add esp, 0xc
call fcn.0044d085
pop ecx
pop ecx
jmp 0x44ef18
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Unbreak:
call fcn.004247e9
call fcn.0044c81f
mov ecx, esp
mov dword [esp + 0x18], esp
push str..break
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0x75
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x90]
push eax
mov byte [esp + 0x66dc], 4
call fcn.004787d0
add esp, 0xc
mov byte [esp + 0x66d0], 0x76
push dword [esp + 0x88]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x450145
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x90]
push str.Dir_doesnt_exist:__s
jmp 0x44f0a0
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x54]
call fcn.004247d4
mov esi, str..old
push esi
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x2cc]
push eax
mov byte [esp + 0x66dc], 0x77
call fcn.00424a38
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x2c4]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x1e0]
push eax
call fcn.00424a38
add esp, 0xc
push dword [eax]
push dword [esp + 0x54]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov ecx, dword [esp + 0x1d8]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.0042201a
test bl, bl
je 0x4501e1
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_rename_myself_to_.old
jmp 0x44ef0e
push esi
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x2d4]
push eax
call fcn.00424a38
mov eax, dword [eax]
add esp, 0xc
push 0
push dword [esp + 0x54]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [esp + 0x2cc]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.0042201a
test bl, bl
je 0x450238
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_copy_myself
jmp 0x44ef0e
and dword [esp + 0x124], 0
push 1
push ecx
mov dword [esp + 0x1c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x4ff58c
lea ebx, [esp + 0x134]
lea esi, [esp + 0x19c]
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x78
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.VirtApp.ini
call fcn.004247e9
push ecx
mov byte [esp + 0x66e4], 0x79
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66e4], 0x77
call fcn.00477ed0
add esp, 0xc
mov edi, esi
call fcn.00478da0
pop ecx
pop ecx
cmp eax, 0xffffffff
je 0x4508d5
xor edi, edi
cmp dword [esp + 0x124], edi
je 0x4508d5
push dword [esp + 0x124]
mov ecx, dword [esp + 0x190]
lea eax, [esp + 0x3c]
push eax
call fcn.00478b00
mov byte [esp + 0x66d8], 0x7a
push dword [esp + 0x194]
call fcn.004cc0f7
add esp, 0xc
push 1
push 1
push ecx
lea eax, [esp + 0x5c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x458]
push eax
call fcn.00490040
mov byte [esp + 0x66d0], 0x7b
push dword [0x5413cc]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x458]
push eax
call fcn.0044d0ff
add esp, 0x10
cmp dword [esp + 0x4d4], edi
jne 0x450370
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_begin_to_update_resource
jmp 0x44ef0e
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov esi, str.Main
push esi
call fcn.004247e9
mov byte [esp + 0x66d4], 0x7c
mov eax, dword [esp + 0x3c]
mov eax, dword [eax - 0xc]
add eax, eax
push edi
push eax
lea ecx, [esp + 0x44]
call fcn.00424f68
push eax
lea eax, [esp + 0x45c]
push eax
mov byte [esp + 0x66e4], 0x7b
call fcn.004918f0
cmp eax, edi
je 0x4503cf
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_update_INI_resource
jmp 0x44ef0e
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247e9
push 0
push 2
push ecx
mov byte [esp + 0x66e0], 0x7d
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
mov ebx, 0x4ff58c
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e8], 0x7e
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.AppVirtDll.dll
call fcn.004247e9
push ecx
mov byte [esp + 0x66ec], 0x7f
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66ec], 0x7d
call fcn.00477ed0
add esp, 0xc
lea eax, [esp + 0x45c]
push eax
mov byte [esp + 0x66e4], 0x7b
call fcn.00491c50
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247e9
push 0
push 8
push ecx
mov byte [esp + 0x66e0], 0x80
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e8], 0x81
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.AppVirtDll64.dll
call fcn.004247e9
push ecx
mov byte [esp + 0x66ec], 0x82
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66ec], 0x80
call fcn.00477ed0
add esp, 0xc
lea eax, [esp + 0x45c]
push eax
mov byte [esp + 0x66e4], 0x7b
call fcn.00491c50
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247e9
push 0
push 9
push ecx
mov byte [esp + 0x66e0], 0x83
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e8], 0x84
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.StubExe.exe
call fcn.004247e9
push ecx
mov byte [esp + 0x66ec], 0x85
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66ec], 0x83
call fcn.00477ed0
add esp, 0xc
lea eax, [esp + 0x45c]
push eax
mov byte [esp + 0x66e4], 0x7b
call fcn.00491c50
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247e9
push 0
push 0xa
push ecx
mov byte [esp + 0x66e0], 0x86
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e8], 0x87
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.StubExe64.exe
call fcn.004247e9
push ecx
mov byte [esp + 0x66ec], 0x88
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66ec], 0x86
call fcn.00477ed0
add esp, 0xc
lea eax, [esp + 0x45c]
push eax
mov byte [esp + 0x66e4], 0x7b
call fcn.00491c50
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247e9
push 0x4000
push 4
push ecx
mov byte [esp + 0x66e0], 0x89
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e8], 0x8a
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.VirtFiles.db
call fcn.004247e9
push ecx
mov byte [esp + 0x66ec], 0x8b
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66ec], 0x89
call fcn.00477ed0
add esp, 0xc
lea eax, [esp + 0x45c]
push eax
mov byte [esp + 0x66e4], 0x7b
call fcn.00491c50
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247e9
push 0x4000
push 5
push ecx
mov byte [esp + 0x66e0], 0x8c
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e8], 0x8d
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.SandboxCfg.db
call fcn.004247e9
push ecx
mov byte [esp + 0x66ec], 0x8e
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66ec], 0x8c
call fcn.00477ed0
add esp, 0xc
lea eax, [esp + 0x45c]
push eax
mov byte [esp + 0x66e4], 0x7b
call fcn.00491c50
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247e9
mov byte [esp + 0x66d4], 0x8f
push 0x4000
push 0xb
push ecx
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e8], 0x90
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.VirtReg.dat
call fcn.004247e9
push ecx
mov byte [esp + 0x66ec], 0x91
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66ec], 0x8f
call fcn.00477ed0
add esp, 0xc
lea eax, [esp + 0x45c]
push eax
mov byte [esp + 0x66e4], 0x7b
call fcn.00491c50
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247e9
push 0
push 7
push ecx
mov byte [esp + 0x66e0], 0x92
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e8], 0x93
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.SysDllSubdirs.txt
call fcn.004247e9
push ecx
mov byte [esp + 0x66ec], 0x94
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66ec], 0x92
call fcn.00477ed0
add esp, 0xc
lea eax, [esp + 0x45c]
push eax
mov byte [esp + 0x66e4], 0x7b
call fcn.00491c50
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247e9
push 0x4000
push 1
push ecx
mov byte [esp + 0x66e0], 0x95
mov edi, esp
mov dword [esp + 0x2c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e8], 0x96
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.VirtFiles.vfc
call fcn.004247e9
push ecx
mov byte [esp + 0x66ec], 0x97
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66ec], 0x95
call fcn.00477ed0
add esp, 0xc
lea eax, [esp + 0x45c]
push eax
mov byte [esp + 0x66e4], 0x7b
call fcn.00491c50
lea eax, [esp + 0x44c]
call fcn.00490f20
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
test eax, eax
je 0x4508c6
push str.Could_not_commit_resource
jmp 0x44ef0e
push str.Success
call fcn.004247e9
jmp 0x4500aa
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_load_VirtApp.ini
jmp 0x44ef0e
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
mov esi, 0x5452b8
push esi
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x450920
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
push esi
call fcn.00443cb6
pop ecx
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5452c4]
push str._s_is_no_longer_integrated.
jmp 0x4500a1
lea ecx, [esp + 0x2c]
call fcn.0042248a
lea ecx, [esp + 0x38]
call fcn.0042248a
mov byte [esp + 0x66d0], 0xc3
or dword [esp + 0x80], 0xffffffff
lea eax, [esi + 1]
cmp dword [esp + 0x60], eax
jle 0x450980
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0x30]
call fcn.00424842
add esi, 2
cmp dword [esp + 0x60], esi
jle 0x450999
mov eax, dword [esp + 0x30]
push dword [eax + esi*4]
lea ecx, [esp + 0x3c]
call fcn.00424842
lea ecx, [esp + 0x1e0]
call fcn.0042248a
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x66d4], 0xc4
call fcn.004247d4
push ecx
mov byte [esp + 0x66d4], 0xc5
lea eax, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
push 0x5452b8
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x4509f6
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
xor esi, esi
inc esi
push esi
push 0
push ecx
lea eax, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x1000]
push eax
call fcn.00490040
lea edi, [esp + 0xff4]
mov byte [esp + 0x66d0], 0xc6
call fcn.0042a3e8
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x38]
xor ecx, ecx
cmp dword [eax - 0xc], ecx
je 0x450a5b
push ecx
push 0x80
push 4
push ecx
push 3
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [esp + 0x80], eax
push esi
push esi
push esi
lea eax, [esp + 0x1ec]
push eax
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x545310
call fcn.004247d4
push ecx
mov byte [esp + 0x66ec], 0xc7
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x545320
call fcn.004247d4
push ecx
mov byte [esp + 0x66f0], 0xc8
mov ecx, esp
mov dword [esp + 0x64], esp
push 0x54531c
call fcn.004247d4
push ecx
mov byte [esp + 0x66f4], 0xc9
mov ecx, esp
mov dword [esp + 0xa0], esp
mov esi, 0x545314
push esi
call fcn.004247d4
push ecx
mov byte [esp + 0x66f8], 0xca
mov ecx, esp
mov dword [esp + 0x94], esp
push 0x5452c4
call fcn.004247d4
mov byte [esp + 0x66f8], 0xc6
call fcn.004485d9
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0x28
call edi
push 0
push 2
mov dword [esp + 0x74], eax
push 0x5452b8
lea eax, [esp + 0x1000]
push eax
push dword [esp + 0x38]
call fcn.0043c166
add esp, 0x14
test eax, eax
je 0x450b3c
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Failed_BasicDeploy_
jmp 0x44ef0e
call edi
sub eax, dword [esp + 0x6c]
mov dword [esp + 0x6c], eax
call edi
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x2c]
cmp dword [eax - 0xc], 0
je 0x450bfb
push 0xffffffffffffffff
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0xcb
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x50bd1c
call fcn.004247e9
push ecx
mov byte [esp + 0x66e4], 0xcc
mov ecx, esp
mov dword [esp + 0x58], esp
push ebx
call fcn.004247e9
push 2
push ecx
mov byte [esp + 0x66ec], 0xcd
lea eax, [esp + 0x70]
mov ecx, esp
mov dword [esp + 0x98], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x1010]
push eax
mov byte [esp + 0x66f0], 0xc6
call fcn.0043fbed
add esp, 0x20
push 0
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d4
call fcn.0047f160
pop ecx
pop ecx
test eax, eax
jne 0x450bfb
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x450bd0
call edi
push ecx
mov edi, eax
sub edi, dword [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x545310
call fcn.004247d4
push ecx
mov byte [esp + 0x66d8], 0xce
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x545320
call fcn.004247d4
push ecx
mov byte [esp + 0x66dc], 0xcf
mov ecx, esp
mov dword [esp + 0x50], esp
push esi
call fcn.004247d4
push ecx
mov byte [esp + 0x66e0], 0xd0
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x5452c4
call fcn.004247d4
mov byte [esp + 0x66e0], 0xc6
call fcn.004481df
add esp, 0x10
lea ecx, [esp + 0x58]
call fcn.0042248a
lea ecx, [esp + 0x2d4]
mov eax, 0x100
push ecx
mov byte [esp + 0x66d4], 0xd1
push eax
lea ecx, [esp + 0x60]
mov dword [esp + 0x2dc], eax
call fcn.004224a8
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push 0xffffffffffffffff
lea ecx, [esp + 0x5c]
call fcn.00424af7
push edi
push dword [esp + 0x70]
lea eax, [esp + 0x19c]
push dword [esp + 0x60]
push dword [0x5452c4]
push str._s__s__d_d_r_n
push eax
call fcn.00478610
add esp, 0x18
mov byte [esp + 0x66d0], 0xd2
push dword [esp + 0x194]
lea ecx, [esp + 0x1ec]
call fcn.004262b8
mov byte [esp + 0x66d0], 0xd3
mov esi, dword [esp + 0x80]
xor edi, edi
cmp esi, 0xffffffff
je 0x450d36
push 2
push edi
push edi
push esi
mov dword [esp + 0x2ec], edi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [esp + 0x1e8]
mov ecx, dword [eax - 0xc]
push edi
lea edx, [esp + 0x2e0]
push edx
push ecx
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [0x5413cc]
lea eax, [esp + 0x198]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d4
call fcn.0044d085
pop ecx
pop ecx
push edi
jmp 0x44ef1a
push ecx
mov dword [esp + 0x18], esp
mov esi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str..Packager.log
call fcn.004247e9
push ecx
mov byte [esp + 0x66dc], 0xd4
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d4
push esi
mov byte [esp + 0x66e0], 4
call fcn.004787d0
lea eax, [esp + 0xe0]
add esp, 0xc
push eax
call fcn.00477be0
add esp, 4
mov byte [esp + 0x66d4], 0xd5
lea eax, [esp + 0xd4]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
call fcn.0047bbb0
pop ecx
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xaf0]
push eax
call fcn.00490040
mov byte [esp + 0x66d0], 0xd6
push dword [0x5413cc]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xaf0]
push eax
call fcn.0044d0ff
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0xd7
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e4], 0xd8
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d4
push 2
push ecx
mov byte [esp + 0x66ec], 0xd9
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xb00]
push eax
mov byte [esp + 0x66f0], 0xd6
call fcn.0043fbed
add esp, 0x20
lea edi, [esp + 0xae4]
call fcn.0042a3e8
mov ebx, eax
test ebx, ebx
je 0x450f44
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004775e0
mov byte [esp + 0x66d8], 0xda
mov ecx, esp
mov dword [esp + 0x24], esp
push str.LogsPackager.log
call fcn.004247e9
push ebx
mov byte [esp + 0x66dc], 0xd6
call fcn.00427e59
add esp, 0xc
test eax, eax
jne 0x450efc
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_extract_Packager.log_
jmp 0x44ef0e
push dword [esp + 0xd0]
xor esi, esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Packager.log
inc esi
call fcn.004247e9
lea eax, [esp + 0x1f8]
push eax
call fcn.00477be0
pop ecx
pop ecx
push dword [eax]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov ecx, dword [esp + 0x1f0]
add ecx, 0xfffffff0
call fcn.0042201a
call fcn.0048f3d0
jmp 0x450f66
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
push str.Loader__ExtractLog_:_OpenVfc_failed__LE_d
push ecx
call fcn.00478610
add esp, 0xc
call fcn.0044c7ef
pop ecx
lea eax, [esp + 0xae4]
call fcn.00490f20
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xd8]
test esi, esi
je 0x450f94
push str.Success:__s
jmp 0x4500a1
push str.Failed_saving__s
jmp 0x4500a1
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
mov esi, 0x5452b8
push esi
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x450fd2
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
push 1
push 0
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x9d0]
push eax
call fcn.00490040
mov byte [esp + 0x66d0], 0xdb
push dword [0x5413cc]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x9d0]
push eax
call fcn.0044d0ff
lea edi, [esp + 0x9d4]
call fcn.0042a3e8
push 1
push 2
push esi
mov ecx, edi
push ecx
push eax
call fcn.0043c166
mov esi, eax
add esp, 0x24
mov eax, edi
call fcn.00490f20
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
test esi, esi
je 0x45126b
push str.Failed_extracting.
push eax
call fcn.00478610
pop ecx
pop ecx
jmp 0x4500aa
push str._Extract_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x513348
call fcn.004cbdd0
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + esi*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0xfc]
call fcn.004247e9
push ecx
mov byte [esp + 0x66d4], 0xdc
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
push 0x5452b8
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x4510d7
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
push 1
push 0
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x700]
push eax
call fcn.00490040
mov byte [esp + 0x66d0], 0xdd
cmp dword [esp + 0x77c], 0
push dword [0x5413cc]
jne 0x451122
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_open_PeContainer
jmp 0x44ef0e
push 2
push ecx
lea eax, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x700]
push eax
call fcn.0044d0ff
add esp, 0x10
push 0xffffffffffffffff
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0xde
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e4], 0xdf
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d4
push 2
push ecx
mov byte [esp + 0x66ec], 0xe0
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x710]
push eax
mov byte [esp + 0x66f0], 0xdd
call fcn.0043fbed
add esp, 0x20
lea edi, [esp + 0x6f4]
call fcn.0042a3e8
mov esi, eax
test esi, esi
jne 0x4511e0
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.VFC_error
jmp 0x44ef0e
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0xe1
lea eax, [esp + 0x100]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
push esi
mov byte [esp + 0x66dc], 0xdd
call fcn.00427e59
add esp, 0xc
test eax, eax
jne 0x45123c
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x100]
push str.Cannot_extract_file:_n_s
jmp 0x44f0a0
mov ebx, esi
call fcn.0048f3d0
mov esi, dword [esp + 0xf8]
push 1
call fcn.004852a0
pop ecx
lea eax, [esp + 0x6f4]
call fcn.00490f20
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x545314]
push str.Success:_n_s
jmp 0x4500a1
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
mov esi, 0x5452b8
push esi
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x4512af
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
lea eax, [esp + 0x2e4]
push eax
call fcn.004aa580
pop ecx
mov byte [esp + 0x66d0], 0xe2
push dword [eax]
lea ecx, [esp + 0x1fc]
call fcn.004262b8
mov byte [esp + 0x66d0], 0xe4
mov ecx, dword [esp + 0x2e4]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x1f8]
mov edi, dword [eax - 0xc]
push eax
push ecx
mov dword [esp + 0x1c], esp
mov ebx, esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
mov esi, str..xml
push esi
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0xe5
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004774f0
pop ecx
push ebx
mov byte [esp + 0x66e4], 0xe4
call fcn.004787d0
add esp, 0xc
call fcn.00478fe0
pop ecx
pop ecx
push dword [0x5413cc]
push ecx
mov dword [esp + 0x1c], esp
test eax, eax
je 0x4513ba
mov ecx, esp
push esi
call fcn.004247e9
push ecx
mov byte [esp + 0x66dc], 0xe6
mov eax, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004774f0
pop ecx
lea eax, [esp + 0x2f8]
push eax
mov byte [esp + 0x66e0], 0xe4
call fcn.004787d0
add esp, 8
mov byte [esp + 0x66d8], 0xe7
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Success:_n_s
push ecx
call fcn.00478610
add esp, 0xc
call fcn.0044d085
pop ecx
pop ecx
mov ecx, dword [esp + 0x2ec]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x44ef18
mov eax, esp
jmp 0x45105d
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x3c]
call fcn.004247d4
lea eax, [esi + 1]
mov byte [esp + 0x66d0], 0xe8
cmp dword [esp + 0x60], eax
jle 0x4513f1
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0x3c]
call fcn.00424842
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x12d0]
push eax
call fcn.00490040
mov byte [esp + 0x66d0], 0xe9
push dword [0x5413cc]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x12d0]
push eax
call fcn.0044d0ff
push esi
lea eax, [esp + 0x12d8]
push eax
lea eax, [esp + 0x218]
push eax
call fcn.0044d198
add esp, 0x1c
push esi
push str.Info
push dword [esp + 0x208]
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
push esi
jmp 0x44ef1a
push str._Sandbox_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
push 0x5452b8
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x4514b3
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x3c]
call fcn.004247d4
lea eax, [esi + 1]
mov byte [esp + 0x66d0], 0xea
cmp dword [esp + 0x60], eax
jle 0x4514e3
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0x3c]
call fcn.00424842
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xee0]
push eax
call fcn.00490040
mov byte [esp + 0x66d0], 0xeb
push dword [0x5413cc]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xee0]
push eax
call fcn.0044d0ff
add esp, 0x10
cmp dword [esp + 0xf5c], esi
jne 0x451557
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.FAILED_LOADING_CONTAINERS_
jmp 0x44ef0e
lea eax, [esp + 0xed4]
push eax
lea eax, [esp + 0x2f8]
push eax
call fcn.0044d51f
pop ecx
pop ecx
mov byte [esp + 0x66d0], 0xec
mov ecx, dword [esp + 0x2f4]
mov eax, dword [ecx - 0xc]
cmp eax, 0x800
jge 0x451593
push esi
push str.Sandbox
push ecx
jmp 0x451468
push ecx
push ecx
mov dword [esp + 0x1c], esp
mov ebx, esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
mov esi, str..sandbox.txt
push esi
lea edi, [eax + eax]
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0xed
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004774f0
pop ecx
push ebx
mov byte [esp + 0x66e4], 0xec
call fcn.004787d0
add esp, 0xc
call fcn.00478fe0
add esp, 4
mov ecx, esp
mov dword [esp + 0x18], esp
push str.open
xor edi, edi
xor ebx, ebx
call fcn.004247e9
push 1
push ecx
mov byte [esp + 0x66dc], 0xee
mov ecx, esp
mov dword [esp + 0x28], esp
push edi
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0xef
mov eax, esp
mov dword [esp + 0x54], esp
push ecx
mov ecx, esp
mov dword [esp + 0x58], esp
push esi
mov dword [esp + 0x40], eax
call fcn.004247e9
push ecx
mov byte [esp + 0x66e8], 0xf0
mov eax, esp
mov dword [esp + 0x94], esp
push eax
call fcn.004774f0
mov eax, dword [esp + 0x44]
pop ecx
push eax
mov byte [esp + 0x66ec], 0xef
call fcn.004787d0
add esp, 0xc
mov byte [esp + 0x66e0], 0xec
call fcn.00476f50
add esp, 0x10
xor esi, esi
jmp 0x45146f
push str._AddSandbox_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x513488
call fcn.004cbdd0
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + esi*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x20c]
call fcn.004247e9
push 1
push 0
push ecx
mov byte [esp + 0x66dc], 0xf1
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xc10]
push eax
call fcn.00490040
mov byte [esp + 0x66d0], 0xf2
push dword [0x5413cc]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xc10]
push eax
call fcn.0044d0ff
add esp, 0x10
cmp dword [esp + 0xc8c], 0
jne 0x451713
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x45154d
lea eax, [esp + 0x3e4]
push eax
call fcn.0042b941
push ebx
lea ecx, [esp + 0x1a0]
mov byte [esp + 0x66d4], 0xf3
call fcn.004247e9
lea eax, [esp + 0x19c]
push eax
lea eax, [esp + 0x3e8]
push eax
push ecx
mov byte [esp + 0x66dc], 0xf4
lea eax, [esp + 0x214]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
call fcn.0048c9f0
add esp, 0xc
test eax, eax
jne 0x451786
push dword [0x5413cc]
lea eax, [esp + 0x1a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44f5ee
push 0xffffffffffffffff
xor esi, esi
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0xf5
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e4], 0xf6
mov ecx, esp
mov dword [esp + 0x58], esp
push ebx
call fcn.004247e9
push 2
push ecx
mov byte [esp + 0x66ec], 0xf7
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xc20]
push eax
mov byte [esp + 0x66f0], 0xf4
call fcn.0043fbed
add esp, 0x20
push 7
pop ecx
push dword [0x545338]
xor eax, eax
mov dword [esp + 0x3c8], esi
lea edi, [esp + 0x3cc]
rep stosd dword es:[edi], eax
push ecx
mov dword [esp + 0x1c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.SandboxCfg.db
call fcn.004247e9
push edi
mov ecx, esi
call fcn.0048a1c0
pop ecx
pop ecx
lea ecx, [esp + 0x3cc]
call fcn.00483c40
pop ecx
pop ecx
lea esi, [esp + 0x8c]
lea edi, [esp + 0x3e4]
call fcn.00437bb6
lea esi, [esp + 0x42c]
lea edi, [esp + 0x3e4]
call fcn.0044acc2
mov esi, eax
mov eax, dword [esp + 0x8c]
test eax, eax
je 0x451877
cmp eax, dword [esi]
je 0x45187c
call fcn.004cbff1
mov eax, dword [esp + 0x90]
cmp eax, dword [esi + 4]
je 0x45192e
lea esi, [esp + 0x8c]
call fcn.00424d35
push eax
lea ecx, [esp + 0x2c]
call fcn.004247d4
mov byte [esp + 0x66d0], 0xf8
call fcn.00424d35
mov edi, dword [eax + 4]
mov eax, edi
lea esi, [esp + 0x2fc]
call fcn.00486290
push ecx
mov byte [esp + 0x66d4], 0xf9
mov esi, dword [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push esi
push str.Setting___s__s
push ecx
call fcn.00478610
add esp, 0x10
call fcn.0044c7ef
pop ecx
mov ecx, dword [esp + 0x2fc]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x3c4]
push edi
push eax
xor eax, eax
mov edx, esi
call fcn.004862f0
pop ecx
pop ecx
lea ecx, [esi - 0x10]
mov byte [esp + 0x66d0], 0xf4
call fcn.0042201a
lea esi, [esp + 0x8c]
call fcn.00457716
jmp 0x451853
mov ebx, dword [esp + 0x3c4]
lea eax, [esp + 0x3c4]
push eax
call fcn.0049a730
lea eax, [esp + 0xc04]
call fcn.00490f20
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Done
jmp 0x4508cb
push str._GetProperty_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x5134f0
call fcn.004cbdd0
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + esi*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x214]
call fcn.004247e9
push 1
push 0
push ecx
mov byte [esp + 0x66dc], 0xfa
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x1360]
push eax
call fcn.00490040
mov byte [esp + 0x66d0], 0xfb
push dword [0x5413cc]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x1360]
push eax
call fcn.0044d0ff
add esp, 0x10
lea ecx, [esp + 0x1a4]
call fcn.0042248a
lea eax, [esp + 0x368]
push eax
mov byte [esp + 0x66d4], 0xfc
call fcn.0042b979
lea eax, [esp + 0x1a4]
push eax
push ecx
mov byte [esp + 0x66d8], 0xfd
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Main
call fcn.004247e9
push 3
lea edi, [esp + 0x1360]
call fcn.00492290
mov ecx, dword [esp + 0x1a4]
mov eax, dword [ecx - 0xc]
test eax, eax
jne 0x451a52
push 6
jmp 0x44ef1a
lea edx, [esp + 0x368]
push edx
push eax
push ecx
call fcn.00480b10
mov eax, dword [esp + 0x38c]
mov eax, dword [eax]
add esp, 0xc
lea edi, [esp + 0x368]
lea esi, [esp + 0x8c]
call fcn.0042be87
mov eax, dword [esp + 0x380]
lea esi, [esp + 0xbc]
call fcn.0042be87
mov edi, esi
lea esi, [esp + 0x8c]
call fcn.0042baf4
test al, al
je 0x44f1aa
xor ebx, ebx
lea esi, [esp + 0x8c]
call fcn.0042babd
push dword [eax]
lea eax, [esp + 0x214]
call fcn.0042486c
test eax, eax
jne 0x451b39
call fcn.0042babd
add eax, 4
push dword [eax]
lea ecx, [esp + 0x138]
call fcn.004262b8
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
cmp eax, 0xffffffff
je 0x451b2a
mov ecx, dword [esp + 0x134]
push ebx
mov dword [esp + 0x154], ebx
mov edx, dword [ecx - 0xc]
lea esi, [esp + 0x154]
push esi
push edx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x451b2a
mov eax, dword [esp + 0x150]
mov ecx, dword [esp + 0x134]
cmp eax, dword [ecx - 0xc]
je 0x453e3b
mov ecx, dword [esp + 0x134]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x8c]
call fcn.0042bae8
mov eax, dword [esp + 0x380]
lea edi, [esp + 0x368]
lea esi, [esp + 0xbc]
call fcn.0042be87
mov edi, esi
lea esi, [esp + 0x8c]
call fcn.0042baf4
test al, al
jne 0x451aab
jmp 0x44f1aa
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x3c]
call fcn.004247d4
lea eax, [esi + 1]
mov dword [esp + 0x66d0], 0x104
cmp dword [esp + 0x60], eax
jle 0x451bad
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0x3c]
call fcn.00424842
push 1
push 0
push ecx
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x820]
push eax
call fcn.00490040
mov byte [esp + 0x66d0], 5
push dword [0x5413cc]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x820]
push eax
call fcn.0044d0ff
add esp, 0x10
cmp dword [esp + 0x89c], 0
jne 0x451c1c
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x45154d
push 1
lea eax, [esp + 0x818]
push eax
lea eax, [esp + 0x144]
push eax
call fcn.0044d198
add esp, 0xc
push str._n_nSandboxing:_n_n
lea ecx, [esp + 0x140]
mov byte [esp + 0x66d4], 6
call fcn.004261e4
lea eax, [esp + 0x814]
push eax
lea eax, [esp + 0x308]
push eax
call fcn.0044d51f
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x140]
mov byte [esp + 0x66d4], 7
call fcn.00424857
mov byte [esp + 0x66d0], 6
mov ecx, dword [esp + 0x304]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x13c]
mov eax, dword [ecx - 0xc]
push ecx
push ecx
mov dword [esp + 0x1c], esp
mov ebx, esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
mov esi, str..txt
push esi
lea edi, [eax + eax]
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 8
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004774f0
pop ecx
push ebx
mov byte [esp + 0x66e4], 6
call fcn.004787d0
add esp, 0xc
call fcn.00478fe0
pop ecx
pop ecx
xor edi, edi
push edi
push str.Package_info
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 9
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004774f0
pop ecx
lea eax, [esp + 0x31c]
push eax
mov byte [esp + 0x66e4], 6
call fcn.004787d0
add esp, 0xc
mov byte [esp + 0x66d8], 0xa
push dword [eax]
push str.Saved_in:__s
lea eax, [esp + 0x228]
push eax
call fcn.00478610
add esp, 0xc
push dword [eax]
push edi
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [esp + 0x218]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x30c]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x450d57
lea ecx, [esp + 0x14]
call fcn.0042248a
lea ecx, [esp + 0x148]
mov dword [esp + 0x66d0], 0x10f
call fcn.0042248a
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x66d4], 0x10
call fcn.004247d4
lea eax, [esi + 1]
mov byte [esp + 0x66d0], 0x11
cmp dword [esp + 0x60], eax
jle 0x451dcd
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0x58]
call fcn.00424842
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str..ini
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0x12
lea eax, [esp + 0x5c]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x160]
push eax
mov byte [esp + 0x66dc], 0x11
call fcn.004787d0
add esp, 8
mov byte [esp + 0x66d4], 0x13
lea eax, [esp + 0x15c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
call fcn.0047bbb0
pop ecx
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x1120]
push eax
call fcn.00490040
mov byte [esp + 0x66d0], 0x14
push dword [0x5413cc]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x1120]
push eax
call fcn.0044d0ff
add esp, 0x10
cmp dword [esp + 0x119c], esi
jne 0x451e9f
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
jmp 0x45154d
lea eax, [esp + 0x148]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push str.Main
call fcn.004247e9
push 3
lea edi, [esp + 0x1120]
call fcn.00492290
mov ecx, dword [esp + 0x148]
mov eax, dword [ecx - 0xc]
cmp eax, esi
jne 0x451ee6
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
jmp 0x44ef63
push ecx
push ecx
lea edi, [eax + eax]
lea eax, [esp + 0x160]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
call fcn.00478fe0
pop ecx
pop ecx
jmp 0x45146f
push str.AppID_ShortDesc_FriendlyName_Category_DownloadUrl_IconUrl_Version_BuildUid_Size_PopularityIndex_n
lea ecx, [esp + 0x88]
call fcn.004247e9
mov dword [esp + 0x66d0], 0x115
xor edi, edi
lea ecx, [esp + 0x34]
mov dword [esp + 0x180], edi
mov dword [esp + 0x1a8], edi
call fcn.0042248a
push 1
push edi
push ecx
mov byte [esp + 0x66dc], 0x16
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x1630]
push eax
call fcn.00490040
push 0xffffffffffffffff
push edi
push ecx
mov byte [esp + 0x66dc], 0x17
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x18
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e4], 0x19
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d4
push 2
push ecx
mov byte [esp + 0x66ec], 0x1a
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x1640]
push eax
mov byte [esp + 0x66f0], 0x17
call fcn.0043fbed
mov edi, 0x501024
push edi
lea eax, [esp + 0x244]
push 0x5452c4
push eax
call fcn.00424a38
add esp, 0x2c
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0x66d4], 0x1b
call fcn.00424857
mov byte [esp + 0x66d0], 0x17
mov ecx, dword [esp + 0x220]
add ecx, 0xfffffff0
call fcn.0042201a
push edi
lea ecx, [esp + 0x88]
call fcn.004261e4
push edi
push 0x5452d0
lea eax, [esp + 0x31c]
push eax
call fcn.00424a38
add esp, 0xc
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0x66d4], 0x1c
call fcn.00424857
mov byte [esp + 0x66d0], 0x17
mov ecx, dword [esp + 0x314]
add ecx, 0xfffffff0
call fcn.0042201a
push str.Productivity_
lea ecx, [esp + 0x88]
call fcn.004261e4
lea eax, [esi + 1]
cmp dword [esp + 0x60], eax
jle 0x4520af
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
lea ebx, [esp + 0x88]
push 0x5137b8
call fcn.004277c2
mov esi, dword [esp + 0x48]
pop ecx
pop ecx
jmp 0x4520c0
push str._Download_URL_here__
lea ecx, [esp + 0x88]
call fcn.004261e4
add esi, 2
cmp dword [esp + 0x60], esi
jle 0x4520e5
mov eax, dword [esp + 0x30]
push dword [eax + esi*4]
lea ebx, [esp + 0x88]
push 0x5137b8
call fcn.004277c2
pop ecx
pop ecx
jmp 0x4520f6
push str._Icon_here__
lea ecx, [esp + 0x88]
call fcn.004261e4
push edi
lea eax, [esp + 0x22c]
push 0x5452d8
push eax
call fcn.00424a38
add esp, 0xc
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0x66d4], 0x1d
call fcn.00424857
mov byte [esp + 0x66d0], 0x17
mov ecx, dword [esp + 0x228]
add ecx, 0xfffffff0
call fcn.0042201a
push edi
lea eax, [esp + 0x320]
push 0x545308
push eax
call fcn.00424a38
add esp, 0xc
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0x66d4], 0x1e
call fcn.00424857
mov byte [esp + 0x66d0], 0x17
mov ecx, dword [esp + 0x31c]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push eax
lea edi, [esp + 0x1b0]
lea esi, [esp + 0x188]
call fcn.004774f0
pop ecx
call fcn.0047bab0
pop ecx
push dword [esp + 0x180]
lea eax, [esp + 0x330]
push 0x502250
push eax
call fcn.00478610
add esp, 0xc
push 0x501024
push eax
lea eax, [esp + 0x32c]
push eax
mov byte [esp + 0x66dc], 0x1f
call fcn.00424a38
add esp, 0xc
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0x66d4], 0x20
call fcn.00424857
mov ecx, dword [esp + 0x324]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x66d0], 0x17
mov ecx, dword [esp + 0x32c]
add ecx, 0xfffffff0
call fcn.0042201a
push 0x5033f4
lea ecx, [esp + 0x88]
call fcn.004261e4
mov eax, dword [esp + 0x40]
add eax, 3
cmp dword [esp + 0x60], eax
jle 0x452241
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4]
lea ecx, [esp + 0x38]
call fcn.00424842
jmp 0x4522a9
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..csv
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0x21
mov eax, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004774f0
pop ecx
lea eax, [esp + 0x240]
push eax
mov byte [esp + 0x66dc], 0x17
call fcn.004787d0
add esp, 0xc
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x66d4], 0x22
call fcn.0042482d
mov byte [esp + 0x66d0], 0x17
mov ecx, dword [esp + 0x238]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x84]
mov eax, dword [ecx - 0xc]
push ecx
push ecx
lea edi, [eax + eax]
lea eax, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d4
call fcn.00478fe0
pop ecx
pop ecx
push dword [0x5413cc]
push ecx
mov dword [esp + 0x1c], esp
test eax, eax
jne 0x4522f5
mov eax, esp
lea ecx, [esp + 0x3c]
push ecx
push str.Could_not_save_to
push eax
call fcn.00424a8d
jmp 0x44f0a6
mov ecx, esp
lea eax, [esp + 0x3c]
push eax
call fcn.004247d4
jmp 0x4500aa
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x1480]
push eax
call fcn.00490040
mov dword [esp + 0x66d0], 0x123
cmp dword [esp + 0x14fc], esi
jne 0x45234f
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44fa62
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5452c4]
push str._s.AppVirtDll.dll
push eax
call fcn.00478610
lea eax, [esp + 0x154]
add esp, 0xc
push eax
call fcn.00477ce0
add esp, 4
mov byte [esp + 0x66d4], 0x24
lea eax, [esp + 0x148]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
push ecx
mov byte [esp + 0x66d8], 0x25
mov ecx, esp
mov dword [esp + 0x24], esp
push str.Main
call fcn.004247e9
push 2
pop ecx
lea edi, [esp + 0x147c]
mov byte [esp + 0x66d8], 0x24
call fcn.00492430
push dword [0x5413cc]
lea eax, [esp + 0x148]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x244]
push eax
call fcn.0049b0a0
add esp, 4
mov byte [esp + 0x66d8], 0x26
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.EngineVersion_s
push ecx
call fcn.00478610
add esp, 0xc
call fcn.0044d085
pop ecx
pop ecx
mov byte [esp + 0x66d0], 0x24
mov ecx, dword [esp + 0x23c]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
lea eax, [esp + 0x148]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
call fcn.0047bbb0
jmp 0x451f04
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x38]
call fcn.004247d4
push 0x2e
lea ecx, [esp + 0x38]
mov dword [esp + 0x66d4], 0x127
call fcn.00437a74
push eax
lea eax, [esp + 0x2fc]
push eax
lea ecx, [esp + 0x3c]
call fcn.004249d8
push str..new.exe
push eax
lea eax, [esp + 0xb8]
push eax
mov byte [esp + 0x66dc], 0x28
call fcn.00424a38
add esp, 0xc
mov byte [esp + 0x66d0], 0x2a
mov ecx, dword [esp + 0x2f8]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0x24c]
call fcn.004247e9
push 0
mov byte [esp + 0x66d4], 0x2b
push dword [esp + 0xb4]
push dword [esp + 0x250]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x452515
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xb8]
push dword [esp + 0x40]
push str.Cant_copy__s_to__s
push eax
call fcn.00478610
add esp, 0x10
jmp 0x44ef13
push dword [esp + 0xb0]
push dword [esp + 0x38]
call fcn.00445506
pop ecx
pop ecx
xor esi, esi
inc esi
push esi
push 0
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x670]
push eax
call fcn.00490040
push esi
push esi
push ecx
mov byte [esp + 0x66dc], 0x2c
lea eax, [esp + 0xbc]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x1240]
push eax
call fcn.00490040
mov byte [esp + 0x66d0], 0x2d
push dword [0x5413cc]
lea eax, [esp + 0x50]
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x670]
push eax
call fcn.0044d0ff
add esp, 0x10
lea eax, [esp + 0x44]
lea ecx, [esp + 0x6d4]
call fcn.00424b83
jmp 0x4526cd
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CEChangeEngine.tmp
call fcn.004247e9
lea eax, [esp + 0xd8]
push eax
call fcn.00477ce0
add esp, 4
mov byte [esp + 0x66d4], 0x2e
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
lea esi, [esp + 0x48]
mov byte [esp + 0x66d4], 0x2f
call fcn.00424d35
push ecx
add eax, 0x2c
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
call fcn.00424d35
mov byte [esp + 0x66d8], 0x2e
mov ecx, dword [eax + 0x28]
lea edi, [esp + 0x66c]
call fcn.00492430
test eax, eax
jne 0x452729
call fcn.00424d35
push ecx
add eax, 0x2c
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
push 0x4000
mov byte [esp + 0x66d8], 0x30
call fcn.00424d35
push dword [eax + 0x28]
lea eax, [esp + 0xe0]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x1244]
push eax
mov byte [esp + 0x66e4], 0x2e
call fcn.00491c50
test eax, eax
jne 0x452755
push ecx
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
call fcn.0047bbb0
pop ecx
mov byte [esp + 0x66d0], 0x2d
mov ecx, dword [esp + 0xd4]
add ecx, 0xfffffff0
call fcn.0042201a
call fcn.0045752c
lea eax, [esp + 0x388]
lea ecx, [esp + 0x6d4]
call fcn.004574c9
mov edi, eax
lea esi, [esp + 0x44]
call fcn.00424d88
test al, al
jne 0x4525bb
lea eax, [esp + 0x664]
call fcn.00490f20
lea eax, [esp + 0x1234]
call fcn.00490f20
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xb8]
push str.Successfully_changed_Loader:__s
jmp 0x4500a1
push dword [0x5413cc]
call fcn.00424d35
push ecx
mov edi, esp
mov dword [esp + 0x1c], esp
push dword [eax + 0x2c]
lea esi, [esp + 0x50]
call fcn.00424d35
push dword [eax + 0x28]
push str.Cannot_read_container__d__s_to_file
push edi
jmp 0x452508
push dword [0x5413cc]
lea esi, [esp + 0x48]
call fcn.00424d35
push ecx
mov edi, esp
mov dword [esp + 0x1c], esp
push dword [eax + 0x2c]
jmp 0x452742
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x30]
call fcn.004247d4
push 0x2e
lea ecx, [esp + 0x30]
mov dword [esp + 0x66d4], 0x131
call fcn.00437a74
push eax
lea eax, [esp + 0x2c4]
push eax
lea ecx, [esp + 0x34]
call fcn.004249d8
push str..new.exe
push eax
lea eax, [esp + 0xe4]
push eax
mov byte [esp + 0x66dc], 0x32
call fcn.00424a38
add esp, 0xc
mov byte [esp + 0x66d0], 0x34
mov ecx, dword [esp + 0x2c0]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0xe8]
call fcn.004247e9
push 0
mov byte [esp + 0x66d4], 0x35
push dword [esp + 0xe0]
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x45282b
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xe4]
push dword [esp + 0x38]
jmp 0x452502
push 1
push 1
push ecx
lea eax, [esp + 0xe8]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x5e0]
push eax
call fcn.00490040
mov byte [esp + 0x66d0], 0x36
push dword [0x5413cc]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x5e0]
push eax
call fcn.0044d0ff
add esp, 0x10
cmp dword [esp + 0x65c], 0
jne 0x45289d
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x451118
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov esi, str.Main
push esi
call fcn.004247e9
push 0
push 2
push ecx
mov byte [esp + 0x66e0], 0x37
lea eax, [esp + 0xf4]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x5e4]
push eax
mov byte [esp + 0x66e4], 0x36
call fcn.00491c50
test eax, eax
je 0x4528ff
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEDLL
jmp 0x44ef0e
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247e9
push 0
push 8
push ecx
mov byte [esp + 0x66e0], 0x38
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
lea eax, [esp + 0xf8]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247d4
push edi
call fcn.00486750
pop ecx
pop ecx
lea eax, [esp + 0x5e4]
push eax
mov byte [esp + 0x66e4], 0x36
call fcn.00491c50
test eax, eax
je 0x45296b
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEDLL64
jmp 0x44ef0e
lea ecx, [esp + 0x160]
call fcn.0042248a
lea ecx, [esp + 0x1a0]
call fcn.0042248a
lea eax, [esp + 0x160]
push eax
push ecx
mov byte [esp + 0x66d8], 0x3a
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247e9
push 3
lea edi, [esp + 0x5e0]
call fcn.00492290
test eax, eax
je 0x4529c9
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_Read_PeContainer_PECONTAINER_INI
jmp 0x44ef0e
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
lea eax, [esp + 0xec]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
lea ebx, [esp + 0x1ac]
call fcn.004247d4
push edi
call fcn.0049b0a0
add esp, 4
mov byte [esp + 0x66d8], 0x3b
mov ecx, esp
mov dword [esp + 0x24], esp
push str.EngineVersion
call fcn.004247e9
push ecx
mov byte [esp + 0x66dc], 0x3c
lea eax, [esp + 0x16c]
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66dc], 0x3a
call fcn.0047d1a0
pop ecx
pop ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247e9
push 0x4000
push 3
pop esi
push ecx
mov byte [esp + 0x66dc], 0x3d
mov eax, ebx
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d4
mov ecx, esi
lea ebx, [esp + 0x5e0]
mov byte [esp + 0x66dc], 0x3a
call fcn.00491a30
test eax, eax
je 0x452a93
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_Add_PeContainerStr_PECONTAINER_INI
jmp 0x44ef0e
lea eax, [esp + 0x5d4]
call fcn.00490f20
push dword [0x5413cc]
lea eax, [esp + 0xe8]
push ecx
mov dword [esp + 0x1c], esp
mov esi, esp
push dword [esp + 0xe4]
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x260]
push eax
call fcn.0049b0a0
pop ecx
pop ecx
mov byte [esp + 0x66dc], 0x3e
push dword [eax]
push str.Successfully_changed_to_Engine__s._nNew_package_saved_in:_n_s
push esi
call fcn.00478610
add esp, 0x10
call fcn.0044d085
pop ecx
pop ecx
mov ecx, dword [esp + 0x250]
jmp 0x4513ad
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x30]
call fcn.004247d4
push 0x2e
lea ecx, [esp + 0x30]
mov dword [esp + 0x66d4], 0x13f
call fcn.00437a74
push eax
lea eax, [esp + 0x31c]
push eax
lea ecx, [esp + 0x34]
call fcn.004249d8
push str..new.exe
push eax
lea eax, [esp + 0xf4]
push eax
mov byte [esp + 0x66dc], 0x40
call fcn.00424a38
add esp, 0xc
mov byte [esp + 0x66d0], 0x42
mov ecx, dword [esp + 0x318]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0x25c]
call fcn.004247e9
xor esi, esi
push esi
mov byte [esp + 0x66d4], 0x43
push dword [esp + 0xf0]
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x452bbd
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xf4]
push dword [esp + 0x38]
jmp 0x452502
push 1
push 1
push ecx
lea eax, [esp + 0xf8]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x940]
push eax
call fcn.00490040
mov byte [esp + 0x66d0], 0x44
push dword [0x5413cc]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x940]
push eax
call fcn.0044d0ff
add esp, 0x10
cmp dword [esp + 0x9bc], esi
jne 0x452c2e
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x451118
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Main
call fcn.004247e9
push esi
push 3
push ecx
mov byte [esp + 0x66e0], 0x45
lea eax, [esp + 0x268]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x944]
push eax
mov byte [esp + 0x66e4], 0x44
call fcn.00491c50
cmp eax, esi
je 0x452c8e
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEINI
jmp 0x44ef0e
lea eax, [esp + 0x934]
call fcn.00490f20
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xf4]
push str.Successfully_changed_INI._nNew_package_saved_in:_n_s
push eax
call fcn.00478610
add esp, 0xc
call fcn.0044d085
jmp 0x451f03
lea esi, [esp + 0x1744]
call fcn.0043b0b4
mov dword [esp + 0x66d0], 0x146
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x40]
push dword [edi + esi*4 + 4]
lea ecx, [esp + 0x1790]
call fcn.00424842
push dword [edi + esi*4 + 8]
lea ecx, [esp + 0x1768]
call fcn.00424842
push dword [edi + esi*4 + 0xc]
lea ecx, [esp + 0x1760]
call fcn.00424842
push eax
lea ecx, [esp + 0x1754]
call fcn.0042482d
push dword [edi + esi*4 + 0x10]
lea ecx, [esp + 0x1798]
call fcn.00424842
push dword [edi + esi*4 + 0x14]
lea ecx, [esp + 0x1794]
call fcn.00424842
lea eax, [esp + 0x18bc]
push eax
lea edi, [esp + 0x1748]
call fcn.004a9170
lea eax, [esp + 0x18bc]
push eax
mov byte [esp + 0x66d4], 0x47
call fcn.004a9310
test eax, eax
je 0x452dba
xor esi, esi
mov eax, 0x513c78
cmp dword [esp + 0x18bc], esi
jne 0x452d84
mov eax, 0x513c80
push dword [esp + 0x18c8]
push dword [esp + 0x18c8]
push eax
lea eax, [esp + 0x2d4]
push str.Need_to_update:__s_nVersion:__s_nBuildUID:__s_n
push eax
call fcn.00478610
add esp, 0x14
push esi
push str.Server_test:
push dword [esp + 0x2d0]
jmp 0x451468
push 0
push str.Server_test:
push str.Failed
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 1
jmp 0x44ef1a
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xa60]
push eax
call fcn.00490040
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x66dc], 0x149
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x4a
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e4], 0x4b
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d4
push 2
push ecx
mov byte [esp + 0x66ec], 0x4c
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xa70]
push eax
mov byte [esp + 0x66f0], 0x49
call fcn.0043fbed
add esp, 0x20
lea ecx, [esp + 0xa54]
call fcn.0043e726
lea eax, [esp + 0xa54]
call fcn.00490f20
mov dword [esp + 0x66d0], 4
lea eax, [esp + 0xa54]
jmp 0x44f970
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xdc0]
push eax
call fcn.00490040
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x66dc], 0x14d
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x4e
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e4], 0x4f
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d4
push 2
push ecx
mov byte [esp + 0x66ec], 0x50
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xdd0]
push eax
mov byte [esp + 0x66f0], 0x4d
call fcn.0043fbed
add esp, 0x20
push esi
push esi
push esi
push ecx
mov eax, esp
mov dword [esp + 0x24], esp
push eax
xor ecx, ecx
call fcn.0048a5a0
pop ecx
mov ecx, esi
call fcn.004a6370
add esp, 0x10
lea eax, [esp + 0xdb4]
call fcn.00490f20
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
mov edi, 0x5452b8
push edi
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x452fa4
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_obtain_INI_info_from_resource_
call fcn.004247e9
call fcn.0044c7ef
pop ecx
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str.MountVirtReg
push eax
call fcn.00478610
pop ecx
pop ecx
call fcn.0044c7ef
mov eax, esp
mov dword [esp + 0x18], esp
push str._____________
push eax
call fcn.00478610
pop ecx
pop ecx
call fcn.0044c7ef
pop ecx
mov ecx, edi
call fcn.0042b0e1
mov edi, eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
cmp edi, esi
jne 0x452ffb
push str.Cannot_mount_virtual_registry
call fcn.004247e9
call fcn.0044c7ef
jmp 0x453008
push ebx
call fcn.004247e9
push edi
call fcn.0044d60c
pop ecx
pop ecx
mov dword [esp + 0x66d0], 4
lea eax, [esp + 0xdb4]
jmp 0x44f970
mov edi, dword [esp + 0x30]
push dword [edi + esi*4 + 4]
lea ecx, [esp + 0x16c]
call fcn.004247e9
mov dword [esp + 0x66d0], 0x151
push dword [edi + esi*4 + 8]
lea ecx, [esp + 0xb8]
call fcn.004247e9
push 0x10
xor edi, edi
mov byte [esp + 0x66d4], 0x52
push edi
push dword [esp + 0x170]
call fcn.004d0192
add esp, 8
mov esi, eax
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xb8]
push esi
push str.SetFileFlags:__0x_x____s_
push eax
call fcn.00478610
add esp, 0x10
call fcn.0044c7ef
pop ecx
push 1
push edi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xe50]
push eax
call fcn.00490040
mov byte [esp + 0x66d0], 0x53
push dword [0x5413cc]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xe50]
push eax
call fcn.0044d0ff
add esp, 0x10
push 0xffffffffffffffff
push edi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x54
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e4], 0x55
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d4
push 2
push ecx
mov byte [esp + 0x66ec], 0x56
mov ecx, esp
mov dword [esp + 0x44], esp
lea eax, [esp + 0x34]
push eax
call fcn.004247d4
lea eax, [esp + 0xe60]
push eax
mov byte [esp + 0x66f0], 0x53
call fcn.0043fbed
add esp, 0x20
call fcn.00483e30
mov edi, 0x544a98
call fcn.004995e0
mov edx, dword [esp + 0xb4]
call fcn.00484790
push ecx
mov dword [esp + 0x18], esp
test eax, eax
je 0x4531d5
mov eax, dword [eax + 0x24]
mov dword [eax], esi
mov ecx, esp
push dword [0x544a98]
call fcn.004247e9
mov ecx, edi
call fcn.004846c0
pop ecx
test eax, eax
je 0x4531bf
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xbc]
push esi
push str.Success:_n__x___s
push eax
call fcn.00478610
add esp, 0x10
call fcn.0044d085
pop ecx
jmp 0x4531f1
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str._SetFileFlags:_could_not_save_tree
push eax
call fcn.00478610
pop ecx
pop ecx
jmp 0x4531ec
mov eax, esp
push dword [esp + 0xb8]
push str._SetFileFlags:_could_not_find__s
push eax
call fcn.00478610
add esp, 0xc
call fcn.0044c7ef
pop ecx
push dword [0x544aa8]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
test eax, eax
jne 0x453207
call fcn.00499670
lea eax, [esp + 0xe44]
mov byte [esp + 0x66d0], 0x52
call fcn.0042796b
mov ecx, dword [esp + 0xb4]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x168]
jmp 0x44f2ef
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.DbgZip
call fcn.004247e9
call fcn.0044c81f
mov dword [esp], str._DbgZip:
call fcn.004cbe7a
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + esi*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x68]
call fcn.00424842
jmp 0x44ee08
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xb80]
push eax
call fcn.00490040
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x66dc], 0x157
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x58
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e4], 0x59
mov ecx, esp
mov dword [esp + 0x58], esp
push ebx
call fcn.004247e9
push 2
push ecx
mov byte [esp + 0x66ec], 0x5a
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xb90]
push eax
mov byte [esp + 0x66f0], 0x57
call fcn.0043fbed
add esp, 0x20
push dword [0x5413cc]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xb80]
push eax
call fcn.0044d0ff
push dword [esp + 0x68]
lea edx, [esp + 0xb88]
mov ecx, 0x5452b8
call fcn.00443b32
add esp, 0x14
mov dword [esp + 0x66d0], 4
lea eax, [esp + 0xb74]
jmp 0x44f970
push 1
xor edi, edi
push edi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x13f0]
push eax
call fcn.00490040
push 0xffffffffffffffff
push edi
push ecx
mov dword [esp + 0x66dc], 0x161
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x62
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e4], 0x63
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d4
push 2
push ecx
mov byte [esp + 0x66ec], 0x64
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x1400]
push eax
mov byte [esp + 0x66f0], 0x61
call fcn.0043fbed
add esp, 0x20
lea esi, [esp + 0xbc]
call fcn.00497150
push 1
lea eax, [esp + 0x2ea8]
push eax
mov eax, esi
push eax
mov byte [esp + 0x66dc], 0x65
lea eax, [esp + 0x44]
mov dword [esp + 0x44], edi
call fcn.00496e70
test eax, eax
je 0x4534df
mov esi, 0x545314
push dword [0x5452c4]
lea eax, [esp + 0x36d0]
push eax
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x4534bc
xor edi, edi
cmp dword [esp + 0x32c8], edi
jbe 0x4534bc
lea ebx, [esp + edi*8 + 0x32cc]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [ebx], eax
je 0x4534b2
test byte [esp + edi*8 + 0x32d0], 3
je 0x4534b2
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247d4
push ecx
mov byte [esp + 0x66d8], 0x66
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x5452c4
call fcn.004247d4
mov byte [esp + 0x66d8], 0x65
mov ebx, dword [ebx]
call fcn.004480a1
pop ecx
pop ecx
inc edi
cmp edi, dword [esp + 0x32c8]
jb 0x453460
push 1
lea eax, [esp + 0x2ea8]
push eax
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0x44]
call fcn.00496e70
test eax, eax
jne 0x45343c
xor eax, eax
push eax
push eax
push eax
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
lea eax, [esp + 0xbc]
call fcn.00497170
lea eax, [esp + 0x13e4]
mov dword [esp + 0x66d0], 4
call fcn.0042796b
lea ecx, [esp + 0x4c]
call fcn.0042249e
jmp 0x45577b
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x16c0]
push eax
call fcn.00490040
push 0xffffffffffffffff
mov dword [esp + 0x66d4], 0x167
push dword [esp + 0x54]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x68
mov ecx, esp
mov dword [esp + 0x2c], esp
push str._Vintegrate_
call fcn.004247e9
push ecx
mov byte [esp + 0x66e4], 0x69
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d4
push esi
push ecx
mov byte [esp + 0x66ec], 0x6a
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x16d0]
push eax
mov byte [esp + 0x66f0], 0x67
call fcn.0043fbed
add esp, 0x20
call fcn.0044cfb9
jmp 0x45146f
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x40]
push str._ProcessList:all
push dword [eax + ecx*4]
call fcn.004cbbc8
mov edi, eax
neg edi
pop ecx
sbb edi, edi
pop ecx
lea esi, [esp + 0xbc]
inc edi
call fcn.00497150
mov dword [esp + 0x66d0], 0x16b
and dword [esp + 0x2c], 0
lea ecx, [esp + 0x40]
call fcn.0042248a
xor eax, eax
test edi, edi
sete al
mov byte [esp + 0x66d0], 0x6c
mov dword [esp + 0x38], eax
jmp 0x4538ce
lea eax, [esp + 0x227c]
push eax
lea eax, [esp + 0x264]
push str._AppID_ws_n
push eax
call fcn.00478610
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66d4], 0x6d
call fcn.00424857
lea ecx, [esp + 0x260]
mov byte [esp + 0x66d0], 0x6c
call fcn.0042249e
push dword [esp + 0x1a58]
lea eax, [esp + 0x304]
push str.____SerialId:__d_n
push eax
call fcn.00478610
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66d4], 0x6e
call fcn.00424857
lea ecx, [esp + 0x300]
mov byte [esp + 0x66d0], 0x6c
call fcn.0042249e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x1e70]
mov esi, 0x3e8
xor edx, edx
mov ecx, esi
div ecx
push eax
lea eax, [esp + 0x26c]
push str.____Started:__d_sec_ago_n
push eax
call fcn.00478610
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66d4], 0x6f
call fcn.00424857
lea ecx, [esp + 0x268]
mov byte [esp + 0x66d0], 0x6c
call fcn.0042249e
mov eax, dword [esp + 0x1e74]
xor edx, edx
div esi
push eax
lea eax, [esp + 0x2d4]
push str.____Blocking_buffering:__d_sec_n
push eax
call fcn.00478610
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66d4], 0x70
call fcn.00424857
lea ecx, [esp + 0x2d0]
mov byte [esp + 0x66d0], 0x6c
call fcn.0042249e
lea eax, [esp + 0x270]
push str.____Processes:_n
push eax
call fcn.00478610
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66d4], 0x71
call fcn.00424857
lea ecx, [esp + 0x270]
mov byte [esp + 0x66d0], 0x6c
call fcn.0042249e
and dword [esp + 0x54], 0
cmp dword [esp + 0x1e78], 0
jbe 0x4538ce
push ebx
lea ecx, [esp + 0xf8]
call fcn.004247e9
mov byte [esp + 0x66d0], 0x72
mov edi, dword [esp + 0x54]
lea edi, [esp + edi*8 + 0x1e7c]
push dword [edi]
lea esi, [esp + 0xf8]
call fcn.00476d30
pop ecx
test eax, eax
jne 0x4537d6
push 0x503fa0
mov ecx, esi
call fcn.00424842
push 0x5c
push ecx
lea eax, [esp + 0xfc]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x280]
push eax
call fcn.00478940
add esp, 0xc
mov byte [esp + 0x66d0], 0x73
push dword [eax]
lea eax, [esp + 0x32c]
push dword [edi]
push str._______wd:__ws
push eax
call fcn.00478610
add esp, 0x10
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66d4], 0x74
call fcn.00424857
lea ecx, [esp + 0x328]
call fcn.0042249e
lea ecx, [esp + 0x278]
mov byte [esp + 0x66d0], 0x72
call fcn.0042249e
mov esi, dword [esp + 0x54]
mov eax, dword [esp + esi*8 + 0x1e80]
test eax, eax
je 0x45389a
push eax
lea eax, [esp + 0x2dc]
push str._0x_x_
push eax
call fcn.00478610
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66d4], 0x75
call fcn.00424857
lea ecx, [esp + 0x2d8]
mov byte [esp + 0x66d0], 0x72
call fcn.0042249e
push 0x4ffaac
lea ecx, [esp + 0x44]
call fcn.004261e4
lea ecx, [esp + 0xf4]
mov byte [esp + 0x66d0], 0x6c
call fcn.0042249e
inc esi
mov dword [esp + 0x54], esi
cmp esi, dword [esp + 0x1e78]
jb 0x453797
push dword [esp + 0x38]
lea eax, [esp + 0x1a58]
push eax
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0x38]
call fcn.00496e70
test eax, eax
jne 0x45362a
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
cmp dword [esp + 0x34], eax
jne 0x45391c
push str.No_active_virtual_apps
call fcn.004247e9
call fcn.0044d085
pop ecx
pop ecx
jmp 0x452dce
lea eax, [esp + 0x48]
jmp 0x4522fb
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
push 0x5452b8
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x453958
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
lea esi, [esp + 0xbc]
call fcn.00497150
mov dword [esp + 0x66d0], 0x176
and dword [esp + 0x38], 0
jmp 0x45398f
push dword [0x5452c4]
lea eax, [esp + 0x40f8]
push eax
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x4539bf
push 1
lea eax, [esp + 0x38d0]
push eax
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0x44]
call fcn.00496e70
test eax, eax
jne 0x453976
lea eax, [esp + 0xbc]
call fcn.00497170
jmp 0x44ef18
push 0x2bc
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0xbc]
mov dword [esp + 0x66d0], 4
call fcn.00497170
jmp 0x453958
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
push 0x5452b8
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x453a19
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
push 0x5141d4
call fcn.004cbdd0
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + esi*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x104]
call fcn.004247e9
push ecx
mov dword [esp + 0x66d4], 0x177
mov ecx, esp
mov dword [esp + 0x18], esp
mov esi, 0x503fa4
xor ebx, ebx
push esi
mov dword [esp + 0xb0], ebx
lea edi, [esp + 0xb0]
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0x78
lea eax, [esp + 0x108]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x288]
push eax
mov byte [esp + 0x66dc], 0x77
call fcn.0047c800
add esp, 0xc
mov byte [esp + 0x66d0], 0x79
cmp dword [esp + 0xa8], 0xffffffff
jne 0x453ac5
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.InactivitySec_not_specified
jmp 0x44ef0e
push dword [esp + 0x280]
call fcn.004ce741
pop ecx
mov dword [esp + 0x7c], eax
cmp eax, ebx
jne 0x453af1
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Incorrect_InactivitySec
jmp 0x44ef0e
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
lea edi, [esp + 0xb0]
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0x7a
lea eax, [esp + 0x108]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x310]
push eax
mov byte [esp + 0x66dc], 0x79
call fcn.0047c800
add esp, 0xc
mov byte [esp + 0x66d0], 0x7b
cmp dword [esp + 0xa8], 0xffffffff
jne 0x453b62
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.TimeoutSec_not_specified
jmp 0x44ef0e
push dword [esp + 0x308]
call fcn.004ce741
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
mov dword [esp + 0x58], eax
lea edi, [esp + 0xb0]
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0x7c
lea eax, [esp + 0x108]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x290]
push eax
mov byte [esp + 0x66dc], 0x7b
call fcn.0047c800
add esp, 0xc
mov byte [esp + 0x66d0], 0x7d
cmp dword [esp + 0xa8], 0xffffffff
jne 0x453bdd
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x453b58
push str.true
lea eax, [esp + 0x28c]
call fcn.0042486c
mov edi, eax
neg edi
sbb edi, edi
lea eax, [esp + 0x56c]
inc edi
push eax
mov dword [esp + 0x2c], edi
call fcn.00457741
lea eax, [esp + 0x3ac]
mov byte [esp + 0x66d0], 0x7e
push eax
mov dword [esp + 0x38], ebx
mov dword [esp + 0x70], ebx
call fcn.0042b941
mov byte [esp + 0x66d0], 0x7f
xor ebx, ebx
lea esi, [esp + 0xbc]
mov dword [esp + 0x58], ebx
call fcn.00497150
mov byte [esp + 0x66d0], 0x80
lea eax, [esp + 0x3ac]
mov dword [esp + 0x80], ebx
call fcn.00457650
push 1
lea eax, [esp + 0x2480]
push eax
mov eax, esi
push eax
lea eax, [esp + 0x8c]
call fcn.00496e70
test eax, eax
je 0x453ed6
push dword [0x5452c4]
lea eax, [esp + 0x2ca8]
push eax
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x453e71
mov dword [esp + 0x58], 1
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x2c], ebx
cmp dword [esp + 0x28a0], ebx
jbe 0x453dac
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + eax*8 + 0x28a4]
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x3b0]
mov dword [esp + 0x58], esi
call fcn.004575f2
push esi
push ebx
push 0x400
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [esp + 0x38], eax
cmp eax, ebx
je 0x453d7d
and dword [esp + 0x3fc], 0
and dword [esp + 0x400], 0
push 0xa
pop ecx
xor eax, eax
lea edi, [esp + 0x404]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x3fc]
push eax
push dword [esp + 0x3c]
call dword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
mov edi, dword [esp + 0x41c]
add edi, dword [esp + 0x414]
mov esi, dword [esp + 0x420]
adc esi, dword [esp + 0x418]
lea eax, [esp + 0x54]
push eax
lea ebx, [esp + 0x570]
call fcn.00457792
mov ecx, edi
sub ecx, dword [eax]
mov edx, esi
sbb edx, dword [eax + 4]
add dword [esp + 0x1c], ecx
lea eax, [esp + 0x54]
push eax
adc dword [esp + 0x24], edx
call fcn.00457792
push dword [esp + 0x38]
mov dword [eax], edi
mov dword [eax + 4], esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [esp + 0x28]
xor ebx, ebx
inc dword [esp + 0x2c]
mov eax, dword [esp + 0x2c]
cmp eax, dword [esp + 0x28a0]
jb 0x453cb7
cmp dword [esp + 0x20], ebx
ja 0x453e41
jb 0x453dac
cmp dword [esp + 0x1c], 0x2800
ja 0x453e41
add dword [esp + 0x34], 0x1f4
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x38]
push dword [esp + 0x24]
push dword [esp + 0x28ac]
push dword [0x5452c4]
push str.WaitForInactivity__s_:__d_processes:_overall_disk_activity_delta_d_bytes___Inactive___d_msec
push eax
call fcn.00478610
add esp, 0x18
call fcn.0044c7ef
mov eax, dword [esp + 0x80]
imul eax, eax, 0x3e8
cmp dword [esp + 0x38], eax
pop ecx
jl 0x453e71
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5452c4]
push str.WaitForInactivity__s_:_inactivity_threshold_reached__quitting__success_
push eax
call fcn.00478610
add esp, 0xc
call fcn.0044c7ef
pop ecx
cmp edi, ebx
je 0x453e3b
sub esp, 0x18
mov eax, esp
mov dword [esp + 0x2c], esp
lea ecx, [esp + 0x3c4]
push ecx
push eax
call fcn.00457557
call fcn.0044da23
add esp, 0x18
push ebx
jmp 0x44ef1a
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x20]
mov dword [esp + 0x3c], ebx
push dword [esp + 0x28a8]
push dword [0x5452c4]
push str.WaitForInactivity__s_:__d_processes:_overall_disk_activity_delta_d_bytes___Active
push eax
call fcn.00478610
add esp, 0x14
call fcn.0044c7ef
pop ecx
push 1
lea eax, [esp + 0x2480]
push eax
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0x8c]
call fcn.00496e70
test eax, eax
jne 0x453c79
cmp dword [esp + 0x58], ebx
je 0x453ed6
mov esi, 0x1f4
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esp + 0x50]
add dword [esp + 0x6c], esi
imul eax, eax, 0x3e8
cmp dword [esp + 0x6c], eax
jge 0x453efc
lea eax, [esp + 0xbc]
mov byte [esp + 0x66d0], 0x7f
call fcn.00497170
jmp 0x453c2d
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5452c4]
push str.WaitForInactivity__s_:_no_longer_running__quitting__success_
push eax
call fcn.00478610
add esp, 0xc
call fcn.0044c7ef
pop ecx
jmp 0x453e3b
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5452c4]
push str.WaitForInactivity__s_:_timeout_reached__quitting__cancelled_
push eax
call fcn.00478610
add esp, 0xc
call fcn.0044c7ef
pop ecx
cmp edi, ebx
je 0x453f40
sub esp, 0x18
mov eax, esp
mov dword [esp + 0x2c], esp
lea ecx, [esp + 0x3c4]
push ecx
push eax
call fcn.00457557
call fcn.0044da23
add esp, 0x18
push 0x14
jmp 0x44ef1a
lea eax, [esp + 0x2e0]
push eax
mov eax, dword [esp + 0x84]
mov eax, dword [eax + 0x44]
call fcn.004336d2
lea eax, [esp + 0x2e0]
push eax
call fcn.0043380f
jmp 0x44ef18
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.AutoUpdate
call fcn.004247e9
call fcn.0044c81f
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
mov esi, 0x5452b8
push esi
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x453fb9
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x545300]
push str.AutoUpdate_s
push eax
call fcn.00478610
add esp, 0xc
call fcn.0044c81f
mov ecx, 0x545300
mov dword [esp], str.https:__online.cameyo.com
call fcn.00424842
push str.0000
mov ecx, 0x545304
call fcn.00424842
mov ecx, esi
call fcn.004aaf80
jmp 0x453512
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.VirtRegSyncExport
call fcn.004247e9
call fcn.0044c81f
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
push 0x5452b8
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x45404d
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
call fcn.00449ac8
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
push str.VirtRegSyncExport:_bRet_d
push ecx
call fcn.00478610
add esp, 0xc
call fcn.0044c81f
pop ecx
jmp 0x453512
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.StartStreaming:AppIDSkype
call fcn.004247e9
call fcn.0042769b
pop ecx
jmp 0x45406d
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
push 0x5452b8
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x4540c1
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.open
xor edi, edi
xor ebx, ebx
call fcn.004247e9
push edi
push ecx
mov dword [esp + 0x66dc], 0x183
mov eax, esp
mov dword [esp + 0x28], esp
push dword [0x545314]
push str._select___s_
push eax
call fcn.00478610
add esp, 8
mov byte [esp + 0x66e0], 0x84
mov ecx, esp
mov dword [esp + 0x54], esp
push str.explorer.exe
call fcn.004247e9
mov dword [esp + 0x66e0], 4
call fcn.00476f50
add esp, 0x10
jmp 0x453512
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SvcRegister
call fcn.004247e9
call fcn.0044c81f
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
mov esi, 0x5452b8
push esi
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x454176
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
mov ecx, esi
call fcn.0042b0e1
mov edi, eax
test edi, edi
jne 0x45419a
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_mount_virtual_registry
jmp 0x44ef0e
call fcn.00483e30
push dword [0x5413cc]
push edi
push esi
call fcn.00423aad
add esp, 0xc
push dword [0x5413cc]
mov esi, eax
test esi, esi
jne 0x4541c9
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Success
jmp 0x4541da
cmp esi, 5
jne 0x4541e4
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_services_to_register
call fcn.004247e9
jmp 0x452cbc
lea eax, [esp + 0x294]
push esi
push eax
call fcn.0047fa60
add esp, 4
mov dword [esp + 0x66d8], 0x185
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Failed_registering_services:__s
push ecx
call fcn.00478610
add esp, 0xc
call fcn.0044d085
pop ecx
pop ecx
lea ecx, [esp + 0x290]
call fcn.0042249e
jmp 0x45146f
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SvcStart
call fcn.004247e9
call fcn.0044c81f
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
mov esi, 0x5452b8
push esi
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x454277
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
mov ecx, esi
call fcn.004242ff
push dword [0x5413cc]
mov esi, eax
test esi, esi
je 0x4541bb
cmp esi, 5
jne 0x4542a4
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_services_to_start
jmp 0x4541da
lea eax, [esp + 0x324]
push esi
push eax
call fcn.0047fa60
add esp, 4
mov dword [esp + 0x66d8], 0x186
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Failed_starting_services:__s
push ecx
call fcn.00478610
add esp, 0xc
call fcn.0044d085
pop ecx
pop ecx
lea ecx, [esp + 0x320]
jmp 0x454224
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SvcRegisterStart
call fcn.004247e9
call fcn.0044c81f
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
mov esi, 0x5452b8
push esi
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x454332
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
mov ecx, esi
call fcn.0042b0e1
mov edi, eax
test edi, edi
jne 0x454351
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x454190
call fcn.00483e30
push dword [0x5413cc]
push edi
push esi
call fcn.00423aad
add esp, 0xc
mov ebx, str.No_services_to_register
mov edi, str.Failed_registering_services:__s
cmp eax, 5
jne 0x454391
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247e9
call fcn.0044d085
pop ecx
pop ecx
jmp 0x4543e7
test eax, eax
je 0x4543e7
push dword [0x5413cc]
push eax
lea eax, [esp + 0x2a0]
push eax
call fcn.0047fa60
add esp, 4
mov dword [esp + 0x66d8], 0x187
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push edi
push ecx
call fcn.00478610
add esp, 0xc
call fcn.0044d085
pop ecx
pop ecx
lea ecx, [esp + 0x298]
mov dword [esp + 0x66d0], 4
call fcn.0042249e
mov ecx, esi
call fcn.004242ff
push dword [0x5413cc]
mov esi, eax
test esi, esi
je 0x4541bb
cmp esi, 5
jne 0x454410
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
jmp 0x4541da
lea eax, [esp + 0x2ec]
push esi
push eax
call fcn.0047fa60
add esp, 4
mov dword [esp + 0x66d8], 0x188
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push edi
push ecx
call fcn.00478610
add esp, 0xc
call fcn.0044d085
pop ecx
pop ecx
lea ecx, [esp + 0x2e8]
jmp 0x454224
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SvcStop
call fcn.004247e9
call fcn.0044c81f
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
mov esi, 0x5452b8
push esi
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x45449a
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
push 0
mov ecx, esi
call fcn.00423e9f
mov esi, eax
pop ecx
push dword [0x5413cc]
test esi, esi
je 0x4541bb
cmp esi, 5
jne 0x4544ca
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_services_to_stop
jmp 0x4541da
lea eax, [esp + 0x2a4]
push esi
push eax
call fcn.0047fa60
add esp, 4
mov dword [esp + 0x66d8], 0x189
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Failed_stopping_services:__s
push ecx
call fcn.00478610
add esp, 0xc
call fcn.0044d085
pop ecx
pop ecx
lea ecx, [esp + 0x2a0]
jmp 0x454224
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SvcRemove
call fcn.004247e9
call fcn.0044c81f
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
mov esi, 0x5452b8
push esi
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x454558
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
push 1
mov ecx, esi
call fcn.00423e9f
mov esi, eax
pop ecx
push dword [0x5413cc]
test esi, esi
je 0x4541bb
cmp esi, 5
jne 0x454588
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_services_to_remove
jmp 0x4541da
lea eax, [esp + 0x314]
push esi
push eax
call fcn.0047fa60
add esp, 4
mov dword [esp + 0x66d8], 0x18a
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Failed_removing_services:__s
push ecx
call fcn.00478610
add esp, 0xc
call fcn.0044d085
pop ecx
pop ecx
lea ecx, [esp + 0x310]
jmp 0x454224
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.ScmDirectInit
call fcn.004247e9
call fcn.0044c81f
mov dword [esp], 0x5149b8
call fcn.004cbdd0
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + esi*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x2ac]
call fcn.004247e9
push ecx
mov dword [esp + 0x66d4], 0x18b
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
mov esi, 0x5452b8
push esi
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x454646
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
push ecx
lea eax, [esp + 0x2ac]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
mov edi, 0x545350
call fcn.004247d4
call fcn.0042ab19
pop ecx
mov edi, esi
call fcn.004246e1
jmp 0x44ef18
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.RepoSync
call fcn.004247e9
call fcn.0044c81f
mov eax, dword [esp + 0x34]
pop ecx
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0x18c]
call fcn.004247e9
lea eax, [esp + 0x5a4]
push eax
mov dword [esp + 0x66d4], 0x18c
call fcn.0042b941
lea eax, [esp + 0x58c]
push eax
mov byte [esp + 0x66d4], 0x8d
call fcn.0042b941
lea eax, [esp + 0x5bc]
push eax
mov byte [esp + 0x66d4], 0x8e
call fcn.0042b941
push 0
lea eax, [esp + 0x5c0]
push eax
lea eax, [esp + 0x594]
push eax
lea eax, [esp + 0x5b0]
push eax
push ecx
mov byte [esp + 0x66e4], 0x8f
lea eax, [esp + 0x19c]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d4
push ecx
mov byte [esp + 0x66e8], 0x90
lea eax, [esp + 0x1a0]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66e8], 0x8f
call fcn.00443e50
add esp, 0x18
push eax
jmp 0x44ef1a
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.MergeRegistry
call fcn.004247e9
call fcn.0044c81f
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
mov esi, 0x5452b8
push esi
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x45478f
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
push esi
call fcn.0044514e
pop ecx
mov esi, eax
lea eax, [esp + 0x2f0]
push esi
push eax
call fcn.0047fa60
add esp, 4
mov ecx, esp
mov dword [esp + 0x66d4], 0x191
mov dword [esp + 0x18], esp
push dword [eax]
push esi
push str.Loader_MergeRegistry___d__s_
push ecx
call fcn.00478610
add esp, 0x10
call fcn.0044c7ef
pop ecx
lea ecx, [esp + 0x2f0]
mov dword [esp + 0x66d0], 4
call fcn.0042249e
push dword [0x5413cc]
test esi, esi
je 0x4541bb
lea eax, [esp + 0x2b4]
push esi
push eax
call fcn.0047fa60
add esp, 4
mov dword [esp + 0x66d8], 0x192
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Failed:__s
push ecx
call fcn.00478610
add esp, 0xc
call fcn.0044d085
pop ecx
pop ecx
lea ecx, [esp + 0x2b0]
jmp 0x454224
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.OpenFile
call fcn.004247e9
call fcn.0044c81f
mov eax, dword [esp + 0x34]
pop ecx
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0x17c]
call fcn.004247e9
push ecx
mov dword [esp + 0x66d4], 0x193
lea eax, [esp + 0x17c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x334]
push eax
call fcn.004786a0
pop ecx
pop ecx
mov edi, eax
mov byte [esp + 0x66d0], 0x94
call fcn.0042e82d
push eax
lea ecx, [esp + 0x30]
call fcn.004247d4
lea ecx, [esp + 0x330]
mov byte [esp + 0x66d0], 0x96
call fcn.0042249e
mov eax, dword [esp + 0x2c]
cmp dword [eax - 0xc], 0
jne 0x4548e2
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.File_has_no_extension
jmp 0x44ef0e
lea ebx, [esp + 0x2c]
call fcn.004573d9
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
push 0x5452b8
call fcn.0042a37d
xor ebx, ebx
pop ecx
pop ecx
cmp al, bl
jne 0x454920
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
mov dword [esp + 0x170], ebx
push 0x3b
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x545390
lea edi, [esp + 0x17c]
call fcn.004247d4
lea eax, [esp + 0xa4]
push eax
call fcn.0047c6b0
add esp, 0xc
or esi, 0xffffffff
mov byte [esp + 0x66d0], 0x97
cmp dword [esp + 0x170], esi
je 0x454bab
mov eax, dword [esp + 0x9c]
cmp dword [eax - 0xc], ebx
jne 0x45498b
lea ecx, [esp + 0x9c]
mov byte [esp + 0x66d0], 0x96
call fcn.0042249e
jmp 0x454927
push 0x3e
push ecx
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov dword [esp + 0xd8], ebx
lea edi, [esp + 0xd8]
call fcn.004247d4
lea eax, [esp + 0xf0]
push eax
call fcn.0047c6b0
add esp, 0xc
mov byte [esp + 0x66d0], 0x98
cmp dword [esp + 0xcc], esi
je 0x454a13
push 0x3e
push ecx
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x11c]
push eax
call fcn.0047c6b0
add esp, 0xc
mov byte [esp + 0x66d0], 0x99
cmp dword [esp + 0xcc], esi
jne 0x454a24
lea ecx, [esp + 0x114]
call fcn.0042249e
lea ecx, [esp + 0xe8]
call fcn.0042249e
jmp 0x454975
mov dword [esp + 0x198], ebx
push 0x2c
push ecx
lea eax, [esp + 0xf0]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
lea edi, [esp + 0x1a4]
call fcn.004247d4
lea eax, [esp + 0xb4]
push eax
call fcn.0047c6b0
add esp, 0xc
mov byte [esp + 0x66d0], 0x9a
cmp dword [esp + 0x198], esi
je 0x454b9a
mov eax, dword [esp + 0xac]
cmp dword [eax - 0xc], ebx
jne 0x454a8f
lea ecx, [esp + 0xac]
mov byte [esp + 0x66d0], 0x99
call fcn.0042249e
jmp 0x454a2b
push dword [esp + 0x2c]
lea eax, [esp + 0xb0]
call fcn.0042486c
test eax, eax
jne 0x454a79
lea eax, [esp + 0x114]
push eax
lea ecx, [esp + 0x58]
call fcn.004247d4
mov byte [esp + 0x66d0], 0x9b
push dword [esp + 0x178]
lea eax, [esp + 0x58]
push 0x51097c
push eax
call fcn.0042b689
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x58]
push str.OpenFile:_executing:__s
push eax
call fcn.00478610
add esp, 0xc
call fcn.0044c7ef
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
push dword [esp + 0x54]
lea eax, [esp + 0x2bc]
push str._exec__s
push eax
call fcn.00478610
mov eax, dword [eax]
add esp, 0xc
push ebx
push ebx
push eax
push dword [esp + 0x24]
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
xor ecx, ecx
cmp eax, 0x20
setg cl
mov dword [esp + 0x38], ecx
lea ecx, [esp + 0x2b8]
call fcn.0042249e
push dword [esp + 0x38]
lea eax, [esp + 0x238]
push eax
call fcn.0047fb40
pop ecx
pop ecx
mov edi, eax
mov byte [esp + 0x66d0], 0x9c
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
push dword [edi]
push str.OpenFile:_bExecOK_s__LE_d
push ecx
call fcn.00478610
add esp, 0x10
call fcn.0044c7ef
pop ecx
lea ecx, [esp + 0x234]
call fcn.0042249e
cmp dword [esp + 0x38], ebx
jne 0x453e3b
call esi
jmp 0x454740
lea ecx, [esp + 0xac]
call fcn.0042249e
jmp 0x454a07
lea ecx, [esp + 0x9c]
mov byte [esp + 0x66d0], 0x96
call fcn.0042249e
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x34]
push str.Application_does_not_handle_this_type_of_files:__s
jmp 0x44f0a0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.FileDialog
call fcn.004247e9
call fcn.0044c81f
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
push 0x5452b8
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x454c22
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x545418
call fcn.004247d4
call fcn.004a1990
pop ecx
lea eax, [esp + 0x42f4]
push eax
call fcn.0043415c
mov dword [esp + 0x66d0], 0x19d
mov ecx, dword [esp + 0x80]
lea eax, [esp + 0x42f4]
push str._FileDialog:
mov dword [ecx + 0x20], eax
call fcn.004cbdd0
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + esi*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x9c]
call fcn.004247e9
lea ecx, [esp + 0x40]
call fcn.0042248a
push ecx
mov byte [esp + 0x66d4], 0x9f
and dword [esp + 0x6c], 0
mov ecx, esp
mov dword [esp + 0x18], esp
mov esi, 0x507ff0
push esi
lea edi, [esp + 0x70]
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0xa0
lea eax, [esp + 0xa0]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x24c]
push eax
mov byte [esp + 0x66dc], 0x9f
call fcn.0047c800
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66d4], 0xa1
call fcn.0042482d
lea ecx, [esp + 0x244]
mov byte [esp + 0x66d0], 0x9f
call fcn.0042249e
cmp dword [esp + 0x68], 0xffffffff
jne 0x454d28
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Invalid_FileDialog_arguments
jmp 0x44ef0e
push dword [esp + 0x40]
call fcn.004ce741
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
mov dword [esp + 0x88], eax
lea edi, [esp + 0x70]
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0xa2
lea eax, [esp + 0xa0]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x254]
push eax
mov byte [esp + 0x66dc], 0x9f
call fcn.0047c800
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66d4], 0xa3
call fcn.0042482d
lea ecx, [esp + 0x24c]
mov byte [esp + 0x66d0], 0x9f
call fcn.0042249e
cmp dword [esp + 0x68], 0xffffffff
jne 0x454dbb
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x454d1e
push dword [esp + 0x40]
call fcn.004ce741
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
mov dword [esp + 0x40], eax
lea edi, [esp + 0x70]
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0xa4
lea eax, [esp + 0xa0]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x28c]
push eax
mov byte [esp + 0x66dc], 0x9f
call fcn.0047c800
add esp, 0xc
mov byte [esp + 0x66d0], 0xa5
cmp dword [esp + 0x68], 0xffffffff
jne 0x454e2d
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x454d1e
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
lea edi, [esp + 0x70]
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0xa6
lea eax, [esp + 0xa0]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x284]
push eax
mov byte [esp + 0x66dc], 0xa5
call fcn.0047c800
add esp, 0xc
mov byte [esp + 0x66d0], 0xa7
cmp dword [esp + 0x68], 0xffffffff
jne 0x454e93
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x454d1e
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
lea edi, [esp + 0x70]
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0xa8
lea eax, [esp + 0xa0]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x27c]
push eax
mov byte [esp + 0x66dc], 0xa7
call fcn.0047c800
add esp, 0xc
mov byte [esp + 0x66d0], 0xa9
cmp dword [esp + 0x68], 0xffffffff
jne 0x454ef9
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x454d1e
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
lea edi, [esp + 0x70]
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0xaa
lea eax, [esp + 0xa0]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x274]
push eax
mov byte [esp + 0x66dc], 0xa9
call fcn.0047c800
add esp, 0xc
mov byte [esp + 0x66d0], 0xab
cmp dword [esp + 0x68], 0xffffffff
jne 0x454f5f
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x454d1e
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
lea edi, [esp + 0x70]
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0xac
lea eax, [esp + 0xa0]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x25c]
push eax
mov byte [esp + 0x66dc], 0xab
call fcn.0047c800
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66d4], 0xad
call fcn.0042482d
lea ecx, [esp + 0x254]
mov byte [esp + 0x66d0], 0xab
call fcn.0042249e
cmp dword [esp + 0x68], 0xffffffff
jne 0x454fe3
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x454d1e
push dword [esp + 0x40]
call fcn.004ce741
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
mov dword [esp + 0x84], eax
lea edi, [esp + 0x70]
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0xae
lea eax, [esp + 0xa0]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x264]
push eax
mov byte [esp + 0x66dc], 0xab
call fcn.0047c800
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66d4], 0xaf
call fcn.0042482d
lea ecx, [esp + 0x25c]
mov byte [esp + 0x66d0], 0xab
call fcn.0042249e
cmp dword [esp + 0x68], 0xffffffff
jne 0x455076
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x454d1e
push dword [esp + 0x40]
call fcn.004ce741
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
push str.CE.Dlg._x
push ecx
call fcn.00478610
lea eax, [esp + 0x164]
add esp, 0xc
push eax
call fcn.00477ce0
pop ecx
pop ecx
lea eax, [esp + 0x434]
push eax
mov byte [esp + 0x66d4], 0xb0
call fcn.0042b941
push 0
push 0
mov edi, str.CYO_FILEDIALOG_FILTERS
push edi
mov byte [esp + 0x66dc], 0xb1
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push edi
mov dword [esp + 0x30], eax
call fcn.004247e9
mov ecx, dword [esp + 0x2c]
lea eax, [esp + 0x268]
push eax
call fcn.0047ed70
pop ecx
pop ecx
mov byte [esp + 0x66d0], 0xb2
and dword [esp + 0x68], 0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
lea edi, [esp + 0x70]
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0xb3
lea eax, [esp + 0x26c]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x110]
push eax
mov byte [esp + 0x66dc], 0xb2
call fcn.0047c800
add esp, 0xc
mov byte [esp + 0x66d0], 0xb4
cmp dword [esp + 0x68], 0xffffffff
je 0x45517f
lea eax, [esp + 0x108]
push eax
lea eax, [esp + 0x438]
call fcn.00424b98
lea ecx, [esp + 0x108]
mov byte [esp + 0x66d0], 0xb2
call fcn.0042249e
jmp 0x455101
lea ecx, [esp + 0x108]
mov byte [esp + 0x66d0], 0xb2
call fcn.0042249e
sub esp, 0x18
mov eax, esp
mov dword [esp + 0x2c], esp
lea ecx, [esp + 0x44c]
push ecx
push eax
call fcn.0042c863
mov byte [esp + 0x66e8], 0xb5
push dword [esp + 0x94]
lea eax, [esp + 0x288]
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d4
push ecx
mov byte [esp + 0x66f4], 0xb6
lea eax, [esp + 0x298]
mov ecx, esp
mov dword [esp + 0x68], esp
push eax
call fcn.004247d4
push ecx
mov byte [esp + 0x66f8], 0xb7
lea eax, [esp + 0x2a4]
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call fcn.004247d4
push ecx
mov byte [esp + 0x66fc], 0xb8
lea eax, [esp + 0x2b0]
mov ecx, esp
mov dword [esp + 0xa8], esp
push eax
call fcn.004247d4
push dword [esp + 0x64]
lea esi, [esp + 0x4324]
push dword [esp + 0xb0]
mov byte [esp + 0x6704], 0xb2
call fcn.00434571
mov ecx, esi
call fcn.004be64c
cmp eax, 1
jne 0x4553c2
push ebx
lea ecx, [esp + 0x150]
call fcn.004247e9
push ecx
mov byte [esp + 0x66d4], 0xb9
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x158]
push str.FileDialog:_writing_response_to__s:
push eax
call fcn.00478610
add esp, 0xc
call fcn.0044c7ef
mov eax, dword [esp + 0x442c]
pop ecx
push ebx
lea ecx, [esp + 0xf4]
mov dword [esp + 0x2c], eax
call fcn.004247e9
lea eax, [esp + 0x8c]
lea ecx, [esp + 0x4460]
mov byte [esp + 0x66d0], 0xba
call fcn.00424b83
jmp 0x455324
lea esi, [esp + 0x8c]
call fcn.00424d35
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.___FileDialog:__s
push ecx
call fcn.00478610
add esp, 0xc
call fcn.0044c7ef
mov eax, dword [esp + 0xf4]
cmp dword [eax - 0xc], 0
pop ecx
je 0x455306
push 0x507ff0
lea ecx, [esp + 0xf4]
call fcn.004261e4
lea esi, [esp + 0x8c]
call fcn.00424d35
push eax
lea ecx, [esp + 0xf4]
call fcn.00424857
call fcn.00424d5d
lea eax, [esp + 0x394]
lea ecx, [esp + 0x4460]
call fcn.004574c9
mov edi, eax
lea esi, [esp + 0x8c]
call fcn.00424d88
test al, al
jne 0x4552bf
push dword [esp + 0xf0]
lea eax, [esp + 0x290]
push dword [esp + 0x2c]
push str._d__s
push eax
call fcn.00478610
add esp, 0x10
push eax
lea ecx, [esp + 0x150]
mov byte [esp + 0x66d4], 0xbb
call fcn.0042482d
lea ecx, [esp + 0x28c]
mov byte [esp + 0x66d0], 0xba
call fcn.0042249e
mov ecx, dword [esp + 0x14c]
mov eax, dword [ecx - 0xc]
push ecx
push ecx
lea edi, [eax + eax]
lea eax, [esp + 0x15c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d4
call fcn.00478fe0
jmp 0x4500af
push 0x800704c7
jmp 0x44ef1a
push str.Cameyo.exe__UpgradePkg_
call fcn.004247e9
call fcn.0044c81f
pop ecx
lea ecx, [esp + 0x110]
call fcn.0042248a
mov byte [esp + 0x66d0], 0xbe
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x40]
push dword [eax + ecx*4]
lea ecx, [esp + 0x12c]
call fcn.004247e9
push ecx
mov byte [esp + 0x66d4], 0xbf
lea eax, [esp + 0x12c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
call fcn.0047b160
pop ecx
test eax, eax
jne 0x45544b
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x130]
push str._s_not_found
jmp 0x44f0a0
push 0
lea eax, [esp + 0x114]
push eax
push ecx
lea eax, [esp + 0x134]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
push ecx
mov byte [esp + 0x66e0], 0xc0
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004774f0
pop ecx
mov byte [esp + 0x66e0], 0xbf
call fcn.00449ddf
add esp, 0x10
push dword [0x5413cc]
test eax, eax
jne 0x4554ac
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x118]
jmp 0x45009c
push eax
lea eax, [esp + 0x398]
push eax
call fcn.0047fa60
add esp, 4
mov byte [esp + 0x66d8], 0xc1
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x118]
push dword [eax]
push str._s:__s
push ecx
jmp 0x452508
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.AuthCheck
call fcn.004247e9
call fcn.0044c81f
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
mov esi, 0x5452b8
push esi
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x455528
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
call fcn.0043aef9
xor edi, edi
mov dword [esp + 0x28], eax
cmp eax, edi
je 0x4555d8
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x40]
push str._AuthCheck:Force
push dword [eax + ecx*4]
call fcn.004cbbc8
pop ecx
pop ecx
lea eax, [esp + 0x294]
push eax
push ecx
mov dword [esp + 0x1c], esp
mov ebx, esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.AuthToken.dat
mov dword [esp + 0x2a4], edi
call fcn.004247e9
push ebx
mov ecx, edi
call fcn.0048a1c0
pop ecx
pop ecx
mov ecx, dword [esp + 0x30]
mov edx, esi
call fcn.0043a610
push dword [0x5413cc]
mov esi, eax
push ecx
mov dword [esp + 0x1c], esp
test esi, esi
je 0x4555ad
mov ecx, esp
push str.Allowed_to_run_this_package
call fcn.004247e9
jmp 0x4555c2
mov eax, esp
push 0x54539c
push str.Denied:_n
push eax
call fcn.00424a8d
add esp, 0xc
call fcn.0044d085
neg esi
sbb esi, esi
pop ecx
and esi, 0xffffffef
pop ecx
add esi, 0x11
jmp 0x45146f
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_authentication_server_specified_in_this_package
jmp 0x44ef0e
push str.Vintegrate:
lea ecx, [esp + 0x11c]
call fcn.004247e9
mov dword [esp + 0x66d0], 0x15b
mov eax, dword [esp + 0x30]
lea esi, [eax + esi*4]
push str._VintegrateRecursive
push dword [esi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
je 0x455643
push 0x513f78
call fcn.004cbdd0
pop ecx
push eax
push str._VintegrateRecursive:
push dword [esi]
call fcn.004ce836
add esp, 0xc
test eax, eax
jne 0x455654
push str.VintegrateRecursive:
lea ecx, [esp + 0x11c]
call fcn.00424842
push str._Windows_Explorer.exe
lea ecx, [esp + 0x13c]
call fcn.004247e9
mov byte [esp + 0x66d0], 0x5c
mov esi, dword [esi]
push 0x3a
push esi
call fcn.004ccd78
pop ecx
pop ecx
test eax, eax
je 0x45568d
add eax, 2
push eax
lea ecx, [esp + 0x13c]
call fcn.00424842
push 1
push 0
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x1510]
push eax
call fcn.00490040
push 0xffffffffffffffff
mov byte [esp + 0x66d4], 0x5d
push dword [esp + 0x54]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247e9
push ecx
mov eax, esp
mov byte [esp + 0x66e0], 0x5e
mov dword [esp + 0x2c], esp
lea ecx, [esp + 0x148]
push ecx
lea ecx, [esp + 0x12c]
push ecx
push eax
call fcn.0042c7bf
add esp, 8
mov byte [esp + 0x66e4], 0x5f
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d4
push 0
push ecx
mov byte [esp + 0x66ec], 0x60
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x1520]
push eax
mov byte [esp + 0x66f0], 0x5d
call fcn.0043fbed
add esp, 0x20
lea eax, [esp + 0x1504]
mov byte [esp + 0x66d0], 0x5c
call fcn.0042796b
mov ecx, dword [esp + 0x138]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x118]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [esp + 0x18]
call fcn.0042249e
lea ecx, [esp + 0x78]
call fcn.0042249e
lea ecx, [esp + 0x5c]
call fcn.0042249e
lea ecx, [esp + 0x64]
call fcn.0042249e
jmp 0x44efbf
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
push 0x5452b8
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x44f0c5
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
lea ecx, [esp + 0x2c]
call fcn.0042248a
lea ecx, [esp + 0x130]
mov dword [esp + 0x66d0], 0x10b
call fcn.0042248a
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0x66d4], 0xc
call fcn.004247d4
lea eax, [esi + 1]
mov byte [esp + 0x66d0], 0xd
cmp dword [esp + 0x60], eax
jle 0x455833
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0x3c]
call fcn.00424842
push 1
push 0
push ecx
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xf70]
push eax
call fcn.00490040
mov byte [esp + 0x66d0], 0xe
push dword [0x5413cc]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xf70]
push eax
call fcn.0044d0ff
add esp, 0x10
cmp dword [esp + 0xfec], 0
jne 0x45589f
push str.FAILED_LOADING_CONTAINERS__n
lea ebx, [esp + 0x30]
call fcn.004277c2
pop ecx
lea eax, [esp + 0x130]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Main
call fcn.004247e9
push 3
lea edi, [esp + 0xf70]
call fcn.00492290
mov eax, dword [esp + 0x130]
xor esi, esi
cmp dword [eax - 0xc], esi
jne 0x4558e2
push str.Cannot_obtain_INI_info_from_resource__n
lea ecx, [esp + 0x30]
call fcn.0042620e
lea eax, [esp + 0x130]
push eax
lea ecx, [esp + 0x30]
call fcn.0042532b
push esi
push 0x503f24
push dword [esp + 0x34]
jmp 0x451468
push str._SaveProperties_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea ecx, [esp + 0x34]
call fcn.0042248a
mov byte [esp + 0x66d0], 0xfe
mov eax, dword [esp + 0x30]
push str._SaveAllProperties
push dword [eax + esi*4]
call fcn.004cbbc8
mov esi, eax
mov eax, dword [esp + 0x3c]
neg esi
sbb esi, esi
xor edi, edi
pop ecx
inc esi
pop ecx
cmp dword [eax - 0xc], edi
jne 0x4559b4
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..xml
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0xff
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x2a4]
push eax
mov byte [esp + 0x66dc], 0xfe
call fcn.004787d0
add esp, 0xc
push eax
lea ecx, [esp + 0x38]
mov dword [esp + 0x66d4], 0x100
call fcn.0042482d
mov dword [esp + 0x66d0], 0xfe
mov ecx, dword [esp + 0x29c]
add ecx, 0xfffffff0
call fcn.0042201a
push 1
push edi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xca0]
push eax
call fcn.00490040
mov dword [esp + 0x66d0], 0x101
push dword [0x5413cc]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xca0]
push eax
call fcn.0044d0ff
add esp, 0x10
cmp dword [esp + 0xd1c], edi
jne 0x455a24
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x45154d
sub esp, 0x90
mov eax, esp
mov dword [esp + 0xa4], esp
lea ecx, [esp + 0xd24]
push ecx
push eax
call fcn.004572a0
push esi
push ecx
mov byte [esp + 0x6768], 2
lea eax, [esp + 0xe4]
mov ecx, esp
mov dword [esp + 0xb4], esp
push eax
call fcn.004247d4
push ecx
mov byte [esp + 0x676c], 3
lea eax, [esp + 0xd0]
mov ecx, esp
mov dword [esp + 0xe0], esp
push eax
call fcn.004247d4
mov byte [esp + 0x676c], 1
call fcn.0042b315
add esp, 0x9c
cmp eax, edi
jne 0x455ab2
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x3c]
push str.Cannot_save_into:__s
jmp 0x44f0a0
lea eax, [esp + 0xc94]
call fcn.00490f20
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x3c]
push str.Properties_exported_to:_n_s
push eax
call fcn.00478610
add esp, 0xc
jmp 0x450d50
lea eax, [esp + 0x2c]
push eax
call fcn.004775e0
pop ecx
mov byte [esp + 0x66d0], 0xa7
mov eax, dword [esp + 0x30]
mov edi, 0x513110
push edi
lea esi, [eax + esi*4]
call fcn.004cbdd0
pop ecx
push eax
push str._CreateShortcuts:
push dword [esi]
call fcn.004ce836
add esp, 0xc
test eax, eax
jne 0x455b3a
push dword [esi]
lea ecx, [esp + 0x30]
call fcn.00424842
push edi
call fcn.004cbdd0
pop ecx
push 0
lea ecx, [esp + 0x30]
push ecx
call fcn.00424880
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
push 0x5452b8
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x455b6d
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
push 1
xor edi, edi
push edi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x15a0]
push eax
call fcn.00490040
or esi, 0xffffffff
push esi
push edi
push ecx
mov byte [esp + 0x66dc], 0xa8
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0xa9
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e4], 0xaa
mov ecx, esp
mov dword [esp + 0x58], esp
push ebx
call fcn.004247e9
push 2
push ecx
mov byte [esp + 0x66ec], 0xab
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x15b0]
push eax
mov byte [esp + 0x66f0], 0xa8
call fcn.0043fbed
add esp, 0x20
push 0x5452c8
lea ecx, [esp + 0x3c]
call fcn.004247d4
lea eax, [esp + 0x6c]
push eax
push 0x501024
lea eax, [esp + 0x9c]
mov byte [esp + 0x66d8], 0xac
push eax
lea ecx, [esp + 0x44]
mov dword [esp + 0x78], edi
call fcn.0042b803
jmp 0x456186
lea ecx, [esp + 0x34]
call fcn.0042248a
lea ecx, [esp + 0x30]
call fcn.0042248a
lea ecx, [esp + 0x40]
call fcn.0042248a
lea ecx, [esp + 0x50]
call fcn.0042248a
push 0x3e
push ecx
mov byte [esp + 0x66d8], 0xb1
and dword [esp + 0xa8], 0
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
lea edi, [esp + 0xac]
call fcn.004247d4
lea eax, [esp + 0x1b4]
push eax
call fcn.0047c6b0
add esp, 0xc
mov byte [esp + 0x66d0], 0xb2
call fcn.0042492f
push eax
lea ecx, [esp + 0x38]
call fcn.0042482d
mov byte [esp + 0x66d0], 0xb1
mov ecx, dword [esp + 0x1ac]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0xa0], esi
jne 0x455d25
mov ecx, dword [esp + 0x50]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x40]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x34]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x66d0], 0xac
mov ecx, dword [esp + 0x94]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x45616b
push 0x3e
push ecx
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
lea edi, [esp + 0xac]
call fcn.004247d4
lea eax, [esp + 0x1bc]
push eax
call fcn.0047c6b0
add esp, 0xc
mov byte [esp + 0x66d0], 0xb3
call fcn.0042492f
push eax
lea ecx, [esp + 0x34]
call fcn.0042482d
mov byte [esp + 0x66d0], 0xb1
mov ecx, dword [esp + 0x1b4]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0xa0], esi
je 0x455cd9
push 0x3e
push ecx
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x1c4]
push eax
call fcn.0047c6b0
add esp, 0xc
mov byte [esp + 0x66d0], 0xb4
call fcn.0042492f
push eax
lea ecx, [esp + 0x44]
call fcn.0042482d
mov byte [esp + 0x66d0], 0xb1
mov ecx, dword [esp + 0x1bc]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0xa0], esi
jne 0x455df6
push ebx
lea ecx, [esp + 0x44]
call fcn.00424842
jmp 0x455e51
push 0x3e
push ecx
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
lea edi, [esp + 0xac]
call fcn.004247d4
lea eax, [esp + 0x1cc]
push eax
call fcn.0047c6b0
add esp, 0xc
mov byte [esp + 0x66d0], 0xb5
call fcn.0042492f
push eax
lea ecx, [esp + 0x54]
call fcn.0042482d
mov byte [esp + 0x66d0], 0xb1
mov ecx, dword [esp + 0x1c4]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0xa0], esi
jne 0x455e64
push ebx
lea ecx, [esp + 0x54]
call fcn.00424842
push dword [esp + 0x34]
lea eax, [esp + 0xdc]
push str._exec___s_
push eax
call fcn.00478610
add esp, 0xc
mov byte [esp + 0x66d0], 0xb6
mov eax, dword [esp + 0x30]
cmp dword [eax - 0xc], 0
je 0x455eb1
push 0x508f74
lea ecx, [esp + 0xdc]
call fcn.004261e4
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0xdc]
call fcn.00424857
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
push ecx
mov esi, esp
mov byte [esp + 0x66d8], 0xb7
mov dword [esp + 0x24], esp
push 0x5c
push ecx
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d4
push esi
call fcn.00478940
lea eax, [esp + 0x170]
add esp, 0xc
push eax
mov byte [esp + 0x66dc], 0xb6
call fcn.0042aca0
add esp, 0xc
xor esi, esi
push esi
push esi
push esi
push ecx
mov byte [esp + 0x66e0], 0xb8
lea eax, [esp + 0x16c]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x130]
push esi
push eax
call fcn.00489ea0
add esp, 0x14
mov byte [esp + 0x66d4], 0xb9
mov ecx, esp
mov dword [esp + 0x18], esp
mov esi, 0x4ff58c
push esi
call fcn.004247e9
push ecx
mov eax, esp
mov byte [esp + 0x66d8], 0xba
mov dword [esp + 0x24], esp
push str..lnk
lea ecx, [esp + 0x4c]
push ecx
push eax
call fcn.00424a38
add esp, 8
mov byte [esp + 0x66dc], 0xbb
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call fcn.004247d4
lea edi, [esp + 0x1d8]
mov byte [esp + 0x66dc], 0xb9
call fcn.00477ed0
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x1cc]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
lea eax, [esp + 0x124]
push eax
call fcn.004247d4
call fcn.0047b160
pop ecx
test eax, eax
je 0x455fdf
lea eax, [esp + 0x120]
jmp 0x455ffa
push 0
lea ecx, [esp + 0x1d8]
call fcn.004247e9
mov byte [esp + 0x66d0], 0xbc
or dword [esp + 0x70], 2
mov eax, dword [eax]
push 0
push ecx
mov dword [esp + 0x30], eax
lea eax, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d4
push ecx
mov dword [esp + 0x66dc], 0xbd
lea eax, [esp + 0xe4]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d4
push ecx
mov byte [esp + 0x66e0], 0xbe
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
call fcn.004247d4
push ecx
mov byte [esp + 0x66e4], 0xbf
mov dword [esp + 0x90], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x94], esp
push esi
call fcn.004247e9
push ecx
mov eax, esp
mov byte [esp + 0x66ec], 0xc0
mov dword [esp + 0x9c], esp
push str..lnk
lea ecx, [esp + 0x60]
push ecx
push eax
call fcn.00424a38
add esp, 8
mov byte [esp + 0x66f0], 0xc1
lea eax, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x74], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66f0], 0xbf
call fcn.00477ed0
mov ecx, dword [esp + 0x48]
add esp, 0xc
mov byte [esp + 0x66e4], 0xbc
call fcn.004a8490
add esp, 0x14
mov dword [esp + 0x66d0], 0xb9
test byte [esp + 0x70], 2
je 0x4560f4
mov ecx, dword [esp + 0x1d4]
and dword [esp + 0x70], 0xfffffffd
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x120]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x15c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0xd8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x50]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x40]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x34]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x66d0], 0xac
mov ecx, dword [esp + 0x94]
add ecx, 0xfffffff0
call fcn.0042201a
or esi, 0xffffffff
lea eax, [esp + 0x6c]
push eax
push 0x501024
lea eax, [esp + 0x9c]
push eax
lea ecx, [esp + 0x44]
call fcn.0042b803
cmp dword [esp + 0x6c], esi
jne 0x455c41
mov byte [esp + 0x66d0], 0xac
mov ecx, dword [esp + 0x94]
add ecx, 0xfffffff0
call fcn.0042201a
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5452c4]
push str.Shortcuts_created_for__s.
jmp 0x4500a1
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x38]
call fcn.004247d4
mov byte [esp + 0x66d0], 0x98
mov eax, dword [esp + 0x30]
lea esi, [eax + esi*4]
push str._FullIntegrate
push dword [esi]
mov dword [esp + 0x30], esi
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x45637f
push ecx
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
push 0x5452b8
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x45622e
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
push dword [esp + 0x58]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x5452c4
call fcn.004247d4
lea eax, [esp + 0x104]
push eax
call fcn.00449d89
add esp, 8
mov byte [esp + 0x66d4], 0x99
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x4ff58c
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0x9a
mov eax, esp
mov dword [esp + 0x24], esp
push dword [0x5452c4]
push str._s.host.exe
push eax
call fcn.00478610
add esp, 8
mov byte [esp + 0x66dc], 0x9b
lea eax, [esp + 0x108]
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call fcn.004247d4
lea edi, [esp + 0x1e8]
mov byte [esp + 0x66dc], 0x99
call fcn.00477ed0
add esp, 0xc
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x66d4], 0x9c
call fcn.0042482d
mov byte [esp + 0x66d0], 0x99
mov ecx, dword [esp + 0x1dc]
add ecx, 0xfffffff0
call fcn.0042201a
mov esi, dword [esp + 0xfc]
call fcn.0047b240
test eax, eax
jne 0x456310
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_create_virtual_repository
jmp 0x44ef0e
lea eax, [esp + 0x1e4]
push eax
call fcn.004774f0
mov eax, dword [eax]
pop ecx
push 0
push dword [esp + 0x38]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [esp + 0x1e4]
neg eax
sbb al, al
inc al
add ecx, 0xfffffff0
mov byte [esp + 0x3f], al
call fcn.0042201a
cmp byte [esp + 0x3f], 0
je 0x456364
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_copy_executable_to_repository
jmp 0x44ef0e
mov byte [esp + 0x66d0], 0x98
mov ecx, dword [esp + 0xfc]
add ecx, 0xfffffff0
call fcn.0042201a
mov esi, dword [esp + 0x28]
push 1
xor edi, edi
push edi
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x1090]
push eax
call fcn.00490040
push 0xffffffffffffffff
push edi
push ecx
mov byte [esp + 0x66dc], 0x9d
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x9e
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e4], 0x9f
mov ecx, esp
mov dword [esp + 0x58], esp
push ebx
call fcn.004247e9
push 2
push ecx
mov byte [esp + 0x66ec], 0xa0
lea eax, [esp + 0x50]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x10a0]
push eax
mov byte [esp + 0x66f0], 0x9d
call fcn.0043fbed
push str._Integrate:once
push dword [esi]
call fcn.004cbbc8
add esp, 0x28
test eax, eax
jne 0x456568
push ebx
lea ecx, [esp + 0xbc]
call fcn.004247e9
xor esi, esi
push esi
push esi
push esi
push ecx
mov byte [esp + 0x66e0], 0xa1
mov ecx, esp
mov dword [esp + 0x24], esp
push str.Registered
lea edi, [esp + 0xcc]
call fcn.004247e9
mov byte [esp + 0x66e0], 0xa2
push dword [0x5452c4]
lea eax, [esp + 0x200]
push str.SoftwareVOS_s
push eax
call fcn.00478610
add esp, 8
mov byte [esp + 0x66e4], 0xa3
or dword [esp + 0x84], 1
mov ecx, esp
mov dword [esp + 0x30], esp
push str.Integrated
push eax
push ecx
call fcn.00424a38
add esp, 0xc
mov dword [esp + 0x66e4], 0xa4
call fcn.00489500
push eax
mov byte [esp + 0x66e8], 0xa5
call fcn.004790f0
add esp, 0x18
cmp eax, esi
je 0x4564da
mov eax, dword [esp + 0xb8]
cmp dword [eax - 0xc], esi
je 0x4564da
mov bl, 1
jmp 0x4564dc
xor bl, bl
mov dword [esp + 0x66d0], 0xa1
test byte [esp + 0x70], 1
je 0x4564fd
mov ecx, dword [esp + 0x1ec]
add ecx, 0xfffffff0
call fcn.0042201a
test bl, bl
je 0x45654f
push str.Success
lea eax, [esp + 0xbc]
call fcn.0042486c
push ecx
test eax, eax
mov dword [esp + 0x18], esp
mov eax, esp
jne 0x456534
push str._Integrate:once:_already_registered_successfully._Quitting.
push eax
call fcn.00478610
pop ecx
pop ecx
call fcn.0044c7ef
jmp 0x451f04
push dword [esp + 0xbc]
push str._Integrate:once:_already_attempted_registration_before__but_failed:__s._Trying_integration_again.
push eax
call fcn.00478610
add esp, 0xc
call fcn.0044c7ef
pop ecx
mov byte [esp + 0x66d0], 0x9d
mov ecx, dword [esp + 0xb8]
add ecx, 0xfffffff0
call fcn.0042201a
xor edi, edi
xor eax, eax
cmp dword [esp + 0x58], edi
push edi
setne al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.AllUsers
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0xa6
mov eax, esp
mov dword [esp + 0x2c], esp
push dword [0x5452c4]
push str.SoftwareVOS_s
push eax
call fcn.00478610
add esp, 0xc
push SysReAllocStringLen
mov byte [esp + 0x66e4], 0x9d
call fcn.004795f0
add esp, 0x14
push dword [esp + 0x58]
lea edx, [esp + 0x1088]
mov ecx, 0x5452b8
call fcn.00443b32
pop ecx
lea eax, [esp + 0x1084]
call fcn.00490f20
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5452c4]
push str._s_is_now_integrated_into_your_system.
jmp 0x455ad4
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.004772d0
test eax, eax
jne 0x456679
mov eax, dword [esp + 0x30]
xor edi, edi
push edi
push ecx
mov ebx, esp
mov dword [esp + 0x1c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push dword [eax]
xor esi, esi
call fcn.004247e9
push ebx
call fcn.0047e4b0
add esp, 4
mov byte [esp + 0x66dc], 0x3f
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d4
mov ecx, esi
mov edx, edi
mov byte [esp + 0x66dc], 4
call fcn.004770c0
add esp, 0xc
test eax, eax
jne 0x44ef18
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef09
call fcn.004774a0
test eax, eax
jne 0x456694
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44dd9a
mov eax, dword [esp + 0x30]
push 0x512634
lea esi, [eax + esi*4]
call fcn.004cbdd0
pop ecx
push eax
push str._Patch
push dword [esi]
call fcn.004ce836
add esp, 0xc
mov edi, eax
neg edi
lea eax, [esp + 0x18]
sbb edi, edi
push eax
lea ecx, [esp + 0x84]
inc edi
call fcn.004247d4
push ecx
mov byte [esp + 0x66d4], 0x40
mov ecx, esp
mov dword [esp + 0x18], esp
push str..new.exe
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0x41
lea eax, [esp + 0x88]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0xac]
push eax
mov byte [esp + 0x66dc], 0x40
call fcn.004787d0
add esp, 0xc
mov byte [esp + 0x66d0], 0x42
push dword [esp + 0xa4]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [esi]
call fcn.004247e9
lea eax, [esp + 0x110]
push eax
call fcn.0047e4b0
pop ecx
pop ecx
push 1
xor esi, esi
push esi
push ecx
mov byte [esp + 0x66dc], 0x43
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x790]
push eax
call fcn.00490040
mov byte [esp + 0x66d0], 0x44
push dword [0x5413cc]
cmp dword [esp + 0x810], esi
jne 0x4567a4
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x20]
push str.Cannot_load_newly_created_package__s
jmp 0x44f0a0
push 1
push ecx
lea eax, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x790]
push eax
call fcn.0044d0ff
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x45
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247e9
push ecx
mov byte [esp + 0x66e4], 0x46
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d4
push 2
push ecx
mov byte [esp + 0x66ec], 0x47
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x7a0]
push eax
mov byte [esp + 0x66f0], 0x44
call fcn.0043fbed
push dword [0x5452c4]
lea eax, [esp + 0x104]
push dword [0x545314]
push str._sAppVirtDll__s.dll
push eax
call fcn.00478610
add esp, 0x2c
mov byte [esp + 0x66d4], 0x48
lea eax, [esp + 0xe4]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
call fcn.00426eb0
pop ecx
cmp eax, esi
je 0x4568dd
push dword [0x5413cc]
cmp eax, 0x11
jne 0x45689f
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push str.MsiTrackerStart:_Insufficient_permissions_
push eax
call fcn.00478610
pop ecx
pop ecx
jmp 0x44ef13
cmp eax, 0x12
jne 0x4568b2
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push str.MsiTrackerStart:_Cant_access_services.exe._32_64_bit_mismatch_
jmp 0x456892
push eax
lea eax, [esp + 0x3ac]
push eax
call fcn.0047fa60
add esp, 4
mov byte [esp + 0x66d8], 0x49
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.MsiTrackerStart:_Failed:__s
jmp 0x44f6cd
push dword [esp + 0x10c]
lea eax, [esp + 0x1f8]
push str._exec__s
push eax
call fcn.00478610
mov eax, dword [eax]
add esp, 0xc
push esi
push esi
push eax
push dword [esp + 0x24]
push esi
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [esp + 0x1f4]
xor ebx, ebx
cmp eax, 0x20
setg bl
add ecx, 0xfffffff0
call fcn.0042201a
cmp ebx, esi
je 0x45696d
cmp edi, esi
je 0x456937
push 1
push 0x4ffab0
push str.Installation_launched_in_virtual_mode..._nWhen_installation_is_done__click_OK_and_Cameyo_will_turn_it_into_a_virtual_package._nInstallation_will_not_truly_install_anything_on_your_hard_drive__it_is_simulated_.
jmp 0x456942
push esi
push 0x4ffab0
push str.When_installation_is_done__click_OK.
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
jne 0x45696d
push ecx
lea eax, [esp + 0xe4]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
call fcn.00426f37
pop ecx
jmp 0x453f40
push ecx
lea eax, [esp + 0xe4]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
call fcn.00426f37
pop ecx
cmp eax, esi
je 0x4569e8
push dword [0x5413cc]
cmp eax, 0x11
jne 0x4569a7
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push str.MsiTrackerStop:_Insufficient_permissions_
jmp 0x456892
cmp eax, 0x12
jne 0x4569bd
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push str.MsiTrackerStop:_Cant_access_services.exe._32_64_bit_mismatch_
jmp 0x456892
push eax
lea eax, [esp + 0x36c]
push eax
call fcn.0047fa60
add esp, 4
mov byte [esp + 0x66d8], 0x4a
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.MsiTrackerStop:_Failed:__s
jmp 0x44f6cd
cmp ebx, esi
jne 0x456a0a
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x114]
push str.Failed_executing__s
jmp 0x44f0a0
mov ebx, dword [esp + 0x80]
cmp edi, esi
je 0x456ace
call fcn.00431fd7
push 0x407
mov edi, 0x5452b8
call fcn.00496780
pop ecx
push 0
push dword [esp + 0xa8]
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0xa4]
jne 0x456a5b
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44f5ee
push dword [esp + 0x38]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d4
call fcn.004476a6
mov esi, eax
pop ecx
pop ecx
test esi, esi
je 0x456ac1
push dword [esp + 0xa4]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push dword [0x5413cc]
cmp esi, 0x10
jne 0x456a9d
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44f69d
lea eax, [esp + 0x3ac]
push esi
push eax
call fcn.0047fa60
add esp, 4
mov byte [esp + 0x66d8], 0x4b
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44f6c6
push 0x404
call fcn.00496780
pop ecx
xor esi, esi
lea eax, [esp + 0x784]
call fcn.00490f20
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xac]
push 0x512b24
push eax
call fcn.00478610
add esp, 0xc
call fcn.0044d085
pop ecx
pop ecx
mov ecx, dword [esp + 0xe0]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x784]
mov byte [esp + 0x66d0], 0x43
call fcn.0042796b
mov ecx, dword [esp + 0x10c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0xa4]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [ebx - 0x10]
jmp 0x457211
lea ecx, [esp + 0x2c]
call fcn.0042248a
lea ecx, [esp + 0x58]
call fcn.0042248a
mov byte [esp + 0x66d0], 0x35
mov eax, dword [esp + 0x30]
lea esi, [eax + esi*4]
push str._CreateDiff
push dword [esi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x456b8f
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x30]
call fcn.0042482d
jmp 0x456ba9
push 0x5125f0
call fcn.004cbdd0
pop ecx
mov ecx, dword [esi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x30]
call fcn.00424842
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..mod
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0x36
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x204]
push eax
mov byte [esp + 0x66dc], 0x35
call fcn.004787d0
add esp, 0xc
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x66d4], 0x37
call fcn.0042482d
mov byte [esp + 0x66d0], 0x35
mov ecx, dword [esp + 0x1fc]
add ecx, 0xfffffff0
call fcn.0042201a
mov edi, dword [esp + 0x58]
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push edi
call esi
mov ebx, dword [esp + 0x2c]
push 0
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x58]
jne 0x456c49
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44f5ee
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d4
call fcn.004476a6
pop ecx
pop ecx
mov dword [esp + 0x38], eax
test eax, eax
jne 0x456cc1
push dword [0x5413cc]
lea eax, [esp + 0x5c]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x210]
push eax
call fcn.00478940
add esp, 8
mov byte [esp + 0x66d8], 0x38
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Successfully_repackaged_into:__s
push ecx
call fcn.00478610
add esp, 0xc
call fcn.0044d085
pop ecx
pop ecx
mov ecx, dword [esp + 0x204]
jmp 0x456e93
push edi
call esi
cmp dword [esp + 0x38], 0x10
push dword [0x5413cc]
jne 0x456cdd
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44f69d
push dword [esp + 0x3c]
lea eax, [esp + 0x3a8]
push eax
call fcn.0047fa60
add esp, 4
mov byte [esp + 0x66d8], 0x39
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44f6c6
lea ecx, [esp + 0x58]
call fcn.0042248a
lea ecx, [esp + 0x34]
call fcn.0042248a
mov byte [esp + 0x66d0], 0x28
mov eax, dword [esp + 0x30]
lea esi, [eax + esi*4]
push str._LearnStreaming
push dword [esi]
call fcn.004cbbc8
pop ecx
pop ecx
test eax, eax
jne 0x456d47
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x5c]
call fcn.0042482d
jmp 0x456d61
push 0x5123cc
call fcn.004cbdd0
pop ecx
mov ecx, dword [esi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x5c]
call fcn.00424842
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..new.exe
call fcn.004247e9
push ecx
mov byte [esp + 0x66d8], 0x29
lea eax, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x214]
push eax
mov byte [esp + 0x66dc], 0x28
call fcn.004787d0
add esp, 0xc
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x66d4], 0x2a
call fcn.0042482d
mov byte [esp + 0x66d0], 0x28
mov ecx, dword [esp + 0x20c]
add ecx, 0xfffffff0
call fcn.0042201a
mov edi, dword [esp + 0x34]
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push edi
call esi
mov ebx, dword [esp + 0x58]
push 0
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x34]
jne 0x456e01
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44f5ee
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d4
push ecx
mov byte [esp + 0x66d8], 0x2b
lea eax, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d4
mov byte [esp + 0x66d8], 0x28
call fcn.00447c40
pop ecx
pop ecx
mov dword [esp + 0x28], eax
test eax, eax
jne 0x456eab
push dword [0x5413cc]
lea eax, [esp + 0x38]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d4
lea eax, [esp + 0x220]
push eax
call fcn.00478940
add esp, 8
mov byte [esp + 0x66d8], 0x2c
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Successfully_learned_streaming_into:__s
push ecx
call fcn.00478610
add esp, 0xc
call fcn.0044d085
pop ecx
pop ecx
mov ecx, dword [esp + 0x214]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [edi - 0x10]
call fcn.0042201a
lea ecx, [ebx - 0x10]
jmp 0x44f2f2
push edi
call esi
push dword [0x5413cc]
lea eax, [esp + 0x3a0]
push dword [esp + 0x2c]
push eax
call fcn.0047fa60
add esp, 4
mov byte [esp + 0x66d8], 0x2d
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Could_not_learn_streaming:__s
jmp 0x44f6cd
mov eax, dword [esp + 0x30]
push str._RemoveSelf
push dword [eax + esi*4]
call fcn.004cbbc8
mov edi, eax
neg edi
sbb edi, edi
add esp, 4
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
inc edi
call fcn.004247d4
mov ebx, 0x5452b8
push ebx
call fcn.0042a37d
pop ecx
pop ecx
test al, al
jne 0x456f30
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef63
mov eax, dword [0x545314]
cmp dword [eax - 0xc], 0
jne 0x456f4d
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
jmp 0x44f156
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov esi, 0x545314
push esi
call fcn.004247d4
call fcn.0047b160
pop ecx
test eax, eax
jne 0x456f8c
test edi, edi
je 0x456f7a
call fcn.0047bc80
test eax, eax
jne 0x44ef18
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
jmp 0x44f18f
cmp dword [esp + 0x54], 0
je 0x456fb5
push 3
push dword [0x5452c4]
push str.Do_you_want_to_remove_the_application_and_all_of_its_settings__files_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
je 0x456fb5
push 0x14
pop esi
jmp 0x44f0c7
and dword [esp + 0x164], 0
push 0
lea eax, [esp + 0x168]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.AllUsers
call fcn.004247e9
push ecx
mov byte [esp + 0x66e0], 0x17
mov eax, esp
mov dword [esp + 0x2c], esp
push dword [0x5452c4]
push str.SoftwareVOS_s
push eax
call fcn.00478610
add esp, 0xc
push SysReAllocStringLen
mov byte [esp + 0x66e4], 4
call fcn.00479370
add esp, 0x14
test eax, eax
je 0x457069
cmp dword [esp + 0x164], 0
je 0x457069
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.004772d0
test eax, eax
jne 0x45704e
call fcn.00477320
test eax, eax
jne 0x44ef18
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ef09
call fcn.004774a0
test eax, eax
jne 0x457069
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44dd9a
push ebx
call fcn.00443cb6
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5452c4]
push str.Removing__s
push eax
call fcn.00478610
add esp, 0xc
call fcn.0044c81f
pop ecx
lea ecx, [esp + 0x16c]
call fcn.0042248a
push 0x4ff58c
mov byte [esp + 0x66d4], 0x18
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push 1
push 1
push 1
lea eax, [esp + 0x178]
push eax
push dword [0x5413cc]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x545310
call fcn.004247d4
push ecx
mov byte [esp + 0x66ec], 0x19
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x545320
call fcn.004247d4
push ecx
mov byte [esp + 0x66f0], 0x1a
mov ecx, esp
mov dword [esp + 0x64], esp
push 0x54531c
call fcn.004247d4
push ecx
mov byte [esp + 0x66f4], 0x1b
mov ecx, esp
mov dword [esp + 0x4c], esp
push esi
call fcn.004247d4
push ecx
mov byte [esp + 0x66f8], 0x1c
mov ecx, esp
mov dword [esp + 0xa4], esp
push 0x5452c4
call fcn.004247d4
mov byte [esp + 0x66f8], 0x18
call fcn.004485d9
add esp, 0x24
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247d4
call fcn.0047b1a0
pop ecx
test eax, eax
je 0x457179
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5452c4]
push str.Base_dir_could_not_be_emptied_for__s
jmp 0x44f0a0
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5452c4]
push str.SoftwareVOS_s
push eax
call fcn.00478610
add esp, 0xc
mov edx, SysReAllocStringLen
call fcn.004796f0
xor esi, esi
pop ecx
cmp eax, esi
je 0x4571b7
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
jmp 0x44f4aa
cmp edi, esi
je 0x4571c8
call fcn.0047bc80
test eax, eax
jne 0x45146f
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.__Removed_successfully
call fcn.004247e9
call fcn.0044c81f
pop ecx
push dword [0x5413cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5452c4]
push str.Application__s_removed_successfully
push eax
call fcn.00478610
add esp, 0xc
call fcn.0044d085
pop ecx
pop ecx
mov ecx, dword [esp + 0x16c]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x44f0c7
cmp dword [0x544f24], esi
je 0x457252
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x545300]
push str.CLoaderApp:_waiting_for_LoaderCanQuit__AutoUpdate_s_
push eax
call fcn.00478610
add esp, 0xc
call fcn.0044c7ef
pop ecx
push 0xffffffffffffffff
push dword [0x544f24]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CLoaderApp:_done._Bye_
call fcn.004247e9
call fcn.0044c7ef
mov eax, dword [0x5413dc]
pop ecx
cmp eax, 0xa2c2a
je 0x45146f
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
push str.CLoaderApp:_ExecWait:_g_LoaderExitCode_d
push ecx
call fcn.00478610
add esp, 0xc
call fcn.0044c7ef
pop ecx
push dword [0x5413dc]
jmp 0x44ef1a