Function at 0x454eb0
Capabilities:
Check if file exists
Check mutex on windows
Create directory
Delete directory
Delete file
Get geographical location

Disassembly:
push ebp
mov ebp, esp
mov eax, 0xd358
call fcn.00469d10
mov eax, dword [0x4a86f0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 8]
push edi
push str.Begin...
mov dword [ebp - 0xd338], ebx
call fcn.0045f520
add esp, 4
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 0xd310], 0
call fcn.00438dc0
mov dword [ebp - 0xd320], eax
xor eax, eax
push str.RICHED20.DLL
mov dword [ebp - 0xd324], 0
mov dword [ebp - 0xd328], eax
mov dword [0x4c1264], esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0xd33c], eax
xor eax, eax
push 0x1fe
push eax
mov word [ebp - 0xfc4], ax
lea eax, [ebp - 0xfc2]
push eax
call fcn.0046a390
xor eax, eax
push 0x1fe
push eax
mov word [ebp - 0xbbc], ax
lea eax, [ebp - 0xbba]
push eax
call fcn.0046a390
xor eax, eax
push 0x1fe
push eax
mov word [ebp - 0x19e4], ax
lea eax, [ebp - 0x19e2]
push eax
call fcn.0046a390
xor eax, eax
push 0x3fe
push eax
mov word [ebp - 0x1de4], ax
lea eax, [ebp - 0x1de2]
push eax
call fcn.0046a390
call fcn.0042d180
call fcn.004504f0
push ebx
push 0x1f40
push 0x4ac828
call fcn.0046bf5a
push 0x4ac828
push str.WinMain____CmdLine:__s
call fcn.0045f520
add esp, 0x44
push 0
push 0
push 0x48f410
push 0x48f418
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x455051
push 0x809
push 0x100
lea eax, [ebp - 0x19e4]
push eax
push 0x2c9
push dword [0x4c1264]
call fcn.004510f0
push 0x809
push 0x200
lea eax, [ebp - 0x1de4]
push eax
push 0x2c8
push dword [0x4c1264]
call fcn.004510f0
add esp, 0x28
lea eax, [ebp - 0x19e4]
push 0x40
push eax
lea eax, [ebp - 0x1de4]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push str.WinMain____Help_____mode_parameter
call fcn.0045f520
add esp, 4
xor eax, eax
jmp 0x458192
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x464], ax
lea eax, [ebp - 0x462]
push eax
call fcn.0046a390
push 0x104
lea eax, [ebp - 0x464]
push eax
push 0x48f410
push str.LANG
push 0x4ac828
call fcn.0042ce50
mov ebx, dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
add esp, 0x20
mov esi, dword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
test eax, eax
jne 0x4550c6
push 0x104
lea eax, [ebp - 0x464]
push eax
push 0x48f410
push str.LANG:
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x45512e
lea eax, [ebp - 0x464]
push eax
call ebx
lea eax, [ebp - 0x464]
push eax
call esi
lea eax, [ebp - 0x464]
push eax
call fcn.0046d18f
add esp, 4
mov word [0x4c3894], ax
test ax, ax
jne 0x45511d
push 0
call fcn.0042e0f0
add esp, 4
test eax, eax
je 0x455117
lea eax, [ebp - 0x464]
push eax
call fcn.0042d0d0
add esp, 4
mov word [0x4c3894], ax
jmp 0x45511d
mov ax, word [0x4c3894]
movzx eax, ax
push eax
push str.WinMain____Language_parameter:__d
call fcn.0045f520
add esp, 8
push 0x104
lea eax, [ebp - 0x464]
push eax
push 0x48f410
push str.CMDLINE:
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x45518f
lea eax, [ebp - 0x464]
push eax
call ebx
lea eax, [ebp - 0x464]
push eax
call esi
lea eax, [ebp - 0x464]
push eax
push 0x1f40
push 0x4b06a8
call fcn.0046bf5a
push 0x4b06a8
push str.WinMain____CMDLINE_parameter:__s
call fcn.0045f520
add esp, 0x14
xor eax, eax
push 0x4c
push eax
mov word [ebp - 0x25c], ax
lea eax, [ebp - 0x25a]
push eax
call fcn.0046a390
add esp, 0xc
lea eax, [ebp - 0x3ffc]
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
test eax, eax
lea eax, [ebp - 0x25c]
jne 0x4551df
movdqu xmm0, xmmword [ebp - 0x3ffc]
push 0x27
push eax
sub esp, 0x10
mov eax, esp
movdqu xmmword [eax], xmm0
call fcn.0042db30
add esp, 0x18
jmp 0x4551ef
push str.A6E044B8_6C25_48fc_806B_002A9582C81F
push 0x27
push eax
call fcn.0046bf5a
add esp, 0xc
mov ebx, dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x25c]
push eax
push 0x4b6188
push 0x4c3678
call ebx
push 0x4c3678
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x455236
push 2
push 0x4c3678
call fcn.0045da20
push eax
push 0x4c3678
push str.WinMain____Remove_folder__s___d_
call fcn.0045f520
add esp, 0x14
push 0
push 0x4c3678
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push 0x4c3678
test eax, eax
jne 0x455260
push str.WinMain____Error_create_directory___s__
call fcn.0045f520
add esp, 8
xor eax, eax
jmp 0x458192
push str.WinMain____TempPathFCW_s
call fcn.0045f520
call fcn.00450c70
xor edi, edi
lea eax, [ebp - 0xc738]
push 0x2a
xorps xmm0, xmm0
mov dword [ebp - 0xd314], edi
push edi
push eax
movdqu xmmword [ebp - 0xd358], xmm0
mov dword [ebp - 0xd348], edi
mov dword [ebp - 0xd344], edi
mov dword [ebp - 0xd340], edi
mov dword [ebp - 0xc73c], edi
call fcn.0046a390
push 0x214
lea eax, [ebp - 0xd308]
mov dword [ebp - 0xd30c], edi
push edi
push eax
call fcn.0046a390
xorps xmm0, xmm0
mov dword [ebp - 0xd300], 1
push 0x4ac620
mov dword [ebp - 0xd334], edi
movq qword [ebp - 0xd330], xmm0
call fcn.0042df80
add esp, 0x24
test eax, eax
jne 0x455328
push str.setup.cfg
push 0x4c3678
push str._s_s
push 0x104
push 0x4ac620
call fcn.0046988e
push 0x4ac620
push 0x48f65c
push 0x88
push dword [0x4c1264]
call fcn.00429c80
add esp, 0x24
push 0x4ac620
call fcn.004513b0
add esp, 4
cmp word [0x4b8c38], di
mov edi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
je 0x455387
push 0x4b8c38
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0xd328], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x455387
push 0x4b8c38
push str.WinMain____Project_already_in_memory___s_
call fcn.0045f520
add esp, 8
mov dword [0x4a80cc], 0xb7
jmp 0x457f8f
push 0
push 0
push 0x48f410
push str.NORESUME
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x4553bd
push str.WinMain____Resume_mode_disabled_by_parameter
mov dword [0x4ba7d0], 0
call fcn.0045f520
add esp, 4
lea eax, [ebp - 0x25c]
push eax
push 0x4b8c38
call fcn.0046cdb9
add esp, 8
test eax, eax
je 0x455401
cmp dword [0x4ba7d0], 0
je 0x455401
push 0x4b8c38
push 0x4b6188
push 0x4b4f40
call ebx
push 0x4b8c38
push 0x4b4f40
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x455412
push 0x4b8c38
push 0x4c3678
push 0x4b4f40
call ebx
push 0x4b4f40
call fcn.0042c370
add esp, 4
test eax, eax
jne 0x45547e
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
push eax
push 0x4b4f40
push str.WinMain____Error_create_directory___s____d_
mov dword [ebp - 0xd310], eax
call fcn.0045f520
add esp, 0xc
cmp dword [ebp - 0xd310], 0xb7
je 0x455474
push 2
push 0x4b4f40
call fcn.0045da20
push eax
push 0x4b4f40
push str.WinMain____Remove_folder__s___d_
call fcn.0045f520
add esp, 0x14
jmp 0x457f95
mov dword [ebp - 0xd310], 0
push 0x4b4f40
push str.WinMain____DataPath:__s
call fcn.0045f520
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x13d4], ax
lea eax, [ebp - 0x13d2]
push eax
call fcn.0046a390
push str.Binary.tmp
push 0x4c3678
lea eax, [ebp - 0x13d4]
push str._s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x13d4]
push eax
call fcn.0044f9f0
add esp, 0x28
push 1
push 0
push 0x4b4730
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov ecx, dword [0x4c1264]
test eax, eax
cmovne ecx, eax
push ecx
push eax
push 0x4b4730
push str.WinMain____LoadLibrary__s____d__hInstRes:__d_
mov dword [0x4c14e4], ecx
call fcn.0045f520
add esp, 0x10
cmp word [0x4b8c86], 0
jne 0x455530
push 0x100
push 0x4c2e60
push 0x48f82c
push dword [0x4c1264]
call fcn.0045fbc0
add esp, 0x10
jmp 0x455547
push 0x4b8c86
push 0x100
push 0x4c2e60
call fcn.0046bf5a
add esp, 0xc
push 0x4c2e60
push str.WinMain____Title:__s
call fcn.0045f520
push 0
push 0
push 0x48f410
push str.INFO
push 0x4ac828
call fcn.0042ce50
add esp, 0x1c
test eax, eax
je 0x45576c
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x874], ax
lea eax, [ebp - 0x872]
push eax
call fcn.0046a390
push str.Language_s__available:_n_n
push 0x200
push 0x4b4b40
call fcn.004694b4
mov ecx, dword [0x4c38bc]
mov eax, 0x5397829d
mov edi, dword [0x4c38b8]
add esp, 0x18
sub ecx, edi
imul ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x455696
xor ebx, ebx
test eax, eax
je 0x455712
xor esi, esi
lea esp, [esp]
push dword [esi + edi + 0x618]
lea eax, [ebp - 0x874]
push str._d__
push 0x104
push eax
call fcn.0046988e
lea eax, [ebp - 0x874]
push eax
push 0x200
push 0x4b4b40
call fcn.004694b4
add esp, 0x1c
lea eax, [ebp - 0x874]
push 0x104
push eax
mov eax, dword [0x4c38b8]
push 2
push dword [esi + eax + 0x618]
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
lea eax, [ebp - 0x874]
push eax
push 0x200
push 0x4b4b40
call fcn.004694b4
push 0x48f8bc
push 0x200
push 0x4b4b40
call fcn.004694b4
mov ecx, dword [0x4c38bc]
lea esi, [esi + 0x620]
mov edi, dword [0x4c38b8]
mov eax, 0x5397829d
sub ecx, edi
inc ebx
imul ecx
add esp, 0x18
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jb 0x4555e0
jmp 0x455712
push dword [0x4bfdb9]
lea eax, [ebp - 0x874]
push 0x48f8c0
push 0x104
push eax
call fcn.0046988e
lea eax, [ebp - 0x874]
push eax
push 0x200
push 0x4b4b40
call fcn.004694b4
add esp, 0x1c
lea eax, [ebp - 0x874]
push 0x104
push eax
push 2
push dword [0x4bfdb9]
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
lea eax, [ebp - 0x874]
push eax
push 0x200
push 0x4b4b40
call fcn.004694b4
push 0x48f8bc
push 0x200
push 0x4b4b40
call fcn.004694b4
add esp, 0x18
xor eax, eax
push 0x1fe
push eax
mov word [ebp - 0xdbc], ax
lea eax, [ebp - 0xdba]
push eax
call fcn.0046a390
push 0x809
push 0x100
lea eax, [ebp - 0xdbc]
push eax
push 0x2c9
push dword [0x4c14e4]
call fcn.004510f0
add esp, 0x20
lea eax, [ebp - 0xdbc]
push 0x40
push eax
push 0x4b4b40
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x458177
push 0
push 0
push 0x48f410
push 0x48f8c8
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x4557a2
push str.WinMain____DialogInRun_mode_
mov dword [0x4b9d4c], 1
call fcn.0045f520
add esp, 4
push 0
push 0
push 0x48f410
push 0x487798
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x4557d8
push str.WinMain____Silent_mode_parameter
mov dword [0x4c2e5c], 1
call fcn.0045f520
add esp, 4
push 0
push 0
push 0x48f410
push str.NOBALLOON
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x45580e
push str.WinMain____No_balloon_parameter
mov dword [0x4b9d48], 0
call fcn.0045f520
add esp, 4
push 0
push 0
push 0x48f410
push str.FULLSILENT
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x455858
push str.WinMain____Full_Silent_mode_parameter
mov dword [0x4c2e5c], 1
mov dword [0x4b9d48], 0
mov dword [0x4b9d80], 0
call fcn.0045f520
add esp, 4
push 0
push 0
push 0x48f410
push 0x48fa1c
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x45588e
push str.WinMain____Force_to_Download_parameter
mov dword [0x4c3898], 1
call fcn.0045f520
add esp, 4
push 0
push 0
push 0x48f410
push str.NOLICENSE
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x4558c4
push str.WinMain____No_license_parameter
mov dword [0x4b9d40], 0
call fcn.0045f520
add esp, 4
push 0
push 0
push 0x48f410
push str.NOTOOLBAR
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x4558fa
push str.WinMain____No_Toolbar_parameter
mov dword [0x4c0e25], 0
call fcn.0045f520
add esp, 4
push 0
push 0
push 0x48f410
push str.NORMALSTATUS
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x45592d
push str.WinMain____NORMALSTATUS_parameter
mov byte [0x4baff8], 1
call fcn.0045f520
add esp, 4
push 0
push 0
push 0x48f410
push str.SMALLSTATUS
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x455960
push str.WinMain____SMALLSATUS_parameter
mov byte [0x4baff8], 0
call fcn.0045f520
add esp, 4
push 0
push 0
push 0x48f410
push str.NOLU
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x4559a0
push str.WinMain____NOLU_parameter:_LiveUpdate_Disabled_
mov dword [0x4b9ae0], 0
mov dword [0x4c389c], 1
call fcn.0045f520
add esp, 4
push 0
push 0
push 0x48f410
push str.NOGA
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x4559d6
push str.WinMain____NOGA_parameter:_Google_Analytics_Disabled_
mov dword [0x4bfdd8], 0
call fcn.0045f520
add esp, 4
xor edi, edi
push edi
push edi
push 0x48f410
push str.GA_REG
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x455a07
push str.WinMain____GA_REG_parameter:_Google_Analytics_in_Registry_
mov edi, 1
call fcn.0045f520
add esp, 4
push 0x104
lea eax, [ebp - 0x464]
push eax
push 0x48f410
push str.SCRIPT:
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
mov ebx, 1
test eax, eax
je 0x455a8d
lea eax, [ebp - 0x464]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
lea eax, [ebp - 0x464]
push eax
call esi
lea eax, [ebp - 0x464]
push eax
push 0x104
push 0x4ba7d4
call fcn.0046bf5a
push 0x4ba7d4
call fcn.0042df80
mov ecx, dword [0x4ba7cc]
test eax, eax
cmovne ecx, ebx
push ecx
push 0x4ba7d4
push str.WinMain____ScriptFile:__s___d_
mov dword [0x4ba7cc], ecx
call fcn.0045f520
add esp, 0x1c
push 0x104
lea eax, [ebp - 0x464]
push eax
push 0x48f410
push 0x48fdb0
push 0x4ac828
call fcn.0042ce50
mov ebx, dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
add esp, 0x14
test eax, eax
je 0x455b73
lea eax, [ebp - 0x464]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
lea eax, [ebp - 0x464]
push eax
call esi
lea eax, [ebp - 0x464]
push eax
push str.WinMain____Params_X:__s
call fcn.0045f520
add esp, 8
lea eax, [ebp - 0x464]
push eax
call ebx
test eax, eax
je 0x455b20
push 0x4c3268
push 0x104
push 0x4ba5a4
call fcn.0046bf5a
add esp, 0xc
lea eax, [ebp - 0x464]
push eax
push 0x4ba5a4
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x455b39
lea eax, [ebp - 0x464]
push eax
push 0x104
push 0x4ba5a4
call fcn.0046bf5a
add esp, 0xc
push 0x4ba5a4
push str.WinMain____TgdFolder:__s
call fcn.0045f520
add esp, 8
mov dword [0x4ba7b4], 0
mov dword [0x4b9d34], 0
mov dword [0x4ba7b0], 0
mov dword [0x4b9d38], 0
push 0
push 0
push 0x48f410
push str.VERYSILENT
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x455bf4
push str.WinMain____Very_Silent_mode_parameter
mov dword [0x4c2e5c], 1
mov dword [0x4b9d48], 0
mov dword [0x4b9d80], 0
call fcn.0045f520
add esp, 4
cmp word [0x4b06a8], 0
je 0x455bdd
push 0x48fe84
push 0x1f40
push 0x4b06a8
call fcn.004694b4
jmp 0x455bf1
push 0x48fe8c
push 0x1f40
push 0x4b06a8
call fcn.0046bf5a
add esp, 0xc
push 0x104
lea eax, [ebp - 0x464]
push eax
push 0x48f410
push str.DIR
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x455c7c
cmp word [0x4b06a8], 0
je 0x455c3b
push str.__PROGRAMPATH:
push 0x1f40
push 0x4b06a8
call fcn.004694b4
jmp 0x455c4f
push str._PROGRAMPATH:
push 0x1f40
push 0x4b06a8
call fcn.0046bf5a
add esp, 0xc
lea eax, [ebp - 0x464]
push eax
push 0x1f40
push 0x4b06a8
call fcn.004694b4
lea eax, [ebp - 0x464]
push eax
push str.WinMain____Targetdir_parameter:__s
call fcn.0045f520
add esp, 0x14
push 0
push 0
push 0x48f410
push str.NOREBOOT
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x455cdf
push str.WinMain____NOREBOOT_parameter
call fcn.0045f520
add esp, 4
cmp word [0x4b06a8], 0
je 0x455cc8
push str.__NOREBOOT
push 0x1f40
push 0x4b06a8
call fcn.004694b4
jmp 0x455cdc
push str._NOREBOOT
push 0x1f40
push 0x4b06a8
call fcn.0046bf5a
add esp, 0xc
call fcn.0042e190
cmp dword [0x4ba7c4], 0
mov dword [ebp - 0xd31c], eax
je 0x455cfc
test eax, eax
jne 0x455cfc
lea esi, [eax + 1]
jmp 0x455cfe
xor esi, esi
push esi
push str.WinMain____NeedToRunAsAdmin:__d
mov dword [ebp - 0xd324], esi
call fcn.0045f520
add esp, 8
test esi, esi
jne 0x457f89
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x66c], ax
lea eax, [ebp - 0x66a]
push eax
call fcn.0046a390
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x11cc], ax
lea eax, [ebp - 0x11ca]
push eax
call fcn.0046a390
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x17e4], ax
lea eax, [ebp - 0x17e2]
push eax
call fcn.0046a390
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push eax
call fcn.0046a390
push 0x4c1057
lea eax, [ebp - 0x66c]
push 0x104
push eax
call fcn.0046bf5a
push 0x104
lea eax, [ebp - 0x17e4]
push eax
push 0x104
lea eax, [ebp - 0x11cc]
push eax
lea eax, [ebp - 0x66c]
push 0x104
push eax
call fcn.0042e570
add esp, 0x54
cmp dword [0x4bfdd8], esi
jne 0x455e39
test edi, edi
jne 0x455e39
cmp word [ebp - 0x66c], di
je 0x456722
cmp dword [0x4c389c], edi
jne 0x456722
push 0x490000
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.00448ef0
add esp, 0xc
lea eax, [ebp - 0x66c]
push 0x490000
push eax
lea eax, [ebp - 0x20c]
push eax
mov eax, dword [sym.imp.SHLWAPI.dll_PathCombineW]
call eax
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.00448ec0
add esp, 8
jmp 0x456722
xor eax, eax
mov dword [ebp - 0xd318], 1
push 0x50
push eax
mov word [ebp - 0x8384], ax
lea eax, [ebp - 0x8382]
push eax
call fcn.0046a390
push 0x4333
lea eax, [ebp - 0x8332]
push 0
push eax
call fcn.0046a390
push 0x104
lea eax, [ebp - 0x464]
push eax
push str.GAclientID
push 0x4bffe8
push closesocket
call fcn.004490e0
mov ebx, eax
add esp, 0x2c
test ebx, ebx
jne 0x455ec0
push 0x104
lea eax, [ebp - 0x464]
push eax
push str.GAclientID
push 0x4bffe8
push closesocket
call fcn.004490e0
mov ebx, eax
add esp, 0x14
test ebx, ebx
je 0x455f1b
lea ecx, [ebp - 0x464]
lea edx, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x455ed0
sub ecx, edx
sar ecx, 1
lea esi, [ecx + 1]
cmp esi, 0x3fffffff
jle 0x455eee
xor eax, eax
jmp 0x455f09
add esi, esi
mov eax, esi
call fcn.0046dbb0
mov eax, esp
lea ecx, [ebp - 0x464]
push 3
push esi
push ecx
push eax
call fcn.0044f9b0
push eax
lea eax, [ebp - 0x8332]
push 0x27
push eax
call fcn.0046a4e2
add esp, 0xc
push 0x490000
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x20c]
push eax
mov eax, dword [sym.imp.SHLWAPI.dll_PathCombineW]
call eax
test edi, edi
je 0x456176
lea eax, [ebp - 0xd318]
push eax
push 0x490000
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.00449060
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.0046bf5a
mov esi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x20c]
add esp, 0x1c
push 0x490000
push eax
call esi
push 0x29
lea eax, [ebp - 0x8384]
push eax
push str.TrackingId
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004490e0
add esp, 0x14
test eax, eax
jne 0x455fe7
push 0x4c01f0
lea eax, [ebp - 0x8384]
push 0x29
push eax
call fcn.0046bf5a
push 0x104
push 0x4c01f0
push 1
push str.TrackingId
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004493d0
add esp, 0x24
push 0x65
lea eax, [ebp - 0x6705]
push eax
push 0x48f82c
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004490e0
add esp, 0x14
test eax, eax
jne 0x456042
push 0x4c03f8
lea eax, [ebp - 0x6705]
push 0x65
push eax
call fcn.0046bf5a
push 0x51
push 0x4c03f8
push 1
push 0x48f82c
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004493d0
add esp, 0x24
push 0x65
lea eax, [ebp - 0x663b]
push eax
push 0x48d8d4
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004490e0
add esp, 0x14
test eax, eax
jne 0x45609d
push 0x4c049e
lea eax, [ebp - 0x663b]
push 0x65
push eax
call fcn.0046bf5a
push 0x51
push 0x4c049e
push 1
push 0x48d8d4
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004493d0
add esp, 0x24
push str.Campaign
lea eax, [ebp - 0x20c]
push eax
call esi
push 0x65
lea eax, [ebp - 0x5f67]
push eax
push 0x490034
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004490e0
push 0x65
lea eax, [ebp - 0x6369]
push eax
push str.Name
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004490e0
push 0x104
lea eax, [ebp - 0x6571]
push eax
push str.Content
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004490e0
push 0x65
lea eax, [ebp - 0x629f]
push eax
push str.Source
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004490e0
add esp, 0x50
lea eax, [ebp - 0x61d5]
push 0x33
push eax
push str.Medium
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004490e0
push 0x104
lea eax, [ebp - 0x616f]
push eax
push str.Keyword
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004490e0
add esp, 0x28
jmp 0x45660b
push 1
push 0x490000
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.004494c0
add esp, 0x10
lea eax, [ebp - 0x20c]
cmp word [0x4c01f0], 0
je 0x4561c2
push 0x104
push 0x4c01f0
push 1
push str.TrackingId
push eax
push closesocket
call fcn.004493d0
add esp, 0x18
jmp 0x4561d5
push str.TrackingId
push eax
push closesocket
call fcn.00448ef0
add esp, 0xc
push 0x4c01f0
lea eax, [ebp - 0x8384]
push 0x29
push eax
call fcn.0046bf5a
add esp, 0xc
cmp dword [0x4c049a], 0
jne 0x45624b
cmp word [0x4c03f8], 0
lea eax, [ebp - 0x20c]
je 0x456222
push 0x51
push 0x4c03f8
push 1
push 0x48f82c
push eax
push closesocket
call fcn.004493d0
add esp, 0x18
jmp 0x456235
push 0x48f82c
push eax
push closesocket
call fcn.00448ef0
add esp, 0xc
push 0x4c03f8
lea eax, [ebp - 0x6705]
push 0x65
push eax
call fcn.0046bf5a
add esp, 0xc
cmp dword [0x4c0540], 0
jne 0x4562ab
cmp word [0x4c049e], 0
lea eax, [ebp - 0x20c]
je 0x456282
push 0x51
push 0x4c049e
push 1
push 0x48d8d4
push eax
push closesocket
call fcn.004493d0
add esp, 0x18
jmp 0x456295
push 0x48d8d4
push eax
push closesocket
call fcn.00448ef0
add esp, 0xc
push 0x4c049e
lea eax, [ebp - 0x663b]
push 0x65
push eax
call fcn.0046bf5a
add esp, 0xc
push str.Campaign
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
cmp word [0x4c0d56], 0
lea eax, [ebp - 0x20c]
je 0x4562eb
push 0x65
push 0x4c0d56
push 1
push 0x490034
push eax
push closesocket
call fcn.004493d0
add esp, 0x18
jmp 0x4562fe
push 0x490034
push eax
push closesocket
call fcn.00448ef0
add esp, 0xc
cmp word [0x4c0954], 0
lea eax, [ebp - 0x20c]
je 0x45632c
push 0x65
push 0x4c0954
push 1
push str.Name
push eax
push closesocket
call fcn.004493d0
add esp, 0x18
jmp 0x45633f
push str.Name
push eax
push closesocket
call fcn.00448ef0
add esp, 0xc
cmp word [0x4c074c], 0
lea eax, [ebp - 0x20c]
je 0x456370
push 0x104
push 0x4c074c
push 1
push str.Content
push eax
push closesocket
call fcn.004493d0
add esp, 0x18
jmp 0x456383
push str.Content
push eax
push closesocket
call fcn.00448ef0
add esp, 0xc
cmp word [0x4c0a1e], 0
lea eax, [ebp - 0x20c]
je 0x4563b1
push 0x65
push 0x4c0a1e
push 1
push str.Source
push eax
push closesocket
call fcn.004493d0
add esp, 0x18
jmp 0x4563c4
push str.Source
push eax
push closesocket
call fcn.00448ef0
add esp, 0xc
cmp word [0x4c0ae8], 0
lea eax, [ebp - 0x20c]
je 0x4563f2
push 0x33
push 0x4c0ae8
push 1
push str.Medium
push eax
push closesocket
call fcn.004493d0
add esp, 0x18
jmp 0x456405
push str.Medium
push eax
push closesocket
call fcn.00448ef0
add esp, 0xc
cmp word [0x4c0b4e], 0
lea eax, [ebp - 0x20c]
je 0x456436
push 0x104
push 0x4c0b4e
push 1
push str.Keyword
push eax
push closesocket
call fcn.004493d0
add esp, 0x18
jmp 0x456449
push str.Keyword
push eax
push closesocket
call fcn.00448ef0
add esp, 0xc
cmp word [0x4c0d56], 0
lea eax, [ebp - 0x20c]
je 0x456477
push 0x65
push 0x4c0d56
push 1
push 0x490034
push eax
push closesocket
call fcn.004493d0
add esp, 0x18
jmp 0x45648a
push 0x490034
push eax
push closesocket
call fcn.00448ef0
add esp, 0xc
push 0x4c0d56
lea eax, [ebp - 0x5f67]
push 0x65
push eax
call fcn.0046bf5a
push 0x4c0b4e
lea eax, [ebp - 0x616f]
push 0x104
push eax
call fcn.0046bf5a
push 0x4c0ae8
lea eax, [ebp - 0x61d5]
push 0x33
push eax
call fcn.0046bf5a
push 0x4c0954
lea eax, [ebp - 0x6369]
push 0x65
push eax
call fcn.0046bf5a
push 0x4c0a1e
lea eax, [ebp - 0x629f]
push 0x65
push eax
call fcn.0046bf5a
xor eax, eax
push 0x50
push eax
mov word [ebp - 0xc70c], ax
lea eax, [ebp - 0xc70a]
push eax
call fcn.0046a390
add esp, 0x48
lea eax, [ebp - 0xc6ba]
push 0x4333
push 0
push eax
call fcn.0046a390
xor eax, eax
push 0x1ffe
push eax
mov word [ebp - 0x3fec], ax
lea eax, [ebp - 0x3fea]
push eax
call fcn.0046a390
lea eax, [ebp - 0x5f67]
push eax
lea eax, [ebp - 0xa2ef]
push 0x65
push eax
call fcn.0046bf5a
lea eax, [ebp - 0x616f]
push eax
lea eax, [ebp - 0xa4f7]
push 0x104
push eax
call fcn.0046bf5a
lea eax, [ebp - 0x61d5]
push eax
lea eax, [ebp - 0xa55d]
push 0x33
push eax
call fcn.0046bf5a
lea eax, [ebp - 0x6369]
push eax
lea eax, [ebp - 0xa6f1]
push 0x65
push eax
call fcn.0046bf5a
add esp, 0x48
lea eax, [ebp - 0x629f]
push eax
lea eax, [ebp - 0xa627]
push 0x65
push eax
call fcn.0046bf5a
add esp, 0xc
lea eax, [ebp - 0x3fec]
push 0x1000
push eax
lea eax, [ebp - 0xc70c]
push eax
call fcn.00434fd0
cmp word [ebp - 0x3fec], 0
je 0x4565f2
push 0x104
lea eax, [ebp - 0x3fec]
push eax
push 1
push str.Params
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.004493d0
add esp, 0x18
jmp 0x45660b
push str.Params
lea eax, [ebp - 0x20c]
push eax
push closesocket
call fcn.00448ef0
add esp, 0xc
cmp dword [ebp - 0xd318], 0
je 0x45671c
push 0x4c0544
lea eax, [ebp - 0x752f]
push 0x104
push eax
call fcn.0046bf5a
push str.appview
lea eax, [ebp - 0x830b]
push 0x1e
push eax
call fcn.0046bf5a
add esp, 0x18
cmp dword [0x4bfddc], 0
jne 0x456672
lea eax, [ebp - 0x8384]
push eax
push 0x4bfde0
call fcn.004355b0
lea eax, [ebp - 0x8332]
push eax
push str.GAParams.UniqueId:__s
call fcn.0045f880
add esp, 8
test ebx, ebx
jne 0x45671c
cmp word [0x4bffe8], bx
je 0x45671c
cmp byte [ebp - 0x8332], bl
je 0x45671c
lea ecx, [ebp - 0x8332]
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4566a0
sub ecx, edx
lea esi, [ecx + 1]
cmp esi, 0x3fffffff
jle 0x4566b8
xor eax, eax
jmp 0x4566d2
lea eax, [esi + esi]
call fcn.0046dbb0
mov eax, esp
lea ecx, [ebp - 0x8332]
push 3
push esi
push ecx
push eax
call fcn.00434c40
push eax
lea eax, [ebp - 0x464]
push 0x104
push eax
call fcn.0046bf5a
add esp, 0xc
lea eax, [ebp - 0x464]
cmp dword [ebp - 0xd31c], 0
push 0x104
push eax
push 1
push str.GAClientID
push 0x4bffe8
je 0x45670f
push closesocket
jmp 0x456714
push closesocket
call fcn.004493d0
add esp, 0x18
mov ebx, dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
call fcn.00452d50
mov dword [0x4c1964], eax
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x1fec], ax
lea eax, [ebp - 0x1fea]
push eax
call fcn.0046a390
add esp, 0xc
lea eax, [ebp - 0x1fec]
push str.IAMCu.dll
push 0x4c3470
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [0x4c0e31], 0
je 0x456785
cmp dword [ebp - 0xd320], 0
je 0x456785
lea eax, [ebp - 0x1fec]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x4c2c3c], eax
push 0
push 0x4abff8
push dword [0x4c1264]
call fcn.00429c00
mov ecx, eax
add esp, 0xc
mov dword [0x4c1724], ecx
test ecx, ecx
jne 0x4567ea
push 0x4ac000
push str._BVRP_PSA
push 0x4ac210
call fcn.00433120
add esp, 0xc
mov dword [0x4c2e54], eax
test eax, eax
jne 0x4567e2
push 0x4ac000
push str._BV69_FCW_
push 0x4ac210
call fcn.00433120
add esp, 0xc
mov dword [0x4c2e54], eax
mov ecx, dword [0x4c1724]
jmp 0x4567ef
mov eax, dword [0x4c2e54]
cmp word [0x4ba5a4], 0
je 0x456802
cmp dword [0x4b9d38], 0
je 0x45687e
test ecx, ecx
jne 0x456823
test eax, eax
jne 0x456823
push 0x4ac008
push 0x104
push 0x4ba5a4
call fcn.0046bf5a
add esp, 0xc
jmp 0x45687e
push str.A6E044B8_6C25_48fc_806B_002A9582C81F
push 0x4b8c38
call fcn.0046cdb9
add esp, 8
test eax, eax
je 0x456869
cmp dword [0x4ba7d0], 0
je 0x456869
push 0x4b8c38
push 0x4b6188
push 0x4ba5a4
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push str.7B28E39C_883C_4f49_ABFB_5D16796F2DD9
push 0x4ba5a4
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x45687e
push str.7B28E39C_883C_4f49_ABFB_5D16796F2DD9
push 0x4c3678
push 0x4ba5a4
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x104
push 0x4b9f8c
call fcn.00453150
add esp, 8
push 0x4b9f8c
call ebx
push 0x4b9f8c
test eax, eax
je 0x4568b4
mov ebx, dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4ba5a4
push 0x4b4528
call ebx
jmp 0x4568c5
push 0x4b4528
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ebx, dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4b4528
push str.WinMain____ExeFile:__s
call fcn.0045f520
add esp, 8
mov esi, 2
cmp dword [0x4bfdc5], 0
je 0x456a19
cmp dword [0x4c2e5c], 0
jne 0x456a19
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c14e4]
mov dword [ebp - 0xd358], eax
mov eax, dword [0x4c38b8]
push 0x4c38b8
mov eax, dword [ecx + eax + 0x618]
lea ecx, [ebp - 0xd348]
mov dword [ebp - 0xd354], eax
call fcn.0044f830
mov ecx, dword [0x4bfdc9]
mov eax, dword [0x4bfdbd]
neg ecx
mov dword [ebp - 0xd34c], eax
mov eax, dword [0x4b9d5c]
sbb ecx, ecx
and ecx, 8
neg eax
sbb eax, eax
xor edx, edx
and eax, 4
or ecx, eax
cmp dword [0x4b9d58], edx
mov eax, esi
cmovne eax, edx
or ecx, eax
lea eax, [ebp - 0xd358]
push eax
push edx
mov dword [ebp - 0xd350], ecx
call fcn.00464710
mov edi, eax
push edi
push str.WinMain____Dialog_choiceLang:__d
mov dword [ebp - 0xd314], edi
call fcn.0045f520
add esp, 0x10
cmp edi, 1
je 0x45699f
mov dword [ebp - 0xd310], 0x4c7
jmp 0x457f89
mov eax, dword [ebp - 0xd34c]
lea ecx, [ebp - 0x13d4]
push ecx
push eax
mov dword [0x4bfdbd], eax
call fcn.0044ff50
mov eax, dword [0x4c14e4]
add esp, 8
test eax, eax
je 0x4569e5
cmp eax, dword [0x4c1264]
je 0x4569e5
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push eax
push 0x4b4730
push str.WinMain____unload__s___d
call fcn.0045f520
add esp, 0xc
push 1
push 0
push 0x4b4730
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov ecx, dword [0x4c1264]
test eax, eax
cmovne ecx, eax
push ecx
push eax
push 0x4b4730
push str.WinMain____LoadLibrary__s____d__hInstRes:__d_
mov dword [0x4c14e4], ecx
call fcn.0045f520
add esp, 0x10
cmp dword [0x4b9ae0], 0
mov esi, dword [sym.imp.USER32.dll_MessageBoxW]
je 0x456adf
push dword [0x4b9aec]
lea eax, [ebp - 0xd310]
push dword [0x4b9ae8]
push eax
push 0x4ac210
push 0x4b94c8
call fcn.00436f90
mov ecx, eax
add esp, 0x14
mov dword [0x4b9ae0], ecx
test ecx, ecx
je 0x456b6d
cmp dword [0x4b9af8], 0
je 0x456acb
cmp dword [0x4c2e5c], 0
jne 0x456acb
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c38b8]
push dword [ecx + eax + 0x618]
lea eax, [ebp - 0xbbc]
push 0x100
push eax
push 0x2ca
push dword [0x4c14e4]
call fcn.004510f0
add esp, 0x14
lea eax, [ebp - 0xbbc]
push 0x40024
push 0x4c2400
push eax
push 0
call esi
xor ecx, ecx
cmp eax, 6
sete cl
mov dword [0x4b9ae0], ecx
test ecx, ecx
jne 0x457f04
cmp dword [0x4b9af0], ecx
jne 0x457f89
xor eax, eax
mov byte [ebp - 0xd318], 0
push 0x206
push eax
mov word [ebp - 0x15dc], ax
lea eax, [ebp - 0x15da]
push eax
call fcn.0046a390
mov eax, dword [0x4c0e25]
add esp, 0xc
test eax, eax
je 0x456bd9
push str.TBI.exe
push 0x4c3678
lea eax, [ebp - 0x15dc]
push eax
call ebx
call fcn.00427a50
cmp dword [0x4c1968], 0
mov byte [ebp - 0xd318], al
jne 0x456bcf
push 0x4c198e
push 0x4c1978
push dword [ebp - 0xd318]
call fcn.00427530
add esp, 0xc
test eax, eax
jne 0x456b69
lea eax, [ebp - 0x15dc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x456bcf
xor eax, eax
jmp 0x456bd4
cmp dword [0x4b9af4], 0
je 0x456adf
push 0
push 0x100
lea eax, [ebp - 0xbbc]
push eax
push dword [ebp - 0xd310]
call fcn.00450210
add esp, 0x10
test eax, eax
je 0x457f89
cmp dword [0x4c2e5c], 0
jne 0x457f89
push 0
push 0
push 0x4b94c8
lea eax, [ebp - 0xbbc]
push eax
push 0x4c2400
push 0
call fcn.004511f0
add esp, 0x18
jmp 0x457f89
mov eax, 1
mov dword [0x4c0e25], eax
push eax
push str.WinMain____Toolbar:__d
call fcn.0045f520
add esp, 8
lea eax, [ebp - 0x13d4]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [0x4b9d50], 0
je 0x456d66
mov ecx, dword [0x4ab1b0]
mov eax, 0x14d843bf
sub ecx, dword [0x4ab1ac]
xor ebx, ebx
imul ecx
xor edi, edi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x456d00
xor esi, esi
lea ebx, [ebx]
test ebx, ebx
jne 0x456d66
mov eax, dword [0x4ab1ac]
add eax, 0x200
add eax, esi
push eax
push str.WinMain____Platform:__s
call fcn.0045f520
mov eax, dword [0x4ab1ac]
add eax, 0x400
add eax, esi
push str.Win32
push eax
call fcn.0046cdb9
add esp, 0x10
test eax, eax
jne 0x456c78
cmp dword [0x4ab1a4], ebx
sete bl
jmp 0x456ca0
mov eax, dword [0x4ab1ac]
add eax, 0x400
add eax, esi
push str.Win64
push eax
call fcn.0046cdb9
add esp, 8
mov ebx, 1
test eax, eax
cmove ebx, dword [0x4ab1a4]
push ebx
push str.WinMain____ProcArchitecture:_Continue:__d
call fcn.0045f520
add esp, 8
test ebx, ebx
je 0x456cca
mov eax, dword [0x4ab1ac]
add eax, 0x600
add eax, esi
push edi
push eax
call fcn.0042c190
add esp, 8
mov ebx, eax
mov ecx, dword [0x4ab1b0]
mov eax, 0x14d843bf
sub ecx, dword [0x4ab1ac]
inc edi
imul ecx
add esi, 0x624
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x456c30
test ebx, ebx
jne 0x456d66
mov esi, dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [0x4c2e5c], 0
mov dword [ebp - 0xd310], 0xa
jne 0x457f89
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c38b8]
push dword [ecx + eax + 0x618]
lea eax, [ebp - 0xbbc]
push 0x100
push eax
push 0x25f
push dword [0x4c14e4]
call fcn.004510f0
add esp, 0x14
lea eax, [ebp - 0xbbc]
push 0x40010
push 0x4c2400
push eax
push 0
call esi
jmp 0x457f89
mov ebx, dword [ebp - 0xd314]
lea esp, [esp]
cmp dword [0x4b9d3c], 0
je 0x456ec0
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x874], ax
lea eax, [ebp - 0x872]
push eax
call fcn.0046a390
push 0x104
lea eax, [ebp - 0x874]
push eax
push 0x48f410
push 0x4902bc
push 0x4ac828
call fcn.0042ce50
add esp, 0x20
test eax, eax
jne 0x456de6
push 0x104
lea eax, [ebp - 0x874]
push eax
push 0x48f410
push str._PASSWORD:
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x456e47
lea eax, [ebp - 0x874]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
push 0x10
lea eax, [ebp - 0x874]
push eax
lea eax, [ebp - 0xc730]
push 0x11
push eax
call fcn.0046cc55
add esp, 0x10
lea eax, [ebp - 0x874]
mov ecx, 0x4b94a6
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x456e3e
test dx, dx
je 0x456e3a
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x456e3e
add eax, 4
add ecx, 4
test dx, dx
jne 0x456e18
xor eax, eax
jmp 0x456e43
sbb eax, eax
or eax, 1
test eax, eax
je 0x456ec0
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c14e4]
mov dword [ebp - 0xc73c], eax
mov eax, dword [0x4c38b8]
mov eax, dword [ecx + eax + 0x618]
mov ecx, dword [0x4b9d5c]
neg ecx
mov dword [ebp - 0xc738], eax
mov eax, 2
sbb ecx, ecx
xor edx, edx
and ecx, 4
cmp dword [0x4b9d58], edx
cmovne eax, edx
or ecx, eax
lea eax, [ebp - 0xc73c]
push eax
push edx
mov dword [ebp - 0xc734], ecx
call fcn.00431d40
mov ebx, eax
push ebx
push str.WinMain____Dialog_password:__d
mov dword [ebp - 0xd314], ebx
call fcn.0045f520
add esp, 0x10
cmp ebx, 1
jne 0x456990
nop
cmp dword [0x4b9d40], 0
je 0x456f71
cmp dword [0x4c2e5c], 0
jne 0x456f71
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c14e4]
mov dword [ebp - 0xd30c], eax
mov eax, dword [0x4c38b8]
push 0x4b4938
push 0x104
mov eax, dword [ecx + eax + 0x618]
mov dword [ebp - 0xd308], eax
lea eax, [ebp - 0xd2fc]
push eax
call fcn.0046bf5a
mov edx, dword [ebp - 0xd304]
test ebx, ebx
mov ecx, dword [0x4b9d5c]
mov eax, 1
cmovne edx, eax
neg ecx
mov eax, 2
sbb ecx, ecx
xor esi, esi
and ecx, 4
cmp dword [0x4b9d58], esi
cmovne eax, esi
or ecx, eax
lea eax, [ebp - 0xd30c]
push eax
or edx, ecx
push esi
mov dword [ebp - 0xd304], edx
call fcn.00431390
mov ebx, eax
push ebx
push str.WinMain____Dialog_license:__d
mov dword [ebp - 0xd314], ebx
call fcn.0045f520
add esp, 0x1c
cmp ebx, 3
je 0x456d70
cmp ebx, 1
je 0x456f87
test ebx, ebx
jne 0x456990
xor eax, eax
push 0xa0
push eax
mov word [ebp - 0x9bc], ax
lea eax, [ebp - 0x9ba]
push eax
call fcn.0046a390
xor eax, eax
push 0xa0
push eax
mov word [ebp - 0x918], ax
lea eax, [ebp - 0x916]
push eax
call fcn.0046a390
lea eax, [ebp - 0x9bc]
push 0x51
push eax
call fcn.00448cd0
lea eax, [ebp - 0x918]
push 0x51
push eax
call fcn.00449330
lea eax, [ebp - 0x9bc]
push eax
push str.WinMain____CompanyName:__s
call fcn.0045f520
lea eax, [ebp - 0x918]
push eax
push str.WinMain____UserName:__s
call fcn.0045f520
add esp, 0x38
mov dword [ebp - 0xd31c], 0
jmp 0x457010
mov al, byte [0x4c0e20]
cmp al, 1
je 0x457037
cmp al, 2
je 0x457037
cmp al, 3
je 0x457037
cmp dword [0x4c0e21], 0
jne 0x457037
cmp dword [0x4c0e29], 0
je 0x457347
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xdc4], ax
lea eax, [ebp - 0xdc2]
push eax
call fcn.0046a390
push 0x104
lea eax, [ebp - 0xdc4]
push eax
push 0x48f410
push 0x4903d0
push 0x4ac828
call fcn.0042ce50
add esp, 0x20
test eax, eax
jne 0x4570a0
push 0x104
lea eax, [ebp - 0xdc4]
push eax
push 0x48f410
push str._SERIAL:
push 0x4ac828
call fcn.0042ce50
add esp, 0x14
test eax, eax
je 0x457116
lea eax, [ebp - 0xdc4]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveBlanksW]
lea eax, [ebp - 0xdc4]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4570b6
sub eax, edx
sar eax, 1
inc eax
cmp eax, 0x3fffffff
jg 0x457101
lea edi, [eax + eax]
mov eax, edi
call fcn.0046dbb0
mov esi, esp
test esi, esi
je 0x457101
push 0
push 0
push edi
push esi
push 0xffffffffffffffff
lea eax, [ebp - 0xdc4]
mov byte [esi], 0
push eax
push 0
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
neg eax
sbb eax, eax
and eax, esi
jmp 0x457103
xor eax, eax
push eax
push 0x104
push 0x4c0e35
call fcn.0046a4e2
add esp, 0xc
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x874], ax
lea eax, [ebp - 0x872]
push eax
call fcn.0046a390
add esp, 0xc
lea eax, [ebp - 0x11cc]
push eax
push 0x4b8000
lea eax, [ebp - 0x874]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x17e4]
push eax
lea eax, [ebp - 0x874]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x874]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x45719c
push 3
lea eax, [ebp - 0x874]
push 0x10000000
push eax
call fcn.0042bc10
push eax
lea eax, [ebp - 0x874]
push eax
push str.AddAccessRights__s____d
call fcn.0045f520
add esp, 0x18
jmp 0x4571c8
cmp dword [0x4ab18c], 0
je 0x4571c8
lea eax, [ebp - 0x11cc]
push eax
push 0x23
call fcn.0042c5b0
push eax
lea eax, [ebp - 0x11cc]
push eax
push str.CreateFreeDirectory__s____d
call fcn.0045f520
add esp, 0x14
lea eax, [ebp - 0x874]
push eax
call fcn.0042c370
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xc948], ax
lea eax, [ebp - 0xc946]
push eax
call fcn.0046a390
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.00448e80
push 0x4c103d
lea eax, [ebp - 0xc948]
push 0x104
push eax
call fcn.0046bf5a
push 0x104
lea eax, [ebp - 0xc948]
push eax
push 1
push 0x490460
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.004493d0
push 0x104
lea eax, [ebp - 0x874]
push eax
push 1
push 0x490470
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.004493d0
add esp, 0x54
lea eax, [ebp - 0x66c]
push 0x104
push 0x4ba5a4
push 1
push str.MainPath
push eax
push closesocket
call fcn.004493d0
mov al, byte [0x4c0e20]
add esp, 0x18
cmp al, 1
jne 0x4572b6
push 0x27
push 0x4c1490
push 1
push str.Guid
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.004493d0
add esp, 0x18
jmp 0x457342
cmp al, 3
jne 0x457347
mov ecx, 0x4c1952
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4572c6
sub ecx, edx
lea edi, [ecx + 1]
cmp edi, 0x3fffffff
jg 0x457307
lea eax, [edi + edi]
call fcn.0046dbb0
mov esi, esp
test esi, esi
je 0x457307
push edi
push esi
push 0xffffffffffffffff
xor eax, eax
push 0x4c1952
push eax
push 3
mov word [esi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
neg eax
sbb eax, eax
and eax, esi
jmp 0x457309
xor eax, eax
push eax
lea eax, [ebp - 0xc948]
push 0x104
push eax
call fcn.0046bf5a
push 0x104
lea eax, [ebp - 0xc948]
push eax
push 1
push str.SerialId
lea eax, [ebp - 0x66c]
push eax
push closesocket
call fcn.004493d0
add esp, 0x24
mov al, byte [0x4c0e20]
xor esi, esi
cmp al, 1
jne 0x45757a
push 0x574
lea eax, [ebp - 0xcef0]
mov dword [ebp - 0xcef4], esi
push esi
push eax
call fcn.0046a390
lea eax, [ebp - 0xceec]
push eax
push 0x4c1490
call fcn.0042f490
add esp, 0x14
cmp dword [ebp - 0xd31c], esi
je 0x4573a3
movdqu xmm0, xmmword [ebp - 0xceec]
push 0x4c0e35
sub esp, 0x10
mov eax, esp
movdqu xmmword [eax], xmm0
call fcn.00459dc0
add esp, 0x14
cmp dword [0x4c1280], esi
je 0x4573ce
movdqu xmm0, xmmword [ebp - 0xceec]
sub esp, 0x10
mov eax, esp
movdqu xmmword [eax], xmm0
call fcn.00459e90
mov esi, eax
add esp, 0x10
test esi, esi
jne 0x4577a8
imul edx, dword [0x4bfdbd], 0x620
mov ecx, dword [0x4c14e4]
cmp dword [0x4c127c], 0
mov dword [ebp - 0xcef4], ecx
mov ecx, dword [0x4c38b8]
sete al
inc al
mov ecx, dword [edx + ecx + 0x618]
mov dword [ebp - 0xcef0], ecx
mov ecx, dword [0x4b9d5c]
neg ecx
mov byte [ebp - 0xcedc], al
mov eax, 0x400
sbb ecx, ecx
xor edx, edx
and ecx, 0x800
cmp dword [0x4b9d58], edx
cmovne eax, edx
or ecx, eax
or ecx, dword [0x4c1284]
mov dword [ebp - 0xcedb], ecx
test ebx, ebx
je 0x457447
or ecx, 0x200
mov dword [ebp - 0xcedb], ecx
push ecx
push str.WinMain____SNV3Info.uiDlgOption:__d
call fcn.0045f520
mov al, byte [0x4c14de]
mov byte [ebp - 0xced7], al
movzx eax, al
push eax
push eax
push str.WinMain____SNV3Info.byProductCode:__d___x_
call fcn.0045f520
mov al, byte [0x4c1260]
mov byte [ebp - 0xced5], al
mov al, byte [0x4c1261]
mov byte [ebp - 0xced6], al
mov al, byte [0x4c14df]
mov byte [ebp - 0xced4], al
mov al, byte [0x4c14e0]
mov byte [ebp - 0xced2], al
mov al, byte [0x4c1263]
mov byte [ebp - 0xced3], al
lea eax, [ebp - 0x9bc]
push eax
lea eax, [ebp - 0xcac0]
push 0x51
push eax
call fcn.0046bf5a
lea eax, [ebp - 0x918]
push eax
lea eax, [ebp - 0xca1e]
push 0x51
push eax
call fcn.0046bf5a
push 0x4c1288
lea eax, [ebp - 0xccc8]
push 0x104
push eax
call fcn.0046bf5a
push 0x4c0e35
lea eax, [ebp - 0xced0]
push 0x104
push eax
call fcn.0046a4e2
add esp, 0x44
lea eax, [ebp - 0xcdcc]
push 0x4c0f39
push 0x104
push eax
call fcn.0046a4e2
add esp, 0xc
cmp dword [0x4c2e5c], 0
jne 0x457558
lea eax, [ebp - 0xcef4]
push eax
push 0
call fcn.00458dc0
mov ebx, eax
push ebx
push str.WinMain____Dialog_SerialV3:__d
mov dword [ebp - 0xd314], ebx
call fcn.0045f520
add esp, 0x10
cmp ebx, 3
je 0x456ec0
cmp ebx, 1
je 0x457558
test ebx, ebx
jne 0x456990
lea eax, [ebp - 0xcef4]
push eax
call fcn.00459f50
add esp, 4
test eax, eax
je 0x457a83
lea eax, [ebp - 0xced0]
jmp 0x457795
cmp al, 3
jne 0x4577a8
push 0x775
lea eax, [ebp - 0xd0f0]
mov dword [ebp - 0xd0f4], esi
push 0
push eax
call fcn.0046a390
push 0x4c1952
lea eax, [ebp - 0xd0ec]
push 0xf
push eax
call fcn.0046a4e2
add esp, 0x18
cmp dword [ebp - 0xd31c], esi
je 0x4575cf
lea eax, [ebp - 0xd0ec]
push eax
lea eax, [ebp - 0x66c]
push eax
call fcn.0045b740
add esp, 8
cmp dword [0x4c1740], esi
je 0x4575f7
lea eax, [ebp - 0xd0ec]
push eax
lea eax, [ebp - 0x66c]
push eax
call fcn.0045b790
mov esi, eax
add esp, 8
test esi, esi
jne 0x4577a8
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c14e4]
cmp dword [0x4c173c], 0
mov dword [ebp - 0xd0f4], eax
mov eax, dword [0x4c38b8]
mov eax, dword [ecx + eax + 0x618]
mov ecx, dword [0x4b9d5c]
mov dword [ebp - 0xd0f0], eax
sete al
inc al
neg ecx
mov byte [ebp - 0xd0dd], al
mov eax, 0x400
sbb ecx, ecx
xor edx, edx
and ecx, 0x800
cmp dword [0x4b9d58], edx
cmovne eax, edx
or ecx, eax
or ecx, dword [0x4c1744]
mov dword [ebp - 0xd0dc], ecx
test ebx, ebx
je 0x45766e
or ecx, 0x200
mov dword [ebp - 0xd0dc], ecx
lea eax, [ebp - 0x9bc]
push eax
lea eax, [ebp - 0xcabf]
push 0x51
push eax
call fcn.0046bf5a
lea eax, [ebp - 0x918]
push eax
lea eax, [ebp - 0xca1d]
push 0x51
push eax
call fcn.0046bf5a
push 0x4c174a
lea eax, [ebp - 0xccc7]
push 0x104
push eax
call fcn.0046bf5a
push 0x4c0e35
lea eax, [ebp - 0xd0d7]
push 0x104
push eax
call fcn.0046a4e2
push 0x4c0f39
lea eax, [ebp - 0xcfd3]
push 0x104
push eax
call fcn.0046a4e2
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0xcecf]
push 0x104
push eax
call fcn.0046bf5a
add esp, 0x48
lea eax, [ebp - 0x66c]
push eax
push str.WinMain____AQTOOLSINFO.szProductKey:__s
call fcn.0045f520
push 0x4c1952
push str.WinMain____AQTOOLSSERIALV5.szSerialID:__s
call fcn.0045f880
add esp, 0x10
cmp dword [0x4c2e5c], 0
jne 0x45775b
lea eax, [ebp - 0xd0f4]
push eax
push 0
call fcn.0045aad0
mov ebx, eax
push ebx
push str.WinMain____Dialog_SerialV5_d
mov dword [ebp - 0xd314], ebx
call fcn.0045f520
add esp, 0x10
cmp ebx, 3
je 0x456ec0
cmp ebx, 1
je 0x45775b
test ebx, ebx
jne 0x456990
lea eax, [ebp - 0xd0d7]
push eax
push str.WinMain____SNV5Info.szSerial:__s
call fcn.0045f880
lea eax, [ebp - 0xd0d7]
push eax
lea eax, [ebp - 0x66c]
push 0x4c1952
push eax
call fcn.0045b840
add esp, 0x14
test eax, eax
je 0x457a83
lea eax, [ebp - 0xd0d7]
push eax
push 0x104
push 0x4c0e35
call fcn.0046a4e2
add esp, 0xc
cmp dword [0x4c0e21], 0
je 0x457b22
test esi, esi
jne 0x457b22
cmp dword [0x4abffc], esi
je 0x45787e
cmp dword [ebp - 0xd320], esi
jne 0x45787e
cmp dword [0x4c2e5c], esi
jne 0x457b13
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c38b8]
push dword [ecx + eax + 0x618]
lea eax, [ebp - 0xfc4]
push 0x100
push eax
push 0x258
push dword [0x4c14e4]
call fcn.004510f0
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c38b8]
push dword [ecx + eax + 0x618]
lea eax, [ebp - 0xbbc]
push 0x100
push eax
push 0x2c3
push dword [0x4c14e4]
call fcn.004510f0
mov esi, dword [sym.imp.USER32.dll_MessageBoxW]
add esp, 0x28
mov edi, edi
push 0x25
lea eax, [ebp - 0xfc4]
push eax
lea eax, [ebp - 0xbbc]
push eax
push 0
call esi
cmp eax, 2
je 0x456990
push 0
call fcn.00409430
mov dword [ebp - 0xd320], eax
test eax, eax
je 0x457850
mov ecx, 0x4c0e35
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x457886
sub ecx, edx
lea edi, [ecx + 1]
cmp edi, 0x3fffffff
jg 0x4578c7
lea eax, [edi + edi]
call fcn.0046dbb0
mov esi, esp
test esi, esi
je 0x4578c7
push edi
push esi
push 0xffffffffffffffff
xor eax, eax
push 0x4c0e35
push eax
push 3
mov word [esi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
neg eax
sbb eax, eax
and eax, esi
jmp 0x4578c9
xor eax, eax
push eax
lea eax, [ebp - 0x66c]
push eax
call fcn.004094f0
mov edx, 0x4c0e35
mov ebx, eax
lea esi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x4578e0
sub edx, esi
lea edi, [edx + 1]
cmp edi, 0x3fffffff
jg 0x457921
lea eax, [edi + edi]
call fcn.0046dbb0
mov esi, esp
test esi, esi
je 0x457921
push edi
push esi
push 0xffffffffffffffff
xor eax, eax
push 0x4c0e35
push eax
push 3
mov word [esi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
neg eax
sbb eax, eax
and eax, esi
jmp 0x457923
xor eax, eax
push ebx
push eax
lea eax, [ebp - 0x66c]
push eax
push str.WinMain____ActivProd_SetSerialNumber__s___s____d
call fcn.0045f520
add esp, 0x10
lea eax, [ebp - 0x66c]
push 0
push 0
push 1
push 0
push 0
push 0
push 0xfffffffffffffffe
push closesocket
push 0
push eax
call fcn.004095e0
mov esi, eax
lea eax, [ebp - 0x66c]
push esi
push 0
push eax
push str.WinMain____ActivProdEx__s___d____d
call fcn.0045f520
add esp, 0x10
test esi, esi
jne 0x457b22
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c38b8]
push dword [ecx + eax + 0x618]
lea eax, [ebp - 0xfc4]
push 0x100
push eax
push 0x258
push dword [0x4c14e4]
call fcn.004510f0
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c38b8]
push dword [ecx + eax + 0x618]
lea eax, [ebp - 0xbbc]
push 0x100
push eax
push 0x2c2
push dword [0x4c14e4]
call fcn.004510f0
mov ecx, 0x4c0e35
add esp, 0x28
lea edx, [ecx + 1]
lea ebx, [ebx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4579f0
sub ecx, edx
lea edi, [ecx + 1]
cmp edi, 0x3fffffff
jg 0x457a31
lea eax, [edi + edi]
call fcn.0046dbb0
mov esi, esp
test esi, esi
je 0x457a31
push edi
push esi
push 0xffffffffffffffff
xor eax, eax
push 0x4c0e35
push eax
push 3
mov word [esi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
neg eax
sbb eax, eax
and eax, esi
jmp 0x457a33
xor eax, eax
push 0x4c2e60
push eax
lea eax, [ebp - 0xbbc]
push eax
lea eax, [ebp - 0x1de4]
push 0x200
push eax
call fcn.0046988e
mov esi, dword [sym.imp.USER32.dll_MessageBoxW]
lea eax, [ebp - 0xfc4]
add esp, 0x14
push 0
push eax
lea eax, [ebp - 0x1de4]
push eax
push 0
call esi
mov ebx, dword [ebp - 0xd314]
mov dword [ebp - 0xd31c], 1
jmp 0x457010
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c38b8]
push dword [ecx + eax + 0x618]
lea eax, [ebp - 0xfc4]
push 0x100
push eax
push 0x258
push dword [0x4c14e4]
call fcn.004510f0
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c38b8]
push dword [ecx + eax + 0x618]
lea eax, [ebp - 0xbbc]
push 0x100
push eax
push 0x2bf
push dword [0x4c14e4]
call fcn.004510f0
mov esi, dword [sym.imp.USER32.dll_MessageBoxW]
lea eax, [ebp - 0xfc4]
add esp, 0x28
push 0
push eax
lea eax, [ebp - 0xbbc]
push eax
push 0
call esi
mov dword [ebp - 0xd310], 0xd
jmp 0x457f89
mov dword [ebp - 0xd310], 0x4cd
jmp 0x457f89
cmp dword [0x4c0e25], 0
je 0x457cb6
push 0x236
lea eax, [ebp - 0xc974]
push 0
push eax
call fcn.0046a390
imul ecx, dword [0x4bfdbd], 0x620
mov esi, 2
mov eax, dword [0x4c14e4]
mov dword [ebp - 0xc978], eax
mov eax, dword [0x4c38b8]
push 0x4c1978
push 0xb
mov eax, dword [ecx + eax + 0x618]
mov dword [ebp - 0xc974], eax
mov eax, dword [0x4c1968]
mov dword [ebp - 0xc964], eax
mov eax, dword [0x4c1974]
mov dword [ebp - 0xc96c], eax
mov eax, dword [0x4c1970]
mov dword [ebp - 0xc968], eax
mov eax, dword [0x4c196c]
mov dword [ebp - 0xc970], eax
mov eax, dword [0x4b9d5c]
neg eax
sbb eax, eax
xor ecx, ecx
and eax, 4
cmp dword [0x4b9d58], ecx
cmovne esi, ecx
or eax, esi
or dword [ebp - 0xc742], eax
lea eax, [ebp - 0xc960]
push eax
call fcn.0046bf5a
mov ebx, dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0xc94a]
add esp, 0x18
push str.Toolbar.bmp
push 0x4c3678
push eax
call ebx
cmp dword [0x4c2e5c], 0
jne 0x457c23
lea eax, [ebp - 0xc978]
push eax
push 0
call fcn.00427450
mov esi, eax
push esi
push str.WinMain____Dialog_Toolbar:__d
call fcn.0045f520
add esp, 0x10
cmp esi, 1
je 0x457c23
mov dword [ebp - 0xd310], 0x4c7
jmp 0x457f89
cmp dword [ebp - 0xc970], 0
je 0x457cbc
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c38b8]
push dword [ecx + eax + 0x618]
lea eax, [ebp - 0x1de4]
push 0x200
push eax
push 0x2c7
push dword [0x4c14e4]
call fcn.004510f0
push 1
lea eax, [ebp - 0x1de4]
push eax
push 0x4c2400
push dword [0x4c14e4]
call fcn.00431820
push dword [ebp - 0xc968]
lea eax, [ebp - 0x15dc]
push dword [ebp - 0xc96c]
push dword [ebp - 0xd318]
push 0x4c1978
push eax
push 0
call fcn.00427d90
push 0
push 0
push 0
push dword [0x4c14e4]
call fcn.00431820
add esp, 0x4c
jmp 0x457cbc
mov ebx, dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [0x4c0e29], 0
je 0x457f04
push 0x736
lea eax, [ebp - 0xd0b4]
push 0
push eax
call fcn.0046a390
imul ecx, dword [0x4bfdbd], 0x620
mov eax, dword [0x4c14e4]
mov dword [ebp - 0xd0b8], eax
mov eax, dword [0x4c38b8]
mov eax, dword [ecx + eax + 0x618]
mov dword [ebp - 0xd0b4], eax
mov al, byte [0x4c1b99]
mov byte [ebp - 0xceb0], al
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0xceaf]
push 0x104
push eax
call fcn.0046bf5a
push 0x1f
lea eax, [ebp - 0x11cc]
push eax
lea eax, [ebp - 0xcbc7]
push 0x20
push eax
call fcn.0046cc55
push 0x1f
lea eax, [ebp - 0x17e4]
push eax
lea eax, [ebp - 0xcb87]
push 0x20
push eax
call fcn.0046cc55
push 0x10
push 0x20
lea eax, [ebp - 0xc9c7]
push eax
movzx eax, byte [0x4c125f]
push eax
call fcn.0046d1c0
add esp, 0x48
lea eax, [ebp - 0xcb47]
push 0x1f
push 0x4c2e60
push 0x20
push eax
call fcn.0046cc55
push 0x4c103d
lea eax, [ebp - 0xcc07]
push 0x20
push eax
call fcn.0046bf5a
lea eax, [ebp - 0x9bc]
push eax
lea eax, [ebp - 0xcc67]
push 0x20
push eax
call fcn.0046bf5a
lea eax, [ebp - 0x918]
push eax
lea eax, [ebp - 0xcca7]
push 0x20
push eax
call fcn.0046bf5a
mov ecx, 0x4c0e35
add esp, 0x34
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x457dd0
sub ecx, edx
lea esi, [ecx + 1]
cmp esi, 0x3fffffff
jle 0x457de8
xor eax, eax
jmp 0x457e00
lea eax, [esi + esi]
call fcn.0046dbb0
mov eax, esp
push 3
push esi
push 0x4c0e35
push eax
call fcn.00434c40
push eax
lea eax, [ebp - 0xca87]
push 0x40
push eax
call fcn.0046bf5a
push 0x4c25e6
lea eax, [ebp - 0xcb07]
push 0x20
push eax
call fcn.0046bf5a
push 0xa
push 0x10
lea eax, [ebp - 0xcc27]
push eax
movzx eax, byte [0x4c1261]
push eax
call fcn.0046d1c0
mov al, byte [0x4c1262]
mov byte [ebp - 0xc983], al
mov eax, dword [0x4c1daa]
mov dword [ebp - 0xc982], eax
lea eax, [ebp - 0xcac7]
push 0x20
push eax
movzx eax, byte [0x4c1260]
push eax
call fcn.00446450
push 0x4c1ba2
lea eax, [ebp - 0xd0b0]
push 0x100
push eax
call fcn.0046bf5a
add esp, 0x40
push str.WinMain____before_OLRDisplay
call fcn.0045f520
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xc948], ax
lea eax, [ebp - 0xc946]
push eax
call fcn.0046a390
add esp, 0x10
lea eax, [ebp - 0xc948]
push str.OLRegistu.dll
push 0x4c3470
push eax
call ebx
xor eax, eax
cmp dword [0x4c2e5c], eax
sete al
push eax
lea eax, [ebp - 0xc948]
push eax
lea eax, [ebp - 0xd0b8]
push eax
push 0
call fcn.00446490
mov esi, eax
push esi
push str.WinMain____Dialog_OLRv3:__d
call fcn.0045f520
add esp, 0x18
cmp esi, 1
je 0x457f04
cmp esi, 3
je 0x457f04
mov dword [ebp - 0xd310], 0x4c7
jmp 0x457f89
mov eax, dword [0x4c14e4]
mov ecx, dword [0x4c38bc]
mov esi, dword [0x4c38b8]
sub ecx, esi
mov dword [ebp - 0xd334], eax
mov eax, 0x5397829d
imul ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x457f49
imul eax, dword [0x4bfdbd], 0x620
mov eax, dword [eax + esi + 0x618]
mov dword [ebp - 0xd330], eax
jmp 0x457f53
mov dword [ebp - 0xd330], 0x809
mov ecx, dword [0x4b9d5c]
neg ecx
sbb ecx, ecx
xor eax, eax
and ecx, 2
cmp dword [0x4b9d58], eax
sete al
or ecx, eax
lea eax, [ebp - 0xd334]
or dword [ebp - 0xd32c], ecx
push eax
push 0
call fcn.004321d0
add esp, 8
mov dword [0x4c2e4c], eax
mov edi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [0x4c1724]
test eax, eax
je 0x457fa5
push eax
call dword [sym.imp.KERNEL32.dll_FreeResource]
mov eax, dword [ebp - 0xd33c]
test eax, eax
je 0x457fb2
push eax
call edi
mov eax, dword [0x4c2c3c]
test eax, eax
je 0x457fbe
push eax
call edi
mov eax, dword [0x4c1964]
test eax, eax
je 0x458003
push str.ISnuiShutdown
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x457fdb
call eax
jmp 0x457fed
push str.ISnuiShutdown
push str.Function__s_failed_
call fcn.0045f880
add esp, 8
push dword [0x4c1964]
call edi
push eax
push str.WinMain____unload_NewUI___d
call fcn.0045f520
add esp, 8
mov eax, dword [0x4c14e4]
test eax, eax
je 0x45802a
cmp eax, dword [0x4c1264]
je 0x45802a
push eax
call edi
push eax
push 0x4b4730
push str.WinMain____unload__s___d
call fcn.0045f520
add esp, 0xc
call dword [sym.imp.ole32.dll_CoUninitialize]
mov esi, dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
push 0x4c3678
call esi
test eax, eax
je 0x458060
push 2
push 0x4c3678
call fcn.0045da20
push eax
push 0x4c3678
push str.WinMain____Remove_folder__s___d_
call fcn.0045f520
add esp, 0x14
push 0x4b4f40
call esi
test eax, eax
je 0x4580a3
cmp dword [0x4ba7d0], 0
je 0x458081
push 0x4b4f40
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x458090
push 2
push 0x4b4f40
call fcn.0045da20
add esp, 8
push eax
push 0x4b4f40
push str.WinMain____Remove_folder__s___d_
call fcn.0045f520
add esp, 0xc
cmp dword [0x4b9d34], 0
je 0x4580ee
push 0x4ba5a4
call esi
test eax, eax
je 0x4580ee
push 0x4ac008
push 0x4ba5a4
call fcn.0046cdb9
add esp, 8
test eax, eax
je 0x4580ee
push 2
push 0x4ba5a4
call fcn.0045da20
push eax
push 0x4ba5a4
push str.WinMain____Remove_folder__s___d_
call fcn.0045f520
add esp, 0x14
jmp 0x458100
push 0x4ba5a4
push str.WinMain____the_folder__s_will_not_be_removed_
call fcn.0045f520
add esp, 8
cmp dword [ebp - 0xd324], 0
je 0x458142
push 0
lea eax, [ebp - 0xd310]
push eax
push dword [ebp + 0x14]
push 0
push str.Runas
push 0x487854
push dword [ebp - 0xd338]
push 0x4ac210
push 0
call fcn.0045cf50
add esp, 0x24
test eax, eax
jne 0x458142
call ebx
mov dword [ebp - 0xd310], eax
mov eax, dword [ebp - 0xd328]
test eax, eax
je 0x458153
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x4a80cc]
test eax, eax
mov ecx, dword [ebp - 0xd310]
cmovne ecx, eax
push ecx
push str.WinMain____End__x_
mov dword [ebp - 0xd310], ecx
call fcn.0045f520
add esp, 8
mov ecx, dword [ebp - 0xd348]
mov esi, dword [ebp - 0xd310]
test ecx, ecx
je 0x458190
push ecx
call fcn.00429520
add esp, 4
mov eax, esi
lea esp, [ebp - 0xd364]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004698aa
mov esp, ebp
pop ebp
ret 0x10