Function at 0x427de0
Capabilities:
Check for time delay via gettickcount
Create thread
Get file attributes
Set current directory
Set environment variable
Terminate process

Disassembly:
push 0x268
mov eax, 0x4ab209
call fcn.0049322c
mov esi, ecx
xor ebx, ebx
mov dword [ebp - 0x248], esi
mov dword [ebp - 0x240], ebx
push 3
pop eax
push ecx
mov dword [ebp - 4], eax
mov ecx, esp
mov dword [ebp - 0x21c], esp
push str.Loader_Main:_in
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x244], ebx
mov dword [ebp - 0x22c], ebx
call fcn.00421017
call fcn.0042623e
pop ecx
push esi
call fcn.00423561
pop ecx
mov dword [ebp - 0x21c], eax
cmp eax, ebx
jne 0x427e4b
push str.Cannot_open_ZIP__RESOURCE_COREZIP_
call fcn.0042626e
push dword [ebp + 8]
call fcn.0048f20a
pop ecx
push esi
mov esi, 0x4d4988
mov dword [0x4d49d0], eax
call fcn.00423425
pop ecx
cmp word [0x4d49d8], bx
je 0x427ed8
xor eax, eax
mov word [ebp - 0x274], ax
lea edi, [ebp - 0x272]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x274]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ax, word [ebp - 0x274]
cmp ax, word [0x4d49d8]
jb 0x427ed8
mov ax, word [ebp - 0x272]
cmp ax, word [0x4d49da]
jb 0x427ed8
mov ax, word [ebp - 0x26e]
cmp ax, word [0x4d49de]
jb 0x427ed8
push ebx
push str.Expiration
push str.Package_expired
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push str._Vintegrate_
push dword [ebp + 0x14]
call fcn.0048ef19
pop ecx
pop ecx
test eax, eax
jne 0x427ef7
mov dword [ebp - 0x22c], 1
jmp 0x427f14
push str._Vintegrate:Full_
push dword [ebp + 0x14]
call fcn.0048ef19
pop ecx
pop ecx
test eax, eax
jne 0x427f14
mov dword [ebp - 0x22c], 2
push ecx
lea eax, [ebp + 8]
mov dword [ebp - 0x23c], esp
mov ecx, esp
push eax
mov esi, 0x4d4988
call fcn.00421e00
call fcn.00427cf8
pop ecx
push dword [ebp - 0x22c]
push ecx
mov ecx, esp
mov dword [ebp - 0x23c], esp
push str.VintegrateMode
call fcn.00421017
push ecx
mov byte [ebp - 4], 4
mov esi, esp
mov dword [ebp - 0x25c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x258], esp
push dword [0x4d4990]
call fcn.00421017
call fcn.00462b00
pop ecx
mov byte [ebp - 4], 5
call fcn.00464e50
mov edx, eax
mov byte [ebp - 4], 3
call fcn.00456df0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x23c], esp
push str.StartTickTime
call fcn.00421017
push ecx
mov byte [ebp - 4], 6
mov esi, esp
mov dword [ebp - 0x25c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x258], esp
push dword [0x4d4990]
call fcn.00421017
call fcn.00462b00
pop ecx
mov byte [ebp - 4], 7
call fcn.00464e50
mov edx, eax
mov byte [ebp - 4], 3
call fcn.00456df0
pop ecx
pop ecx
mov dword [ebp - 0x23c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x23c], esp
push 0x4b280c
call fcn.00421017
push ecx
mov byte [ebp - 4], 8
mov ecx, esp
mov dword [ebp - 0x25c], esp
push 0x4b2ff8
call fcn.00421017
push ecx
mov byte [ebp - 4], 9
mov ecx, esp
mov dword [ebp - 0x258], esp
push dword [0x4d49cc]
call fcn.00421017
mov byte [ebp - 4], 3
call fcn.004555d0
add esp, 0xc
call fcn.00458300
pop ecx
cmp eax, ebx
jne 0x42812f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x244], eax
call fcn.0042e824
push 0x405
mov ebx, 0x4d4988
call fcn.0046d700
pop ecx
xor ebx, ebx
push dword [0x4d4990]
lea eax, [ebp - 0x218]
push dword [0x4d49cc]
push str._sAppVirtDll__s.dll
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push dword [0x4d4998]
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, dword [0x4d49d4]
push eax
mov eax, dword [0x4d4990]
call fcn.0046dc90
mov eax, dword [0x4d4994]
mov esi, 0x4b263c
cmp eax, ebx
jne 0x4280b7
mov eax, esi
push eax
lea ecx, [ebp - 0x234]
call fcn.00421017
cmp dword [ebp + 0xc], 2
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x238], ebx
je 0x42835e
mov eax, dword [ebp + 0x14]
cmp dword [eax - 0xc], ebx
jne 0x428194
push 0x3b
push dword [0x4d4994]
call fcn.0048ed5b
pop ecx
pop ecx
test eax, eax
jne 0x428100
cmp dword [ebp + 0xc], 1
jne 0x42835e
push 0x404
mov ebx, 0x4d4988
call fcn.0046d700
pop ecx
xor eax, eax
push eax
push eax
push eax
push 0x427bea
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x238], eax
xor ebx, ebx
jmp 0x42835e
cmp dword [0x4d49c8], ebx
je 0x428066
cmp dword [ebp + 0xc], 2
je 0x428066
push 1
push ecx
mov eax, esp
mov dword [ebp - 0x23c], esp
push dword [0x4d4990]
push str.StartStreaming:AppID_s
push eax
call fcn.004559f0
add esp, 0xc
call fcn.0042255e
pop ecx
pop ecx
cmp eax, ebx
jne 0x428066
push dword [0x4d4990]
lea eax, [ebp - 0x21c]
push str.Cannot_stream_application__s_
push eax
call fcn.004559f0
add esp, 0xc
push dword [eax]
jmp 0x427e46
push 1
lea eax, [ebp - 0x254]
push eax
lea ecx, [ebp + 0x14]
call fcn.00423c6c
push 0x4b4ba4
mov ecx, eax
mov byte [ebp - 4], 0xb
call fcn.00423dd3
neg eax
sbb al, al
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x254]
inc al
add ecx, 0xfffffff0
mov byte [ebp - 0x21d], al
call fcn.0042001a
cmp byte [ebp - 0x21d], bl
je 0x42835e
push ebx
lea eax, [ebp + 0x14]
push eax
xor eax, eax
inc eax
call fcn.00423ac2
push dword [ebp + 0x14]
call fcn.0048efc2
pop ecx
push esi
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x224], ebx
call fcn.00421017
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x254], ebx
mov dword [ebp - 0x230], ebx
jle 0x428331
mov edi, 0x4b3d80
lea eax, [ebp - 0x224]
push eax
push 0x4b3adc
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x234]
call fcn.00423b3e
push eax
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 0xd
call fcn.00423e75
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x264]
add ecx, 0xfffffff0
call fcn.0042001a
mov eax, dword [ebp + 0x18]
cmp dword [eax - 0xc], ebx
je 0x428305
lea eax, [ebp - 0x258]
push eax
push edi
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x258], ebx
call fcn.00423b3e
push edi
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x23c]
push eax
mov byte [ebp - 4], 0xe
call fcn.00424858
add esp, 0xc
lea ecx, [ebp + 0x18]
push ecx
push eax
lea eax, [ebp - 0x25c]
push eax
mov byte [ebp - 4], 0xf
call fcn.00425871
add esp, 0xc
push eax
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 0x10
call fcn.00423e75
mov ecx, dword [ebp - 0x25c]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x23c]
add ecx, 0xfffffff0
call fcn.0042001a
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x260]
add ecx, 0xfffffff0
call fcn.0042001a
cmp dword [ebp - 0x224], 0xffffffff
je 0x42838d
mov eax, dword [ebp - 0x228]
cmp dword [eax - 0xc], ebx
je 0x42838d
inc dword [ebp - 0x230]
mov eax, dword [ebp - 0x230]
cmp eax, dword [ebp - 0x254]
jl 0x428228
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x234]
call fcn.00423e75
push esi
lea ecx, [ebp + 0x14]
call fcn.00421149
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x228]
add ecx, 0xfffffff0
call fcn.0042001a
push dword [ebp + 0xc]
mov ecx, 0x4d4988
push dword [ebp - 0x248]
push dword [ebp - 0x21c]
call fcn.004268e4
add esp, 0xc
cmp eax, ebx
je 0x4283ab
cmp eax, 7
jne 0x428397
push 0x4b4ba8
jmp 0x427e46
push 0xff
jmp 0x427ed2
lea ecx, [ebp - 0x21c]
push ecx
mov edx, eax
call fcn.0045be10
pop ecx
jmp 0x42818d
push 1
lea eax, [ebp - 0x24c]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x21c], esp
mov esi, str.RequireManaged
push esi
call fcn.00421017
push ecx
mov byte [ebp - 4], 0x11
mov ecx, esp
mov dword [ebp - 0x248], esp
mov edi, str.SoftwareCameyo
push edi
call fcn.00421017
push SysReAllocStringLen
mov byte [ebp - 4], 0xa
call fcn.00456bb0
add esp, 0x14
cmp eax, ebx
jne 0x428435
push 1
lea eax, [ebp - 0x24c]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x21c], esp
push esi
call fcn.00421017
push ecx
mov byte [ebp - 4], 0x12
mov ecx, esp
mov dword [ebp - 0x248], esp
push edi
call fcn.00421017
push SysReAllocStringLen
mov byte [ebp - 4], 0xa
call fcn.00456bb0
add esp, 0x14
cmp eax, ebx
je 0x428483
cmp dword [ebp - 0x24c], ebx
je 0x428483
push ecx
mov ecx, esp
mov dword [ebp - 0x21c], esp
push str.Loader_Main:_RequireManaged
call fcn.00421017
call fcn.0042623e
lea eax, [ebp - 0x218]
mov ecx, esp
mov dword [ebp - 0x21c], esp
push eax
call fcn.00421017
call fcn.004218da
pop ecx
cmp eax, ebx
jne 0x428483
push ebx
push str.Cameyo
push str.You_are_not_allowd_to_use_unmanaged_apps.
jmp 0x427eca
mov eax, dword [ebp + 0x14]
mov eax, dword [eax - 0xc]
cmp eax, ebx
je 0x4284d1
xor esi, esi
inc esi
push esi
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp + 0x14]
call fcn.00423c6c
mov byte [ebp - 4], 0x13
push 0x4b4ba4
mov ecx, eax
mov dword [ebp - 0x240], esi
call fcn.00423dd3
test eax, eax
je 0x4284d1
push ebx
push 0x5c
lea ecx, [ebp + 0x14]
call fcn.00423bf1
mov byte [ebp - 0x21d], 1
cmp eax, 0xffffffff
je 0x4284d7
mov byte [ebp - 0x21d], bl
mov dword [ebp - 4], 0xa
test byte [ebp - 0x240], 1
je 0x4284f5
mov ecx, dword [ebp - 0x21c]
add ecx, 0xfffffff0
call fcn.0042001a
cmp byte [ebp - 0x21d], bl
je 0x4285ca
call fcn.00480035
push eax
lea ecx, [ebp - 0x224]
call fcn.00420985
mov byte [ebp - 4], 0x14
call fcn.00480035
push eax
lea ecx, [ebp - 0x230]
call fcn.00420985
mov byte [ebp - 4], 0x15
call fcn.0045fa00
lea eax, [ebp - 0x230]
push eax
push 0x42659c
push ebx
push dword [0x4d42d8]
push 0x4d42d0
call fcn.00471500
push ebx
lea eax, [ebp - 0x224]
push eax
push ebx
push ecx
lea eax, [ebp - 0x230]
mov dword [ebp - 0x21c], esp
mov ecx, esp
push eax
call fcn.00421e00
push ecx
mov byte [ebp - 4], 0x16
lea eax, [ebp + 0x14]
mov dword [ebp - 0x248], esp
mov ecx, esp
push eax
call fcn.00421e00
mov byte [ebp - 4], 0x15
call fcn.00461ee0
add esp, 0x14
cmp eax, ebx
je 0x4285aa
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp + 0x14]
call fcn.00423e75
lea eax, [ebp + 0x14]
push eax
call fcn.00464b90
pop ecx
mov ecx, dword [ebp - 0x230]
add ecx, 0xfffffff0
call fcn.0042001a
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x224]
add ecx, 0xfffffff0
call fcn.0042001a
push ecx
mov eax, esp
mov dword [ebp - 0x21c], esp
push dword [ebp + 0x14]
push dword [ebp - 0x234]
push dword [ebp + 0xc]
push str.Loader_Main:_AutoLaunchMode_d__AutoLaunchRaw_s__ExecCmd_s
push eax
call fcn.004559f0
add esp, 0x14
call fcn.0042623e
pop ecx
push 2
pop esi
cmp dword [ebp + 0xc], esi
je 0x428c3c
cmp dword [ebp - 0x22c], ebx
je 0x42868e
lea eax, [ebp - 0x218]
push 1
push eax
call fcn.004215d1
pop ecx
pop ecx
test eax, eax
je 0x428638
push ebx
push ebx
push ebx
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
mov dword [ebp - 0x250], esi
jmp 0x428c3c
call fcn.00480035
push eax
lea ecx, [ebp - 0x240]
call fcn.00420985
mov byte [ebp - 4], 0x17
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x240]
push str.Could_not_inject_explorer.exe__Error_d_
push eax
call fcn.0042060a
mov esi, dword [ebp - 0x240]
add esp, 0xc
push ebx
push str.Error
push esi
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0x250], ebx
mov byte [ebp - 4], 0xa
lea ecx, [esi - 0x10]
jmp 0x428c37
mov eax, dword [ebp - 0x234]
cmp dword [eax - 0xc], ebx
jne 0x4286a5
mov eax, dword [ebp + 0x14]
cmp dword [eax - 0xc], ebx
je 0x428c3c
cmp dword [ebp - 0x238], ebx
je 0x42878a
push ecx
mov eax, esp
mov dword [ebp - 0x21c], esp
push str.Loader_Main:_Waiting_for_AutoLaunchMenu
push eax
call fcn.004559f0
pop ecx
pop ecx
call fcn.0042623e
mov ebx, 0x4d4988
mov dword [esp], 0x404
call fcn.0046d700
pop ecx
push 0xffffffffffffffff
push dword [ebp - 0x238]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x238]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [0x4d4994]
lea ecx, [ebp - 0x234]
call fcn.00421149
push str._Cancel_
lea ecx, [ebp - 0x234]
call fcn.00423dd3
test eax, eax
jne 0x428778
push ecx
mov ecx, esp
mov dword [ebp - 0x21c], esp
push str.Loader_Main:_cancelled_n
call fcn.00421017
call fcn.0042623e
pop ecx
mov ecx, dword [ebp - 0x234]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp + 0x10]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp + 0x18]
add ecx, 0xfffffff0
call fcn.0042001a
xor eax, eax
inc eax
jmp 0x428ca3
call fcn.0042e824
push 0x405
call fcn.0046d700
pop ecx
xor ebx, ebx
push ecx
mov eax, esp
mov dword [ebp - 0x21c], esp
push dword [ebp - 0x234]
push str.Loader_Main:_AutoLaunchRaw_s
push eax
call fcn.004559f0
add esp, 0xc
call fcn.0042623e
pop ecx
mov dword [ebp - 0x224], ebx
call fcn.00480035
push eax
lea ecx, [ebp - 0x22c]
call fcn.00420985
mov byte [ebp - 4], 0x18
call fcn.00480035
push eax
lea ecx, [ebp - 0x230]
call fcn.00420985
push 0x3e
push ecx
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x234]
mov dword [ebp - 0x21c], esp
mov ecx, esp
push eax
lea edi, [ebp - 0x224]
call fcn.00421e00
lea eax, [ebp - 0x21c]
push eax
mov ecx, edi
call fcn.004594e0
add esp, 0xc
mov byte [ebp - 4], 0x1a
call fcn.0042580f
push eax
lea ecx, [ebp - 0x22c]
call fcn.00423e75
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x21c]
add ecx, 0xfffffff0
call fcn.0042001a
push 0x3e
push ecx
lea eax, [ebp - 0x234]
mov dword [ebp - 0x21c], esp
mov ecx, esp
push eax
call fcn.00421e00
lea eax, [ebp - 0x21c]
push eax
mov ecx, edi
call fcn.004594e0
add esp, 0xc
mov byte [ebp - 4], 0x1b
call fcn.0042580f
push eax
lea ecx, [ebp - 0x230]
call fcn.00423e75
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x21c]
add ecx, 0xfffffff0
call fcn.0042001a
push 1
push 1
push ebx
lea edi, [ebp - 0x22c]
call fcn.0046d460
pop ecx
pop ecx
mov eax, esp
mov dword [ebp - 0x21c], esp
push dword [ebp - 0x22c]
push str.Loader_Main:_AutoLaunchCmd_s
push eax
call fcn.004559f0
add esp, 0xc
call fcn.0042623e
mov eax, esp
mov dword [ebp - 0x21c], esp
lea ecx, [ebp - 0x218]
push ecx
push str.Loader_Main:_Loading_DLL_to_get_myself_hooked:__s
push eax
call fcn.004559f0
add esp, 0xc
call fcn.0042623e
mov dword [esp], str.TRUE
push str.CAMEYO_VIRTUALAPP
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push ecx
mov ecx, esp
mov dword [ebp - 0x21c], esp
push eax
lea eax, [ebp - 0x218]
push eax
push str.Loader_Main:_LoadLibrary__s_0x_x
push ecx
call fcn.004559f0
add esp, 0x10
call fcn.0042623e
pop ecx
call fcn.00480035
push eax
lea ecx, [ebp - 0x228]
call fcn.00420985
mov byte [ebp - 4], 0x1c
call fcn.00480035
push eax
lea ecx, [ebp - 0x224]
call fcn.00420985
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp + 0x14]
push ecx
mov dword [ebp - 0x21c], esp
cmp dword [eax - 0xc], ebx
jne 0x428993
mov eax, esp
push dword [ebp - 0x22c]
push str.ExecName:_Taking_AutoLaunchCmd_s
push eax
call fcn.004559f0
add esp, 0xc
call fcn.0042623e
pop ecx
mov eax, edi
push eax
lea ecx, [ebp - 0x228]
call fcn.00423e75
mov eax, dword [ebp + 0x18]
lea ecx, [ebp - 0x224]
cmp dword [eax - 0xc], ebx
jne 0x4289bf
lea eax, [ebp - 0x230]
jmp 0x4289c2
mov ecx, esp
push eax
push str.ExecName:_Taking_ExecCmd_s
push ecx
call fcn.004559f0
add esp, 0xc
call fcn.0042623e
pop ecx
lea eax, [ebp + 0x14]
push eax
lea ecx, [ebp - 0x228]
call fcn.00423e75
lea ecx, [ebp - 0x224]
lea eax, [ebp + 0x18]
push eax
call fcn.00423e75
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x238]
call fcn.00421e00
lea eax, [ebp - 0x238]
push eax
mov byte [ebp - 4], 0x1e
call fcn.00464b90
mov esi, dword [ebp - 0x238]
pop ecx
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push ecx
mov ecx, esp
mov dword [ebp - 0x21c], esp
push eax
push esi
push str.Loader_Main:_GetFileAttributes__s__d
push ecx
mov dword [ebp - 0x24c], eax
call fcn.004559f0
add esp, 0x10
call fcn.0042623e
pop ecx
push 0x5c
push ecx
lea eax, [ebp - 0x238]
mov dword [ebp - 0x21c], esp
mov ecx, esp
push eax
call fcn.00421e00
lea eax, [ebp - 0x21c]
push eax
call fcn.00456030
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov ecx, dword [ebp - 0x21c]
add ecx, 0xfffffff0
mov dword [ebp - 0x24c], eax
call fcn.0042001a
push ecx
mov dword [ebp - 0x21c], esp
mov edi, esp
push dword [ebp - 0x24c]
lea eax, [ebp - 0x238]
push 0x5c
push ecx
mov dword [ebp - 0x21c], esp
mov ecx, esp
push eax
call fcn.00421e00
lea eax, [ebp - 0x21c]
push eax
call fcn.00456030
add esp, 0xc
mov byte [ebp - 4], 0x1f
push dword [eax]
push str.Loader_Main:_SetCurrentDirectory__s__d
push edi
call fcn.004559f0
add esp, 0x10
call fcn.0042623e
pop ecx
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x21c]
add ecx, 0xfffffff0
call fcn.0042001a
push ecx
mov eax, esp
mov dword [ebp - 0x21c], esp
lea ecx, [ebp - 0x218]
push ecx
push dword [ebp - 0x228]
mov dword [ebp - 0x240], ebx
push str.Loader_Main:_ExecName_s__Dll32Name_s
push eax
call fcn.004559f0
add esp, 0x10
call fcn.0042623e
pop ecx
push ebx
push ecx
lea eax, [ebp - 0x224]
mov dword [ebp - 0x21c], esp
mov ecx, esp
push eax
lea edi, [ebp - 0x240]
call fcn.00421e00
push ecx
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x218]
mov ecx, esp
mov dword [ebp - 0x248], esp
push eax
call fcn.00421017
push ecx
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x228]
mov dword [ebp - 0x23c], esp
mov ecx, esp
push eax
call fcn.00421e00
mov ecx, edi
mov byte [ebp - 4], 0x1e
call fcn.00426295
add esp, 0x10
cmp eax, ebx
je 0x428b9a
mov edi, dword [ebp - 0x244]
mov dword [ebp - 0x250], 1
cmp edi, ebx
je 0x428bf8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, eax
sub edx, edi
mov ecx, 0x1770
cmp edx, ecx
jae 0x428b88
sub edi, eax
push 1
add edi, ecx
push edi
call dword [sym.imp.KERNEL32.dll_SleepEx]
push 0x404
mov ebx, 0x4d4988
call fcn.0046d700
pop ecx
jmp 0x428bf8
call fcn.00480035
push eax
lea ecx, [ebp - 0x244]
call fcn.00420985
mov byte [ebp - 4], 0x22
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push dword [ebp - 0x240]
lea eax, [ebp - 0x244]
push dword [ebp - 0x228]
push str.Could_not_execute__s__Error_d__MyPID_d_
push eax
call fcn.0042060a
mov edi, dword [ebp - 0x244]
add esp, 0x14
push ebx
push str.Error
push edi
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [edi - 0x10]
mov dword [ebp - 0x250], ebx
call fcn.0042001a
lea ecx, [esi - 0x10]
call fcn.0042001a
mov ecx, dword [ebp - 0x224]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x228]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp - 0x230]
add ecx, 0xfffffff0
call fcn.0042001a
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x22c]
add ecx, 0xfffffff0
call fcn.0042001a
push 0x404
mov ebx, 0x4d4988
call fcn.0046d700
mov ecx, esp
mov dword [ebp - 0x21c], esp
push str.Loader_Main:_out_n
call fcn.00421017
call fcn.0042623e
pop ecx
mov ecx, dword [ebp - 0x234]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp + 0x10]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0042001a
mov ecx, dword [ebp + 0x18]
add ecx, 0xfffffff0
call fcn.0042001a
mov eax, dword [ebp - 0x250]
call fcn.004932af
ret