Function at 0x44d9ab
Capabilities:
Accept command line arguments
Check for peb ntglobalflag flag
Check for sandbox username or hostname
Check for time delay via gettickcount
Check if file exists
Check os version
Contain obfuscated stackstrings
Copy file
Create process on windows
Delete file
Get file attributes
Get hostname
Get number of processors
Move file
Parse pe header
Print debug messages
Query environment variable
Resolve function by parsing pe exports
Set current directory
Set environment variable
Set registry value
Terminate process
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4f6172
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x66a4
call fcn.004d2880
mov eax, dword [0x53d100]
xor eax, esp
mov dword [esp + 0x66a0], eax
push ebx
push esi
push edi
mov eax, dword [0x53d100]
xor eax, esp
push eax
lea eax, [esp + 0x66b8]
mov dword fs:[0], eax
lea eax, [esp + 0x338]
xor edi, edi
mov dword [esp + 0x70], edi
push eax
mov dword [esp + 0x84], ecx
mov dword [esp + 0x33c], 8
mov dword [esp + 0x340], 0xff
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov ecx, dword [esp + 0x80]
call fcn.004c677e
mov ebx, 0x50007c
push ebx
lea ecx, [esp + 0x68]
call fcn.004247ea
push ebx
lea ecx, [esp + 0x60]
mov dword [esp + 0x66c4], edi
call fcn.004247ea
push ebx
lea ecx, [esp + 0x7c]
mov byte [esp + 0x66c4], 1
call fcn.004247ea
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x66c4], 2
call fcn.004770f0
pop ecx
lea ecx, [esp + 0x4c]
call fcn.0042248a
mov byte [esp + 0x66c0], 4
mov esi, dword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea eax, [esp + 0x60]
push eax
mov dword [esp + 0x80], edi
call esi
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x334]
push eax
mov dword [esp + 0x3c], edi
mov dword [esp + 0x58], edi
mov dword [esp + 0x5c], edi
mov dword [esp + 0x54], edi
call fcn.004770f0
pop ecx
push eax
mov ecx, 0x543318
mov byte [esp + 0x66c4], 5
call fcn.0042482e
mov byte [esp + 0x66c0], 4
mov ecx, dword [esp + 0x334]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x230]
push eax
call fcn.004770f0
pop ecx
mov edi, eax
mov byte [esp + 0x66c0], 6
call esi
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
push dword [edi]
push str.Loader:__s__CmdLine_s
push ecx
call fcn.00478210
add esp, 0x10
call fcn.0044c6ff
pop ecx
mov byte [esp + 0x66c0], 4
mov ecx, dword [esp + 0x230]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push str._CEK_
mov esi, 0x400
call fcn.004247ea
lea eax, [esp + 0x220]
push eax
mov ecx, esi
call fcn.0047e970
mov byte [esp + 0x66c8], 7
mov eax, dword [eax]
mov eax, dword [eax - 0xc]
add esp, 4
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
push str.Loader:_CEK:_Len_d
push ecx
call fcn.00478210
add esp, 0xc
call fcn.0044c6ff
pop ecx
mov byte [esp + 0x66c0], 4
mov ecx, dword [esp + 0x21c]
add ecx, 0xfffffff0
call fcn.0042201a
xor esi, esi
push esi
push 1
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x542f24], eax
cmp dword [esp + 0x30], esi
je 0x44eccd
inc esi
cmp dword [esp + 0x60], esi
mov dword [esp + 0x40], esi
jle 0x44eccd
mov eax, dword [esp + 0x30]
push ecx
lea edi, [eax + esi*4]
mov ecx, esp
mov dword [esp + 0x48], esp
push dword [edi]
call fcn.004247ea
call fcn.0044c72f
mov dword [esp], 0x510a98
call fcn.004cb540
pop ecx
push eax
push str._ExeFile:
push dword [edi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
jne 0x44dc20
push 0x510a98
call fcn.004cb540
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x18]
jmp 0x44ecb8
push str._Confirm
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x44dc3f
mov dword [esp + 0x54], 1
jmp 0x44ecbe
push str._Quiet
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x44dc61
and dword [0x53f3cc], eax
or dword [esp + 0x50], 2
jmp 0x44ecbe
push str._AllUsers
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x44dcb4
mov dword [esp + 0x58], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.00476ed0
test eax, eax
je 0x44edb8
call fcn.004770a0
test eax, eax
jne 0x44ecbe
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Admin_rights_required
jmp 0x44edd3
push str._ErrorsOnly
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x44dcd5
mov dword [0x53f3cc], 1
jmp 0x44ecbe
push str._Wait
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x44dcf1
or dword [esp + 0x50], 1
jmp 0x44ecbe
push 0x510b64
call fcn.004cb540
pop ecx
push eax
push str._Password:
push dword [edi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
je 0x44ec99
push 0x510b88
call fcn.004cb540
pop ecx
push eax
push str._Password
push dword [edi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
je 0x44ec99
push 0x510bc4
call fcn.004cb540
pop ecx
push eax
push str._Properties:
push dword [edi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
jne 0x44e0b9
push str._Properties_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x11b0]
push eax
call fcn.0048fbd0
mov byte [esp + 0x66c0], 8
push dword [0x53f3cc]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x11b0]
push eax
call fcn.0044d00f
add esp, 0x10
lea eax, [esp + 0x11a4]
call fcn.00490ab0
lea ecx, [esp + 0x34]
call fcn.0042248a
lea ecx, [esp + 0x2c]
call fcn.0042248a
lea ecx, [esp + 0x6c]
call fcn.0042248a
push 0x510bc4
mov byte [esp + 0x66c4], 0xb
call fcn.004cb540
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x178]
call fcn.004247ea
lea eax, [esp + 0x340]
push eax
mov byte [esp + 0x66c4], 0xc
call fcn.004328b5
mov byte [esp + 0x66c0], 0xd
mov dword [esp + 0x190], esi
push ecx
mov ecx, esp
mov dword [esp + 0x48], esp
push 0x5103a0
lea edi, [esp + 0x198]
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0xe
lea eax, [esp + 0x17c]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x22c]
push eax
mov byte [esp + 0x66cc], 0xd
call fcn.0047c400
add esp, 0xc
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x66c4], 0xf
call fcn.0042482e
mov byte [esp + 0x66c0], 0xd
mov ecx, dword [esp + 0x224]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
push 0x3d
lea ecx, [esp + 0x3c]
call fcn.00426fbf
mov edi, eax
cmp edi, 0xffffffff
je 0x44df3a
push edi
lea eax, [esp + 0x230]
push eax
lea ecx, [esp + 0x3c]
call fcn.004249d9
mov byte [esp + 0x66c0], 0x10
call fcn.00424930
push eax
lea ecx, [esp + 0x30]
call fcn.0042482e
mov byte [esp + 0x66c0], 0xd
mov ecx, dword [esp + 0x22c]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x2c]
cmp dword [eax - 0xc], esi
je 0x44df3a
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x70]
call fcn.0042482e
push esi
lea ecx, [esp + 0x70]
lea eax, [edi + 1]
push ecx
call fcn.00424881
lea eax, [esp + 0x6c]
push eax
push ecx
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x34c]
push eax
call fcn.00432906
pop ecx
mov ecx, eax
call fcn.0042482e
cmp dword [esp + 0x190], 0xffffffff
jne 0x44de29
mov eax, dword [esp + 0x358]
mov eax, dword [eax]
lea edi, [esp + 0x340]
lea esi, [esp + 0x8c]
call fcn.00432bb5
jmp 0x44e028
lea esi, [esp + 0x8c]
call fcn.00432bcb
push eax
lea ecx, [esp + 0x130]
call fcn.004247d5
mov byte [esp + 0x66c0], 0x11
call fcn.00432bcb
add eax, 4
push eax
lea ecx, [esp + 0x2c]
call fcn.004247d5
push str.Branding
lea eax, [esp + 0x130]
mov byte [esp + 0x66c4], 0x12
call fcn.0042486d
test eax, eax
je 0x44ede5
lea edi, [esp + 0x12c]
call fcn.0042b90d
push dword [eax]
lea eax, [esp + 0x244]
push str.CAMEYO__s
push eax
call fcn.00478210
mov esi, dword [esp + 0x34]
mov eax, dword [eax]
add esp, 0xc
push esi
push eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov ecx, dword [esp + 0x240]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [esi - 0x10]
call fcn.0042201a
mov byte [esp + 0x66c0], 0xd
mov ecx, dword [esp + 0x12c]
add ecx, 0xfffffff0
call fcn.0042201a
lea esi, [esp + 0x8c]
call fcn.00432ebd
mov eax, dword [esp + 0x358]
lea edi, [esp + 0x340]
lea esi, [esp + 0xbc]
call fcn.00432bb5
mov edi, esi
lea esi, [esp + 0x8c]
call fcn.00457c46
test al, al
je 0x44df69
lea eax, [esp + 0x340]
push eax
mov byte [esp + 0x66c4], 0xc
call fcn.00432681
mov ecx, dword [esp + 0x174]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x6c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x2c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x34]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x11a4]
mov byte [esp + 0x66c0], 4
call fcn.00427a08
jmp 0x44ec93
push str._SafeMode
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x44e105
push str._SafeMode_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov edi, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
push 0x5024b0
push str.CAMEYO_LEGACYREG
call edi
push str.Disk
push str.CAMEYO_VIRTMODE
call edi
push 0x5023f4
push str.CAMEYO_EARLYINJECTION
call edi
jmp 0x44ecbe
push 0x510ce0
call fcn.004cb540
pop ecx
push eax
push str._Services:
push dword [edi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
jne 0x44e182
push dword [edi]
lea ecx, [esp + 0x144]
call fcn.004247ea
push 0x510ce0
mov byte [esp + 0x66c4], 0x13
call fcn.004cb540
pop ecx
push 0
lea ecx, [esp + 0x144]
push ecx
call fcn.00424881
push dword [esp + 0x140]
push str.CAMEYO_SERVICES
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov byte [esp + 0x66c0], 4
mov ecx, dword [esp + 0x140]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x44ecbe
push str._Register
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x44edf9
push str._Stop
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x44eeaa
push str._Remove
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x456db6
push str._RemoveSelf
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x456db6
push str._Remove:Proc
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x44efcf
push str._Remove:Reg
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x44f1c1
push str._LearnStreaming
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x456bd8
push 0x511294
call fcn.004cb540
pop ecx
push eax
push str._LearnStreaming:
push dword [edi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
je 0x456bd8
push str._UpdateBasicSettings
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x44e25e
mov dword [esp + 0x38], 1
jmp 0x44ecbe
push str._Repackage
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x44f3ca
push str._CreateDiff
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x456a20
push 0x5114b8
call fcn.004cb540
pop ecx
push eax
push str._CreateDiff:
push dword [edi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
je 0x456a20
push str._exec
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x44f598
push 0x5114fc
call fcn.004cb540
pop ecx
push eax
push str._Patch
push dword [edi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
je 0x4564cf
push 0x511514
call fcn.004cb540
pop ecx
push eax
push str._InstSandbox
push dword [edi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
je 0x4564cf
push str._ShowStreaming
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x44f75b
push str._Break
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x44f83f
push str._Unbreak
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x44ff7b
push str._Integrate
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x456098
push str._Integrate:once
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x456098
push str._FullIntegrate
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x456098
push str._Unintegrate
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x4507b1
push str._CreateShortcuts
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x4559b6
push 0x511fd8
call fcn.004cb540
pop ecx
push eax
push str._CreateShortcuts:
push dword [edi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
je 0x4559b6
push str._Perf
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x450809
push str._ExtractLog
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x450c22
push str._ExtractAll
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x450e63
push 0x512210
call fcn.004cb540
pop ecx
push eax
push str._Extract:
push dword [edi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
je 0x450f34
push str._AutoUpdateXml
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x451141
push str._Info
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x451287
push str._Sandbox
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x45133b
push 0x512350
call fcn.004cb540
pop ecx
push eax
push str._AddSandbox:
push dword [edi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
je 0x451535
push 0x5123b8
call fcn.004cb540
pop ecx
push eax
push str._GetProperty:
push dword [edi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
je 0x45182b
push str._SaveProperties
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x4557d6
push str._SaveAllProperties
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x4557d6
push str._InfoLog
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x451a40
push str._Ini
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x4556af
push str._ShowIni
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x4556af
push str._ExtractIni
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x451c3b
push str._csv
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x451dd0
push str._EngineVer
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x4521cc
push str._ChangeLoader
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x44e598
lea eax, [esi + 1]
cmp dword [esp + 0x60], eax
jg 0x45230f
push str._ChangeEngine
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x44e5b7
lea eax, [esi + 1]
cmp dword [esp + 0x60], eax
jg 0x452636
push str._ChangeIni
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x44e5d6
lea eax, [esi + 1]
cmp dword [esp + 0x60], eax
jg 0x4529c7
push str._TestAutoUpdate
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x44e5f5
lea eax, [esi + 5]
cmp dword [esp + 0x60], eax
jg 0x452b8c
push str._Debug
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x455678
push str._DbgNow
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x455678
push str._ForceMenu
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x44e691
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.AutoLaunchAlways
mov dword [esp + 0x84], 1
call fcn.004247ea
push ecx
mov dword [esp + 0x66c8], 0x148
mov eax, esp
mov dword [esp + 0x4c], esp
push dword [0x5432bc]
push str.SoftwareVOS_s
push eax
call fcn.00478210
add esp, 0xc
mov edx, SysReAllocStringLen
mov dword [esp + 0x66c8], 4
call fcn.00479830
pop ecx
pop ecx
jmp 0x44ecbe
push str._ShowTree
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x452c9b
push str._RegDump
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x452d69
push str._SetFileFlags
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x44e6dc
lea eax, [esi + 2]
cmp dword [esp + 0x60], eax
jg 0x452ee6
push str._DbgZip:
call fcn.004cb5ea
pop ecx
push eax
push str._DbgZip:
push dword [edi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
je 0x4530f2
push str._DbgNow
call fcn.004cb5ea
pop ecx
push eax
push str._DbgNow
push dword [edi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
je 0x45312e
push str._Vintegrate
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x4554bd
push 0x512de8
call fcn.004cb540
pop ecx
push eax
push str._Vintegrate:
push dword [edi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
je 0x4554bd
push str._VintegrateRecursive
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x4554bd
push 0x512e40
call fcn.004cb540
pop ecx
push eax
push str._VintegrateRecursive:
push dword [edi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
je 0x4554bd
push str._Vunintegrate
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x45321e
push str._Vmanager
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x4533ee
push 0x512f00
call fcn.004cb540
pop ecx
push eax
push str._ProcessList
push dword [edi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
je 0x45349d
push str._WaitFor
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x4537f3
push 0x51309c
call fcn.004cb540
pop ecx
push eax
push str._WaitForInactivity:
push dword [edi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
je 0x4538b4
push str._GfxSvr
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x44e876
call fcn.00431da9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x401
mov edi, 0x5432b0
call fcn.00496310
mov dword [esp], 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x403
call fcn.00496310
mov dword [esp], 0x493e0
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x44ecbe
push 0x513484
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x44e8f4
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.open
xor edi, edi
xor ebx, ebx
call fcn.004247ea
push edi
push ecx
mov dword [esp + 0x66cc], 0x181
mov ecx, esp
mov dword [esp + 0x50], esp
push str._Troubleshoot
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x82
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
mov dword [esp + 0x66d0], 4
call fcn.00476b50
mov esi, dword [esp + 0x50]
add esp, 0x10
mov ebx, 0x50007c
jmp 0x44ecbe
push str._Troubleshoot
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x453e15
push str._AutoUpdate
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x453e3e
push str._VirtRegSyncExport
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x453ed3
push str._StartStreaming
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x453f41
push str._JumpTo
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x453f5c
push str._SvcRegister
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x453ffb
push str._SvcStart
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x4540fc
push str._SvcRegisterStart
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x4541b7
push str._SvcStop
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x45431f
push str._SvcRemove
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x4543dd
push 0x513880
call fcn.004cb540
pop ecx
push eax
push str._ScmDirectInit:
push dword [edi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
je 0x45449b
push str._AuthCheck
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x4553ad
push str._AuthCheck:Force
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x4553ad
push str._RepoSync
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x44ea3e
lea eax, [esi + 1]
cmp dword [esp + 0x60], eax
jg 0x45453f
push str._MergeRegistry
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x454614
push str._OpenFile
push dword [edi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x44ea73
lea eax, [esi + 1]
cmp dword [esp + 0x60], eax
jg 0x454709
push 0x513bb0
call fcn.004cb5ea
pop ecx
push eax
push 0x513bb0
push dword [edi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
je 0x454aa8
push dword [edi]
lea ecx, [esp + 0x108]
call fcn.004247ea
push 0
push ecx
mov dword [esp + 0x66c8], 0x1bc
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x4feab0
call fcn.004247ea
push ecx
mov esi, esp
mov byte [esp + 0x66cc], 0xbd
mov dword [esp + 0x28], esp
push 0x5c
push ecx
lea eax, [esp + 0x118]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247d5
push esi
call fcn.00478540
add esp, 0xc
mov byte [esp + 0x66cc], 0xbc
call fcn.0047c930
add esp, 0xc
test eax, eax
je 0x44eb3f
push 0x50c728
push ecx
lea eax, [esp + 0x10c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x1b8]
push eax
call fcn.004782a0
or dword [esp + 0x7c], 4
pop ecx
pop ecx
call fcn.0042486d
mov byte [esp + 0x3f], 1
test eax, eax
je 0x44eb44
mov byte [esp + 0x3f], 0
test byte [esp + 0x70], 4
je 0x44eb5c
and dword [esp + 0x70], 0xfffffffb
lea ecx, [esp + 0x1b0]
call fcn.00426397
cmp byte [esp + 0x3f], 0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jne 0x45529a
mov eax, dword [esp + 0x34]
push dword [eax]
call fcn.004247ea
lea eax, [esp + 0x2a8]
push eax
call fcn.0047e0b0
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x7c]
mov byte [esp + 0x66c4], 0xc2
call fcn.0042482e
lea ecx, [esp + 0x2a4]
mov byte [esp + 0x66c0], 0xbc
call fcn.00426397
call fcn.0044d950
test eax, eax
je 0x44ec6e
cmp dword [esp + 0x60], 1
jle 0x44ec6e
cmp dword [esp + 0x60], 2
jne 0x44ec22
push 0x50c728
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [edi]
call fcn.004247ea
lea eax, [esp + 0x1c0]
push eax
call fcn.004782a0
pop ecx
pop ecx
mov byte [esp + 0x66c4], 0xc3
or dword [esp + 0x74], 8
call fcn.0042486d
test eax, eax
jne 0x44ec22
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [edi]
call fcn.004247ea
call fcn.0047ad60
pop ecx
mov byte [esp + 0x3f], 1
test eax, eax
jne 0x44ec27
mov byte [esp + 0x3f], 0
mov dword [esp + 0x66c0], 0x1bc
test byte [esp + 0x70], 8
je 0x44ec4a
and dword [esp + 0x70], 0xfffffff7
lea ecx, [esp + 0x1b8]
call fcn.00426397
cmp byte [esp + 0x3f], 0
je 0x44ec58
push str.PackageEditor.exe
jmp 0x44ec73
call fcn.0040b708
test eax, eax
mov eax, str.Packager64.exe
jne 0x44ec6b
mov eax, str.Packager.exe
push eax
jmp 0x44ec73
push 0x50ac34
lea ecx, [esp + 0x60]
call fcn.00424843
lea ecx, [esp + 0x104]
mov dword [esp + 0x66c0], 4
call fcn.00426397
mov esi, dword [esp + 0x40]
jmp 0x44ecbe
push str._Password_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x510b64
call fcn.004cb540
pop ecx
mov ecx, dword [edi]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x4c]
push eax
call fcn.00424843
inc esi
cmp esi, dword [esp + 0x60]
mov dword [esp + 0x40], esi
jl 0x44dbcc
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xd30]
push eax
call fcn.0048fbd0
push 0xffffffffffffffff
mov dword [esp + 0x66c4], 0x1c4
push dword [esp + 0x54]
lea eax, [esp + 0x80]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
push ecx
mov byte [esp + 0x66d0], 0xc5
lea eax, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d5
push ecx
mov byte [esp + 0x66d4], 0xc6
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66d4], 0xc7
push dword [esp + 0x90]
lea eax, [esp + 0x30]
push ecx
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xd40]
push eax
mov byte [esp + 0x66e0], 0xc4
call fcn.0043fac9
add esp, 0x20
cmp eax, 2
jne 0x4570ef
call fcn.0044cec9
push esi
push dword [0x5432bc]
push str.Application_is_now_integrated_into_your_system
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
lea eax, [esp + 0xd24]
call fcn.00490ab0
lea eax, [esp + 0xd24]
jmp 0x4533be
call fcn.00476f20
test eax, eax
jne 0x44eddd
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Elevation_failed
call fcn.004247ea
call fcn.0044cf46
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.License_required.
jmp 0x44edd3
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
mov esi, 0x5432b0
push esi
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x44ee2f
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_obtain_INI_info_from_resource_
jmp 0x44edd3
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
mov ecx, esi
call fcn.0043ebad
pop ecx
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x78]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x5c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x64]
add ecx, 0xfffffff0
call fcn.0042201a
xor eax, eax
mov ecx, dword [esp + 0x66b8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x66a0]
xor ecx, esp
call fcn.004cac83
mov esp, ebp
pop ebp
ret
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
push 0x5432b0
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x44eedd
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x543308
call fcn.004247d5
push ecx
mov byte [esp + 0x66c8], 0x14
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x543318
call fcn.004247d5
push ecx
mov byte [esp + 0x66cc], 0x15
mov ecx, esp
mov dword [esp + 0x50], esp
push 0x54330c
call fcn.004247d5
push ecx
mov byte [esp + 0x66d0], 0x16
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x5432bc
call fcn.004247d5
mov byte [esp + 0x66d0], 4
call fcn.004480b7
add esp, 0x10
test eax, eax
je 0x44ef73
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5432bc]
push str.Cannot_stop_application__s
push eax
call fcn.00478210
add esp, 0xc
jmp 0x44edd8
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.__Stopped_successfully
call fcn.004247ea
call fcn.0044c72f
pop ecx
xor esi, esi
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x78]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x5c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x64]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, esi
jmp 0x44ee86
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
push 0x5432b0
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x44f002
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
mov eax, dword [0x54330c]
xor edi, edi
cmp dword [eax - 0xc], edi
jne 0x44f02b
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5432bc]
push str.Cannot_obtain_base_dir_for__s
jmp 0x44ef65
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov esi, 0x54330c
push esi
call fcn.004247d5
call fcn.0047ad60
pop ecx
cmp eax, edi
jne 0x44f076
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5432bc]
push str.Application_is_not_deployed_on_this_machine:__s
push eax
call fcn.00478210
add esp, 0xc
call fcn.0044cf95
pop ecx
pop ecx
push 5
jmp 0x44eddf
cmp dword [esp + 0x54], edi
je 0x44f099
push 3
push dword [0x5432bc]
push str.Do_you_want_to_stop_the_application_
push edi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x456e81
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5432bc]
push str.Removing_processes:__s
push eax
call fcn.00478210
add esp, 0xc
call fcn.0044c72f
pop ecx
lea ecx, [esp + 0x17c]
call fcn.0042248a
push 0x4fe58c
mov byte [esp + 0x66c4], 0x1d
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push edi
push edi
push 1
lea eax, [esp + 0x188]
push eax
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x543308
call fcn.004247d5
push ecx
mov byte [esp + 0x66dc], 0x1e
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x543318
call fcn.004247d5
push ecx
mov byte [esp + 0x66e0], 0x1f
mov ecx, esp
mov dword [esp + 0x64], esp
push 0x543314
call fcn.004247d5
push ecx
mov byte [esp + 0x66e4], 0x20
mov ecx, esp
mov dword [esp + 0x4c], esp
push esi
call fcn.004247d5
push ecx
mov byte [esp + 0x66e8], 0x21
mov ecx, esp
mov dword [esp + 0xa4], esp
push 0x5432bc
call fcn.004247d5
mov byte [esp + 0x66e8], 0x1d
call fcn.004484b1
add esp, 0x24
mov ecx, esp
mov dword [esp + 0x18], esp
push str.__Stopped_successfully
call fcn.004247ea
call fcn.0044c72f
pop ecx
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5432bc]
push str.Application__s_stopped_successfully
push eax
call fcn.00478210
add esp, 0xc
call fcn.0044cf95
pop ecx
pop ecx
mov ecx, dword [esp + 0x17c]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x44ef8a
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
push 0x5432b0
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x44f1f4
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
mov eax, dword [0x54330c]
xor edi, edi
cmp dword [eax - 0xc], edi
jne 0x44f212
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
jmp 0x44f01b
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov esi, 0x54330c
push esi
call fcn.004247d5
call fcn.0047ad60
pop ecx
cmp eax, edi
jne 0x44f240
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
jmp 0x44f054
cmp dword [esp + 0x54], edi
je 0x44f263
push 3
push dword [0x5432bc]
push str.Do_you_want_to_remove_the_applications_registry_
push edi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x456e81
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5432bc]
push str.Removing_registry:__s
push eax
call fcn.00478210
add esp, 0xc
call fcn.0044c72f
pop ecx
lea ecx, [esp + 0x184]
call fcn.0042248a
push 0x4fe58c
mov byte [esp + 0x66c4], 0x22
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push edi
push 1
push edi
lea eax, [esp + 0x190]
push eax
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x543308
call fcn.004247d5
push ecx
mov byte [esp + 0x66dc], 0x23
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x543318
call fcn.004247d5
push ecx
mov byte [esp + 0x66e0], 0x24
mov ecx, esp
mov dword [esp + 0x64], esp
push 0x543314
call fcn.004247d5
push ecx
mov byte [esp + 0x66e4], 0x25
mov ecx, esp
mov dword [esp + 0x4c], esp
push esi
call fcn.004247d5
push ecx
mov byte [esp + 0x66e8], 0x26
mov ecx, esp
mov dword [esp + 0xa4], esp
push 0x5432bc
call fcn.004247d5
mov byte [esp + 0x66e8], 0x22
call fcn.004484b1
add esp, 0x24
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5432bc]
push str.SoftwareVOS_s
push eax
call fcn.00478210
add esp, 0xc
mov edx, SysReAllocStringLen
call fcn.004792f0
pop ecx
cmp eax, edi
je 0x44f37f
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5432bc]
push str.Registry_could_not_be_emptied_for__s
jmp 0x44ef65
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.__Registry_removed_successfully
call fcn.004247ea
call fcn.0044c72f
pop ecx
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5432bc]
push str.Application__ss_registry_removed_successfully
push eax
call fcn.00478210
add esp, 0xc
call fcn.0044cf95
pop ecx
pop ecx
mov ecx, dword [esp + 0x184]
jmp 0x44f1b4
lea ecx, [esp + 0x2c]
call fcn.0042248a
lea ecx, [esp + 0x50]
call fcn.0042248a
lea eax, [esi + 1]
mov byte [esp + 0x66c0], 0x2f
cmp dword [esp + 0x60], eax
lea ecx, [esp + 0x2c]
jle 0x44f400
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
call fcn.00424843
jmp 0x44f40a
lea eax, [esp + 0x18]
push eax
call fcn.0042482e
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..new.exe
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0x30
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x2b4]
push eax
mov byte [esp + 0x66cc], 0x2f
call fcn.004783d0
add esp, 0xc
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x66c4], 0x31
call fcn.0042482e
mov byte [esp + 0x66c0], 0x2f
mov ecx, dword [esp + 0x2ac]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
lea eax, [esp + 0x54]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
call fcn.0047b7b0
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x30]
pop ecx
push 0
push esi
push edi
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x50]
jne 0x44f4be
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d5
jmp 0x44edd8
push dword [esp + 0x38]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d5
call fcn.00447581
mov ebx, eax
pop ecx
pop ecx
test ebx, ebx
jne 0x44f549
push dword [0x53f3cc]
lea eax, [esp + 0x54]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x1cc]
push eax
call fcn.00478540
add esp, 8
mov byte [esp + 0x66c8], 0x32
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Successfully_repackaged_into:__s
push ecx
call fcn.00478210
add esp, 0xc
call fcn.0044cf95
pop ecx
pop ecx
mov ecx, dword [esp + 0x1c0]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [esi - 0x10]
call fcn.0042201a
lea ecx, [edi - 0x10]
jmp 0x44f1b7
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push dword [0x53f3cc]
cmp ebx, 0x10
jne 0x44f56c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Application_not_deployed_on_this_machine._Nothing_to_repackage.
jmp 0x44edd3
lea eax, [esp + 0x364]
push ebx
push eax
call fcn.0047f660
add esp, 4
mov byte [esp + 0x66c8], 0x33
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Could_not_repackage:__s
push ecx
jmp 0x44ef66
mov eax, dword [esp + 0x30]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax + esi*4]
call fcn.004247ea
lea eax, [esp + 0x2b8]
push eax
call fcn.0047e0b0
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x7c]
mov byte [esp + 0x66c4], 0x3a
call fcn.0042482e
push eax
lea ecx, [esp + 0x60]
call fcn.0042482e
push eax
lea ecx, [esp + 0x120]
call fcn.004247d5
mov byte [esp + 0x66c0], 0x3c
mov ecx, dword [esp + 0x2b4]
add ecx, 0xfffffff0
call fcn.0042201a
push 1
lea eax, [esp + 0x1cc]
push eax
lea ecx, [esp + 0x124]
call fcn.004249d9
push 0x50b56c
push eax
call fcn.00424ae3
pop ecx
pop ecx
mov ecx, dword [esp + 0x1c8]
add ecx, 0xfffffff0
mov byte [esp + 0x3f], al
call fcn.0042201a
cmp byte [esp + 0x3f], 0
lea ecx, [esp + 0x5c]
je 0x44f641
push 1
push 0x22
jmp 0x44f645
push 0
push 0x20
call fcn.00426fbf
mov esi, eax
cmp esi, 0xffffffff
je 0x44f6ba
push esi
lea eax, [esp + 0x2c0]
push eax
lea ecx, [esp + 0x64]
call fcn.004249d9
push 0x50b458
mov byte [esp + 0x66c4], 0x3d
call fcn.00445238
push eax
lea ecx, [esp + 0x60]
call fcn.0042482e
mov byte [esp + 0x66c0], 0x3c
mov ecx, dword [esp + 0x2bc]
add ecx, 0xfffffff0
call fcn.0042201a
push 0
lea ecx, [esp + 0x7c]
lea eax, [esi + 1]
push ecx
call fcn.00424881
lea eax, [esp + 0x78]
call fcn.00424930
push eax
lea ecx, [esp + 0x7c]
call fcn.0042482e
jmp 0x44f6df
push 0x50b458
lea eax, [esp + 0x120]
call fcn.00445238
push eax
lea ecx, [esp + 0x60]
call fcn.0042482e
push ebx
lea ecx, [esp + 0x7c]
call fcn.00424843
xor ecx, ecx
lea eax, [esp + 0x5c]
call fcn.0042b956
movzx eax, ax
cmp ax, 0x25
jne 0x44f6fe
lea eax, [esp + 0x5c]
push eax
call fcn.00488830
pop ecx
push ecx
lea eax, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x1d4]
push eax
call fcn.00489660
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x60]
mov byte [esp + 0x66c4], 0x3e
call fcn.0042482e
mov ecx, dword [esp + 0x1d0]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x66c0], 4
mov ecx, dword [esp + 0x11c]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x44eccd
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.ShowStreaming:
call fcn.004247ea
call fcn.0044c72f
pop ecx
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x8b0]
push eax
call fcn.0048fbd0
push 0xffffffffffffffff
push esi
push ecx
mov byte [esp + 0x66cc], 0x4c
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x4d
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d4], 0x4e
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d5
push 2
push ecx
mov byte [esp + 0x66dc], 0x4f
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x8c0]
push eax
mov byte [esp + 0x66e0], 0x4c
call fcn.0043fac9
add esp, 0x20
lea ecx, [esp + 0x8a4]
call fcn.0043e675
lea eax, [esp + 0x8a4]
call fcn.00490ab0
mov byte [esp + 0x66c0], 4
lea eax, [esp + 0x8a4]
call fcn.00427a08
jmp 0x44ef8c
lea ecx, [esp + 0x2c]
call fcn.0042248a
lea eax, [esi + 1]
mov byte [esp + 0x66c0], 0x50
cmp dword [esp + 0x60], eax
lea ecx, [esp + 0x2c]
jle 0x44f86c
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
call fcn.00424843
jmp 0x44f876
lea eax, [esp + 0x18]
push eax
call fcn.0042482e
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..break
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0x51
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x7c]
push eax
mov byte [esp + 0x66cc], 0x50
call fcn.004783d0
add esp, 0xc
push 1
push 0
push ecx
mov byte [esp + 0x66cc], 0x52
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x4e8]
push eax
call fcn.0048fbd0
mov byte [esp + 0x66c0], 0x53
push dword [0x53f3cc]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x4e8]
push eax
call fcn.0044d00f
add esp, 0x10
cmp dword [esp + 0x564], 0
jne 0x44f931
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_load_containers_
jmp 0x44edd3
push ecx
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
call fcn.00479fa0
pop ecx
push dword [esp + 0x74]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x44f972
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x7c]
push str.Cant_empty__s
jmp 0x44ef65
mov esi, dword [esp + 0x74]
call fcn.0047ae40
test eax, eax
jne 0x44f99a
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x7c]
push str.Cant_create__s
jmp 0x44ef65
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
mov ebx, 0x4fe58c
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66cc], 0x54
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtApp.ini
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x55
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66d0], 0x53
call fcn.00477ad0
add esp, 8
mov byte [esp + 0x66c8], 0x56
mov ecx, esp
mov dword [esp + 0x24], esp
mov esi, str.Main
push esi
call fcn.004247ea
push 3
pop ecx
lea edi, [esp + 0x4e4]
mov byte [esp + 0x66c8], 0x53
call fcn.00491fc0
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66cc], 0x57
mov ecx, esp
mov dword [esp + 0x50], esp
push str.AppVirtDll.dll
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x58
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66d0], 0x53
call fcn.00477ad0
add esp, 8
mov byte [esp + 0x66c8], 0x59
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.004247ea
push 2
pop ecx
lea edi, [esp + 0x4e4]
mov byte [esp + 0x66c8], 0x53
call fcn.00491fc0
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66cc], 0x5a
mov ecx, esp
mov dword [esp + 0x50], esp
push str.AppVirtDll64.dll
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x5b
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66d0], 0x53
call fcn.00477ad0
add esp, 8
mov byte [esp + 0x66c8], 0x5c
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.004247ea
push 8
pop ecx
lea edi, [esp + 0x4e4]
mov byte [esp + 0x66c8], 0x53
call fcn.00491fc0
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66cc], 0x5d
mov ecx, esp
mov dword [esp + 0x50], esp
push str.StubExe.exe
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x5e
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66d0], 0x53
call fcn.00477ad0
add esp, 8
mov byte [esp + 0x66c8], 0x5f
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.004247ea
push 9
pop ecx
lea edi, [esp + 0x4e4]
mov byte [esp + 0x66c8], 0x53
call fcn.00491fc0
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66cc], 0x60
mov ecx, esp
mov dword [esp + 0x50], esp
push str.StubExe64.exe
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x61
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66d0], 0x53
call fcn.00477ad0
add esp, 8
mov byte [esp + 0x66c8], 0x62
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.004247ea
push 0xa
pop ecx
lea edi, [esp + 0x4e4]
mov byte [esp + 0x66c8], 0x53
call fcn.00491fc0
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66cc], 0x63
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtFiles.db
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x64
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66d0], 0x53
call fcn.00477ad0
add esp, 8
mov byte [esp + 0x66c8], 0x65
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.004247ea
push 4
pop ecx
lea edi, [esp + 0x4e4]
mov byte [esp + 0x66c8], 0x53
call fcn.00491fc0
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66cc], 0x66
mov ecx, esp
mov dword [esp + 0x50], esp
push str.SandboxCfg.db
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x67
mov ecx, esp
lea eax, [esp + 0x84]
mov dword [esp + 0x38], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66d0], 0x53
call fcn.00477ad0
add esp, 8
mov byte [esp + 0x66c8], 0x68
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.004247ea
push 5
pop ecx
lea edi, [esp + 0x4e4]
mov byte [esp + 0x66c8], 0x53
call fcn.00491fc0
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66cc], 0x69
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtReg.export
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x6a
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66d0], 0x53
call fcn.00477ad0
add esp, 8
mov byte [esp + 0x66c8], 0x6b
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.004247ea
push 6
pop ecx
lea edi, [esp + 0x4e4]
mov byte [esp + 0x66c8], 0x53
call fcn.00491fc0
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66cc], 0x6c
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtReg.dat
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x6d
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66d0], 0x53
call fcn.00477ad0
add esp, 8
mov byte [esp + 0x66c8], 0x6e
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.004247ea
push 0xb
pop ecx
lea edi, [esp + 0x4e4]
mov byte [esp + 0x66c8], 0x53
call fcn.00491fc0
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66cc], 0x6f
mov ecx, esp
mov dword [esp + 0x50], esp
push str.SysDllSubdirs.txt
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x70
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66d0], 0x53
call fcn.00477ad0
add esp, 8
mov byte [esp + 0x66c8], 0x71
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.004247ea
push 7
pop ecx
lea edi, [esp + 0x4e4]
mov byte [esp + 0x66c8], 0x53
call fcn.00491fc0
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66cc], 0x72
mov ecx, esp
mov dword [esp + 0x50], esp
push str.VirtFiles.vfc
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x73
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66d0], 0x53
call fcn.00477ad0
add esp, 8
mov byte [esp + 0x66c8], 0x74
mov ecx, esp
mov dword [esp + 0x24], esp
push esi
call fcn.004247ea
mov byte [esp + 0x66c8], 0x53
xor ecx, ecx
inc ecx
lea edi, [esp + 0x4e4]
call fcn.00491fc0
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x7c]
push 0x5119ec
push eax
call fcn.00478210
add esp, 0xc
call fcn.0044cf95
pop ecx
pop ecx
jmp 0x44eddd
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Unbreak:
call fcn.004247ea
call fcn.0044c72f
mov ecx, esp
mov dword [esp + 0x18], esp
push str..break
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0x75
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x90]
push eax
mov byte [esp + 0x66cc], 4
call fcn.004783d0
add esp, 0xc
mov byte [esp + 0x66c0], 0x76
push dword [esp + 0x88]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x45000a
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x90]
push str.Dir_doesnt_exist:__s
jmp 0x44ef65
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x54]
call fcn.004247d5
mov esi, str..old
push esi
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x2cc]
push eax
mov byte [esp + 0x66cc], 0x77
call fcn.00424a39
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x2c4]
add ecx, 0xfffffff0
call fcn.0042201a
push esi
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x1e0]
push eax
call fcn.00424a39
add esp, 0xc
push dword [eax]
push dword [esp + 0x54]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov ecx, dword [esp + 0x1d8]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.0042201a
test bl, bl
je 0x4500a6
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_rename_myself_to_.old
jmp 0x44edd3
push esi
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x2d4]
push eax
call fcn.00424a39
mov eax, dword [eax]
add esp, 0xc
push 0
push dword [esp + 0x54]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [esp + 0x2cc]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.0042201a
test bl, bl
je 0x4500fd
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_copy_myself
jmp 0x44edd3
and dword [esp + 0x124], 0
push 1
push ecx
mov dword [esp + 0x1c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x4fe58c
lea ebx, [esp + 0x134]
lea esi, [esp + 0x19c]
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x78
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.VirtApp.ini
call fcn.004247ea
push ecx
mov byte [esp + 0x66d4], 0x79
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66d4], 0x77
call fcn.00477ad0
add esp, 0xc
mov edi, esi
call fcn.004789a0
pop ecx
pop ecx
cmp eax, 0xffffffff
je 0x45079a
xor edi, edi
cmp dword [esp + 0x124], edi
je 0x45079a
push dword [esp + 0x124]
mov ecx, dword [esp + 0x190]
lea eax, [esp + 0x3c]
push eax
call fcn.00478700
mov byte [esp + 0x66c8], 0x7a
push dword [esp + 0x194]
call fcn.004cb867
add esp, 0xc
push 1
push 1
push ecx
lea eax, [esp + 0x5c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x458]
push eax
call fcn.0048fbd0
mov byte [esp + 0x66c0], 0x7b
push dword [0x53f3cc]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x458]
push eax
call fcn.0044d00f
add esp, 0x10
cmp dword [esp + 0x4d4], edi
jne 0x450235
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_begin_to_update_resource
jmp 0x44edd3
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov esi, str.Main
push esi
call fcn.004247ea
mov byte [esp + 0x66c4], 0x7c
mov eax, dword [esp + 0x3c]
mov eax, dword [eax - 0xc]
add eax, eax
push edi
push eax
lea ecx, [esp + 0x44]
call fcn.00424f8a
push eax
lea eax, [esp + 0x45c]
push eax
mov byte [esp + 0x66d4], 0x7b
call fcn.00491480
cmp eax, edi
je 0x450294
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_update_INI_resource
jmp 0x44edd3
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247ea
push 0
push 2
push ecx
mov byte [esp + 0x66d0], 0x7d
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
mov ebx, 0x4fe58c
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d8], 0x7e
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.AppVirtDll.dll
call fcn.004247ea
push ecx
mov byte [esp + 0x66dc], 0x7f
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66dc], 0x7d
call fcn.00477ad0
add esp, 0xc
lea eax, [esp + 0x45c]
push eax
mov byte [esp + 0x66d4], 0x7b
call fcn.004917e0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247ea
push 0
push 8
push ecx
mov byte [esp + 0x66d0], 0x80
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d8], 0x81
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.AppVirtDll64.dll
call fcn.004247ea
push ecx
mov byte [esp + 0x66dc], 0x82
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66dc], 0x80
call fcn.00477ad0
add esp, 0xc
lea eax, [esp + 0x45c]
push eax
mov byte [esp + 0x66d4], 0x7b
call fcn.004917e0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247ea
push 0
push 9
push ecx
mov byte [esp + 0x66d0], 0x83
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d8], 0x84
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.StubExe.exe
call fcn.004247ea
push ecx
mov byte [esp + 0x66dc], 0x85
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66dc], 0x83
call fcn.00477ad0
add esp, 0xc
lea eax, [esp + 0x45c]
push eax
mov byte [esp + 0x66d4], 0x7b
call fcn.004917e0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247ea
push 0
push 0xa
push ecx
mov byte [esp + 0x66d0], 0x86
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d8], 0x87
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.StubExe64.exe
call fcn.004247ea
push ecx
mov byte [esp + 0x66dc], 0x88
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66dc], 0x86
call fcn.00477ad0
add esp, 0xc
lea eax, [esp + 0x45c]
push eax
mov byte [esp + 0x66d4], 0x7b
call fcn.004917e0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247ea
push 0x4000
push 4
push ecx
mov byte [esp + 0x66d0], 0x89
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d8], 0x8a
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.VirtFiles.db
call fcn.004247ea
push ecx
mov byte [esp + 0x66dc], 0x8b
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66dc], 0x89
call fcn.00477ad0
add esp, 0xc
lea eax, [esp + 0x45c]
push eax
mov byte [esp + 0x66d4], 0x7b
call fcn.004917e0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247ea
push 0x4000
push 5
push ecx
mov byte [esp + 0x66d0], 0x8c
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d8], 0x8d
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.SandboxCfg.db
call fcn.004247ea
push ecx
mov byte [esp + 0x66dc], 0x8e
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66dc], 0x8c
call fcn.00477ad0
add esp, 0xc
lea eax, [esp + 0x45c]
push eax
mov byte [esp + 0x66d4], 0x7b
call fcn.004917e0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247ea
mov byte [esp + 0x66c4], 0x8f
push 0x4000
push 0xb
push ecx
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d8], 0x90
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.VirtReg.dat
call fcn.004247ea
push ecx
mov byte [esp + 0x66dc], 0x91
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66dc], 0x8f
call fcn.00477ad0
add esp, 0xc
lea eax, [esp + 0x45c]
push eax
mov byte [esp + 0x66d4], 0x7b
call fcn.004917e0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247ea
push 0
push 7
push ecx
mov byte [esp + 0x66d0], 0x92
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d8], 0x93
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.SysDllSubdirs.txt
call fcn.004247ea
push ecx
mov byte [esp + 0x66dc], 0x94
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66dc], 0x92
call fcn.00477ad0
add esp, 0xc
lea eax, [esp + 0x45c]
push eax
mov byte [esp + 0x66d4], 0x7b
call fcn.004917e0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247ea
push 0x4000
push 1
push ecx
mov byte [esp + 0x66d0], 0x95
mov edi, esp
mov dword [esp + 0x2c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d8], 0x96
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.VirtFiles.vfc
call fcn.004247ea
push ecx
mov byte [esp + 0x66dc], 0x97
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66dc], 0x95
call fcn.00477ad0
add esp, 0xc
lea eax, [esp + 0x45c]
push eax
mov byte [esp + 0x66d4], 0x7b
call fcn.004917e0
lea eax, [esp + 0x44c]
call fcn.00490ab0
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
test eax, eax
je 0x45078b
push str.Could_not_commit_resource
jmp 0x44edd3
push str.Success
call fcn.004247ea
jmp 0x44ff6f
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_load_VirtApp.ini
jmp 0x44edd3
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
mov esi, 0x5432b0
push esi
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x4507e5
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
push esi
call fcn.00443b91
pop ecx
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5432bc]
push str._s_is_no_longer_integrated.
jmp 0x44ff66
lea ecx, [esp + 0x2c]
call fcn.0042248a
lea ecx, [esp + 0x38]
call fcn.0042248a
mov byte [esp + 0x66c0], 0xc3
or dword [esp + 0x80], 0xffffffff
lea eax, [esi + 1]
cmp dword [esp + 0x60], eax
jle 0x450845
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0x30]
call fcn.00424843
add esi, 2
cmp dword [esp + 0x60], esi
jle 0x45085e
mov eax, dword [esp + 0x30]
push dword [eax + esi*4]
lea ecx, [esp + 0x3c]
call fcn.00424843
lea ecx, [esp + 0x1e0]
call fcn.0042248a
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x66c4], 0xc4
call fcn.004247d5
push ecx
mov byte [esp + 0x66c4], 0xc5
lea eax, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
push 0x5432b0
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x4508bb
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
xor esi, esi
inc esi
push esi
push 0
push ecx
lea eax, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x1000]
push eax
call fcn.0048fbd0
lea edi, [esp + 0xff4]
mov byte [esp + 0x66c0], 0xc6
call fcn.0042a43f
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x38]
xor ecx, ecx
cmp dword [eax - 0xc], ecx
je 0x450920
push ecx
push 0x80
push 4
push ecx
push 3
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [esp + 0x80], eax
push esi
push esi
push esi
lea eax, [esp + 0x1ec]
push eax
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x543308
call fcn.004247d5
push ecx
mov byte [esp + 0x66dc], 0xc7
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x543318
call fcn.004247d5
push ecx
mov byte [esp + 0x66e0], 0xc8
mov ecx, esp
mov dword [esp + 0x64], esp
push 0x543314
call fcn.004247d5
push ecx
mov byte [esp + 0x66e4], 0xc9
mov ecx, esp
mov dword [esp + 0xa0], esp
mov esi, 0x54330c
push esi
call fcn.004247d5
push ecx
mov byte [esp + 0x66e8], 0xca
mov ecx, esp
mov dword [esp + 0x94], esp
push 0x5432bc
call fcn.004247d5
mov byte [esp + 0x66e8], 0xc6
call fcn.004484b1
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0x28
call edi
push 0
push 2
mov dword [esp + 0x74], eax
push 0x5432b0
lea eax, [esp + 0x1000]
push eax
push dword [esp + 0x38]
call fcn.0043c0ed
add esp, 0x14
test eax, eax
je 0x450a01
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Failed_BasicDeploy_
jmp 0x44edd3
call edi
sub eax, dword [esp + 0x6c]
mov dword [esp + 0x6c], eax
call edi
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x2c]
cmp dword [eax - 0xc], 0
je 0x450ac0
push 0xffffffffffffffff
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0xcb
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x50ac34
call fcn.004247ea
push ecx
mov byte [esp + 0x66d4], 0xcc
mov ecx, esp
mov dword [esp + 0x58], esp
push ebx
call fcn.004247ea
push 2
push ecx
mov byte [esp + 0x66dc], 0xcd
lea eax, [esp + 0x70]
mov ecx, esp
mov dword [esp + 0x98], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x1010]
push eax
mov byte [esp + 0x66e0], 0xc6
call fcn.0043fac9
add esp, 0x20
push 0
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d5
call fcn.0047ed60
pop ecx
pop ecx
test eax, eax
jne 0x450ac0
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x450a95
call edi
push ecx
mov edi, eax
sub edi, dword [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x543308
call fcn.004247d5
push ecx
mov byte [esp + 0x66c8], 0xce
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x543318
call fcn.004247d5
push ecx
mov byte [esp + 0x66cc], 0xcf
mov ecx, esp
mov dword [esp + 0x50], esp
push esi
call fcn.004247d5
push ecx
mov byte [esp + 0x66d0], 0xd0
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x5432bc
call fcn.004247d5
mov byte [esp + 0x66d0], 0xc6
call fcn.004480b7
add esp, 0x10
lea ecx, [esp + 0x58]
call fcn.0042248a
lea ecx, [esp + 0x2d4]
mov eax, 0x100
push ecx
mov byte [esp + 0x66c4], 0xd1
push eax
lea ecx, [esp + 0x60]
mov dword [esp + 0x2dc], eax
call fcn.0042249e
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push 0xffffffffffffffff
lea ecx, [esp + 0x5c]
call fcn.00424af8
push edi
push dword [esp + 0x70]
lea eax, [esp + 0x19c]
push dword [esp + 0x60]
push dword [0x5432bc]
push str._s__s__d_d_r_n
push eax
call fcn.00478210
add esp, 0x18
mov byte [esp + 0x66c0], 0xd2
push dword [esp + 0x194]
lea ecx, [esp + 0x1ec]
call fcn.004262ba
mov byte [esp + 0x66c0], 0xd3
mov esi, dword [esp + 0x80]
xor edi, edi
cmp esi, 0xffffffff
je 0x450bfb
push 2
push edi
push edi
push esi
mov dword [esp + 0x2ec], edi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [esp + 0x1e8]
mov ecx, dword [eax - 0xc]
push edi
lea edx, [esp + 0x2e0]
push edx
push ecx
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [0x53f3cc]
lea eax, [esp + 0x198]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d5
call fcn.0044cf95
pop ecx
pop ecx
push edi
jmp 0x44eddf
push ecx
mov dword [esp + 0x18], esp
mov esi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str..Packager.log
call fcn.004247ea
push ecx
mov byte [esp + 0x66cc], 0xd4
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d5
push esi
mov byte [esp + 0x66d0], 4
call fcn.004783d0
lea eax, [esp + 0xe0]
add esp, 0xc
push eax
call fcn.004777e0
add esp, 4
mov byte [esp + 0x66c4], 0xd5
lea eax, [esp + 0xd4]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
call fcn.0047b7b0
pop ecx
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xaf0]
push eax
call fcn.0048fbd0
mov byte [esp + 0x66c0], 0xd6
push dword [0x53f3cc]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xaf0]
push eax
call fcn.0044d00f
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0xd7
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d4], 0xd8
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d5
push 2
push ecx
mov byte [esp + 0x66dc], 0xd9
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xb00]
push eax
mov byte [esp + 0x66e0], 0xd6
call fcn.0043fac9
add esp, 0x20
lea edi, [esp + 0xae4]
call fcn.0042a43f
mov ebx, eax
test ebx, ebx
je 0x450e09
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004771e0
mov byte [esp + 0x66c8], 0xda
mov ecx, esp
mov dword [esp + 0x24], esp
push str.LogsPackager.log
call fcn.004247ea
push ebx
mov byte [esp + 0x66cc], 0xd6
call fcn.00427ef7
add esp, 0xc
test eax, eax
jne 0x450dc1
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_extract_Packager.log_
jmp 0x44edd3
push dword [esp + 0xd0]
xor esi, esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Packager.log
inc esi
call fcn.004247ea
lea eax, [esp + 0x1f8]
push eax
call fcn.004777e0
pop ecx
pop ecx
push dword [eax]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov ecx, dword [esp + 0x1f0]
add ecx, 0xfffffff0
call fcn.0042201a
call fcn.0048ef60
jmp 0x450e2b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
push str.Loader__ExtractLog_:_OpenVfc_failed__LE_d
push ecx
call fcn.00478210
add esp, 0xc
call fcn.0044c6ff
pop ecx
lea eax, [esp + 0xae4]
call fcn.00490ab0
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xd8]
test esi, esi
je 0x450e59
push str.Success:__s
jmp 0x44ff66
push str.Failed_saving__s
jmp 0x44ff66
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
mov esi, 0x5432b0
push esi
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x450e97
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
push 1
push 0
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x9d0]
push eax
call fcn.0048fbd0
mov byte [esp + 0x66c0], 0xdb
push dword [0x53f3cc]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x9d0]
push eax
call fcn.0044d00f
lea edi, [esp + 0x9d4]
call fcn.0042a43f
push 1
push 2
push esi
mov ecx, edi
push ecx
push eax
call fcn.0043c0ed
mov esi, eax
add esp, 0x24
mov eax, edi
call fcn.00490ab0
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
test esi, esi
je 0x451131
push str.Failed_extracting.
push eax
call fcn.00478210
pop ecx
pop ecx
jmp 0x44ff6f
push str._Extract_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x512210
call fcn.004cb540
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + esi*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0xfc]
call fcn.004247ea
push ecx
mov byte [esp + 0x66c4], 0xdc
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
push 0x5432b0
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x450f9c
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
push 1
push 0
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x700]
push eax
call fcn.0048fbd0
mov byte [esp + 0x66c0], 0xdd
cmp dword [esp + 0x77c], 0
push dword [0x53f3cc]
jne 0x450fe7
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_open_PeContainer
jmp 0x44edd3
push 2
push ecx
lea eax, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x700]
push eax
call fcn.0044d00f
add esp, 0x10
push 0xffffffffffffffff
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0xde
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d4], 0xdf
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d5
push 2
push ecx
mov byte [esp + 0x66dc], 0xe0
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x710]
push eax
mov byte [esp + 0x66e0], 0xdd
call fcn.0043fac9
add esp, 0x20
lea edi, [esp + 0x6f4]
call fcn.0042a43f
mov esi, eax
test esi, esi
jne 0x4510a5
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.VFC_error
jmp 0x44edd3
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0xe1
lea eax, [esp + 0x100]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
push esi
mov byte [esp + 0x66cc], 0xdd
call fcn.00427ef7
add esp, 0xc
test eax, eax
jne 0x451101
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x100]
push str.Cannot_extract_file:_n_s
jmp 0x44ef65
mov ebx, esi
call fcn.0048ef60
push dword [esp + 0xf8]
xor ebx, ebx
inc ebx
call fcn.00484f80
pop ecx
lea eax, [esp + 0x6f4]
call fcn.00490ab0
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x54330c]
push str.Success:_n_s
jmp 0x44ff66
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
mov esi, 0x5432b0
push esi
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x451175
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
lea eax, [esp + 0x2e4]
push eax
call fcn.004a9eb0
pop ecx
mov byte [esp + 0x66c0], 0xe2
push dword [eax]
lea ecx, [esp + 0x1fc]
call fcn.004262ba
mov byte [esp + 0x66c0], 0xe4
mov ecx, dword [esp + 0x2e4]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x1f8]
mov edi, dword [eax - 0xc]
push eax
push ecx
mov dword [esp + 0x1c], esp
mov ebx, esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
mov esi, str..xml
push esi
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0xe5
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004770f0
pop ecx
push ebx
mov byte [esp + 0x66d4], 0xe4
call fcn.004783d0
add esp, 0xc
call fcn.00478be0
pop ecx
pop ecx
push dword [0x53f3cc]
push ecx
mov dword [esp + 0x1c], esp
test eax, eax
je 0x451280
mov ecx, esp
push esi
call fcn.004247ea
push ecx
mov byte [esp + 0x66cc], 0xe6
mov eax, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004770f0
pop ecx
lea eax, [esp + 0x2f8]
push eax
mov byte [esp + 0x66d0], 0xe4
call fcn.004783d0
add esp, 8
mov byte [esp + 0x66c8], 0xe7
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Success:_n_s
push ecx
call fcn.00478210
add esp, 0xc
call fcn.0044cf95
pop ecx
pop ecx
mov ecx, dword [esp + 0x2ec]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x44eddd
mov eax, esp
jmp 0x450f22
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x3c]
call fcn.004247d5
lea eax, [esi + 1]
mov byte [esp + 0x66c0], 0xe8
cmp dword [esp + 0x60], eax
jle 0x4512b7
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0x3c]
call fcn.00424843
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x12d0]
push eax
call fcn.0048fbd0
mov byte [esp + 0x66c0], 0xe9
push dword [0x53f3cc]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x12d0]
push eax
call fcn.0044d00f
push esi
lea eax, [esp + 0x12d8]
push eax
lea eax, [esp + 0x218]
push eax
call fcn.0044d0a8
add esp, 0x1c
push esi
push str.Info
push dword [esp + 0x208]
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
push esi
jmp 0x44eddf
push str._Sandbox_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
push 0x5432b0
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x451379
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x3c]
call fcn.004247d5
lea eax, [esi + 1]
mov byte [esp + 0x66c0], 0xea
cmp dword [esp + 0x60], eax
jle 0x4513a9
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0x3c]
call fcn.00424843
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xee0]
push eax
call fcn.0048fbd0
mov byte [esp + 0x66c0], 0xeb
push dword [0x53f3cc]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xee0]
push eax
call fcn.0044d00f
add esp, 0x10
cmp dword [esp + 0xf5c], esi
jne 0x45141d
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.FAILED_LOADING_CONTAINERS_
jmp 0x44edd3
lea eax, [esp + 0xed4]
push eax
lea eax, [esp + 0x2f8]
push eax
call fcn.0044d42f
pop ecx
pop ecx
mov byte [esp + 0x66c0], 0xec
mov ecx, dword [esp + 0x2f4]
mov eax, dword [ecx - 0xc]
cmp eax, 0x800
jge 0x451459
push esi
push str.Sandbox
push ecx
jmp 0x45132e
push ecx
push ecx
mov dword [esp + 0x1c], esp
mov ebx, esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
mov esi, str..sandbox.txt
push esi
lea edi, [eax + eax]
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0xed
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004770f0
pop ecx
push ebx
mov byte [esp + 0x66d4], 0xec
call fcn.004783d0
add esp, 0xc
call fcn.00478be0
add esp, 4
mov ecx, esp
mov dword [esp + 0x18], esp
push str.open
xor edi, edi
xor ebx, ebx
call fcn.004247ea
push 1
push ecx
mov byte [esp + 0x66cc], 0xee
mov ecx, esp
mov dword [esp + 0x28], esp
push edi
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0xef
mov eax, esp
mov dword [esp + 0x54], esp
push ecx
mov ecx, esp
mov dword [esp + 0x58], esp
push esi
mov dword [esp + 0x40], eax
call fcn.004247ea
push ecx
mov byte [esp + 0x66d8], 0xf0
mov eax, esp
mov dword [esp + 0x94], esp
push eax
call fcn.004770f0
mov eax, dword [esp + 0x44]
pop ecx
push eax
mov byte [esp + 0x66dc], 0xef
call fcn.004783d0
add esp, 0xc
mov byte [esp + 0x66d0], 0xec
call fcn.00476b50
add esp, 0x10
xor esi, esi
jmp 0x451335
push str._AddSandbox_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x512350
call fcn.004cb540
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + esi*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x20c]
call fcn.004247ea
push 1
push 0
push ecx
mov byte [esp + 0x66cc], 0xf1
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xc10]
push eax
call fcn.0048fbd0
mov byte [esp + 0x66c0], 0xf2
push dword [0x53f3cc]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xc10]
push eax
call fcn.0044d00f
add esp, 0x10
cmp dword [esp + 0xc8c], 0
jne 0x4515d9
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x451413
lea eax, [esp + 0x3e4]
push eax
call fcn.00426ff3
push ebx
lea ecx, [esp + 0x1a0]
mov byte [esp + 0x66c4], 0xf3
call fcn.004247ea
lea eax, [esp + 0x19c]
push eax
lea eax, [esp + 0x3e8]
push eax
push ecx
mov byte [esp + 0x66cc], 0xf4
lea eax, [esp + 0x214]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
call fcn.0048c580
add esp, 0xc
test eax, eax
jne 0x45164c
push dword [0x53f3cc]
lea eax, [esp + 0x1a0]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44f4b3
push 0xffffffffffffffff
xor esi, esi
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0xf5
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d4], 0xf6
mov ecx, esp
mov dword [esp + 0x58], esp
push ebx
call fcn.004247ea
push 2
push ecx
mov byte [esp + 0x66dc], 0xf7
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xc20]
push eax
mov byte [esp + 0x66e0], 0xf4
call fcn.0043fac9
add esp, 0x20
push 7
pop ecx
push dword [0x543330]
xor eax, eax
mov dword [esp + 0x3c8], esi
lea edi, [esp + 0x3cc]
rep stosd dword es:[edi], eax
push ecx
mov dword [esp + 0x1c], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.SandboxCfg.db
call fcn.004247ea
push edi
mov ecx, esi
call fcn.00489d50
pop ecx
pop ecx
lea ecx, [esp + 0x3cc]
call fcn.00483a90
pop ecx
pop ecx
lea esi, [esp + 0x8c]
lea edi, [esp + 0x3e4]
call fcn.004575d5
lea esi, [esp + 0x42c]
lea edi, [esp + 0x3e4]
call fcn.0044ab9a
mov esi, eax
mov eax, dword [esp + 0x8c]
test eax, eax
je 0x45173d
cmp eax, dword [esi]
je 0x451742
call fcn.004cb761
mov eax, dword [esp + 0x90]
cmp eax, dword [esi + 4]
je 0x4517f4
lea esi, [esp + 0x8c]
call fcn.004575f1
push eax
lea ecx, [esp + 0x2c]
call fcn.004247d5
mov byte [esp + 0x66c0], 0xf8
call fcn.004575f1
mov edi, dword [eax + 4]
mov eax, edi
lea esi, [esp + 0x2fc]
call fcn.00485f30
push ecx
mov byte [esp + 0x66c4], 0xf9
mov esi, dword [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push esi
push str.Setting___s__s
push ecx
call fcn.00478210
add esp, 0x10
call fcn.0044c6ff
pop ecx
mov ecx, dword [esp + 0x2fc]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x3c4]
push edi
push eax
xor eax, eax
mov edx, esi
call fcn.00485f90
pop ecx
pop ecx
lea ecx, [esi - 0x10]
mov byte [esp + 0x66c0], 0xf4
call fcn.0042201a
lea esi, [esp + 0x8c]
call fcn.00457619
jmp 0x451719
mov ebx, dword [esp + 0x3c4]
lea eax, [esp + 0x3c4]
push eax
call fcn.0049a0e0
lea eax, [esp + 0xc04]
call fcn.00490ab0
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Done
jmp 0x450790
push str._GetProperty_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x5123b8
call fcn.004cb540
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + esi*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x214]
call fcn.004247ea
push 1
push 0
push ecx
mov byte [esp + 0x66cc], 0xfa
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x1360]
push eax
call fcn.0048fbd0
mov byte [esp + 0x66c0], 0xfb
push dword [0x53f3cc]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x1360]
push eax
call fcn.0044d00f
add esp, 0x10
lea ecx, [esp + 0x1a4]
call fcn.0042248a
lea eax, [esp + 0x368]
push eax
mov byte [esp + 0x66c4], 0xfc
call fcn.0042b998
lea eax, [esp + 0x1a4]
push eax
push ecx
mov byte [esp + 0x66c8], 0xfd
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Main
call fcn.004247ea
push 3
lea edi, [esp + 0x1360]
call fcn.00491e20
mov ecx, dword [esp + 0x1a4]
mov eax, dword [ecx - 0xc]
test eax, eax
jne 0x451918
push 6
jmp 0x44eddf
lea edx, [esp + 0x368]
push edx
push eax
push ecx
call fcn.00480710
mov eax, dword [esp + 0x38c]
mov eax, dword [eax]
add esp, 0xc
lea edi, [esp + 0x368]
lea esi, [esp + 0x8c]
call fcn.00432bb5
mov eax, dword [esp + 0x380]
lea esi, [esp + 0xbc]
call fcn.00432bb5
mov edi, esi
lea esi, [esp + 0x8c]
call fcn.0042bae8
test al, al
je 0x44f06f
xor ebx, ebx
lea esi, [esp + 0x8c]
call fcn.00432bcb
push dword [eax]
lea eax, [esp + 0x214]
call fcn.0042486d
test eax, eax
jne 0x4519ff
call fcn.00432bcb
add eax, 4
push dword [eax]
lea ecx, [esp + 0x138]
call fcn.004262ba
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
cmp eax, 0xffffffff
je 0x4519f0
mov ecx, dword [esp + 0x134]
push ebx
mov dword [esp + 0x154], ebx
mov edx, dword [ecx - 0xc]
lea esi, [esp + 0x154]
push esi
push edx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x4519f0
mov eax, dword [esp + 0x150]
mov ecx, dword [esp + 0x134]
cmp eax, dword [ecx - 0xc]
je 0x453d09
mov ecx, dword [esp + 0x134]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x8c]
call fcn.0042badc
mov eax, dword [esp + 0x380]
lea edi, [esp + 0x368]
lea esi, [esp + 0xbc]
call fcn.00432bb5
mov edi, esi
lea esi, [esp + 0x8c]
call fcn.0042bae8
test al, al
jne 0x451971
jmp 0x44f06f
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x3c]
call fcn.004247d5
lea eax, [esi + 1]
mov dword [esp + 0x66c0], 0x104
cmp dword [esp + 0x60], eax
jle 0x451a73
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0x3c]
call fcn.00424843
push 1
push 0
push ecx
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x820]
push eax
call fcn.0048fbd0
mov byte [esp + 0x66c0], 5
push dword [0x53f3cc]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x820]
push eax
call fcn.0044d00f
add esp, 0x10
cmp dword [esp + 0x89c], 0
jne 0x451ae2
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x451413
push 1
lea eax, [esp + 0x818]
push eax
lea eax, [esp + 0x144]
push eax
call fcn.0044d0a8
add esp, 0xc
push str._n_nSandboxing:_n_n
lea ecx, [esp + 0x140]
mov byte [esp + 0x66c4], 6
call fcn.004261e6
lea eax, [esp + 0x814]
push eax
lea eax, [esp + 0x308]
push eax
call fcn.0044d42f
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x140]
mov byte [esp + 0x66c4], 7
call fcn.00424858
mov byte [esp + 0x66c0], 6
mov ecx, dword [esp + 0x304]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x13c]
mov eax, dword [ecx - 0xc]
push ecx
push ecx
mov dword [esp + 0x1c], esp
mov ebx, esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
mov esi, str..txt
push esi
lea edi, [eax + eax]
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 8
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004770f0
pop ecx
push ebx
mov byte [esp + 0x66d4], 6
call fcn.004783d0
add esp, 0xc
call fcn.00478be0
pop ecx
pop ecx
xor edi, edi
push edi
push str.Package_info
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 9
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004770f0
pop ecx
lea eax, [esp + 0x31c]
push eax
mov byte [esp + 0x66d4], 6
call fcn.004783d0
add esp, 0xc
mov byte [esp + 0x66c8], 0xa
push dword [eax]
push str.Saved_in:__s
lea eax, [esp + 0x228]
push eax
call fcn.00478210
add esp, 0xc
push dword [eax]
push edi
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [esp + 0x218]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x30c]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x450c1c
lea ecx, [esp + 0x14]
call fcn.0042248a
lea ecx, [esp + 0x148]
mov dword [esp + 0x66c0], 0x10f
call fcn.0042248a
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x66c4], 0x10
call fcn.004247d5
lea eax, [esi + 1]
mov byte [esp + 0x66c0], 0x11
cmp dword [esp + 0x60], eax
jle 0x451c93
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0x58]
call fcn.00424843
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str..ini
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0x12
lea eax, [esp + 0x5c]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x160]
push eax
mov byte [esp + 0x66cc], 0x11
call fcn.004783d0
add esp, 8
mov byte [esp + 0x66c4], 0x13
lea eax, [esp + 0x15c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
call fcn.0047b7b0
pop ecx
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x1120]
push eax
call fcn.0048fbd0
mov byte [esp + 0x66c0], 0x14
push dword [0x53f3cc]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x1120]
push eax
call fcn.0044d00f
add esp, 0x10
cmp dword [esp + 0x119c], esi
jne 0x451d65
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
jmp 0x451413
lea eax, [esp + 0x148]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push str.Main
call fcn.004247ea
push 3
lea edi, [esp + 0x1120]
call fcn.00491e20
mov ecx, dword [esp + 0x148]
mov eax, dword [ecx - 0xc]
cmp eax, esi
jne 0x451dac
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
jmp 0x44ee28
push ecx
push ecx
lea edi, [eax + eax]
lea eax, [esp + 0x160]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
call fcn.00478be0
pop ecx
pop ecx
jmp 0x451335
push str.AppID_ShortDesc_FriendlyName_Category_DownloadUrl_IconUrl_Version_BuildUid_Size_PopularityIndex_n
lea ecx, [esp + 0x88]
call fcn.004247ea
mov dword [esp + 0x66c0], 0x115
xor edi, edi
lea ecx, [esp + 0x34]
mov dword [esp + 0x180], edi
mov dword [esp + 0x1a8], edi
call fcn.0042248a
push 1
push edi
push ecx
mov byte [esp + 0x66cc], 0x16
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x1630]
push eax
call fcn.0048fbd0
push 0xffffffffffffffff
push edi
push ecx
mov byte [esp + 0x66cc], 0x17
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x18
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d4], 0x19
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d5
push 2
push ecx
mov byte [esp + 0x66dc], 0x1a
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x1640]
push eax
mov byte [esp + 0x66e0], 0x17
call fcn.0043fac9
mov edi, 0x500024
push edi
lea eax, [esp + 0x244]
push 0x5432bc
push eax
call fcn.00424a39
add esp, 0x2c
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0x66c4], 0x1b
call fcn.00424858
mov byte [esp + 0x66c0], 0x17
mov ecx, dword [esp + 0x220]
add ecx, 0xfffffff0
call fcn.0042201a
push edi
lea ecx, [esp + 0x88]
call fcn.004261e6
push edi
push 0x5432c8
lea eax, [esp + 0x31c]
push eax
call fcn.00424a39
add esp, 0xc
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0x66c4], 0x1c
call fcn.00424858
mov byte [esp + 0x66c0], 0x17
mov ecx, dword [esp + 0x314]
add ecx, 0xfffffff0
call fcn.0042201a
push str.Productivity_
lea ecx, [esp + 0x88]
call fcn.004261e6
lea eax, [esi + 1]
cmp dword [esp + 0x60], eax
jle 0x451f75
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
lea ebx, [esp + 0x88]
push 0x512680
call fcn.0042785f
mov esi, dword [esp + 0x48]
pop ecx
pop ecx
jmp 0x451f86
push str._Download_URL_here__
lea ecx, [esp + 0x88]
call fcn.004261e6
add esi, 2
cmp dword [esp + 0x60], esi
jle 0x451fab
mov eax, dword [esp + 0x30]
push dword [eax + esi*4]
lea ebx, [esp + 0x88]
push 0x512680
call fcn.0042785f
pop ecx
pop ecx
jmp 0x451fbc
push str._Icon_here__
lea ecx, [esp + 0x88]
call fcn.004261e6
push edi
lea eax, [esp + 0x22c]
push 0x5432d0
push eax
call fcn.00424a39
add esp, 0xc
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0x66c4], 0x1d
call fcn.00424858
mov byte [esp + 0x66c0], 0x17
mov ecx, dword [esp + 0x228]
add ecx, 0xfffffff0
call fcn.0042201a
push edi
lea eax, [esp + 0x320]
push 0x543300
push eax
call fcn.00424a39
add esp, 0xc
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0x66c4], 0x1e
call fcn.00424858
mov byte [esp + 0x66c0], 0x17
mov ecx, dword [esp + 0x31c]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push eax
lea edi, [esp + 0x1b0]
lea esi, [esp + 0x188]
call fcn.004770f0
pop ecx
call fcn.0047b6b0
pop ecx
push dword [esp + 0x180]
lea eax, [esp + 0x330]
push 0x501250
push eax
call fcn.00478210
add esp, 0xc
push 0x500024
push eax
lea eax, [esp + 0x32c]
push eax
mov byte [esp + 0x66cc], 0x1f
call fcn.00424a39
add esp, 0xc
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0x66c4], 0x20
call fcn.00424858
mov ecx, dword [esp + 0x324]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x66c0], 0x17
mov ecx, dword [esp + 0x32c]
add ecx, 0xfffffff0
call fcn.0042201a
push 0x5023f4
lea ecx, [esp + 0x88]
call fcn.004261e6
mov eax, dword [esp + 0x40]
add eax, 3
cmp dword [esp + 0x60], eax
jle 0x452107
mov ecx, dword [esp + 0x30]
push dword [ecx + eax*4]
lea ecx, [esp + 0x38]
call fcn.00424843
jmp 0x45216f
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..csv
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0x21
mov eax, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004770f0
pop ecx
lea eax, [esp + 0x240]
push eax
mov byte [esp + 0x66cc], 0x17
call fcn.004783d0
add esp, 0xc
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x66c4], 0x22
call fcn.0042482e
mov byte [esp + 0x66c0], 0x17
mov ecx, dword [esp + 0x238]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x84]
mov eax, dword [ecx - 0xc]
push ecx
push ecx
lea edi, [eax + eax]
lea eax, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d5
call fcn.00478be0
pop ecx
pop ecx
push dword [0x53f3cc]
push ecx
mov dword [esp + 0x1c], esp
test eax, eax
jne 0x4521bb
mov eax, esp
lea ecx, [esp + 0x3c]
push ecx
push str.Could_not_save_to
push eax
call fcn.00424a8e
jmp 0x44ef6b
mov ecx, esp
lea eax, [esp + 0x3c]
push eax
call fcn.004247d5
jmp 0x44ff6f
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x1480]
push eax
call fcn.0048fbd0
mov dword [esp + 0x66c0], 0x123
cmp dword [esp + 0x14fc], esi
jne 0x452215
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44f927
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5432bc]
push str._s.AppVirtDll.dll
push eax
call fcn.00478210
lea eax, [esp + 0x154]
add esp, 0xc
push eax
call fcn.004778e0
add esp, 4
mov byte [esp + 0x66c4], 0x24
lea eax, [esp + 0x148]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
push ecx
mov byte [esp + 0x66c8], 0x25
mov ecx, esp
mov dword [esp + 0x24], esp
push str.Main
call fcn.004247ea
push 2
pop ecx
lea edi, [esp + 0x147c]
mov byte [esp + 0x66c8], 0x24
call fcn.00491fc0
push dword [0x53f3cc]
lea eax, [esp + 0x148]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x244]
push eax
call fcn.0049aa50
add esp, 4
mov byte [esp + 0x66c8], 0x26
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.EngineVersion_s
push ecx
call fcn.00478210
add esp, 0xc
call fcn.0044cf95
pop ecx
pop ecx
mov byte [esp + 0x66c0], 0x24
mov ecx, dword [esp + 0x23c]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
lea eax, [esp + 0x148]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
call fcn.0047b7b0
jmp 0x451dca
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x38]
call fcn.004247d5
push 0x2e
lea ecx, [esp + 0x38]
mov dword [esp + 0x66c4], 0x127
call fcn.00437a6c
push eax
lea eax, [esp + 0x2fc]
push eax
lea ecx, [esp + 0x3c]
call fcn.004249d9
push str..new.exe
push eax
lea eax, [esp + 0xb8]
push eax
mov byte [esp + 0x66cc], 0x28
call fcn.00424a39
add esp, 0xc
mov byte [esp + 0x66c0], 0x2a
mov ecx, dword [esp + 0x2f8]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0x24c]
call fcn.004247ea
push 0
mov byte [esp + 0x66c4], 0x2b
push dword [esp + 0xb4]
push dword [esp + 0x250]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x4523db
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xb8]
push dword [esp + 0x40]
push str.Cant_copy__s_to__s
push eax
call fcn.00478210
add esp, 0x10
jmp 0x44edd8
push dword [esp + 0xb0]
push dword [esp + 0x38]
call fcn.004453e1
pop ecx
pop ecx
xor esi, esi
inc esi
push esi
push 0
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x670]
push eax
call fcn.0048fbd0
push esi
push esi
push ecx
mov byte [esp + 0x66cc], 0x2c
lea eax, [esp + 0xbc]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x1240]
push eax
call fcn.0048fbd0
mov byte [esp + 0x66c0], 0x2d
push dword [0x53f3cc]
lea eax, [esp + 0x50]
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x670]
push eax
call fcn.0044d00f
add esp, 0x10
lea eax, [esp + 0x44]
lea ecx, [esp + 0x6d4]
call fcn.00424b84
jmp 0x452593
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CEChangeEngine.tmp
call fcn.004247ea
lea eax, [esp + 0xd8]
push eax
call fcn.004778e0
add esp, 4
mov byte [esp + 0x66c4], 0x2e
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
lea esi, [esp + 0x48]
mov byte [esp + 0x66c4], 0x2f
call fcn.004575f1
push ecx
add eax, 0x2c
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
call fcn.004575f1
mov byte [esp + 0x66c8], 0x2e
mov ecx, dword [eax + 0x28]
lea edi, [esp + 0x66c]
call fcn.00491fc0
test eax, eax
jne 0x4525ef
call fcn.004575f1
push ecx
add eax, 0x2c
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
push 0x4000
mov byte [esp + 0x66c8], 0x30
call fcn.004575f1
push dword [eax + 0x28]
lea eax, [esp + 0xe0]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x1244]
push eax
mov byte [esp + 0x66d4], 0x2e
call fcn.004917e0
test eax, eax
jne 0x45261b
push ecx
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
call fcn.0047b7b0
pop ecx
mov byte [esp + 0x66c0], 0x2d
mov ecx, dword [esp + 0xd4]
add ecx, 0xfffffff0
call fcn.0042201a
call fcn.004573eb
lea eax, [esp + 0x388]
lea ecx, [esp + 0x6d4]
call fcn.00424b99
mov edi, eax
lea esi, [esp + 0x44]
call fcn.00424d76
test al, al
jne 0x452481
lea eax, [esp + 0x664]
call fcn.00490ab0
lea eax, [esp + 0x1234]
call fcn.00490ab0
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xb8]
push str.Successfully_changed_Loader:__s
jmp 0x44ff66
push dword [0x53f3cc]
call fcn.004575f1
push ecx
mov edi, esp
mov dword [esp + 0x1c], esp
push dword [eax + 0x2c]
lea esi, [esp + 0x50]
call fcn.004575f1
push dword [eax + 0x28]
push str.Cannot_read_container__d__s_to_file
push edi
jmp 0x4523ce
push dword [0x53f3cc]
lea esi, [esp + 0x48]
call fcn.004575f1
push ecx
mov edi, esp
mov dword [esp + 0x1c], esp
push dword [eax + 0x2c]
jmp 0x452608
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x30]
call fcn.004247d5
push 0x2e
lea ecx, [esp + 0x30]
mov dword [esp + 0x66c4], 0x131
call fcn.00437a6c
push eax
lea eax, [esp + 0x2c4]
push eax
lea ecx, [esp + 0x34]
call fcn.004249d9
push str..new.exe
push eax
lea eax, [esp + 0xe4]
push eax
mov byte [esp + 0x66cc], 0x32
call fcn.00424a39
add esp, 0xc
mov byte [esp + 0x66c0], 0x34
mov ecx, dword [esp + 0x2c0]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0xe8]
call fcn.004247ea
push 0
mov byte [esp + 0x66c4], 0x35
push dword [esp + 0xe0]
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x4526f1
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xe4]
push dword [esp + 0x38]
jmp 0x4523c8
push 1
push 1
push ecx
lea eax, [esp + 0xe8]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x5e0]
push eax
call fcn.0048fbd0
mov byte [esp + 0x66c0], 0x36
push dword [0x53f3cc]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x5e0]
push eax
call fcn.0044d00f
add esp, 0x10
cmp dword [esp + 0x65c], 0
jne 0x452763
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x450fdd
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov esi, str.Main
push esi
call fcn.004247ea
push 0
push 2
push ecx
mov byte [esp + 0x66d0], 0x37
lea eax, [esp + 0xf4]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x5e4]
push eax
mov byte [esp + 0x66d4], 0x36
call fcn.004917e0
test eax, eax
je 0x4527c5
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEDLL
jmp 0x44edd3
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247ea
push 0
push 8
push ecx
mov byte [esp + 0x66d0], 0x38
mov dword [esp + 0x2c], esp
mov edi, esp
push ecx
lea eax, [esp + 0xf8]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.004247d5
push edi
call fcn.004863f0
pop ecx
pop ecx
lea eax, [esp + 0x5e4]
push eax
mov byte [esp + 0x66d4], 0x36
call fcn.004917e0
test eax, eax
je 0x452831
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEDLL64
jmp 0x44edd3
lea ecx, [esp + 0x160]
call fcn.0042248a
lea ecx, [esp + 0x1a0]
call fcn.0042248a
lea eax, [esp + 0x160]
push eax
push ecx
mov byte [esp + 0x66c8], 0x3a
mov ecx, esp
mov dword [esp + 0x1c], esp
push esi
call fcn.004247ea
push 3
lea edi, [esp + 0x5e0]
call fcn.00491e20
test eax, eax
je 0x45288f
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_Read_PeContainer_PECONTAINER_INI
jmp 0x44edd3
push ecx
mov edi, esp
mov dword [esp + 0x18], esp
push ecx
lea eax, [esp + 0xec]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
lea ebx, [esp + 0x1ac]
call fcn.004247d5
push edi
call fcn.0049aa50
add esp, 4
mov byte [esp + 0x66c8], 0x3b
mov ecx, esp
mov dword [esp + 0x24], esp
push str.EngineVersion
call fcn.004247ea
push ecx
mov byte [esp + 0x66cc], 0x3c
lea eax, [esp + 0x16c]
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66cc], 0x3a
call fcn.0047cda0
pop ecx
pop ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247ea
push 0x4000
push 3
pop esi
push ecx
mov byte [esp + 0x66cc], 0x3d
mov eax, ebx
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d5
mov ecx, esi
lea ebx, [esp + 0x5e0]
mov byte [esp + 0x66cc], 0x3a
call fcn.004915c0
test eax, eax
je 0x452959
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_Add_PeContainerStr_PECONTAINER_INI
jmp 0x44edd3
lea eax, [esp + 0x5d4]
call fcn.00490ab0
push dword [0x53f3cc]
lea eax, [esp + 0xe8]
push ecx
mov dword [esp + 0x1c], esp
mov esi, esp
push dword [esp + 0xe4]
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x260]
push eax
call fcn.0049aa50
pop ecx
pop ecx
mov byte [esp + 0x66cc], 0x3e
push dword [eax]
push str.Successfully_changed_to_Engine__s._nNew_package_saved_in:_n_s
push esi
call fcn.00478210
add esp, 0x10
call fcn.0044cf95
pop ecx
pop ecx
mov ecx, dword [esp + 0x250]
jmp 0x451273
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x30]
call fcn.004247d5
push 0x2e
lea ecx, [esp + 0x30]
mov dword [esp + 0x66c4], 0x13f
call fcn.00437a6c
push eax
lea eax, [esp + 0x31c]
push eax
lea ecx, [esp + 0x34]
call fcn.004249d9
push str..new.exe
push eax
lea eax, [esp + 0xf4]
push eax
mov byte [esp + 0x66cc], 0x40
call fcn.00424a39
add esp, 0xc
mov byte [esp + 0x66c0], 0x42
mov ecx, dword [esp + 0x318]
add ecx, 0xfffffff0
call fcn.0042201a
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0x25c]
call fcn.004247ea
xor esi, esi
push esi
mov byte [esp + 0x66c4], 0x43
push dword [esp + 0xf0]
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x452a83
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xf4]
push dword [esp + 0x38]
jmp 0x4523c8
push 1
push 1
push ecx
lea eax, [esp + 0xf8]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x940]
push eax
call fcn.0048fbd0
mov byte [esp + 0x66c0], 0x44
push dword [0x53f3cc]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x940]
push eax
call fcn.0044d00f
add esp, 0x10
cmp dword [esp + 0x9bc], esi
jne 0x452af4
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x450fdd
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Main
call fcn.004247ea
push esi
push 3
push ecx
mov byte [esp + 0x66d0], 0x45
lea eax, [esp + 0x268]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x944]
push eax
mov byte [esp + 0x66d4], 0x44
call fcn.004917e0
cmp eax, esi
je 0x452b54
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_Add_PeContainer_PECONTAINER_ENGINEINI
jmp 0x44edd3
lea eax, [esp + 0x934]
call fcn.00490ab0
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xf4]
push str.Successfully_changed_INI._nNew_package_saved_in:_n_s
push eax
call fcn.00478210
add esp, 0xc
call fcn.0044cf95
jmp 0x451dc9
lea esi, [esp + 0x1744]
call fcn.0043b041
mov dword [esp + 0x66c0], 0x146
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x40]
push dword [edi + esi*4 + 4]
lea ecx, [esp + 0x1790]
call fcn.00424843
push dword [edi + esi*4 + 8]
lea ecx, [esp + 0x1768]
call fcn.00424843
push dword [edi + esi*4 + 0xc]
lea ecx, [esp + 0x1760]
call fcn.00424843
push eax
lea ecx, [esp + 0x1754]
call fcn.0042482e
push dword [edi + esi*4 + 0x10]
lea ecx, [esp + 0x1798]
call fcn.00424843
push dword [edi + esi*4 + 0x14]
lea ecx, [esp + 0x1794]
call fcn.00424843
lea eax, [esp + 0x18b4]
push eax
lea edi, [esp + 0x1748]
call fcn.004a8aa0
lea eax, [esp + 0x18b4]
push eax
mov byte [esp + 0x66c4], 0x47
call fcn.004a8c40
test eax, eax
je 0x452c80
xor esi, esi
mov eax, 0x512b40
cmp dword [esp + 0x18b4], esi
jne 0x452c4a
mov eax, 0x512b48
push dword [esp + 0x18c0]
push dword [esp + 0x18c0]
push eax
lea eax, [esp + 0x2d4]
push str.Need_to_update:__s_nVersion:__s_nBuildUID:__s_n
push eax
call fcn.00478210
add esp, 0x14
push esi
push str.Server_test:
push dword [esp + 0x2d0]
jmp 0x45132e
push 0
push str.Server_test:
push str.Failed
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 1
jmp 0x44eddf
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xa60]
push eax
call fcn.0048fbd0
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x66cc], 0x149
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x4a
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d4], 0x4b
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d5
push 2
push ecx
mov byte [esp + 0x66dc], 0x4c
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xa70]
push eax
mov byte [esp + 0x66e0], 0x49
call fcn.0043fac9
add esp, 0x20
lea ecx, [esp + 0xa54]
call fcn.0043e6a1
lea eax, [esp + 0xa54]
call fcn.00490ab0
mov dword [esp + 0x66c0], 4
lea eax, [esp + 0xa54]
jmp 0x44f835
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xdc0]
push eax
call fcn.0048fbd0
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x66cc], 0x14d
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x4e
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d4], 0x4f
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d5
push 2
push ecx
mov byte [esp + 0x66dc], 0x50
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xdd0]
push eax
mov byte [esp + 0x66e0], 0x4d
call fcn.0043fac9
add esp, 0x20
push esi
push esi
push esi
push ecx
mov eax, esp
mov dword [esp + 0x24], esp
push eax
xor ecx, ecx
call fcn.0048a130
pop ecx
mov ecx, esi
call fcn.004a5ca0
add esp, 0x10
lea eax, [esp + 0xdb4]
call fcn.00490ab0
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
mov edi, 0x5432b0
push edi
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x452e6a
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Cannot_obtain_INI_info_from_resource_
call fcn.004247ea
call fcn.0044c6ff
pop ecx
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str.MountVirtReg
push eax
call fcn.00478210
pop ecx
pop ecx
call fcn.0044c6ff
mov eax, esp
mov dword [esp + 0x18], esp
push str._____________
push eax
call fcn.00478210
pop ecx
pop ecx
call fcn.0044c6ff
pop ecx
mov ecx, edi
call fcn.0042b138
mov edi, eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
cmp edi, esi
jne 0x452ec1
push str.Cannot_mount_virtual_registry
call fcn.004247ea
call fcn.0044c6ff
jmp 0x452ece
push ebx
call fcn.004247ea
push edi
call fcn.0044d51c
pop ecx
pop ecx
mov dword [esp + 0x66c0], 4
lea eax, [esp + 0xdb4]
jmp 0x44f835
mov edi, dword [esp + 0x30]
push dword [edi + esi*4 + 4]
lea ecx, [esp + 0x16c]
call fcn.004247ea
mov dword [esp + 0x66c0], 0x151
push dword [edi + esi*4 + 8]
lea ecx, [esp + 0xb8]
call fcn.004247ea
push 0x10
xor esi, esi
mov byte [esp + 0x66c4], 0x52
push esi
push dword [esp + 0x170]
call fcn.004cf902
add esp, 8
mov edi, eax
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0xb8]
push edi
push str.SetFileFlags:__0x_x____s_
push eax
call fcn.00478210
add esp, 0x10
call fcn.0044c6ff
pop ecx
push 1
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xe50]
push eax
call fcn.0048fbd0
mov byte [esp + 0x66c0], 0x53
push dword [0x53f3cc]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xe50]
push eax
call fcn.0044d00f
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x54
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d4], 0x55
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d5
push 2
push ecx
mov byte [esp + 0x66dc], 0x56
mov ecx, esp
mov dword [esp + 0x44], esp
lea eax, [esp + 0x34]
push eax
call fcn.004247d5
lea eax, [esp + 0xe60]
push eax
mov byte [esp + 0x66e0], 0x53
call fcn.0043fac9
call fcn.00483c80
mov esi, 0x542a98
mov eax, esi
call fcn.004990e0
mov eax, dword [esp + 0xd4]
push 0
call fcn.00484470
add esp, 0x24
push ecx
mov dword [esp + 0x18], esp
test eax, eax
je 0x45309f
mov eax, dword [eax + 0x24]
mov dword [eax], edi
mov ecx, esp
push dword [0x542a98]
call fcn.004247ea
mov ecx, esi
call fcn.004843a0
pop ecx
test eax, eax
je 0x453089
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xbc]
push edi
push str.Success:_n__x___s
push eax
call fcn.00478210
add esp, 0x10
call fcn.0044cf95
pop ecx
jmp 0x4530bb
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push str._SetFileFlags:_could_not_save_tree
push eax
call fcn.00478210
pop ecx
pop ecx
jmp 0x4530b6
mov eax, esp
push dword [esp + 0xb8]
push str._SetFileFlags:_could_not_find__s
push eax
call fcn.00478210
add esp, 0xc
call fcn.0044c6ff
pop ecx
mov eax, esi
call fcn.004990f0
lea eax, [esp + 0xe44]
mov byte [esp + 0x66c0], 0x52
call fcn.00427a08
mov ecx, dword [esp + 0xb4]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x168]
jmp 0x44f1b4
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.DbgZip
call fcn.004247ea
call fcn.0044c72f
mov dword [esp], str._DbgZip:
call fcn.004cb5ea
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + esi*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x68]
call fcn.00424843
jmp 0x44eccd
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xb80]
push eax
call fcn.0048fbd0
push 0xffffffffffffffff
push esi
push ecx
mov dword [esp + 0x66cc], 0x157
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x58
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d4], 0x59
mov ecx, esp
mov dword [esp + 0x58], esp
push ebx
call fcn.004247ea
push 2
push ecx
mov byte [esp + 0x66dc], 0x5a
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xb90]
push eax
mov byte [esp + 0x66e0], 0x57
call fcn.0043fac9
add esp, 0x20
push dword [0x53f3cc]
lea eax, [esp + 0x50]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xb80]
push eax
call fcn.0044d00f
push dword [esp + 0x68]
lea edx, [esp + 0xb88]
mov ecx, 0x5432b0
call fcn.00443a0d
add esp, 0x14
mov dword [esp + 0x66c0], 4
lea eax, [esp + 0xb74]
jmp 0x44f835
push 1
xor edi, edi
push edi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x13f0]
push eax
call fcn.0048fbd0
push 0xffffffffffffffff
push edi
push ecx
mov dword [esp + 0x66cc], 0x161
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x62
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d4], 0x63
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d5
push 2
push ecx
mov byte [esp + 0x66dc], 0x64
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x1400]
push eax
mov byte [esp + 0x66e0], 0x61
call fcn.0043fac9
add esp, 0x20
lea esi, [esp + 0xbc]
call fcn.00496ce0
push 1
lea eax, [esp + 0x2e98]
push eax
mov eax, esi
push eax
mov byte [esp + 0x66cc], 0x65
lea eax, [esp + 0x44]
mov dword [esp + 0x44], edi
call fcn.00496a00
test eax, eax
je 0x45339b
mov esi, 0x54330c
push dword [0x5432bc]
lea eax, [esp + 0x36c0]
push eax
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x453378
xor edi, edi
cmp dword [esp + 0x32b8], edi
jbe 0x453378
lea ebx, [esp + edi*8 + 0x32bc]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [ebx], eax
je 0x45336e
test byte [esp + edi*8 + 0x32c0], 3
je 0x45336e
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247d5
push ecx
mov byte [esp + 0x66c8], 0x66
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x5432bc
call fcn.004247d5
mov byte [esp + 0x66c8], 0x65
mov ebx, dword [ebx]
call fcn.00447f79
pop ecx
pop ecx
inc edi
cmp edi, dword [esp + 0x32b8]
jb 0x45331c
push 1
lea eax, [esp + 0x2e98]
push eax
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0x44]
call fcn.00496a00
test eax, eax
jne 0x4532f8
xor eax, eax
push eax
push eax
push eax
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
lea eax, [esp + 0xbc]
call fcn.00496d00
lea eax, [esp + 0x13e4]
mov dword [esp + 0x66c0], 4
call fcn.00427a08
lea ecx, [esp + 0x4c]
call fcn.00426397
lea ecx, [esp + 0x18]
call fcn.00426397
lea ecx, [esp + 0x78]
call fcn.00426397
jmp 0x455661
push 1
xor esi, esi
push esi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x16c0]
push eax
call fcn.0048fbd0
push 0xffffffffffffffff
mov dword [esp + 0x66c4], 0x167
push dword [esp + 0x54]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x68
mov ecx, esp
mov dword [esp + 0x2c], esp
push str._Vintegrate_
call fcn.004247ea
push ecx
mov byte [esp + 0x66d4], 0x69
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d5
push esi
push ecx
mov byte [esp + 0x66dc], 0x6a
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x16d0]
push eax
mov byte [esp + 0x66e0], 0x67
call fcn.0043fac9
add esp, 0x20
call fcn.0044cec9
jmp 0x451335
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x40]
push str._ProcessList:all
push dword [eax + ecx*4]
call fcn.004cb335
mov edi, eax
neg edi
pop ecx
sbb edi, edi
pop ecx
lea esi, [esp + 0xbc]
inc edi
call fcn.00496ce0
mov dword [esp + 0x66c0], 0x16b
and dword [esp + 0x2c], 0
lea ecx, [esp + 0x40]
call fcn.0042248a
xor eax, eax
test edi, edi
sete al
mov byte [esp + 0x66c0], 0x6c
mov dword [esp + 0x38], eax
jmp 0x45379c
lea eax, [esp + 0x226c]
push eax
lea eax, [esp + 0x264]
push str._AppID_ws_n
push eax
call fcn.00478210
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66c4], 0x6d
call fcn.00424858
lea ecx, [esp + 0x260]
mov byte [esp + 0x66c0], 0x6c
call fcn.00426397
push dword [esp + 0x1a48]
lea eax, [esp + 0x304]
push str.____SerialId:__d_n
push eax
call fcn.00478210
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66c4], 0x6e
call fcn.00424858
lea ecx, [esp + 0x300]
mov byte [esp + 0x66c0], 0x6c
call fcn.00426397
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x1e60]
mov esi, 0x3e8
xor edx, edx
mov ecx, esi
div ecx
push eax
lea eax, [esp + 0x26c]
push str.____Started:__d_sec_ago_n
push eax
call fcn.00478210
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66c4], 0x6f
call fcn.00424858
lea ecx, [esp + 0x268]
mov byte [esp + 0x66c0], 0x6c
call fcn.00426397
mov eax, dword [esp + 0x1e64]
xor edx, edx
div esi
push eax
lea eax, [esp + 0x2d4]
push str.____Blocking_buffering:__d_sec_n
push eax
call fcn.00478210
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66c4], 0x70
call fcn.00424858
lea ecx, [esp + 0x2d0]
mov byte [esp + 0x66c0], 0x6c
call fcn.00426397
lea eax, [esp + 0x270]
push str.____Processes:_n
push eax
call fcn.00478210
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66c4], 0x71
call fcn.00424858
lea ecx, [esp + 0x270]
mov byte [esp + 0x66c0], 0x6c
call fcn.00426397
and dword [esp + 0x54], 0
cmp dword [esp + 0x1e68], 0
jbe 0x45379c
push ebx
lea ecx, [esp + 0xf8]
call fcn.004247ea
mov byte [esp + 0x66c0], 0x72
mov edi, dword [esp + 0x54]
lea edi, [esp + edi*8 + 0x1e6c]
push dword [edi]
lea esi, [esp + 0xf8]
call fcn.00476930
pop ecx
test eax, eax
jne 0x4536a4
push 0x502f88
mov ecx, esi
call fcn.00424843
push 0x5c
push ecx
lea eax, [esp + 0xfc]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x280]
push eax
call fcn.00478540
add esp, 0xc
mov byte [esp + 0x66c0], 0x73
push dword [eax]
lea eax, [esp + 0x32c]
push dword [edi]
push str._______wd:__ws
push eax
call fcn.00478210
add esp, 0x10
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66c4], 0x74
call fcn.00424858
lea ecx, [esp + 0x328]
call fcn.00426397
lea ecx, [esp + 0x278]
mov byte [esp + 0x66c0], 0x72
call fcn.00426397
mov esi, dword [esp + 0x54]
mov eax, dword [esp + esi*8 + 0x1e70]
test eax, eax
je 0x453768
push eax
lea eax, [esp + 0x2dc]
push str._0x_x_
push eax
call fcn.00478210
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66c4], 0x75
call fcn.00424858
lea ecx, [esp + 0x2d8]
mov byte [esp + 0x66c0], 0x72
call fcn.00426397
push 0x4feaac
lea ecx, [esp + 0x44]
call fcn.004261e6
lea ecx, [esp + 0xf4]
mov byte [esp + 0x66c0], 0x6c
call fcn.00426397
inc esi
mov dword [esp + 0x54], esi
cmp esi, dword [esp + 0x1e68]
jb 0x453665
push dword [esp + 0x38]
lea eax, [esp + 0x1a48]
push eax
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0x38]
call fcn.00496a00
test eax, eax
jne 0x4534f8
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
cmp dword [esp + 0x34], eax
jne 0x4537ea
push str.No_active_virtual_apps
call fcn.004247ea
call fcn.0044cf95
pop ecx
pop ecx
jmp 0x452c94
lea eax, [esp + 0x48]
jmp 0x4521c1
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
push 0x5432b0
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x453826
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
lea esi, [esp + 0xbc]
call fcn.00496ce0
mov dword [esp + 0x66c0], 0x176
and dword [esp + 0x38], 0
jmp 0x45385d
push dword [0x5432bc]
lea eax, [esp + 0x40e8]
push eax
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x45388d
push 1
lea eax, [esp + 0x38c0]
push eax
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0x44]
call fcn.00496a00
test eax, eax
jne 0x453844
lea eax, [esp + 0xbc]
call fcn.00496d00
jmp 0x44eddd
push 0x2bc
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0xbc]
mov dword [esp + 0x66c0], 4
call fcn.00496d00
jmp 0x453826
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
push 0x5432b0
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x4538e7
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
push 0x51309c
call fcn.004cb540
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + esi*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x104]
call fcn.004247ea
push ecx
mov dword [esp + 0x66c4], 0x177
mov ecx, esp
mov dword [esp + 0x18], esp
mov esi, 0x502f8c
xor ebx, ebx
push esi
mov dword [esp + 0xb0], ebx
lea edi, [esp + 0xb0]
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0x78
lea eax, [esp + 0x108]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x288]
push eax
mov byte [esp + 0x66cc], 0x77
call fcn.0047c400
add esp, 0xc
mov byte [esp + 0x66c0], 0x79
cmp dword [esp + 0xa8], 0xffffffff
jne 0x453993
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.InactivitySec_not_specified
jmp 0x44edd3
push dword [esp + 0x280]
call fcn.004cdeb1
pop ecx
mov dword [esp + 0x7c], eax
cmp eax, ebx
jne 0x4539bf
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Incorrect_InactivitySec
jmp 0x44edd3
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
lea edi, [esp + 0xb0]
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0x7a
lea eax, [esp + 0x108]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x310]
push eax
mov byte [esp + 0x66cc], 0x79
call fcn.0047c400
add esp, 0xc
mov byte [esp + 0x66c0], 0x7b
cmp dword [esp + 0xa8], 0xffffffff
jne 0x453a30
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.TimeoutSec_not_specified
jmp 0x44edd3
push dword [esp + 0x308]
call fcn.004cdeb1
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
mov dword [esp + 0x58], eax
lea edi, [esp + 0xb0]
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0x7c
lea eax, [esp + 0x108]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x290]
push eax
mov byte [esp + 0x66cc], 0x7b
call fcn.0047c400
add esp, 0xc
mov byte [esp + 0x66c0], 0x7d
cmp dword [esp + 0xa8], 0xffffffff
jne 0x453aab
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x453a26
push str.true
lea eax, [esp + 0x28c]
call fcn.0042486d
mov edi, eax
neg edi
sbb edi, edi
lea eax, [esp + 0x56c]
inc edi
push eax
mov dword [esp + 0x2c], edi
call fcn.00457644
lea eax, [esp + 0x3ac]
mov byte [esp + 0x66c0], 0x7e
push eax
mov dword [esp + 0x38], ebx
mov dword [esp + 0x70], ebx
call fcn.00426ff3
mov byte [esp + 0x66c0], 0x7f
xor ebx, ebx
lea esi, [esp + 0xbc]
mov dword [esp + 0x58], ebx
call fcn.00496ce0
mov byte [esp + 0x66c0], 0x80
lea eax, [esp + 0x3ac]
mov dword [esp + 0x80], ebx
call fcn.0045750f
push 1
lea eax, [esp + 0x2470]
push eax
mov eax, esi
push eax
lea eax, [esp + 0x8c]
call fcn.00496a00
test eax, eax
je 0x453da4
push dword [0x5432bc]
lea eax, [esp + 0x2c98]
push eax
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x453d3f
mov dword [esp + 0x58], 1
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x2c], ebx
cmp dword [esp + 0x2890], ebx
jbe 0x453c7a
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + eax*8 + 0x2894]
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x3b0]
mov dword [esp + 0x58], esi
call fcn.004574b1
push esi
push ebx
push 0x400
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [esp + 0x38], eax
cmp eax, ebx
je 0x453c4b
and dword [esp + 0x3fc], 0
and dword [esp + 0x400], 0
push 0xa
pop ecx
xor eax, eax
lea edi, [esp + 0x404]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x3fc]
push eax
push dword [esp + 0x3c]
call dword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
mov edi, dword [esp + 0x41c]
add edi, dword [esp + 0x414]
mov esi, dword [esp + 0x420]
adc esi, dword [esp + 0x418]
lea eax, [esp + 0x54]
push eax
lea ebx, [esp + 0x570]
call fcn.00457695
mov ecx, edi
sub ecx, dword [eax]
mov edx, esi
sbb edx, dword [eax + 4]
add dword [esp + 0x1c], ecx
lea eax, [esp + 0x54]
push eax
adc dword [esp + 0x24], edx
call fcn.00457695
push dword [esp + 0x38]
mov dword [eax], edi
mov dword [eax + 4], esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [esp + 0x28]
xor ebx, ebx
inc dword [esp + 0x2c]
mov eax, dword [esp + 0x2c]
cmp eax, dword [esp + 0x2890]
jb 0x453b85
cmp dword [esp + 0x20], ebx
ja 0x453d0f
jb 0x453c7a
cmp dword [esp + 0x1c], 0x2800
ja 0x453d0f
add dword [esp + 0x34], 0x1f4
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x38]
push dword [esp + 0x24]
push dword [esp + 0x289c]
push dword [0x5432bc]
push str.WaitForInactivity__s_:__d_processes:_overall_disk_activity_delta_d_bytes___Inactive___d_msec
push eax
call fcn.00478210
add esp, 0x18
call fcn.0044c6ff
mov eax, dword [esp + 0x80]
imul eax, eax, 0x3e8
cmp dword [esp + 0x38], eax
pop ecx
jl 0x453d3f
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5432bc]
push str.WaitForInactivity__s_:_inactivity_threshold_reached__quitting__success_
push eax
call fcn.00478210
add esp, 0xc
call fcn.0044c6ff
pop ecx
cmp edi, ebx
je 0x453d09
sub esp, 0x18
mov eax, esp
mov dword [esp + 0x2c], esp
lea ecx, [esp + 0x3c4]
push ecx
push eax
call fcn.00457416
call fcn.0044d933
add esp, 0x18
push ebx
jmp 0x44eddf
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x20]
mov dword [esp + 0x3c], ebx
push dword [esp + 0x2898]
push dword [0x5432bc]
push str.WaitForInactivity__s_:__d_processes:_overall_disk_activity_delta_d_bytes___Active
push eax
call fcn.00478210
add esp, 0x14
call fcn.0044c6ff
pop ecx
push 1
lea eax, [esp + 0x2470]
push eax
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0x8c]
call fcn.00496a00
test eax, eax
jne 0x453b47
cmp dword [esp + 0x58], ebx
je 0x453da4
mov esi, 0x1f4
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esp + 0x50]
add dword [esp + 0x6c], esi
imul eax, eax, 0x3e8
cmp dword [esp + 0x6c], eax
jge 0x453dca
lea eax, [esp + 0xbc]
mov byte [esp + 0x66c0], 0x7f
call fcn.00496d00
jmp 0x453afb
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5432bc]
push str.WaitForInactivity__s_:_no_longer_running__quitting__success_
push eax
call fcn.00478210
add esp, 0xc
call fcn.0044c6ff
pop ecx
jmp 0x453d09
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5432bc]
push str.WaitForInactivity__s_:_timeout_reached__quitting__cancelled_
push eax
call fcn.00478210
add esp, 0xc
call fcn.0044c6ff
pop ecx
cmp edi, ebx
je 0x453e0e
sub esp, 0x18
mov eax, esp
mov dword [esp + 0x2c], esp
lea ecx, [esp + 0x3c4]
push ecx
push eax
call fcn.00457416
call fcn.0044d933
add esp, 0x18
push 0x14
jmp 0x44eddf
lea eax, [esp + 0x2e0]
push eax
mov eax, dword [esp + 0x84]
mov eax, dword [eax + 0x44]
call fcn.004336ca
lea eax, [esp + 0x2e0]
push eax
call fcn.00433807
jmp 0x44eddd
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.AutoUpdate
call fcn.004247ea
call fcn.0044c72f
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
mov esi, 0x5432b0
push esi
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x453e87
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5432f8]
push str.AutoUpdate_s
push eax
call fcn.00478210
add esp, 0xc
call fcn.0044c72f
mov ecx, 0x5432f8
mov dword [esp], str.https:__online.cameyo.com
call fcn.00424843
push str.0000
mov ecx, 0x5432fc
call fcn.00424843
mov ecx, esi
call fcn.004aa8b0
jmp 0x4533ce
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.VirtRegSyncExport
call fcn.004247ea
call fcn.0044c72f
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
push 0x5432b0
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x453f1b
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
call fcn.004499a0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
push str.VirtRegSyncExport:_bRet_d
push ecx
call fcn.00478210
add esp, 0xc
call fcn.0044c72f
pop ecx
jmp 0x4533ce
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.StartStreaming:AppIDSkype
call fcn.004247ea
call fcn.00427738
pop ecx
jmp 0x453f3b
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
push 0x5432b0
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x453f8f
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.open
xor edi, edi
xor ebx, ebx
call fcn.004247ea
push edi
push ecx
mov dword [esp + 0x66cc], 0x183
mov eax, esp
mov dword [esp + 0x28], esp
push dword [0x54330c]
push str._select___s_
push eax
call fcn.00478210
add esp, 8
mov byte [esp + 0x66d0], 0x84
mov ecx, esp
mov dword [esp + 0x54], esp
push str.explorer.exe
call fcn.004247ea
mov dword [esp + 0x66d0], 4
call fcn.00476b50
add esp, 0x10
jmp 0x4533ce
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SvcRegister
call fcn.004247ea
call fcn.0044c72f
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
mov esi, 0x5432b0
push esi
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x454044
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
mov ecx, esi
call fcn.0042b138
mov edi, eax
test edi, edi
jne 0x454068
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Cannot_mount_virtual_registry
jmp 0x44edd3
call fcn.00483c80
push dword [0x53f3cc]
push edi
push esi
call fcn.00423aae
add esp, 0xc
push dword [0x53f3cc]
mov esi, eax
test esi, esi
jne 0x454097
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Success
jmp 0x4540a8
cmp esi, 5
jne 0x4540b2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_services_to_register
call fcn.004247ea
jmp 0x452b82
lea eax, [esp + 0x294]
push esi
push eax
call fcn.0047f660
add esp, 4
mov dword [esp + 0x66c8], 0x185
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Failed_registering_services:__s
push ecx
call fcn.00478210
add esp, 0xc
call fcn.0044cf95
pop ecx
pop ecx
lea ecx, [esp + 0x290]
call fcn.00426397
jmp 0x451335
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SvcStart
call fcn.004247ea
call fcn.0044c72f
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
mov esi, 0x5432b0
push esi
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x454145
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
mov ecx, esi
call fcn.00424300
push dword [0x53f3cc]
mov esi, eax
test esi, esi
je 0x454089
cmp esi, 5
jne 0x454172
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_services_to_start
jmp 0x4540a8
lea eax, [esp + 0x324]
push esi
push eax
call fcn.0047f660
add esp, 4
mov dword [esp + 0x66c8], 0x186
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Failed_starting_services:__s
push ecx
call fcn.00478210
add esp, 0xc
call fcn.0044cf95
pop ecx
pop ecx
lea ecx, [esp + 0x320]
jmp 0x4540f2
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SvcRegisterStart
call fcn.004247ea
call fcn.0044c72f
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
mov esi, 0x5432b0
push esi
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x454200
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
mov ecx, esi
call fcn.0042b138
mov edi, eax
test edi, edi
jne 0x45421f
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x45405e
call fcn.00483c80
push dword [0x53f3cc]
push edi
push esi
call fcn.00423aae
add esp, 0xc
mov ebx, str.No_services_to_register
mov edi, str.Failed_registering_services:__s
cmp eax, 5
jne 0x45425f
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
call fcn.004247ea
call fcn.0044cf95
pop ecx
pop ecx
jmp 0x4542b5
test eax, eax
je 0x4542b5
push dword [0x53f3cc]
push eax
lea eax, [esp + 0x2a0]
push eax
call fcn.0047f660
add esp, 4
mov dword [esp + 0x66c8], 0x187
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push edi
push ecx
call fcn.00478210
add esp, 0xc
call fcn.0044cf95
pop ecx
pop ecx
lea ecx, [esp + 0x298]
mov dword [esp + 0x66c0], 4
call fcn.00426397
mov ecx, esi
call fcn.00424300
push dword [0x53f3cc]
mov esi, eax
test esi, esi
je 0x454089
cmp esi, 5
jne 0x4542de
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebx
jmp 0x4540a8
lea eax, [esp + 0x2ec]
push esi
push eax
call fcn.0047f660
add esp, 4
mov dword [esp + 0x66c8], 0x188
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push edi
push ecx
call fcn.00478210
add esp, 0xc
call fcn.0044cf95
pop ecx
pop ecx
lea ecx, [esp + 0x2e8]
jmp 0x4540f2
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SvcStop
call fcn.004247ea
call fcn.0044c72f
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
mov esi, 0x5432b0
push esi
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x454368
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
push 0
mov ecx, esi
call fcn.00423ea0
mov esi, eax
pop ecx
push dword [0x53f3cc]
test esi, esi
je 0x454089
cmp esi, 5
jne 0x454398
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_services_to_stop
jmp 0x4540a8
lea eax, [esp + 0x2a4]
push esi
push eax
call fcn.0047f660
add esp, 4
mov dword [esp + 0x66c8], 0x189
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Failed_stopping_services:__s
push ecx
call fcn.00478210
add esp, 0xc
call fcn.0044cf95
pop ecx
pop ecx
lea ecx, [esp + 0x2a0]
jmp 0x4540f2
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SvcRemove
call fcn.004247ea
call fcn.0044c72f
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
mov esi, 0x5432b0
push esi
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x454426
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
push 1
mov ecx, esi
call fcn.00423ea0
mov esi, eax
pop ecx
push dword [0x53f3cc]
test esi, esi
je 0x454089
cmp esi, 5
jne 0x454456
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_services_to_remove
jmp 0x4540a8
lea eax, [esp + 0x314]
push esi
push eax
call fcn.0047f660
add esp, 4
mov dword [esp + 0x66c8], 0x18a
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Failed_removing_services:__s
push ecx
call fcn.00478210
add esp, 0xc
call fcn.0044cf95
pop ecx
pop ecx
lea ecx, [esp + 0x310]
jmp 0x4540f2
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.ScmDirectInit
call fcn.004247ea
call fcn.0044c72f
mov dword [esp], 0x513880
call fcn.004cb540
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + esi*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x2ac]
call fcn.004247ea
push ecx
mov dword [esp + 0x66c4], 0x18b
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
mov esi, 0x5432b0
push esi
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x454514
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
push ecx
lea eax, [esp + 0x2ac]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
mov edi, 0x543348
call fcn.004247d5
call fcn.0042ab70
pop ecx
mov edi, esi
call fcn.004246e2
jmp 0x44eddd
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.RepoSync
call fcn.004247ea
call fcn.0044c72f
mov eax, dword [esp + 0x34]
pop ecx
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0x18c]
call fcn.004247ea
lea eax, [esp + 0x5a4]
push eax
mov dword [esp + 0x66c4], 0x18c
call fcn.00426ff3
lea eax, [esp + 0x58c]
push eax
mov byte [esp + 0x66c4], 0x8d
call fcn.00426ff3
lea eax, [esp + 0x5bc]
push eax
mov byte [esp + 0x66c4], 0x8e
call fcn.00426ff3
push 0
lea eax, [esp + 0x5c0]
push eax
lea eax, [esp + 0x594]
push eax
lea eax, [esp + 0x5b0]
push eax
push ecx
mov byte [esp + 0x66d4], 0x8f
lea eax, [esp + 0x19c]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d5
push ecx
mov byte [esp + 0x66d8], 0x90
lea eax, [esp + 0x1a0]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66d8], 0x8f
call fcn.00443d2b
add esp, 0x18
push eax
jmp 0x44eddf
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.MergeRegistry
call fcn.004247ea
call fcn.0044c72f
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
mov esi, 0x5432b0
push esi
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x45465d
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
push esi
call fcn.00445029
pop ecx
mov esi, eax
lea eax, [esp + 0x2f0]
push esi
push eax
call fcn.0047f660
add esp, 4
mov ecx, esp
mov dword [esp + 0x66c4], 0x191
mov dword [esp + 0x18], esp
push dword [eax]
push esi
push str.Loader_MergeRegistry___d__s_
push ecx
call fcn.00478210
add esp, 0x10
call fcn.0044c6ff
pop ecx
lea ecx, [esp + 0x2f0]
mov dword [esp + 0x66c0], 4
call fcn.00426397
push dword [0x53f3cc]
test esi, esi
je 0x454089
lea eax, [esp + 0x2b4]
push esi
push eax
call fcn.0047f660
add esp, 4
mov dword [esp + 0x66c8], 0x192
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Failed:__s
push ecx
call fcn.00478210
add esp, 0xc
call fcn.0044cf95
pop ecx
pop ecx
lea ecx, [esp + 0x2b0]
jmp 0x4540f2
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.OpenFile
call fcn.004247ea
call fcn.0044c72f
mov eax, dword [esp + 0x34]
pop ecx
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0x17c]
call fcn.004247ea
push ecx
mov dword [esp + 0x66c4], 0x193
lea eax, [esp + 0x17c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x334]
push eax
call fcn.004782a0
pop ecx
pop ecx
mov edi, eax
mov byte [esp + 0x66c0], 0x94
call fcn.0042e5f5
push eax
lea ecx, [esp + 0x30]
call fcn.004247d5
lea ecx, [esp + 0x330]
mov byte [esp + 0x66c0], 0x96
call fcn.00426397
mov eax, dword [esp + 0x2c]
cmp dword [eax - 0xc], 0
jne 0x4547b0
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.File_has_no_extension
jmp 0x44edd3
lea ebx, [esp + 0x2c]
call fcn.004572ad
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
push 0x5432b0
call fcn.0042a3d4
xor ebx, ebx
pop ecx
pop ecx
cmp al, bl
jne 0x4547ee
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
mov dword [esp + 0x170], ebx
push 0x3b
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x543384
lea edi, [esp + 0x17c]
call fcn.004247d5
lea eax, [esp + 0xa4]
push eax
call fcn.0047c2b0
add esp, 0xc
or esi, 0xffffffff
mov byte [esp + 0x66c0], 0x97
cmp dword [esp + 0x170], esi
je 0x454a79
mov eax, dword [esp + 0x9c]
cmp dword [eax - 0xc], ebx
jne 0x454859
lea ecx, [esp + 0x9c]
mov byte [esp + 0x66c0], 0x96
call fcn.00426397
jmp 0x4547f5
push 0x3e
push ecx
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov dword [esp + 0xd8], ebx
lea edi, [esp + 0xd8]
call fcn.004247d5
lea eax, [esp + 0xf0]
push eax
call fcn.0047c2b0
add esp, 0xc
mov byte [esp + 0x66c0], 0x98
cmp dword [esp + 0xcc], esi
je 0x4548e1
push 0x3e
push ecx
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x11c]
push eax
call fcn.0047c2b0
add esp, 0xc
mov byte [esp + 0x66c0], 0x99
cmp dword [esp + 0xcc], esi
jne 0x4548f2
lea ecx, [esp + 0x114]
call fcn.00426397
lea ecx, [esp + 0xe8]
call fcn.00426397
jmp 0x454843
mov dword [esp + 0x198], ebx
push 0x2c
push ecx
lea eax, [esp + 0xf0]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
lea edi, [esp + 0x1a4]
call fcn.004247d5
lea eax, [esp + 0xb4]
push eax
call fcn.0047c2b0
add esp, 0xc
mov byte [esp + 0x66c0], 0x9a
cmp dword [esp + 0x198], esi
je 0x454a68
mov eax, dword [esp + 0xac]
cmp dword [eax - 0xc], ebx
jne 0x45495d
lea ecx, [esp + 0xac]
mov byte [esp + 0x66c0], 0x99
call fcn.00426397
jmp 0x4548f9
push dword [esp + 0x2c]
lea eax, [esp + 0xb0]
call fcn.0042486d
test eax, eax
jne 0x454947
lea eax, [esp + 0x114]
push eax
lea ecx, [esp + 0x58]
call fcn.004247d5
mov byte [esp + 0x66c0], 0x9b
push dword [esp + 0x178]
lea eax, [esp + 0x58]
push 0x50f894
push eax
call fcn.0042b6e0
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x58]
push str.OpenFile:_executing:__s
push eax
call fcn.00478210
add esp, 0xc
call fcn.0044c6ff
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
push dword [esp + 0x54]
lea eax, [esp + 0x2bc]
push str._exec__s
push eax
call fcn.00478210
mov eax, dword [eax]
add esp, 0xc
push ebx
push ebx
push eax
push dword [esp + 0x24]
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
xor ecx, ecx
cmp eax, 0x20
setg cl
mov dword [esp + 0x38], ecx
lea ecx, [esp + 0x2b8]
call fcn.00426397
push dword [esp + 0x38]
lea eax, [esp + 0x238]
push eax
call fcn.0047f740
pop ecx
pop ecx
mov edi, eax
mov byte [esp + 0x66c0], 0x9c
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
push dword [edi]
push str.OpenFile:_bExecOK_s__LE_d
push ecx
call fcn.00478210
add esp, 0x10
call fcn.0044c6ff
pop ecx
lea ecx, [esp + 0x234]
call fcn.00426397
cmp dword [esp + 0x38], ebx
jne 0x453d09
call esi
jmp 0x45460e
lea ecx, [esp + 0xac]
call fcn.00426397
jmp 0x4548d5
lea ecx, [esp + 0x9c]
mov byte [esp + 0x66c0], 0x96
call fcn.00426397
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x34]
push str.Application_does_not_handle_this_type_of_files:__s
jmp 0x44ef65
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.FileDialog
call fcn.004247ea
call fcn.0044c72f
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
push 0x5432b0
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x454af0
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x54340c
call fcn.004247d5
call fcn.004a1340
pop ecx
lea eax, [esp + 0x42e4]
push eax
call fcn.00434154
mov dword [esp + 0x66c0], 0x19d
mov ecx, dword [esp + 0x80]
lea eax, [esp + 0x42e4]
push str._FileDialog:
mov dword [ecx + 0x20], eax
call fcn.004cb540
pop ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + esi*4]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x9c]
call fcn.004247ea
lea ecx, [esp + 0x40]
call fcn.0042248a
push ecx
mov byte [esp + 0x66c4], 0x9f
and dword [esp + 0x6c], 0
mov ecx, esp
mov dword [esp + 0x18], esp
mov esi, 0x506fd8
push esi
lea edi, [esp + 0x70]
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0xa0
lea eax, [esp + 0xa0]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x24c]
push eax
mov byte [esp + 0x66cc], 0x9f
call fcn.0047c400
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66c4], 0xa1
call fcn.0042482e
lea ecx, [esp + 0x244]
mov byte [esp + 0x66c0], 0x9f
call fcn.00426397
cmp dword [esp + 0x68], 0xffffffff
jne 0x454bf6
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Invalid_FileDialog_arguments
jmp 0x44edd3
push dword [esp + 0x40]
call fcn.004cdeb1
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
mov dword [esp + 0x88], eax
lea edi, [esp + 0x70]
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0xa2
lea eax, [esp + 0xa0]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x254]
push eax
mov byte [esp + 0x66cc], 0x9f
call fcn.0047c400
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66c4], 0xa3
call fcn.0042482e
lea ecx, [esp + 0x24c]
mov byte [esp + 0x66c0], 0x9f
call fcn.00426397
cmp dword [esp + 0x68], 0xffffffff
jne 0x454c89
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x454bec
push dword [esp + 0x40]
call fcn.004cdeb1
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
mov dword [esp + 0x40], eax
lea edi, [esp + 0x70]
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0xa4
lea eax, [esp + 0xa0]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x28c]
push eax
mov byte [esp + 0x66cc], 0x9f
call fcn.0047c400
add esp, 0xc
mov byte [esp + 0x66c0], 0xa5
cmp dword [esp + 0x68], 0xffffffff
jne 0x454cfb
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x454bec
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
lea edi, [esp + 0x70]
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0xa6
lea eax, [esp + 0xa0]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x284]
push eax
mov byte [esp + 0x66cc], 0xa5
call fcn.0047c400
add esp, 0xc
mov byte [esp + 0x66c0], 0xa7
cmp dword [esp + 0x68], 0xffffffff
jne 0x454d61
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x454bec
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
lea edi, [esp + 0x70]
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0xa8
lea eax, [esp + 0xa0]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x27c]
push eax
mov byte [esp + 0x66cc], 0xa7
call fcn.0047c400
add esp, 0xc
mov byte [esp + 0x66c0], 0xa9
cmp dword [esp + 0x68], 0xffffffff
jne 0x454dc7
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x454bec
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
lea edi, [esp + 0x70]
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0xaa
lea eax, [esp + 0xa0]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x274]
push eax
mov byte [esp + 0x66cc], 0xa9
call fcn.0047c400
add esp, 0xc
mov byte [esp + 0x66c0], 0xab
cmp dword [esp + 0x68], 0xffffffff
jne 0x454e2d
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x454bec
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
lea edi, [esp + 0x70]
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0xac
lea eax, [esp + 0xa0]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x25c]
push eax
mov byte [esp + 0x66cc], 0xab
call fcn.0047c400
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66c4], 0xad
call fcn.0042482e
lea ecx, [esp + 0x254]
mov byte [esp + 0x66c0], 0xab
call fcn.00426397
cmp dword [esp + 0x68], 0xffffffff
jne 0x454eb1
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x454bec
push dword [esp + 0x40]
call fcn.004cdeb1
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
mov dword [esp + 0x84], eax
lea edi, [esp + 0x70]
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0xae
lea eax, [esp + 0xa0]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x264]
push eax
mov byte [esp + 0x66cc], 0xab
call fcn.0047c400
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x66c4], 0xaf
call fcn.0042482e
lea ecx, [esp + 0x25c]
mov byte [esp + 0x66c0], 0xab
call fcn.00426397
cmp dword [esp + 0x68], 0xffffffff
jne 0x454f44
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x454bec
push dword [esp + 0x40]
call fcn.004cdeb1
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
push str.CE.Dlg._x
push ecx
call fcn.00478210
lea eax, [esp + 0x164]
add esp, 0xc
push eax
call fcn.004778e0
pop ecx
pop ecx
lea eax, [esp + 0x434]
push eax
mov byte [esp + 0x66c4], 0xb0
call fcn.00426ff3
push 0
push 0
mov edi, str.CYO_FILEDIALOG_FILTERS
push edi
mov byte [esp + 0x66cc], 0xb1
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push edi
mov dword [esp + 0x30], eax
call fcn.004247ea
mov ecx, dword [esp + 0x2c]
lea eax, [esp + 0x268]
push eax
call fcn.0047e970
pop ecx
pop ecx
mov byte [esp + 0x66c0], 0xb2
and dword [esp + 0x68], 0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
lea edi, [esp + 0x70]
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0xb3
lea eax, [esp + 0x26c]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x110]
push eax
mov byte [esp + 0x66cc], 0xb2
call fcn.0047c400
add esp, 0xc
mov byte [esp + 0x66c0], 0xb4
cmp dword [esp + 0x68], 0xffffffff
je 0x45504d
lea eax, [esp + 0x108]
push eax
lea eax, [esp + 0x438]
call fcn.00424bae
lea ecx, [esp + 0x108]
mov byte [esp + 0x66c0], 0xb2
call fcn.00426397
jmp 0x454fcf
lea ecx, [esp + 0x108]
mov byte [esp + 0x66c0], 0xb2
call fcn.00426397
sub esp, 0x18
mov eax, esp
mov dword [esp + 0x2c], esp
lea ecx, [esp + 0x44c]
push ecx
push eax
call fcn.0042c62b
mov byte [esp + 0x66d8], 0xb5
push dword [esp + 0x94]
lea eax, [esp + 0x288]
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004247d5
push ecx
mov byte [esp + 0x66e4], 0xb6
lea eax, [esp + 0x298]
mov ecx, esp
mov dword [esp + 0x68], esp
push eax
call fcn.004247d5
push ecx
mov byte [esp + 0x66e8], 0xb7
lea eax, [esp + 0x2a4]
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call fcn.004247d5
push ecx
mov byte [esp + 0x66ec], 0xb8
lea eax, [esp + 0x2b0]
mov ecx, esp
mov dword [esp + 0xa8], esp
push eax
call fcn.004247d5
push dword [esp + 0x64]
lea esi, [esp + 0x4314]
push dword [esp + 0xb0]
mov byte [esp + 0x66f4], 0xb2
call fcn.00434569
mov ecx, esi
call fcn.004bdda4
cmp eax, 1
jne 0x455290
push ebx
lea ecx, [esp + 0x150]
call fcn.004247ea
push ecx
mov byte [esp + 0x66c4], 0xb9
mov eax, esp
mov dword [esp + 0x18], esp
push dword [esp + 0x158]
push str.FileDialog:_writing_response_to__s:
push eax
call fcn.00478210
add esp, 0xc
call fcn.0044c6ff
mov eax, dword [esp + 0x441c]
pop ecx
push ebx
lea ecx, [esp + 0xf4]
mov dword [esp + 0x2c], eax
call fcn.004247ea
lea eax, [esp + 0x8c]
lea ecx, [esp + 0x4450]
mov byte [esp + 0x66c0], 0xba
call fcn.00424b84
jmp 0x4551f2
lea esi, [esp + 0x8c]
call fcn.004575f1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [eax]
push str.___FileDialog:__s
push ecx
call fcn.00478210
add esp, 0xc
call fcn.0044c6ff
mov eax, dword [esp + 0xf4]
cmp dword [eax - 0xc], 0
pop ecx
je 0x4551d4
push 0x506fd8
lea ecx, [esp + 0xf4]
call fcn.004261e6
lea esi, [esp + 0x8c]
call fcn.004575f1
push eax
lea ecx, [esp + 0xf4]
call fcn.00424858
call fcn.00424d93
lea eax, [esp + 0x394]
lea ecx, [esp + 0x4450]
call fcn.00424b99
mov edi, eax
lea esi, [esp + 0x8c]
call fcn.00424d76
test al, al
jne 0x45518d
push dword [esp + 0xf0]
lea eax, [esp + 0x290]
push dword [esp + 0x2c]
push str._d__s
push eax
call fcn.00478210
add esp, 0x10
push eax
lea ecx, [esp + 0x150]
mov byte [esp + 0x66c4], 0xbb
call fcn.0042482e
lea ecx, [esp + 0x28c]
mov byte [esp + 0x66c0], 0xba
call fcn.00426397
mov ecx, dword [esp + 0x14c]
mov eax, dword [ecx - 0xc]
push ecx
push ecx
lea edi, [eax + eax]
lea eax, [esp + 0x15c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d5
call fcn.00478be0
jmp 0x44ff74
push 0x800704c7
jmp 0x44eddf
push str.Cameyo.exe__UpgradePkg_
call fcn.004247ea
call fcn.0044c72f
pop ecx
lea ecx, [esp + 0x110]
call fcn.0042248a
mov byte [esp + 0x66c0], 0xbe
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x40]
push dword [eax + ecx*4]
lea ecx, [esp + 0x12c]
call fcn.004247ea
push ecx
mov byte [esp + 0x66c4], 0xbf
lea eax, [esp + 0x12c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
call fcn.0047ad60
pop ecx
test eax, eax
jne 0x455319
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x130]
push str._s_not_found
jmp 0x44ef65
push 0
lea eax, [esp + 0x114]
push eax
push ecx
lea eax, [esp + 0x134]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
push ecx
mov byte [esp + 0x66d0], 0xc0
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004770f0
pop ecx
mov byte [esp + 0x66d0], 0xbf
call fcn.00449cb7
add esp, 0x10
push dword [0x53f3cc]
test eax, eax
jne 0x45537a
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x118]
jmp 0x44ff61
push eax
lea eax, [esp + 0x398]
push eax
call fcn.0047f660
add esp, 4
mov byte [esp + 0x66c8], 0xc1
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x118]
push dword [eax]
push str._s:__s
push ecx
jmp 0x4523ce
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.AuthCheck
call fcn.004247ea
call fcn.0044c72f
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
mov esi, 0x5432b0
push esi
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x4553f6
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
call fcn.0043ae86
xor edi, edi
mov dword [esp + 0x28], eax
cmp eax, edi
je 0x4554a6
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x40]
push str._AuthCheck:Force
push dword [eax + ecx*4]
call fcn.004cb335
pop ecx
pop ecx
lea eax, [esp + 0x294]
push eax
push ecx
mov dword [esp + 0x1c], esp
mov ebx, esp
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.AuthToken.dat
mov dword [esp + 0x2a4], edi
call fcn.004247ea
push ebx
mov ecx, edi
call fcn.00489d50
pop ecx
pop ecx
mov ecx, dword [esp + 0x30]
mov edx, esi
call fcn.0043a59d
push dword [0x53f3cc]
mov esi, eax
push ecx
mov dword [esp + 0x1c], esp
test esi, esi
je 0x45547b
mov ecx, esp
push str.Allowed_to_run_this_package
call fcn.004247ea
jmp 0x455490
mov eax, esp
push 0x543390
push str.Denied:_n
push eax
call fcn.00424a8e
add esp, 0xc
call fcn.0044cf95
neg esi
sbb esi, esi
pop ecx
and esi, 0xffffffef
pop ecx
add esi, 0x11
jmp 0x451335
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.No_authentication_server_specified_in_this_package
jmp 0x44edd3
push str.Vintegrate:
lea ecx, [esp + 0x11c]
call fcn.004247ea
mov dword [esp + 0x66c0], 0x15b
mov eax, dword [esp + 0x30]
lea esi, [eax + esi*4]
push str._VintegrateRecursive
push dword [esi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
je 0x455511
push 0x512e40
call fcn.004cb540
pop ecx
push eax
push str._VintegrateRecursive:
push dword [esi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
jne 0x455522
push str.VintegrateRecursive:
lea ecx, [esp + 0x11c]
call fcn.00424843
push str._Windows_Explorer.exe
lea ecx, [esp + 0x13c]
call fcn.004247ea
mov byte [esp + 0x66c0], 0x5c
mov esi, dword [esi]
push 0x3a
push esi
call fcn.004cc4e8
pop ecx
pop ecx
test eax, eax
je 0x45555b
add eax, 2
push eax
lea ecx, [esp + 0x13c]
call fcn.00424843
push 1
push 0
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x1510]
push eax
call fcn.0048fbd0
push 0xffffffffffffffff
mov byte [esp + 0x66c4], 0x5d
push dword [esp + 0x54]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247ea
push ecx
mov eax, esp
mov byte [esp + 0x66d0], 0x5e
mov dword [esp + 0x2c], esp
lea ecx, [esp + 0x148]
push ecx
lea ecx, [esp + 0x12c]
push ecx
push eax
call fcn.0042c587
add esp, 8
mov byte [esp + 0x66d4], 0x5f
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d5
push 0
push ecx
mov byte [esp + 0x66dc], 0x60
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x1520]
push eax
mov byte [esp + 0x66e0], 0x5d
call fcn.0043fac9
add esp, 0x20
lea eax, [esp + 0x1504]
mov byte [esp + 0x66c0], 0x5c
call fcn.00427a08
mov ecx, dword [esp + 0x138]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x118]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x78]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [esp + 0x5c]
call fcn.00426397
lea ecx, [esp + 0x64]
call fcn.00426397
jmp 0x44ee84
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
push 0x5432b0
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x44ef8a
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
lea ecx, [esp + 0x2c]
call fcn.0042248a
lea ecx, [esp + 0x130]
mov dword [esp + 0x66c0], 0x10b
call fcn.0042248a
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0x66c4], 0xc
call fcn.004247d5
lea eax, [esi + 1]
mov byte [esp + 0x66c0], 0xd
cmp dword [esp + 0x60], eax
jle 0x455707
mov eax, dword [esp + 0x30]
push dword [eax + esi*4 + 4]
lea ecx, [esp + 0x3c]
call fcn.00424843
push 1
push 0
push ecx
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xf70]
push eax
call fcn.0048fbd0
mov byte [esp + 0x66c0], 0xe
push dword [0x53f3cc]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xf70]
push eax
call fcn.0044d00f
add esp, 0x10
cmp dword [esp + 0xfec], 0
jne 0x455773
push str.FAILED_LOADING_CONTAINERS__n
lea ebx, [esp + 0x30]
call fcn.0042785f
pop ecx
lea eax, [esp + 0x130]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Main
call fcn.004247ea
push 3
lea edi, [esp + 0xf70]
call fcn.00491e20
mov eax, dword [esp + 0x130]
xor esi, esi
cmp dword [eax - 0xc], esi
jne 0x4557b6
push str.Cannot_obtain_INI_info_from_resource__n
lea ecx, [esp + 0x30]
call fcn.00426210
lea eax, [esp + 0x130]
push eax
lea ecx, [esp + 0x30]
call fcn.00425328
push esi
push 0x502f0c
push dword [esp + 0x34]
jmp 0x45132e
push str._SaveProperties_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea ecx, [esp + 0x34]
call fcn.0042248a
mov byte [esp + 0x66c0], 0xfe
mov eax, dword [esp + 0x30]
push str._SaveAllProperties
push dword [eax + esi*4]
call fcn.004cb335
mov esi, eax
mov eax, dword [esp + 0x3c]
neg esi
sbb esi, esi
xor edi, edi
pop ecx
inc esi
pop ecx
cmp dword [eax - 0xc], edi
jne 0x455888
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..xml
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0xff
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x2a4]
push eax
mov byte [esp + 0x66cc], 0xfe
call fcn.004783d0
add esp, 0xc
push eax
lea ecx, [esp + 0x38]
mov dword [esp + 0x66c4], 0x100
call fcn.0042482e
mov dword [esp + 0x66c0], 0xfe
mov ecx, dword [esp + 0x29c]
add ecx, 0xfffffff0
call fcn.0042201a
push 1
push edi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xca0]
push eax
call fcn.0048fbd0
mov dword [esp + 0x66c0], 0x101
push dword [0x53f3cc]
lea eax, [esp + 0x50]
push 2
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xca0]
push eax
call fcn.0044d00f
add esp, 0x10
cmp dword [esp + 0xd1c], edi
jne 0x4558f8
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x451413
sub esp, 0x90
mov eax, esp
mov dword [esp + 0xa4], esp
lea ecx, [esp + 0xd24]
push ecx
push eax
call fcn.00457174
push esi
push ecx
mov byte [esp + 0x6758], 2
lea eax, [esp + 0xe4]
mov ecx, esp
mov dword [esp + 0xb4], esp
push eax
call fcn.004247d5
push ecx
mov byte [esp + 0x675c], 3
lea eax, [esp + 0xd0]
mov ecx, esp
mov dword [esp + 0xe0], esp
push eax
call fcn.004247d5
mov byte [esp + 0x675c], 1
call fcn.0042b36c
add esp, 0x9c
cmp eax, edi
jne 0x455986
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x3c]
push str.Cannot_save_into:__s
jmp 0x44ef65
lea eax, [esp + 0xc94]
call fcn.00490ab0
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x3c]
push str.Properties_exported_to:_n_s
push eax
call fcn.00478210
add esp, 0xc
jmp 0x450c15
lea eax, [esp + 0x2c]
push eax
call fcn.004771e0
pop ecx
mov byte [esp + 0x66c0], 0xa7
mov eax, dword [esp + 0x30]
mov edi, 0x511fd8
push edi
lea esi, [eax + esi*4]
call fcn.004cb540
pop ecx
push eax
push str._CreateShortcuts:
push dword [esi]
call fcn.004cdfa6
add esp, 0xc
test eax, eax
jne 0x455a0e
push dword [esi]
lea ecx, [esp + 0x30]
call fcn.00424843
push edi
call fcn.004cb540
pop ecx
push 0
lea ecx, [esp + 0x30]
push ecx
call fcn.00424881
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
push 0x5432b0
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x455a41
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
push 1
xor edi, edi
push edi
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x15a0]
push eax
call fcn.0048fbd0
or esi, 0xffffffff
push esi
push edi
push ecx
mov byte [esp + 0x66cc], 0xa8
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0xa9
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d4], 0xaa
mov ecx, esp
mov dword [esp + 0x58], esp
push ebx
call fcn.004247ea
push 2
push ecx
mov byte [esp + 0x66dc], 0xab
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x15b0]
push eax
mov byte [esp + 0x66e0], 0xa8
call fcn.0043fac9
add esp, 0x20
push 0x5432c0
lea ecx, [esp + 0x3c]
call fcn.004247d5
lea eax, [esp + 0x6c]
push eax
push 0x500024
lea eax, [esp + 0x9c]
mov byte [esp + 0x66c8], 0xac
push eax
lea ecx, [esp + 0x44]
mov dword [esp + 0x78], edi
call fcn.0042b85a
jmp 0x45605a
lea ecx, [esp + 0x34]
call fcn.0042248a
lea ecx, [esp + 0x30]
call fcn.0042248a
lea ecx, [esp + 0x40]
call fcn.0042248a
lea ecx, [esp + 0x50]
call fcn.0042248a
push 0x3e
push ecx
mov byte [esp + 0x66c8], 0xb1
and dword [esp + 0xa8], 0
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
lea edi, [esp + 0xac]
call fcn.004247d5
lea eax, [esp + 0x1b4]
push eax
call fcn.0047c2b0
add esp, 0xc
mov byte [esp + 0x66c0], 0xb2
call fcn.00424930
push eax
lea ecx, [esp + 0x38]
call fcn.0042482e
mov byte [esp + 0x66c0], 0xb1
mov ecx, dword [esp + 0x1ac]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0xa0], esi
jne 0x455bf9
mov ecx, dword [esp + 0x50]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x40]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x34]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x66c0], 0xac
mov ecx, dword [esp + 0x94]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x45603f
push 0x3e
push ecx
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
lea edi, [esp + 0xac]
call fcn.004247d5
lea eax, [esp + 0x1bc]
push eax
call fcn.0047c2b0
add esp, 0xc
mov byte [esp + 0x66c0], 0xb3
call fcn.00424930
push eax
lea ecx, [esp + 0x34]
call fcn.0042482e
mov byte [esp + 0x66c0], 0xb1
mov ecx, dword [esp + 0x1b4]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0xa0], esi
je 0x455bad
push 0x3e
push ecx
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x1c4]
push eax
call fcn.0047c2b0
add esp, 0xc
mov byte [esp + 0x66c0], 0xb4
call fcn.00424930
push eax
lea ecx, [esp + 0x44]
call fcn.0042482e
mov byte [esp + 0x66c0], 0xb1
mov ecx, dword [esp + 0x1bc]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0xa0], esi
jne 0x455cca
push ebx
lea ecx, [esp + 0x44]
call fcn.00424843
jmp 0x455d25
push 0x3e
push ecx
lea eax, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
lea edi, [esp + 0xac]
call fcn.004247d5
lea eax, [esp + 0x1cc]
push eax
call fcn.0047c2b0
add esp, 0xc
mov byte [esp + 0x66c0], 0xb5
call fcn.00424930
push eax
lea ecx, [esp + 0x54]
call fcn.0042482e
mov byte [esp + 0x66c0], 0xb1
mov ecx, dword [esp + 0x1c4]
add ecx, 0xfffffff0
call fcn.0042201a
cmp dword [esp + 0xa0], esi
jne 0x455d38
push ebx
lea ecx, [esp + 0x54]
call fcn.00424843
push dword [esp + 0x34]
lea eax, [esp + 0xdc]
push str._exec___s_
push eax
call fcn.00478210
add esp, 0xc
mov byte [esp + 0x66c0], 0xb6
mov eax, dword [esp + 0x30]
cmp dword [eax - 0xc], 0
je 0x455d85
push 0x507f5c
lea ecx, [esp + 0xdc]
call fcn.004261e6
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0xdc]
call fcn.00424858
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
push ecx
mov esi, esp
mov byte [esp + 0x66c8], 0xb7
mov dword [esp + 0x24], esp
push 0x5c
push ecx
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004247d5
push esi
call fcn.00478540
lea eax, [esp + 0x170]
add esp, 0xc
push eax
mov byte [esp + 0x66cc], 0xb6
call fcn.0042acf7
add esp, 0xc
xor esi, esi
push esi
push esi
push esi
push ecx
mov byte [esp + 0x66d0], 0xb8
lea eax, [esp + 0x16c]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x130]
push esi
push eax
call fcn.00489a30
add esp, 0x14
mov byte [esp + 0x66c4], 0xb9
mov ecx, esp
mov dword [esp + 0x18], esp
mov esi, 0x4fe58c
push esi
call fcn.004247ea
push ecx
mov eax, esp
mov byte [esp + 0x66c8], 0xba
mov dword [esp + 0x24], esp
push str..lnk
lea ecx, [esp + 0x4c]
push ecx
push eax
call fcn.00424a39
add esp, 8
mov byte [esp + 0x66cc], 0xbb
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call fcn.004247d5
lea edi, [esp + 0x1d8]
mov byte [esp + 0x66cc], 0xb9
call fcn.00477ad0
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x1cc]
add ecx, 0xfffffff0
call fcn.0042201a
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
lea eax, [esp + 0x124]
push eax
call fcn.004247d5
call fcn.0047ad60
pop ecx
test eax, eax
je 0x455eb3
lea eax, [esp + 0x120]
jmp 0x455ece
push 0
lea ecx, [esp + 0x1d8]
call fcn.004247ea
mov byte [esp + 0x66c0], 0xbc
or dword [esp + 0x70], 2
mov eax, dword [eax]
push 0
push ecx
mov dword [esp + 0x30], eax
lea eax, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d5
push ecx
mov dword [esp + 0x66cc], 0xbd
lea eax, [esp + 0xe4]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d5
push ecx
mov byte [esp + 0x66d0], 0xbe
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
call fcn.004247d5
push ecx
mov byte [esp + 0x66d4], 0xbf
mov dword [esp + 0x90], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [esp + 0x94], esp
push esi
call fcn.004247ea
push ecx
mov eax, esp
mov byte [esp + 0x66dc], 0xc0
mov dword [esp + 0x9c], esp
push str..lnk
lea ecx, [esp + 0x60]
push ecx
push eax
call fcn.00424a39
add esp, 8
mov byte [esp + 0x66e0], 0xc1
lea eax, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x74], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66e0], 0xbf
call fcn.00477ad0
mov ecx, dword [esp + 0x48]
add esp, 0xc
mov byte [esp + 0x66d4], 0xbc
call fcn.004a7dc0
add esp, 0x14
mov dword [esp + 0x66c0], 0xb9
test byte [esp + 0x70], 2
je 0x455fc8
mov ecx, dword [esp + 0x1d4]
and dword [esp + 0x70], 0xfffffffd
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x120]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x15c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0xd8]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x50]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x40]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0x34]
add ecx, 0xfffffff0
call fcn.0042201a
mov byte [esp + 0x66c0], 0xac
mov ecx, dword [esp + 0x94]
add ecx, 0xfffffff0
call fcn.0042201a
or esi, 0xffffffff
lea eax, [esp + 0x6c]
push eax
push 0x500024
lea eax, [esp + 0x9c]
push eax
lea ecx, [esp + 0x44]
call fcn.0042b85a
cmp dword [esp + 0x6c], esi
jne 0x455b15
mov byte [esp + 0x66c0], 0xac
mov ecx, dword [esp + 0x94]
add ecx, 0xfffffff0
call fcn.0042201a
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5432bc]
push str.Shortcuts_created_for__s.
jmp 0x44ff66
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x38]
call fcn.004247d5
mov byte [esp + 0x66c0], 0x98
mov eax, dword [esp + 0x30]
lea esi, [eax + esi*4]
push str._FullIntegrate
push dword [esi]
mov dword [esp + 0x30], esi
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x456253
push ecx
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
push 0x5432b0
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x456102
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
push dword [esp + 0x58]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x5432bc
call fcn.004247d5
lea eax, [esp + 0x104]
push eax
call fcn.00449c61
add esp, 8
mov byte [esp + 0x66c4], 0x99
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x4fe58c
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0x9a
mov eax, esp
mov dword [esp + 0x24], esp
push dword [0x5432bc]
push str._s.host.exe
push eax
call fcn.00478210
add esp, 8
mov byte [esp + 0x66cc], 0x9b
lea eax, [esp + 0x108]
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call fcn.004247d5
lea edi, [esp + 0x1e8]
mov byte [esp + 0x66cc], 0x99
call fcn.00477ad0
add esp, 0xc
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x66c4], 0x9c
call fcn.0042482e
mov byte [esp + 0x66c0], 0x99
mov ecx, dword [esp + 0x1dc]
add ecx, 0xfffffff0
call fcn.0042201a
mov esi, dword [esp + 0xfc]
call fcn.0047ae40
test eax, eax
jne 0x4561e4
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_create_virtual_repository
jmp 0x44edd3
lea eax, [esp + 0x1e4]
push eax
call fcn.004770f0
mov eax, dword [eax]
pop ecx
push 0
push dword [esp + 0x38]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [esp + 0x1e4]
neg eax
sbb al, al
inc al
add ecx, 0xfffffff0
mov byte [esp + 0x3f], al
call fcn.0042201a
cmp byte [esp + 0x3f], 0
je 0x456238
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Could_not_copy_executable_to_repository
jmp 0x44edd3
mov byte [esp + 0x66c0], 0x98
mov ecx, dword [esp + 0xfc]
add ecx, 0xfffffff0
call fcn.0042201a
mov esi, dword [esp + 0x28]
push 1
xor edi, edi
push edi
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x1090]
push eax
call fcn.0048fbd0
push 0xffffffffffffffff
push edi
push ecx
mov byte [esp + 0x66cc], 0x9d
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x9e
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d4], 0x9f
mov ecx, esp
mov dword [esp + 0x58], esp
push ebx
call fcn.004247ea
push 2
push ecx
mov byte [esp + 0x66dc], 0xa0
lea eax, [esp + 0x50]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x10a0]
push eax
mov byte [esp + 0x66e0], 0x9d
call fcn.0043fac9
push str._Integrate:once
push dword [esi]
call fcn.004cb335
add esp, 0x28
test eax, eax
jne 0x45643c
push ebx
lea ecx, [esp + 0xbc]
call fcn.004247ea
xor esi, esi
push esi
push esi
push esi
push ecx
mov byte [esp + 0x66d0], 0xa1
mov ecx, esp
mov dword [esp + 0x24], esp
push str.Registered
lea edi, [esp + 0xcc]
call fcn.004247ea
mov byte [esp + 0x66d0], 0xa2
push dword [0x5432bc]
lea eax, [esp + 0x200]
push str.SoftwareVOS_s
push eax
call fcn.00478210
add esp, 8
mov byte [esp + 0x66d4], 0xa3
or dword [esp + 0x84], 1
mov ecx, esp
mov dword [esp + 0x30], esp
push str.Integrated
push eax
push ecx
call fcn.00424a39
add esp, 0xc
mov dword [esp + 0x66d4], 0xa4
call fcn.00489090
push eax
mov byte [esp + 0x66d8], 0xa5
call fcn.00478cf0
add esp, 0x18
cmp eax, esi
je 0x4563ae
mov eax, dword [esp + 0xb8]
cmp dword [eax - 0xc], esi
je 0x4563ae
mov bl, 1
jmp 0x4563b0
xor bl, bl
mov dword [esp + 0x66c0], 0xa1
test byte [esp + 0x70], 1
je 0x4563d1
mov ecx, dword [esp + 0x1ec]
add ecx, 0xfffffff0
call fcn.0042201a
test bl, bl
je 0x456423
push str.Success
lea eax, [esp + 0xbc]
call fcn.0042486d
push ecx
test eax, eax
mov dword [esp + 0x18], esp
mov eax, esp
jne 0x456408
push str._Integrate:once:_already_registered_successfully._Quitting.
push eax
call fcn.00478210
pop ecx
pop ecx
call fcn.0044c6ff
jmp 0x451dca
push dword [esp + 0xbc]
push str._Integrate:once:_already_attempted_registration_before__but_failed:__s._Trying_integration_again.
push eax
call fcn.00478210
add esp, 0xc
call fcn.0044c6ff
pop ecx
mov byte [esp + 0x66c0], 0x9d
mov ecx, dword [esp + 0xb8]
add ecx, 0xfffffff0
call fcn.0042201a
xor edi, edi
xor eax, eax
cmp dword [esp + 0x58], edi
push edi
setne al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.AllUsers
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0xa6
mov eax, esp
mov dword [esp + 0x2c], esp
push dword [0x5432bc]
push str.SoftwareVOS_s
push eax
call fcn.00478210
add esp, 0xc
push SysReAllocStringLen
mov byte [esp + 0x66d4], 0x9d
call fcn.004791f0
add esp, 0x14
push dword [esp + 0x58]
lea edx, [esp + 0x1088]
mov ecx, 0x5432b0
call fcn.00443a0d
pop ecx
lea eax, [esp + 0x1084]
call fcn.00490ab0
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5432bc]
push str._s_is_now_integrated_into_your_system.
jmp 0x4559a8
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.00476ed0
test eax, eax
jne 0x45654d
mov eax, dword [esp + 0x30]
xor edi, edi
push edi
push ecx
mov ebx, esp
mov dword [esp + 0x1c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push dword [eax]
xor esi, esi
call fcn.004247ea
push ebx
call fcn.0047e0b0
add esp, 4
mov byte [esp + 0x66cc], 0x3f
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004247d5
mov ecx, esi
mov edx, edi
mov byte [esp + 0x66cc], 4
call fcn.00476cc0
add esp, 0xc
test eax, eax
jne 0x44eddd
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44edce
call fcn.004770a0
test eax, eax
jne 0x456568
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44dcaa
mov eax, dword [esp + 0x30]
push 0x5114fc
lea esi, [eax + esi*4]
call fcn.004cb540
pop ecx
push eax
push str._Patch
push dword [esi]
call fcn.004cdfa6
add esp, 0xc
mov edi, eax
neg edi
lea eax, [esp + 0x18]
sbb edi, edi
push eax
lea ecx, [esp + 0x84]
inc edi
call fcn.004247d5
push ecx
mov byte [esp + 0x66c4], 0x40
mov ecx, esp
mov dword [esp + 0x18], esp
push str..new.exe
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0x41
lea eax, [esp + 0x88]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0xac]
push eax
mov byte [esp + 0x66cc], 0x40
call fcn.004783d0
add esp, 0xc
mov byte [esp + 0x66c0], 0x42
push dword [esp + 0xa4]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [esi]
call fcn.004247ea
lea eax, [esp + 0x110]
push eax
call fcn.0047e0b0
pop ecx
pop ecx
push 1
xor esi, esi
push esi
push ecx
mov byte [esp + 0x66cc], 0x43
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x790]
push eax
call fcn.0048fbd0
mov byte [esp + 0x66c0], 0x44
push dword [0x53f3cc]
cmp dword [esp + 0x810], esi
jne 0x456678
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x20]
push str.Cannot_load_newly_created_package__s
jmp 0x44ef65
push 1
push ecx
lea eax, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x790]
push eax
call fcn.0044d00f
add esp, 0x10
push 0xffffffffffffffff
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x45
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.004247ea
push ecx
mov byte [esp + 0x66d4], 0x46
lea eax, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.004247d5
push 2
push ecx
mov byte [esp + 0x66dc], 0x47
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x7a0]
push eax
mov byte [esp + 0x66e0], 0x44
call fcn.0043fac9
push dword [0x5432bc]
lea eax, [esp + 0x104]
push dword [0x54330c]
push str._sAppVirtDll__s.dll
push eax
call fcn.00478210
add esp, 0x2c
mov byte [esp + 0x66c4], 0x48
lea eax, [esp + 0xe4]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
call fcn.00426eb1
pop ecx
cmp eax, esi
je 0x4567b1
push dword [0x53f3cc]
cmp eax, 0x11
jne 0x456773
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push str.MsiTrackerStart:_Insufficient_permissions_
push eax
call fcn.00478210
pop ecx
pop ecx
jmp 0x44edd8
cmp eax, 0x12
jne 0x456786
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push str.MsiTrackerStart:_Cant_access_services.exe._32_64_bit_mismatch_
jmp 0x456766
push eax
lea eax, [esp + 0x3ac]
push eax
call fcn.0047f660
add esp, 4
mov byte [esp + 0x66c8], 0x49
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.MsiTrackerStart:_Failed:__s
jmp 0x44f592
push dword [esp + 0x10c]
lea eax, [esp + 0x1f8]
push str._exec__s
push eax
call fcn.00478210
mov eax, dword [eax]
add esp, 0xc
push esi
push esi
push eax
push dword [esp + 0x24]
push esi
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [esp + 0x1f4]
xor ebx, ebx
cmp eax, 0x20
setg bl
add ecx, 0xfffffff0
call fcn.0042201a
cmp ebx, esi
je 0x456841
cmp edi, esi
je 0x45680b
push 1
push 0x4feab0
push str.Installation_launched_in_virtual_mode..._nWhen_installation_is_done__click_OK_and_Cameyo_will_turn_it_into_a_virtual_package._nInstallation_will_not_truly_install_anything_on_your_hard_drive__it_is_simulated_.
jmp 0x456816
push esi
push 0x4feab0
push str.When_installation_is_done__click_OK.
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 2
jne 0x456841
push ecx
lea eax, [esp + 0xe4]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
call fcn.00426f38
pop ecx
jmp 0x453e0e
push ecx
lea eax, [esp + 0xe4]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
call fcn.00426f38
pop ecx
cmp eax, esi
je 0x4568bc
push dword [0x53f3cc]
cmp eax, 0x11
jne 0x45687b
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push str.MsiTrackerStop:_Insufficient_permissions_
jmp 0x456766
cmp eax, 0x12
jne 0x456891
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push str.MsiTrackerStop:_Cant_access_services.exe._32_64_bit_mismatch_
jmp 0x456766
push eax
lea eax, [esp + 0x36c]
push eax
call fcn.0047f660
add esp, 4
mov byte [esp + 0x66c8], 0x4a
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.MsiTrackerStop:_Failed:__s
jmp 0x44f592
cmp ebx, esi
jne 0x4568de
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0x114]
push str.Failed_executing__s
jmp 0x44ef65
mov ebx, dword [esp + 0x80]
cmp edi, esi
je 0x4569a2
call fcn.00431da9
push 0x407
mov edi, 0x5432b0
call fcn.00496310
pop ecx
push 0
push dword [esp + 0xa8]
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0xa4]
jne 0x45692f
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44f4b3
push dword [esp + 0x38]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d5
call fcn.00447581
mov esi, eax
pop ecx
pop ecx
test esi, esi
je 0x456995
push dword [esp + 0xa4]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push dword [0x53f3cc]
cmp esi, 0x10
jne 0x456971
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44f562
lea eax, [esp + 0x3ac]
push esi
push eax
call fcn.0047f660
add esp, 4
mov byte [esp + 0x66c8], 0x4b
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44f58b
push 0x404
call fcn.00496310
pop ecx
xor esi, esi
lea eax, [esp + 0x784]
call fcn.00490ab0
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [esp + 0xac]
push 0x5119ec
push eax
call fcn.00478210
add esp, 0xc
call fcn.0044cf95
pop ecx
pop ecx
mov ecx, dword [esp + 0xe0]
add ecx, 0xfffffff0
call fcn.0042201a
lea eax, [esp + 0x784]
mov byte [esp + 0x66c0], 0x43
call fcn.00427a08
mov ecx, dword [esp + 0x10c]
add ecx, 0xfffffff0
call fcn.0042201a
mov ecx, dword [esp + 0xa4]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [ebx - 0x10]
jmp 0x4570e5
lea ecx, [esp + 0x2c]
call fcn.0042248a
lea ecx, [esp + 0x58]
call fcn.0042248a
mov byte [esp + 0x66c0], 0x35
mov eax, dword [esp + 0x30]
lea esi, [eax + esi*4]
push str._CreateDiff
push dword [esi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x456a63
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x30]
call fcn.0042482e
jmp 0x456a7d
push 0x5114b8
call fcn.004cb540
pop ecx
mov ecx, dword [esi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x30]
call fcn.00424843
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..mod
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0x36
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x204]
push eax
mov byte [esp + 0x66cc], 0x35
call fcn.004783d0
add esp, 0xc
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x66c4], 0x37
call fcn.0042482e
mov byte [esp + 0x66c0], 0x35
mov ecx, dword [esp + 0x1fc]
add ecx, 0xfffffff0
call fcn.0042201a
mov edi, dword [esp + 0x58]
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push edi
call esi
mov ebx, dword [esp + 0x2c]
push 0
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x58]
jne 0x456b1d
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44f4b3
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004247d5
call fcn.00447581
pop ecx
pop ecx
mov dword [esp + 0x38], eax
test eax, eax
jne 0x456b95
push dword [0x53f3cc]
lea eax, [esp + 0x5c]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x210]
push eax
call fcn.00478540
add esp, 8
mov byte [esp + 0x66c8], 0x38
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Successfully_repackaged_into:__s
push ecx
call fcn.00478210
add esp, 0xc
call fcn.0044cf95
pop ecx
pop ecx
mov ecx, dword [esp + 0x204]
jmp 0x456d67
push edi
call esi
cmp dword [esp + 0x38], 0x10
push dword [0x53f3cc]
jne 0x456bb1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44f562
push dword [esp + 0x3c]
lea eax, [esp + 0x3a8]
push eax
call fcn.0047f660
add esp, 4
mov byte [esp + 0x66c8], 0x39
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44f58b
lea ecx, [esp + 0x58]
call fcn.0042248a
lea ecx, [esp + 0x34]
call fcn.0042248a
mov byte [esp + 0x66c0], 0x28
mov eax, dword [esp + 0x30]
lea esi, [eax + esi*4]
push str._LearnStreaming
push dword [esi]
call fcn.004cb335
pop ecx
pop ecx
test eax, eax
jne 0x456c1b
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x5c]
call fcn.0042482e
jmp 0x456c35
push 0x511294
call fcn.004cb540
pop ecx
mov ecx, dword [esi]
lea eax, [ecx + eax*2]
push eax
lea ecx, [esp + 0x5c]
call fcn.00424843
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str..new.exe
call fcn.004247ea
push ecx
mov byte [esp + 0x66c8], 0x29
lea eax, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x214]
push eax
mov byte [esp + 0x66cc], 0x28
call fcn.004783d0
add esp, 0xc
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x66c4], 0x2a
call fcn.0042482e
mov byte [esp + 0x66c0], 0x28
mov ecx, dword [esp + 0x20c]
add ecx, 0xfffffff0
call fcn.0042201a
mov edi, dword [esp + 0x34]
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push edi
call esi
mov ebx, dword [esp + 0x58]
push 0
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
lea eax, [esp + 0x34]
jne 0x456cd5
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44f4b3
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004247d5
push ecx
mov byte [esp + 0x66c8], 0x2b
lea eax, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004247d5
mov byte [esp + 0x66c8], 0x28
call fcn.00447b18
pop ecx
pop ecx
mov dword [esp + 0x28], eax
test eax, eax
jne 0x456d7f
push dword [0x53f3cc]
lea eax, [esp + 0x38]
push 0x5c
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004247d5
lea eax, [esp + 0x220]
push eax
call fcn.00478540
add esp, 8
mov byte [esp + 0x66c8], 0x2c
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Successfully_learned_streaming_into:__s
push ecx
call fcn.00478210
add esp, 0xc
call fcn.0044cf95
pop ecx
pop ecx
mov ecx, dword [esp + 0x214]
add ecx, 0xfffffff0
call fcn.0042201a
lea ecx, [edi - 0x10]
call fcn.0042201a
lea ecx, [ebx - 0x10]
jmp 0x44f1b7
push edi
call esi
push dword [0x53f3cc]
lea eax, [esp + 0x3a0]
push dword [esp + 0x2c]
push eax
call fcn.0047f660
add esp, 4
mov byte [esp + 0x66c8], 0x2d
mov ecx, esp
mov dword [esp + 0x1c], esp
push dword [eax]
push str.Could_not_learn_streaming:__s
jmp 0x44f592
mov eax, dword [esp + 0x30]
push str._RemoveSelf
push dword [eax + esi*4]
call fcn.004cb335
mov edi, eax
neg edi
sbb edi, edi
add esp, 4
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
inc edi
call fcn.004247d5
mov ebx, 0x5432b0
push ebx
call fcn.0042a3d4
pop ecx
pop ecx
test al, al
jne 0x456e04
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44ee28
mov eax, dword [0x54330c]
cmp dword [eax - 0xc], 0
jne 0x456e21
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
jmp 0x44f01b
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov esi, 0x54330c
push esi
call fcn.004247d5
call fcn.0047ad60
pop ecx
test eax, eax
jne 0x456e60
test edi, edi
je 0x456e4e
call fcn.0047b880
test eax, eax
jne 0x44eddd
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
jmp 0x44f054
cmp dword [esp + 0x54], 0
je 0x456e89
push 3
push dword [0x5432bc]
push str.Do_you_want_to_remove_the_application_and_all_of_its_settings__files_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
je 0x456e89
push 0x14
pop esi
jmp 0x44ef8c
and dword [esp + 0x164], 0
push 0
lea eax, [esp + 0x168]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.AllUsers
call fcn.004247ea
push ecx
mov byte [esp + 0x66d0], 0x17
mov eax, esp
mov dword [esp + 0x2c], esp
push dword [0x5432bc]
push str.SoftwareVOS_s
push eax
call fcn.00478210
add esp, 0xc
push SysReAllocStringLen
mov byte [esp + 0x66d4], 4
call fcn.00478f70
add esp, 0x14
test eax, eax
je 0x456f3d
cmp dword [esp + 0x164], 0
je 0x456f3d
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.00476ed0
test eax, eax
jne 0x456f22
call fcn.00476f20
test eax, eax
jne 0x44eddd
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44edce
call fcn.004770a0
test eax, eax
jne 0x456f3d
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x44dcaa
push ebx
call fcn.00443b91
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5432bc]
push str.Removing__s
push eax
call fcn.00478210
add esp, 0xc
call fcn.0044c72f
pop ecx
lea ecx, [esp + 0x16c]
call fcn.0042248a
push 0x4fe58c
mov byte [esp + 0x66c4], 0x18
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push 1
push 1
push 1
lea eax, [esp + 0x178]
push eax
push dword [0x53f3cc]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x543308
call fcn.004247d5
push ecx
mov byte [esp + 0x66dc], 0x19
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x543318
call fcn.004247d5
push ecx
mov byte [esp + 0x66e0], 0x1a
mov ecx, esp
mov dword [esp + 0x64], esp
push 0x543314
call fcn.004247d5
push ecx
mov byte [esp + 0x66e4], 0x1b
mov ecx, esp
mov dword [esp + 0x4c], esp
push esi
call fcn.004247d5
push ecx
mov byte [esp + 0x66e8], 0x1c
mov ecx, esp
mov dword [esp + 0xa4], esp
push 0x5432bc
call fcn.004247d5
mov byte [esp + 0x66e8], 0x18
call fcn.004484b1
add esp, 0x24
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004247d5
call fcn.0047ada0
pop ecx
test eax, eax
je 0x45704d
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5432bc]
push str.Base_dir_could_not_be_emptied_for__s
jmp 0x44ef65
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5432bc]
push str.SoftwareVOS_s
push eax
call fcn.00478210
add esp, 0xc
mov edx, SysReAllocStringLen
call fcn.004792f0
xor esi, esi
pop ecx
cmp eax, esi
je 0x45708b
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
jmp 0x44f36f
cmp edi, esi
je 0x45709c
call fcn.0047b880
test eax, eax
jne 0x451335
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.__Removed_successfully
call fcn.004247ea
call fcn.0044c72f
pop ecx
push dword [0x53f3cc]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push dword [0x5432bc]
push str.Application__s_removed_successfully
push eax
call fcn.00478210
add esp, 0xc
call fcn.0044cf95
pop ecx
pop ecx
mov ecx, dword [esp + 0x16c]
add ecx, 0xfffffff0
call fcn.0042201a
jmp 0x44ef8c
cmp dword [0x542f24], esi
je 0x457126
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
push dword [0x5432f8]
push str.CLoaderApp:_waiting_for_LoaderCanQuit__AutoUpdate_s_
push eax
call fcn.00478210
add esp, 0xc
call fcn.0044c6ff
pop ecx
push 0xffffffffffffffff
push dword [0x542f24]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CLoaderApp:_done._Bye_
call fcn.004247ea
call fcn.0044c6ff
mov eax, dword [0x53f3dc]
pop ecx
cmp eax, 0xa2c2a
je 0x451335
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
push str.CLoaderApp:_ExecWait:_g_LoaderExitCode_d
push ecx
call fcn.00478210
add esp, 0xc
call fcn.0044c6ff
pop ecx
push dword [0x53f3dc]
jmp 0x44eddf