Function at 0x404100
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x47411a
mov eax, dword fs:[0]
push eax
sub esp, 0x1b8
mov eax, dword [0x49b7f0]
xor eax, esp
mov dword [esp + 0x1b0], eax
push ebx
push esi
push edi
mov eax, dword [0x49b7f0]
xor eax, esp
push eax
lea eax, [esp + 0x1c8]
mov dword fs:[0], eax
mov esi, ecx
mov ebx, esi
mov dword [esp + 0x38], esi
call fcn.00407f00
call fcn.00409d00
mov dword [esp + 0x80], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0x80]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x80]
mov dword [eax], eax
mov eax, dword [esp + 0x80]
xor ebx, ebx
mov dword [eax + 8], eax
mov dword [esp + 0x84], ebx
mov dword [esp + 0x1d0], ebx
call fcn.00409d00
mov dword [esp + 0xa0], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0xa0]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xa0]
mov dword [eax], eax
mov eax, dword [esp + 0xa0]
mov dword [eax + 8], eax
mov dword [esp + 0xa4], ebx
mov byte [esp + 0x1d0], 1
call fcn.00409d00
mov dword [esp + 0x50], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0x50]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x50]
mov dword [eax], eax
mov eax, dword [esp + 0x50]
mov dword [eax + 8], eax
mov dword [esp + 0x54], ebx
mov byte [esp + 0x1d0], 2
call fcn.00409d00
mov dword [esp + 0xf4], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0xf4]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xf4]
mov dword [eax], eax
mov eax, dword [esp + 0xf4]
mov dword [eax + 8], eax
mov dword [esp + 0xf8], ebx
mov byte [esp + 0x1d0], 3
call fcn.00409d00
mov dword [esp + 0xb0], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0xb0]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [eax], eax
mov eax, dword [esp + 0xb0]
mov dword [eax + 8], eax
mov dword [esp + 0xb4], ebx
mov byte [esp + 0x1d0], 4
call fcn.00442206
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x404285
push 0x80004005
call fcn.00402710
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x34], eax
mov byte [esp + 0x1d0], 5
call fcn.0040cc60
mov dword [esp + 0x3c], eax
call fcn.00442206
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x4042c0
push 0x80004005
call fcn.00402710
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x88], eax
mov byte [esp + 0x1d0], 6
call fcn.00442206
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x4042f5
push 0x80004005
call fcn.00402710
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x8c], eax
mov byte [esp + 0x1d0], 7
call fcn.00442206
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40432a
push 0x80004005
call fcn.00402710
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x48], eax
mov byte [esp + 0x1d0], 8
call fcn.00442206
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40435c
push 0x80004005
call fcn.00402710
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x64], eax
mov byte [esp + 0x1d0], 9
call fcn.00442206
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40438e
push 0x80004005
call fcn.00402710
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x58], eax
mov byte [esp + 0x1d0], 0xa
call fcn.00442206
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x4043c0
push 0x80004005
call fcn.00402710
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x98], eax
mov byte [esp + 0x1d0], 0xb
call fcn.00442206
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x4043f5
push 0x80004005
call fcn.00402710
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x94], eax
add esi, 0x58
mov byte [esp + 0x1d0], 0xc
cmp dword [esi + 0x18], 8
jb 0x40441e
mov eax, dword [esi + 4]
jmp 0x404421
lea eax, [esi + 4]
push eax
lea ecx, [esp + 0x8c]
push str.InstallationId_s
push ecx
call fcn.0040a810
mov edx, dword [ebp + 8]
add esp, 0xc
push edx
lea eax, [esp + 0x90]
push str.EventTypeID_d
push eax
call fcn.0040a810
add esp, 0xc
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0xd
je 0x404476
push esi
mov edi, eax
call fcn.0042b020
mov edi, eax
jmp 0x404478
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xe
push str.InstallationId
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea ecx, [esp + 0x7c]
push ecx
mov ecx, esi
mov byte [esp + 0x1d4], 0xe
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4044d3
mov edx, dword [esp + 0x18]
push edx
call fcn.004344c6
add esp, 4
mov eax, dword [ebp + 8]
push eax
lea ecx, [esp + 0x38]
push 0x483d34
push ecx
call fcn.0040a810
add esp, 0xc
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0xf
je 0x404514
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042af80
mov edi, eax
xor ebx, ebx
jmp 0x404516
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xb
push str.EventTypeID
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea edx, [esp + 0x7c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x10
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404571
mov eax, dword [esp + 0x18]
push eax
call fcn.004344c6
add esp, 4
cmp dword [ebp + 8], 1
jne 0x404805
mov esi, dword [esp + 0x38]
lea ecx, [esp + 0xf0]
push ecx
lea edx, [esp + 0x9c]
push edx
mov ecx, esi
call fcn.004061b0
mov eax, 8
cmp dword [esi + 0xc8], eax
jb 0x4045af
mov ecx, dword [esi + 0xb4]
mov dword [esp + 0x60], ecx
jmp 0x4045b9
lea edx, [esi + 0xb4]
mov dword [esp + 0x60], edx
cmp dword [esi + 0x54], eax
jb 0x4045c3
mov edx, dword [esi + 0x40]
jmp 0x4045c6
lea edx, [esi + 0x40]
mov esi, dword [esp + 0x3c]
lea eax, [esi + 0xa38]
mov dword [esp + 0x40], eax
lea edi, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4045d7
sub eax, edi
sar eax, 1
mov edi, dword [esp + 0x40]
jne 0x4045f2
lea edi, [esi + 0x2f08]
mov eax, dword [esp + 0x60]
push eax
push edx
mov edx, dword [esp + 0xa0]
lea ecx, [esi + 0x38]
push ecx
push edx
mov ecx, esi
call fcn.0040f2f0
push eax
mov eax, dword [esi + 0x20]
push edi
push eax
lea ecx, [esp + 0x80]
push str.InstallationData_brandId_:___d____countryCode_:___s____languageCode_:___d_____MachineData_:__s___TestData_:__s___startTime_:___s____FirstTime_:___s_
push ecx
call fcn.0040a810
add esp, 0x24
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x11
je 0x40466f
mov ecx, dword [esp + 0x40]
lea edi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x404647
mov ebx, dword [esp + 0x40]
sub ecx, edi
sar ecx, 1
jne 0x404662
lea ebx, [esi + 0x2f08]
mov edi, eax
call fcn.0042af80
mov edi, eax
xor ebx, ebx
jmp 0x404671
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xb
push str.countryCode
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea edx, [esp + 0x9c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x12
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4046cf
mov eax, dword [esp + 0x18]
push eax
call fcn.004344c6
add esp, 4
mov ecx, dword [esp + 0x3c]
call fcn.0040f2f0
push eax
lea ecx, [esp + 0x38]
push 0x483d34
push ecx
call fcn.0040a810
add esp, 0xc
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x13
je 0x404716
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042af80
mov edi, eax
xor ebx, ebx
jmp 0x404718
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xc
push str.languageCode
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea edx, [esp + 0x9c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x14
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404776
mov eax, dword [esp + 0x18]
push eax
call fcn.004344c6
add esp, 4
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x15
je 0x4047a3
lea ecx, [esp + 0xf0]
push ecx
mov esi, eax
call fcn.0042b120
mov edi, eax
jmp 0x4047a5
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xb
push str.MachineData
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea edx, [esp + 0x9c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x16
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404815
mov eax, dword [esp + 0x18]
push eax
call fcn.004344c6
add esp, 4
jmp 0x404815
push 0x13
push 0x482ac4
lea ecx, [esp + 0x6c]
call fcn.00402ce0
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x17
je 0x404842
lea ecx, [esp + 0x9c]
push ecx
mov esi, eax
call fcn.0042b120
mov edi, eax
jmp 0x404844
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0x10
push str.InstallationData
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea edx, [esp + 0x7c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x18
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x40489f
mov eax, dword [esp + 0x18]
push eax
call fcn.004344c6
add esp, 4
mov eax, dword [esp + 0x38]
lea ecx, [eax + 0x23c]
mov edi, 8
cmp dword [ecx + 0x18], edi
mov dword [esp + 0x30], ecx
jb 0x4048bc
mov ecx, dword [ecx + 4]
jmp 0x4048bf
add ecx, 4
cmp dword [eax + 0x238], edi
mov dword [esp + 0x60], ecx
lea ecx, [eax + 0x220]
mov dword [esp + 0x5c], ecx
jb 0x4048de
mov edx, dword [ecx + 4]
mov dword [esp + 0x40], edx
jmp 0x4048e5
add ecx, 4
mov dword [esp + 0x40], ecx
cmp dword [eax + 0x28c], edi
lea ecx, [eax + 0x274]
mov dword [esp + 0x6c], ecx
jb 0x4048fc
mov ecx, dword [ecx + 4]
jmp 0x4048ff
add ecx, 4
cmp dword [eax + 0x270], edi
mov dword [esp + 0xe8], ecx
lea ecx, [eax + 0x258]
mov dword [esp + 0x74], ecx
jb 0x404924
mov edx, dword [ecx + 4]
mov dword [esp + 0xe0], edx
jmp 0x40492e
add ecx, 4
mov dword [esp + 0xe0], ecx
cmp dword [eax + 0x218], edi
lea ecx, [eax + 0x200]
mov dword [esp + 0x78], ecx
jb 0x404945
mov ecx, dword [ecx + 4]
jmp 0x404948
add ecx, 4
cmp dword [eax + 0x1a8], edi
mov dword [esp + 0xd0], ecx
lea ecx, [eax + 0x190]
mov dword [esp + 0xb8], ecx
jb 0x404970
mov edx, dword [ecx + 4]
mov dword [esp + 0xc0], edx
jmp 0x40497a
add ecx, 4
mov dword [esp + 0xc0], ecx
cmp dword [eax + 0x1fc], edi
lea ecx, [eax + 0x1e4]
mov dword [esp + 0xa8], ecx
jb 0x404994
mov ecx, dword [ecx + 4]
jmp 0x404997
add ecx, 4
cmp dword [eax + 0x1e0], edi
mov dword [esp + 0xe4], ecx
lea ecx, [eax + 0x1c8]
mov dword [esp + 0xcc], ecx
jb 0x4049bf
mov edx, dword [ecx + 4]
mov dword [esp + 0xec], edx
jmp 0x4049c9
add ecx, 4
mov dword [esp + 0xec], ecx
cmp dword [eax + 0xc8], edi
lea ecx, [eax + 0xb0]
mov dword [esp + 0xc4], ecx
jb 0x4049e3
mov ecx, dword [ecx + 4]
jmp 0x4049e6
add ecx, 4
cmp dword [eax + 0x54], edi
lea esi, [eax + 0x3c]
mov dword [esp + 0x44], ecx
mov dword [esp + 0xbc], esi
jb 0x4049fe
mov esi, dword [esi + 4]
jmp 0x404a01
add esi, 4
cmp dword [eax + 0xac], edi
lea edx, [eax + 0x94]
mov dword [esp + 0x70], edx
jb 0x404a18
mov edx, dword [edx + 4]
jmp 0x404a1b
add edx, 4
add eax, 0x74
cmp dword [eax + 0x18], edi
mov dword [esp + 0x90], eax
jb 0x404a2f
mov ecx, dword [eax + 4]
jmp 0x404a32
lea ecx, [eax + 4]
mov edi, dword [esp + 0x3c]
lea eax, [edi + 0x838]
mov edi, dword [edi + 0x34]
push edi
mov edi, dword [esp + 0x64]
push edi
mov edi, dword [esp + 0x48]
push edi
mov edi, dword [esp + 0xf4]
push edi
push eax
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0xf4]
push eax
mov eax, dword [esp + 0xe8]
push eax
mov eax, dword [esp + 0xdc]
push eax
mov eax, dword [esp + 0x104]
push eax
mov eax, dword [esp + 0x110]
push eax
mov eax, dword [esp + 0x6c]
push eax
mov eax, dword [esp + 0x68]
mov eax, dword [eax + 0x20]
push esi
push eax
push edx
mov edx, dword [esp + 0x70]
mov eax, dword [edx + 0x90]
push eax
push ecx
lea ecx, [esp + 0x88]
push str.EventData_MachineIDGUID_:___s____MachineID_:___lu____InstallerVersion_:___s____brandId_:___d____startTime_:___s____FirstTime_:___s____setupUrl_:___s____AbortingStage_:___s____Duration_:___s____Error_:___s____CID_:___s____Serial_ID_:___s____ClientVersion_:___s____uninstallTime_:___s____uninstallReason_:___s____testVersion_:___d_
push ecx
call fcn.0040a810
push 0x10
call fcn.00434496
add esp, 0x4c
mov dword [esp + 0x44], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x19
je 0x404ad9
mov edx, dword [esp + 0x90]
push edx
mov edi, eax
call fcn.0042b020
mov edi, eax
jmp 0x404adb
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xd
push str.MachineIDGUID
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x1a
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404b36
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004344c6
add esp, 4
mov edx, dword [esp + 0x38]
mov eax, dword [edx + 0x90]
push eax
lea ecx, [esp + 0x38]
push 0x482dc4
push ecx
call fcn.0040a810
add esp, 0xc
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x90], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x1b
je 0x404b81
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042af80
mov edi, eax
xor ebx, ebx
jmp 0x404b83
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 9
push str.MachineID
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea edx, [esp + 0x4c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x1c
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404bde
mov eax, dword [esp + 0x18]
push eax
call fcn.004344c6
add esp, 4
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x90], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x1d
je 0x404c0b
mov ecx, dword [esp + 0x70]
push ecx
mov edi, eax
call fcn.0042b020
mov edi, eax
jmp 0x404c0d
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0x10
push str.InstallerVersion
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea edx, [esp + 0x4c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x1e
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404c68
mov eax, dword [esp + 0x18]
push eax
call fcn.004344c6
add esp, 4
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx + 0x20]
push edx
lea eax, [esp + 0x38]
push 0x483d34
push eax
call fcn.0040a810
add esp, 0xc
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x70], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x1f
je 0x404cad
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042af80
mov edi, eax
xor ebx, ebx
jmp 0x404caf
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 7
push str.brandId
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea ecx, [esp + 0x4c]
push ecx
mov ecx, esi
mov byte [esp + 0x1d4], 0x20
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404d0a
mov edx, dword [esp + 0x18]
push edx
call fcn.004344c6
add esp, 4
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x70], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x21
je 0x404d38
mov ebx, dword [esp + 0x3c]
add ebx, 0x38
mov edi, eax
call fcn.0042af80
mov edi, eax
xor ebx, ebx
jmp 0x404d3a
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 8
push str.TestData
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x22
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404d95
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004344c6
add esp, 4
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x70], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x23
je 0x404dc2
mov edx, dword [esp + 0xbc]
push edx
mov edi, eax
call fcn.0042b020
mov edi, eax
jmp 0x404dc4
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 9
push str.startTime
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x24
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404e1f
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004344c6
add esp, 4
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0xbc], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x25
je 0x404e4f
mov edx, dword [esp + 0xc4]
push edx
mov edi, eax
call fcn.0042b020
mov edi, eax
jmp 0x404e51
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 9
push str.FirstTime
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x26
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404eac
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004344c6
add esp, 4
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0xc4], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x27
je 0x404edc
mov edx, dword [esp + 0xcc]
push edx
mov edi, eax
call fcn.0042b020
mov edi, eax
jmp 0x404ede
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 8
push str.setupUrl
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x28
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404f39
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004344c6
add esp, 4
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0xcc], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x29
je 0x404f69
mov edx, dword [esp + 0xa8]
push edx
mov edi, eax
call fcn.0042b020
mov edi, eax
jmp 0x404f6b
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xd
push str.AbortingStage
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x2a
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404fc6
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004344c6
add esp, 4
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0xa8], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x2b
je 0x404ff6
mov edx, dword [esp + 0xb8]
push edx
mov edi, eax
call fcn.0042b020
mov esi, eax
jmp 0x404ff8
xor esi, esi
mov edx, str.Duration
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x2c
call fcn.00408d80
mov dword [eax], esi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x405042
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004344c6
add esp, 4
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0xb8], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x2d
je 0x40506f
mov edx, dword [esp + 0x78]
push edx
mov edi, eax
call fcn.0042b020
mov edi, eax
jmp 0x405071
xor edi, edi
mov edx, str.Error
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x2e
call fcn.00408d80
mov esi, 8
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], esi
jb 0x4050bf
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004344c6
add esp, 4
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x78], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x2f
je 0x4050e9
mov edx, dword [esp + 0x74]
push edx
mov edi, eax
call fcn.0042b020
mov edi, eax
jmp 0x4050eb
xor edi, edi
mov edx, 0x482ea0
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x30
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], esi
jb 0x405134
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004344c6
add esp, 4
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x74], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x31
je 0x40515f
mov ebx, dword [esp + 0x68]
mov edi, eax
call fcn.0042af80
mov edi, eax
xor ebx, ebx
jmp 0x405161
xor edi, edi
mov esi, dword [esp + 0x38]
mov edx, str.Serial_ID
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x32
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4051af
mov eax, dword [esp + 0x18]
push eax
call fcn.004344c6
add esp, 4
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x68], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x33
je 0x4051d9
mov ecx, dword [esp + 0x6c]
push ecx
mov edi, eax
call fcn.0042b020
mov edi, eax
jmp 0x4051db
xor edi, edi
mov edx, str.ClientVersion
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x34
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x405225
mov eax, dword [esp + 0x18]
push eax
call fcn.004344c6
add esp, 4
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x6c], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x35
je 0x40524f
mov ecx, dword [esp + 0x5c]
push ecx
mov edi, eax
call fcn.0042b020
mov edi, eax
jmp 0x405251
xor edi, edi
mov edx, str.uninstallTime
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x36
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x40529b
mov eax, dword [esp + 0x18]
push eax
call fcn.004344c6
add esp, 4
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x5c], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x37
je 0x4052c5
mov ecx, dword [esp + 0x30]
push ecx
mov edi, eax
call fcn.0042b020
mov edi, eax
jmp 0x4052c7
xor edi, edi
mov edx, str.uninstallReason
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x38
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x405311
mov eax, dword [esp + 0x18]
push eax
call fcn.004344c6
add esp, 4
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx + 0x34]
push edx
lea eax, [esp + 0x38]
push 0x483d34
push eax
call fcn.0040a810
add esp, 0xc
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x39
je 0x40535a
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042af80
mov esi, dword [esp + 0x38]
mov edi, eax
xor ebx, ebx
jmp 0x40535c
xor edi, edi
mov edx, str.testVersion
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea ecx, [esp + 0x4c]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x3a
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4053a6
mov edx, dword [esp + 0x18]
push edx
call fcn.004344c6
add esp, 4
mov eax, dword [ebp + 8]
cmp eax, 0xb
jne 0x4053f4
call fcn.00442206
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x4053c8
push 0x80004005
call fcn.00402710
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x44], eax
lea ecx, [esp + 0x4c]
push ecx
lea edx, [esp + 0x48]
push edx
mov byte [esp + 0x1d8], 0x3b
call fcn.004080f0
jmp 0x405520
cmp eax, 3
jne 0x405564
call fcn.00442206
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x405417
push 0x80004005
call fcn.00402710
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x44], eax
mov byte [esp + 0x1d0], 0x3c
mov ecx, dword [esi + 0x298]
mov edx, dword [esi + 0x294]
mov eax, dword [esi + 0x290]
push ecx
push edx
push eax
lea ecx, [esp + 0x50]
push str._downloadTime_:___lld____isDirect_:___d_
push ecx
call fcn.0040a810
add esp, 0x14
push 0x10
call fcn.00434496
add esp, 4
cmp eax, ebx
je 0x405477
fild qword [esi + 0x290]
mov dword [eax], 3
mov edi, eax
fstp qword [eax + 8]
jmp 0x405479
xor edi, edi
mov edx, str.downloadTime
lea eax, [esp + 0x14]
call fcn.00401360
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x3d
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0x3c
cmp dword [esp + 0x2c], 8
jb 0x4054bb
mov eax, dword [esp + 0x18]
push eax
call fcn.004344c6
add esp, 4
push 0x10
call fcn.00434496
add esp, 4
cmp eax, ebx
je 0x4054dc
fild dword [esi + 0x298]
mov dword [eax], 3
mov edi, eax
fstp qword [eax + 8]
jmp 0x4054de
xor edi, edi
mov edx, str.isDirect
lea eax, [esp + 0x14]
call fcn.00401360
lea ecx, [esp + 0x4c]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x3e
call fcn.00408d80
mov dword [eax], edi
mov byte [esp + 0x1d0], 0x3c
cmp dword [esp + 0x2c], 8
jb 0x405520
mov edx, dword [esp + 0x18]
push edx
call fcn.004344c6
add esp, 4
push 0x482f2c
lea ecx, [esp + 0x4c]
call fcn.00408cb0
mov esi, dword [esp + 0x44]
mov eax, dword [esi - 0xc]
push eax
push esi
lea ecx, [esp + 0x50]
call fcn.00408f00
lea eax, [esi - 0x10]
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x1d0], 0xc
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405564
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x482fbc
lea ecx, [esp + 0x4c]
call fcn.00408cb0
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x3f
je 0x40559c
lea ecx, [esp + 0x4c]
push ecx
mov esi, eax
call fcn.0042b120
mov esi, eax
jmp 0x40559e
xor esi, esi
mov edx, 0x482fc0
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea edx, [esp + 0x7c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x40
call fcn.00408d80
mov dword [eax], esi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4055e8
mov eax, dword [esp + 0x18]
push eax
call fcn.004344c6
add esp, 4
push 0x482fd4
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0x80]
push edx
call fcn.00408bd0
add esp, 0xc
lea ecx, [esp + 0x8c]
push ecx
push eax
lea edx, [esp + 0x7c]
push edx
mov byte [esp + 0x1dc], 0x41
call fcn.00408b10
add esp, 0xc
push 0x482fd4
push eax
lea eax, [esp + 0x70]
push eax
mov byte [esp + 0x1dc], 0x42
call fcn.00408bd0
add esp, 0xc
lea ecx, [esp + 0x64]
push ecx
push eax
lea edx, [esp + 0x74]
push edx
mov byte [esp + 0x1dc], 0x43
call fcn.00408b10
add esp, 0xc
push 0x482fd4
push eax
lea eax, [esp + 0x64]
push eax
mov byte [esp + 0x1dc], 0x44
call fcn.00408bd0
add esp, 0xc
lea ecx, [esp + 0x48]
push ecx
push eax
lea edx, [esp + 0x38]
push edx
mov byte [esp + 0x1dc], 0x45
call fcn.00408b10
add esp, 0xc
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x1d4], 0x46
call fcn.0040a720
mov byte [esp + 0x1d0], 0x45
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4056c9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0x44
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4056f1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0x43
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405719
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0x42
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405741
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0x41
mov eax, dword [esp + 0x74]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405769
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0xc
mov eax, dword [esp + 0x78]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405791
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx + 0x21c]
cmp eax, ebx
jbe 0x4059a4
push eax
lea edx, [esp + 0x44]
push edx
call fcn.00412410
mov esi, dword [esp + 0x40]
mov byte [esp + 0x1d8], 0x47
mov eax, dword [esp + 0x48]
mov ecx, dword [esi + 0x21c]
push eax
push ecx
lea edx, [esp + 0xa4]
push 0x482fd8
push edx
call fcn.0040a810
add esp, 0x18
push 0x482fd4
lea ecx, [esp + 0x5c]
call fcn.004089a0
mov ecx, dword [esp + 0x94]
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x60]
call fcn.00408f00
mov eax, dword [esi + 0x21c]
push eax
lea ecx, [esp + 0x38]
push 0x482dc4
push ecx
call fcn.0040a810
add esp, 0xc
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x48
je 0x405842
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042af80
mov esi, eax
xor ebx, ebx
jmp 0x405844
xor esi, esi
mov edx, str.Code
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x47
call fcn.00401360
lea edx, [esp + 0xac]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x49
call fcn.00408d80
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x47
cmp dword [esp + 0x2c], 8
jb 0x405891
mov eax, dword [esp + 0x18]
push eax
call fcn.004344c6
add esp, 4
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x4a
je 0x4058bc
mov ebx, dword [esp + 0x40]
mov edi, eax
call fcn.0042af80
mov esi, eax
xor ebx, ebx
jmp 0x4058be
xor esi, esi
mov edx, str.Description
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x47
call fcn.00401360
lea ecx, [esp + 0xac]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x4b
call fcn.00408d80
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x47
cmp dword [esp + 0x2c], 8
jb 0x40590b
mov edx, dword [esp + 0x18]
push edx
call fcn.004344c6
add esp, 4
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x4c
je 0x405938
lea ecx, [esp + 0xac]
push ecx
mov esi, eax
call fcn.0042b120
mov esi, eax
jmp 0x40593a
xor esi, esi
mov edx, str.SystemError
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x47
call fcn.00401360
lea edx, [esp + 0x7c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x4d
call fcn.00408d80
mov dword [eax], esi
cmp dword [esp + 0x2c], 8
jb 0x40597c
mov eax, dword [esp + 0x18]
push eax
call fcn.004344c6
add esp, 4
mov byte [esp + 0x1d0], 0xc
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4059a4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [esp + 0x58]
lea eax, [esp + 0x188]
call fcn.00401360
mov byte [esp + 0x1d0], 0x4e
mov eax, dword [esp + 0x18c]
mov edi, 8
cmp dword [esp + 0x1a0], edi
jae 0x4059d8
lea eax, [esp + 0x18c]
mov esi, dword [ebp + 8]
push eax
push esi
push str.Reporting_event:__d__data_sent:__s
push ebx
push 0x11c
push str.CReportinServiceST::DoReportExec
call fcn.00430530
add esp, 0x18
push str.Content_Type:_application_x_www_form_urlencoded_r_n
mov word [esp + 0x140], bx
mov dword [esp + 0x142], ebx
mov dword [esp + 0x146], ebx
mov dword [esp + 0x14a], ebx
mov word [esp + 0x14e], bx
mov word [esp + 0x160], bx
mov dword [esp + 0x162], ebx
mov dword [esp + 0x166], ebx
mov dword [esp + 0x16a], ebx
mov word [esp + 0x16e], bx
mov word [esp + 0x120], bx
mov dword [esp + 0x122], ebx
mov dword [esp + 0x126], ebx
mov dword [esp + 0x12a], ebx
mov word [esp + 0x12e], bx
mov word [esp + 0x110], bx
mov dword [esp + 0x112], ebx
mov dword [esp + 0x116], ebx
mov dword [esp + 0x11a], ebx
mov word [esp + 0x11e], bx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
cmp esi, ebx
mov word [esp + 0x10c], di
mov dword [esp + 0x114], eax
je 0x405b05
sub esp, 0x1c
lea ecx, [esp + 0x1a4]
mov eax, esp
mov dword [esp + 0x4c], esp
call fcn.0040ad40
lea edi, [esp + 0x138]
call fcn.00412340
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + 0x18]
add esp, 0x1c
mov ecx, dword [ecx + 8]
lea edx, [esp + 0x10c]
push edx
mov edx, edi
push edx
lea edx, [esp + 0x164]
push edx
lea edx, [esp + 0x148]
push edx
push eax
push str._bLLLL
push ebx
push ebx
push 1
push 0x68
push ecx
call fcn.0043b2a6
add esp, 0x2c
call fcn.00409d00
mov dword [esp + 0xd8], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0xd8]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xd8]
mov dword [eax], eax
mov eax, dword [esp + 0xd8]
mov dword [eax + 8], eax
mov dword [esp + 0xdc], ebx
push ebx
mov byte [esp + 0x1d4], 0x4f
call fcn.0045208d
mov dword [esp + 0x170], eax
add esp, 4
lea eax, [esp + 0x16c]
push eax
mov esi, str._Y__m__dT_H:_M:_S.000Z
lea edi, [esp + 0xcc]
mov dword [esp + 0x174], edx
call fcn.0040a830
push 0x10
mov byte [esp + 0x1d4], 0x50
call fcn.00434496
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x51
je 0x405ba6
mov ecx, dword [esp + 0x38]
add ecx, 0x20
push ecx
mov edi, eax
call fcn.0042b020
mov esi, eax
jmp 0x405ba8
xor esi, esi
mov edx, str.target
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x50
call fcn.00401360
lea edx, [esp + 0xd4]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x52
call fcn.00408d80
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x50
cmp dword [esp + 0x2c], 8
jb 0x405bf5
mov eax, dword [esp + 0x18]
push eax
call fcn.004344c6
add esp, 4
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x53
je 0x405c23
mov ebx, dword [esp + 0xc8]
mov edi, eax
call fcn.0042af80
mov esi, eax
xor ebx, ebx
jmp 0x405c25
xor esi, esi
mov edx, str.eventDateTime
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x50
call fcn.00401360
lea ecx, [esp + 0xd4]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x54
call fcn.00408d80
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x50
cmp dword [esp + 0x2c], 8
jb 0x405c72
mov edx, dword [esp + 0x18]
push edx
call fcn.004344c6
add esp, 4
push 0x10
call fcn.00434496
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x55
je 0x405c9f
lea ecx, [esp + 0xd4]
push ecx
mov esi, eax
call fcn.0042b120
mov esi, eax
jmp 0x405ca1
xor esi, esi
mov edx, str.eventHeader
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x50
call fcn.00401360
lea edx, [esp + 0x7c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x56
call fcn.00408d80
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x50
cmp dword [esp + 0x2c], 8
jb 0x405ceb
mov eax, dword [esp + 0x18]
push eax
call fcn.004344c6
add esp, 4
push 0x10
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], bx
call fcn.00434496
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x57
je 0x405d28
lea ecx, [esp + 0x7c]
push ecx
mov esi, eax
call fcn.0042b120
mov dword [esp + 0x3c], eax
jmp 0x405d2c
mov dword [esp + 0x3c], ebx
mov ecx, dword [esp + 0x3c]
lea esi, [esp + 0x1a4]
mov byte [esp + 0x1d0], 0x50
call fcn.0042b360
mov byte [esp + 0x1d0], 0x58
xor eax, eax
push str.Content_Type:_application_json_r_n
mov word [esp + 0x150], bx
mov dword [esp + 0x152], eax
mov dword [esp + 0x156], eax
mov dword [esp + 0x15a], eax
mov word [esp + 0x15e], ax
mov word [esp + 0x178], bx
mov dword [esp + 0x17a], eax
mov dword [esp + 0x17e], eax
mov dword [esp + 0x182], eax
mov word [esp + 0x186], ax
mov word [esp + 0x130], bx
mov dword [esp + 0x132], eax
mov dword [esp + 0x136], eax
mov dword [esp + 0x13a], eax
mov word [esp + 0x13e], ax
mov word [esp + 0x100], bx
mov dword [esp + 0x102], eax
mov dword [esp + 0x106], eax
mov dword [esp + 0x10a], eax
mov word [esp + 0x10e], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
sub esp, 0x1c
mov dword [esp + 0x120], eax
mov ecx, esi
mov eax, esp
mov word [esp + 0x118], 8
mov dword [esp + 0x4c], esp
call fcn.0040ad40
lea edi, [esp + 0x148]
call fcn.00412340
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + 0x1c]
add esp, 0x1c
mov ecx, dword [ecx + 0xc]
lea edx, [esp + 0xfc]
push edx
mov edx, edi
push edx
lea edx, [esp + 0x17c]
push edx
lea edx, [esp + 0x158]
push edx
push eax
push str._bLLLL
push ebx
push ebx
push 1
push 0x68
push ecx
call fcn.0043b2a6
add esp, 0x2c
cmp dword [esp + 0x3c], ebx
je 0x405e71
mov esi, dword [esp + 0x3c]
mov ecx, esi
call fcn.0042b1a0
push esi
call fcn.004344c6
add esp, 4
mov edi, dword [esp + 0x38]
call fcn.00406120
mov edi, 8
cmp dword [esp + 0x1bc], edi
jb 0x405e98
mov eax, dword [esp + 0x1a8]
push eax
call fcn.004344c6
add esp, 4
mov byte [esp + 0x1d0], 0x4f
mov eax, dword [esp + 0xc8]
mov esi, 7
add eax, 0xfffffff0
mov dword [esp + 0x1bc], esi
mov dword [esp + 0x1b8], ebx
mov word [esp + 0x1a8], bx
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405ede
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [esp + 0xd4]
mov byte [esp + 0x1d0], 0x4e
call fcn.00409280
cmp dword [esp + 0x1a0], edi
jb 0x405f0b
mov ecx, dword [esp + 0x18c]
push ecx
call fcn.004344c6
add esp, 4
mov byte [esp + 0x1d0], 0xb
mov eax, dword [esp + 0x94]
add eax, 0xfffffff0
mov dword [esp + 0x1a0], esi
mov dword [esp + 0x19c], ebx
mov word [esp + 0x18c], bx
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x405f4c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0xa
mov eax, dword [esp + 0x98]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405f77
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 9
mov eax, dword [esp + 0x58]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405f9f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 8
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405fc7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 7
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405fef
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 6
mov eax, dword [esp + 0x8c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40601a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 5
mov eax, dword [esp + 0x88]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406045
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 4
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40606d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [esp + 0xac]
mov byte [esp + 0x1d0], 3
call fcn.00409280
lea eax, [esp + 0xf0]
mov byte [esp + 0x1d0], 2
call fcn.00409280
lea eax, [esp + 0x4c]
mov byte [esp + 0x1d0], 1
call fcn.00409280
lea eax, [esp + 0x9c]
mov byte [esp + 0x1d0], bl
call fcn.00409280
lea eax, [esp + 0x7c]
mov dword [esp + 0x1d0], 0xffffffff
call fcn.00409280
mov ecx, dword [esp + 0x1c8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1b0]
xor ecx, esp
call fcn.00451053
mov esp, ebp
pop ebp
ret 4