Function at 0x436b10
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using base64
Encode data using xor
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56890a
mov eax, dword fs:[0]
push eax
sub esp, 0x430
mov eax, dword [0x5c524c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x38c], edi
xor eax, eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 7
mov word [ebp - 0x128], ax
push 3
push 0x57c1a8
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 1
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
call fcn.0041cc20
lea eax, [ebp - 0x43c]
mov byte [ebp - 4], 2
push eax
call fcn.004254d0
mov ecx, eax
call fcn.00424630
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 3
push ecx
lea ecx, [ebp - 0x80]
push ecx
mov ecx, dword [eax]
call fcn.0050f270
mov ecx, dword [ebp - 0x438]
or esi, 0xffffffff
mov dword [ebp - 0x360], ecx
test ecx, ecx
je 0x436beb
mov eax, esi
lock xadd dword [ecx + 4], eax
jne 0x436beb
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp - 0x360]
mov eax, esi
lock xadd dword [ecx + 8], eax
jne 0x436beb
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x6c]
mov byte [ebp - 4], 1
cmp edx, 8
jb 0x436c29
mov ecx, dword [ebp - 0x80]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x436c1f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438943
push edx
push ecx
call fcn.004747df
add esp, 8
xor eax, eax
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
cmp dword [ebp - 0x118], eax
jne 0x436dbd
call fcn.00415b60
mov ecx, eax
test ecx, ecx
je 0x438948
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x368], eax
mov eax, 0x5798f8
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x368]
test eax, 0xffff0000
jne 0x436c89
movzx eax, ax
push eax
call fcn.00432b50
jmp 0x436c95
push 0
push 0x5798f8
call fcn.0041aed0
lea ecx, [ebp - 0x355]
mov byte [ebp - 4], 5
mov byte [ebp - 0x355], 0
call fcn.00436780
mov edx, eax
mov dword [ebp - 0x100], 0
mov ecx, edx
mov dword [ebp - 0xfc], 0xf
mov byte [ebp - 0x110], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x360], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x436cd3
sub ecx, dword [ebp - 0x360]
push ecx
push edx
lea ecx, [ebp - 0x110]
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x368]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x3d4]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
lea ecx, [edi + 0x68]
mov byte [ebp - 4], 7
push eax
call fcn.00407d40
mov edx, dword [ebp - 0x3d4]
mov eax, esi
mov byte [ebp - 4], 6
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x436d41
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xfc]
mov byte [ebp - 4], 5
cmp edx, 0x10
jb 0x436d7f
mov ecx, dword [ebp - 0x110]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x436d75
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438952
push edx
push ecx
call fcn.004747df
add esp, 8
mov edx, dword [ebp - 0x368]
mov eax, esi
mov dword [ebp - 0x100], 0
add edx, 0xfffffff0
mov dword [ebp - 0xfc], 0xf
mov byte [ebp - 0x110], 0
mov byte [ebp - 4], 1
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x436e06
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x436e06
cmp dword [ebp - 0x114], 8
lea edx, [ebp - 0x128]
lea eax, [edi + 0x68]
cmovae edx, dword [ebp - 0x128]
test edx, edx
jne 0x436ddc
xor ecx, ecx
jmp 0x436dfd
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x3d4], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x436de7
sub ecx, dword [ebp - 0x3d4]
lea eax, [edi + 0x68]
sar ecx, 1
push ecx
push edx
mov ecx, eax
call fcn.0041aed0
call fcn.00415b60
mov ecx, eax
test ecx, ecx
je 0x438957
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x36c], eax
mov eax, 0x5798f8
mov byte [ebp - 4], 8
shr eax, 0x10
lea ecx, [ebp - 0x36c]
mov dword [ebp - 0x35c], eax
test eax, eax
jne 0x436e51
mov eax, 0x5798f8
movzx eax, ax
push eax
call fcn.00432b50
jmp 0x436e5d
push 0
push 0x5798f8
call fcn.0041aed0
mov byte [ebp - 0x20], 0x69
xor edx, edx
mov byte [ebp - 0x1f], 0x6a
mov edi, 0xf
mov byte [ebp - 0x1e], 0x68
mov byte [ebp - 0x1d], 0x67
mov byte [ebp - 0x1c], 0x5c
mov byte [ebp - 0x1b], 0x73
mov byte [ebp - 0x1a], 0x6d
mov byte [ebp - 0x19], 0x7a
mov byte [ebp - 0x18], 0x7a
mov byte [ebp - 0x17], 0x60
mov byte [ebp - 0x16], 0x67
mov byte [ebp - 0x15], 0x68
mov byte [ebp - 0x14], 9
mov al, byte [ebp - 0x20]
mov byte [ebp - 4], 9
mov dword [ebp - 0x408], edx
mov al, byte [ebp + edx - 0x20]
mov ecx, edx
and ecx, edi
mov byte [ebp - 0x356], al
cmp ecx, edi
mov eax, 0x21d4eb03
mov edx, 0x64868552
cmovae ecx, edi
shl ecx, 2
call fcn.00474aa0
mov edx, dword [ebp - 0x408]
and al, 0xf
lea ecx, [edx + 3]
xor al, cl
xor al, byte [ebp - 0x356]
mov byte [ebp + edx - 0x20], al
inc edx
mov dword [ebp - 0x408], edx
cmp edx, 0xd
jb 0x436ea5
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x24], edi
mov edi, dword [ebp - 0x38c]
lea edx, [ecx + 1]
mov dword [ebp - 0x28], 0
mov byte [ebp - 0x38], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x436f07
sub ecx, edx
lea eax, [ebp - 0x20]
push ecx
push eax
lea ecx, [ebp - 0x38]
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x36c]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x3d0]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
push eax
mov ecx, edi
mov byte [ebp - 4], 0xb
call fcn.00407d40
mov edx, dword [ebp - 0x3d0]
mov eax, esi
mov byte [ebp - 4], 0xa
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x436f6d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov byte [ebp - 4], 9
cmp edx, 0x10
jb 0x436fa5
mov ecx, dword [ebp - 0x38]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x436f9b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438961
push edx
push ecx
call fcn.004747df
add esp, 8
mov edx, dword [ebp - 0x36c]
mov eax, esi
mov dword [ebp - 0x28], 0
add edx, 0xfffffff0
mov dword [ebp - 0x24], 0xf
mov byte [ebp - 0x38], 0
mov byte [ebp - 4], 1
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x436fd8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00415b60
mov ecx, eax
test ecx, ecx
je 0x438966
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x35c], 0
lea ecx, [ebp - 0x370]
mov byte [ebp - 4], 0xc
jne 0x43701a
mov eax, 0x5798f8
movzx eax, ax
push eax
call fcn.00432b50
jmp 0x437026
push 0
push 0x5798f8
call fcn.0041aed0
lea ecx, [ebp - 0x385]
mov byte [ebp - 4], 0xd
call fcn.00436700
mov edx, eax
mov dword [ebp - 0xd0], 0
mov ecx, edx
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x3d0], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437060
sub ecx, dword [ebp - 0x3d0]
push ecx
push edx
lea ecx, [ebp - 0xe0]
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x370]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0x3cc]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
push eax
lea ecx, [edi + 0x74]
mov byte [ebp - 4], 0xf
call fcn.00407d40
mov edx, dword [ebp - 0x3cc]
mov eax, esi
mov byte [ebp - 4], 0xe
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4370ce
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xcc]
mov byte [ebp - 4], 0xd
cmp edx, 0x10
jb 0x43710c
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x437102
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438970
push edx
push ecx
call fcn.004747df
add esp, 8
mov edx, dword [ebp - 0x370]
mov eax, esi
mov dword [ebp - 0xd0], 0
add edx, 0xfffffff0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
mov byte [ebp - 4], 1
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437148
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00415b60
mov ecx, eax
test ecx, ecx
je 0x438975
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x35c], 0
lea ecx, [ebp - 0x374]
mov byte [ebp - 4], 0x10
jne 0x43718a
mov eax, 0x5798f8
movzx eax, ax
push eax
call fcn.00432b50
jmp 0x437196
push 0
push 0x5798f8
call fcn.0041aed0
lea ecx, [ebp - 0x3d6]
mov byte [ebp - 4], 0x11
call fcn.00436680
mov edx, eax
mov dword [ebp - 0xb8], 0
mov ecx, edx
mov dword [ebp - 0xb4], 0xf
mov byte [ebp - 0xc8], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x3cc], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4371d0
sub ecx, dword [ebp - 0x3cc]
push ecx
push edx
lea ecx, [ebp - 0xc8]
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x374]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x430]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
push eax
lea ecx, [edi + 0x70]
mov byte [ebp - 4], 0x13
call fcn.00407d40
mov edx, dword [ebp - 0x430]
mov eax, esi
mov byte [ebp - 4], 0x12
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43723e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xb4]
mov byte [ebp - 4], 0x11
cmp edx, 0x10
jb 0x43727c
mov ecx, dword [ebp - 0xc8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x437272
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43897f
push edx
push ecx
call fcn.004747df
add esp, 8
mov edx, dword [ebp - 0x374]
mov eax, esi
mov dword [ebp - 0xb8], 0
add edx, 0xfffffff0
mov dword [ebp - 0xb4], 0xf
mov byte [ebp - 0xc8], 0
mov byte [ebp - 4], 1
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4372b8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00415b60
mov ecx, eax
test ecx, ecx
je 0x438984
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x35c], 0
lea ecx, [ebp - 0x378]
mov byte [ebp - 4], 0x14
jne 0x4372fa
mov eax, 0x5798f8
movzx eax, ax
push eax
call fcn.00432b50
jmp 0x437306
push 0
push 0x5798f8
call fcn.0041aed0
push 0x11
push str.charge_url_format
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x378]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
push eax
lea ecx, [edi + 0x78]
mov byte [ebp - 4], 0x17
call fcn.00407d40
mov edx, dword [ebp - 0x434]
mov eax, esi
mov byte [ebp - 4], 0x16
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43737c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3c]
mov byte [ebp - 4], 0x15
cmp edx, 0x10
jb 0x4373b4
mov ecx, dword [ebp - 0x50]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4373aa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43898e
push edx
push ecx
call fcn.004747df
add esp, 8
mov edx, dword [ebp - 0x378]
mov eax, esi
mov dword [ebp - 0x40], 0
add edx, 0xfffffff0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
mov byte [ebp - 4], 1
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4373e7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00415b60
mov ecx, eax
test ecx, ecx
je 0x438993
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x35c], 0
lea ecx, [ebp - 0x37c]
mov byte [ebp - 4], 0x18
jne 0x437429
mov eax, 0x5798f8
movzx eax, ax
push eax
call fcn.00432b50
jmp 0x437435
push 0
push 0x5798f8
call fcn.0041aed0
push 0xf
push str.site_url_format
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x19
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0xf
mov byte [ebp - 0xf8], 0
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x37c]
mov byte [ebp - 4], 0x1a
push eax
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
push eax
lea ecx, [edi + 0x6c]
mov byte [ebp - 4], 0x1b
call fcn.00407d40
mov edx, dword [ebp - 0x42c]
mov eax, esi
mov byte [ebp - 4], 0x1a
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4374ba
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xe4]
mov byte [ebp - 4], 0x19
cmp edx, 0x10
jb 0x4374f8
mov ecx, dword [ebp - 0xf8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4374ee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43899d
push edx
push ecx
call fcn.004747df
add esp, 8
mov edx, dword [ebp - 0x37c]
mov eax, esi
mov dword [ebp - 0xe8], 0
add edx, 0xfffffff0
mov dword [ebp - 0xe4], 0xf
mov byte [ebp - 0xf8], 0
mov byte [ebp - 4], 1
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437534
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00415b60
mov ecx, eax
test ecx, ecx
je 0x4389a2
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x35c], 0
lea ecx, [ebp - 0x380]
mov byte [ebp - 4], 0x1c
jne 0x437576
mov eax, 0x5798f8
movzx eax, ax
push eax
call fcn.00432b50
jmp 0x437582
push 0
push 0x5798f8
call fcn.0041aed0
push 0xf
push str.uninst_open_url
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x380]
mov byte [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x3bc]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
push eax
lea ecx, [edi + 0x7c]
mov byte [ebp - 4], 0x1f
call fcn.00407d40
mov edx, dword [ebp - 0x3bc]
mov eax, esi
mov byte [ebp - 4], 0x1e
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4375f8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x54]
mov byte [ebp - 4], 0x1d
cmp edx, 0x10
jb 0x437630
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x437626
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4389ac
push edx
push ecx
call fcn.004747df
add esp, 8
mov edx, dword [ebp - 0x380]
mov eax, esi
mov dword [ebp - 0x58], 0
add edx, 0xfffffff0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
mov byte [ebp - 4], 1
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437663
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00415b60
mov ecx, eax
test ecx, ecx
je 0x4389b1
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x35c], 0
lea ecx, [ebp - 0x384]
mov byte [ebp - 4], 0x20
jne 0x4376a5
mov eax, 0x5798f8
movzx eax, ax
push eax
call fcn.00432b50
jmp 0x4376b1
push 0
push 0x5798f8
call fcn.0041aed0
lea ecx, [ebp - 0x3d5]
mov byte [ebp - 4], 0x21
call fcn.00436510
mov edx, eax
mov dword [ebp - 0xa0], 0
mov ecx, edx
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x3bc], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4376e8
sub ecx, dword [ebp - 0x3bc]
push ecx
push edx
lea ecx, [ebp - 0xb0]
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x384]
mov byte [ebp - 4], 0x22
push eax
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x3b8]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
push eax
lea ecx, [edi + 0x80]
mov byte [ebp - 4], 0x23
call fcn.00407d40
mov edx, dword [ebp - 0x3b8]
mov eax, esi
mov byte [ebp - 4], 0x22
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437759
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x9c]
mov byte [ebp - 4], 0x21
cmp edx, 0x10
jb 0x437797
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43778d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4389bb
push edx
push ecx
call fcn.004747df
add esp, 8
mov edx, dword [ebp - 0x384]
mov eax, esi
mov dword [ebp - 0xa0], 0
add edx, 0xfffffff0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
mov byte [ebp - 4], 1
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4377d3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00415b60
mov ecx, eax
test ecx, ecx
je 0x4389c0
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x35c], 0
lea ecx, [ebp - 0x364]
mov byte [ebp - 4], 0x24
jne 0x437815
mov eax, 0x5798f8
movzx eax, ax
push eax
call fcn.00432b50
jmp 0x437821
push 0
push 0x5798f8
call fcn.0041aed0
lea ecx, [ebp - 0x3c5]
mov byte [ebp - 4], 0x25
call fcn.00436600
mov edx, eax
mov dword [ebp - 0x88], 0
mov ecx, edx
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x3b8], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437858
sub ecx, dword [ebp - 0x3b8]
push ecx
push edx
lea ecx, [ebp - 0x98]
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x364]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x428]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
push eax
lea ecx, [edi + 0x84]
mov byte [ebp - 4], 0x27
call fcn.00407d40
mov edx, dword [ebp - 0x428]
mov eax, esi
mov byte [ebp - 4], 0x26
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4378c9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x84]
mov byte [ebp - 4], 0x25
cmp edx, 0x10
jb 0x437907
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4378fd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4389ca
push edx
push ecx
call fcn.004747df
add esp, 8
mov edx, dword [ebp - 0x364]
mov eax, esi
mov dword [ebp - 0x88], 0
add edx, 0xfffffff0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
mov byte [ebp - 4], 1
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437943
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x13
push str.startmenu_no_uninst
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0xf
mov byte [ebp - 0x140], 0
call fcn.0041cb30
push 0
lea eax, [ebp - 0x140]
mov byte [ebp - 4], 0x28
push eax
lea ecx, [ebp + 8]
call fcn.0050c840
mov edx, dword [ebp - 0x12c]
mov dword [edi + 0xd4], eax
mov byte [ebp - 4], 1
cmp edx, 0x10
jb 0x4379c9
mov ecx, dword [ebp - 0x140]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4379bf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4389cf
push edx
push ecx
call fcn.004747df
add esp, 8
push 0x5798f8
lea ecx, [ebp - 0x404]
call fcn.00406970
push 0xd
push str.tray_icon_tip
lea ecx, [ebp - 0x308]
mov byte [ebp - 4], 0x29
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x2f4], 0xf
mov byte [ebp - 0x308], 0
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x404]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x308]
push eax
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
push eax
lea ecx, [edi + 0x64]
mov byte [ebp - 4], 0x2b
call fcn.00407d40
mov edx, dword [ebp - 0x420]
mov eax, esi
mov byte [ebp - 4], 0x2a
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437a5e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x308]
call fcn.00407770
mov edx, dword [ebp - 0x404]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437a8a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5798f8
lea ecx, [ebp - 0x400]
call fcn.00406970
push 0xb
push str.pattern_str
lea ecx, [ebp - 0x2f0]
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x2dc], 0xf
mov byte [ebp - 0x2f0], 0
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x400]
mov byte [ebp - 4], 0x2d
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
push eax
lea ecx, [edi + 0x90]
mov byte [ebp - 4], 0x2e
call fcn.00407d40
mov edx, dword [ebp - 0x410]
mov eax, esi
mov byte [ebp - 4], 0x2d
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437b22
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x2f0]
call fcn.00407770
mov edx, dword [ebp - 0x400]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437b4e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5798f8
lea ecx, [ebp - 0x3fc]
call fcn.00406970
push 0xc
push str.silence_inst
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], 0x2f
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 0xf
mov byte [ebp - 0x2d8], 0
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x3fc]
mov byte [ebp - 4], 0x30
push eax
lea eax, [ebp - 0x2d8]
push eax
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
push eax
lea ecx, [edi + 0x88]
mov byte [ebp - 4], 0x31
call fcn.00407d40
mov edx, dword [ebp - 0x414]
mov eax, esi
mov byte [ebp - 4], 0x30
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437be6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x2d8]
call fcn.00407770
mov edx, dword [ebp - 0x3fc]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437c12
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5798f8
lea ecx, [ebp - 0x3f8]
call fcn.00406970
push 0x16
push str.run_after_silence_inst
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 0x32
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x2ac], 0xf
mov byte [ebp - 0x2c0], 0
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x3f8]
mov byte [ebp - 4], 0x33
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x418]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
push eax
lea ecx, [edi + 0x50]
mov byte [ebp - 4], 0x34
call fcn.00407d40
mov edx, dword [ebp - 0x418]
mov eax, esi
mov byte [ebp - 4], 0x33
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437ca7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x2c0]
call fcn.00407770
mov edx, dword [ebp - 0x3f8]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437cd3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xc
push str.install_tray
lea ecx, [ebp - 0x2a8]
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0xf
mov byte [ebp - 0x2a8], 0
call fcn.0041cb30
push 0
lea eax, [ebp - 0x2a8]
mov byte [ebp - 4], 0x35
push eax
lea ecx, [ebp + 8]
call fcn.0050c840
lea ecx, [ebp - 0x2a8]
mov dword [edi + 0xc8], eax
mov byte [ebp - 4], 1
call fcn.00407770
push 0x18
push str.delay_install_extra_days
lea ecx, [ebp - 0x290]
mov dword [ebp - 0x280], 0
mov dword [ebp - 0x27c], 0xf
mov byte [ebp - 0x290], 0
call fcn.0041cb30
push 0
lea eax, [ebp - 0x290]
mov byte [ebp - 4], 0x36
push eax
lea ecx, [ebp + 8]
call fcn.0050c840
lea ecx, [ebp - 0x290]
mov dword [edi + 0xcc], eax
mov byte [ebp - 4], 1
call fcn.00407770
push 0x5798f8
lea ecx, [ebp - 0x3f4]
call fcn.00406970
push 0x11
push str.install_open_text
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x37
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 0xf
mov byte [ebp - 0x278], 0
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x3f4]
mov byte [ebp - 4], 0x38
push eax
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x394]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
push eax
lea ecx, [edi + 0x8c]
mov byte [ebp - 4], 0x39
call fcn.00407d40
mov edx, dword [ebp - 0x394]
mov eax, esi
mov byte [ebp - 4], 0x38
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437e19
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x278]
call fcn.00407770
mov edx, dword [ebp - 0x3f4]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437e45
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x13
push str.install_open_select
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0xf
mov byte [ebp - 0x260], 0
call fcn.0041cb30
push 0
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 0x3a
push eax
lea ecx, [ebp + 8]
call fcn.0050c840
lea ecx, [ebp - 0x260]
mov dword [edi + 0xd0], eax
mov byte [ebp - 4], 1
call fcn.00407770
push 0x12
push str.install_show_close
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], 0
call fcn.0041cb30
push 1
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x3b
push eax
lea ecx, [ebp + 8]
call fcn.0050c840
lea ecx, [ebp - 0x248]
mov dword [edi + 0xd8], eax
mov byte [ebp - 4], 1
call fcn.00407770
push 0xe
push str.pepflashplayer
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x204], 0xf
mov byte [ebp - 0x218], 0
call fcn.0041cb30
push 0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x3c
push eax
lea ecx, [ebp + 8]
call fcn.0050c840
lea ecx, [ebp - 0x218]
mov dword [edi + 0xc4], eax
mov byte [ebp - 4], 1
call fcn.00407770
push 0x17
push str.exit_when_close_playwnd
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
call fcn.0041cb30
push 0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x3d
push eax
lea ecx, [ebp + 8]
call fcn.0050c840
lea ecx, [ebp - 0x230]
mov dword [edi + 0xdc], eax
mov byte [ebp - 4], 1
call fcn.00407770
call fcn.00415b60
mov ecx, eax
test ecx, ecx
je 0x4389d4
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x354], eax
mov eax, 0x57bca4
mov byte [ebp - 4], 0x3e
test eax, 0xffff0000
jne 0x437fe1
movzx eax, ax
lea ecx, [ebp - 0x354]
push eax
call fcn.00432b50
jmp 0x438047
push 0
push 0
push 0xffffffffffffffff
push 0x57bca4
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0x354]
lea edi, [eax - 1]
test edi, edi
jle 0x43803c
push edi
call fcn.00438ec0
push edi
push eax
push 0xffffffffffffffff
push 0x57bca4
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov eax, dword [ebp - 0x354]
cmp edi, dword [eax - 8]
jg 0x4389de
mov dword [eax - 0xc], edi
xor ecx, ecx
mov eax, dword [ebp - 0x354]
mov word [eax + edi*2], cx
jmp 0x438041
call fcn.00411560
mov edi, dword [ebp - 0x38c]
lea ecx, [ebp - 0x3bd]
mov byte [ebp - 4], 0x3f
call fcn.00435a50
mov edx, eax
mov dword [ebp - 0x328], 0
mov ecx, edx
mov dword [ebp - 0x324], 0xf
mov byte [ebp - 0x338], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x394], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x438080
sub ecx, dword [ebp - 0x394]
push ecx
push edx
lea ecx, [ebp - 0x338]
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x40
push eax
lea eax, [ebp - 0x338]
push eax
lea eax, [ebp - 0x398]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
push eax
lea ecx, [edi + 4]
mov byte [ebp - 4], 0x41
call fcn.00407d40
mov edx, dword [ebp - 0x398]
mov eax, esi
mov byte [ebp - 4], 0x40
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4380ee
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x338]
call fcn.00407770
mov edx, dword [ebp - 0x354]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43811a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x579c9c
lea ecx, [ebp - 0x3f0]
call fcn.00406970
lea ecx, [ebp - 0x3b4]
mov byte [ebp - 4], 0x42
call fcn.00435e80
mov edx, eax
mov dword [ebp - 0x310], 0
mov ecx, edx
mov dword [ebp - 0x30c], 0xf
mov byte [ebp - 0x320], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x398], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x438161
sub ecx, dword [ebp - 0x398]
push ecx
push edx
lea ecx, [ebp - 0x320]
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x3f0]
mov byte [ebp - 4], 0x43
push eax
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x39c]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
push eax
lea ecx, [edi + 8]
mov byte [ebp - 4], 0x44
call fcn.00407d40
mov edx, dword [ebp - 0x39c]
mov eax, esi
mov byte [ebp - 4], 0x43
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4381cf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x320]
call fcn.00407770
mov edx, dword [ebp - 0x3f0]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4381fb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x579c9c
lea ecx, [ebp - 0x3ec]
call fcn.00406970
lea ecx, [ebp - 0x3b3]
mov byte [ebp - 4], 0x45
call fcn.00435c80
mov edx, eax
mov dword [ebp - 0x1f0], 0
mov ecx, edx
mov dword [ebp - 0x1ec], 0xf
mov byte [ebp - 0x200], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x39c], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x438242
sub ecx, dword [ebp - 0x39c]
push ecx
push edx
lea ecx, [ebp - 0x200]
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x3ec]
mov byte [ebp - 4], 0x46
push eax
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
push eax
lea ecx, [edi + 0xc]
mov byte [ebp - 4], 0x47
call fcn.00407d40
mov edx, dword [ebp - 0x41c]
mov eax, esi
mov byte [ebp - 4], 0x46
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4382b0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x200]
call fcn.00407770
mov edx, dword [ebp - 0x3ec]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4382dc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [0x5c511c]
lea ecx, [ebp - 0x3e8]
call fcn.00406970
push 0xd
push str.platform_type
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x48
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x1d4], 0xf
mov byte [ebp - 0x1e8], 0
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x3e8]
mov byte [ebp - 4], 0x49
push eax
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x3a4]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
lea ecx, [edi + 0x94]
mov byte [ebp - 4], 0x4a
push eax
call fcn.00407d40
mov edx, dword [ebp - 0x3a4]
mov eax, esi
mov byte [ebp - 4], 0x49
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438375
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x1e8]
call fcn.00407770
mov edx, dword [ebp - 0x3e8]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4383a1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5798f8
lea ecx, [ebp - 0x3e4]
call fcn.00406970
lea ecx, [ebp - 0x386]
mov byte [ebp - 4], 0x4b
call fcn.00436000
mov edx, eax
mov dword [ebp - 0x1c0], 0
mov ecx, edx
mov dword [ebp - 0x1bc], 0xf
mov byte [ebp - 0x1d0], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x3a4], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4383e8
sub ecx, dword [ebp - 0x3a4]
push ecx
push edx
lea ecx, [ebp - 0x1d0]
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x3e4]
mov byte [ebp - 4], 0x4c
push eax
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x3a8]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
push eax
lea ecx, [edi + 0x98]
mov byte [ebp - 4], 0x4d
call fcn.00407d40
mov edx, dword [ebp - 0x3a8]
mov eax, esi
mov byte [ebp - 4], 0x4c
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438459
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x1d0]
call fcn.00407770
mov edx, dword [ebp - 0x3e4]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438485
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5798f8
lea ecx, [ebp - 0x3e0]
call fcn.00406970
lea ecx, [ebp - 0x3b2]
mov byte [ebp - 4], 0x4e
call fcn.00436900
mov edx, eax
mov dword [ebp - 0x1a8], 0
mov ecx, edx
mov dword [ebp - 0x1a4], 0xf
mov byte [ebp - 0x1b8], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x3a8], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4384d0
sub ecx, dword [ebp - 0x3a8]
push ecx
push edx
lea ecx, [ebp - 0x1b8]
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x3e0]
mov byte [ebp - 4], 0x4f
push eax
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x3ac]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
push eax
lea ecx, [edi + 0x9c]
mov byte [ebp - 4], 0x50
call fcn.00407d40
mov edx, dword [ebp - 0x3ac]
mov eax, esi
mov byte [ebp - 4], 0x4f
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438541
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x1b8]
call fcn.00407770
mov edx, dword [ebp - 0x3e0]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43856d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5798f8
lea ecx, [ebp - 0x40c]
call fcn.00406970
lea ecx, [ebp - 0x3b1]
mov byte [ebp - 4], 0x51
call fcn.004367f0
mov edx, eax
mov dword [ebp - 0x190], 0
mov ecx, edx
mov dword [ebp - 0x18c], 0xf
mov byte [ebp - 0x1a0], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x3ac], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4385b4
sub ecx, dword [ebp - 0x3ac]
push ecx
push edx
lea ecx, [ebp - 0x1a0]
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x40c]
mov byte [ebp - 4], 0x52
push eax
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
push eax
lea ecx, [edi + 0xa0]
mov byte [ebp - 4], 0x53
call fcn.00407d40
mov edx, dword [ebp - 0x3b0]
mov eax, esi
mov byte [ebp - 4], 0x52
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438625
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x1a0]
call fcn.00407770
mov edx, dword [ebp - 0x40c]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438651
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5798f8
lea ecx, [ebp - 0x3dc]
call fcn.00406970
lea ecx, [ebp - 0x38d]
mov byte [ebp - 4], 0x54
call fcn.00436590
mov edx, eax
mov dword [ebp - 0x178], 0
mov ecx, edx
mov dword [ebp - 0x174], 0xf
mov byte [ebp - 0x188], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x3b0], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x438698
sub ecx, dword [ebp - 0x3b0]
push ecx
push edx
lea ecx, [ebp - 0x188]
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x3dc]
mov byte [ebp - 4], 0x55
push eax
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x3c4]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
push eax
lea ecx, [edi + 0xa4]
mov byte [ebp - 4], 0x56
call fcn.00407d40
mov edx, dword [ebp - 0x3c4]
mov eax, esi
mov byte [ebp - 4], 0x55
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438709
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x188]
call fcn.00407770
mov edx, dword [ebp - 0x3dc]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438735
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5798f8
lea ecx, [ebp - 0x360]
call fcn.00406970
lea ecx, [ebp - 0x39d]
mov byte [ebp - 4], 0x57
call fcn.004361b0
mov edx, eax
mov dword [ebp - 0x160], 0
mov ecx, edx
mov dword [ebp - 0x15c], 0xf
mov byte [ebp - 0x170], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x3c4], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x438780
sub ecx, dword [ebp - 0x3c4]
push ecx
push edx
lea ecx, [ebp - 0x170]
call fcn.0041cb30
push 0xfde9
lea eax, [ebp - 0x360]
mov byte [ebp - 4], 0x58
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp + 8]
call fcn.0050cd20
push eax
lea ecx, [edi + 0xa8]
mov byte [ebp - 4], 0x59
call fcn.00407d40
mov edx, dword [ebp - 0x424]
mov eax, esi
mov byte [ebp - 4], 0x58
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4387f1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x170]
call fcn.00407770
mov edx, dword [ebp - 0x360]
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x43881b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0x5799a4
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x144], 0xf
mov byte [ebp - 0x158], 0
call fcn.0041cb30
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 0x5a
push eax
lea eax, [ebp - 0x350]
push eax
lea ecx, [ebp + 8]
call fcn.0050d4a0
mov esi, eax
lea eax, [edi + 0xac]
cmp eax, esi
je 0x43889d
mov ecx, eax
call fcn.00407770
movups xmm0, xmmword [esi]
movups xmmword [edi + 0xac], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [edi + 0xbc], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
lea ecx, [ebp - 0x350]
call fcn.00407770
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 1
call fcn.00407770
lea eax, [edi + 0x94]
push eax
call fcn.00415ad0
mov ecx, eax
call fcn.0041f4d0
mov eax, dword [edi]
cmp dword [eax - 0xc], 0
je 0x43890f
mov eax, dword [edi + 0x14]
cmp dword [eax - 0xc], 0
je 0x43890f
mov eax, dword [edi + 0x10]
cmp dword [eax - 0xc], 0
je 0x43890f
mov eax, dword [edi + 0x1c]
cmp dword [eax - 0xc], 0
je 0x43890f
mov eax, dword [edi + 0x20]
cmp dword [eax - 0xc], 0
je 0x43890f
mov eax, dword [edi + 0x18]
cmp dword [eax - 0xc], 0
je 0x43890f
mov eax, dword [edi + 0x68]
cmp dword [eax - 0xc], 0
je 0x43890f
mov esi, 1
jmp 0x438911
xor esi, esi
lea ecx, [ebp - 0x128]
call fcn.004077c0
lea ecx, [ebp + 8]
call fcn.00509830
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0047467d
mov esp, ebp
pop ebp
ret 0x18
call fcn.00522e79
push 0x80004005
call fcn.0040e300
call fcn.00522e79
push 0x80004005
call fcn.0040e300
call fcn.00522e79
push 0x80004005
call fcn.0040e300
call fcn.00522e79
push 0x80004005
call fcn.0040e300
call fcn.00522e79
push 0x80004005
call fcn.0040e300
call fcn.00522e79
push 0x80004005
call fcn.0040e300
call fcn.00522e79
push 0x80004005
call fcn.0040e300
call fcn.00522e79
push 0x80004005
call fcn.0040e300
call fcn.00522e79
push 0x80004005
call fcn.0040e300
call fcn.00522e79
call fcn.00522e79
push 0x80004005
call fcn.0040e300
push 0x80070057
call fcn.0040e300
int3