Function at 0x4387d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x562f30
mov eax, dword fs:[0]
push eax
sub esp, 0xd4
mov eax, dword [0x5bf094]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
push str.MRSputnikData
push eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x6c], ecx
call fcn.00404810
lea ecx, [ebp - 0x64]
xor ebx, ebx
push ecx
mov dword [ebp - 4], ebx
call fcn.00419d70
add esp, 0x10
test al, al
jne 0x438834
lea edx, [ebp - 0x64]
push edx
call fcn.004392d0
add esp, 4
push str.install_options.xml
lea ecx, [ebp - 0x64]
call fcn.00404090
lea ecx, [ebp - 0xe0]
call fcn.005522d0
push 0x30
mov edi, 0xf
push str.__xml_version_1.0__encoding_UTF_8____params___
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.004028f0
push ebx
push 1
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 2
call fcn.005518c0
mov esi, 0x10
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], esi
jb 0x43889d
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004b8946
add esp, 4
push ebx
push str.params
lea ecx, [ebp - 0xe0]
call fcn.00555180
push str.param
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x68], eax
call fcn.005525b0
push 4
push str.name
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.004028f0
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 4
call fcn.00436010
push str.partner_referer
lea edx, [ebp - 0x48]
push edx
lea ecx, [ebp - 0x8c]
call fcn.00436670
mov ecx, dword [ebp - 0x84]
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 5
call fcn.0054cd80
cmp dword [ebp - 0x34], esi
jb 0x438925
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004b8946
add esp, 4
mov byte [ebp - 4], 3
cmp dword [ebp - 0x18], esi
jb 0x43893a
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004b8946
add esp, 4
push 5
push str.value
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.004028f0
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 6
call fcn.00436010
mov eax, dword [ebp - 0x6c]
add eax, 4
push eax
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x8c]
call fcn.00433ee0
mov ecx, dword [ebp - 0x84]
push eax
lea edx, [ebp - 0x2c]
push edx
mov byte [ebp - 4], 7
call fcn.0054cd80
cmp dword [ebp - 0x34], esi
jb 0x43899c
mov eax, dword [ebp - 0x48]
push eax
call fcn.004b8946
add esp, 4
mov byte [ebp - 4], 3
cmp dword [ebp - 0x18], esi
jb 0x4389b1
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004b8946
add esp, 4
mov ecx, dword [ebp - 0x68]
lea edx, [ebp - 0x8c]
push edx
call fcn.00553c40
push str.param
lea ecx, [ebp - 0xb0]
call fcn.005525b0
push 4
push str.name
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 8
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.004028f0
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 9
call fcn.00436010
push str.default_search
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0xb0]
call fcn.00436670
push eax
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, dword [ebp - 0xa8]
mov byte [ebp - 4], 0xa
call fcn.0054cd80
cmp dword [ebp - 0x34], esi
jb 0x438a34
mov edx, dword [ebp - 0x48]
push edx
call fcn.004b8946
add esp, 4
mov byte [ebp - 4], 8
cmp dword [ebp - 0x18], esi
jb 0x438a49
mov eax, dword [ebp - 0x2c]
push eax
call fcn.004b8946
add esp, 4
mov ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x74], 0x58820c
cmp byte [ecx], bl
jne 0x438a5e
mov dword [ebp - 0x74], 0x588768
push 5
push str.value
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.004028f0
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0xb
call fcn.00436010
lea edx, [ebp - 0x74]
push edx
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0xb0]
call fcn.00436960
push eax
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, dword [ebp - 0xa8]
mov byte [ebp - 4], 0xc
call fcn.0054cd80
cmp dword [ebp - 0x34], esi
jb 0x438abd
mov edx, dword [ebp - 0x48]
push edx
call fcn.004b8946
add esp, 4
mov byte [ebp - 4], 8
cmp dword [ebp - 0x18], esi
jb 0x438ad2
mov eax, dword [ebp - 0x2c]
push eax
call fcn.004b8946
add esp, 4
lea ecx, [ebp - 0xb0]
push ecx
mov ecx, dword [ebp - 0x68]
call fcn.00553c40
push str.param
lea ecx, [ebp - 0xa4]
call fcn.005525b0
push 4
push str.name
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.004028f0
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0xe
call fcn.00436010
push 0x588760
lea edx, [ebp - 0x48]
push edx
lea ecx, [ebp - 0xa4]
call fcn.00436670
mov ecx, dword [ebp - 0x9c]
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0xf
call fcn.0054cd80
cmp dword [ebp - 0x34], esi
jb 0x438b55
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004b8946
add esp, 4
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x18], esi
jb 0x438b6a
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004b8946
add esp, 4
push 5
push str.value
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.004028f0
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x10
call fcn.00436010
mov eax, dword [ebp - 0x6c]
add eax, 0x78
push eax
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0xa4]
call fcn.00433ee0
mov ecx, dword [ebp - 0x9c]
push eax
lea edx, [ebp - 0x2c]
push edx
mov byte [ebp - 4], 0x11
call fcn.0054cd80
cmp dword [ebp - 0x34], esi
jb 0x438bcc
mov eax, dword [ebp - 0x48]
push eax
call fcn.004b8946
add esp, 4
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x18], esi
jb 0x438be1
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004b8946
add esp, 4
mov ecx, dword [ebp - 0x68]
lea edx, [ebp - 0xa4]
push edx
call fcn.00553c40
push str.param
lea ecx, [ebp - 0x98]
call fcn.005525b0
mov eax, dword [ebp - 0x6c]
mov byte [ebp - 4], 0x12
cmp byte [eax + 1], bl
jne 0x438d09
push 4
push str.name
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.004028f0
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x13
call fcn.00436010
push 0x588754
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x98]
call fcn.00436670
mov ecx, dword [ebp - 0x90]
push eax
lea edx, [ebp - 0x2c]
push edx
mov byte [ebp - 4], 0x14
call fcn.0054cd80
cmp dword [ebp - 0x34], esi
jb 0x438c70
mov eax, dword [ebp - 0x48]
push eax
call fcn.004b8946
add esp, 4
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x18], esi
jb 0x438c85
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004b8946
add esp, 4
push 5
push str.value
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.004028f0
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x15
call fcn.00436010
push 0x58820c
lea edx, [ebp - 0x48]
push edx
lea ecx, [ebp - 0x98]
call fcn.00436670
mov ecx, dword [ebp - 0x90]
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x16
call fcn.0054cd80
cmp dword [ebp - 0x34], esi
jb 0x438ce5
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004b8946
add esp, 4
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x18], esi
jb 0x438cfa
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004b8946
add esp, 4
mov ecx, dword [ebp - 0x68]
lea eax, [ebp - 0x98]
push eax
call fcn.00553c40
push str.param
lea ecx, [ebp - 0x80]
call fcn.005525b0
push 4
push str.name
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.004028f0
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x18
call fcn.00436010
push str.shortmode
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x80]
call fcn.00436670
mov ecx, dword [ebp - 0x78]
push eax
lea edx, [ebp - 0x2c]
push edx
mov byte [ebp - 4], 0x19
call fcn.0054cd80
cmp dword [ebp - 0x34], esi
jb 0x438d71
mov eax, dword [ebp - 0x48]
push eax
call fcn.004b8946
add esp, 4
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x18], esi
jb 0x438d86
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004b8946
add esp, 4
mov edx, dword [ebp - 0x6c]
cmp byte [edx + 0x20], bl
push 5
setne al
push str.value
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x6d], al
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.004028f0
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x1a
call fcn.00436010
lea ecx, [ebp - 0x6d]
push ecx
lea edx, [ebp - 0x48]
push edx
lea ecx, [ebp - 0x80]
call fcn.00436c50
mov ecx, dword [ebp - 0x78]
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0054cd80
cmp dword [ebp - 0x34], esi
jb 0x438de8
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004b8946
add esp, 4
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x18], esi
jb 0x438dfd
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004b8946
add esp, 4
mov ecx, dword [ebp - 0x68]
lea eax, [ebp - 0x80]
push eax
call fcn.00553c40
push str.param
lea ecx, [ebp - 0xd4]
call fcn.005525b0
push 4
push str.name
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.004028f0
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x1d
call fcn.00436010
push 0x588738
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.00436670
mov ecx, dword [ebp - 0xcc]
push eax
lea edx, [ebp - 0x2c]
push edx
mov byte [ebp - 4], 0x1e
call fcn.0054cd80
cmp dword [ebp - 0x34], esi
jb 0x438e7d
mov eax, dword [ebp - 0x48]
push eax
call fcn.004b8946
add esp, 4
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x18], esi
jb 0x438e92
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004b8946
add esp, 4
push 5
push str.value
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.004028f0
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x1f
call fcn.00436010
mov edx, dword [ebp - 0x6c]
add edx, 0x24
push edx
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0xd4]
call fcn.00433ee0
push eax
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, dword [ebp - 0xcc]
mov byte [ebp - 4], 0x20
call fcn.0054cd80
cmp dword [ebp - 0x34], esi
jb 0x438ef4
mov edx, dword [ebp - 0x48]
push edx
call fcn.004b8946
add esp, 4
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x18], esi
jb 0x438f09
mov eax, dword [ebp - 0x2c]
push eax
call fcn.004b8946
add esp, 4
lea ecx, [ebp - 0xd4]
push ecx
mov ecx, dword [ebp - 0x68]
call fcn.00553c40
push str.param
lea ecx, [ebp - 0xbc]
call fcn.005525b0
push 4
push str.name
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.004028f0
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x22
call fcn.00436010
push 0x588724
lea edx, [ebp - 0x48]
push edx
lea ecx, [ebp - 0xbc]
call fcn.00436670
mov ecx, dword [ebp - 0xb4]
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x23
call fcn.0054cd80
cmp dword [ebp - 0x34], esi
jb 0x438f8c
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004b8946
add esp, 4
mov byte [ebp - 4], 0x21
cmp dword [ebp - 0x18], esi
jb 0x438fa1
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004b8946
add esp, 4
push 5
push str.value
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.004028f0
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x24
call fcn.00436010
mov eax, dword [ebp - 0x6c]
add eax, 0x40
push eax
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0xbc]
call fcn.00433ee0
mov ecx, dword [ebp - 0xb4]
push eax
lea edx, [ebp - 0x2c]
push edx
mov byte [ebp - 4], 0x25
call fcn.0054cd80
cmp dword [ebp - 0x34], esi
jb 0x439003
mov eax, dword [ebp - 0x48]
push eax
call fcn.004b8946
add esp, 4
mov byte [ebp - 4], 0x21
cmp dword [ebp - 0x18], esi
jb 0x439018
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004b8946
add esp, 4
mov ecx, dword [ebp - 0x68]
lea edx, [ebp - 0xbc]
push edx
call fcn.00553c40
push str.param
lea ecx, [ebp - 0xc8]
call fcn.005525b0
push 4
push str.name
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x26
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.004028f0
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x27
call fcn.00436010
push 0x58871c
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0xc8]
call fcn.00436670
push eax
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, dword [ebp - 0xc0]
mov byte [ebp - 4], 0x28
call fcn.0054cd80
cmp dword [ebp - 0x34], esi
jb 0x43909b
mov edx, dword [ebp - 0x48]
push edx
call fcn.004b8946
add esp, 4
mov byte [ebp - 4], 0x26
cmp dword [ebp - 0x18], esi
jb 0x4390b0
mov eax, dword [ebp - 0x2c]
push eax
call fcn.004b8946
add esp, 4
push 5
push str.value
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.004028f0
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x29
call fcn.00436010
mov ecx, dword [ebp - 0x6c]
add ecx, 0x5c
push ecx
lea edx, [ebp - 0x48]
push edx
lea ecx, [ebp - 0xc8]
call fcn.00433ee0
mov ecx, dword [ebp - 0xc0]
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x2a
call fcn.0054cd80
cmp dword [ebp - 0x34], esi
jb 0x439112
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004b8946
add esp, 4
mov byte [ebp - 4], 0x26
cmp dword [ebp - 0x18], esi
jb 0x439127
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004b8946
add esp, 4
mov ecx, dword [ebp - 0x68]
lea eax, [ebp - 0xc8]
push eax
call fcn.00553c40
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x64]
call fcn.00404eb0
mov dword [ebp - 0x74], eax
mov byte [ebp - 4], 0x2b
call dword [sym.imp.KERNEL32.dll_GetACP]
mov edx, dword [ebp - 0x74]
mov dword [ebp - 0x68], eax
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x68]
call fcn.00417080
push eax
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x2c
call fcn.005516f0
cmp dword [ebp - 0x18], esi
jb 0x439183
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004b8946
add esp, 4
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
mov ebx, 8
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x34], ebx
jb 0x4391a2
mov edx, dword [ebp - 0x48]
push edx
call fcn.004b8946
add esp, 4
mov edi, vtable.ticpp::NodeImp_class_TiXmlElement_.0
mov dword [ebp - 0xc8], edi
mov ecx, dword [ebp - 0xc4]
mov byte [ebp - 4], 0x2d
call fcn.0054fcc0
mov esi, vtable.ticpp::Base.0
mov dword [ebp - 0xc8], esi
mov dword [ebp - 0xbc], edi
mov ecx, dword [ebp - 0xb8]
mov byte [ebp - 4], 0x2e
call fcn.0054fcc0
mov dword [ebp - 0xbc], esi
mov dword [ebp - 0xd4], edi
mov ecx, dword [ebp - 0xd0]
mov byte [ebp - 4], 0x2f
call fcn.0054fcc0
mov dword [ebp - 0xd4], esi
mov dword [ebp - 0x80], edi
mov ecx, dword [ebp - 0x7c]
mov byte [ebp - 4], 0x30
call fcn.0054fcc0
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x98], edi
mov ecx, dword [ebp - 0x94]
mov byte [ebp - 4], 0x31
call fcn.0054fcc0
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xa4], edi
mov ecx, dword [ebp - 0xa0]
mov byte [ebp - 4], 0x32
call fcn.0054fcc0
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xb0], edi
mov ecx, dword [ebp - 0xac]
mov byte [ebp - 4], 0x33
call fcn.0054fcc0
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0x8c], edi
mov ecx, dword [ebp - 0x88]
mov byte [ebp - 4], 0x34
call fcn.0054fcc0
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0xe0], vtable.ticpp::NodeImp_class_TiXmlDocument_.0
mov ecx, dword [ebp - 0xdc]
mov byte [ebp - 4], 0x35
call fcn.0054fcc0
mov dword [ebp - 0xe0], esi
cmp dword [ebp - 0x50], ebx
jb 0x4392ab
mov eax, dword [ebp - 0x64]
push eax
call fcn.004b8946
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b92b7
mov esp, ebp
pop ebp
ret 4