Function at 0x40c970
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x444593
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x7790
call fcn.00424360
push ebx
push ebp
push esi
push edi
mov ebp, ecx
lea ecx, [esp + 0x778]
call fcn.00419470
xor esi, esi
lea ecx, [esp + 0x54]
mov dword [esp + 0x77ac], esi
call fcn.0043b6ca
mov byte [esp + 0x77ac], 1
call fcn.0043ad9c
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x3c], eax
mov byte [esp + 0x77ac], 2
call fcn.0043ad9c
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x1c], eax
mov word [esp + 0x68], si
xor eax, eax
mov ecx, 0x3f
lea edi, [esp + 0x6a]
rep stosd dword es:[edi], eax
mov byte [esp + 0x77ac], 3
stosw word es:[edi], ax
call fcn.0043ad9c
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x24], eax
mov byte [esp + 0x77ac], 4
call fcn.0043ad9c
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x44], eax
mov byte [esp + 0x77ac], 5
call fcn.0043ad9c
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x38], eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x77ac], 6
mov dword [esp + 0x30], 0x100
call fcn.00417330
lea ecx, [esp + 0x40]
mov byte [esp + 0x77ac], 7
call fcn.00413b40
lea ecx, [esp + 0x34]
mov byte [esp + 0x77ac], 8
call fcn.00414930
lea ecx, [esp + 0x2c]
mov byte [esp + 0x77ac], 9
call fcn.00415b40
lea ecx, [esp + 0x28]
mov byte [esp + 0x77ac], 0xa
call fcn.00415b40
mov byte [esp + 0x77ac], 0xb
lea ebx, [ebx]
lea ecx, [esp + 0x18]
call fcn.00415b40
mov al, byte [ebp + 0x27e8]
mov byte [esp + 0x14], al
mov ecx, dword [esp + 0x14]
push ecx
lea ecx, [esp + 0x1c]
mov byte [esp + 0x77b0], 0xc
call fcn.00415b60
mov dl, byte [ebp + 0x27e8]
xor eax, eax
mov byte [esp + 0x168], 0
mov ecx, 0x40
lea edi, [esp + 0x169]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp + 0x1467]
mov edi, eax
mov ecx, 9
mov esi, str.1234ABCD_56EF_78GH_90IJ_123456KLMNOP
rep movsd dword es:[edi], dword [esi]
push eax
mov byte [esp + 0x24], dl
mov eax, dword [esp + 0x24]
push eax
movsb byte es:[edi], byte [esi]
lea esi, [ebp + 0x325c]
push esi
lea ecx, [esp + 0x174]
push ecx
push 1
lea ecx, [esp + 0x2c]
call fcn.00412050
test eax, eax
jne 0x40d964
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40cb50
sub eax, edx
cmp byte [eax + ebp + 0x325b], 0x5c
jne 0x40cb80
lea eax, [ebp + 0x325c]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40cb70
sub eax, edx
mov byte [eax + ebp + 0x325b], cl
lea edi, [ebp + 0x325c]
push edi
lea esi, [ebp + 0x1f9b]
push str._sAutoRun
push esi
call fcn.00424a8c
push edi
lea edx, [ebp + 0x125f]
push str._sSupport
push edx
call fcn.00424a8c
push edi
lea eax, [ebp + 0x209f]
push str._sDirectX
push eax
call fcn.00424a8c
push str.autorun.cfg
push esi
lea ecx, [esp + 0x29c]
push str._s_s
push ecx
call fcn.00424a8c
add esp, 0x30
lea edx, [esp + 0x274]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.004046e0
lea ecx, [esp + 0x77c]
call fcn.00419a60
lea ecx, [esp + 0x778]
call fcn.0041a8f0
mov ebx, eax
neg ebx
sbb bl, bl
lea ecx, [esp + 0x18]
inc bl
mov byte [esp + 0x77ac], 0xb
call fcn.00415b50
test bl, bl
je 0x40cac0
call fcn.0043ad9c
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x18], eax
lea eax, [esp + 0x1c]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov bl, 0xd
push str.Registry
mov byte [esp + 0x77b8], bl
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x446a11
mov byte [esp + 0x77bc], 0xe
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a180
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx - 0xc]
test eax, eax
jl 0x40cce8
push 0x447218
push ecx
call fcn.00426dd6
add esp, 8
test eax, eax
je 0x40cce8
sub eax, dword [esp + 0x1c]
test eax, eax
jle 0x40cce8
push eax
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x24]
call fcn.0040bf30
mov ecx, dword [eax]
lea edx, [ebp + 0x1363]
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x40ccc0
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40cce8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ecx, dword [esp + 0x1c]
push ecx
lea eax, [ebp + 0x626]
push str.SOFTWARE_s
push eax
call fcn.00424a8c
xor edx, edx
lea eax, [ebp + 0x3369]
mov dword [eax], edx
mov dword [eax + 4], edx
add esp, 0xc
mov dword [eax + 8], edx
lea esi, [ebp + 0x72c]
push esi
push ecx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], edx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.AppName
mov dword [eax + 0x14], edx
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0xf
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a3a0
lea eax, [ebp + 0x2f4a]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.AppName
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x10
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a3a0
push esi
lea edi, [ebp + 0x2c3e]
push edi
mov ecx, ebp
call fcn.0040c410
push esi
lea ecx, [ebp + 0x2d42]
push ecx
mov ecx, ebp
call fcn.0040c410
mov edx, ebp
sub edx, edi
lea ecx, [edx + 0x2e46]
lea ebx, [ebx]
mov al, byte [edi]
mov byte [ecx + edi], al
inc edi
test al, al
jne 0x40cdd0
lea eax, [ebp + 0xa3c]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.AppName
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x11
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a3a0
lea esi, [ebp + 0x830]
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Executable
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x12
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a3a0
push esi
push esi
lea ecx, [esp + 0x3c]
call fcn.004141c0
lea eax, [ebp + 0x934]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Icon
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x13
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a3a0
lea eax, [ebp + 0xa38]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.TechSupport
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x14
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a5c0
lea eax, [ebp + 0xa39]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.EReg
call fcn.004046e0
mov byte [esp + 0x77b4], 0x15
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a5c0
lea eax, [ebp + 0x1467]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.ProductGuiID
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x16
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a3a0
lea ecx, [ebp + 0xa3b]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.AutoSort
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x17
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a5c0
lea esi, [ebp + 0x72a]
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Demo
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x18
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a5c0
lea edx, [ebp + 0xe4d]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.DirectXVersion
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x19
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a3a0
lea eax, [ebp + 0x2b3a]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.IEVersion
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x1a
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a3a0
lea ecx, [ebp + 0x27c0]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CacheMinimum
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x1b
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a6d0
lea edx, [ebp + 0x27c8]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CacheSatisfactory
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x1c
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a6d0
lea eax, [ebp + 0x27d0]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CacheFull
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x1d
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a6d0
lea ecx, [ebp + 0x2b39]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.RTPatch
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x1e
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a5c0
lea edx, [ebp + 0x368d]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.RTPatchURL
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x1f
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a3a0
lea eax, [ebp + 0x2900]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.InstallMinimum
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x20
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a6d0
lea ecx, [ebp + 0x2908]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.InstallSatisfactory
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x21
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a6d0
lea edx, [ebp + 0x2910]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.InstallFull
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x22
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a6d0
lea eax, [ebp + 0x2918]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.InstallFullNoStreaming
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x23
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a6d0
lea ecx, [ebp + 0x2920]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SwapSize
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x24
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a6d0
lea edx, [esp + 0x18]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.StartupCD
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x25
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a180
lea eax, [ebp + 0x156b]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.RTPatchCDID
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x26
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a3a0
lea ecx, [ebp + 0x2928]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.StartMenuDXEULA
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x27
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a5c0
lea edx, [ebp + 0x2929]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.LanguageSelectionScreen
call fcn.004046e0
mov byte [esp + 0x77b4], 0x28
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a5c0
lea eax, [ebp + 0x3b92]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.IEForOnlineOnly
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x29
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a5c0
lea ecx, [ebp + 0x3b93]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.FlashForOnlineOnly
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x2a
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a5c0
lea edx, [ebp + 0xf51]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.FlashVersion
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x2b
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a3a0
lea eax, [ebp + 0x325b]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.EASOInstall
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x2c
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a5c0
lea ecx, [ebp + 0x3157]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SuppressionExe
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x2d
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a3a0
lea edx, [ebp + 0x304e]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SplashScreen
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x2e
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a5c0
lea eax, [ebp + 0x304f]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.SlideShow
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x2f
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a5c0
lea ecx, [ebp + 0x115a]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Version
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x30
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a3a0
lea edx, [ebp + 0x3050]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.GameII
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x31
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a5c0
lea eax, [ebp + 0x3051]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.ToolsEULA
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x32
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a5c0
lea ecx, [ebp + 0x3052]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.ToolsEULADeclineContinue
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x33
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a5c0
lea edi, [ebp + 0x3053]
push edi
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.IEonCD
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x34
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a3a0
lea edx, [ebp + 0x2b38]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.GameSpyInstall
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x35
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a5c0
push edi
lea ecx, [esp + 0x30]
call fcn.00415b70
cmp byte [esi], 0
je 0x40d7db
mov byte [ebp + 0xa3a], 0
mov byte [ebp + 0xa39], 0
mov byte [ebp + 0xa38], 0
mov eax, dword [esp + 0x18]
push eax
call fcn.00425545
add esp, 4
mov dword [ebp + 0x3360], eax
lea edi, [ebp + 0x3369]
mov esi, str.English_US
lea esp, [esp]
push edi
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x36
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], bl
call fcn.0041a5c0
add esi, 0x19
inc edi
cmp esi, 0x454439
jl 0x40d800
lea eax, [ebp + 0xa3c]
push eax
lea ecx, [ebp + 0x1363]
push ecx
lea edx, [ebp + 0x24af]
push edx
lea eax, [esp + 0x384]
push str._s_s_s
push eax
call fcn.00424a8c
add esp, 0x14
lea ecx, [ebp + 0x1d93]
push ecx
lea edx, [esp + 0x37c]
push edx
lea ecx, [esp + 0x30]
call fcn.0040f740
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x77ac], 0xb
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40d8ae
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea esi, [ebp + 0x626]
push esi
push 0x80000001
lea ecx, [esp + 0x50]
call fcn.00417520
test eax, eax
je 0x40d8de
push esi
push 0x80000002
lea ecx, [esp + 0x50]
call fcn.00417520
test eax, eax
jne 0x40da42
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x6c]
push ecx
push str.Language
lea ecx, [esp + 0x54]
mov dword [esp + 0x3c], 0x100
call fcn.00417430
test eax, eax
jne 0x40d98e
lea eax, [esp + 0x68]
mov byte [ebp + 0x72b], 1
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40d914
sub eax, edx
push eax
lea edx, [esp + 0x6c]
push edx
lea ecx, [esp + 0x2c]
call fcn.00402e40
mov edx, 1
mov edi, str.English_US
mov eax, dword [esp + 0x24]
mov esi, edi
lea esp, [esp]
mov bl, byte [eax]
mov cl, bl
cmp bl, byte [esi]
jne 0x40d96b
test cl, cl
je 0x40d960
mov bl, byte [eax + 1]
mov cl, bl
cmp bl, byte [esi + 1]
jne 0x40d96b
add eax, 2
add esi, 2
test cl, cl
jne 0x40d940
xor eax, eax
jmp 0x40d970
push 0
call fcn.00424a4c
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40db95
add edi, 0x19
inc edx
cmp edi, 0x454439
jl 0x40d936
mov dword [ebp + 0x27ec], 0
mov ebx, 1
lea esi, [ebp + 0x3369]
mov edi, str.English_US
mov edi, edi
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push edi
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x37
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], 0xb
call fcn.0041a5c0
cmp byte [esi], 0
je 0x40d9f0
mov eax, dword [ebp + 0x27ec]
test eax, eax
jne 0x40d9f0
mov dword [ebp + 0x27ec], ebx
inc ebx
add edi, 0x19
inc esi
cmp edi, 0x454439
jl 0x40d9a0
add ebp, 0x1670
push ebp
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.NumLanguages
call fcn.004046e0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x446a11
mov byte [esp + 0x77bc], 0x38
call fcn.004046e0
lea ecx, [esp + 0x784]
mov byte [esp + 0x77b8], 0xb
call fcn.0041a4b0
lea ecx, [esp + 0x28]
mov byte [esp + 0x77ac], 0xa
call fcn.00415b50
lea ecx, [esp + 0x2c]
mov byte [esp + 0x77ac], 9
call fcn.00415b50
lea ecx, [esp + 0x34]
mov byte [esp + 0x77ac], 8
call fcn.00415b50
lea ecx, [esp + 0x40]
mov byte [esp + 0x77ac], 7
call fcn.00415b50
lea ecx, [esp + 0x48]
mov byte [esp + 0x77ac], 6
call fcn.004174c0
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
mov byte [esp + 0x77ac], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40dabd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
mov byte [esp + 0x77ac], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40dae3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
mov byte [esp + 0x77ac], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40db09
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0x77ac], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40db2f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
mov byte [esp + 0x77ac], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40db55
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esp + 0x54]
mov byte [esp + 0x77ac], 0
call fcn.0043ba9f
lea ecx, [esp + 0x778]
mov dword [esp + 0x77ac], 0xffffffff
call fcn.0041a820
mov ecx, dword [esp + 0x77a4]
pop edi
xor eax, eax
mov dword fs:[0], ecx
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp + 0x27ec], edx
jmp 0x40d98e