Function at 0x5384f0
Capabilities:
Connect pipe
Create pipe
Read file on windows
Reference cloudflare dns server

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59f7a5
mov eax, dword fs:[0]
push eax
mov eax, 0x1814
call fcn.0055eea0
mov eax, dword [0x615720]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1354], ecx
mov eax, dword [ebp - 0x1354]
cmp dword [eax + 0x21c], 0xffffffff
je 0x538549
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x1354]
mov edx, dword [ecx + 0x21c]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0x1000
push 0
lea eax, [ebp - 0x1010]
push eax
call fcn.0055eb60
add esp, 0xc
mov dword [ebp - 0x1018], 0
push 0
push 0
push 0x1000
push 0x1000
push 0xff
push 6
push 0x40000001
push str..pipeCdmHelperPipe
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov dword [ebp - 0x135c], eax
cmp dword [ebp - 0x135c], 0xffffffff
jne 0x5385a2
jmp 0x53a0f7
push 0
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x1360], eax
cmp dword [ebp - 0x1360], 0xffffffff
jne 0x5385c4
jmp 0x53a0f7
push 0x14
push 0
lea ecx, [ebp - 0x1350]
push ecx
call fcn.0055eb60
add esp, 0xc
mov edx, dword [ebp - 0x1360]
mov dword [ebp - 0x1340], edx
lea eax, [ebp - 0x1350]
push eax
mov ecx, dword [ebp - 0x135c]
push ecx
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
mov dword [ebp - 0x1420], eax
cmp dword [ebp - 0x1420], 0
je 0x538625
mov edx, dword [ebp - 0x1360]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x135c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x53a0f7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1424], eax
mov ecx, dword [ebp - 0x1424]
mov dword [ebp - 0x1408], ecx
cmp dword [ebp - 0x1408], 0x3e5
je 0x53864b
jmp 0x53864d
jmp 0x538667
mov edx, dword [ebp - 0x1360]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x135c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x493e0
mov ecx, dword [ebp - 0x1360]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x1410], eax
mov edx, dword [ebp - 0x1410]
mov dword [ebp - 0x1418], edx
cmp dword [ebp - 0x1418], 0
je 0x538699
jmp 0x53a0ae
mov eax, dword [ebp - 0x1354]
mov byte [eax + 0x2b8], 1
mov ecx, dword [ebp - 0x1360]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
lea edx, [ebp - 0x1018]
push edx
push 0x1000
lea eax, [ebp - 0x1010]
push eax
mov ecx, dword [ebp - 0x135c]
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x53a09f
lea edx, [ebp - 0x1010]
push edx
lea ecx, [ebp - 0x1060]
call fcn.004e8fb0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1060]
call fcn.004e92b0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15a8], esp
push eax
push ecx
call fcn.004e1e00
add esp, 8
mov dword [ebp - 0x1594], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531d70
lea ecx, [ebp - 0x1011]
call fcn.004e1430
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10a8]
call fcn.004e8f60
mov byte [ebp - 4], 2
lea edx, [ebp - 0x10a8]
push edx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x159c], esp
push 0x5a95f4
call fcn.004e8fb0
mov dword [ebp - 0x1428], eax
mov eax, dword [ebp - 0x1428]
mov dword [ebp - 0x15a4], eax
mov byte [ebp - 4], 3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15ac], esp
lea edx, [ebp - 0x1060]
push edx
call fcn.004e8f30
mov dword [ebp - 0x15b4], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1011]
call fcn.004f93f0
mov byte [ebp - 0x1361], al
movzx eax, byte [ebp - 0x1361]
test eax, eax
je 0x538832
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15bc], esp
lea edx, [ebp - 0x10a8]
push edx
call fcn.004e8f30
mov dword [ebp - 0x15c4], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00532dc0
mov dword [ebp - 0x1430], eax
cmp dword [ebp - 0x1430], 0xc
jne 0x538832
lea eax, [ebp - 0x1060]
push eax
mov ecx, dword [ebp - 0x1354]
call fcn.005364e0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10a8]
call fcn.004e90c0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1011]
call fcn.004e0610
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1060]
call fcn.004e90c0
jmp 0x53a09f
lea ecx, [ebp - 0x133c]
call fcn.0054e130
mov byte [ebp - 4], 4
push 0x5a9644
lea ecx, [ebp - 0x1078]
call fcn.004e8fb0
mov byte [ebp - 4], 5
push str.1.0.0.1
lea ecx, [ebp - 0x1090]
call fcn.004e8fb0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x133c]
push ecx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1628], esp
lea edx, [ebp - 0x1060]
push edx
call fcn.004e8f30
mov dword [ebp - 0x15fc], eax
lea ecx, [ebp - 0x1011]
call fcn.004fb970
mov byte [ebp - 0x1362], al
movzx eax, byte [ebp - 0x1362]
test eax, eax
je 0x53a03b
push 0x5a97e0
lea ecx, [ebp - 0x12f4]
call fcn.004e93b0
test eax, eax
jne 0x53895c
mov ecx, dword [ebp - 0x1354]
mov dword [ecx + 0x2bc], 0
push 0x5a980c
mov ecx, dword [ebp - 0x1354]
add ecx, 0x288
call fcn.004e9a20
push str.activex
lea ecx, [ebp - 0x1078]
call fcn.004e9110
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1568], esp
push 0x5a98f0
call fcn.004e8fb0
mov dword [ebp - 0x1458], eax
lea edx, [ebp - 0x1640]
push edx
mov ecx, dword [ebp - 0x1354]
call fcn.00531030
mov dword [ebp - 0x1438], eax
mov eax, dword [ebp - 0x1438]
mov dword [ebp - 0x1440], eax
mov ecx, dword [ebp - 0x1440]
push ecx
lea ecx, [ebp - 0x1090]
call fcn.004e9080
lea ecx, [ebp - 0x1640]
call fcn.004e90c0
jmp 0x538ab5
push 0x5a9944
lea ecx, [ebp - 0x12f4]
call fcn.004e93b0
test eax, eax
jne 0x538a0b
mov edx, dword [ebp - 0x1354]
mov dword [edx + 0x2bc], 1
push 0x5a9948
mov ecx, dword [ebp - 0x1354]
add ecx, 0x288
call fcn.004e9a20
push str.plugin
lea ecx, [ebp - 0x1078]
call fcn.004e9110
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15f4], esp
push 0x5a9a18
call fcn.004e8fb0
mov dword [ebp - 0x1460], eax
lea eax, [ebp - 0x17f0]
push eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531030
mov dword [ebp - 0x1448], eax
mov ecx, dword [ebp - 0x1448]
mov dword [ebp - 0x13e4], ecx
mov edx, dword [ebp - 0x13e4]
push edx
lea ecx, [ebp - 0x1090]
call fcn.004e9080
lea ecx, [ebp - 0x17f0]
call fcn.004e90c0
jmp 0x538ab5
push 0x5a9a8c
lea ecx, [ebp - 0x12f4]
call fcn.004e93b0
test eax, eax
jne 0x538ab5
mov eax, dword [ebp - 0x1354]
mov dword [eax + 0x2bc], 2
push 0x5a9ad4
mov ecx, dword [ebp - 0x1354]
add ecx, 0x288
call fcn.004e9a20
push str.ppapi
lea ecx, [ebp - 0x1078]
call fcn.004e9110
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1570], esp
push 0x5a9bc0
call fcn.004e8fb0
mov dword [ebp - 0x1468], eax
lea ecx, [ebp - 0x1820]
push ecx
mov ecx, dword [ebp - 0x1354]
call fcn.00531030
mov dword [ebp - 0x1384], eax
mov edx, dword [ebp - 0x1384]
mov dword [ebp - 0x143c], edx
mov eax, dword [ebp - 0x143c]
push eax
lea ecx, [ebp - 0x1090]
call fcn.004e9080
lea ecx, [ebp - 0x1820]
call fcn.004e90c0
mov ecx, dword [ebp - 0x1354]
add ecx, 0x288
call fcn.004e9c70
push eax
lea ecx, [ebp - 0x1688]
push ecx
call fcn.004e3950
add esp, 4
mov dword [ebp - 0x138c], eax
mov edx, dword [ebp - 0x138c]
mov dword [ebp - 0x13ec], edx
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x13ec]
call fcn.004e9c70
push eax
push 0x5a9bd8
lea eax, [ebp - 0x1748]
push eax
call fcn.004e2580
add esp, 0x10
mov dword [ebp - 0x1394], eax
mov ecx, dword [ebp - 0x1394]
push ecx
mov ecx, dword [ebp - 0x1354]
add ecx, 0x270
call fcn.004e9990
lea ecx, [ebp - 0x1748]
call fcn.004e99d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1688]
call fcn.004e99d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x161c], esp
lea edx, [ebp - 0x130c]
push edx
call fcn.004e8f30
mov dword [ebp - 0x1470], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00532dc0
mov dword [ebp - 0x141c], eax
mov eax, dword [ebp - 0x1354]
mov ecx, dword [ebp - 0x141c]
mov dword [eax + 0x2c0], ecx
mov edx, dword [ebp - 0x1354]
mov eax, dword [edx + 0x2c0]
mov dword [ebp - 0x1368], eax
mov ecx, dword [ebp - 0x1368]
sub ecx, 1
mov dword [ebp - 0x1368], ecx
cmp dword [ebp - 0x1368], 0x64
ja case.0x538bbf.1
mov edx, dword [ebp - 0x1368]
movzx eax, byte [edx + 0x53a158]
jmp dword [eax*4 + 0x53a110]
mov ecx, dword [ebp - 0x1354]
mov byte [ecx + 0x2b8], 1
push 0x5aa11c
lea edx, [ebp - 0x1294]
push edx
call fcn.004f4240
add esp, 8
movzx eax, al
test eax, eax
je 0x538c97
lea ecx, [ebp - 0x12dc]
call fcn.004e92b0
push eax
lea ecx, [ebp - 0x16b8]
push ecx
call fcn.004e1e00
add esp, 8
mov dword [ebp - 0x139c], eax
mov edx, dword [ebp - 0x139c]
mov dword [ebp - 0x13f4], edx
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x13f4]
call fcn.004e9c70
push eax
push 0x5aa170
push 0x5aa1cc
lea eax, [ebp - 0x1808]
push eax
call fcn.004e2580
add esp, 0x10
mov dword [ebp - 0x13a4], eax
mov ecx, dword [ebp - 0x13a4]
push ecx
mov ecx, dword [ebp - 0x1354]
add ecx, 0x2a0
call fcn.004e9990
lea ecx, [ebp - 0x1808]
call fcn.004e99d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x16b8]
call fcn.004e99d0
push 0
push 0
push 0x591
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00550980
jmp case.0x538bbf.1
mov edx, dword [ebp - 0x1354]
mov byte [edx + 0x2b8], 1
push 0x5aa888
lea eax, [ebp - 0x12ac]
push eax
call fcn.004f4240
add esp, 8
movzx ecx, al
test ecx, ecx
jne 0x538ce3
push 0x5aa8a4
lea edx, [ebp - 0x12ac]
push edx
call fcn.004f4240
add esp, 8
movzx eax, al
test eax, eax
je 0x538df2
push 1
mov ecx, dword [ebp - 0x1354]
call fcn.00540730
movzx ecx, al
test ecx, ecx
je 0x538d22
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1578], esp
push 0x5aa978
call fcn.004e98c0
mov dword [ebp - 0x1478], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531cb0
jmp case.0x538bbf.1
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15cc], esp
push str.flash_player_update_success__install_offer
call fcn.004e98c0
mov dword [ebp - 0x1480], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531d70
lea ecx, [ebp - 0x12dc]
call fcn.004e92b0
push eax
lea edx, [ebp - 0x16e8]
push edx
call fcn.004e1e00
add esp, 8
mov dword [ebp - 0x1434], eax
mov eax, dword [ebp - 0x1434]
mov dword [ebp - 0x13ac], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x13ac]
call fcn.004e9c70
push eax
push 0x5aab70
push 0x5aabe0
lea ecx, [ebp - 0x1778]
push ecx
call fcn.004e2580
add esp, 0x10
mov dword [ebp - 0x13fc], eax
mov edx, dword [ebp - 0x13fc]
push edx
mov ecx, dword [ebp - 0x1354]
add ecx, 0x2a0
call fcn.004e9990
lea ecx, [ebp - 0x1778]
call fcn.004e99d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x16e8]
call fcn.004e99d0
push 0
push 0
push 0x591
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00550980
jmp 0x538e97
lea ecx, [ebp - 0x12dc]
call fcn.004e92b0
push eax
lea eax, [ebp - 0x1718]
push eax
call fcn.004e1e00
add esp, 8
mov dword [ebp - 0x13b4], eax
mov ecx, dword [ebp - 0x13b4]
mov dword [ebp - 0x1378], ecx
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x1378]
call fcn.004e9c70
push eax
push str.___typeshowoffers___fptrue___hsfalse___updatetype
push 0x5aacbc
lea edx, [ebp - 0x17d8]
push edx
call fcn.004e2580
add esp, 0x10
mov dword [ebp - 0x13bc], eax
mov eax, dword [ebp - 0x13bc]
push eax
mov ecx, dword [ebp - 0x1354]
add ecx, 0x2a0
call fcn.004e9990
lea ecx, [ebp - 0x17d8]
call fcn.004e99d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1718]
call fcn.004e99d0
push 0
push 0
push 0x591
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00550980
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1580], esp
push 0x5aad8c
call fcn.004e98c0
mov dword [ebp - 0x1488], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531cb0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15d0], esp
push 0x5aadbc
call fcn.004e98c0
mov dword [ebp - 0x1490], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531690
jmp case.0x538bbf.1
lea ecx, [ebp - 0x12c4]
call fcn.004e92b0
push eax
lea ecx, [ebp - 0x1030]
push ecx
call fcn.004e1e00
add esp, 8
mov byte [ebp - 4], 0xb
push 0x5aae20
lea ecx, [ebp - 0x1030]
call fcn.004e9d40
test eax, eax
jne 0x538ff8
push 0x5aae2c
lea ecx, [ebp - 0x1030]
call fcn.004e9a20
push 0x5aae30
mov ecx, dword [ebp - 0x1354]
add ecx, 0x348
call fcn.004e9110
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1588], esp
lea edx, [ebp - 0x1030]
push edx
call fcn.004e9870
mov dword [ebp - 0x1404], eax
mov eax, dword [ebp - 0x1404]
mov dword [ebp - 0x1498], eax
mov byte [ebp - 4], 0xc
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15d8], esp
push 0x5aae50
call fcn.004e98c0
mov dword [ebp - 0x14a0], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x1354]
call fcn.00531890
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1590], esp
lea edx, [ebp - 0x1030]
push edx
call fcn.004e9870
mov dword [ebp - 0x13c4], eax
mov eax, dword [ebp - 0x13c4]
mov dword [ebp - 0x14a8], eax
mov byte [ebp - 4], 0xd
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15e0], esp
push 0x5aaee4
call fcn.004e98c0
mov dword [ebp - 0x14b0], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x1354]
call fcn.005305e0
jmp 0x5390e4
push 0x5aaf10
lea ecx, [ebp - 0x1030]
call fcn.004e9d40
test eax, eax
jne 0x5390e4
push 0x5aaf24
lea ecx, [ebp - 0x1030]
call fcn.004e9a20
push 0x5aaf34
mov ecx, dword [ebp - 0x1354]
add ecx, 0x348
call fcn.004e9110
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1598], esp
lea edx, [ebp - 0x1030]
push edx
call fcn.004e9870
mov dword [ebp - 0x1444], eax
mov eax, dword [ebp - 0x1444]
mov dword [ebp - 0x14b8], eax
mov byte [ebp - 4], 0xe
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15e8], esp
push 0x5aaf70
call fcn.004e98c0
mov dword [ebp - 0x14c0], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x1354]
call fcn.00531890
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15a0], esp
lea edx, [ebp - 0x1030]
push edx
call fcn.004e9870
mov dword [ebp - 0x13cc], eax
mov eax, dword [ebp - 0x13cc]
mov dword [ebp - 0x14c8], eax
mov byte [ebp - 4], 0xf
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15f0], esp
push 0x5aaf7c
call fcn.004e98c0
mov dword [ebp - 0x14d0], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x1354]
call fcn.005305e0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x144c], esp
push 0x5ab004
call fcn.004e98c0
mov dword [ebp - 0x14d8], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531690
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1030]
call fcn.004e99d0
jmp case.0x538bbf.1
push 0x5ab028
mov ecx, dword [ebp - 0x1354]
add ecx, 0x348
call fcn.004e9110
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15f8], esp
push 0x5ab058
call fcn.004e98c0
mov dword [ebp - 0x140c], eax
mov ecx, dword [ebp - 0x140c]
mov dword [ebp - 0x14e0], ecx
mov byte [ebp - 4], 0x10
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15b0], esp
push 0x5ab068
call fcn.004e98c0
mov dword [ebp - 0x14e8], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x1354]
call fcn.00531890
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1600], esp
push 0x5ab0b8
call fcn.004e98c0
mov dword [ebp - 0x13d4], eax
mov edx, dword [ebp - 0x13d4]
mov dword [ebp - 0x14f0], edx
mov byte [ebp - 4], 0x11
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15b8], esp
push 0x5ab0bc
call fcn.004e98c0
mov dword [ebp - 0x14f8], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x1354]
call fcn.005305e0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1608], esp
push 0x5ab0d4
call fcn.004e98c0
mov dword [ebp - 0x1500], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531690
jmp case.0x538bbf.1
lea ecx, [ebp - 0x12c4]
call fcn.004e92b0
push eax
lea eax, [ebp - 0x1048]
push eax
call fcn.004e1e00
add esp, 8
mov byte [ebp - 4], 0x12
push 0x5ab100
lea ecx, [ebp - 0x1048]
call fcn.004e9d40
test eax, eax
jne 0x539319
push 0x5ab10c
lea ecx, [ebp - 0x1048]
call fcn.004e9a20
push 0x5ab13c
mov ecx, dword [ebp - 0x1354]
add ecx, 0x348
call fcn.004e9110
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15c0], esp
lea edx, [ebp - 0x1048]
push edx
call fcn.004e9870
mov dword [ebp - 0x142c], eax
mov eax, dword [ebp - 0x142c]
mov dword [ebp - 0x1508], eax
mov byte [ebp - 4], 0x13
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1610], esp
push 0x5ab198
call fcn.004e98c0
mov dword [ebp - 0x1510], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x1354]
call fcn.00531890
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15c8], esp
lea edx, [ebp - 0x1048]
push edx
call fcn.004e9870
mov dword [ebp - 0x13dc], eax
mov eax, dword [ebp - 0x13dc]
mov dword [ebp - 0x1518], eax
mov byte [ebp - 4], 0x14
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1618], esp
push 0x5ab1a4
call fcn.004e98c0
mov dword [ebp - 0x1520], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x1354]
call fcn.005305e0
jmp 0x539405
push 0x5ab1c4
lea ecx, [ebp - 0x1048]
call fcn.004e9d40
test eax, eax
jne 0x539405
push 0x5ab1d4
lea ecx, [ebp - 0x1048]
call fcn.004e9a20
push 0x5ab1dc
mov ecx, dword [ebp - 0x1354]
add ecx, 0x348
call fcn.004e9110
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1620], esp
lea edx, [ebp - 0x1048]
push edx
call fcn.004e9870
mov dword [ebp - 0x1414], eax
mov eax, dword [ebp - 0x1414]
mov dword [ebp - 0x1528], eax
mov byte [ebp - 4], 0x15
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15d4], esp
push 0x5ab260
call fcn.004e98c0
mov dword [ebp - 0x1530], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x1354]
call fcn.00531890
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1614], esp
lea edx, [ebp - 0x1048]
push edx
call fcn.004e9870
mov dword [ebp - 0x137c], eax
mov eax, dword [ebp - 0x137c]
mov dword [ebp - 0x1538], eax
mov byte [ebp - 4], 0x16
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15dc], esp
push 0x5ab330
call fcn.004e98c0
mov dword [ebp - 0x1540], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x1354]
call fcn.005305e0
mov ecx, dword [ebp - 0x1354]
mov byte [ecx + 0x2b8], 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1604], esp
push 0x5ab340
call fcn.004e98c0
mov dword [ebp - 0x1548], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531cb0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1048]
call fcn.004e99d0
jmp case.0x538bbf.1
mov edx, dword [ebp - 0x1354]
mov byte [edx + 0x2b8], 0
jmp case.0x538bbf.1
push 0x5ab438
push 0x5ab4cc
lea eax, [ebp - 0x17a8]
push eax
call fcn.004e2580
add esp, 0xc
mov dword [ebp - 0x1380], eax
mov ecx, dword [ebp - 0x1380]
push ecx
mov ecx, dword [ebp - 0x1354]
add ecx, 0x2a0
call fcn.004e9990
lea ecx, [ebp - 0x17a8]
call fcn.004e99d0
push 0
push 0
push 0x591
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00550980
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15e4], esp
push 0x5ab570
call fcn.004e98c0
mov dword [ebp - 0x1550], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531690
jmp case.0x538bbf.1
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1624], esp
push 0x5ab6a0
call fcn.004e98c0
mov dword [ebp - 0x1388], eax
mov edx, dword [ebp - 0x1388]
mov dword [ebp - 0x1558], edx
mov byte [ebp - 4], 0x17
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15ec], esp
push 0x5ab6ac
call fcn.004e98c0
mov dword [ebp - 0x1560], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x1354]
call fcn.005305e0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x160c], esp
push 0x5ab6c0
call fcn.004e98c0
mov dword [ebp - 0x1450], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531690
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1454], esp
push 0x5ab714
call fcn.004e98c0
mov dword [ebp - 0x1390], eax
mov eax, dword [ebp - 0x1390]
mov dword [ebp - 0x145c], eax
mov byte [ebp - 4], 0x18
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1464], esp
push 0x5ab738
call fcn.004e98c0
mov dword [ebp - 0x146c], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x1354]
call fcn.00531890
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1474], esp
push 0x5ab748
call fcn.004e98c0
mov dword [ebp - 0x1398], eax
mov ecx, dword [ebp - 0x1398]
mov dword [ebp - 0x147c], ecx
mov byte [ebp - 4], 0x19
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1484], esp
push 0x5ab778
call fcn.004e98c0
mov dword [ebp - 0x148c], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x1354]
call fcn.005305e0
mov edx, dword [ebp - 0x1354]
mov byte [edx + 0x2b8], 0
jmp case.0x538bbf.1
mov eax, dword [ebp - 0x1354]
mov byte [eax + 0x2b8], 0
push 0x5ab840
lea ecx, [ebp - 0x10e4]
push ecx
call fcn.004f4240
add esp, 8
movzx edx, al
test edx, edx
je 0x539648
jmp 0x539689
push 0x5ab9e8
lea eax, [ebp - 0x10e4]
push eax
call fcn.004f4240
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x539689
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1494], esp
push 0x5ab9f4
call fcn.004e98c0
mov dword [ebp - 0x149c], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531690
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14a4], esp
push 0x5aba1c
call fcn.004e98c0
mov dword [ebp - 0x14ac], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531690
push 0
push 0xea60
push 0x18
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00550f20
jmp case.0x538bbf.1
mov edx, dword [ebp - 0x1354]
mov byte [edx + 0x2b8], 0
push 0x5ac0c8
lea eax, [ebp - 0x10e4]
push eax
call fcn.004f4240
add esp, 8
movzx ecx, al
test ecx, ecx
jne 0x53970e
push 0x5ac0d8
lea edx, [ebp - 0x10e4]
push edx
call fcn.004f4240
add esp, 8
movzx eax, al
test eax, eax
je 0x539739
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14b4], esp
push 0x5ac104
call fcn.004e98c0
mov dword [ebp - 0x14bc], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531690
jmp 0x539886
push 0x5ac398
lea ecx, [ebp - 0x10e4]
push ecx
call fcn.004f4240
add esp, 8
movzx edx, al
test edx, edx
je 0x539860
push 0x5ac5e8
lea eax, [ebp - 0x1264]
push eax
call fcn.004f4240
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x539838
push str.___typeflashupdate___fpfalse___hstrue___updatetype
push 0x5ac64c
lea edx, [ebp - 0x1658]
push edx
call fcn.004e2580
add esp, 0xc
mov dword [ebp - 0x13a0], eax
mov eax, dword [ebp - 0x13a0]
push eax
mov ecx, dword [ebp - 0x1354]
add ecx, 0x2a0
call fcn.004e9990
lea ecx, [ebp - 0x1658]
call fcn.004e99d0
push 0
push 0
push 0x591
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00550980
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14c4], esp
push 0x5ac6e4
call fcn.004e98c0
mov dword [ebp - 0x14cc], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531690
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14d4], esp
push str.faatuo
call fcn.004e98c0
mov dword [ebp - 0x14dc], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531690
mov ecx, dword [ebp - 0x1354]
mov byte [ecx + 0x2b8], 1
mov edx, dword [ebp - 0x1354]
mov byte [edx + 0x2ba], 0
jmp 0x53985e
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14e4], esp
push 0x5ac830
call fcn.004e98c0
mov dword [ebp - 0x14ec], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531690
jmp 0x539886
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14f4], esp
push str.flashatuo
call fcn.004e98c0
mov dword [ebp - 0x14fc], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531690
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1504], esp
push 0x5ac8f4
call fcn.004e98c0
mov dword [ebp - 0x150c], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531690
jmp case.0x538bbf.1
push 0x5acb24
lea eax, [ebp - 0x1264]
push eax
call fcn.004f4240
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x53995c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1514], esp
push 0x5acb64
call fcn.004e98c0
mov dword [ebp - 0x151c], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531690
push str.___typeflashupdate___fpfalse___hstrue___hstyperc___updatetype
push 0x5acbc4
lea edx, [ebp - 0x1670]
push edx
call fcn.004e2580
add esp, 0xc
mov dword [ebp - 0x13a8], eax
mov eax, dword [ebp - 0x13a8]
push eax
mov ecx, dword [ebp - 0x1354]
add ecx, 0x2a0
call fcn.004e9990
lea ecx, [ebp - 0x1670]
call fcn.004e99d0
push 0
push 0
push 0x591
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00550980
mov ecx, dword [ebp - 0x1354]
mov byte [ecx + 0x2b8], 1
mov edx, dword [ebp - 0x1354]
mov byte [edx + 0x2ba], 0
jmp case.0x538bbf.1
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1524], esp
push 0x5acca8
call fcn.004e98c0
mov dword [ebp - 0x152c], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531690
mov eax, dword [ebp - 0x1354]
mov byte [eax + 0x2b8], 0
jmp case.0x538bbf.1
mov ecx, dword [ebp - 0x1354]
mov byte [ecx + 0x2b8], 1
push 0x5acef4
lea edx, [ebp - 0x1294]
push edx
call fcn.004f4240
add esp, 8
movzx eax, al
test eax, eax
je 0x539a9d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1534], esp
push str.HSCell_file_update__install_flash_player
call fcn.004e98c0
mov dword [ebp - 0x153c], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531d70
lea ecx, [ebp - 0x12dc]
call fcn.004e92b0
push eax
lea ecx, [ebp - 0x16d0]
push ecx
call fcn.004e1e00
add esp, 8
mov dword [ebp - 0x13b0], eax
mov edx, dword [ebp - 0x13b0]
mov dword [ebp - 0x13b8], edx
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x13b8]
call fcn.004e9c70
push eax
push str.___typeflashupdate___updatetype
push 0x5ad044
lea eax, [ebp - 0x16a0]
push eax
call fcn.004e2580
add esp, 0x10
mov dword [ebp - 0x13c0], eax
mov ecx, dword [ebp - 0x13c0]
push ecx
mov ecx, dword [ebp - 0x1354]
add ecx, 0x2a0
call fcn.004e9990
lea ecx, [ebp - 0x16a0]
call fcn.004e99d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x16d0]
call fcn.004e99d0
push 0
push 0
push 0x591
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00550980
jmp case.0x538bbf.1
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1544], esp
push str.HSCell_file_update_ui
call fcn.004e98c0
mov dword [ebp - 0x154c], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531d70
push str.___typeshowoffers___hsfalse___updatetype
push str._shs
lea edx, [ebp - 0x1700]
push edx
call fcn.004e2580
add esp, 0xc
mov dword [ebp - 0x13c8], eax
mov eax, dword [ebp - 0x13c8]
push eax
mov ecx, dword [ebp - 0x1354]
add ecx, 0x2a0
call fcn.004e9990
lea ecx, [ebp - 0x1700]
call fcn.004e99d0
push 0
push 0
push 0x591
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00550980
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1554], esp
push 0x5ad1c0
call fcn.004e98c0
mov dword [ebp - 0x155c], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531690
jmp case.0x538bbf.1
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1564], esp
push 0x5ad224
call fcn.004e98c0
mov dword [ebp - 0x156c], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531690
jmp case.0x538bbf.1
mov eax, dword [ebp - 0x1354]
mov byte [eax + 0x2bb], 0
push 0x5ad4d4
lea ecx, [ebp - 0x1264]
push ecx
call fcn.004f4240
add esp, 8
jmp case.0x538bbf.1
push 0x5ad6dc
lea eax, [ebp - 0x124c]
push eax
call fcn.004f4240
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x539c25
mov edx, dword [ebp - 0x1354]
cmp dword [edx + 0xac], 1
jne 0x539c25
push str.___typeshowoffers___hsfalse___fpfalse___fcfalse___fatrue
push 0x5ad7bc
lea eax, [ebp - 0x1730]
push eax
call fcn.004e2580
add esp, 0xc
mov dword [ebp - 0x13d0], eax
mov ecx, dword [ebp - 0x13d0]
push ecx
mov ecx, dword [ebp - 0x1354]
add ecx, 0x2a0
call fcn.004e9990
lea ecx, [ebp - 0x1730]
call fcn.004e99d0
push 0
push 0
push 0x591
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00550980
mov edx, dword [ebp - 0x1354]
mov byte [edx + 0x2b8], 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1574], esp
push str.CDMShowTime
call fcn.004e98c0
mov dword [ebp - 0x157c], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531690
push 0x264
call fcn.0055be40
add esp, 4
mov dword [ebp - 0x1374], eax
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x1374], 0
je 0x539c8b
mov ecx, dword [ebp - 0x1374]
call fcn.0054f180
mov dword [ebp - 0x1370], eax
jmp 0x539c95
mov dword [ebp - 0x1370], 0
mov eax, dword [ebp - 0x1370]
mov dword [ebp - 0x13d8], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x13d8]
mov dword [ebp - 0x1358], ecx
push 0x264
push 0
mov edx, dword [ebp - 0x1358]
push edx
call fcn.0055eb60
add esp, 0xc
push str.install
mov ecx, dword [ebp - 0x1358]
call fcn.004e9110
mov eax, dword [ebp - 0x1354]
add eax, 0x2f4
push eax
mov ecx, dword [ebp - 0x1358]
add ecx, 0x18
call fcn.004e90f0
lea ecx, [ebp - 0x1078]
push ecx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x30
call fcn.004e90f0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1584], esp
lea edx, [ebp - 0x1078]
push edx
call fcn.004e8f30
mov dword [ebp - 0x158c], eax
lea eax, [ebp - 0x1760]
push eax
mov ecx, dword [ebp - 0x1354]
call fcn.005331c0
mov dword [ebp - 0x13e0], eax
mov ecx, dword [ebp - 0x13e0]
mov dword [ebp - 0x13e8], ecx
mov edx, dword [ebp - 0x13e8]
push edx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x48
call fcn.004e9080
lea ecx, [ebp - 0x1760]
call fcn.004e90c0
lea eax, [ebp - 0x1090]
push eax
mov ecx, dword [ebp - 0x1358]
add ecx, 0x78
call fcn.004e90f0
mov ecx, dword [ebp - 0x1354]
add ecx, 0x2dc
push ecx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x90
call fcn.004e90f0
mov edx, dword [ebp - 0x1354]
add edx, 0x30c
push edx
mov ecx, dword [ebp - 0x1358]
add ecx, 0xa8
call fcn.004e90f0
lea eax, [ebp - 0x17c0]
push eax
call fcn.004e5790
add esp, 4
mov dword [ebp - 0x13f0], eax
mov ecx, dword [ebp - 0x13f0]
mov dword [ebp - 0x13f8], ecx
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x13f8]
call fcn.004e9c70
push eax
lea edx, [ebp - 0x1790]
push edx
call fcn.004e1d70
add esp, 8
mov dword [ebp - 0x1400], eax
mov eax, dword [ebp - 0x1400]
push eax
mov ecx, dword [ebp - 0x1358]
add ecx, 0xc0
call fcn.004e9080
lea ecx, [ebp - 0x1790]
call fcn.004e90c0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x17c0]
call fcn.004e99d0
lea ecx, [ebp - 0x130c]
push ecx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x60
call fcn.004e90f0
mov edx, dword [ebp - 0x1354]
add edx, 0x330
push edx
mov ecx, dword [ebp - 0x1358]
add ecx, 0xd8
call fcn.004e90f0
lea eax, [ebp - 0x12ac]
push eax
mov ecx, dword [ebp - 0x1358]
add ecx, 0xf0
call fcn.004e90f0
lea ecx, [ebp - 0x1204]
push ecx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x108
call fcn.004e90f0
lea edx, [ebp - 0x11ec]
push edx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x120
call fcn.004e90f0
lea eax, [ebp - 0x11d4]
push eax
mov ecx, dword [ebp - 0x1358]
add ecx, 0x138
call fcn.004e90f0
lea ecx, [ebp - 0x11bc]
push ecx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x150
call fcn.004e90f0
lea edx, [ebp - 0x11a4]
push edx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x168
call fcn.004e90f0
lea eax, [ebp - 0x118c]
push eax
mov ecx, dword [ebp - 0x1358]
add ecx, 0x180
call fcn.004e90f0
lea ecx, [ebp - 0x1174]
push ecx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x198
call fcn.004e90f0
lea edx, [ebp - 0x115c]
push edx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x1b0
call fcn.004e90f0
lea eax, [ebp - 0x1144]
push eax
mov ecx, dword [ebp - 0x1358]
add ecx, 0x1c8
call fcn.004e90f0
lea ecx, [ebp - 0x112c]
push ecx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x1e0
call fcn.004e90f0
lea edx, [ebp - 0x1114]
push edx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x1f8
call fcn.004e90f0
lea eax, [ebp - 0x10fc]
push eax
mov ecx, dword [ebp - 0x1358]
add ecx, 0x210
call fcn.004e90f0
lea ecx, [ebp - 0x10e4]
push ecx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x228
call fcn.004e90f0
lea edx, [ebp - 0x121c]
push edx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x240
call fcn.004e90f0
mov dword [ebp - 0x136c], 0
jmp 0x539fe6
mov eax, dword [ebp - 0x136c]
add eax, 1
mov dword [ebp - 0x136c], eax
lea ecx, [ebp - 0x10b4]
call fcn.00508f00
cmp dword [ebp - 0x136c], eax
jae 0x53a01f
mov ecx, dword [ebp - 0x136c]
push ecx
lea ecx, [ebp - 0x10b4]
call fcn.00508f20
push eax
mov ecx, dword [ebp - 0x1358]
add ecx, 0x258
call fcn.00508f40
jmp 0x539fd7
push 0
mov edx, dword [ebp - 0x1358]
push edx
push 0x52f
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00550980
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1090]
call fcn.004e90c0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1078]
call fcn.004e90c0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x133c]
call fcn.0054f8a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10a8]
call fcn.004e90c0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1011]
call fcn.004e0610
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1060]
call fcn.004e90c0
jmp 0x53a09f
mov eax, dword [ebp - 0x135c]
push eax
call dword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
jmp 0x53a0d5
mov ecx, dword [ebp - 0x1354]
mov byte [ecx + 0x2b8], 0
mov edx, dword [ebp - 0x135c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1360]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x1354]
cmp dword [ecx + 0x21c], 0xffffffff
je 0x53a0f7
mov edx, dword [ebp - 0x1354]
mov eax, dword [edx + 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0055e48d
mov esp, ebp
pop ebp
ret