Function at 0x404070
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4729ca
mov eax, dword fs:[0]
push eax
sub esp, 0x1b8
mov eax, dword [0x4997f0]
xor eax, esp
mov dword [esp + 0x1b0], eax
push ebx
push esi
push edi
mov eax, dword [0x4997f0]
xor eax, esp
push eax
lea eax, [esp + 0x1c8]
mov dword fs:[0], eax
mov esi, ecx
mov ebx, esi
mov dword [esp + 0x38], esi
call fcn.00407e70
call fcn.00409c70
mov dword [esp + 0x80], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0x80]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x80]
mov dword [eax], eax
mov eax, dword [esp + 0x80]
xor ebx, ebx
mov dword [eax + 8], eax
mov dword [esp + 0x84], ebx
mov dword [esp + 0x1d0], ebx
call fcn.00409c70
mov dword [esp + 0xa0], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0xa0]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xa0]
mov dword [eax], eax
mov eax, dword [esp + 0xa0]
mov dword [eax + 8], eax
mov dword [esp + 0xa4], ebx
mov byte [esp + 0x1d0], 1
call fcn.00409c70
mov dword [esp + 0x50], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0x50]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x50]
mov dword [eax], eax
mov eax, dword [esp + 0x50]
mov dword [eax + 8], eax
mov dword [esp + 0x54], ebx
mov byte [esp + 0x1d0], 2
call fcn.00409c70
mov dword [esp + 0xf4], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0xf4]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xf4]
mov dword [eax], eax
mov eax, dword [esp + 0xf4]
mov dword [eax + 8], eax
mov dword [esp + 0xf8], ebx
mov byte [esp + 0x1d0], 3
call fcn.00409c70
mov dword [esp + 0xb0], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0xb0]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [eax], eax
mov eax, dword [esp + 0xb0]
mov dword [eax + 8], eax
mov dword [esp + 0xb4], ebx
mov byte [esp + 0x1d0], 4
call fcn.00440b9e
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x4041f5
push 0x80004005
call fcn.00402680
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x34], eax
mov byte [esp + 0x1d0], 5
call fcn.0040c970
mov dword [esp + 0x3c], eax
call fcn.00440b9e
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x404230
push 0x80004005
call fcn.00402680
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x88], eax
mov byte [esp + 0x1d0], 6
call fcn.00440b9e
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x404265
push 0x80004005
call fcn.00402680
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x8c], eax
mov byte [esp + 0x1d0], 7
call fcn.00440b9e
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40429a
push 0x80004005
call fcn.00402680
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x48], eax
mov byte [esp + 0x1d0], 8
call fcn.00440b9e
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x4042cc
push 0x80004005
call fcn.00402680
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x64], eax
mov byte [esp + 0x1d0], 9
call fcn.00440b9e
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x4042fe
push 0x80004005
call fcn.00402680
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x58], eax
mov byte [esp + 0x1d0], 0xa
call fcn.00440b9e
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x404330
push 0x80004005
call fcn.00402680
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x98], eax
mov byte [esp + 0x1d0], 0xb
call fcn.00440b9e
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x404365
push 0x80004005
call fcn.00402680
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x94], eax
add esi, 0x58
mov byte [esp + 0x1d0], 0xc
cmp dword [esi + 0x18], 8
jb 0x40438e
mov eax, dword [esi + 4]
jmp 0x404391
lea eax, [esi + 4]
push eax
lea ecx, [esp + 0x8c]
push str.InstallationId_s
push ecx
call fcn.0040a780
mov edx, dword [ebp + 8]
add esp, 0xc
push edx
lea eax, [esp + 0x90]
push str.EventTypeID_d
push eax
call fcn.0040a780
add esp, 0xc
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0xd
je 0x4043e6
push esi
mov edi, eax
call fcn.004299d0
mov edi, eax
jmp 0x4043e8
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xe
push str.InstallationId
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401690
lea ecx, [esp + 0x7c]
push ecx
mov ecx, esi
mov byte [esp + 0x1d4], 0xe
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404443
mov edx, dword [esp + 0x18]
push edx
call fcn.00432e81
add esp, 4
mov eax, dword [ebp + 8]
push eax
lea ecx, [esp + 0x38]
push 0x481d34
push ecx
call fcn.0040a780
add esp, 0xc
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0xf
je 0x404484
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.00429930
mov edi, eax
xor ebx, ebx
jmp 0x404486
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xb
push str.EventTypeID
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401690
lea edx, [esp + 0x7c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x10
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4044e1
mov eax, dword [esp + 0x18]
push eax
call fcn.00432e81
add esp, 4
cmp dword [ebp + 8], 1
jne 0x404775
mov esi, dword [esp + 0x38]
lea ecx, [esp + 0xf0]
push ecx
lea edx, [esp + 0x9c]
push edx
mov ecx, esi
call fcn.00406120
mov eax, 8
cmp dword [esi + 0xc8], eax
jb 0x40451f
mov ecx, dword [esi + 0xb4]
mov dword [esp + 0x60], ecx
jmp 0x404529
lea edx, [esi + 0xb4]
mov dword [esp + 0x60], edx
cmp dword [esi + 0x54], eax
jb 0x404533
mov edx, dword [esi + 0x40]
jmp 0x404536
lea edx, [esi + 0x40]
mov esi, dword [esp + 0x3c]
lea eax, [esi + 0xa38]
mov dword [esp + 0x40], eax
lea edi, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x404547
sub eax, edi
sar eax, 1
mov edi, dword [esp + 0x40]
jne 0x404562
lea edi, [esi + 0x2e88]
mov eax, dword [esp + 0x60]
push eax
push edx
mov edx, dword [esp + 0xa0]
lea ecx, [esi + 0x38]
push ecx
push edx
mov ecx, esi
call fcn.0040efd0
push eax
mov eax, dword [esi + 0x20]
push edi
push eax
lea ecx, [esp + 0x80]
push str.InstallationData_brandId_:___d____countryCode_:___s____languageCode_:___d_____MachineData_:__s___TestData_:__s___startTime_:___s____FirstTime_:___s_
push ecx
call fcn.0040a780
add esp, 0x24
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x11
je 0x4045df
mov ecx, dword [esp + 0x40]
lea edi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x4045b7
mov ebx, dword [esp + 0x40]
sub ecx, edi
sar ecx, 1
jne 0x4045d2
lea ebx, [esi + 0x2e88]
mov edi, eax
call fcn.00429930
mov edi, eax
xor ebx, ebx
jmp 0x4045e1
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xb
push str.countryCode
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401690
lea edx, [esp + 0x9c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x12
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x40463f
mov eax, dword [esp + 0x18]
push eax
call fcn.00432e81
add esp, 4
mov ecx, dword [esp + 0x3c]
call fcn.0040efd0
push eax
lea ecx, [esp + 0x38]
push 0x481d34
push ecx
call fcn.0040a780
add esp, 0xc
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x13
je 0x404686
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.00429930
mov edi, eax
xor ebx, ebx
jmp 0x404688
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xc
push str.languageCode
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401690
lea edx, [esp + 0x9c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x14
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4046e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00432e81
add esp, 4
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x15
je 0x404713
lea ecx, [esp + 0xf0]
push ecx
mov esi, eax
call fcn.00429ad0
mov edi, eax
jmp 0x404715
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xb
push str.MachineData
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401690
lea edx, [esp + 0x9c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x16
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404785
mov eax, dword [esp + 0x18]
push eax
call fcn.00432e81
add esp, 4
jmp 0x404785
push 0x13
push 0x480ac4
lea ecx, [esp + 0x6c]
call fcn.00402c50
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x17
je 0x4047b2
lea ecx, [esp + 0x9c]
push ecx
mov esi, eax
call fcn.00429ad0
mov edi, eax
jmp 0x4047b4
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0x10
push str.InstallationData
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401690
lea edx, [esp + 0x7c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x18
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x40480f
mov eax, dword [esp + 0x18]
push eax
call fcn.00432e81
add esp, 4
mov eax, dword [esp + 0x38]
lea ecx, [eax + 0x23c]
mov edi, 8
cmp dword [ecx + 0x18], edi
mov dword [esp + 0x30], ecx
jb 0x40482c
mov ecx, dword [ecx + 4]
jmp 0x40482f
add ecx, 4
cmp dword [eax + 0x238], edi
mov dword [esp + 0x60], ecx
lea ecx, [eax + 0x220]
mov dword [esp + 0x5c], ecx
jb 0x40484e
mov edx, dword [ecx + 4]
mov dword [esp + 0x40], edx
jmp 0x404855
add ecx, 4
mov dword [esp + 0x40], ecx
cmp dword [eax + 0x28c], edi
lea ecx, [eax + 0x274]
mov dword [esp + 0x6c], ecx
jb 0x40486c
mov ecx, dword [ecx + 4]
jmp 0x40486f
add ecx, 4
cmp dword [eax + 0x270], edi
mov dword [esp + 0xe8], ecx
lea ecx, [eax + 0x258]
mov dword [esp + 0x74], ecx
jb 0x404894
mov edx, dword [ecx + 4]
mov dword [esp + 0xe0], edx
jmp 0x40489e
add ecx, 4
mov dword [esp + 0xe0], ecx
cmp dword [eax + 0x218], edi
lea ecx, [eax + 0x200]
mov dword [esp + 0x78], ecx
jb 0x4048b5
mov ecx, dword [ecx + 4]
jmp 0x4048b8
add ecx, 4
cmp dword [eax + 0x1a8], edi
mov dword [esp + 0xd0], ecx
lea ecx, [eax + 0x190]
mov dword [esp + 0xb8], ecx
jb 0x4048e0
mov edx, dword [ecx + 4]
mov dword [esp + 0xc0], edx
jmp 0x4048ea
add ecx, 4
mov dword [esp + 0xc0], ecx
cmp dword [eax + 0x1fc], edi
lea ecx, [eax + 0x1e4]
mov dword [esp + 0xa8], ecx
jb 0x404904
mov ecx, dword [ecx + 4]
jmp 0x404907
add ecx, 4
cmp dword [eax + 0x1e0], edi
mov dword [esp + 0xe4], ecx
lea ecx, [eax + 0x1c8]
mov dword [esp + 0xcc], ecx
jb 0x40492f
mov edx, dword [ecx + 4]
mov dword [esp + 0xec], edx
jmp 0x404939
add ecx, 4
mov dword [esp + 0xec], ecx
cmp dword [eax + 0xc8], edi
lea ecx, [eax + 0xb0]
mov dword [esp + 0xc4], ecx
jb 0x404953
mov ecx, dword [ecx + 4]
jmp 0x404956
add ecx, 4
cmp dword [eax + 0x54], edi
lea esi, [eax + 0x3c]
mov dword [esp + 0x44], ecx
mov dword [esp + 0xbc], esi
jb 0x40496e
mov esi, dword [esi + 4]
jmp 0x404971
add esi, 4
cmp dword [eax + 0xac], edi
lea edx, [eax + 0x94]
mov dword [esp + 0x70], edx
jb 0x404988
mov edx, dword [edx + 4]
jmp 0x40498b
add edx, 4
add eax, 0x74
cmp dword [eax + 0x18], edi
mov dword [esp + 0x90], eax
jb 0x40499f
mov ecx, dword [eax + 4]
jmp 0x4049a2
lea ecx, [eax + 4]
mov edi, dword [esp + 0x3c]
lea eax, [edi + 0x838]
mov edi, dword [edi + 0x34]
push edi
mov edi, dword [esp + 0x64]
push edi
mov edi, dword [esp + 0x48]
push edi
mov edi, dword [esp + 0xf4]
push edi
push eax
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0xf4]
push eax
mov eax, dword [esp + 0xe8]
push eax
mov eax, dword [esp + 0xdc]
push eax
mov eax, dword [esp + 0x104]
push eax
mov eax, dword [esp + 0x110]
push eax
mov eax, dword [esp + 0x6c]
push eax
mov eax, dword [esp + 0x68]
mov eax, dword [eax + 0x20]
push esi
push eax
push edx
mov edx, dword [esp + 0x70]
mov eax, dword [edx + 0x90]
push eax
push ecx
lea ecx, [esp + 0x88]
push str.EventData_MachineIDGUID_:___s____MachineID_:___lu____InstallerVersion_:___s____brandId_:___d____startTime_:___s____FirstTime_:___s____setupUrl_:___s____AbortingStage_:___s____Duration_:___s____Error_:___s____CID_:___s____Serial_ID_:___s____ClientVersion_:___s____uninstallTime_:___s____uninstallReason_:___s____testVersion_:___d_
push ecx
call fcn.0040a780
push 0x10
call fcn.00432e56
add esp, 0x4c
mov dword [esp + 0x44], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x19
je 0x404a49
mov edx, dword [esp + 0x90]
push edx
mov edi, eax
call fcn.004299d0
mov edi, eax
jmp 0x404a4b
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xd
push str.MachineIDGUID
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401690
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x1a
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404aa6
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00432e81
add esp, 4
mov edx, dword [esp + 0x38]
mov eax, dword [edx + 0x90]
push eax
lea ecx, [esp + 0x38]
push 0x480dc4
push ecx
call fcn.0040a780
add esp, 0xc
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x90], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x1b
je 0x404af1
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.00429930
mov edi, eax
xor ebx, ebx
jmp 0x404af3
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 9
push str.MachineID
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401690
lea edx, [esp + 0x4c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x1c
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404b4e
mov eax, dword [esp + 0x18]
push eax
call fcn.00432e81
add esp, 4
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x90], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x1d
je 0x404b7b
mov ecx, dword [esp + 0x70]
push ecx
mov edi, eax
call fcn.004299d0
mov edi, eax
jmp 0x404b7d
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0x10
push str.InstallerVersion
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401690
lea edx, [esp + 0x4c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x1e
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404bd8
mov eax, dword [esp + 0x18]
push eax
call fcn.00432e81
add esp, 4
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx + 0x20]
push edx
lea eax, [esp + 0x38]
push 0x481d34
push eax
call fcn.0040a780
add esp, 0xc
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x70], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x1f
je 0x404c1d
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.00429930
mov edi, eax
xor ebx, ebx
jmp 0x404c1f
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 7
push str.brandId
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401690
lea ecx, [esp + 0x4c]
push ecx
mov ecx, esi
mov byte [esp + 0x1d4], 0x20
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404c7a
mov edx, dword [esp + 0x18]
push edx
call fcn.00432e81
add esp, 4
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x70], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x21
je 0x404ca8
mov ebx, dword [esp + 0x3c]
add ebx, 0x38
mov edi, eax
call fcn.00429930
mov edi, eax
xor ebx, ebx
jmp 0x404caa
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 8
push str.TestData
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401690
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x22
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404d05
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00432e81
add esp, 4
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x70], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x23
je 0x404d32
mov edx, dword [esp + 0xbc]
push edx
mov edi, eax
call fcn.004299d0
mov edi, eax
jmp 0x404d34
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 9
push str.startTime
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401690
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x24
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404d8f
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00432e81
add esp, 4
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0xbc], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x25
je 0x404dbf
mov edx, dword [esp + 0xc4]
push edx
mov edi, eax
call fcn.004299d0
mov edi, eax
jmp 0x404dc1
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 9
push str.FirstTime
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401690
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x26
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404e1c
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00432e81
add esp, 4
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0xc4], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x27
je 0x404e4c
mov edx, dword [esp + 0xcc]
push edx
mov edi, eax
call fcn.004299d0
mov edi, eax
jmp 0x404e4e
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 8
push str.setupUrl
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401690
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x28
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404ea9
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00432e81
add esp, 4
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0xcc], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x29
je 0x404ed9
mov edx, dword [esp + 0xa8]
push edx
mov edi, eax
call fcn.004299d0
mov edi, eax
jmp 0x404edb
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xd
push str.AbortingStage
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401690
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x2a
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404f36
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00432e81
add esp, 4
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0xa8], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x2b
je 0x404f66
mov edx, dword [esp + 0xb8]
push edx
mov edi, eax
call fcn.004299d0
mov esi, eax
jmp 0x404f68
xor esi, esi
mov edx, str.Duration
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401300
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x2c
call fcn.00408d10
mov dword [eax], esi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404fb2
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00432e81
add esp, 4
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0xb8], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x2d
je 0x404fdf
mov edx, dword [esp + 0x78]
push edx
mov edi, eax
call fcn.004299d0
mov edi, eax
jmp 0x404fe1
xor edi, edi
mov edx, str.Error
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401300
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x2e
call fcn.00408d10
mov esi, 8
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], esi
jb 0x40502f
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00432e81
add esp, 4
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x78], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x2f
je 0x405059
mov edx, dword [esp + 0x74]
push edx
mov edi, eax
call fcn.004299d0
mov edi, eax
jmp 0x40505b
xor edi, edi
mov edx, 0x480ea0
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401300
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x30
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], esi
jb 0x4050a4
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00432e81
add esp, 4
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x74], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x31
je 0x4050cf
mov ebx, dword [esp + 0x68]
mov edi, eax
call fcn.00429930
mov edi, eax
xor ebx, ebx
jmp 0x4050d1
xor edi, edi
mov esi, dword [esp + 0x38]
mov edx, str.Serial_ID
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401300
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x32
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x40511f
mov eax, dword [esp + 0x18]
push eax
call fcn.00432e81
add esp, 4
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x68], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x33
je 0x405149
mov ecx, dword [esp + 0x6c]
push ecx
mov edi, eax
call fcn.004299d0
mov edi, eax
jmp 0x40514b
xor edi, edi
mov edx, str.ClientVersion
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401300
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x34
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x405195
mov eax, dword [esp + 0x18]
push eax
call fcn.00432e81
add esp, 4
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x6c], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x35
je 0x4051bf
mov ecx, dword [esp + 0x5c]
push ecx
mov edi, eax
call fcn.004299d0
mov edi, eax
jmp 0x4051c1
xor edi, edi
mov edx, str.uninstallTime
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401300
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x36
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x40520b
mov eax, dword [esp + 0x18]
push eax
call fcn.00432e81
add esp, 4
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x5c], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x37
je 0x405235
mov ecx, dword [esp + 0x30]
push ecx
mov edi, eax
call fcn.004299d0
mov edi, eax
jmp 0x405237
xor edi, edi
mov edx, str.uninstallReason
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401300
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x38
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x405281
mov eax, dword [esp + 0x18]
push eax
call fcn.00432e81
add esp, 4
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx + 0x34]
push edx
lea eax, [esp + 0x38]
push 0x481d34
push eax
call fcn.0040a780
add esp, 0xc
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x39
je 0x4052ca
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.00429930
mov esi, dword [esp + 0x38]
mov edi, eax
xor ebx, ebx
jmp 0x4052cc
xor edi, edi
mov edx, str.testVersion
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401300
lea ecx, [esp + 0x4c]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x3a
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x405316
mov edx, dword [esp + 0x18]
push edx
call fcn.00432e81
add esp, 4
mov eax, dword [ebp + 8]
cmp eax, 0xb
jne 0x405364
call fcn.00440b9e
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x405338
push 0x80004005
call fcn.00402680
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x44], eax
lea ecx, [esp + 0x4c]
push ecx
lea edx, [esp + 0x48]
push edx
mov byte [esp + 0x1d8], 0x3b
call fcn.00408060
jmp 0x405490
cmp eax, 3
jne 0x4054d4
call fcn.00440b9e
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x405387
push 0x80004005
call fcn.00402680
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x44], eax
mov byte [esp + 0x1d0], 0x3c
mov ecx, dword [esi + 0x298]
mov edx, dword [esi + 0x294]
mov eax, dword [esi + 0x290]
push ecx
push edx
push eax
lea ecx, [esp + 0x50]
push str._downloadTime_:___lld____isDirect_:___d_
push ecx
call fcn.0040a780
add esp, 0x14
push 0x10
call fcn.00432e56
add esp, 4
cmp eax, ebx
je 0x4053e7
fild qword [esi + 0x290]
mov dword [eax], 3
mov edi, eax
fstp qword [eax + 8]
jmp 0x4053e9
xor edi, edi
mov edx, str.downloadTime
lea eax, [esp + 0x14]
call fcn.00401300
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x3d
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0x3c
cmp dword [esp + 0x2c], 8
jb 0x40542b
mov eax, dword [esp + 0x18]
push eax
call fcn.00432e81
add esp, 4
push 0x10
call fcn.00432e56
add esp, 4
cmp eax, ebx
je 0x40544c
fild dword [esi + 0x298]
mov dword [eax], 3
mov edi, eax
fstp qword [eax + 8]
jmp 0x40544e
xor edi, edi
mov edx, str.isDirect
lea eax, [esp + 0x14]
call fcn.00401300
lea ecx, [esp + 0x4c]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x3e
call fcn.00408d10
mov dword [eax], edi
mov byte [esp + 0x1d0], 0x3c
cmp dword [esp + 0x2c], 8
jb 0x405490
mov edx, dword [esp + 0x18]
push edx
call fcn.00432e81
add esp, 4
push 0x480f2c
lea ecx, [esp + 0x4c]
call fcn.00408c40
mov esi, dword [esp + 0x44]
mov eax, dword [esi - 0xc]
push eax
push esi
lea ecx, [esp + 0x50]
call fcn.00408e70
lea eax, [esi - 0x10]
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x1d0], 0xc
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4054d4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x480fbc
lea ecx, [esp + 0x4c]
call fcn.00408c40
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x3f
je 0x40550c
lea ecx, [esp + 0x4c]
push ecx
mov esi, eax
call fcn.00429ad0
mov esi, eax
jmp 0x40550e
xor esi, esi
mov edx, 0x480fc0
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401300
lea edx, [esp + 0x7c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x40
call fcn.00408d10
mov dword [eax], esi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x405558
mov eax, dword [esp + 0x18]
push eax
call fcn.00432e81
add esp, 4
push 0x480fd4
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0x80]
push edx
call fcn.00408b60
add esp, 0xc
lea ecx, [esp + 0x8c]
push ecx
push eax
lea edx, [esp + 0x7c]
push edx
mov byte [esp + 0x1dc], 0x41
call fcn.00408aa0
add esp, 0xc
push 0x480fd4
push eax
lea eax, [esp + 0x70]
push eax
mov byte [esp + 0x1dc], 0x42
call fcn.00408b60
add esp, 0xc
lea ecx, [esp + 0x64]
push ecx
push eax
lea edx, [esp + 0x74]
push edx
mov byte [esp + 0x1dc], 0x43
call fcn.00408aa0
add esp, 0xc
push 0x480fd4
push eax
lea eax, [esp + 0x64]
push eax
mov byte [esp + 0x1dc], 0x44
call fcn.00408b60
add esp, 0xc
lea ecx, [esp + 0x48]
push ecx
push eax
lea edx, [esp + 0x38]
push edx
mov byte [esp + 0x1dc], 0x45
call fcn.00408aa0
add esp, 0xc
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x1d4], 0x46
call fcn.0040a690
mov byte [esp + 0x1d0], 0x45
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405639
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0x44
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405661
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0x43
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405689
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0x42
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4056b1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0x41
mov eax, dword [esp + 0x74]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4056d9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0xc
mov eax, dword [esp + 0x78]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405701
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx + 0x21c]
cmp eax, ebx
jbe 0x405914
push eax
lea edx, [esp + 0x44]
push edx
call fcn.004120f0
mov esi, dword [esp + 0x40]
mov byte [esp + 0x1d8], 0x47
mov eax, dword [esp + 0x48]
mov ecx, dword [esi + 0x21c]
push eax
push ecx
lea edx, [esp + 0xa4]
push 0x480fd8
push edx
call fcn.0040a780
add esp, 0x18
push 0x480fd4
lea ecx, [esp + 0x5c]
call fcn.00408930
mov ecx, dword [esp + 0x94]
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x60]
call fcn.00408e70
mov eax, dword [esi + 0x21c]
push eax
lea ecx, [esp + 0x38]
push 0x480dc4
push ecx
call fcn.0040a780
add esp, 0xc
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x48
je 0x4057b2
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.00429930
mov esi, eax
xor ebx, ebx
jmp 0x4057b4
xor esi, esi
mov edx, str.Code
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x47
call fcn.00401300
lea edx, [esp + 0xac]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x49
call fcn.00408d10
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x47
cmp dword [esp + 0x2c], 8
jb 0x405801
mov eax, dword [esp + 0x18]
push eax
call fcn.00432e81
add esp, 4
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x4a
je 0x40582c
mov ebx, dword [esp + 0x40]
mov edi, eax
call fcn.00429930
mov esi, eax
xor ebx, ebx
jmp 0x40582e
xor esi, esi
mov edx, str.Description
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x47
call fcn.00401300
lea ecx, [esp + 0xac]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x4b
call fcn.00408d10
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x47
cmp dword [esp + 0x2c], 8
jb 0x40587b
mov edx, dword [esp + 0x18]
push edx
call fcn.00432e81
add esp, 4
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x4c
je 0x4058a8
lea ecx, [esp + 0xac]
push ecx
mov esi, eax
call fcn.00429ad0
mov esi, eax
jmp 0x4058aa
xor esi, esi
mov edx, str.SystemError
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x47
call fcn.00401300
lea edx, [esp + 0x7c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x4d
call fcn.00408d10
mov dword [eax], esi
cmp dword [esp + 0x2c], 8
jb 0x4058ec
mov eax, dword [esp + 0x18]
push eax
call fcn.00432e81
add esp, 4
mov byte [esp + 0x1d0], 0xc
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405914
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [esp + 0x58]
lea eax, [esp + 0x188]
call fcn.00401300
mov byte [esp + 0x1d0], 0x4e
mov eax, dword [esp + 0x18c]
mov edi, 8
cmp dword [esp + 0x1a0], edi
jae 0x405948
lea eax, [esp + 0x18c]
mov esi, dword [ebp + 8]
push eax
push esi
push str.Reporting_event:__d__data_sent:__s
push ebx
push 0x11c
push str.CReportinServiceST::DoReportExec
call fcn.0042eef0
add esp, 0x18
push str.Content_Type:_application_x_www_form_urlencoded_r_n
mov word [esp + 0x140], bx
mov dword [esp + 0x142], ebx
mov dword [esp + 0x146], ebx
mov dword [esp + 0x14a], ebx
mov word [esp + 0x14e], bx
mov word [esp + 0x160], bx
mov dword [esp + 0x162], ebx
mov dword [esp + 0x166], ebx
mov dword [esp + 0x16a], ebx
mov word [esp + 0x16e], bx
mov word [esp + 0x120], bx
mov dword [esp + 0x122], ebx
mov dword [esp + 0x126], ebx
mov dword [esp + 0x12a], ebx
mov word [esp + 0x12e], bx
mov word [esp + 0x110], bx
mov dword [esp + 0x112], ebx
mov dword [esp + 0x116], ebx
mov dword [esp + 0x11a], ebx
mov word [esp + 0x11e], bx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
cmp esi, ebx
mov word [esp + 0x10c], di
mov dword [esp + 0x114], eax
je 0x405a75
sub esp, 0x1c
lea ecx, [esp + 0x1a4]
mov eax, esp
mov dword [esp + 0x4c], esp
call fcn.0040acb0
lea edi, [esp + 0x138]
call fcn.00412020
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + 0x18]
add esp, 0x1c
mov ecx, dword [ecx + 8]
lea edx, [esp + 0x10c]
push edx
mov edx, edi
push edx
lea edx, [esp + 0x164]
push edx
lea edx, [esp + 0x148]
push edx
push eax
push str._bLLLL
push ebx
push ebx
push 1
push 0x68
push ecx
call fcn.00439c51
add esp, 0x2c
call fcn.00409c70
mov dword [esp + 0xd8], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0xd8]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xd8]
mov dword [eax], eax
mov eax, dword [esp + 0xd8]
mov dword [eax + 8], eax
mov dword [esp + 0xdc], ebx
push ebx
mov byte [esp + 0x1d4], 0x4f
call fcn.00450a30
mov dword [esp + 0x170], eax
add esp, 4
lea eax, [esp + 0x16c]
push eax
mov esi, str._Y__m__dT_H:_M:_S.000Z
lea edi, [esp + 0xcc]
mov dword [esp + 0x174], edx
call fcn.0040a7a0
push 0x10
mov byte [esp + 0x1d4], 0x50
call fcn.00432e56
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x51
je 0x405b16
mov ecx, dword [esp + 0x38]
add ecx, 0x20
push ecx
mov edi, eax
call fcn.004299d0
mov esi, eax
jmp 0x405b18
xor esi, esi
mov edx, str.target
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x50
call fcn.00401300
lea edx, [esp + 0xd4]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x52
call fcn.00408d10
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x50
cmp dword [esp + 0x2c], 8
jb 0x405b65
mov eax, dword [esp + 0x18]
push eax
call fcn.00432e81
add esp, 4
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x53
je 0x405b93
mov ebx, dword [esp + 0xc8]
mov edi, eax
call fcn.00429930
mov esi, eax
xor ebx, ebx
jmp 0x405b95
xor esi, esi
mov edx, str.eventDateTime
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x50
call fcn.00401300
lea ecx, [esp + 0xd4]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x54
call fcn.00408d10
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x50
cmp dword [esp + 0x2c], 8
jb 0x405be2
mov edx, dword [esp + 0x18]
push edx
call fcn.00432e81
add esp, 4
push 0x10
call fcn.00432e56
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x55
je 0x405c0f
lea ecx, [esp + 0xd4]
push ecx
mov esi, eax
call fcn.00429ad0
mov esi, eax
jmp 0x405c11
xor esi, esi
mov edx, str.eventHeader
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x50
call fcn.00401300
lea edx, [esp + 0x7c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x56
call fcn.00408d10
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x50
cmp dword [esp + 0x2c], 8
jb 0x405c5b
mov eax, dword [esp + 0x18]
push eax
call fcn.00432e81
add esp, 4
push 0x10
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], bx
call fcn.00432e56
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x57
je 0x405c98
lea ecx, [esp + 0x7c]
push ecx
mov esi, eax
call fcn.00429ad0
mov dword [esp + 0x3c], eax
jmp 0x405c9c
mov dword [esp + 0x3c], ebx
mov ecx, dword [esp + 0x3c]
lea esi, [esp + 0x1a4]
mov byte [esp + 0x1d0], 0x50
call fcn.00429d10
mov byte [esp + 0x1d0], 0x58
xor eax, eax
push str.Content_Type:_application_json_r_n
mov word [esp + 0x150], bx
mov dword [esp + 0x152], eax
mov dword [esp + 0x156], eax
mov dword [esp + 0x15a], eax
mov word [esp + 0x15e], ax
mov word [esp + 0x178], bx
mov dword [esp + 0x17a], eax
mov dword [esp + 0x17e], eax
mov dword [esp + 0x182], eax
mov word [esp + 0x186], ax
mov word [esp + 0x130], bx
mov dword [esp + 0x132], eax
mov dword [esp + 0x136], eax
mov dword [esp + 0x13a], eax
mov word [esp + 0x13e], ax
mov word [esp + 0x100], bx
mov dword [esp + 0x102], eax
mov dword [esp + 0x106], eax
mov dword [esp + 0x10a], eax
mov word [esp + 0x10e], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
sub esp, 0x1c
mov dword [esp + 0x120], eax
mov ecx, esi
mov eax, esp
mov word [esp + 0x118], 8
mov dword [esp + 0x4c], esp
call fcn.0040acb0
lea edi, [esp + 0x148]
call fcn.00412020
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + 0x1c]
add esp, 0x1c
mov ecx, dword [ecx + 0xc]
lea edx, [esp + 0xfc]
push edx
mov edx, edi
push edx
lea edx, [esp + 0x17c]
push edx
lea edx, [esp + 0x158]
push edx
push eax
push str._bLLLL
push ebx
push ebx
push 1
push 0x68
push ecx
call fcn.00439c51
add esp, 0x2c
cmp dword [esp + 0x3c], ebx
je 0x405de1
mov esi, dword [esp + 0x3c]
mov ecx, esi
call fcn.00429b50
push esi
call fcn.00432e81
add esp, 4
mov edi, dword [esp + 0x38]
call fcn.00406090
mov edi, 8
cmp dword [esp + 0x1bc], edi
jb 0x405e08
mov eax, dword [esp + 0x1a8]
push eax
call fcn.00432e81
add esp, 4
mov byte [esp + 0x1d0], 0x4f
mov eax, dword [esp + 0xc8]
mov esi, 7
add eax, 0xfffffff0
mov dword [esp + 0x1bc], esi
mov dword [esp + 0x1b8], ebx
mov word [esp + 0x1a8], bx
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405e4e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [esp + 0xd4]
mov byte [esp + 0x1d0], 0x4e
call fcn.004091f0
cmp dword [esp + 0x1a0], edi
jb 0x405e7b
mov ecx, dword [esp + 0x18c]
push ecx
call fcn.00432e81
add esp, 4
mov byte [esp + 0x1d0], 0xb
mov eax, dword [esp + 0x94]
add eax, 0xfffffff0
mov dword [esp + 0x1a0], esi
mov dword [esp + 0x19c], ebx
mov word [esp + 0x18c], bx
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x405ebc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0xa
mov eax, dword [esp + 0x98]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405ee7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 9
mov eax, dword [esp + 0x58]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405f0f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 8
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405f37
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 7
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405f5f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 6
mov eax, dword [esp + 0x8c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405f8a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 5
mov eax, dword [esp + 0x88]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405fb5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 4
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405fdd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [esp + 0xac]
mov byte [esp + 0x1d0], 3
call fcn.004091f0
lea eax, [esp + 0xf0]
mov byte [esp + 0x1d0], 2
call fcn.004091f0
lea eax, [esp + 0x4c]
mov byte [esp + 0x1d0], 1
call fcn.004091f0
lea eax, [esp + 0x9c]
mov byte [esp + 0x1d0], bl
call fcn.004091f0
lea eax, [esp + 0x7c]
mov dword [esp + 0x1d0], 0xffffffff
call fcn.004091f0
mov ecx, dword [esp + 0x1c8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1b0]
xor ecx, esp
call fcn.0044f9f6
mov esp, ebp
pop ebp
ret 4