Function at 0x4041b0
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x47847a
mov eax, dword fs:[0]
push eax
sub esp, 0x1b8
mov eax, dword [0x4a0800]
xor eax, esp
mov dword [esp + 0x1b0], eax
push ebx
push esi
push edi
mov eax, dword [0x4a0800]
xor eax, esp
push eax
lea eax, [esp + 0x1c8]
mov dword fs:[0], eax
mov esi, ecx
mov ebx, esi
mov dword [esp + 0x38], esi
call fcn.00408160
call fcn.00409f20
mov dword [esp + 0x80], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0x80]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x80]
mov dword [eax], eax
mov eax, dword [esp + 0x80]
xor ebx, ebx
mov dword [eax + 8], eax
mov dword [esp + 0x84], ebx
mov dword [esp + 0x1d0], ebx
call fcn.00409f20
mov dword [esp + 0xa0], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0xa0]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xa0]
mov dword [eax], eax
mov eax, dword [esp + 0xa0]
mov dword [eax + 8], eax
mov dword [esp + 0xa4], ebx
mov byte [esp + 0x1d0], 1
call fcn.00409f20
mov dword [esp + 0x50], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0x50]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x50]
mov dword [eax], eax
mov eax, dword [esp + 0x50]
mov dword [eax + 8], eax
mov dword [esp + 0x54], ebx
mov byte [esp + 0x1d0], 2
call fcn.00409f20
mov dword [esp + 0xf4], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0xf4]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xf4]
mov dword [eax], eax
mov eax, dword [esp + 0xf4]
mov dword [eax + 8], eax
mov dword [esp + 0xf8], ebx
mov byte [esp + 0x1d0], 3
call fcn.00409f20
mov dword [esp + 0xb0], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0xb0]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [eax], eax
mov eax, dword [esp + 0xb0]
mov dword [eax + 8], eax
mov dword [esp + 0xb4], ebx
mov byte [esp + 0x1d0], 4
call fcn.0044622e
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x404335
push 0x80004005
call fcn.00402720
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x34], eax
mov byte [esp + 0x1d0], 5
call fcn.0040fd50
mov dword [esp + 0x3c], eax
call fcn.0044622e
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x404370
push 0x80004005
call fcn.00402720
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x88], eax
mov byte [esp + 0x1d0], 6
call fcn.0044622e
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x4043a5
push 0x80004005
call fcn.00402720
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x8c], eax
mov byte [esp + 0x1d0], 7
call fcn.0044622e
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x4043da
push 0x80004005
call fcn.00402720
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x48], eax
mov byte [esp + 0x1d0], 8
call fcn.0044622e
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40440c
push 0x80004005
call fcn.00402720
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x64], eax
mov byte [esp + 0x1d0], 9
call fcn.0044622e
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40443e
push 0x80004005
call fcn.00402720
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x58], eax
mov byte [esp + 0x1d0], 0xa
call fcn.0044622e
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x404470
push 0x80004005
call fcn.00402720
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x98], eax
mov byte [esp + 0x1d0], 0xb
call fcn.0044622e
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x4044a5
push 0x80004005
call fcn.00402720
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x94], eax
add esi, 0x58
mov byte [esp + 0x1d0], 0xc
cmp dword [esi + 0x18], 8
jb 0x4044ce
mov eax, dword [esi + 4]
jmp 0x4044d1
lea eax, [esi + 4]
push eax
lea ecx, [esp + 0x8c]
push str.InstallationId_s
push ecx
call fcn.0040aa30
mov edx, dword [ebp + 8]
add esp, 0xc
push edx
lea eax, [esp + 0x90]
push str.EventTypeID_d
push eax
call fcn.0040aa30
add esp, 0xc
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0xd
je 0x404526
push esi
mov edi, eax
call fcn.0042f060
mov edi, eax
jmp 0x404528
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xe
push str.InstallationId
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea ecx, [esp + 0x7c]
push ecx
mov ecx, esi
mov byte [esp + 0x1d4], 0xe
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404583
mov edx, dword [esp + 0x18]
push edx
call fcn.00438516
add esp, 4
mov eax, dword [ebp + 8]
push eax
lea ecx, [esp + 0x38]
push 0x487d84
push ecx
call fcn.0040aa30
add esp, 0xc
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0xf
je 0x4045c4
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042efc0
mov edi, eax
xor ebx, ebx
jmp 0x4045c6
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xb
push str.EventTypeID
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea edx, [esp + 0x7c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x10
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404621
mov eax, dword [esp + 0x18]
push eax
call fcn.00438516
add esp, 4
cmp dword [ebp + 8], 1
jne 0x4048b5
mov esi, dword [esp + 0x38]
lea ecx, [esp + 0xf0]
push ecx
lea edx, [esp + 0x9c]
push edx
mov ecx, esi
call fcn.004062a0
mov eax, 8
cmp dword [esi + 0xc8], eax
jb 0x40465f
mov ecx, dword [esi + 0xb4]
mov dword [esp + 0x60], ecx
jmp 0x404669
lea edx, [esi + 0xb4]
mov dword [esp + 0x60], edx
cmp dword [esi + 0x54], eax
jb 0x404673
mov edx, dword [esi + 0x40]
jmp 0x404676
lea edx, [esi + 0x40]
mov esi, dword [esp + 0x3c]
lea eax, [esi + 0xa38]
mov dword [esp + 0x40], eax
lea edi, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x404687
sub eax, edi
sar eax, 1
mov edi, dword [esp + 0x40]
jne 0x4046a2
lea edi, [esi + 0x310c]
mov eax, dword [esp + 0x60]
push eax
push edx
mov edx, dword [esp + 0xa0]
lea ecx, [esi + 0x38]
push ecx
push edx
mov ecx, esi
call fcn.004124c0
push eax
mov eax, dword [esi + 0x20]
push edi
push eax
lea ecx, [esp + 0x80]
push str.InstallationData_brandId_:___d____countryCode_:___s____languageCode_:___d_____MachineData_:__s___TestData_:__s___startTime_:___s____FirstTime_:___s_
push ecx
call fcn.0040aa30
add esp, 0x24
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x11
je 0x40471f
mov ecx, dword [esp + 0x40]
lea edi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x4046f7
mov ebx, dword [esp + 0x40]
sub ecx, edi
sar ecx, 1
jne 0x404712
lea ebx, [esi + 0x310c]
mov edi, eax
call fcn.0042efc0
mov edi, eax
xor ebx, ebx
jmp 0x404721
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xb
push str.countryCode
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea edx, [esp + 0x9c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x12
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x40477f
mov eax, dword [esp + 0x18]
push eax
call fcn.00438516
add esp, 4
mov ecx, dword [esp + 0x3c]
call fcn.004124c0
push eax
lea ecx, [esp + 0x38]
push 0x487d84
push ecx
call fcn.0040aa30
add esp, 0xc
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x13
je 0x4047c6
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042efc0
mov edi, eax
xor ebx, ebx
jmp 0x4047c8
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xc
push str.languageCode
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea edx, [esp + 0x9c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x14
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404826
mov eax, dword [esp + 0x18]
push eax
call fcn.00438516
add esp, 4
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x15
je 0x404853
lea ecx, [esp + 0xf0]
push ecx
mov esi, eax
call fcn.0042f160
mov edi, eax
jmp 0x404855
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xb
push str.MachineData
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea edx, [esp + 0x9c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x16
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4048c5
mov eax, dword [esp + 0x18]
push eax
call fcn.00438516
add esp, 4
jmp 0x4048c5
push 0x13
push 0x486ac4
lea ecx, [esp + 0x6c]
call fcn.00402cf0
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x17
je 0x4048f2
lea ecx, [esp + 0x9c]
push ecx
mov esi, eax
call fcn.0042f160
mov edi, eax
jmp 0x4048f4
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0x10
push str.InstallationData
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea edx, [esp + 0x7c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x18
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x40494f
mov eax, dword [esp + 0x18]
push eax
call fcn.00438516
add esp, 4
mov eax, dword [esp + 0x38]
lea ecx, [eax + 0x274]
mov edi, 8
cmp dword [ecx + 0x18], edi
mov dword [esp + 0x30], ecx
jb 0x40496c
mov ecx, dword [ecx + 4]
jmp 0x40496f
add ecx, 4
cmp dword [eax + 0x270], edi
mov dword [esp + 0x60], ecx
lea ecx, [eax + 0x258]
mov dword [esp + 0x5c], ecx
jb 0x40498e
mov edx, dword [ecx + 4]
mov dword [esp + 0x40], edx
jmp 0x404995
add ecx, 4
mov dword [esp + 0x40], ecx
cmp dword [eax + 0x2c4], edi
lea ecx, [eax + 0x2ac]
mov dword [esp + 0x6c], ecx
jb 0x4049ac
mov ecx, dword [ecx + 4]
jmp 0x4049af
add ecx, 4
cmp dword [eax + 0x2a8], edi
mov dword [esp + 0xe8], ecx
lea ecx, [eax + 0x290]
mov dword [esp + 0x74], ecx
jb 0x4049d4
mov edx, dword [ecx + 4]
mov dword [esp + 0xe0], edx
jmp 0x4049de
add ecx, 4
mov dword [esp + 0xe0], ecx
cmp dword [eax + 0x250], edi
lea ecx, [eax + 0x238]
mov dword [esp + 0x78], ecx
jb 0x4049f5
mov ecx, dword [ecx + 4]
jmp 0x4049f8
add ecx, 4
cmp dword [eax + 0x1a8], edi
mov dword [esp + 0xd0], ecx
lea ecx, [eax + 0x190]
mov dword [esp + 0xb8], ecx
jb 0x404a20
mov edx, dword [ecx + 4]
mov dword [esp + 0xc0], edx
jmp 0x404a2a
add ecx, 4
mov dword [esp + 0xc0], ecx
cmp dword [eax + 0x234], edi
lea ecx, [eax + 0x21c]
mov dword [esp + 0xa8], ecx
jb 0x404a44
mov ecx, dword [ecx + 4]
jmp 0x404a47
add ecx, 4
cmp dword [eax + 0x218], edi
mov dword [esp + 0xe4], ecx
lea ecx, [eax + 0x200]
mov dword [esp + 0xcc], ecx
jb 0x404a6f
mov edx, dword [ecx + 4]
mov dword [esp + 0xec], edx
jmp 0x404a79
add ecx, 4
mov dword [esp + 0xec], ecx
cmp dword [eax + 0xc8], edi
lea ecx, [eax + 0xb0]
mov dword [esp + 0xc4], ecx
jb 0x404a93
mov ecx, dword [ecx + 4]
jmp 0x404a96
add ecx, 4
cmp dword [eax + 0x54], edi
lea esi, [eax + 0x3c]
mov dword [esp + 0x44], ecx
mov dword [esp + 0xbc], esi
jb 0x404aae
mov esi, dword [esi + 4]
jmp 0x404ab1
add esi, 4
cmp dword [eax + 0xac], edi
lea edx, [eax + 0x94]
mov dword [esp + 0x70], edx
jb 0x404ac8
mov edx, dword [edx + 4]
jmp 0x404acb
add edx, 4
add eax, 0x74
cmp dword [eax + 0x18], edi
mov dword [esp + 0x90], eax
jb 0x404adf
mov ecx, dword [eax + 4]
jmp 0x404ae2
lea ecx, [eax + 4]
mov edi, dword [esp + 0x3c]
lea eax, [edi + 0x838]
mov edi, dword [edi + 0x34]
push edi
mov edi, dword [esp + 0x64]
push edi
mov edi, dword [esp + 0x48]
push edi
mov edi, dword [esp + 0xf4]
push edi
push eax
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0xf4]
push eax
mov eax, dword [esp + 0xe8]
push eax
mov eax, dword [esp + 0xdc]
push eax
mov eax, dword [esp + 0x104]
push eax
mov eax, dword [esp + 0x110]
push eax
mov eax, dword [esp + 0x6c]
push eax
mov eax, dword [esp + 0x68]
mov eax, dword [eax + 0x20]
push esi
push eax
push edx
mov edx, dword [esp + 0x70]
mov eax, dword [edx + 0x90]
push eax
push ecx
lea ecx, [esp + 0x88]
push str.EventData_MachineIDGUID_:___s____MachineID_:___lu____InstallerVersion_:___s____brandId_:___d____startTime_:___s____FirstTime_:___s____setupUrl_:___s____AbortingStage_:___s____Duration_:___s____Error_:___s____CID_:___s____Serial_ID_:___s____ClientVersion_:___s____uninstallTime_:___s____uninstallReason_:___s____testVersion_:___d_
push ecx
call fcn.0040aa30
push 0x10
call fcn.004384e6
add esp, 0x4c
mov dword [esp + 0x44], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x19
je 0x404b89
mov edx, dword [esp + 0x90]
push edx
mov edi, eax
call fcn.0042f060
mov edi, eax
jmp 0x404b8b
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xd
push str.MachineIDGUID
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x1a
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404be6
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00438516
add esp, 4
mov edx, dword [esp + 0x38]
mov eax, dword [edx + 0x90]
push eax
lea ecx, [esp + 0x38]
push 0x486dc4
push ecx
call fcn.0040aa30
add esp, 0xc
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x90], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x1b
je 0x404c31
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042efc0
mov edi, eax
xor ebx, ebx
jmp 0x404c33
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 9
push str.MachineID
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea edx, [esp + 0x4c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x1c
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404c8e
mov eax, dword [esp + 0x18]
push eax
call fcn.00438516
add esp, 4
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x90], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x1d
je 0x404cbb
mov ecx, dword [esp + 0x70]
push ecx
mov edi, eax
call fcn.0042f060
mov edi, eax
jmp 0x404cbd
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0x10
push str.InstallerVersion
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea edx, [esp + 0x4c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x1e
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404d18
mov eax, dword [esp + 0x18]
push eax
call fcn.00438516
add esp, 4
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx + 0x20]
push edx
lea eax, [esp + 0x38]
push 0x487d84
push eax
call fcn.0040aa30
add esp, 0xc
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x70], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x1f
je 0x404d5d
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042efc0
mov edi, eax
xor ebx, ebx
jmp 0x404d5f
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 7
push str.brandId
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea ecx, [esp + 0x4c]
push ecx
mov ecx, esi
mov byte [esp + 0x1d4], 0x20
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404dba
mov edx, dword [esp + 0x18]
push edx
call fcn.00438516
add esp, 4
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x70], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x21
je 0x404de8
mov ebx, dword [esp + 0x3c]
add ebx, 0x38
mov edi, eax
call fcn.0042efc0
mov edi, eax
xor ebx, ebx
jmp 0x404dea
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 8
push str.TestData
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x22
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404e45
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00438516
add esp, 4
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x70], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x23
je 0x404e72
mov edx, dword [esp + 0xbc]
push edx
mov edi, eax
call fcn.0042f060
mov edi, eax
jmp 0x404e74
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 9
push str.startTime
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x24
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404ecf
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00438516
add esp, 4
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0xbc], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x25
je 0x404eff
mov edx, dword [esp + 0xc4]
push edx
mov edi, eax
call fcn.0042f060
mov edi, eax
jmp 0x404f01
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 9
push str.FirstTime
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x26
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404f5c
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00438516
add esp, 4
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0xc4], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x27
je 0x404f8c
mov edx, dword [esp + 0xcc]
push edx
mov edi, eax
call fcn.0042f060
mov edi, eax
jmp 0x404f8e
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 8
push str.setupUrl
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x28
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404fe9
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00438516
add esp, 4
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0xcc], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x29
je 0x405019
mov edx, dword [esp + 0xa8]
push edx
mov edi, eax
call fcn.0042f060
mov edi, eax
jmp 0x40501b
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xd
push str.AbortingStage
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401720
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x2a
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x405076
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00438516
add esp, 4
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0xa8], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x2b
je 0x4050a6
mov edx, dword [esp + 0xb8]
push edx
mov edi, eax
call fcn.0042f060
mov esi, eax
jmp 0x4050a8
xor esi, esi
mov edx, str.Duration
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x2c
call fcn.00409000
mov dword [eax], esi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4050f2
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00438516
add esp, 4
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0xb8], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x2d
je 0x40511f
mov edx, dword [esp + 0x78]
push edx
mov edi, eax
call fcn.0042f060
mov edi, eax
jmp 0x405121
xor edi, edi
mov edx, str.Error
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x2e
call fcn.00409000
mov esi, 8
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], esi
jb 0x40516f
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00438516
add esp, 4
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x78], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x2f
je 0x405199
mov edx, dword [esp + 0x74]
push edx
mov edi, eax
call fcn.0042f060
mov edi, eax
jmp 0x40519b
xor edi, edi
mov edx, 0x486ea0
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x30
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], esi
jb 0x4051e4
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00438516
add esp, 4
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x74], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x31
je 0x40520f
mov ebx, dword [esp + 0x68]
mov edi, eax
call fcn.0042efc0
mov edi, eax
xor ebx, ebx
jmp 0x405211
xor edi, edi
mov esi, dword [esp + 0x38]
mov edx, str.Serial_ID
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x32
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x40525f
mov eax, dword [esp + 0x18]
push eax
call fcn.00438516
add esp, 4
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x68], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x33
je 0x405289
mov ecx, dword [esp + 0x6c]
push ecx
mov edi, eax
call fcn.0042f060
mov edi, eax
jmp 0x40528b
xor edi, edi
mov edx, str.ClientVersion
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x34
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4052d5
mov eax, dword [esp + 0x18]
push eax
call fcn.00438516
add esp, 4
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x6c], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x35
je 0x4052ff
mov ecx, dword [esp + 0x5c]
push ecx
mov edi, eax
call fcn.0042f060
mov edi, eax
jmp 0x405301
xor edi, edi
mov edx, str.uninstallTime
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x36
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x40534b
mov eax, dword [esp + 0x18]
push eax
call fcn.00438516
add esp, 4
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x5c], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x37
je 0x405375
mov ecx, dword [esp + 0x30]
push ecx
mov edi, eax
call fcn.0042f060
mov edi, eax
jmp 0x405377
xor edi, edi
mov edx, str.uninstallReason
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x38
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4053c1
mov eax, dword [esp + 0x18]
push eax
call fcn.00438516
add esp, 4
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx + 0x34]
push edx
lea eax, [esp + 0x38]
push 0x487d84
push eax
call fcn.0040aa30
add esp, 0xc
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x39
je 0x40540a
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042efc0
mov esi, dword [esp + 0x38]
mov edi, eax
xor ebx, ebx
jmp 0x40540c
xor edi, edi
mov edx, str.testVersion
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea ecx, [esp + 0x4c]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x3a
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x405456
mov edx, dword [esp + 0x18]
push edx
call fcn.00438516
add esp, 4
mov eax, dword [ebp + 8]
cmp eax, 0xb
jne 0x4054a4
call fcn.0044622e
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x405478
push 0x80004005
call fcn.00402720
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x44], eax
lea ecx, [esp + 0x4c]
push ecx
lea edx, [esp + 0x48]
push edx
mov byte [esp + 0x1d8], 0x3b
call fcn.00408350
jmp 0x4055d0
cmp eax, 3
jne 0x405614
call fcn.0044622e
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x4054c7
push 0x80004005
call fcn.00402720
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x44], eax
mov byte [esp + 0x1d0], 0x3c
mov ecx, dword [esi + 0x2d0]
mov edx, dword [esi + 0x2cc]
mov eax, dword [esi + 0x2c8]
push ecx
push edx
push eax
lea ecx, [esp + 0x50]
push str._downloadTime_:___lld____isDirect_:___d_
push ecx
call fcn.0040aa30
add esp, 0x14
push 0x10
call fcn.004384e6
add esp, 4
cmp eax, ebx
je 0x405527
fild qword [esi + 0x2c8]
mov dword [eax], 3
mov edi, eax
fstp qword [eax + 8]
jmp 0x405529
xor edi, edi
mov edx, str.downloadTime
lea eax, [esp + 0x14]
call fcn.00401360
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x3d
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0x3c
cmp dword [esp + 0x2c], 8
jb 0x40556b
mov eax, dword [esp + 0x18]
push eax
call fcn.00438516
add esp, 4
push 0x10
call fcn.004384e6
add esp, 4
cmp eax, ebx
je 0x40558c
fild dword [esi + 0x2d0]
mov dword [eax], 3
mov edi, eax
fstp qword [eax + 8]
jmp 0x40558e
xor edi, edi
mov edx, str.isDirect
lea eax, [esp + 0x14]
call fcn.00401360
lea ecx, [esp + 0x4c]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x3e
call fcn.00409000
mov dword [eax], edi
mov byte [esp + 0x1d0], 0x3c
cmp dword [esp + 0x2c], 8
jb 0x4055d0
mov edx, dword [esp + 0x18]
push edx
call fcn.00438516
add esp, 4
push 0x486f2c
lea ecx, [esp + 0x4c]
call fcn.00408f30
mov esi, dword [esp + 0x44]
mov eax, dword [esi - 0xc]
push eax
push esi
lea ecx, [esp + 0x50]
call fcn.00409160
lea eax, [esi - 0x10]
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x1d0], 0xc
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405614
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x486fbc
lea ecx, [esp + 0x4c]
call fcn.00408f30
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x3f
je 0x40564c
lea ecx, [esp + 0x4c]
push ecx
mov esi, eax
call fcn.0042f160
mov esi, eax
jmp 0x40564e
xor esi, esi
mov edx, 0x486fc0
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea edx, [esp + 0x7c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x40
call fcn.00409000
mov dword [eax], esi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x405698
mov eax, dword [esp + 0x18]
push eax
call fcn.00438516
add esp, 4
push 0x486fd4
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0x80]
push edx
call fcn.00408e50
add esp, 0xc
lea ecx, [esp + 0x8c]
push ecx
push eax
lea edx, [esp + 0x7c]
push edx
mov byte [esp + 0x1dc], 0x41
call fcn.00408d90
add esp, 0xc
push 0x486fd4
push eax
lea eax, [esp + 0x70]
push eax
mov byte [esp + 0x1dc], 0x42
call fcn.00408e50
add esp, 0xc
lea ecx, [esp + 0x64]
push ecx
push eax
lea edx, [esp + 0x74]
push edx
mov byte [esp + 0x1dc], 0x43
call fcn.00408d90
add esp, 0xc
push 0x486fd4
push eax
lea eax, [esp + 0x64]
push eax
mov byte [esp + 0x1dc], 0x44
call fcn.00408e50
add esp, 0xc
lea ecx, [esp + 0x48]
push ecx
push eax
lea edx, [esp + 0x38]
push edx
mov byte [esp + 0x1dc], 0x45
call fcn.00408d90
add esp, 0xc
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x1d4], 0x46
call fcn.0040a940
mov byte [esp + 0x1d0], 0x45
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405779
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0x44
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4057a1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0x43
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4057c9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0x42
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4057f1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0x41
mov eax, dword [esp + 0x74]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405819
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0xc
mov eax, dword [esp + 0x78]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405841
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx + 0x254]
cmp eax, ebx
jbe 0x405a54
push eax
lea edx, [esp + 0x44]
push edx
call fcn.004155e0
mov esi, dword [esp + 0x40]
mov byte [esp + 0x1d8], 0x47
mov eax, dword [esp + 0x48]
mov ecx, dword [esi + 0x254]
push eax
push ecx
lea edx, [esp + 0xa4]
push 0x486fd8
push edx
call fcn.0040aa30
add esp, 0x18
push 0x486fd4
lea ecx, [esp + 0x5c]
call fcn.00408c20
mov ecx, dword [esp + 0x94]
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x60]
call fcn.00409160
mov eax, dword [esi + 0x254]
push eax
lea ecx, [esp + 0x38]
push 0x486dc4
push ecx
call fcn.0040aa30
add esp, 0xc
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x48
je 0x4058f2
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042efc0
mov esi, eax
xor ebx, ebx
jmp 0x4058f4
xor esi, esi
mov edx, str.Code
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x47
call fcn.00401360
lea edx, [esp + 0xac]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x49
call fcn.00409000
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x47
cmp dword [esp + 0x2c], 8
jb 0x405941
mov eax, dword [esp + 0x18]
push eax
call fcn.00438516
add esp, 4
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x4a
je 0x40596c
mov ebx, dword [esp + 0x40]
mov edi, eax
call fcn.0042efc0
mov esi, eax
xor ebx, ebx
jmp 0x40596e
xor esi, esi
mov edx, str.Description
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x47
call fcn.00401360
lea ecx, [esp + 0xac]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x4b
call fcn.00409000
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x47
cmp dword [esp + 0x2c], 8
jb 0x4059bb
mov edx, dword [esp + 0x18]
push edx
call fcn.00438516
add esp, 4
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x4c
je 0x4059e8
lea ecx, [esp + 0xac]
push ecx
mov esi, eax
call fcn.0042f160
mov esi, eax
jmp 0x4059ea
xor esi, esi
mov edx, str.SystemError
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x47
call fcn.00401360
lea edx, [esp + 0x7c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x4d
call fcn.00409000
mov dword [eax], esi
cmp dword [esp + 0x2c], 8
jb 0x405a2c
mov eax, dword [esp + 0x18]
push eax
call fcn.00438516
add esp, 4
mov byte [esp + 0x1d0], 0xc
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405a54
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [esp + 0x58]
lea eax, [esp + 0x188]
call fcn.00401360
mov byte [esp + 0x1d0], 0x4e
mov eax, dword [esp + 0x18c]
mov edi, 8
cmp dword [esp + 0x1a0], edi
jae 0x405a88
lea eax, [esp + 0x18c]
mov esi, dword [ebp + 8]
push eax
push esi
push str.Reporting_event:__d__data_sent:__s
push ebx
push 0x121
push str.CReportinServiceST::DoReportExec
call fcn.00434580
add esp, 0x18
push str.Content_Type:_application_x_www_form_urlencoded_r_n
mov word [esp + 0x140], bx
mov dword [esp + 0x142], ebx
mov dword [esp + 0x146], ebx
mov dword [esp + 0x14a], ebx
mov word [esp + 0x14e], bx
mov word [esp + 0x160], bx
mov dword [esp + 0x162], ebx
mov dword [esp + 0x166], ebx
mov dword [esp + 0x16a], ebx
mov word [esp + 0x16e], bx
mov word [esp + 0x120], bx
mov dword [esp + 0x122], ebx
mov dword [esp + 0x126], ebx
mov dword [esp + 0x12a], ebx
mov word [esp + 0x12e], bx
mov word [esp + 0x110], bx
mov dword [esp + 0x112], ebx
mov dword [esp + 0x116], ebx
mov dword [esp + 0x11a], ebx
mov word [esp + 0x11e], bx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
cmp esi, ebx
mov word [esp + 0x10c], di
mov dword [esp + 0x114], eax
je 0x405bb5
sub esp, 0x1c
lea ecx, [esp + 0x1a4]
mov eax, esp
mov dword [esp + 0x4c], esp
call fcn.0040deb0
lea edi, [esp + 0x138]
call fcn.00415510
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + 0x18]
add esp, 0x1c
mov ecx, dword [ecx + 8]
lea edx, [esp + 0x10c]
push edx
mov edx, edi
push edx
lea edx, [esp + 0x164]
push edx
lea edx, [esp + 0x148]
push edx
push eax
push str._bLLLL
push ebx
push ebx
push 1
push 0x68
push ecx
call fcn.0043f2fb
add esp, 0x2c
call fcn.00409f20
mov dword [esp + 0xd8], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0xd8]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xd8]
mov dword [eax], eax
mov eax, dword [esp + 0xd8]
mov dword [eax + 8], eax
mov dword [esp + 0xdc], ebx
push ebx
mov byte [esp + 0x1d4], 0x4f
call fcn.004560e1
mov dword [esp + 0x170], eax
add esp, 4
lea eax, [esp + 0x16c]
push eax
mov esi, str._Y__m__dT_H:_M:_S.000Z
lea edi, [esp + 0xcc]
mov dword [esp + 0x174], edx
call fcn.0040aa50
push 0x10
mov byte [esp + 0x1d4], 0x50
call fcn.004384e6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x51
je 0x405c56
mov ecx, dword [esp + 0x38]
add ecx, 0x20
push ecx
mov edi, eax
call fcn.0042f060
mov esi, eax
jmp 0x405c58
xor esi, esi
mov edx, str.target
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x50
call fcn.00401360
lea edx, [esp + 0xd4]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x52
call fcn.00409000
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x50
cmp dword [esp + 0x2c], 8
jb 0x405ca5
mov eax, dword [esp + 0x18]
push eax
call fcn.00438516
add esp, 4
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x53
je 0x405cd3
mov ebx, dword [esp + 0xc8]
mov edi, eax
call fcn.0042efc0
mov esi, eax
xor ebx, ebx
jmp 0x405cd5
xor esi, esi
mov edx, str.eventDateTime
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x50
call fcn.00401360
lea ecx, [esp + 0xd4]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x54
call fcn.00409000
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x50
cmp dword [esp + 0x2c], 8
jb 0x405d22
mov edx, dword [esp + 0x18]
push edx
call fcn.00438516
add esp, 4
push 0x10
call fcn.004384e6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x55
je 0x405d4f
lea ecx, [esp + 0xd4]
push ecx
mov esi, eax
call fcn.0042f160
mov esi, eax
jmp 0x405d51
xor esi, esi
mov edx, str.eventHeader
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x50
call fcn.00401360
lea edx, [esp + 0x7c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x56
call fcn.00409000
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x50
cmp dword [esp + 0x2c], 8
jb 0x405d9b
mov eax, dword [esp + 0x18]
push eax
call fcn.00438516
add esp, 4
push 0x10
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], bx
call fcn.004384e6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x57
je 0x405dd8
lea ecx, [esp + 0x7c]
push ecx
mov esi, eax
call fcn.0042f160
mov dword [esp + 0x3c], eax
jmp 0x405ddc
mov dword [esp + 0x3c], ebx
mov ecx, dword [esp + 0x3c]
lea esi, [esp + 0x1a4]
mov byte [esp + 0x1d0], 0x50
call fcn.0042f3a0
mov byte [esp + 0x1d0], 0x58
xor eax, eax
push str.Content_Type:_application_json_r_n
mov word [esp + 0x150], bx
mov dword [esp + 0x152], eax
mov dword [esp + 0x156], eax
mov dword [esp + 0x15a], eax
mov word [esp + 0x15e], ax
mov word [esp + 0x178], bx
mov dword [esp + 0x17a], eax
mov dword [esp + 0x17e], eax
mov dword [esp + 0x182], eax
mov word [esp + 0x186], ax
mov word [esp + 0x130], bx
mov dword [esp + 0x132], eax
mov dword [esp + 0x136], eax
mov dword [esp + 0x13a], eax
mov word [esp + 0x13e], ax
mov word [esp + 0x100], bx
mov dword [esp + 0x102], eax
mov dword [esp + 0x106], eax
mov dword [esp + 0x10a], eax
mov word [esp + 0x10e], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
sub esp, 0x1c
mov dword [esp + 0x120], eax
mov ecx, esi
mov eax, esp
mov word [esp + 0x118], 8
mov dword [esp + 0x4c], esp
call fcn.0040deb0
lea edi, [esp + 0x148]
call fcn.00415510
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + 0x1c]
add esp, 0x1c
mov ecx, dword [ecx + 0xc]
lea edx, [esp + 0xfc]
push edx
mov edx, edi
push edx
lea edx, [esp + 0x17c]
push edx
lea edx, [esp + 0x158]
push edx
push eax
push str._bLLLL
push ebx
push ebx
push 1
push 0x68
push ecx
call fcn.0043f2fb
add esp, 0x2c
cmp dword [esp + 0x3c], ebx
je 0x405f21
mov esi, dword [esp + 0x3c]
mov ecx, esi
call fcn.0042f1e0
push esi
call fcn.00438516
add esp, 4
mov edi, dword [esp + 0x38]
call fcn.00406210
mov edi, 8
cmp dword [esp + 0x1bc], edi
jb 0x405f48
mov eax, dword [esp + 0x1a8]
push eax
call fcn.00438516
add esp, 4
mov byte [esp + 0x1d0], 0x4f
mov eax, dword [esp + 0xc8]
mov esi, 7
add eax, 0xfffffff0
mov dword [esp + 0x1bc], esi
mov dword [esp + 0x1b8], ebx
mov word [esp + 0x1a8], bx
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405f8e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [esp + 0xd4]
mov byte [esp + 0x1d0], 0x4e
call fcn.004061b0
cmp dword [esp + 0x1a0], edi
jb 0x405fbb
mov ecx, dword [esp + 0x18c]
push ecx
call fcn.00438516
add esp, 4
mov byte [esp + 0x1d0], 0xb
mov eax, dword [esp + 0x94]
add eax, 0xfffffff0
mov dword [esp + 0x1a0], esi
mov dword [esp + 0x19c], ebx
mov word [esp + 0x18c], bx
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x405ffc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0xa
mov eax, dword [esp + 0x98]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406027
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 9
mov eax, dword [esp + 0x58]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40604f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 8
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406077
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 7
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40609f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 6
mov eax, dword [esp + 0x8c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4060ca
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 5
mov eax, dword [esp + 0x88]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4060f5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 4
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40611d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [esp + 0xac]
mov byte [esp + 0x1d0], 3
call fcn.004061b0
lea eax, [esp + 0xf0]
mov byte [esp + 0x1d0], 2
call fcn.004061b0
lea eax, [esp + 0x4c]
mov byte [esp + 0x1d0], 1
call fcn.004061b0
lea eax, [esp + 0x9c]
mov byte [esp + 0x1d0], bl
call fcn.004061b0
lea eax, [esp + 0x7c]
mov dword [esp + 0x1d0], 0xffffffff
call fcn.004061b0
mov ecx, dword [esp + 0x1c8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1b0]
xor ecx, esp
call fcn.004550a7
mov esp, ebp
pop ebp
ret 4