Function at 0x40e740
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52381c
mov eax, dword fs:[0]
push eax
mov eax, 0x120c
call fcn.004cc5b0
mov eax, dword [0x57594c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 0
push 4
lea ecx, [ebp - 0x428]
call fcn.004093b0
push str.download_url
lea ecx, [ebp - 0xf60]
call fcn.00406b80
mov byte [ebp - 4], 1
lea eax, [ebp - 0xf60]
push eax
lea ecx, [ebp + 8]
call fcn.00415370
mov ecx, eax
call fcn.004ddb10
push eax
lea ecx, [ebp - 0x428]
call fcn.004062d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf60]
call fcn.00406bc0
lea ecx, [ebp - 0x428]
call fcn.004153b0
movzx ecx, al
test ecx, ecx
je 0x40e7fe
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x428]
call fcn.00415350
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00415350
jmp 0x410ef0
lea ecx, [ebp - 0x428]
call fcn.00415370
mov dword [ebp - 0x874], eax
mov edx, dword [ebp - 0x874]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x874]
mov edx, dword [eax + 0xc]
call edx
mov dword [ebp - 0x910], eax
mov dword [ebp - 0x7b8], 0
jmp 0x40e843
mov eax, dword [ebp - 0x7b8]
add eax, 1
mov dword [ebp - 0x7b8], eax
mov ecx, dword [ebp - 0x7b8]
cmp ecx, dword [ebp - 0x910]
jge 0x410ea4
lea ecx, [ebp - 0x6a0]
call fcn.004084a0
mov byte [ebp - 4], 4
mov byte [ebp - 0x688], 0
mov byte [ebp - 0x5b7], 1
push 0x546428
lea ecx, [ebp - 0xd98]
call fcn.004067b0
mov byte [ebp - 4], 5
lea edx, [ebp - 0xd98]
push edx
lea ecx, [ebp - 0x5b4]
call fcn.00409390
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xd98]
call fcn.004068e0
lea ecx, [ebp - 0x428]
call fcn.00415370
mov dword [ebp - 0x880], eax
mov eax, dword [ebp - 0x7b8]
push eax
mov ecx, dword [ebp - 0x880]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x880]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x79c], eax
cmp dword [ebp - 0x79c], 0
je 0x410e90
push 4
lea ecx, [ebp - 0x420]
call fcn.004093b0
mov ecx, dword [ebp - 0x79c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x79c]
mov eax, dword [edx + 0x3c]
call eax
push eax
lea ecx, [ebp - 0x420]
call fcn.004062d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x420]
call fcn.00406390
test eax, eax
je 0x40f609
push 0x54642c
lea ecx, [ebp - 0xdf8]
call fcn.00406b80
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x420]
call fcn.00415370
mov dword [ebp - 0x888], eax
lea ecx, [ebp - 0xdf8]
push ecx
mov edx, dword [ebp - 0x888]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x888]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x834], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xdf8]
call fcn.00406bc0
cmp dword [ebp - 0x834], 0
je 0x40e9b5
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0xab0], esp
push eax
mov ecx, dword [ebp - 0x834]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x834]
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0xa90], eax
lea ecx, [ebp - 0x6a0]
call fcn.00424b20
push 0x546430
lea ecx, [ebp - 0xea0]
call fcn.00406b80
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x420]
call fcn.00415370
mov dword [ebp - 0x890], eax
lea ecx, [ebp - 0xea0]
push ecx
mov edx, dword [ebp - 0x890]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x890]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x7e4], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xea0]
call fcn.00406bc0
cmp dword [ebp - 0x7e4], 0
je 0x40ea42
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0xa98], esp
push eax
mov ecx, dword [ebp - 0x7e4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7e4]
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0xaa0], eax
lea ecx, [ebp - 0x660]
call fcn.00424b20
push str.daysToCheck
lea ecx, [ebp - 0xed0]
call fcn.00406b80
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x420]
call fcn.00415370
mov dword [ebp - 0x898], eax
lea ecx, [ebp - 0xed0]
push ecx
mov edx, dword [ebp - 0x898]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x898]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x7ec], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xed0]
call fcn.00406bc0
cmp dword [ebp - 0x7ec], 0
je 0x40eacf
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0xaa8], esp
push eax
mov ecx, dword [ebp - 0x7ec]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7ec]
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0x9c8], eax
lea ecx, [ebp - 0x648]
call fcn.00424b20
push str.daysToCheckMax
lea ecx, [ebp - 0xf00]
call fcn.00406b80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x420]
call fcn.00415370
mov dword [ebp - 0x8a0], eax
lea ecx, [ebp - 0xf00]
push ecx
mov edx, dword [ebp - 0x8a0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8a0]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x7f4], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xf00]
call fcn.00406bc0
cmp dword [ebp - 0x7f4], 0
je 0x40eb5c
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0xab8], esp
push eax
mov ecx, dword [ebp - 0x7f4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7f4]
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0xac8], eax
lea ecx, [ebp - 0x630]
call fcn.00424b20
push str.noInstallAntiID
lea ecx, [ebp - 0xf30]
call fcn.00406b80
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x420]
call fcn.00415370
mov dword [ebp - 0x8a8], eax
lea ecx, [ebp - 0xf30]
push ecx
mov edx, dword [ebp - 0x8a8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8a8]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x7fc], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xf30]
call fcn.00406bc0
cmp dword [ebp - 0x7fc], 0
je 0x40ecca
lea eax, [ebp - 0x548]
push eax
mov ecx, dword [ebp - 0x7fc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7fc]
mov eax, dword [edx + 0x74]
call eax
mov byte [ebp - 4], 0xc
push 0xc
lea ecx, [ebp - 0x470]
call fcn.004093b0
push 0x546464
lea ecx, [ebp - 0xb10]
call fcn.00406b80
mov byte [ebp - 4], 0xd
push 3
lea ecx, [ebp - 0xb10]
push ecx
lea edx, [ebp - 0x548]
push edx
lea ecx, [ebp - 0x470]
call fcn.004589b0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xb10]
call fcn.00406bc0
push 4
lea ecx, [ebp - 0x44c]
call fcn.004093b0
lea eax, [ebp - 0x44c]
push eax
lea ecx, [ebp - 0x470]
call fcn.0040e540
jmp 0x40ec52
lea ecx, [ebp - 0x44c]
call fcn.004150f0
lea ecx, [ebp - 0xad0]
push ecx
lea ecx, [ebp - 0x470]
call fcn.0040e560
push eax
lea ecx, [ebp - 0x44c]
call fcn.0040a280
movzx edx, al
test edx, edx
je 0x40ecac
lea ecx, [ebp - 0x44c]
call fcn.004150d0
mov ecx, eax
call fcn.00406c50
push eax
call fcn.004b9cf4
add esp, 4
mov dword [ebp - 0x95c], eax
lea eax, [ebp - 0x95c]
push eax
lea ecx, [ebp - 0x59c]
call fcn.00414f90
jmp 0x40ec47
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x470]
call fcn.00458cc0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x548]
call fcn.00406bc0
push str.downloadContinue
lea ecx, [ebp - 0xb40]
call fcn.00406b80
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x420]
call fcn.00415370
mov dword [ebp - 0x8b0], eax
lea ecx, [ebp - 0xb40]
push ecx
mov edx, dword [ebp - 0x8b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8b0]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x804], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xb40]
call fcn.00406bc0
cmp dword [ebp - 0x804], 0
je 0x40ed8d
lea eax, [ebp - 0xf78]
push eax
mov ecx, dword [ebp - 0x804]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x804]
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0x964], eax
mov ecx, dword [ebp - 0x964]
call fcn.00406c50
push eax
call fcn.004b9cf4
add esp, 4
cmp eax, 1
jne 0x40ed6c
mov dword [ebp - 0x8b8], 1
jmp 0x40ed76
mov dword [ebp - 0x8b8], 0
mov cl, byte [ebp - 0x8b8]
mov byte [ebp - 0x688], cl
lea ecx, [ebp - 0xf78]
call fcn.00406bc0
push str.waitInstallFinish
lea ecx, [ebp - 0xde0]
call fcn.00406b80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x420]
call fcn.00415370
mov dword [ebp - 0x8c0], eax
lea edx, [ebp - 0xde0]
push edx
mov eax, dword [ebp - 0x8c0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x8c0]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x80c], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xde0]
call fcn.00406bc0
cmp dword [ebp - 0x80c], 0
je 0x40ee50
lea ecx, [ebp - 0x1128]
push ecx
mov edx, dword [ebp - 0x80c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x80c]
mov edx, dword [eax + 0x74]
call edx
mov dword [ebp - 0x96c], eax
mov ecx, dword [ebp - 0x96c]
call fcn.00406c50
push eax
call fcn.004b9cf4
add esp, 4
cmp eax, 1
jne 0x40ee2f
mov dword [ebp - 0x8c8], 1
jmp 0x40ee39
mov dword [ebp - 0x8c8], 0
mov al, byte [ebp - 0x8c8]
mov byte [ebp - 0x5b7], al
lea ecx, [ebp - 0x1128]
call fcn.00406bc0
push str.runDesktop
lea ecx, [ebp - 0xb70]
call fcn.00406b80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x420]
call fcn.00415370
mov dword [ebp - 0x8d0], eax
lea ecx, [ebp - 0xb70]
push ecx
mov edx, dword [ebp - 0x8d0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8d0]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x814], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xb70]
call fcn.00406bc0
cmp dword [ebp - 0x814], 0
je 0x40eedd
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0xad8], esp
push eax
mov ecx, dword [ebp - 0x814]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x814]
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0xae0], eax
lea ecx, [ebp - 0x5b4]
call fcn.00424b20
push str.main
lea ecx, [ebp - 0xe10]
call fcn.00406b80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x420]
call fcn.00415370
mov dword [ebp - 0x8d8], eax
lea ecx, [ebp - 0xe10]
push ecx
mov edx, dword [ebp - 0x8d8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8d8]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x81c], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xe10]
call fcn.00406bc0
cmp dword [ebp - 0x81c], 0
je 0x40ef99
lea eax, [ebp - 0x1158]
push eax
mov ecx, dword [ebp - 0x81c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x81c]
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0x974], eax
mov ecx, dword [ebp - 0x974]
call fcn.00406c50
push eax
call fcn.004b9cf4
add esp, 4
test eax, eax
je 0x40ef7b
mov byte [ebp - 0x79d], 1
jmp 0x40ef82
mov byte [ebp - 0x79d], 0
mov cl, byte [ebp - 0x79d]
mov byte [ebp - 0x590], cl
lea ecx, [ebp - 0x1158]
call fcn.00406bc0
push str.test
lea ecx, [ebp - 0xba0]
call fcn.00406b80
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x420]
call fcn.00415370
mov dword [ebp - 0x8e0], eax
lea edx, [ebp - 0xba0]
push edx
mov eax, dword [ebp - 0x8e0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x8e0]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x824], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xba0]
call fcn.00406bc0
cmp dword [ebp - 0x824], 0
je 0x40f055
lea ecx, [ebp - 0x1188]
push ecx
mov edx, dword [ebp - 0x824]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x824]
mov edx, dword [eax + 0x74]
call edx
mov dword [ebp - 0x97c], eax
mov ecx, dword [ebp - 0x97c]
call fcn.00406c50
push eax
call fcn.004b9cf4
add esp, 4
test eax, eax
je 0x40f037
mov byte [ebp - 0x796], 1
jmp 0x40f03e
mov byte [ebp - 0x796], 0
mov al, byte [ebp - 0x796]
mov byte [ebp - 0x58f], al
lea ecx, [ebp - 0x1188]
call fcn.00406bc0
push str.installInArea
lea ecx, [ebp - 0xe40]
call fcn.00406b80
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x420]
call fcn.00415370
mov dword [ebp - 0x89c], eax
lea ecx, [ebp - 0xe40]
push ecx
mov edx, dword [ebp - 0x89c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x89c]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x82c], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xe40]
call fcn.00406bc0
cmp dword [ebp - 0x82c], 0
je 0x40f111
lea eax, [ebp - 0x11b8]
push eax
mov ecx, dword [ebp - 0x82c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x82c]
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0x984], eax
mov ecx, dword [ebp - 0x984]
call fcn.00406c50
push eax
call fcn.004b9cf4
add esp, 4
test eax, eax
je 0x40f0f3
mov byte [ebp - 0x797], 1
jmp 0x40f0fa
mov byte [ebp - 0x797], 0
mov cl, byte [ebp - 0x797]
mov byte [ebp - 0x58e], cl
lea ecx, [ebp - 0x11b8]
call fcn.00406bc0
push str.installWhenTest
lea ecx, [ebp - 0xe70]
call fcn.00406b80
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x420]
call fcn.00415370
mov dword [ebp - 0x878], eax
lea edx, [ebp - 0xe70]
push edx
mov eax, dword [ebp - 0x878]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x878]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x7c0], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xe70]
call fcn.00406bc0
cmp dword [ebp - 0x7c0], 0
je 0x40f1cd
lea ecx, [ebp - 0x11e8]
push ecx
mov edx, dword [ebp - 0x7c0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7c0]
mov edx, dword [eax + 0x74]
call edx
mov dword [ebp - 0x98c], eax
mov ecx, dword [ebp - 0x98c]
call fcn.00406c50
push eax
call fcn.004b9cf4
add esp, 4
test eax, eax
je 0x40f1af
mov byte [ebp - 0x795], 1
jmp 0x40f1b6
mov byte [ebp - 0x795], 0
mov al, byte [ebp - 0x795]
mov byte [ebp - 0x58c], al
lea ecx, [ebp - 0x11e8]
call fcn.00406bc0
push str.installInErrorArea
lea ecx, [ebp - 0xbe8]
call fcn.00406b80
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x420]
call fcn.00415370
mov dword [ebp - 0x85c], eax
lea ecx, [ebp - 0xbe8]
push ecx
mov edx, dword [ebp - 0x85c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x85c]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x83c], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xbe8]
call fcn.00406bc0
cmp dword [ebp - 0x83c], 0
je 0x40f289
lea eax, [ebp - 0x1218]
push eax
mov ecx, dword [ebp - 0x83c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x83c]
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0x994], eax
mov ecx, dword [ebp - 0x994]
call fcn.00406c50
push eax
call fcn.004b9cf4
add esp, 4
test eax, eax
je 0x40f26b
mov byte [ebp - 0x79e], 1
jmp 0x40f272
mov byte [ebp - 0x79e], 0
mov cl, byte [ebp - 0x79e]
mov byte [ebp - 0x58d], cl
lea ecx, [ebp - 0x1218]
call fcn.00406bc0
push str.GROUP
lea ecx, [ebp - 0xe88]
call fcn.00406b80
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x420]
call fcn.00415370
mov dword [ebp - 0x8dc], eax
lea edx, [ebp - 0xe88]
push edx
mov eax, dword [ebp - 0x8dc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x8dc]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x844], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xe88]
call fcn.00406bc0
cmp dword [ebp - 0x844], 0
je 0x40f32b
lea ecx, [ebp - 0x10e0]
push ecx
mov edx, dword [ebp - 0x844]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x844]
mov edx, dword [eax + 0x74]
call edx
mov dword [ebp - 0x99c], eax
mov ecx, dword [ebp - 0x99c]
call fcn.00406c50
push eax
call fcn.004b9cf4
add esp, 4
mov dword [ebp - 0x588], eax
lea ecx, [ebp - 0x10e0]
call fcn.00406bc0
push 0x5464e8
lea ecx, [ebp - 0xc18]
call fcn.00406b80
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x420]
call fcn.00415370
mov dword [ebp - 0x864], eax
lea eax, [ebp - 0xc18]
push eax
mov ecx, dword [ebp - 0x864]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x864]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x84c], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xc18]
call fcn.00406bc0
cmp dword [ebp - 0x84c], 0
je 0x40f3f4
lea ecx, [ebp - 0xfc0]
push ecx
mov edx, dword [ebp - 0x84c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x84c]
mov edx, dword [eax + 0x74]
call edx
mov dword [ebp - 0x9a4], eax
mov eax, dword [ebp - 0x9a4]
mov dword [ebp - 0x9ac], eax
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x9ac]
call fcn.00406c50
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xae8], esp
push eax
call fcn.00406b80
mov dword [ebp - 0xaf0], eax
lea ecx, [ebp - 0x584]
call fcn.00424b20
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xfc0]
call fcn.00406bc0
push 0x5464f4
lea ecx, [ebp - 0xdc8]
call fcn.00406b80
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x420]
call fcn.00415370
mov dword [ebp - 0x8a4], eax
lea ecx, [ebp - 0xdc8]
push ecx
mov edx, dword [ebp - 0x8a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8a4]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x7c8], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xdc8]
call fcn.00406bc0
cmp dword [ebp - 0x7c8], 0
je 0x40f609
lea eax, [ebp - 0x11d0]
push eax
mov ecx, dword [ebp - 0x7c8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7c8]
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0x9b4], eax
mov ecx, dword [ebp - 0x9b4]
mov dword [ebp - 0x9bc], ecx
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x9bc]
call fcn.00406c50
push eax
lea ecx, [ebp - 0x560]
call fcn.00406b80
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x11d0]
call fcn.00406bc0
push 0xc
lea ecx, [ebp - 0x464]
call fcn.004093b0
push 0x5464f8
lea ecx, [ebp - 0xc48]
call fcn.00406b80
mov byte [ebp - 4], 0x1f
push 3
lea edx, [ebp - 0xc48]
push edx
lea eax, [ebp - 0x560]
push eax
lea ecx, [ebp - 0x464]
call fcn.004589b0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xc48]
call fcn.00406bc0
lea ecx, [ebp - 0x464]
call fcn.0040e5c0
test eax, eax
jbe 0x40f5eb
push 4
lea ecx, [ebp - 0x448]
call fcn.004093b0
lea ecx, [ebp - 0x448]
push ecx
lea ecx, [ebp - 0x464]
call fcn.0040e540
jmp 0x40f535
lea ecx, [ebp - 0x448]
call fcn.004150f0
lea edx, [ebp - 0xaf8]
push edx
lea ecx, [ebp - 0x464]
call fcn.0040e560
push eax
lea ecx, [ebp - 0x448]
call fcn.0040a280
movzx eax, al
test eax, eax
je 0x40f5eb
lea ecx, [ebp - 0x448]
call fcn.004150d0
mov ecx, eax
call fcn.00406c50
push eax
lea ecx, [ebp - 0xc78]
call fcn.00406b80
mov byte [ebp - 4], 0x22
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xa64], esp
lea edx, [ebp - 0xc78]
push edx
push ecx
call fcn.0041dee0
add esp, 8
mov dword [ebp - 0xac0], eax
lea ecx, [ebp - 0xf48]
call fcn.004067d0
mov dword [ebp - 0x9d4], eax
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0xf48]
push eax
lea ecx, [ebp - 0x56c]
call fcn.00414970
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0xf48]
call fcn.004068e0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xc78]
call fcn.00406bc0
jmp 0x40f52a
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x464]
call fcn.00458cc0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x560]
call fcn.00406bc0
push str.check_elem
lea ecx, [ebp - 0xca8]
call fcn.00406b80
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0xca8]
push ecx
mov edx, dword [ebp - 0x79c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x79c]
mov edx, dword [eax + 0x78]
call edx
mov dword [ebp - 0x848], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xca8]
call fcn.00406bc0
cmp dword [ebp - 0x848], 0
je 0x40f877
push 4
lea ecx, [ebp - 0x444]
call fcn.004093b0
mov eax, dword [ebp - 0x848]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x848]
mov eax, dword [edx + 0x3c]
call eax
push eax
lea ecx, [ebp - 0x444]
call fcn.004062d0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x444]
call fcn.00406390
test eax, eax
je 0x40f868
push 0x546508
lea ecx, [ebp - 0xeb8]
call fcn.00406b80
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x444]
call fcn.00415370
mov dword [ebp - 0x86c], eax
lea ecx, [ebp - 0xeb8]
push ecx
mov edx, dword [ebp - 0x86c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x86c]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x7d0], eax
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0xeb8]
call fcn.00406bc0
cmp dword [ebp - 0x7d0], 0
je 0x40f729
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0xad4], esp
push eax
mov ecx, dword [ebp - 0x7d0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7d0]
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0x9dc], eax
lea ecx, [ebp - 0x684]
call fcn.00424b20
mov dword [ebp - 0x7b4], 1
jmp 0x40f744
mov ecx, dword [ebp - 0x7b4]
add ecx, 1
mov dword [ebp - 0x7b4], ecx
cmp dword [ebp - 0x7b4], 0xa
jge 0x40f868
mov edx, dword [ebp - 0x7b4]
push edx
push str.key_d
lea eax, [ebp - 0x1c]
push eax
call fcn.00419820
add esp, 0xc
lea ecx, [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0xcd8]
call fcn.00406b80
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x444]
call fcn.00415370
mov dword [ebp - 0x8c4], eax
lea edx, [ebp - 0xcd8]
push edx
mov eax, dword [ebp - 0x8c4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x8c4]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x810], eax
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0xcd8]
call fcn.00406bc0
cmp dword [ebp - 0x810], 0
je 0x40f861
lea ecx, [ebp - 0xff0]
push ecx
mov edx, dword [ebp - 0x810]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x810]
mov edx, dword [eax + 0x74]
call edx
mov dword [ebp - 0x9c4], eax
mov eax, dword [ebp - 0x9c4]
mov dword [ebp - 0x958], eax
mov byte [ebp - 4], 0x28
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xa6c], esp
mov edx, dword [ebp - 0x958]
push edx
push ecx
call fcn.0041dee0
add esp, 8
mov dword [ebp - 0x9e4], eax
lea ecx, [ebp - 0xe28]
call fcn.004067d0
mov dword [ebp - 0xab4], eax
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0xe28]
push eax
lea ecx, [ebp - 0x66c]
call fcn.00414970
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xe28]
call fcn.004068e0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0xff0]
call fcn.00406bc0
jmp 0x40f863
jmp 0x40f868
jmp 0x40f735
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x444]
call fcn.00415350
push str.exist
lea ecx, [ebp - 0xd08]
call fcn.00406b80
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xd08]
push ecx
mov edx, dword [ebp - 0x79c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x79c]
mov edx, dword [eax + 0x78]
call edx
mov dword [ebp - 0x7d8], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xd08]
call fcn.00406bc0
cmp dword [ebp - 0x7d8], 0
je 0x40facd
push 4
lea ecx, [ebp - 0x434]
call fcn.004093b0
mov eax, dword [ebp - 0x7d8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x7d8]
mov eax, dword [edx + 0x3c]
call eax
push eax
lea ecx, [ebp - 0x434]
call fcn.004062d0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x434]
call fcn.00406390
test eax, eax
je 0x40fabe
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9ec], esp
push 0x54651c
call fcn.00406b80
mov dword [ebp - 0x8f0], eax
mov ecx, dword [ebp - 0x8f0]
mov dword [ebp - 0xa74], ecx
mov byte [ebp - 4], 0x2c
push ecx
mov ecx, esp
mov dword [ebp - 0x9f4], esp
lea edx, [ebp - 0x434]
push edx
call fcn.00415320
mov dword [ebp - 0xaf4], eax
lea eax, [ebp - 0x1110]
push eax
mov byte [ebp - 4], 0x2b
call fcn.0040e670
add esp, 0x20
mov dword [ebp - 0x990], eax
mov ecx, dword [ebp - 0x990]
mov dword [ebp - 0x8f8], ecx
mov ecx, dword [ebp - 0x8f8]
call fcn.00406c50
push eax
call fcn.004b9cf4
add esp, 4
mov dword [ebp - 0x618], eax
lea ecx, [ebp - 0x1110]
call fcn.00406bc0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x9fc], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xa7c], esp
push 0x546524
call fcn.00406b80
mov dword [ebp - 0x960], eax
mov edx, dword [ebp - 0x960]
mov dword [ebp - 0xa04], edx
mov byte [ebp - 4], 0x2d
push ecx
mov ecx, esp
mov dword [ebp - 0xabc], esp
lea eax, [ebp - 0x434]
push eax
call fcn.00415320
mov dword [ebp - 0xa0c], eax
push esi
mov byte [ebp - 4], 0x2b
call fcn.0040e670
add esp, 0x20
mov dword [ebp - 0x900], eax
mov ecx, dword [ebp - 0x900]
mov dword [ebp - 0xa84], ecx
lea ecx, [ebp - 0x610]
call fcn.00424b20
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xa14], esp
push str.keyVal
call fcn.00406b80
mov dword [ebp - 0x9b8], eax
mov edx, dword [ebp - 0x9b8]
mov dword [ebp - 0xadc], edx
mov byte [ebp - 4], 0x2e
push ecx
mov ecx, esp
mov dword [ebp - 0xa1c], esp
lea eax, [ebp - 0x434]
push eax
call fcn.00415320
mov dword [ebp - 0xa8c], eax
lea ecx, [ebp - 0x488]
push ecx
mov byte [ebp - 4], 0x2b
call fcn.0040e670
add esp, 0x20
mov dword [ebp - 0xa24], eax
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x488]
call fcn.00406c70
test eax, eax
jbe 0x40faaf
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xac4], esp
lea edx, [ebp - 0x488]
push edx
call fcn.00406af0
mov dword [ebp - 0xa2c], eax
lea ecx, [ebp - 0x5f8]
call fcn.00424b20
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x488]
call fcn.00406bc0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x434]
call fcn.00415350
push str.pre_check_install
lea ecx, [ebp - 0xf18]
call fcn.00406b80
mov byte [ebp - 4], 0x30
lea eax, [ebp - 0xf18]
push eax
mov ecx, dword [ebp - 0x79c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x79c]
mov eax, dword [edx + 0x78]
call eax
mov dword [ebp - 0x830], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xf18]
call fcn.00406bc0
cmp dword [ebp - 0x830], 0
je 0x40feb3
push 4
lea ecx, [ebp - 0x430]
call fcn.004093b0
mov ecx, dword [ebp - 0x830]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x830]
mov eax, dword [edx + 0x3c]
call eax
push eax
lea ecx, [ebp - 0x430]
call fcn.004062d0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x430]
call fcn.00406390
test eax, eax
je 0x40fea4
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xa94], esp
push 0x546544
call fcn.00406b80
mov dword [ebp - 0x908], eax
mov ecx, dword [ebp - 0x908]
mov dword [ebp - 0xa34], ecx
mov byte [ebp - 4], 0x32
push ecx
mov ecx, esp
mov dword [ebp - 0xaec], esp
lea edx, [ebp - 0x430]
push edx
call fcn.00415320
mov dword [ebp - 0xa3c], eax
lea eax, [ebp - 0x1020]
push eax
mov byte [ebp - 4], 0x31
call fcn.0040e670
add esp, 0x20
mov dword [ebp - 0x968], eax
mov ecx, dword [ebp - 0x968]
mov dword [ebp - 0x8e4], ecx
mov ecx, dword [ebp - 0x8e4]
call fcn.00406c50
push eax
call fcn.004b9cf4
add esp, 4
mov dword [ebp - 0x614], eax
lea ecx, [ebp - 0x1020]
call fcn.00406bc0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xa9c], esp
push 0x54654c
call fcn.00406b80
mov dword [ebp - 0x998], eax
mov edx, dword [ebp - 0x998]
mov dword [ebp - 0xa44], edx
mov byte [ebp - 4], 0x33
push ecx
mov ecx, esp
mov dword [ebp - 0xacc], esp
lea eax, [ebp - 0x430]
push eax
call fcn.00415320
mov dword [ebp - 0xa4c], eax
lea ecx, [ebp - 0x11a0]
push ecx
mov byte [ebp - 4], 0x31
call fcn.0040e670
add esp, 0x20
mov dword [ebp - 0x918], eax
mov edx, dword [ebp - 0x918]
mov dword [ebp - 0x970], edx
mov byte [ebp - 4], 0x34
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0xaa4], esp
mov ecx, dword [ebp - 0x970]
push ecx
push eax
call fcn.0041dee0
add esp, 8
mov dword [ebp - 0xa54], eax
lea ecx, [ebp - 0xd38]
call fcn.004067d0
mov dword [ebp - 0xae4], eax
mov byte [ebp - 4], 0x35
lea edx, [ebp - 0xd38]
push edx
lea ecx, [ebp - 0x5e0]
call fcn.00414970
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0xd38]
call fcn.004068e0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x11a0]
call fcn.00406bc0
mov dword [ebp - 0x7bc], 1
jmp 0x40fce0
mov eax, dword [ebp - 0x7bc]
add eax, 1
mov dword [ebp - 0x7bc], eax
cmp dword [ebp - 0x7bc], 0x64
jge 0x40fe14
mov ecx, dword [ebp - 0x7bc]
push ecx
push str.val_d
lea edx, [ebp - 0x41c]
push edx
call fcn.00419850
add esp, 0xc
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xa5c], esp
lea eax, [ebp - 0x41c]
push eax
call fcn.00406b80
mov dword [ebp - 0x920], eax
mov ecx, dword [ebp - 0x920]
mov dword [ebp - 0xaac], ecx
mov byte [ebp - 4], 0x36
push ecx
mov ecx, esp
mov dword [ebp - 0x9cc], esp
lea edx, [ebp - 0x430]
push edx
call fcn.00415320
mov dword [ebp - 0x9d0], eax
lea eax, [ebp - 0x1050]
push eax
mov byte [ebp - 4], 0x31
call fcn.0040e670
add esp, 0x20
mov dword [ebp - 0x9b0], eax
mov ecx, dword [ebp - 0x9b0]
mov dword [ebp - 0x928], ecx
mov byte [ebp - 4], 0x37
mov edx, dword [ebp - 0x928]
push edx
lea eax, [ebp - 0x4a0]
push eax
call fcn.0041dee0
add esp, 8
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x1050]
call fcn.00406bc0
lea ecx, [ebp - 0x4a0]
call fcn.00406c70
test eax, eax
jbe 0x40fe00
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9d8], esp
lea edx, [ebp - 0x4a0]
push edx
call fcn.00406c90
mov dword [ebp - 0x9e0], eax
lea ecx, [ebp - 0xe58]
call fcn.004067d0
mov dword [ebp - 0x9e8], eax
mov byte [ebp - 4], 0x3a
lea eax, [ebp - 0xe58]
push eax
lea ecx, [ebp - 0x5e0]
call fcn.00414970
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xe58]
call fcn.004068e0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x4a0]
call fcn.00406d30
jmp 0x40fcd1
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9f0], esp
push str.cond
call fcn.00406b80
mov dword [ebp - 0x978], eax
mov ecx, dword [ebp - 0x978]
mov dword [ebp - 0x9f8], ecx
mov byte [ebp - 4], 0x3b
push ecx
mov ecx, esp
mov dword [ebp - 0xa00], esp
lea edx, [ebp - 0x430]
push edx
call fcn.00415320
mov dword [ebp - 0xa08], eax
lea eax, [ebp - 0x1140]
push eax
mov byte [ebp - 4], 0x31
call fcn.0040e670
add esp, 0x20
mov dword [ebp - 0x930], eax
mov ecx, dword [ebp - 0x930]
mov dword [ebp - 0x9a0], ecx
mov ecx, dword [ebp - 0x9a0]
call fcn.00406c50
push eax
call fcn.004b9cf4
add esp, 4
mov dword [ebp - 0x5d4], eax
lea ecx, [ebp - 0x1140]
call fcn.00406bc0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x430]
call fcn.00415350
mov edx, dword [ebp - 0x79c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x79c]
mov edx, dword [eax + 0x2c]
call edx
mov dword [ebp - 0x794], eax
cmp dword [ebp - 0x794], 0
je 0x410e70
push str.setupExe
mov eax, dword [ebp - 0x794]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x794]
mov eax, dword [edx + 0x14]
call eax
push eax
call fcn.00419880
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x410e52
lea ecx, [ebp - 0x790]
call fcn.00410f10
mov byte [ebp - 4], 0x3c
push 4
lea ecx, [ebp - 0x440]
call fcn.004093b0
mov edx, dword [ebp - 0x794]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x794]
mov edx, dword [eax + 0x3c]
call edx
push eax
lea ecx, [ebp - 0x440]
call fcn.004062d0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x440]
call fcn.00406390
test eax, eax
je 0x41008e
push 0x54656c
lea ecx, [ebp - 0xd68]
call fcn.00406b80
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x440]
call fcn.00415370
mov dword [ebp - 0x850], eax
lea eax, [ebp - 0xd68]
push eax
mov ecx, dword [ebp - 0x850]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x850]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x7e0], eax
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0xd68]
call fcn.00406bc0
cmp dword [ebp - 0x7e0], 0
je 0x410001
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xa10], esp
push ecx
mov edx, dword [ebp - 0x7e0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7e0]
mov edx, dword [eax + 0x74]
call edx
mov dword [ebp - 0xa18], eax
lea ecx, [ebp - 0x78c]
call fcn.00424b20
lea eax, [ebp - 0x1080]
push eax
lea ecx, [ebp - 0x78c]
call fcn.00424ca0
lea ecx, [ebp - 0x1080]
call fcn.004068e0
push str.pname
lea ecx, [ebp - 0xee8]
call fcn.00406b80
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x440]
call fcn.00415370
mov dword [ebp - 0x8ac], eax
lea ecx, [ebp - 0xee8]
push ecx
mov edx, dword [ebp - 0x8ac]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8ac]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x818], eax
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0xee8]
call fcn.00406bc0
cmp dword [ebp - 0x818], 0
je 0x41008e
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0xa20], esp
push eax
mov ecx, dword [ebp - 0x818]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x818]
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0xa28], eax
lea ecx, [ebp - 0x774]
call fcn.00424b20
push str.install
lea ecx, [ebp - 0xbb8]
call fcn.00406b80
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0xbb8]
push ecx
mov edx, dword [ebp - 0x794]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x794]
mov edx, dword [eax + 0x78]
call edx
mov dword [ebp - 0x7b0], eax
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0xbb8]
call fcn.00406bc0
cmp dword [ebp - 0x7b0], 0
je 0x410778
push 4
lea ecx, [ebp - 0x424]
call fcn.004093b0
mov eax, dword [ebp - 0x7b0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x7b0]
mov eax, dword [edx + 0x3c]
call eax
push eax
lea ecx, [ebp - 0x424]
call fcn.004062d0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x424]
call fcn.00406390
test eax, eax
je 0x41036a
push 0x546584
lea ecx, [ebp - 0xbd0]
call fcn.00406b80
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x424]
call fcn.00415370
mov dword [ebp - 0x87c], eax
lea ecx, [ebp - 0xbd0]
push ecx
mov edx, dword [ebp - 0x87c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x87c]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x7e8], eax
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xbd0]
call fcn.00406bc0
cmp dword [ebp - 0x7e8], 0
je 0x4101c3
lea eax, [ebp - 0x1200]
push eax
mov ecx, dword [ebp - 0x7e8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7e8]
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0x938], eax
mov ecx, dword [ebp - 0x938]
call fcn.00406c50
push eax
call fcn.004b9cf4
add esp, 4
mov dword [ebp - 0x790], eax
lea ecx, [ebp - 0x1200]
call fcn.00406bc0
push 0x54658c
lea ecx, [ebp - 0xc00]
call fcn.00406b80
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x424]
call fcn.00415370
mov dword [ebp - 0x8d4], eax
lea ecx, [ebp - 0xc00]
push ecx
mov edx, dword [ebp - 0x8d4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8d4]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x840], eax
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xc00]
call fcn.00406bc0
cmp dword [ebp - 0x840], 0
je 0x410250
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0xa30], esp
push eax
mov ecx, dword [ebp - 0x840]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x840]
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0xa38], eax
lea ecx, [ebp - 0x744]
call fcn.00424b20
push str.windowClass
lea ecx, [ebp - 0xc30]
call fcn.00406b80
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x424]
call fcn.00415370
mov dword [ebp - 0x884], eax
lea ecx, [ebp - 0xc30]
push ecx
mov edx, dword [ebp - 0x884]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x884]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x7f0], eax
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xc30]
call fcn.00406bc0
cmp dword [ebp - 0x7f0], 0
je 0x4102dd
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0xa40], esp
push eax
mov ecx, dword [ebp - 0x7f0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7f0]
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0xa48], eax
lea ecx, [ebp - 0x72c]
call fcn.00424b20
push str.params
lea ecx, [ebp - 0xc60]
call fcn.00406b80
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x424]
call fcn.00415370
mov dword [ebp - 0x8b4], eax
lea ecx, [ebp - 0xc60]
push ecx
mov edx, dword [ebp - 0x8b4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8b4]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x820], eax
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xc60]
call fcn.00406bc0
cmp dword [ebp - 0x820], 0
je 0x41036a
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0xa50], esp
push eax
mov ecx, dword [ebp - 0x820]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x820]
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0xa58], eax
lea ecx, [ebp - 0x708]
call fcn.00424b20
mov ecx, dword [ebp - 0x7b0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7b0]
mov eax, dword [edx + 0x2c]
call eax
mov dword [ebp - 0x7ac], eax
cmp dword [ebp - 0x7ac], 0
je 0x410769
push 0x5465ac
mov ecx, dword [ebp - 0x7ac]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7ac]
mov eax, dword [edx + 0x14]
call eax
push eax
call fcn.00419880
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x41074b
lea ecx, [ebp - 0x530]
call fcn.00410fc0
mov byte [ebp - 4], 0x46
mov dword [ebp - 0x4e4], 0
mov edx, dword [ebp - 0x4e4]
mov dword [ebp - 0x4e8], edx
push 4
lea ecx, [ebp - 0x42c]
call fcn.004093b0
mov eax, dword [ebp - 0x7ac]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x7ac]
mov eax, dword [edx + 0x3c]
call eax
push eax
lea ecx, [ebp - 0x42c]
call fcn.004062d0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x42c]
call fcn.00406390
test eax, eax
je 0x41071b
push 0x5465b4
lea ecx, [ebp - 0xc90]
call fcn.00406b80
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x42c]
call fcn.00415370
mov dword [ebp - 0x88c], eax
lea ecx, [ebp - 0xc90]
push ecx
mov edx, dword [ebp - 0x88c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x88c]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x7f8], eax
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xc90]
call fcn.00406bc0
cmp dword [ebp - 0x7f8], 0
je 0x4104b1
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0xa60], esp
push eax
mov ecx, dword [ebp - 0x7f8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7f8]
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0xa68], eax
lea ecx, [ebp - 0x530]
call fcn.00424b20
push 0x5465b8
lea ecx, [ebp - 0xcc0]
call fcn.00406b80
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x42c]
call fcn.00415370
mov dword [ebp - 0x8cc], eax
lea ecx, [ebp - 0xcc0]
push ecx
mov edx, dword [ebp - 0x8cc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8cc]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x838], eax
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xcc0]
call fcn.00406bc0
cmp dword [ebp - 0x838], 0
je 0x41053e
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0xa70], esp
push eax
mov ecx, dword [ebp - 0x838]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x838]
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0xa78], eax
lea ecx, [ebp - 0x518]
call fcn.00424b20
push 0x5465c4
lea ecx, [ebp - 0xcf0]
call fcn.00406b80
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x42c]
call fcn.00415370
mov dword [ebp - 0x894], eax
lea ecx, [ebp - 0xcf0]
push ecx
mov edx, dword [ebp - 0x894]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x894]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x800], eax
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xcf0]
call fcn.00406bc0
cmp dword [ebp - 0x800], 0
je 0x4105cb
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0xa80], esp
push eax
mov ecx, dword [ebp - 0x800]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x800]
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0xa88], eax
lea ecx, [ebp - 0x500]
call fcn.00424b20
push str.btnSize
lea ecx, [ebp - 0xd20]
call fcn.00406b80
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x42c]
call fcn.00415370
mov dword [ebp - 0x8bc], eax
lea ecx, [ebp - 0xd20]
push ecx
mov edx, dword [ebp - 0x8bc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8bc]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x828], eax
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xd20]
call fcn.00406bc0
cmp dword [ebp - 0x828], 0
je 0x41071b
push 0xc
lea ecx, [ebp - 0x458]
call fcn.004093b0
push 0x5465d8
lea ecx, [ebp - 0xd50]
call fcn.00406b80
mov byte [ebp - 4], 0x4c
lea eax, [ebp - 0x10b0]
push eax
mov ecx, dword [ebp - 0x828]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x828]
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0x980], eax
mov ecx, dword [ebp - 0x980]
mov dword [ebp - 0x940], ecx
mov byte [ebp - 4], 0x4d
push 3
lea edx, [ebp - 0xd50]
push edx
mov eax, dword [ebp - 0x940]
push eax
lea ecx, [ebp - 0x458]
call fcn.004589b0
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x10b0]
call fcn.00406bc0
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0xd50]
call fcn.00406bc0
lea ecx, [ebp - 0x458]
call fcn.0040e5c0
cmp eax, 2
jne 0x41070c
push 0
lea ecx, [ebp - 0x458]
call fcn.0040e580
mov ecx, eax
call fcn.00406c50
push eax
call fcn.004b9cf4
add esp, 4
mov dword [ebp - 0x4e8], eax
push 1
lea ecx, [ebp - 0x458]
call fcn.0040e580
mov ecx, eax
call fcn.00406c50
push eax
call fcn.004b9cf4
add esp, 4
mov dword [ebp - 0x4e4], eax
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x458]
call fcn.00458cc0
lea ecx, [ebp - 0x530]
push ecx
lea ecx, [ebp - 0x714]
call fcn.00414770
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x42c]
call fcn.00415350
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x530]
call fcn.0040cb00
mov edx, dword [ebp - 0x7ac]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7ac]
mov edx, dword [eax + 0x38]
call edx
mov dword [ebp - 0x7ac], eax
jmp 0x410383
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x424]
call fcn.00415350
lea eax, [ebp - 0x790]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.00414b80
mov ecx, dword [ebp - 0x794]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x794]
mov eax, dword [edx + 0x2c]
call eax
mov dword [ebp - 0x7a4], eax
cmp dword [ebp - 0x7a4], 0
je 0x410e34
push str.extern
mov ecx, dword [ebp - 0x7a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7a4]
mov eax, dword [edx + 0x14]
call eax
push eax
call fcn.00419880
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x410e16
push 4
lea ecx, [ebp - 0x43c]
call fcn.004093b0
mov edx, dword [ebp - 0x7a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7a4]
mov edx, dword [eax + 0x3c]
call edx
push eax
lea ecx, [ebp - 0x43c]
call fcn.004062d0
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x43c]
call fcn.00406390
test eax, eax
je 0x410e07
push str.windowTitle
lea ecx, [ebp - 0xd80]
call fcn.00406b80
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x43c]
call fcn.00415370
mov dword [ebp - 0x854], eax
lea eax, [ebp - 0xd80]
push eax
mov ecx, dword [ebp - 0x854]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x854]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x808], eax
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0xd80]
call fcn.00406bc0
cmp dword [ebp - 0x808], 0
je 0x410e07
lea ecx, [ebp - 0x4e0]
call fcn.00411030
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0xf90]
push ecx
mov edx, dword [ebp - 0x808]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x808]
mov edx, dword [eax + 0x74]
call edx
mov dword [ebp - 0x9c0], eax
mov eax, dword [ebp - 0x9c0]
mov dword [ebp - 0x948], eax
mov byte [ebp - 4], 0x54
mov ecx, dword [ebp - 0x948]
push ecx
lea edx, [ebp - 0x1170]
push edx
call fcn.00406930
add esp, 8
mov dword [ebp - 0x988], eax
mov eax, dword [ebp - 0x988]
mov dword [ebp - 0x950], eax
mov byte [ebp - 4], 0x55
mov ecx, dword [ebp - 0x950]
push ecx
lea ecx, [ebp - 0x4e0]
call fcn.00409390
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x1170]
call fcn.004068e0
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0xf90]
call fcn.00406bc0
push 0x5465f0
lea ecx, [ebp - 0xdb0]
call fcn.00406b80
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x43c]
call fcn.00415370
mov dword [ebp - 0x858], eax
lea edx, [ebp - 0xdb0]
push edx
mov eax, dword [ebp - 0x858]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x858]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x7c4], eax
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0xdb0]
call fcn.00406bc0
cmp dword [ebp - 0x7c4], 0
je 0x410a08
lea ecx, [ebp - 0xfd8]
push ecx
mov edx, dword [ebp - 0x7c4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7c4]
mov edx, dword [eax + 0x74]
call edx
mov dword [ebp - 0x9a8], eax
mov eax, dword [ebp - 0x9a8]
mov dword [ebp - 0x8e8], eax
mov byte [ebp - 4], 0x57
mov ecx, dword [ebp - 0x8e8]
push ecx
lea edx, [ebp - 0xfa8]
push edx
call fcn.00406930
add esp, 8
mov dword [ebp - 0x8ec], eax
mov eax, dword [ebp - 0x8ec]
mov dword [ebp - 0x8f4], eax
mov byte [ebp - 4], 0x58
mov ecx, dword [ebp - 0x8f4]
push ecx
lea ecx, [ebp - 0x4c8]
call fcn.00409390
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0xfa8]
call fcn.004068e0
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0xfd8]
call fcn.00406bc0
mov edx, dword [ebp - 0x7a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7a4]
mov edx, dword [eax + 0x2c]
call edx
mov dword [ebp - 0x7a8], eax
cmp dword [ebp - 0x7a8], 0
je 0x410dc1
push str.step
mov eax, dword [ebp - 0x7a8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x7a8]
mov eax, dword [edx + 0x14]
call eax
push eax
call fcn.00419880
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x410da3
lea ecx, [ebp - 0x6f0]
call fcn.00410fc0
mov byte [ebp - 4], 0x59
push 4
lea ecx, [ebp - 0x438]
call fcn.004093b0
mov edx, dword [ebp - 0x7a8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7a8]
mov edx, dword [eax + 0x3c]
call edx
push eax
lea ecx, [ebp - 0x438]
call fcn.004062d0
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x438]
call fcn.00406390
test eax, eax
je 0x410d73
push 0x546604
lea ecx, [ebp - 0xb28]
call fcn.00406b80
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x438]
call fcn.00415370
mov dword [ebp - 0x860], eax
lea eax, [ebp - 0xb28]
push eax
mov ecx, dword [ebp - 0x860]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x860]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x7cc], eax
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0xb28]
call fcn.00406bc0
cmp dword [ebp - 0x7cc], 0
je 0x410b99
lea ecx, [ebp - 0x1038]
push ecx
mov edx, dword [ebp - 0x7cc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7cc]
mov edx, dword [eax + 0x74]
call edx
mov dword [ebp - 0x8fc], eax
mov eax, dword [ebp - 0x8fc]
mov dword [ebp - 0x904], eax
mov byte [ebp - 4], 0x5c
mov ecx, dword [ebp - 0x904]
push ecx
lea edx, [ebp - 0x1008]
push edx
call fcn.00406930
add esp, 8
mov dword [ebp - 0x90c], eax
mov eax, dword [ebp - 0x90c]
mov dword [ebp - 0x914], eax
mov byte [ebp - 4], 0x5d
mov ecx, dword [ebp - 0x914]
push ecx
lea ecx, [ebp - 0x6f0]
call fcn.00409390
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x1008]
call fcn.004068e0
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x1038]
call fcn.00406bc0
push str.innerText
lea ecx, [ebp - 0xb58]
call fcn.00406b80
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x438]
call fcn.00415370
mov dword [ebp - 0x868], eax
lea edx, [ebp - 0xb58]
push edx
mov eax, dword [ebp - 0x868]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x868]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x7d4], eax
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0xb58]
call fcn.00406bc0
cmp dword [ebp - 0x7d4], 0
je 0x410c86
lea ecx, [ebp - 0x1098]
push ecx
mov edx, dword [ebp - 0x7d4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7d4]
mov edx, dword [eax + 0x74]
call edx
mov dword [ebp - 0x91c], eax
mov eax, dword [ebp - 0x91c]
mov dword [ebp - 0x924], eax
mov byte [ebp - 4], 0x5f
mov ecx, dword [ebp - 0x924]
push ecx
lea edx, [ebp - 0x1068]
push edx
call fcn.00406930
add esp, 8
mov dword [ebp - 0x92c], eax
mov eax, dword [ebp - 0x92c]
mov dword [ebp - 0x934], eax
mov byte [ebp - 4], 0x60
mov ecx, dword [ebp - 0x934]
push ecx
lea ecx, [ebp - 0x6d8]
call fcn.00409390
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x1068]
call fcn.004068e0
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x1098]
call fcn.00406bc0
push str.className
lea ecx, [ebp - 0xb88]
call fcn.00406b80
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0x438]
call fcn.00415370
mov dword [ebp - 0x870], eax
lea edx, [ebp - 0xb88]
push edx
mov eax, dword [ebp - 0x870]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x870]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x7dc], eax
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0xb88]
call fcn.00406bc0
cmp dword [ebp - 0x7dc], 0
je 0x410d73
lea ecx, [ebp - 0x10f8]
push ecx
mov edx, dword [ebp - 0x7dc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7dc]
mov edx, dword [eax + 0x74]
call edx
mov dword [ebp - 0x93c], eax
mov eax, dword [ebp - 0x93c]
mov dword [ebp - 0x944], eax
mov byte [ebp - 4], 0x62
mov ecx, dword [ebp - 0x944]
push ecx
lea edx, [ebp - 0x10c8]
push edx
call fcn.00406930
add esp, 8
mov dword [ebp - 0x94c], eax
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0x954], eax
mov byte [ebp - 4], 0x63
mov ecx, dword [ebp - 0x954]
push ecx
lea ecx, [ebp - 0x6c0]
call fcn.00409390
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x10c8]
call fcn.004068e0
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x10f8]
call fcn.00406bc0
lea edx, [ebp - 0x6f0]
push edx
lea ecx, [ebp - 0x4b0]
call fcn.00414770
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x438]
call fcn.00415350
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x6f0]
call fcn.0040cb00
mov eax, dword [ebp - 0x7a8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x7a8]
mov eax, dword [edx + 0x38]
call eax
mov dword [ebp - 0x7a8], eax
jmp 0x410a21
lea ecx, [ebp - 0x4b0]
call fcn.0040ba90
test eax, eax
jbe 0x410ddc
mov dword [ebp - 0x4a4], 0
jmp 0x410de6
mov dword [ebp - 0x4a4], 0xffffffff
lea ecx, [ebp - 0x4e0]
push ecx
lea ecx, [ebp - 0x5c4]
call fcn.00414d90
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x4e0]
call fcn.0040c5c0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x43c]
call fcn.00415350
mov edx, dword [ebp - 0x7a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7a4]
mov edx, dword [eax + 0x38]
call edx
mov dword [ebp - 0x7a4], eax
jmp 0x4107a3
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x440]
call fcn.00415350
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x790]
call fcn.0040c560
mov eax, dword [ebp - 0x794]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x794]
mov eax, dword [edx + 0x38]
call eax
mov dword [ebp - 0x794], eax
jmp 0x40fecc
lea ecx, [ebp - 0x6a0]
push ecx
mov ecx, 0x580938
call fcn.00415150
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x420]
call fcn.00415350
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6a0]
call fcn.00408600
jmp 0x40e834
mov ecx, 0x580938
call fcn.00415130
test eax, eax
ja 0x410ed2
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x428]
call fcn.00415350
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00415350
jmp 0x410ef0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x428]
call fcn.00415350
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00415350
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b8d48
mov esp, ebp
pop ebp
ret