Function at 0x404190
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4782fa
mov eax, dword fs:[0]
push eax
sub esp, 0x1b8
mov eax, dword [0x4a0800]
xor eax, esp
mov dword [esp + 0x1b0], eax
push ebx
push esi
push edi
mov eax, dword [0x4a0800]
xor eax, esp
push eax
lea eax, [esp + 0x1c8]
mov dword fs:[0], eax
mov esi, ecx
mov ebx, esi
mov dword [esp + 0x38], esi
call fcn.00408060
call fcn.00409db0
mov dword [esp + 0x80], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0x80]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x80]
mov dword [eax], eax
mov eax, dword [esp + 0x80]
xor ebx, ebx
mov dword [eax + 8], eax
mov dword [esp + 0x84], ebx
mov dword [esp + 0x1d0], ebx
call fcn.00409db0
mov dword [esp + 0xa0], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0xa0]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xa0]
mov dword [eax], eax
mov eax, dword [esp + 0xa0]
mov dword [eax + 8], eax
mov dword [esp + 0xa4], ebx
mov byte [esp + 0x1d0], 1
call fcn.00409db0
mov dword [esp + 0x50], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0x50]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x50]
mov dword [eax], eax
mov eax, dword [esp + 0x50]
mov dword [eax + 8], eax
mov dword [esp + 0x54], ebx
mov byte [esp + 0x1d0], 2
call fcn.00409db0
mov dword [esp + 0xf4], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0xf4]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xf4]
mov dword [eax], eax
mov eax, dword [esp + 0xf4]
mov dword [eax + 8], eax
mov dword [esp + 0xf8], ebx
mov byte [esp + 0x1d0], 3
call fcn.00409db0
mov dword [esp + 0xb0], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0xb0]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [eax], eax
mov eax, dword [esp + 0xb0]
mov dword [eax + 8], eax
mov dword [esp + 0xb4], ebx
mov byte [esp + 0x1d0], 4
call fcn.00446123
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x404315
push 0x80004005
call fcn.00402750
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x34], eax
mov byte [esp + 0x1d0], 5
call fcn.0040fbf0
mov dword [esp + 0x3c], eax
call fcn.00446123
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x404350
push 0x80004005
call fcn.00402750
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x88], eax
mov byte [esp + 0x1d0], 6
call fcn.00446123
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x404385
push 0x80004005
call fcn.00402750
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x8c], eax
mov byte [esp + 0x1d0], 7
call fcn.00446123
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x4043ba
push 0x80004005
call fcn.00402750
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x48], eax
mov byte [esp + 0x1d0], 8
call fcn.00446123
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x4043ec
push 0x80004005
call fcn.00402750
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x64], eax
mov byte [esp + 0x1d0], 9
call fcn.00446123
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40441e
push 0x80004005
call fcn.00402750
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x58], eax
mov byte [esp + 0x1d0], 0xa
call fcn.00446123
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x404450
push 0x80004005
call fcn.00402750
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x98], eax
mov byte [esp + 0x1d0], 0xb
call fcn.00446123
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x404485
push 0x80004005
call fcn.00402750
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x94], eax
add esi, 0x58
mov byte [esp + 0x1d0], 0xc
cmp dword [esi + 0x18], 8
jb 0x4044ae
mov eax, dword [esi + 4]
jmp 0x4044b1
lea eax, [esi + 4]
push eax
lea ecx, [esp + 0x8c]
push str.InstallationId_s
push ecx
call fcn.0040a8d0
mov edx, dword [ebp + 8]
add esp, 0xc
push edx
lea eax, [esp + 0x90]
push str.EventTypeID_d
push eax
call fcn.0040a8d0
add esp, 0xc
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0xd
je 0x404506
push esi
mov edi, eax
call fcn.0042ef50
mov edi, eax
jmp 0x404508
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xe
push str.InstallationId
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea ecx, [esp + 0x7c]
push ecx
mov ecx, esi
mov byte [esp + 0x1d4], 0xe
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404563
mov edx, dword [esp + 0x18]
push edx
call fcn.004383e1
add esp, 4
mov eax, dword [ebp + 8]
push eax
lea ecx, [esp + 0x38]
push 0x487d4c
push ecx
call fcn.0040a8d0
add esp, 0xc
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0xf
je 0x4045a4
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042eeb0
mov edi, eax
xor ebx, ebx
jmp 0x4045a6
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xb
push str.EventTypeID
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea edx, [esp + 0x7c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x10
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404601
mov eax, dword [esp + 0x18]
push eax
call fcn.004383e1
add esp, 4
cmp dword [ebp + 8], 1
jne 0x404895
mov esi, dword [esp + 0x38]
lea ecx, [esp + 0xf0]
push ecx
lea edx, [esp + 0x9c]
push edx
mov ecx, esi
call fcn.00406280
mov eax, 8
cmp dword [esi + 0xc8], eax
jb 0x40463f
mov ecx, dword [esi + 0xb4]
mov dword [esp + 0x60], ecx
jmp 0x404649
lea edx, [esi + 0xb4]
mov dword [esp + 0x60], edx
cmp dword [esi + 0x54], eax
jb 0x404653
mov edx, dword [esi + 0x40]
jmp 0x404656
lea edx, [esi + 0x40]
mov esi, dword [esp + 0x3c]
lea eax, [esi + 0xa38]
mov dword [esp + 0x40], eax
lea edi, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x404667
sub eax, edi
sar eax, 1
mov edi, dword [esp + 0x40]
jne 0x404682
lea edi, [esi + 0x310c]
mov eax, dword [esp + 0x60]
push eax
push edx
mov edx, dword [esp + 0xa0]
lea ecx, [esi + 0x38]
push ecx
push edx
mov ecx, esi
call fcn.00412360
push eax
mov eax, dword [esi + 0x20]
push edi
push eax
lea ecx, [esp + 0x80]
push str.InstallationData_brandId_:___d____countryCode_:___s____languageCode_:___d_____MachineData_:__s___TestData_:__s___startTime_:___s____FirstTime_:___s_
push ecx
call fcn.0040a8d0
add esp, 0x24
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x11
je 0x4046ff
mov ecx, dword [esp + 0x40]
lea edi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x4046d7
mov ebx, dword [esp + 0x40]
sub ecx, edi
sar ecx, 1
jne 0x4046f2
lea ebx, [esi + 0x310c]
mov edi, eax
call fcn.0042eeb0
mov edi, eax
xor ebx, ebx
jmp 0x404701
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xb
push str.countryCode
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea edx, [esp + 0x9c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x12
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x40475f
mov eax, dword [esp + 0x18]
push eax
call fcn.004383e1
add esp, 4
mov ecx, dword [esp + 0x3c]
call fcn.00412360
push eax
lea ecx, [esp + 0x38]
push 0x487d4c
push ecx
call fcn.0040a8d0
add esp, 0xc
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x13
je 0x4047a6
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042eeb0
mov edi, eax
xor ebx, ebx
jmp 0x4047a8
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xc
push str.languageCode
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea edx, [esp + 0x9c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x14
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404806
mov eax, dword [esp + 0x18]
push eax
call fcn.004383e1
add esp, 4
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x15
je 0x404833
lea ecx, [esp + 0xf0]
push ecx
mov esi, eax
call fcn.0042f050
mov edi, eax
jmp 0x404835
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xb
push str.MachineData
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea edx, [esp + 0x9c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x16
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4048a5
mov eax, dword [esp + 0x18]
push eax
call fcn.004383e1
add esp, 4
jmp 0x4048a5
push 0x13
push 0x486ac4
lea ecx, [esp + 0x6c]
call fcn.00402d20
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x17
je 0x4048d2
lea ecx, [esp + 0x9c]
push ecx
mov esi, eax
call fcn.0042f050
mov edi, eax
jmp 0x4048d4
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0x10
push str.InstallationData
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea edx, [esp + 0x7c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x18
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x40492f
mov eax, dword [esp + 0x18]
push eax
call fcn.004383e1
add esp, 4
mov eax, dword [esp + 0x38]
lea ecx, [eax + 0x258]
mov edi, 8
cmp dword [ecx + 0x18], edi
mov dword [esp + 0x30], ecx
jb 0x40494c
mov ecx, dword [ecx + 4]
jmp 0x40494f
add ecx, 4
cmp dword [eax + 0x254], edi
mov dword [esp + 0x60], ecx
lea ecx, [eax + 0x23c]
mov dword [esp + 0x5c], ecx
jb 0x40496e
mov edx, dword [ecx + 4]
mov dword [esp + 0x40], edx
jmp 0x404975
add ecx, 4
mov dword [esp + 0x40], ecx
cmp dword [eax + 0x2a8], edi
lea ecx, [eax + 0x290]
mov dword [esp + 0x6c], ecx
jb 0x40498c
mov ecx, dword [ecx + 4]
jmp 0x40498f
add ecx, 4
cmp dword [eax + 0x28c], edi
mov dword [esp + 0xe8], ecx
lea ecx, [eax + 0x274]
mov dword [esp + 0x74], ecx
jb 0x4049b4
mov edx, dword [ecx + 4]
mov dword [esp + 0xe0], edx
jmp 0x4049be
add ecx, 4
mov dword [esp + 0xe0], ecx
cmp dword [eax + 0x234], edi
lea ecx, [eax + 0x21c]
mov dword [esp + 0x78], ecx
jb 0x4049d5
mov ecx, dword [ecx + 4]
jmp 0x4049d8
add ecx, 4
cmp dword [eax + 0x1a8], edi
mov dword [esp + 0xd0], ecx
lea ecx, [eax + 0x190]
mov dword [esp + 0xb8], ecx
jb 0x404a00
mov edx, dword [ecx + 4]
mov dword [esp + 0xc0], edx
jmp 0x404a0a
add ecx, 4
mov dword [esp + 0xc0], ecx
cmp dword [eax + 0x218], edi
lea ecx, [eax + 0x200]
mov dword [esp + 0xa8], ecx
jb 0x404a24
mov ecx, dword [ecx + 4]
jmp 0x404a27
add ecx, 4
cmp dword [eax + 0x1fc], edi
mov dword [esp + 0xe4], ecx
lea ecx, [eax + 0x1e4]
mov dword [esp + 0xcc], ecx
jb 0x404a4f
mov edx, dword [ecx + 4]
mov dword [esp + 0xec], edx
jmp 0x404a59
add ecx, 4
mov dword [esp + 0xec], ecx
cmp dword [eax + 0xc8], edi
lea ecx, [eax + 0xb0]
mov dword [esp + 0xc4], ecx
jb 0x404a73
mov ecx, dword [ecx + 4]
jmp 0x404a76
add ecx, 4
cmp dword [eax + 0x54], edi
lea esi, [eax + 0x3c]
mov dword [esp + 0x44], ecx
mov dword [esp + 0xbc], esi
jb 0x404a8e
mov esi, dword [esi + 4]
jmp 0x404a91
add esi, 4
cmp dword [eax + 0xac], edi
lea edx, [eax + 0x94]
mov dword [esp + 0x70], edx
jb 0x404aa8
mov edx, dword [edx + 4]
jmp 0x404aab
add edx, 4
add eax, 0x74
cmp dword [eax + 0x18], edi
mov dword [esp + 0x90], eax
jb 0x404abf
mov ecx, dword [eax + 4]
jmp 0x404ac2
lea ecx, [eax + 4]
mov edi, dword [esp + 0x3c]
lea eax, [edi + 0x838]
mov edi, dword [edi + 0x34]
push edi
mov edi, dword [esp + 0x64]
push edi
mov edi, dword [esp + 0x48]
push edi
mov edi, dword [esp + 0xf4]
push edi
push eax
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0xf4]
push eax
mov eax, dword [esp + 0xe8]
push eax
mov eax, dword [esp + 0xdc]
push eax
mov eax, dword [esp + 0x104]
push eax
mov eax, dword [esp + 0x110]
push eax
mov eax, dword [esp + 0x6c]
push eax
mov eax, dword [esp + 0x68]
mov eax, dword [eax + 0x20]
push esi
push eax
push edx
mov edx, dword [esp + 0x70]
mov eax, dword [edx + 0x90]
push eax
push ecx
lea ecx, [esp + 0x88]
push str.EventData_MachineIDGUID_:___s____MachineID_:___lu____InstallerVersion_:___s____brandId_:___d____startTime_:___s____FirstTime_:___s____setupUrl_:___s____AbortingStage_:___s____Duration_:___s____Error_:___s____CID_:___s____Serial_ID_:___s____ClientVersion_:___s____uninstallTime_:___s____uninstallReason_:___s____testVersion_:___d_
push ecx
call fcn.0040a8d0
push 0x10
call fcn.004383b6
add esp, 0x4c
mov dword [esp + 0x44], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x19
je 0x404b69
mov edx, dword [esp + 0x90]
push edx
mov edi, eax
call fcn.0042ef50
mov edi, eax
jmp 0x404b6b
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xd
push str.MachineIDGUID
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x1a
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404bc6
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004383e1
add esp, 4
mov edx, dword [esp + 0x38]
mov eax, dword [edx + 0x90]
push eax
lea ecx, [esp + 0x38]
push 0x486dc4
push ecx
call fcn.0040a8d0
add esp, 0xc
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x90], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x1b
je 0x404c11
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042eeb0
mov edi, eax
xor ebx, ebx
jmp 0x404c13
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 9
push str.MachineID
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea edx, [esp + 0x4c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x1c
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404c6e
mov eax, dword [esp + 0x18]
push eax
call fcn.004383e1
add esp, 4
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x90], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x1d
je 0x404c9b
mov ecx, dword [esp + 0x70]
push ecx
mov edi, eax
call fcn.0042ef50
mov edi, eax
jmp 0x404c9d
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0x10
push str.InstallerVersion
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea edx, [esp + 0x4c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x1e
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404cf8
mov eax, dword [esp + 0x18]
push eax
call fcn.004383e1
add esp, 4
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx + 0x20]
push edx
lea eax, [esp + 0x38]
push 0x487d4c
push eax
call fcn.0040a8d0
add esp, 0xc
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x70], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x1f
je 0x404d3d
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042eeb0
mov edi, eax
xor ebx, ebx
jmp 0x404d3f
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 7
push str.brandId
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea ecx, [esp + 0x4c]
push ecx
mov ecx, esi
mov byte [esp + 0x1d4], 0x20
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404d9a
mov edx, dword [esp + 0x18]
push edx
call fcn.004383e1
add esp, 4
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x70], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x21
je 0x404dc8
mov ebx, dword [esp + 0x3c]
add ebx, 0x38
mov edi, eax
call fcn.0042eeb0
mov edi, eax
xor ebx, ebx
jmp 0x404dca
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 8
push str.TestData
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x22
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404e25
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004383e1
add esp, 4
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x70], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x23
je 0x404e52
mov edx, dword [esp + 0xbc]
push edx
mov edi, eax
call fcn.0042ef50
mov edi, eax
jmp 0x404e54
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 9
push str.startTime
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x24
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404eaf
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004383e1
add esp, 4
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0xbc], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x25
je 0x404edf
mov edx, dword [esp + 0xc4]
push edx
mov edi, eax
call fcn.0042ef50
mov edi, eax
jmp 0x404ee1
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 9
push str.FirstTime
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x26
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404f3c
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004383e1
add esp, 4
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0xc4], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x27
je 0x404f6c
mov edx, dword [esp + 0xcc]
push edx
mov edi, eax
call fcn.0042ef50
mov edi, eax
jmp 0x404f6e
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 8
push str.setupUrl
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x28
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404fc9
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004383e1
add esp, 4
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0xcc], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x29
je 0x404ff9
mov edx, dword [esp + 0xa8]
push edx
mov edi, eax
call fcn.0042ef50
mov edi, eax
jmp 0x404ffb
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xd
push str.AbortingStage
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x2a
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x405056
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004383e1
add esp, 4
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0xa8], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x2b
je 0x405086
mov edx, dword [esp + 0xb8]
push edx
mov edi, eax
call fcn.0042ef50
mov esi, eax
jmp 0x405088
xor esi, esi
mov edx, str.Duration
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x2c
call fcn.00408ee0
mov dword [eax], esi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4050d2
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004383e1
add esp, 4
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0xb8], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x2d
je 0x4050ff
mov edx, dword [esp + 0x78]
push edx
mov edi, eax
call fcn.0042ef50
mov edi, eax
jmp 0x405101
xor edi, edi
mov edx, str.Error
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x2e
call fcn.00408ee0
mov esi, 8
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], esi
jb 0x40514f
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004383e1
add esp, 4
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x78], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x2f
je 0x405179
mov edx, dword [esp + 0x74]
push edx
mov edi, eax
call fcn.0042ef50
mov edi, eax
jmp 0x40517b
xor edi, edi
mov edx, 0x486ea0
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x30
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], esi
jb 0x4051c4
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004383e1
add esp, 4
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x74], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x31
je 0x4051ef
mov ebx, dword [esp + 0x68]
mov edi, eax
call fcn.0042eeb0
mov edi, eax
xor ebx, ebx
jmp 0x4051f1
xor edi, edi
mov esi, dword [esp + 0x38]
mov edx, str.Serial_ID
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x32
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x40523f
mov eax, dword [esp + 0x18]
push eax
call fcn.004383e1
add esp, 4
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x68], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x33
je 0x405269
mov ecx, dword [esp + 0x6c]
push ecx
mov edi, eax
call fcn.0042ef50
mov edi, eax
jmp 0x40526b
xor edi, edi
mov edx, str.ClientVersion
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x34
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4052b5
mov eax, dword [esp + 0x18]
push eax
call fcn.004383e1
add esp, 4
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x6c], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x35
je 0x4052df
mov ecx, dword [esp + 0x5c]
push ecx
mov edi, eax
call fcn.0042ef50
mov edi, eax
jmp 0x4052e1
xor edi, edi
mov edx, str.uninstallTime
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x36
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x40532b
mov eax, dword [esp + 0x18]
push eax
call fcn.004383e1
add esp, 4
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x5c], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x37
je 0x405355
mov ecx, dword [esp + 0x30]
push ecx
mov edi, eax
call fcn.0042ef50
mov edi, eax
jmp 0x405357
xor edi, edi
mov edx, str.uninstallReason
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x38
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4053a1
mov eax, dword [esp + 0x18]
push eax
call fcn.004383e1
add esp, 4
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx + 0x34]
push edx
lea eax, [esp + 0x38]
push 0x487d4c
push eax
call fcn.0040a8d0
add esp, 0xc
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x39
je 0x4053ea
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042eeb0
mov esi, dword [esp + 0x38]
mov edi, eax
xor ebx, ebx
jmp 0x4053ec
xor edi, edi
mov edx, str.testVersion
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea ecx, [esp + 0x4c]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x3a
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x405436
mov edx, dword [esp + 0x18]
push edx
call fcn.004383e1
add esp, 4
mov eax, dword [ebp + 8]
cmp eax, 0xb
jne 0x405484
call fcn.00446123
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x405458
push 0x80004005
call fcn.00402750
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x44], eax
lea ecx, [esp + 0x4c]
push ecx
lea edx, [esp + 0x48]
push edx
mov byte [esp + 0x1d8], 0x3b
call fcn.00408250
jmp 0x4055b0
cmp eax, 3
jne 0x4055f4
call fcn.00446123
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x4054a7
push 0x80004005
call fcn.00402750
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x44], eax
mov byte [esp + 0x1d0], 0x3c
mov ecx, dword [esi + 0x2b8]
mov edx, dword [esi + 0x2b4]
mov eax, dword [esi + 0x2b0]
push ecx
push edx
push eax
lea ecx, [esp + 0x50]
push str._downloadTime_:___lld____isDirect_:___d_
push ecx
call fcn.0040a8d0
add esp, 0x14
push 0x10
call fcn.004383b6
add esp, 4
cmp eax, ebx
je 0x405507
fild qword [esi + 0x2b0]
mov dword [eax], 3
mov edi, eax
fstp qword [eax + 8]
jmp 0x405509
xor edi, edi
mov edx, str.downloadTime
lea eax, [esp + 0x14]
call fcn.00401360
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x3d
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0x3c
cmp dword [esp + 0x2c], 8
jb 0x40554b
mov eax, dword [esp + 0x18]
push eax
call fcn.004383e1
add esp, 4
push 0x10
call fcn.004383b6
add esp, 4
cmp eax, ebx
je 0x40556c
fild dword [esi + 0x2b8]
mov dword [eax], 3
mov edi, eax
fstp qword [eax + 8]
jmp 0x40556e
xor edi, edi
mov edx, str.isDirect
lea eax, [esp + 0x14]
call fcn.00401360
lea ecx, [esp + 0x4c]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x3e
call fcn.00408ee0
mov dword [eax], edi
mov byte [esp + 0x1d0], 0x3c
cmp dword [esp + 0x2c], 8
jb 0x4055b0
mov edx, dword [esp + 0x18]
push edx
call fcn.004383e1
add esp, 4
push 0x486f2c
lea ecx, [esp + 0x4c]
call fcn.00408e10
mov esi, dword [esp + 0x44]
mov eax, dword [esi - 0xc]
push eax
push esi
lea ecx, [esp + 0x50]
call fcn.00409030
lea eax, [esi - 0x10]
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x1d0], 0xc
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4055f4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x486fbc
lea ecx, [esp + 0x4c]
call fcn.00408e10
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x3f
je 0x40562c
lea ecx, [esp + 0x4c]
push ecx
mov esi, eax
call fcn.0042f050
mov esi, eax
jmp 0x40562e
xor esi, esi
mov edx, 0x486fc0
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea edx, [esp + 0x7c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x40
call fcn.00408ee0
mov dword [eax], esi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x405678
mov eax, dword [esp + 0x18]
push eax
call fcn.004383e1
add esp, 4
push 0x486fd4
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0x80]
push edx
call fcn.00408d30
add esp, 0xc
lea ecx, [esp + 0x8c]
push ecx
push eax
lea edx, [esp + 0x7c]
push edx
mov byte [esp + 0x1dc], 0x41
call fcn.00408c70
add esp, 0xc
push 0x486fd4
push eax
lea eax, [esp + 0x70]
push eax
mov byte [esp + 0x1dc], 0x42
call fcn.00408d30
add esp, 0xc
lea ecx, [esp + 0x64]
push ecx
push eax
lea edx, [esp + 0x74]
push edx
mov byte [esp + 0x1dc], 0x43
call fcn.00408c70
add esp, 0xc
push 0x486fd4
push eax
lea eax, [esp + 0x64]
push eax
mov byte [esp + 0x1dc], 0x44
call fcn.00408d30
add esp, 0xc
lea ecx, [esp + 0x48]
push ecx
push eax
lea edx, [esp + 0x38]
push edx
mov byte [esp + 0x1dc], 0x45
call fcn.00408c70
add esp, 0xc
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x1d4], 0x46
call fcn.0040a7e0
mov byte [esp + 0x1d0], 0x45
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405759
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0x44
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405781
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0x43
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4057a9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0x42
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4057d1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0x41
mov eax, dword [esp + 0x74]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4057f9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0xc
mov eax, dword [esp + 0x78]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405821
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx + 0x238]
cmp eax, ebx
jbe 0x405a34
push eax
lea edx, [esp + 0x44]
push edx
call fcn.00415480
mov esi, dword [esp + 0x40]
mov byte [esp + 0x1d8], 0x47
mov eax, dword [esp + 0x48]
mov ecx, dword [esi + 0x238]
push eax
push ecx
lea edx, [esp + 0xa4]
push 0x486fd8
push edx
call fcn.0040a8d0
add esp, 0x18
push 0x486fd4
lea ecx, [esp + 0x5c]
call fcn.00408b00
mov ecx, dword [esp + 0x94]
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x60]
call fcn.00409030
mov eax, dword [esi + 0x238]
push eax
lea ecx, [esp + 0x38]
push 0x486dc4
push ecx
call fcn.0040a8d0
add esp, 0xc
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x48
je 0x4058d2
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042eeb0
mov esi, eax
xor ebx, ebx
jmp 0x4058d4
xor esi, esi
mov edx, str.Code
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x47
call fcn.00401360
lea edx, [esp + 0xac]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x49
call fcn.00408ee0
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x47
cmp dword [esp + 0x2c], 8
jb 0x405921
mov eax, dword [esp + 0x18]
push eax
call fcn.004383e1
add esp, 4
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x4a
je 0x40594c
mov ebx, dword [esp + 0x40]
mov edi, eax
call fcn.0042eeb0
mov esi, eax
xor ebx, ebx
jmp 0x40594e
xor esi, esi
mov edx, str.Description
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x47
call fcn.00401360
lea ecx, [esp + 0xac]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x4b
call fcn.00408ee0
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x47
cmp dword [esp + 0x2c], 8
jb 0x40599b
mov edx, dword [esp + 0x18]
push edx
call fcn.004383e1
add esp, 4
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x4c
je 0x4059c8
lea ecx, [esp + 0xac]
push ecx
mov esi, eax
call fcn.0042f050
mov esi, eax
jmp 0x4059ca
xor esi, esi
mov edx, str.SystemError
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x47
call fcn.00401360
lea edx, [esp + 0x7c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x4d
call fcn.00408ee0
mov dword [eax], esi
cmp dword [esp + 0x2c], 8
jb 0x405a0c
mov eax, dword [esp + 0x18]
push eax
call fcn.004383e1
add esp, 4
mov byte [esp + 0x1d0], 0xc
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405a34
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [esp + 0x58]
lea eax, [esp + 0x188]
call fcn.00401360
mov byte [esp + 0x1d0], 0x4e
mov eax, dword [esp + 0x18c]
mov edi, 8
cmp dword [esp + 0x1a0], edi
jae 0x405a68
lea eax, [esp + 0x18c]
mov esi, dword [ebp + 8]
push eax
push esi
push str.Reporting_event:__d__data_sent:__s
push ebx
push 0x11f
push str.CReportinServiceST::DoReportExec
call fcn.00434450
add esp, 0x18
push str.Content_Type:_application_x_www_form_urlencoded_r_n
mov word [esp + 0x140], bx
mov dword [esp + 0x142], ebx
mov dword [esp + 0x146], ebx
mov dword [esp + 0x14a], ebx
mov word [esp + 0x14e], bx
mov word [esp + 0x160], bx
mov dword [esp + 0x162], ebx
mov dword [esp + 0x166], ebx
mov dword [esp + 0x16a], ebx
mov word [esp + 0x16e], bx
mov word [esp + 0x120], bx
mov dword [esp + 0x122], ebx
mov dword [esp + 0x126], ebx
mov dword [esp + 0x12a], ebx
mov word [esp + 0x12e], bx
mov word [esp + 0x110], bx
mov dword [esp + 0x112], ebx
mov dword [esp + 0x116], ebx
mov dword [esp + 0x11a], ebx
mov word [esp + 0x11e], bx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
cmp esi, ebx
mov word [esp + 0x10c], di
mov dword [esp + 0x114], eax
je 0x405b95
sub esp, 0x1c
lea ecx, [esp + 0x1a4]
mov eax, esp
mov dword [esp + 0x4c], esp
call fcn.0040dd50
lea edi, [esp + 0x138]
call fcn.004153b0
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + 0x18]
add esp, 0x1c
mov ecx, dword [ecx + 8]
lea edx, [esp + 0x10c]
push edx
mov edx, edi
push edx
lea edx, [esp + 0x164]
push edx
lea edx, [esp + 0x148]
push edx
push eax
push str._bLLLL
push ebx
push ebx
push 1
push 0x68
push ecx
call fcn.0043f1db
add esp, 0x2c
call fcn.00409db0
mov dword [esp + 0xd8], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0xd8]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xd8]
mov dword [eax], eax
mov eax, dword [esp + 0xd8]
mov dword [eax + 8], eax
mov dword [esp + 0xdc], ebx
push ebx
mov byte [esp + 0x1d4], 0x4f
call fcn.00455fb1
mov dword [esp + 0x170], eax
add esp, 4
lea eax, [esp + 0x16c]
push eax
mov esi, str._Y__m__dT_H:_M:_S.000Z
lea edi, [esp + 0xcc]
mov dword [esp + 0x174], edx
call fcn.0040a8f0
push 0x10
mov byte [esp + 0x1d4], 0x50
call fcn.004383b6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x51
je 0x405c36
mov ecx, dword [esp + 0x38]
add ecx, 0x20
push ecx
mov edi, eax
call fcn.0042ef50
mov esi, eax
jmp 0x405c38
xor esi, esi
mov edx, str.target
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x50
call fcn.00401360
lea edx, [esp + 0xd4]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x52
call fcn.00408ee0
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x50
cmp dword [esp + 0x2c], 8
jb 0x405c85
mov eax, dword [esp + 0x18]
push eax
call fcn.004383e1
add esp, 4
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x53
je 0x405cb3
mov ebx, dword [esp + 0xc8]
mov edi, eax
call fcn.0042eeb0
mov esi, eax
xor ebx, ebx
jmp 0x405cb5
xor esi, esi
mov edx, str.eventDateTime
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x50
call fcn.00401360
lea ecx, [esp + 0xd4]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x54
call fcn.00408ee0
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x50
cmp dword [esp + 0x2c], 8
jb 0x405d02
mov edx, dword [esp + 0x18]
push edx
call fcn.004383e1
add esp, 4
push 0x10
call fcn.004383b6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x55
je 0x405d2f
lea ecx, [esp + 0xd4]
push ecx
mov esi, eax
call fcn.0042f050
mov esi, eax
jmp 0x405d31
xor esi, esi
mov edx, str.eventHeader
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x50
call fcn.00401360
lea edx, [esp + 0x7c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x56
call fcn.00408ee0
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x50
cmp dword [esp + 0x2c], 8
jb 0x405d7b
mov eax, dword [esp + 0x18]
push eax
call fcn.004383e1
add esp, 4
push 0x10
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], bx
call fcn.004383b6
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x57
je 0x405db8
lea ecx, [esp + 0x7c]
push ecx
mov esi, eax
call fcn.0042f050
mov dword [esp + 0x3c], eax
jmp 0x405dbc
mov dword [esp + 0x3c], ebx
mov ecx, dword [esp + 0x3c]
lea esi, [esp + 0x1a4]
mov byte [esp + 0x1d0], 0x50
call fcn.0042f290
mov byte [esp + 0x1d0], 0x58
xor eax, eax
push str.Content_Type:_application_json_r_n
mov word [esp + 0x150], bx
mov dword [esp + 0x152], eax
mov dword [esp + 0x156], eax
mov dword [esp + 0x15a], eax
mov word [esp + 0x15e], ax
mov word [esp + 0x178], bx
mov dword [esp + 0x17a], eax
mov dword [esp + 0x17e], eax
mov dword [esp + 0x182], eax
mov word [esp + 0x186], ax
mov word [esp + 0x130], bx
mov dword [esp + 0x132], eax
mov dword [esp + 0x136], eax
mov dword [esp + 0x13a], eax
mov word [esp + 0x13e], ax
mov word [esp + 0x100], bx
mov dword [esp + 0x102], eax
mov dword [esp + 0x106], eax
mov dword [esp + 0x10a], eax
mov word [esp + 0x10e], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
sub esp, 0x1c
mov dword [esp + 0x120], eax
mov ecx, esi
mov eax, esp
mov word [esp + 0x118], 8
mov dword [esp + 0x4c], esp
call fcn.0040dd50
lea edi, [esp + 0x148]
call fcn.004153b0
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + 0x1c]
add esp, 0x1c
mov ecx, dword [ecx + 0xc]
lea edx, [esp + 0xfc]
push edx
mov edx, edi
push edx
lea edx, [esp + 0x17c]
push edx
lea edx, [esp + 0x158]
push edx
push eax
push str._bLLLL
push ebx
push ebx
push 1
push 0x68
push ecx
call fcn.0043f1db
add esp, 0x2c
cmp dword [esp + 0x3c], ebx
je 0x405f01
mov esi, dword [esp + 0x3c]
mov ecx, esi
call fcn.0042f0d0
push esi
call fcn.004383e1
add esp, 4
mov edi, dword [esp + 0x38]
call fcn.004061f0
mov edi, 8
cmp dword [esp + 0x1bc], edi
jb 0x405f28
mov eax, dword [esp + 0x1a8]
push eax
call fcn.004383e1
add esp, 4
mov byte [esp + 0x1d0], 0x4f
mov eax, dword [esp + 0xc8]
mov esi, 7
add eax, 0xfffffff0
mov dword [esp + 0x1bc], esi
mov dword [esp + 0x1b8], ebx
mov word [esp + 0x1a8], bx
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405f6e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [esp + 0xd4]
mov byte [esp + 0x1d0], 0x4e
call fcn.00406190
cmp dword [esp + 0x1a0], edi
jb 0x405f9b
mov ecx, dword [esp + 0x18c]
push ecx
call fcn.004383e1
add esp, 4
mov byte [esp + 0x1d0], 0xb
mov eax, dword [esp + 0x94]
add eax, 0xfffffff0
mov dword [esp + 0x1a0], esi
mov dword [esp + 0x19c], ebx
mov word [esp + 0x18c], bx
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x405fdc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0xa
mov eax, dword [esp + 0x98]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406007
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 9
mov eax, dword [esp + 0x58]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40602f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 8
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406057
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 7
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40607f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 6
mov eax, dword [esp + 0x8c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4060aa
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 5
mov eax, dword [esp + 0x88]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4060d5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 4
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4060fd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [esp + 0xac]
mov byte [esp + 0x1d0], 3
call fcn.00406190
lea eax, [esp + 0xf0]
mov byte [esp + 0x1d0], 2
call fcn.00406190
lea eax, [esp + 0x4c]
mov byte [esp + 0x1d0], 1
call fcn.00406190
lea eax, [esp + 0x9c]
mov byte [esp + 0x1d0], bl
call fcn.00406190
lea eax, [esp + 0x7c]
mov dword [esp + 0x1d0], 0xffffffff
call fcn.00406190
mov ecx, dword [esp + 0x1c8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1b0]
xor ecx, esp
call fcn.00454f77
mov esp, ebp
pop ebp
ret 4