Function at 0x40a3f0
Capabilities:
Contain obfuscated stackstrings
Copy file
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5242d3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xbf4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor esi, esi
mov dword [ebp - 4], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x2c], esi
mov eax, 0x528928
lea ecx, [ebp - 0xf0]
call fcn.0040fae0
mov byte [ebp - 4], 1
push str.LAST_COLLECT
push str.SoftwareABG_Ltd.ConfigTamnunSnd
lea ecx, [ebp - 0xf0]
call fcn.00466ce0
add esp, 8
cmp dword [ebp - 0xe0], esi
je 0x40a46c
lea eax, [ebp - 0xf0]
push eax
call fcn.004eea20
add esp, 4
test al, al
jne 0x40a4b3
mov eax, str.Key_LAST_COLLECT_is_empty_collect_last_week
lea ecx, [ebp - 0x78]
call fcn.0040fae0
mov byte [ebp - 4], 2
push esi
push 1
lea ecx, [ebp - 0x78]
push ecx
push 0x57c
push str.ActionManager::GetReportFromAgent
call fcn.0044d970
add esp, 0x14
mov byte [ebp - 4], 1
lea esi, [ebp - 0x78]
call fcn.004150b0
lea edx, [ebp - 0xf0]
push edx
mov eax, str.2017_01_01
call fcn.0040fb40
lea eax, [ebp - 0xf0]
push eax
call fcn.004f1f20
add esp, 4
push edx
push eax
call fcn.004f1eb0
mov ecx, eax
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x4c], edx
mov eax, 0xc22e4507
imul ecx
add edx, ecx
sar edx, 0x10
mov ecx, edx
shr ecx, 0x1f
lea edi, [edx + ecx + 1]
push 0
call dword [sym.imp.MSVCR100.dll__time64]
add esp, 0xc
mov esi, eax
mov ebx, edx
push ebx
push esi
call fcn.004f1eb0
add esp, 8
mov ecx, eax
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x3c], edx
mov eax, 0xc22e4507
imul ecx
add edx, ecx
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
lea ecx, [edx + eax - 1]
mov dword [ebp - 0x38], ecx
push 0
push 0x15180
push ebx
push esi
call fcn.0050f670
push 0
push 0x15180
push edx
push eax
call fcn.0050f940
push edx
push eax
call fcn.004f1e80
add esp, 8
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], edx
cmp edi, dword [ebp - 0x38]
jle 0x40a5b1
mov eax, str.No_need_to_send_anything_yet
lea ecx, [ebp - 0x78]
call fcn.0040fae0
mov byte [ebp - 4], 3
push 0
push 1
lea edx, [ebp - 0x78]
push edx
push 0x596
push str.ActionManager::GetReportFromAgent
call fcn.0044d970
add esp, 0x14
mov byte [ebp - 4], 1
lea esi, [ebp - 0x78]
call fcn.004150b0
mov byte [ebp - 4], 0
lea esi, [ebp - 0xf0]
call fcn.004150b0
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp - 0x38]
add eax, 0xfffffffc
cmp edi, eax
jge 0x40a5bd
mov edi, eax
mov eax, edi
imul eax, eax, 0x15180
cdq
push edx
push eax
call fcn.004f1e80
add esp, 8
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edx
xor esi, esi
mov dword [ebp - 0x24], esi
mov eax, dword [ebp + 8]
push eax
call fcn.0040dfe0
mov byte [ebp - 0x11], al
test al, al
jne 0x40a610
mov eax, str.LoadReportTypesFile_failed
lea ecx, [ebp - 0x78]
call fcn.0040fae0
mov byte [ebp - 4], 4
push esi
push 0x20000000
lea ecx, [ebp - 0x78]
push ecx
push 0x5a2
jmp 0x40a574
lea edx, [ebp - 0xc00]
push edx
call fcn.004f8c10
mov dword [ebp - 0x348], esi
mov dword [ebp - 0x340], esi
mov byte [ebp - 0x33c], 0
lea eax, [ebp - 0x184]
push eax
call fcn.0045ed00
add esp, 4
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x1a0]
push ecx
call fcn.004ee870
add esp, 8
mov byte [ebp - 4], 7
lea esi, [ebp - 0x184]
call fcn.004150b0
push 0x572ba0
lea edx, [ebp - 0x210]
push edx
call fcn.004ee870
add esp, 8
mov byte [ebp - 4], 8
mov eax, 0x10
cmp dword [ebp - 0x18c], eax
mov ecx, dword [ebp - 0x1a0]
jae 0x40a692
lea ecx, [ebp - 0x1a0]
cmp dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x210]
jae 0x40a6a6
lea eax, [ebp - 0x210]
push ecx
push eax
lea ecx, [ebp - 0x350]
call fcn.00507ae0
mov dword [ebp - 0x340], 0
sub esp, 0x1c
mov dword [ebp - 0x5c], esp
mov ecx, 0x572c10
mov esi, esp
call fcn.0040fab0
mov byte [ebp - 4], 9
lea eax, [ebp - 0x350]
push eax
mov byte [ebp - 4], 8
call fcn.00507d40
mov byte [ebp - 0x11], 0
mov ecx, dword [ebp - 0x38]
push ecx
lea edx, [ebp - 0x22c]
push edx
call fcn.004ef520
mov esi, eax
mov byte [ebp - 4], 0xa
push edi
lea eax, [ebp - 0x1f4]
push eax
call fcn.004ef520
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x264]
push ecx
mov edx, str.Running
call fcn.00413910
mov byte [ebp - 4], 0xc
push str._..
push eax
lea edx, [ebp - 0x1bc]
push edx
call fcn.004139a0
add esp, 0x24
mov bl, 0xd
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x184]
push ecx
mov edx, esi
mov ecx, eax
call fcn.00413a30
add esp, 4
mov byte [ebp - 4], 0xe
push 0
push 1
push eax
push 0x5b2
push str.ActionManager::GetReportFromAgent
call fcn.0044d970
add esp, 0x14
mov byte [ebp - 4], bl
lea esi, [ebp - 0x184]
call fcn.004150b0
mov byte [ebp - 4], 0xc
lea esi, [ebp - 0x1bc]
call fcn.004150b0
mov byte [ebp - 4], 0xb
lea esi, [ebp - 0x264]
call fcn.004150b0
mov byte [ebp - 4], 0xa
lea esi, [ebp - 0x1f4]
call fcn.004150b0
mov byte [ebp - 4], 8
lea esi, [ebp - 0x22c]
call fcn.004150b0
mov dword [ebp - 0x54], edi
lea esp, [esp]
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x38]
jg 0x40c03a
inc dword [ebp - 0x58]
imul eax, eax, 0x15180
cdq
push edx
push eax
call fcn.004f1e80
mov ebx, eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], edx
push edx
push ebx
call fcn.004f1eb0
push edx
push eax
lea edx, [ebp - 0x10c]
push edx
call fcn.004f4590
add esp, 0x1c
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0xf8], 0x10
mov eax, dword [ebp - 0x10c]
jae 0x40a816
lea eax, [ebp - 0x10c]
push eax
call dword [sym.imp.MSVCR100.dll_atol]
add esp, 4
mov edi, eax
mov dword [ebp - 0xd4], edi
mov ecx, dword [ebp - 0x130]
sub ecx, ebx
mov eax, 0xc22e4507
imul ecx
add edx, ecx
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
lea esi, [edx + eax + 1]
mov dword [ebp - 0x5c], esi
push esi
lea ecx, [ebp - 0x14c]
push ecx
call fcn.004ee810
mov byte [ebp - 4], 0x10
push esi
lea edx, [ebp - 0x9fc]
push edx
call fcn.004ef520
mov esi, eax
mov byte [ebp - 4], 0x11
push edi
lea eax, [ebp - 0x9c4]
push eax
call fcn.004ef520
mov edi, eax
mov byte [ebp - 4], 0x12
push 0
mov ecx, dword [ebp - 0x1c]
push ecx
push ebx
lea edx, [ebp - 0x98c]
push edx
call fcn.004f2070
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x954]
push eax
mov edx, str.Collecting
call fcn.00413910
mov byte [ebp - 4], 0x14
push str.___Day
push eax
lea ecx, [ebp - 0x91c]
push ecx
call fcn.004139a0
add esp, 0x3c
mov byte [ebp - 4], 0x15
lea edx, [ebp - 0x8e4]
push edx
mov edx, edi
mov ecx, eax
call fcn.00413a30
add esp, 4
mov byte [ebp - 4], 0x16
push 0x52a8b0
push eax
lea eax, [ebp - 0x8ac]
push eax
call fcn.004139a0
add esp, 0xc
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x858]
push ecx
mov edx, esi
mov ecx, eax
call fcn.00413a30
add esp, 4
mov byte [ebp - 4], 0x18
push str._Days_ago_
push eax
lea edx, [ebp - 0x2bc]
push edx
call fcn.004139a0
add esp, 0xc
mov byte [ebp - 4], 0x1a
lea esi, [ebp - 0x858]
call fcn.004150b0
mov byte [ebp - 4], 0x1b
lea esi, [ebp - 0x8ac]
call fcn.004150b0
mov byte [ebp - 4], 0x1c
lea esi, [ebp - 0x8e4]
call fcn.004150b0
mov byte [ebp - 4], 0x1d
lea esi, [ebp - 0x91c]
call fcn.004150b0
mov byte [ebp - 4], 0x1e
lea esi, [ebp - 0x954]
call fcn.004150b0
mov byte [ebp - 4], 0x1f
lea esi, [ebp - 0x98c]
call fcn.004150b0
mov byte [ebp - 4], 0x20
lea esi, [ebp - 0x9c4]
call fcn.004150b0
mov byte [ebp - 4], 0x21
lea esi, [ebp - 0x9fc]
call fcn.004150b0
lea ecx, [ebp - 0x2bc]
call fcn.00451670
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x170]
mov ecx, dword [eax]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x24]
cmp eax, dword [edx + 0x170]
je 0x40be70
mov byte [ebp - 0x11], 1
mov esi, dword [eax + 0x10]
mov dword [ebp - 0x44], esi
mov eax, 0x528927
lea ecx, [ebp - 0xb0]
call fcn.0040f980
mov byte [ebp - 4], 0x22
lea ecx, [esi + 0x58]
mov dword [ebp - 0x34], ecx
lea eax, [ebp - 0x10c]
push eax
or eax, 0xffffffff
xor ebx, ebx
call fcn.00411910
lea edi, [esi + 0x20]
mov ecx, str.WIDE_CSV
call fcn.00413d20
test al, al
je 0x40b558
cmp dword [esi], 0x82
jne 0x40af89
mov ecx, dword [ebp - 0xd4]
push ecx
mov edx, dword [esi]
push edx
call fcn.0045c800
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0xb4c]
push ecx
call fcn.004f0050
mov edi, eax
mov byte [ebp - 4], 0x23
mov edx, dword [esi]
push edx
lea eax, [ebp - 0xb14]
push eax
call fcn.004ef520
mov byte [ebp - 4], 0x24
push 0x572bf4
lea ecx, [ebp - 0xadc]
push ecx
mov ecx, eax
call fcn.00413d80
mov byte [ebp - 4], 0x25
push 0x528e74
push eax
lea edx, [ebp - 0xaa4]
push edx
call fcn.004139a0
add esp, 0x2c
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0xa6c]
push ecx
mov edx, edi
mov ecx, eax
call fcn.00413a30
add esp, 4
mov byte [ebp - 4], 0x27
push 0x528e6c
push eax
lea edx, [ebp - 0xa34]
push edx
call fcn.004139a0
add esp, 0xc
mov byte [ebp - 4], 0x28
push 0x528d68
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004139a0
add esp, 0xc
mov byte [ebp - 4], 0x2a
lea esi, [ebp - 0xa34]
call fcn.004150b0
mov byte [ebp - 4], 0x2b
lea esi, [ebp - 0xa6c]
call fcn.004150b0
mov byte [ebp - 4], 0x2c
lea esi, [ebp - 0xaa4]
call fcn.004150b0
mov byte [ebp - 4], 0x2d
lea esi, [ebp - 0xadc]
call fcn.004150b0
mov byte [ebp - 4], 0x2e
lea esi, [ebp - 0xb14]
call fcn.004150b0
mov byte [ebp - 4], 0x2f
lea esi, [ebp - 0xb4c]
call fcn.004150b0
or edi, 0xffffffff
or esi, edi
mov ebx, 8
cmp dword [ebp - 0xb8], ebx
mov eax, dword [ebp - 0xcc]
jae 0x40ab42
lea eax, [ebp - 0xcc]
push eax
call fcn.00445220
add esp, 4
mov dword [ebp - 0x34], eax
test eax, eax
js 0x40ab6f
cmp dword [ebp - 0xb8], ebx
mov ecx, dword [ebp - 0xcc]
jae 0x40ab66
lea ecx, [ebp - 0xcc]
call fcn.00443940
mov edi, eax
mov esi, edx
mov eax, dword [ebp - 0x34]
cmp eax, 0xffffffff
je 0x40aef0
mov ecx, edi
and ecx, esi
cmp ecx, 0xffffffff
je 0x40aef0
test esi, esi
ja 0x40ac39
jb 0x40ab9b
cmp edi, 0x13
ja 0x40ac37
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0x510]
push eax
call fcn.00440200
mov byte [ebp - 4], 0x33
push eax
lea ecx, [ebp - 0x9e0]
push ecx
mov edx, str._File
call fcn.00413910
mov bl, 0x34
mov byte [ebp - 4], bl
push str.__is_empty
push eax
lea edx, [ebp - 0x4d8]
push edx
call fcn.004139a0
add esp, 0x1c
mov byte [ebp - 4], 0x35
push 0
push 1
push eax
push 0x5d7
push str.ActionManager::GetReportFromAgent
call fcn.0044d970
add esp, 0x14
mov byte [ebp - 4], bl
lea esi, [ebp - 0x4d8]
call fcn.004150b0
mov byte [ebp - 4], 0x33
lea esi, [ebp - 0x9e0]
call fcn.004150b0
mov byte [ebp - 4], 0x2f
lea esi, [ebp - 0x510]
call fcn.004150b0
inc dword [ebp - 0x28]
mov byte [ebp - 4], 0x22
lea esi, [ebp - 0xcc]
jmp 0x40bcd7
test esi, esi
jl 0x40ae57
jg 0x40ac49
test edi, edi
je 0x40ae57
cmp eax, 0x7e900
jge 0x40ae57
push 1
sub esp, 0x1c
mov dword [ebp - 0x34], esp
lea eax, [ebp - 0x14c]
mov esi, esp
call fcn.0040f950
mov byte [ebp - 4], 0x36
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x3c], esp
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx]
push edx
push eax
call fcn.004ee810
add esp, 8
mov byte [ebp - 4], 0x37
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 4], 0x2f
call fcn.0040d840
mov byte [ebp - 4], 0x38
cmp dword [ebp - 0x68], 0
je 0x40adb2
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x548]
push edx
call fcn.004f0050
mov esi, eax
mov byte [ebp - 4], 0x39
push 0x528e78
push 0x572bf4
lea eax, [ebp - 0x4a0]
push eax
call fcn.00413af0
add esp, 0x14
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x32c]
push ecx
mov edx, esi
mov ecx, eax
call fcn.00413a30
add esp, 4
mov byte [ebp - 4], 0x3c
lea esi, [ebp - 0x4a0]
call fcn.004150b0
mov byte [ebp - 4], 0x3d
lea esi, [ebp - 0x548]
call fcn.004150b0
lea edx, [ebp - 0x32c]
push edx
lea ecx, [ebp - 0xcc]
call fcn.004054c0
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x890]
push ecx
call fcn.00440200
mov byte [ebp - 4], 0x3e
push eax
lea edx, [ebp - 0x580]
push edx
mov edx, str._File
call fcn.00413910
mov bl, 0x3f
mov byte [ebp - 4], bl
push str.__Converted_and_Copied__130_
push eax
lea eax, [ebp - 0xac0]
push eax
call fcn.004139a0
add esp, 0x1c
mov byte [ebp - 4], 0x40
push 0
push 1
push eax
push 0x5e1
push str.ActionManager::GetReportFromAgent
call fcn.0044d970
add esp, 0x14
mov byte [ebp - 4], bl
lea esi, [ebp - 0xac0]
call fcn.004150b0
mov byte [ebp - 4], 0x3e
lea esi, [ebp - 0x580]
call fcn.004150b0
mov byte [ebp - 4], 0x3d
lea esi, [ebp - 0x890]
call fcn.004150b0
mov byte [ebp - 4], 0x38
lea esi, [ebp - 0x32c]
jmp 0x40ae37
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0x5f0]
push edx
call fcn.00440200
mov byte [ebp - 4], 0x41
push eax
lea eax, [ebp - 0xa18]
push eax
mov edx, str._File
call fcn.00413910
mov bl, 0x42
mov byte [ebp - 4], bl
push str.__Name_generation_failed
push eax
lea ecx, [ebp - 0x5b8]
push ecx
call fcn.004139a0
add esp, 0x1c
mov byte [ebp - 4], 0x43
push 0
push 1
push eax
push 0x5e4
push str.ActionManager::GetReportFromAgent
call fcn.0044d970
add esp, 0x14
mov byte [ebp - 4], bl
lea esi, [ebp - 0x5b8]
call fcn.004150b0
mov byte [ebp - 4], 0x41
lea esi, [ebp - 0xa18]
call fcn.004150b0
mov byte [ebp - 4], 0x38
lea esi, [ebp - 0x5f0]
call fcn.004150b0
mov byte [ebp - 4], 0x2f
lea esi, [ebp - 0x78]
call fcn.004150e0
mov byte [ebp - 4], 0x22
lea esi, [ebp - 0xcc]
jmp 0x40bcd7
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xb30]
push eax
call fcn.00440200
mov byte [ebp - 4], 0x44
push eax
lea ecx, [ebp - 0x628]
push ecx
mov edx, str._File
call fcn.00413910
mov bl, 0x45
mov byte [ebp - 4], bl
push str.__Does_not_exist_or_is_too_old
push eax
lea edx, [ebp - 0x8c8]
push edx
call fcn.004139a0
add esp, 0x1c
mov byte [ebp - 4], 0x46
push 0
push 1
push eax
push 0x5e7
push str.ActionManager::GetReportFromAgent
call fcn.0044d970
add esp, 0x14
mov byte [ebp - 4], bl
lea esi, [ebp - 0x8c8]
call fcn.004150b0
mov byte [ebp - 4], 0x44
lea esi, [ebp - 0x628]
call fcn.004150b0
mov byte [ebp - 4], 0x2f
lea esi, [ebp - 0xb30]
call fcn.004150b0
mov byte [ebp - 4], 0x22
lea esi, [ebp - 0xcc]
jmp 0x40bcd7
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x698]
push ecx
call fcn.00440200
mov byte [ebp - 4], 0x30
push eax
lea edx, [ebp - 0x900]
push edx
mov edx, str._File
call fcn.00413910
mov bl, 0x31
mov byte [ebp - 4], bl
push str.__Does_not_exist
push eax
lea eax, [ebp - 0x660]
push eax
call fcn.004139a0
add esp, 0x1c
mov byte [ebp - 4], 0x32
push 0
push 1
push eax
push 0x5d3
push str.ActionManager::GetReportFromAgent
call fcn.0044d970
add esp, 0x14
mov byte [ebp - 4], bl
lea esi, [ebp - 0x660]
call fcn.004150b0
mov byte [ebp - 4], 0x30
lea esi, [ebp - 0x900]
call fcn.004150b0
mov byte [ebp - 4], 0x2f
lea esi, [ebp - 0x698]
call fcn.004150b0
mov byte [ebp - 4], 0x22
lea esi, [ebp - 0xcc]
jmp 0x40bcd7
mov eax, 0x528928
lea ecx, [ebp - 0x128]
call fcn.0040fae0
mov bl, 0x47
mov byte [ebp - 4], bl
mov eax, dword [esi]
cmp eax, 0x83
jne 0x40afda
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x20]
push edx
lea eax, [ebp - 0xa50]
push eax
call fcn.0040a120
mov byte [ebp - 4], 0x48
mov edi, eax
lea esi, [ebp - 0x128]
call fcn.00411aa0
mov byte [ebp - 4], bl
lea esi, [ebp - 0xa50]
jmp 0x40b0bb
cmp eax, 0x84
jne 0x40b014
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x20]
push edx
lea eax, [ebp - 0x6d0]
push eax
call fcn.00409bd0
mov byte [ebp - 4], 0x49
mov edi, eax
lea esi, [ebp - 0x128]
call fcn.00411aa0
mov byte [ebp - 4], bl
lea esi, [ebp - 0x6d0]
jmp 0x40b0bb
cmp eax, 0x85
jne 0x40b04b
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x20]
push edx
lea eax, [ebp - 0x938]
push eax
call fcn.004098c0
mov byte [ebp - 4], 0x4a
mov edi, eax
lea esi, [ebp - 0x128]
call fcn.00411aa0
mov byte [ebp - 4], bl
lea esi, [ebp - 0x938]
jmp 0x40b0bb
cmp eax, 0x38e
jne 0x40b082
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x20]
push edx
lea eax, [ebp - 0x708]
push eax
call fcn.004085a0
mov byte [ebp - 4], 0x4b
mov edi, eax
lea esi, [ebp - 0x128]
call fcn.00411aa0
mov byte [ebp - 4], bl
lea esi, [ebp - 0x708]
jmp 0x40b0bb
cmp eax, 0x3fc
jne 0x40b473
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x20]
push edx
lea eax, [ebp - 0xaf8]
push eax
call fcn.00406380
mov byte [ebp - 4], 0x4c
mov edi, eax
lea esi, [ebp - 0x128]
call fcn.00411aa0
mov byte [ebp - 4], bl
lea esi, [ebp - 0xaf8]
call fcn.004150b0
push 1
cmp dword [ebp - 0x118], 0
je 0x40b38d
sub esp, 0x1c
mov dword [ebp - 0x3c], esp
lea eax, [ebp - 0x14c]
mov esi, esp
call fcn.0040f950
mov byte [ebp - 4], 0x52
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x34], esp
mov edx, dword [ebp - 0x44]
mov eax, dword [edx]
push eax
push ecx
call fcn.004ee810
add esp, 8
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x2d8]
push ecx
mov byte [ebp - 4], bl
call fcn.0040d840
mov byte [ebp - 4], 0x54
lea edx, [ebp - 0x2d8]
push edx
lea eax, [ebp - 0x970]
push eax
call fcn.004f0050
mov esi, eax
mov byte [ebp - 4], 0x55
push 0x528e78
push 0x572bf4
lea ecx, [ebp - 0x740]
push ecx
call fcn.00413af0
add esp, 0x14
mov byte [ebp - 4], 0x56
lea edx, [ebp - 0x29c]
push edx
mov edx, esi
mov ecx, eax
call fcn.00413a30
add esp, 4
mov byte [ebp - 4], 0x58
lea esi, [ebp - 0x740]
call fcn.004150b0
mov byte [ebp - 4], 0x59
lea esi, [ebp - 0x970]
call fcn.004150b0
lea eax, [ebp - 0x29c]
push eax
lea ecx, [ebp - 0x128]
call fcn.0043f770
add esp, 4
test al, al
je 0x40b222
lea ecx, [ebp - 0x29c]
push ecx
lea edx, [ebp - 0x7b0]
push edx
call fcn.00440200
mov byte [ebp - 4], 0x5a
push eax
lea eax, [ebp - 0xa88]
push eax
mov edx, str._File
call fcn.00413910
mov byte [ebp - 4], 0x5b
push str.__Saved
push eax
lea ecx, [ebp - 0x778]
push ecx
call fcn.004139a0
add esp, 0x1c
mov byte [ebp - 4], 0x5c
push 0
push 1
push eax
push 0x602
push str.ActionManager::GetReportFromAgent
call fcn.0044d970
add esp, 0x14
mov byte [ebp - 4], 0x5b
lea esi, [ebp - 0x778]
call fcn.004150b0
mov byte [ebp - 4], 0x5a
lea esi, [ebp - 0xa88]
call fcn.004150b0
mov byte [ebp - 4], 0x59
lea esi, [ebp - 0x7b0]
jmp 0x40b35c
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea edx, [ebp - 0x29c]
push edx
lea ecx, [ebp - 0x128]
call fcn.0043f770
add esp, 4
test al, al
je 0x40b2d4
lea eax, [ebp - 0x29c]
push eax
lea ecx, [ebp - 0xb68]
push ecx
call fcn.00440200
mov byte [ebp - 4], 0x5d
push eax
lea edx, [ebp - 0x7e8]
push edx
mov edx, str._File
call fcn.00413910
mov byte [ebp - 4], 0x5e
push str.__Saved
push eax
lea eax, [ebp - 0x9a8]
push eax
call fcn.004139a0
add esp, 0x1c
mov byte [ebp - 4], 0x5f
push 0
push 1
push eax
push 0x607
push str.ActionManager::GetReportFromAgent
call fcn.0044d970
add esp, 0x14
mov byte [ebp - 4], 0x5e
lea esi, [ebp - 0x9a8]
call fcn.004150b0
mov byte [ebp - 4], 0x5d
lea esi, [ebp - 0x7e8]
call fcn.004150b0
mov byte [ebp - 4], 0x59
lea esi, [ebp - 0xb68]
jmp 0x40b35c
lea ecx, [ebp - 0x29c]
push ecx
lea edx, [ebp - 0x4f4]
push edx
call fcn.00440200
mov byte [ebp - 4], 0x60
push eax
lea eax, [ebp - 0x4bc]
push eax
mov edx, str._File
call fcn.00413910
mov byte [ebp - 4], 0x61
push str.__Save_failed
push eax
lea ecx, [ebp - 0x820]
push ecx
call fcn.004139a0
add esp, 0x1c
mov byte [ebp - 4], 0x62
push 0
push 0x10000000
push eax
push 0x609
push str.ActionManager::GetReportFromAgent
call fcn.0044d970
add esp, 0x14
mov byte [ebp - 4], 0x61
lea esi, [ebp - 0x820]
call fcn.004150b0
mov byte [ebp - 4], 0x60
lea esi, [ebp - 0x4bc]
call fcn.004150b0
mov byte [ebp - 4], 0x59
lea esi, [ebp - 0x4f4]
call fcn.004150b0
mov byte [ebp - 4], 0x54
lea esi, [ebp - 0x29c]
call fcn.004150b0
mov byte [ebp - 4], bl
lea esi, [ebp - 0x2d8]
call fcn.004150e0
mov byte [ebp - 4], 0x22
lea esi, [ebp - 0x128]
jmp 0x40bcd7
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x20]
push eax
lea ecx, [ebp - 0x60c]
push ecx
call fcn.004f2070
mov esi, eax
mov byte [ebp - 4], 0x63
mov edx, dword [ebp - 0x44]
mov eax, dword [edx]
push eax
lea ecx, [ebp - 0x5d4]
push ecx
call fcn.004ef520
mov byte [ebp - 4], 0x64
push eax
lea edx, [ebp - 0x59c]
push edx
mov edx, 0x52aa20
call fcn.00413910
mov byte [ebp - 4], 0x65
push str._is_empty___reports_date_:
push eax
lea eax, [ebp - 0x564]
push eax
call fcn.004139a0
add esp, 0x2c
mov byte [ebp - 4], 0x66
lea ecx, [ebp - 0x52c]
push ecx
mov edx, esi
mov ecx, eax
call fcn.00413a30
add esp, 4
mov byte [ebp - 4], 0x67
push 0
push 1
push eax
push 0x60d
push str.ActionManager::GetReportFromAgent
call fcn.0044d970
add esp, 0x14
mov byte [ebp - 4], 0x66
lea esi, [ebp - 0x52c]
call fcn.004150b0
mov byte [ebp - 4], 0x65
lea esi, [ebp - 0x564]
call fcn.004150b0
mov byte [ebp - 4], 0x64
lea esi, [ebp - 0x59c]
call fcn.004150b0
mov byte [ebp - 4], 0x63
lea esi, [ebp - 0x5d4]
call fcn.004150b0
mov byte [ebp - 4], bl
lea esi, [ebp - 0x60c]
call fcn.004150b0
mov byte [ebp - 4], 0x22
lea esi, [ebp - 0x128]
jmp 0x40bcd7
push 1
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x20]
push eax
lea ecx, [ebp - 0x724]
push ecx
call fcn.004f2070
mov edi, eax
mov byte [ebp - 4], 0x4d
mov edx, dword [esi]
push edx
lea eax, [ebp - 0x6ec]
push eax
call fcn.004ef520
mov byte [ebp - 4], 0x4e
push eax
lea ecx, [ebp - 0x6b4]
push ecx
mov edx, 0x52aa20
call fcn.00413910
mov byte [ebp - 4], 0x4f
push str._is_unknown___reports_date_:
push eax
lea edx, [ebp - 0x67c]
push edx
call fcn.004139a0
add esp, 0x2c
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x644]
push ecx
mov edx, edi
mov ecx, eax
call fcn.00413a30
add esp, 4
mov byte [ebp - 4], 0x51
push 0
push 1
push eax
push 0x5f9
push str.ActionManager::GetReportFromAgent
call fcn.0044d970
add esp, 0x14
mov byte [ebp - 4], 0x50
lea esi, [ebp - 0x644]
call fcn.004150b0
mov byte [ebp - 4], 0x4f
lea esi, [ebp - 0x67c]
call fcn.004150b0
mov byte [ebp - 4], 0x4e
lea esi, [ebp - 0x6b4]
call fcn.004150b0
mov byte [ebp - 4], 0x4d
lea esi, [ebp - 0x6ec]
call fcn.004150b0
mov byte [ebp - 4], bl
lea esi, [ebp - 0x724]
call fcn.004150b0
mov byte [ebp - 4], 0x22
lea esi, [ebp - 0x128]
jmp 0x40bcd7
mov edx, dword [esi]
mov dword [ebp - 0xb70], edx
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0xc00]
push ecx
mov ecx, esi
call fcn.00403c00
mov edi, 1
cmp eax, edi
jne 0x40bbe5
push edi
sub esp, 0x1c
mov dword [ebp - 0x3c], esp
lea eax, [ebp - 0x14c]
mov esi, esp
call fcn.0040f950
mov byte [ebp - 4], 0x68
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x4c], esp
mov ebx, dword [ebp - 0x44]
mov eax, dword [ebx]
push eax
push edx
call fcn.004ee810
add esp, 8
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0x94]
push ecx
mov byte [ebp - 4], 0x22
call fcn.0040d840
mov byte [ebp - 4], 0x6a
cmp dword [ebp - 0x84], 0
jne 0x40b5e6
mov byte [ebp - 4], 0x22
lea esi, [ebp - 0x94]
call fcn.004150e0
jmp 0x40bcdc
lea edx, [ebp - 0x10c]
push edx
lea eax, [ebp - 0x75c]
push eax
call fcn.004f0050
add esp, 8
mov byte [ebp - 4], 0x6b
mov ecx, 0x10
cmp dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x94]
jae 0x40b616
lea edx, [ebp - 0x94]
cmp dword [ebp - 0x9c], ecx
mov ecx, dword [ebp - 0xb0]
jae 0x40b62a
lea ecx, [ebp - 0xb0]
push eax
mov eax, dword [ebp - 0x5c]
neg eax
push eax
push edx
push ecx
mov ecx, dword [ebx]
push ecx
lea ecx, [ebp - 0x350]
call fcn.00508e60
mov edi, eax
mov byte [ebp - 4], 0x6a
lea esi, [ebp - 0x75c]
call fcn.004150b0
cmp edi, 1
jne 0x40b99f
inc dword [ebp - 0x30]
cmp dword [ebx], 2
jne 0x40bbd1
push 0x3c
call dword [sym.imp.MSVCR100.dll_void____cdecl_operator_new_unsigned_int_]
add esp, 4
mov edi, eax
mov dword [ebp - 0x4c], edi
mov byte [ebp - 4], 0x6c
test edi, edi
je 0x40b6a4
sub esp, 0x1c
mov dword [ebp - 0x3c], esp
lea eax, [ebp - 0x94]
mov esi, esp
call fcn.0040f950
mov byte [ebp - 4], 0x6d
push edi
mov byte [ebp - 4], 0x6c
call fcn.00449ee0
mov edi, eax
jmp 0x40b6a6
xor edi, edi
mov byte [ebp - 4], 0x6a
lea edx, [ebp - 0x3c0]
push edx
push edi
call fcn.0044a0f0
mov byte [ebp - 4], 0x6e
cmp dword [ebp - 0x3b0], 0
je 0x40b7b4
push 1
sub esp, 0x1c
mov dword [ebp - 0x4c], esp
mov eax, dword [ebp - 0x34]
mov esi, esp
call fcn.0040f950
mov byte [ebp - 4], 0x6f
sub esp, 0x1c
mov dword [ebp - 0x3c], esp
mov eax, 0x528ed8
mov ecx, esp
call fcn.0040f980
mov byte [ebp - 4], 0x70
lea eax, [ebp - 0x3a4]
push eax
mov byte [ebp - 4], 0x6e
call fcn.0040d840
mov byte [ebp - 4], 0x71
cmp dword [ebp - 0x394], 0
jne 0x40b743
mov byte [ebp - 4], 0x6e
lea esi, [ebp - 0x3a4]
call fcn.004150e0
mov byte [ebp - 4], 0x6a
lea esi, [ebp - 0x3c0]
call fcn.004150e0
mov byte [ebp - 4], 0x22
lea esi, [ebp - 0x94]
call fcn.004150e0
jmp 0x40bcdc
push 0x572ba0
lea ecx, [ebp - 0x794]
push ecx
call fcn.004ee870
mov byte [ebp - 4], 0x72
sub esp, 0x14
mov edx, esp
mov dword [ebp - 0x4c], esp
lea ecx, [ebp - 0x3a4]
push ecx
push edx
mov ecx, eax
call fcn.00413e60
mov byte [ebp - 4], 0x73
sub esp, 0x14
mov dword [ebp - 0x3c], esp
lea eax, [ebp - 0x3c0]
mov esi, esp
call fcn.0040f950
mov byte [ebp - 4], 0x74
mov byte [ebp - 4], 0x72
call fcn.004f4220
add esp, 0x38
mov byte [ebp - 4], 0x71
lea esi, [ebp - 0x794]
call fcn.004150e0
mov byte [ebp - 4], 0x6e
lea esi, [ebp - 0x3a4]
call fcn.004150e0
test edi, edi
je 0x40b7c8
push edi
call fcn.0044a030
push edi
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push 0x5288bc
sub esp, 0x1c
mov dword [ebp - 0x4c], esp
mov eax, 0x528edc
mov ecx, esp
call fcn.0040f980
mov byte [ebp - 4], 0x75
mov edx, dword [ebx]
push edx
lea eax, [ebp - 0x7cc]
push eax
mov byte [ebp - 4], 0x6e
call fcn.0040deb0
mov byte [ebp - 4], 0x76
push eax
lea ecx, [ebp - 0x22c]
push ecx
call fcn.00413ed0
add esp, 0xc
mov bl, 0x78
mov byte [ebp - 4], bl
lea esi, [ebp - 0x7cc]
call fcn.004150e0
lea edx, [ebp - 0x22c]
push edx
lea eax, [ebp - 0x83c]
push eax
call fcn.004f0050
mov esi, eax
mov byte [ebp - 4], 0x79
push 0x528ee0
push 0x572ba0
lea ecx, [ebp - 0x804]
push ecx
call fcn.00413af0
add esp, 0x14
mov byte [ebp - 4], 0x7a
push 0
push esi
push eax
call fcn.00440460
add esp, 0xc
mov byte [ebp - 4], 0x79
lea esi, [ebp - 0x804]
call fcn.004150b0
mov byte [ebp - 4], bl
lea esi, [ebp - 0x83c]
call fcn.004150b0
push 0x572ba0
lea edx, [ebp - 0x3f8]
push edx
call fcn.004ee870
mov byte [ebp - 4], 0x7b
push str.Current_
push eax
lea eax, [ebp - 0x874]
push eax
call fcn.00413ed0
add esp, 0x14
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0x94]
push ecx
lea edx, [ebp - 0x388]
push edx
mov ecx, eax
call fcn.00413e60
add esp, 8
mov byte [ebp - 4], 0x7e
lea esi, [ebp - 0x874]
call fcn.004150e0
mov byte [ebp - 4], 0x7f
lea esi, [ebp - 0x3f8]
call fcn.004150e0
push 0x572ba0
lea eax, [ebp - 0x430]
push eax
call fcn.004ee870
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0x94]
push ecx
lea edx, [ebp - 0x36c]
push edx
mov ecx, eax
call fcn.00413e60
add esp, 0x10
mov byte [ebp - 4], 0x82
lea esi, [ebp - 0x430]
call fcn.004150e0
mov eax, 0x10
cmp dword [ebp - 0x374], eax
mov ecx, dword [ebp - 0x388]
jae 0x40b932
lea ecx, [ebp - 0x388]
cmp dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x36c]
jae 0x40b946
lea eax, [ebp - 0x36c]
push 1
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov byte [ebp - 4], 0x7f
lea esi, [ebp - 0x36c]
call fcn.004150e0
mov byte [ebp - 4], bl
lea esi, [ebp - 0x388]
call fcn.004150e0
mov byte [ebp - 4], 0x6e
lea esi, [ebp - 0x22c]
call fcn.004150e0
mov byte [ebp - 4], 0x6a
lea esi, [ebp - 0x3c0]
call fcn.004150e0
mov byte [ebp - 4], 0x22
lea esi, [ebp - 0x94]
call fcn.004150e0
jmp 0x40bcdc
cmp edi, 0xfffffe6c
jne 0x40bafd
inc dword [ebp - 0x30]
push 0
sub esp, 0x1c
mov dword [ebp - 0x4c], esp
lea eax, [ebp - 0x14c]
mov esi, esp
call fcn.0040f950
mov byte [ebp - 4], 0x83
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x3c], esp
mov ecx, dword [ebx]
push ecx
push eax
call fcn.004ee810
add esp, 8
mov byte [ebp - 4], 0x84
lea edx, [ebp - 0x3dc]
push edx
mov byte [ebp - 4], 0x6a
call fcn.0040d840
mov byte [ebp - 4], 0x85
mov edi, eax
lea esi, [ebp - 0x94]
call fcn.004117d0
mov byte [ebp - 4], 0x6a
lea esi, [ebp - 0x3dc]
call fcn.004150e0
cmp dword [ebp - 0x84], 0
jne 0x40ba2c
mov byte [ebp - 4], 0x22
lea esi, [ebp - 0x94]
call fcn.004150e0
jmp 0x40bcdc
push 0x572ba0
lea eax, [ebp - 0x414]
push eax
call fcn.004ee870
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0x94]
push ecx
lea edx, [ebp - 0x264]
push edx
mov ecx, eax
call fcn.00413e60
add esp, 0x10
mov byte [ebp - 4], 0x88
lea esi, [ebp - 0x414]
call fcn.004150e0
cmp dword [ebp - 0x9c], 0x10
mov esi, dword [ebp - 0xb0]
jae 0x40ba7d
lea esi, [ebp - 0xb0]
call fcn.005084d0
lea ecx, [ebp - 0x1f4]
call fcn.0040f980
mov bl, 0x89
mov byte [ebp - 4], bl
sub esp, 0x1c
mov dword [ebp - 0x4c], esp
lea eax, [ebp - 0x264]
mov esi, esp
call fcn.0040f950
mov byte [ebp - 4], 0x8a
sub esp, 0x1c
mov dword [ebp - 0x3c], esp
lea eax, [ebp - 0x1f4]
mov esi, esp
call fcn.0040f950
mov byte [ebp - 4], 0x8b
mov byte [ebp - 4], bl
call fcn.004f4220
add esp, 0x38
mov byte [ebp - 4], 0x88
lea esi, [ebp - 0x1f4]
call fcn.004150e0
mov byte [ebp - 4], 0x6a
lea esi, [ebp - 0x264]
call fcn.004150e0
mov byte [ebp - 4], 0x22
lea esi, [ebp - 0x94]
call fcn.004150e0
jmp 0x40bcdc
inc dword [ebp - 0x2c]
push edi
lea eax, [ebp - 0x310]
push eax
call fcn.004ef520
mov esi, eax
mov byte [ebp - 4], 0x8c
mov ecx, dword [ebx]
push ecx
lea edx, [ebp - 0x2f4]
push edx
call fcn.004ef520
mov byte [ebp - 4], 0x8d
push eax
lea eax, [ebp - 0x468]
push eax
mov edx, str.________TcpManage_failed_:_ReportId__
call fcn.00413910
mov byte [ebp - 4], 0x8e
push str.__Err_:
push eax
lea ecx, [ebp - 0x484]
push ecx
call fcn.004139a0
add esp, 0x24
mov bl, 0x8f
mov byte [ebp - 4], bl
lea edx, [ebp - 0x44c]
push edx
mov edx, esi
mov ecx, eax
call fcn.00413a30
add esp, 4
mov byte [ebp - 4], 0x90
push 0
push 0x10000000
push eax
push 0x655
push str.ActionManager::GetReportFromAgent
call fcn.0044d970
add esp, 0x14
mov byte [ebp - 4], bl
lea esi, [ebp - 0x44c]
call fcn.004150b0
mov byte [ebp - 4], 0x8e
lea esi, [ebp - 0x484]
call fcn.004150b0
mov byte [ebp - 4], 0x8d
lea esi, [ebp - 0x468]
call fcn.004150b0
mov byte [ebp - 4], 0x8c
lea esi, [ebp - 0x2f4]
call fcn.004150b0
mov byte [ebp - 4], 0x6a
lea esi, [ebp - 0x310]
call fcn.004150b0
mov byte [ebp - 4], 0x22
lea esi, [ebp - 0x94]
call fcn.004150e0
jmp 0x40bcdc
cmp eax, 0xffffff88
jne 0x40bc4c
mov byte [ebp - 4], 0x21
lea esi, [ebp - 0xb0]
call fcn.004150e0
mov byte [ebp - 4], 0x10
lea esi, [ebp - 0x2bc]
call fcn.004150b0
mov byte [ebp - 4], 0xf
lea esi, [ebp - 0x14c]
call fcn.004150e0
mov byte [ebp - 4], 8
lea esi, [ebp - 0x10c]
call fcn.004150e0
mov byte [ebp - 4], 7
lea esi, [ebp - 0x210]
call fcn.004150e0
mov byte [ebp - 4], 1
lea esi, [ebp - 0x1a0]
call fcn.004150e0
mov byte [ebp - 4], bl
jmp 0x40a591
test eax, eax
jne 0x40bd3d
add dword [ebp - 0x28], edi
mov eax, dword [esi]
push eax
lea ecx, [ebp - 0x168]
push ecx
call fcn.004ef520
mov byte [ebp - 4], 0x91
push eax
lea edx, [ebp - 0x280]
push edx
mov edx, str.________ReportID__
call fcn.00413910
mov bl, 0x92
mov byte [ebp - 4], bl
push 0x528f5c
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.004139a0
add esp, 0x1c
mov byte [ebp - 4], 0x93
push 0
push edi
push eax
push 0x65f
push str.ActionManager::GetReportFromAgent
call fcn.0044d970
add esp, 0x14
mov byte [ebp - 4], bl
lea esi, [ebp - 0x248]
call fcn.004150b0
mov byte [ebp - 4], 0x91
lea esi, [ebp - 0x280]
call fcn.004150b0
mov byte [ebp - 4], 0x22
lea esi, [ebp - 0x168]
call fcn.004150b0
mov byte [ebp - 4], 0x21
lea esi, [ebp - 0xb0]
call fcn.004150e0
mov ecx, dword [ebp - 0x24]
cmp byte [ecx + 0x15], 0
jne 0x40a9b2
mov edx, ecx
mov ecx, dword [edx + 8]
cmp byte [ecx + 0x15], 0
jne 0x40bd20
mov dword [ebp - 0xd0], ecx
mov eax, dword [ecx]
cmp byte [eax + 0x15], 0
jne 0x40a9af
mov ecx, eax
jmp 0x40bd03
mov eax, dword [edx + 4]
cmp byte [eax + 0x15], 0
jne 0x40bd35
cmp edx, dword [eax + 8]
jne 0x40bd35
mov dword [ebp - 0x24], eax
mov edx, eax
jmp 0x40bd20
mov dword [ebp - 0x24], eax
jmp 0x40a9b2
add dword [ebp - 0x2c], edi
push eax
lea edx, [ebp - 0x2f4]
push edx
call fcn.004ef520
mov edi, eax
mov byte [ebp - 4], 0x94
mov eax, dword [esi]
push eax
lea ecx, [ebp - 0x310]
push ecx
call fcn.004ef520
mov byte [ebp - 4], 0x95
push eax
lea edx, [ebp - 0x248]
push edx
mov edx, str.________TcpManage_failed_:_ReportId__
call fcn.00413910
mov byte [ebp - 4], 0x96
push 0x528f9c
push eax
lea eax, [ebp - 0x280]
push eax
call fcn.004139a0
add esp, 0x24
mov bl, 0x97
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x168]
push ecx
mov edx, edi
mov ecx, eax
call fcn.00413a30
add esp, 4
mov byte [ebp - 4], 0x98
push 0
push 0x10000000
push eax
push 0x665
push str.ActionManager::GetReportFromAgent
call fcn.0044d970
add esp, 0x14
mov byte [ebp - 4], bl
lea esi, [ebp - 0x168]
call fcn.004150b0
mov byte [ebp - 4], 0x96
lea esi, [ebp - 0x280]
call fcn.004150b0
mov byte [ebp - 4], 0x95
lea esi, [ebp - 0x248]
call fcn.004150b0
mov byte [ebp - 4], 0x94
lea esi, [ebp - 0x310]
call fcn.004150b0
mov byte [ebp - 4], 0x22
lea esi, [ebp - 0x2f4]
call fcn.004150b0
mov byte [ebp - 4], 0x21
lea esi, [ebp - 0xb0]
call fcn.004150e0
mov byte [ebp - 4], 0x10
lea esi, [ebp - 0x2bc]
call fcn.004150b0
mov byte [ebp - 4], 0xf
lea esi, [ebp - 0x14c]
call fcn.004150e0
mov byte [ebp - 4], 8
lea esi, [ebp - 0x10c]
call fcn.004150e0
mov byte [ebp - 4], 7
lea esi, [ebp - 0x210]
call fcn.004150e0
mov byte [ebp - 4], 1
lea esi, [ebp - 0x1a0]
call fcn.004150e0
jmp 0x40a58d
mov eax, dword [ebp - 0x2c]
test eax, eax
jle 0x40bf25
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x30]
jne 0x40bf25
push eax
lea edx, [ebp - 0x248]
push edx
call fcn.004ef520
mov byte [ebp - 4], 0x99
push eax
lea eax, [ebp - 0x280]
push eax
mov edx, str.AGENT_MUST_BE_OFFLINE__
call fcn.00413910
mov bl, 0x9a
mov byte [ebp - 4], bl
push str._failed_
push eax
lea ecx, [ebp - 0x168]
push ecx
call fcn.004139a0
add esp, 0x1c
mov byte [ebp - 4], 0x9b
push 0
push 0x20000000
push eax
push 0x66d
push str.ActionManager::GetReportFromAgent
call fcn.0044d970
add esp, 0x14
mov byte [ebp - 4], bl
lea esi, [ebp - 0x168]
call fcn.004150b0
mov byte [ebp - 4], 0x99
lea esi, [ebp - 0x280]
call fcn.004150b0
mov byte [ebp - 4], 0x21
lea esi, [ebp - 0x248]
call fcn.004150b0
cmp dword [0x1579ac4], 0
je 0x40be20
call fcn.00507df0
jmp 0x40be20
cmp byte [ebp - 0x11], 0
je 0x40bfc9
push 1
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x20]
push eax
lea ecx, [ebp - 0x1d8]
push ecx
call fcn.004f2070
add esp, 0x10
mov bl, 0x9c
mov byte [ebp - 4], bl
cmp dword [ebp - 0x1c4], 8
mov eax, dword [ebp - 0x1d8]
jae 0x40bf62
lea eax, [ebp - 0x1d8]
push str.LAST_COLLECT
mov ecx, str.SOFTWAREABG_Ltd.ConfigTamnunSnd
call fcn.00466e60
add esp, 4
test eax, eax
je 0x40bfba
mov eax, str.saveing_Key_LAST_COLLECT_failed
lea ecx, [ebp - 0x1bc]
call fcn.0040fae0
mov byte [ebp - 4], 0x9d
push 0
push 0x20000000
lea edx, [ebp - 0x1bc]
push edx
push 0x676
push str.ActionManager::GetReportFromAgent
call fcn.0044d970
add esp, 0x14
mov byte [ebp - 4], bl
lea esi, [ebp - 0x1bc]
call fcn.004150b0
mov byte [ebp - 4], 0x21
lea esi, [ebp - 0x1d8]
call fcn.004150b0
mov eax, str.ActionManager
lea ecx, [ebp - 0x184]
call fcn.0040fae0
mov byte [ebp - 4], 0x9e
lea eax, [ebp - 0x184]
push eax
mov ecx, 1
call fcn.0046aca0
add esp, 4
test al, al
sete bl
mov byte [ebp - 4], 0x21
lea esi, [ebp - 0x184]
call fcn.004150b0
test bl, bl
je 0x40c26a
mov byte [ebp - 4], 0x10
lea esi, [ebp - 0x2bc]
call fcn.004150b0
mov byte [ebp - 4], 0xf
lea esi, [ebp - 0x14c]
call fcn.004150e0
mov byte [ebp - 4], 8
lea esi, [ebp - 0x10c]
call fcn.004150e0
cmp dword [0x1579ac4], 0
je 0x40c048
call fcn.00507df0
mov ecx, dword [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x3f8]
push edx
call fcn.004ef520
mov esi, eax
mov byte [ebp - 4], 0x9f
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp - 0x430]
push ecx
call fcn.004ef520
mov edi, eax
mov byte [ebp - 4], 0xa0
mov edx, dword [ebp - 0x30]
push edx
lea eax, [ebp - 0x3dc]
push eax
call fcn.004ef520
mov ebx, eax
mov byte [ebp - 4], 0xa1
mov ecx, dword [ebp - 0x58]
push ecx
lea edx, [ebp - 0x414]
push edx
call fcn.004ef520
mov byte [ebp - 4], 0xa2
push eax
lea eax, [ebp - 0x44c]
push eax
mov edx, str.DONE____
call fcn.00413910
mov byte [ebp - 4], 0xa3
push str._Days_checked_
push eax
lea ecx, [ebp - 0x484]
push ecx
call fcn.004139a0
add esp, 0x34
mov byte [ebp - 4], 0xa4
lea edx, [ebp - 0x468]
push edx
mov edx, ebx
mov ecx, eax
call fcn.00413a30
add esp, 4
mov byte [ebp - 4], 0xa5
push str._Reports_collected_
push eax
lea eax, [ebp - 0x2f4]
push eax
call fcn.004139a0
add esp, 0xc
mov byte [ebp - 4], 0xa6
lea ecx, [ebp - 0x310]
push ecx
mov edx, edi
mov ecx, eax
call fcn.00413a30
add esp, 4
mov byte [ebp - 4], 0xa7
push str._empty_
push eax
lea edx, [ebp - 0x248]
push edx
call fcn.004139a0
add esp, 0xc
mov byte [ebp - 4], 0xa8
lea ecx, [ebp - 0x280]
push ecx
mov edx, esi
mov ecx, eax
call fcn.00413a30
add esp, 4
mov bl, 0xa9
mov byte [ebp - 4], bl
push str._failed.
push eax
lea edx, [ebp - 0x168]
push edx
call fcn.004139a0
add esp, 0xc
mov byte [ebp - 4], 0xaa
push 0
push 1
push eax
push 0x684
push str.ActionManager::GetReportFromAgent
call fcn.0044d970
add esp, 0x14
mov byte [ebp - 4], bl
lea esi, [ebp - 0x168]
call fcn.004150b0
mov byte [ebp - 4], 0xa8
lea esi, [ebp - 0x280]
call fcn.004150b0
mov byte [ebp - 4], 0xa7
lea esi, [ebp - 0x248]
call fcn.004150b0
mov byte [ebp - 4], 0xa6
lea esi, [ebp - 0x310]
call fcn.004150b0
mov byte [ebp - 4], 0xa5
lea esi, [ebp - 0x2f4]
call fcn.004150b0
mov byte [ebp - 4], 0xa4
lea esi, [ebp - 0x468]
call fcn.004150b0
mov byte [ebp - 4], 0xa3
lea esi, [ebp - 0x484]
call fcn.004150b0
mov byte [ebp - 4], 0xa2
lea esi, [ebp - 0x44c]
call fcn.004150b0
mov byte [ebp - 4], 0xa1
lea esi, [ebp - 0x414]
call fcn.004150b0
mov byte [ebp - 4], 0xa0
lea esi, [ebp - 0x3dc]
call fcn.004150b0
mov byte [ebp - 4], 0x9f
lea esi, [ebp - 0x430]
call fcn.004150b0
mov byte [ebp - 4], 8
lea esi, [ebp - 0x3f8]
call fcn.004150b0
mov byte [ebp - 4], 7
lea esi, [ebp - 0x210]
call fcn.004150e0
mov byte [ebp - 4], 1
lea esi, [ebp - 0x1a0]
call fcn.004150e0
mov byte [ebp - 4], 0
lea esi, [ebp - 0xf0]
call fcn.004150b0
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
add dword [ebp - 0x20], 0x15180
adc dword [ebp - 0x1c], 0
mov byte [ebp - 4], 0x10
lea esi, [ebp - 0x2bc]
call fcn.004150b0
mov byte [ebp - 4], 0xf
lea esi, [ebp - 0x14c]
call fcn.004150e0
mov byte [ebp - 4], 8
lea esi, [ebp - 0x10c]
call fcn.004150e0
inc dword [ebp - 0x54]
jmp 0x40a7c0