Function at 0x4958d0
Capabilities:
Check for time delay via queryperformancecounter
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52f5b0
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x308
mov eax, dword [0x566090]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x2d4], esi
mov dword [ebp - 0x2bc], 0
lea eax, [ebp - 0xc4]
movaps xmm0, xmmword [str.CReinitProcess::CrashIdentifier:CrashedModuleInfendedInformationSubmitCrashEvento::FillModuleExt]
lea edx, [ebp - 0x34]
movups xmmword [ebp - 0xc4], xmm0
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x1c], 0x203e2d20
movaps xmm0, xmmword [0x54c190]
push eax
mov byte [ebp - 0x18], 0
movups xmmword [ebp - 0xb4], xmm0
mov byte [ebp - 0xa4], 0
mov dword [ebp - 0x34], 0x5244425b
mov dword [ebp - 0x30], 0x494e4945
mov dword [ebp - 0x2c], 0x3a205d54
mov word [ebp - 0x28], 0x203a
mov byte [ebp - 0x26], 0
call fcn.004acd40
add esp, 4
lea ecx, [ebp - 0x1c]
mov edx, eax
push ecx
lea ecx, [ebp - 0x2b4]
call fcn.004acea0
movaps xmm0, xmmword [str.CReinitProcess::CrashIdentifier:CrashedModuleInfendedInformationSubmitCrashEvento::FillModuleExt]
lea eax, [ebp - 0xc4]
add esp, 4
mov dword [ebp - 0x1c], 0x202d3c20
movups xmmword [ebp - 0xc4], xmm0
lea edx, [ebp - 0x34]
mov byte [ebp - 0x18], 0
movaps xmm0, xmmword [0x54c190]
lea ecx, [ebp - 0x138]
push eax
movups xmmword [ebp - 0xb4], xmm0
mov byte [ebp - 0xa4], 0
mov dword [ebp - 0x34], 0x5244425b
mov dword [ebp - 0x30], 0x494e4945
mov dword [ebp - 0x2c], 0x3a205d54
mov word [ebp - 0x28], 0x203a
mov byte [ebp - 0x26], 0
call fcn.004acd40
add esp, 4
lea ecx, [ebp - 0x1c]
mov edx, eax
push ecx
lea ecx, [ebp - 0x1b4]
call fcn.004acea0
add esp, 4
call fcn.00441aa0
mov edi, eax
mov dword [ebp - 0x2f8], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1c], edi
lea eax, [ebp - 0x1b4]
movlpd qword [ebp - 0x308], xmm0
mov dword [ebp - 0x300], eax
mov ecx, dword [edi]
mov dword [ebp - 0x2fc], edi
cmp dword [ecx], 0
je 0x495aa9
lea eax, [ebp - 0x2d0]
movlpd qword [ebp - 0x2d0], xmm0
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [ebp - 0x2cc]
push 0x546f10
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x308], eax
lea eax, [ebp - 0x2b4]
push eax
push str._s_s
push 0x546f10
push 0
push edi
mov dword [ebp - 0x2f0], ecx
mov dword [ebp - 0x304], ecx
call fcn.0043d760
add esp, 0x18
jmp 0x495ac1
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x2f0], eax
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 4], 0
mov eax, dword [esi + 0x35e0]
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x318], 0x10
mov dword [ebp - 0x314], 0x549c54
mov dword [ebp - 0x310], str.bd_module_crashed
mov dword [ebp - 0x2c4], eax
test eax, eax
jne 0x495d99
lea edx, [ebp - 0xe0]
mov dword [ebp - 0xe0], 0x80728045
lea ecx, [ebp - 0x88]
mov dword [ebp - 0xdc], 0x806f8072
mov dword [ebp - 0xd8], 0x802c8072
mov dword [ebp - 0xd4], 0x80628020
mov dword [ebp - 0xd0], 0x80658064
mov dword [ebp - 0xcc], 0x80208063
mov dword [ebp - 0xc8], 0x80738069
mov dword [ebp - 0xc4], 0x806e8020
mov dword [ebp - 0xc0], 0x8074806f
mov dword [ebp - 0xbc], 0x80698020
mov dword [ebp - 0xb8], 0x8069806e
mov dword [ebp - 0xb4], 0x80698074
mov dword [ebp - 0xb0], 0x806c8061
mov dword [ebp - 0xac], 0x807a8069
mov dword [ebp - 0xa8], 0x80648065
mov dword [ebp - 0xa4], 0x8000
call fcn.00419a70
mov byte [ebp - 4], 1
lea eax, [ebp - 0x88]
cmp dword [ebp - 0x74], 8
lea edx, [ebp - 0x2cc]
lea ecx, [ebp - 0xf8]
cmovae eax, dword [ebp - 0x88]
mov dword [ebp - 0x2cc], eax
call fcn.0041ccb0
push eax
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 2
call fcn.00444e70
mov byte [ebp - 4], 3
lea edi, [ebp - 0xa0]
cmp dword [ebp - 0x8c], 8
lea ecx, [ebp - 0x180]
mov edx, str.CReinitProcess::SubmitCrashEvent
mov dword [ebp - 0x30], 0x290028
cmovae edi, dword [ebp - 0xa0]
mov dword [ebp - 0x2c], 0x2d0020
mov dword [ebp - 0x28], 0x20
call fcn.00462fe0
mov edx, str._BDREINIT__::
lea ecx, [ebp - 0x128]
mov esi, eax
call fcn.00419450
push esi
mov edx, eax
lea ecx, [ebp - 0x218]
call fcn.004630f0
add esp, 4
lea ecx, [ebp - 0x30]
mov edx, eax
push ecx
lea ecx, [ebp - 0x280]
call fcn.00463280
add esp, 4
mov esi, eax
call fcn.00441aa0
push edi
push 0
push esi
push 8
push eax
call fcn.0043ebb0
mov byte [ebp - 4], 2
add esp, 0x14
mov edx, dword [ebp - 0x8c]
cmp edx, 8
jb 0x495cbf
mov ecx, dword [ebp - 0xa0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x495cb5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x496ea4
push edx
push ecx
call fcn.004fc7e0
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 7
mov word [ebp - 0xa0], ax
cmp edx, 8
jb 0x495d20
mov ecx, dword [ebp - 0xf8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x495d16
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x496ea4
push edx
push ecx
call fcn.004fc7e0
add esp, 8
xor eax, eax
mov dword [ebp - 0xe8], 0
mov byte [ebp - 4], al
mov edx, dword [ebp - 0x74]
mov dword [ebp - 0xe4], 7
mov word [ebp - 0xf8], ax
cmp edx, 8
jb 0x495d7d
mov ecx, dword [ebp - 0x88]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x495d73
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x496ea4
push edx
push ecx
call fcn.004fc7e0
add esp, 8
xor eax, eax
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
jmp 0x496df7
mov eax, dword [eax + 0x2c]
lea ecx, [ebp - 0x318]
push ecx
call eax
mov edi, eax
add esp, 4
mov dword [ebp - 0x2c8], edi
test edi, edi
jne 0x496039
lea edx, [ebp - 0xd8]
mov dword [ebp - 0xd8], 0x80728045
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0xd4], 0x806f8072
mov dword [ebp - 0xd0], 0x802c8072
mov dword [ebp - 0xcc], 0x80668020
mov dword [ebp - 0xc8], 0x80698061
mov dword [ebp - 0xc4], 0x8065806c
mov dword [ebp - 0xc0], 0x80208064
mov dword [ebp - 0xbc], 0x80728063
mov dword [ebp - 0xb8], 0x80618065
mov dword [ebp - 0xb4], 0x80658074
mov dword [ebp - 0xb0], 0x80658020
mov dword [ebp - 0xac], 0x80658076
mov dword [ebp - 0xa8], 0x8074806e
mov dword [ebp - 0xa4], 0x8000
call fcn.00419a70
mov byte [ebp - 4], 4
lea eax, [ebp - 0xa0]
cmp dword [ebp - 0x8c], 8
lea edx, [ebp - 0x2cc]
lea ecx, [ebp - 0xf8]
cmovae eax, dword [ebp - 0xa0]
mov dword [ebp - 0x2cc], eax
call fcn.0041ccb0
push eax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 5
call fcn.00444e70
mov byte [ebp - 4], 6
lea edi, [ebp - 0x88]
cmp dword [ebp - 0x74], 8
lea ecx, [ebp - 0x180]
mov edx, str.CReinitProcess::SubmitCrashEvent
mov dword [ebp - 0x30], 0x290028
cmovae edi, dword [ebp - 0x88]
mov dword [ebp - 0x2c], 0x2d0020
mov dword [ebp - 0x28], 0x20
call fcn.00462fe0
mov edx, str._BDREINIT__::
lea ecx, [ebp - 0x128]
mov esi, eax
call fcn.00419450
push esi
mov edx, eax
lea ecx, [ebp - 0x218]
call fcn.004630f0
add esp, 4
lea ecx, [ebp - 0x30]
mov edx, eax
push ecx
lea ecx, [ebp - 0x280]
call fcn.00463280
add esp, 4
mov esi, eax
call fcn.00441aa0
push edi
push 0
push esi
push 8
push eax
call fcn.0043ebb0
mov byte [ebp - 4], 5
add esp, 0x14
mov edx, dword [ebp - 0x74]
cmp edx, 8
jb 0x495f5c
mov ecx, dword [ebp - 0x88]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x495f52
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x496ea9
push edx
push ecx
call fcn.004fc7e0
add esp, 8
xor eax, eax
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
cmp edx, 8
jb 0x495fb7
mov ecx, dword [ebp - 0xf8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x495fad
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x496ea9
push edx
push ecx
call fcn.004fc7e0
add esp, 8
xor eax, eax
mov dword [ebp - 0xe8], 0
mov byte [ebp - 4], al
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0xe4], 7
mov word [ebp - 0xf8], ax
cmp edx, 8
jb 0x496017
mov ecx, dword [ebp - 0xa0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x49600d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x496ea9
push edx
push ecx
call fcn.004fc7e0
add esp, 8
xor eax, eax
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 7
mov word [ebp - 0xa0], ax
jmp 0x496df7
mov eax, dword [esi + 0x357c]
mov edx, 8
mov ecx, 0x1a50
mov eax, dword [eax]
add eax, 0x1cf70
cmp byte [eax], 0
cmove ecx, edx
add ecx, eax
mov dword [ebp - 0x2b8], ecx
mov edx, ecx
lea ecx, [ebp - 0x124]
call fcn.0043d960
mov byte [ebp - 4], 7
mov eax, dword [esi + 0x357c]
mov ecx, dword [eax]
add ecx, 0x2a8dc
je 0x496085
cmp word [ecx], 0
jne 0x49608a
mov ecx, 0x546f88
mov eax, dword [esi + 0x35e0]
push ecx
push str.prod_id
push edi
mov eax, dword [eax + 0x30]
call eax
mov eax, dword [esi + 0x357c]
add esp, 0xc
mov ecx, dword [eax]
add ecx, 0x2aa7c
je 0x4960b5
cmp word [ecx], 0
jne 0x4960ba
mov ecx, 0x546f88
mov eax, dword [esi + 0x35e0]
push ecx
push str.anon_id
push edi
mov eax, dword [eax + 0x30]
call eax
mov eax, dword [esi + 0x357c]
add esp, 0xc
mov ecx, dword [eax]
add ecx, 0x2ab7c
je 0x4960e5
cmp word [ecx], 0
jne 0x4960ea
mov ecx, str.no_fingerprint_provided
mov eax, dword [esi + 0x35e0]
push ecx
push str.fingerprint
push edi
mov eax, dword [eax + 0x30]
call eax
mov eax, dword [esi + 0x357c]
add esp, 0xc
mov ecx, dword [eax]
add ecx, 0x2ac7c
je 0x496115
cmp word [ecx], 0
jne 0x49611a
mov ecx, 0x546f88
mov eax, dword [esi + 0x35e0]
push ecx
push str.bd_product_version
push edi
mov eax, dword [eax + 0x30]
call eax
mov eax, dword [esi + 0x357c]
add esp, 0xc
mov ecx, dword [eax]
add ecx, 0x2acfc
je 0x496145
cmp word [ecx], 0
jne 0x49614a
mov ecx, 0x546f88
mov eax, dword [esi + 0x35e0]
push ecx
push str.bd_display_name
push edi
mov eax, dword [eax + 0x30]
call eax
mov eax, dword [esi + 0x357c]
add esp, 0xc
mov ecx, dword [eax]
add ecx, 0x2ad7c
je 0x496175
cmp word [ecx], 0
jne 0x49617a
mov ecx, 0x546f88
mov eax, dword [esi + 0x35e0]
push ecx
push str.bd_locale
push edi
mov eax, dword [eax + 0x30]
call eax
mov eax, dword [esi + 0x357c]
add esp, 0xc
mov ecx, dword [eax]
add ecx, 0x2adfc
je 0x4961a5
cmp word [ecx], 0
jne 0x4961aa
mov ecx, 0x546f88
mov eax, dword [esi + 0x35e0]
push ecx
push str.temp_device_id
push edi
mov eax, dword [eax + 0x30]
call eax
mov eax, dword [esi + 0x357c]
add esp, 0xc
mov ecx, dword [eax]
add ecx, 0x2aafc
je 0x4961d5
cmp word [ecx], 0
jne 0x4961da
mov ecx, 0x546f88
mov eax, dword [esi + 0x35e0]
push ecx
push str.sensor_name
push edi
mov eax, dword [eax + 0x30]
call eax
mov eax, dword [esi + 0x35e0]
add esp, 0xc
mov eax, dword [eax + 0x4c]
call eax
mov edi, eax
mov dword [ebp - 0x2cc], 0x8000
mov dword [ebp - 0x2bc], edi
mov dword [ebp - 0x2d8], 0x28
mov dword [ebp - 0x2dc], 0x29
mov dword [ebp - 0x2e0], 0x2d
mov dword [ebp - 0x2e4], 0x8075
test edi, edi
je 0x496515
mov eax, dword [esi + 0x357c]
mov ecx, dword [eax]
add ecx, 0x18900
je 0x496252
cmp word [ecx], 0
jne 0x496257
mov ecx, 0x546f88
mov eax, dword [esi + 0x35e0]
push ecx
push str.proc_version
push edi
mov eax, dword [eax + 0x30]
call eax
mov eax, dword [esi + 0x357c]
add esp, 0xc
mov ecx, dword [eax]
add ecx, 0x184f0
je 0x496282
cmp word [ecx], 0
jne 0x496287
mov ecx, 0x546f88
mov eax, dword [esi + 0x35e0]
push ecx
push str.proc_name
push edi
mov eax, dword [eax + 0x30]
call eax
mov edi, dword [ebp - 0x2b8]
add esp, 0xc
lea ecx, [edi + 0x410]
test ecx, ecx
je 0x4962b2
cmp word [ecx], 0
jne 0x4962b7
mov ecx, 0x546f88
mov eax, dword [esi + 0x35e0]
push ecx
push str.module_name
push dword [ebp - 0x2bc]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [edi + 0x1a2c]
mov eax, dword [edi + 0x1a28]
push ecx
mov dword [ebp - 0x30], eax
mov eax, esp
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x30]
push 5
push str.:x
mov dword [eax + 8], ecx
lea ecx, [ebp - 0xf8]
mov dword [eax], 4
mov dword [eax + 4], 0
call fcn.00426fd0
mov edi, 0x100
mov dword [ebp - 0x2c0], edi
mov byte [ebp - 4], 8
mov eax, dword [esi + 0x35e0]
cmp dword [ebp - 0xe4], 8
mov ecx, dword [eax + 0x30]
lea eax, [ebp - 0xf8]
cmovae eax, dword [ebp - 0xf8]
push eax
push str.module_offset
push dword [ebp - 0x2bc]
call ecx
mov byte [ebp - 4], 7
add esp, 0x24
mov edx, dword [ebp - 0xe4]
cmp edx, 8
jb 0x496389
mov ecx, dword [ebp - 0xf8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x49637f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x496eae
push edx
push ecx
call fcn.004fc7e0
add esp, 8
mov ecx, dword [ebp - 0x2b8]
add ecx, 0x1618
je 0x49639d
cmp word [ecx], 0
jne 0x4963a2
mov ecx, 0x546f88
mov eax, dword [esi + 0x35e0]
push ecx
push str.module_version
push dword [ebp - 0x2bc]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [ebp - 0x2b8]
add esp, 0xc
mov eax, dword [esi + 0x35e0]
push 0
push dword [ecx + 0x1a38]
mov eax, dword [eax + 0x38]
push str.module_size
push dword [ebp - 0x2bc]
call eax
mov eax, dword [ebp - 0x2b8]
mov ecx, 0x3e8
mov eax, dword [eax + 0x1a30]
mul ecx
mov ecx, dword [esi + 0x35e0]
push edx
push eax
push str.module_creation_timestamp
push dword [ebp - 0x2bc]
mov ecx, dword [ecx + 0x38]
call ecx
mov ecx, dword [ebp - 0x2b8]
mov eax, dword [esi + 0x35e0]
push 0
push dword [ecx + 0x1a34]
mov eax, dword [eax + 0x38]
push str.module_checksum
push dword [ebp - 0x2bc]
call eax
mov ecx, dword [ebp - 0x2b8]
mov edx, 0x549ea4
mov eax, 0x549ea0
cmp byte [ecx + 0x1a40], 0
mov ecx, 0x546f88
cmove eax, edx
cmp word [eax], 0
cmovne ecx, eax
mov eax, dword [esi + 0x35e0]
push ecx
push 0x549ea8
push dword [ebp - 0x2bc]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [ebp - 0x2b8]
add esp, 0x3c
cmp byte [ecx + 0x1a40], 0
je 0x4964a3
mov eax, dword [esi + 0x357c]
mov eax, dword [eax]
cmp byte [eax + 0x2674e], 0
je 0x4964a3
lea eax, [ecx + 0x618]
mov ecx, esi
push eax
push dword [ebp - 0x2bc]
call fcn.00494c10
mov eax, dword [esi + 0x357c]
mov eax, dword [eax]
add eax, 0x4c08
cmp word [eax], 0
je 0x4964da
test eax, eax
mov ecx, 0x546f88
cmovne ecx, eax
mov eax, dword [esi + 0x35e0]
push ecx
push str.proc_friendly_name
push dword [ebp - 0x2bc]
mov eax, dword [eax + 0x30]
call eax
add esp, 0xc
push dword [ebp - 0x2bc]
mov eax, dword [ebp - 0x2c4]
push str.crash_info
push dword [ebp - 0x2c8]
mov eax, dword [eax + 0x74]
call eax
mov eax, dword [ebp - 0x2c4]
add esp, 0xc
push dword [ebp - 0x2bc]
mov eax, dword [eax + 0x84]
call eax
add esp, 4
jmp 0x4967aa
mov eax, dword [ebp - 0x2cc]
lea ecx, [ebp - 0xa0]
mov edx, 0x806f
mov word [ebp - 0x28], ax
mov word [ebp - 0x5c], dx
xor eax, eax
mov edx, dword [ebp - 0x2e4]
mov word [ebp - 0x5a], dx
lea edx, [ebp - 0x70]
mov dword [ebp - 0x70], 0x80618057
mov dword [ebp - 0x6c], 0x806e8072
mov dword [ebp - 0x68], 0x806e8069
mov dword [ebp - 0x64], 0x802c8067
mov dword [ebp - 0x60], 0x80638020
mov dword [ebp - 0x58], 0x8064806c
mov dword [ebp - 0x54], 0x806e8020
mov dword [ebp - 0x50], 0x8074806f
mov dword [ebp - 0x4c], 0x80638020
mov dword [ebp - 0x48], 0x80658072
mov dword [ebp - 0x44], 0x80748061
mov dword [ebp - 0x40], 0x80208065
mov dword [ebp - 0x3c], 0x80728063
mov dword [ebp - 0x38], 0x80738061
mov dword [ebp - 0x34], 0x805f8068
mov dword [ebp - 0x30], 0x806e8069
mov dword [ebp - 0x2c], 0x806f8066
mov word [ebp - 0x26], ax
call fcn.00419a70
mov byte [ebp - 4], 9
lea eax, [ebp - 0xa0]
cmp dword [ebp - 0x8c], 8
lea edx, [ebp - 0x2b8]
lea ecx, [ebp - 0xf8]
cmovae eax, dword [ebp - 0xa0]
mov dword [ebp - 0x2b8], eax
call fcn.0041ccb0
push eax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xa
call fcn.00444e70
mov dword [ebp - 0x2c0], 0x600
mov eax, dword [ebp - 0x2d8]
lea edi, [ebp - 0x88]
mov ecx, dword [ebp - 0x2e0]
mov edx, str.CReinitProcess::SubmitCrashEvent
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x74], 8
mov word [ebp - 0x30], ax
mov eax, dword [ebp - 0x2dc]
cmovae edi, dword [ebp - 0x88]
mov word [ebp - 0x2e], ax
mov eax, 0x20
mov word [ebp - 0x2a], cx
lea ecx, [ebp - 0x180]
mov word [ebp - 0x2c], ax
mov dword [ebp - 0x28], eax
call fcn.00462fe0
mov edx, str._BDREINIT__::
lea ecx, [ebp - 0xc0]
mov esi, eax
call fcn.00419450
push esi
mov edx, eax
lea ecx, [ebp - 0x218]
call fcn.004630f0
add esp, 4
lea ecx, [ebp - 0x30]
mov edx, eax
push ecx
lea ecx, [ebp - 0x280]
call fcn.00463280
add esp, 4
mov esi, eax
call fcn.00441aa0
push edi
push 0
push esi
push 8
push eax
call fcn.0043ebb0
mov byte [ebp - 4], 0xa
add esp, 0x14
mov edx, dword [ebp - 0x74]
cmp edx, 8
jb 0x4966e3
mov ecx, dword [ebp - 0x88]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4966d9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x496eb3
push edx
push ecx
call fcn.004fc7e0
add esp, 8
xor eax, eax
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
cmp edx, 8
jb 0x49673e
mov ecx, dword [ebp - 0xf8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x496734
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x496eb3
push edx
push ecx
call fcn.004fc7e0
add esp, 8
xor eax, eax
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 7
mov word [ebp - 0xf8], ax
cmp edx, 8
jb 0x49679f
mov ecx, dword [ebp - 0xa0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x496795
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x496eb3
push edx
push ecx
call fcn.004fc7e0
add esp, 8
mov esi, dword [ebp - 0x2d4]
mov edi, 0x600
mov eax, dword [esi + 0x357c]
mov ecx, dword [eax]
cmp word [ecx + 0x172e0], 0
je 0x49686d
mov eax, dword [ebp - 0x2c4]
mov eax, dword [eax + 0x4c]
call eax
mov ecx, dword [esi + 0x357c]
mov edx, eax
mov dword [ebp - 0x2b8], edx
mov ecx, dword [ecx]
add ecx, 0x172e0
je 0x4967e9
cmp word [ecx], 0
jne 0x4967ee
mov ecx, 0x546f88
mov eax, dword [esi + 0x35e0]
push ecx
push str.version
push edx
mov eax, dword [eax + 0x30]
call eax
mov eax, dword [esi + 0x357c]
add esp, 0xc
mov eax, dword [eax]
mov ecx, dword [eax + 0x174ec]
mov edx, dword [eax + 0x174e8]
mov eax, dword [esi + 0x35e0]
push ecx
push edx
push str.update_time
push dword [ebp - 0x2b8]
mov eax, dword [eax + 0x38]
call eax
push dword [ebp - 0x2b8]
mov eax, dword [ebp - 0x2c4]
push str.signatures_info
push dword [ebp - 0x2c8]
mov eax, dword [eax + 0x74]
call eax
mov eax, dword [ebp - 0x2c4]
add esp, 0x1c
push dword [ebp - 0x2b8]
mov eax, dword [eax + 0x84]
call eax
mov eax, dword [esi + 0x357c]
add esp, 4
mov ecx, dword [eax]
cmp byte [ecx + 0x2de98], 0
je 0x49689a
mov eax, dword [esi + 0x35e0]
mov esi, dword [ebp - 0x2c8]
push 0
push dword [ecx + 0x2de9c]
mov eax, dword [eax + 0x38]
push str.cloud_overrides_version
push esi
call eax
add esp, 0x10
jmp 0x4968a0
mov esi, dword [ebp - 0x2c8]
mov eax, dword [ebp - 0x2c4]
push 0
push 0x10
push esi
mov eax, dword [eax + 0x80]
call eax
add esp, 0xc
mov dword [ebp - 0x2d4], eax
test eax, eax
je 0x496b54
mov eax, dword [ebp - 0x2e4]
lea edx, [ebp - 0x4c]
mov word [ebp - 0x3c], ax
lea ecx, [ebp - 0xf8]
mov eax, dword [ebp - 0x2cc]
mov word [ebp - 0x2a], ax
xor eax, eax
mov dword [ebp - 0x4c], 0x80728045
mov dword [ebp - 0x48], 0x806f8072
mov dword [ebp - 0x44], 0x802c8072
mov dword [ebp - 0x40], 0x80738020
mov dword [ebp - 0x3a], 0x806d8062
mov dword [ebp - 0x36], 0x80748069
mov dword [ebp - 0x32], 0x8020803a
mov dword [ebp - 0x2e], 0x807d807b
mov word [ebp - 0x28], ax
call fcn.00419a70
or edi, 0x800
mov ecx, dword [ebp - 0x2d4]
lea edx, [ebp - 0xf8]
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0xe4], 8
mov eax, dword [ebp - 0x2c]
cmovae edx, dword [ebp - 0xf8]
mov dword [ebp - 0x30], ecx
mov ecx, edx
mov dword [ebp - 0x2c], eax
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x496956
sub ecx, esi
sub esp, 0x10
mov eax, esp
sar ecx, 1
lea esi, [ebp - 0x30]
push ecx
push edx
lea ecx, [ebp - 0xa0]
mov dword [eax], 1
mov dword [eax + 4], 0
mov dword [eax + 8], esi
call fcn.00426fd0
add esp, 0x18
or edi, 0x1000
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x88]
call fcn.00444e70
or edi, 0x2000
mov dword [ebp - 0x2c0], edi
mov eax, dword [ebp - 0x2d8]
lea edi, [ebp - 0x88]
mov ecx, dword [ebp - 0x2e0]
mov edx, str.CReinitProcess::SubmitCrashEvent
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x74], 8
mov word [ebp - 0x30], ax
mov eax, dword [ebp - 0x2dc]
cmovae edi, dword [ebp - 0x88]
mov word [ebp - 0x2e], ax
mov eax, 0x20
mov word [ebp - 0x2a], cx
lea ecx, [ebp - 0x180]
mov word [ebp - 0x2c], ax
mov dword [ebp - 0x28], eax
call fcn.00462fe0
mov edx, str._BDREINIT__::
lea ecx, [ebp - 0xc0]
mov esi, eax
call fcn.00419450
push esi
mov edx, eax
lea ecx, [ebp - 0x218]
call fcn.004630f0
add esp, 4
lea ecx, [ebp - 0x30]
mov edx, eax
push ecx
lea ecx, [ebp - 0x280]
call fcn.00463280
add esp, 4
mov esi, eax
call fcn.00441aa0
push edi
push 0
push esi
push 8
push eax
call fcn.0043ebb0
mov byte [ebp - 4], 0xd
add esp, 0x14
mov edx, dword [ebp - 0x74]
cmp edx, 8
jb 0x496a92
mov ecx, dword [ebp - 0x88]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x496a88
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x496eb8
push edx
push ecx
call fcn.004fc7e0
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
cmp edx, 8
jb 0x496aed
mov ecx, dword [ebp - 0xa0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x496ae3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x496eb8
push edx
push ecx
call fcn.004fc7e0
add esp, 8
xor eax, eax
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 7
mov word [ebp - 0xa0], ax
cmp edx, 8
jb 0x496b4e
mov ecx, dword [ebp - 0xf8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x496b44
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x496eb8
push edx
push ecx
call fcn.004fc7e0
add esp, 8
mov esi, dword [ebp - 0x2c8]
lea eax, [ebp - 0x108]
push eax
call fcn.0043d110
mov edi, dword [ebp - 0x2c4]
add esp, 4
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ebp - 0xb8], xmm0
movq xmm0, qword [eax + 0x20]
mov eax, dword [eax]
movq qword [ebp - 0xa8], xmm0
cmp dword [eax], 0
je 0x496de0
mov eax, dword [edi + 0x78]
lea ecx, [ebp - 0x2b8]
push ecx
push esi
mov dword [ebp - 0x2b8], 0
call eax
add esp, 8
cmp dword [ebp - 0x2b8], 0
je 0x496de0
call fcn.00441aa0
mov eax, dword [eax]
cmp dword [eax], 0
je 0x496d2a
movaps xmm0, xmmword [0x54c2a0]
lea edx, [ebp - 0x44]
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0x34], 0xe5a0e8f3
movups xmmword [ebp - 0x44], xmm0
mov dword [ebp - 0x30], 0xf4eee5f6
mov dword [ebp - 0x2c], 0xfdfba0ba
mov word [ebp - 0x28], 0x80
call fcn.0041a710
mov esi, dword [ebp - 0x2c0]
or esi, 0x4000
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0xf8]
or esi, 1
lea edx, [ebp - 0x2cc]
cmp dword [ebp - 0xe4], 0x10
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x2bc], esi
cmovae eax, dword [ebp - 0xf8]
mov dword [ebp - 0x2cc], eax
lea eax, [ebp - 0x2b8]
push eax
call fcn.0041b2b0
add esp, 4
mov dword [ebp - 4], 0x10
or esi, 2
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 0x2bc], esi
jb 0x496c5d
mov eax, dword [eax]
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.00445b30
or esi, 0x10000
mov eax, dword [ebp - 0x2d8]
lea edi, [ebp - 0x88]
mov ecx, dword [ebp - 0x2e0]
or esi, 4
mov dword [ebp - 4], 0x11
mov edx, str.CReinitProcess::SubmitCrashEvent
cmp dword [ebp - 0x74], 8
mov word [ebp - 0x30], ax
mov eax, dword [ebp - 0x2dc]
cmovae edi, dword [ebp - 0x88]
mov word [ebp - 0x2e], ax
mov eax, 0x20
mov word [ebp - 0x2a], cx
lea ecx, [ebp - 0x180]
mov dword [ebp - 0x2c0], esi
mov dword [ebp - 0x2bc], esi
mov word [ebp - 0x2c], ax
mov dword [ebp - 0x28], eax
invalid
invalid