Function at 0x436b40
Capabilities:
Encode data using base64
Encode data using xor
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x566e7a
mov eax, dword fs:[0]
push eax
sub esp, 0x430
mov eax, dword [0x5c324c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x38c], edi
xor eax, eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 7
mov word [ebp - 0x128], ax
push 3
push 0x57a1a8
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 1
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
call fcn.0041cc50
lea eax, [ebp - 0x43c]
mov byte [ebp - 4], 2
push eax
call fcn.00425500
mov ecx, eax
call fcn.00424660
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 3
push ecx
lea ecx, [ebp - 0x80]
push ecx
mov ecx, dword [eax]
call fcn.0050d7c0
mov ecx, dword [ebp - 0x438]
or esi, 0xffffffff
mov dword [ebp - 0x360], ecx
test ecx, ecx
je 0x436c1b
mov eax, esi
lock xadd dword [ecx + 4], eax
jne 0x436c1b
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp - 0x360]
mov eax, esi
lock xadd dword [ecx + 8], eax
jne 0x436c1b
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x6c]
mov byte [ebp - 4], 1
cmp edx, 8
jb 0x436c59
mov ecx, dword [ebp - 0x80]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x436c4f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438973
push edx
push ecx
call fcn.00472cbf
add esp, 8
xor eax, eax
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
cmp dword [ebp - 0x118], eax
jne 0x436ded
call fcn.00415b90
mov ecx, eax
test ecx, ecx
je 0x438978
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x368], eax
mov eax, 0x5778f8
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x368]
test eax, 0xffff0000
jne 0x436cb9
movzx eax, ax
push eax
call fcn.00432b90
jmp 0x436cc5
push 0
push 0x5778f8
call fcn.0041af00
lea ecx, [ebp - 0x355]
mov byte [ebp - 4], 5
mov byte [ebp - 0x355], 0
call fcn.004367c0
mov edx, eax
mov dword [ebp - 0x100], 0
mov ecx, edx
mov dword [ebp - 0xfc], 0xf
mov byte [ebp - 0x110], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x360], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x436d03
sub ecx, dword [ebp - 0x360]
push ecx
push edx
lea ecx, [ebp - 0x110]
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x368]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x3d4]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
lea ecx, [edi + 0x68]
mov byte [ebp - 4], 7
push eax
call fcn.00407d40
mov edx, dword [ebp - 0x3d4]
mov eax, esi
mov byte [ebp - 4], 6
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x436d71
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xfc]
mov byte [ebp - 4], 5
cmp edx, 0x10
jb 0x436daf
mov ecx, dword [ebp - 0x110]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x436da5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438982
push edx
push ecx
call fcn.00472cbf
add esp, 8
mov edx, dword [ebp - 0x368]
mov eax, esi
mov dword [ebp - 0x100], 0
add edx, 0xfffffff0
mov dword [ebp - 0xfc], 0xf
mov byte [ebp - 0x110], 0
mov byte [ebp - 4], 1
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x436e36
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x436e36
cmp dword [ebp - 0x114], 8
lea edx, [ebp - 0x128]
lea eax, [edi + 0x68]
cmovae edx, dword [ebp - 0x128]
test edx, edx
jne 0x436e0c
xor ecx, ecx
jmp 0x436e2d
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x3d4], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x436e17
sub ecx, dword [ebp - 0x3d4]
lea eax, [edi + 0x68]
sar ecx, 1
push ecx
push edx
mov ecx, eax
call fcn.0041af00
call fcn.00415b90
mov ecx, eax
test ecx, ecx
je 0x438987
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x36c], eax
mov eax, 0x5778f8
mov byte [ebp - 4], 8
shr eax, 0x10
lea ecx, [ebp - 0x36c]
mov dword [ebp - 0x35c], eax
test eax, eax
jne 0x436e81
mov eax, 0x5778f8
movzx eax, ax
push eax
call fcn.00432b90
jmp 0x436e8d
push 0
push 0x5778f8
call fcn.0041af00
mov byte [ebp - 0x20], 9
xor edx, edx
mov byte [ebp - 0x1f], 0xf
mov edi, 0xf
mov byte [ebp - 0x1e], 9
mov byte [ebp - 0x1d], 4
mov byte [ebp - 0x1c], 0x3f
mov byte [ebp - 0x1b], 0x1f
mov byte [ebp - 0x1a], 0
mov byte [ebp - 0x19], 0x13
mov byte [ebp - 0x18], 0x10
mov byte [ebp - 0x17], 6
mov byte [ebp - 0x16], 0x14
mov byte [ebp - 0x15], 0x17
mov byte [ebp - 0x14], 0x7d
mov al, byte [ebp - 0x20]
mov byte [ebp - 4], 9
mov dword [ebp - 0x408], edx
mov al, byte [ebp + edx - 0x20]
mov ecx, edx
and ecx, edi
mov byte [ebp - 0x356], al
cmp ecx, edi
mov eax, 0xc92a2766
mov edx, 0xa40f8b0d
cmovae ecx, edi
shl ecx, 2
call fcn.00472f80
mov edx, dword [ebp - 0x408]
and al, 0xf
lea ecx, [edx + 0x66]
xor al, cl
xor al, byte [ebp - 0x356]
mov byte [ebp + edx - 0x20], al
inc edx
mov dword [ebp - 0x408], edx
cmp edx, 0xd
jb 0x436ed5
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x24], edi
mov edi, dword [ebp - 0x38c]
lea edx, [ecx + 1]
mov dword [ebp - 0x28], 0
mov byte [ebp - 0x38], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x436f37
sub ecx, edx
lea eax, [ebp - 0x20]
push ecx
push eax
lea ecx, [ebp - 0x38]
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x36c]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x3d0]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
push eax
mov ecx, edi
mov byte [ebp - 4], 0xb
call fcn.00407d40
mov edx, dword [ebp - 0x3d0]
mov eax, esi
mov byte [ebp - 4], 0xa
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x436f9d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov byte [ebp - 4], 9
cmp edx, 0x10
jb 0x436fd5
mov ecx, dword [ebp - 0x38]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x436fcb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438991
push edx
push ecx
call fcn.00472cbf
add esp, 8
mov edx, dword [ebp - 0x36c]
mov eax, esi
mov dword [ebp - 0x28], 0
add edx, 0xfffffff0
mov dword [ebp - 0x24], 0xf
mov byte [ebp - 0x38], 0
mov byte [ebp - 4], 1
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437008
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00415b90
mov ecx, eax
test ecx, ecx
je 0x438996
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x35c], 0
lea ecx, [ebp - 0x370]
mov byte [ebp - 4], 0xc
jne 0x43704a
mov eax, 0x5778f8
movzx eax, ax
push eax
call fcn.00432b90
jmp 0x437056
push 0
push 0x5778f8
call fcn.0041af00
lea ecx, [ebp - 0x385]
mov byte [ebp - 4], 0xd
call fcn.00436740
mov edx, eax
mov dword [ebp - 0xd0], 0
mov ecx, edx
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x3d0], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437090
sub ecx, dword [ebp - 0x3d0]
push ecx
push edx
lea ecx, [ebp - 0xe0]
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x370]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0x3cc]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
push eax
lea ecx, [edi + 0x74]
mov byte [ebp - 4], 0xf
call fcn.00407d40
mov edx, dword [ebp - 0x3cc]
mov eax, esi
mov byte [ebp - 4], 0xe
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4370fe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xcc]
mov byte [ebp - 4], 0xd
cmp edx, 0x10
jb 0x43713c
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x437132
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4389a0
push edx
push ecx
call fcn.00472cbf
add esp, 8
mov edx, dword [ebp - 0x370]
mov eax, esi
mov dword [ebp - 0xd0], 0
add edx, 0xfffffff0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
mov byte [ebp - 4], 1
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437178
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00415b90
mov ecx, eax
test ecx, ecx
je 0x4389a5
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x35c], 0
lea ecx, [ebp - 0x374]
mov byte [ebp - 4], 0x10
jne 0x4371ba
mov eax, 0x5778f8
movzx eax, ax
push eax
call fcn.00432b90
jmp 0x4371c6
push 0
push 0x5778f8
call fcn.0041af00
lea ecx, [ebp - 0x3d6]
mov byte [ebp - 4], 0x11
call fcn.004366c0
mov edx, eax
mov dword [ebp - 0xb8], 0
mov ecx, edx
mov dword [ebp - 0xb4], 0xf
mov byte [ebp - 0xc8], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x3cc], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437200
sub ecx, dword [ebp - 0x3cc]
push ecx
push edx
lea ecx, [ebp - 0xc8]
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x374]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x430]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
push eax
lea ecx, [edi + 0x70]
mov byte [ebp - 4], 0x13
call fcn.00407d40
mov edx, dword [ebp - 0x430]
mov eax, esi
mov byte [ebp - 4], 0x12
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43726e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xb4]
mov byte [ebp - 4], 0x11
cmp edx, 0x10
jb 0x4372ac
mov ecx, dword [ebp - 0xc8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4372a2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4389af
push edx
push ecx
call fcn.00472cbf
add esp, 8
mov edx, dword [ebp - 0x374]
mov eax, esi
mov dword [ebp - 0xb8], 0
add edx, 0xfffffff0
mov dword [ebp - 0xb4], 0xf
mov byte [ebp - 0xc8], 0
mov byte [ebp - 4], 1
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4372e8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00415b90
mov ecx, eax
test ecx, ecx
je 0x4389b4
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x35c], 0
lea ecx, [ebp - 0x378]
mov byte [ebp - 4], 0x14
jne 0x43732a
mov eax, 0x5778f8
movzx eax, ax
push eax
call fcn.00432b90
jmp 0x437336
push 0
push 0x5778f8
call fcn.0041af00
push 0x11
push str.charge_url_format
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x378]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
push eax
lea ecx, [edi + 0x78]
mov byte [ebp - 4], 0x17
call fcn.00407d40
mov edx, dword [ebp - 0x434]
mov eax, esi
mov byte [ebp - 4], 0x16
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4373ac
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3c]
mov byte [ebp - 4], 0x15
cmp edx, 0x10
jb 0x4373e4
mov ecx, dword [ebp - 0x50]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4373da
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4389be
push edx
push ecx
call fcn.00472cbf
add esp, 8
mov edx, dword [ebp - 0x378]
mov eax, esi
mov dword [ebp - 0x40], 0
add edx, 0xfffffff0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
mov byte [ebp - 4], 1
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437417
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00415b90
mov ecx, eax
test ecx, ecx
je 0x4389c3
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x35c], 0
lea ecx, [ebp - 0x37c]
mov byte [ebp - 4], 0x18
jne 0x437459
mov eax, 0x5778f8
movzx eax, ax
push eax
call fcn.00432b90
jmp 0x437465
push 0
push 0x5778f8
call fcn.0041af00
push 0xf
push str.site_url_format
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x19
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0xf
mov byte [ebp - 0xf8], 0
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x37c]
mov byte [ebp - 4], 0x1a
push eax
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
push eax
lea ecx, [edi + 0x6c]
mov byte [ebp - 4], 0x1b
call fcn.00407d40
mov edx, dword [ebp - 0x42c]
mov eax, esi
mov byte [ebp - 4], 0x1a
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4374ea
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xe4]
mov byte [ebp - 4], 0x19
cmp edx, 0x10
jb 0x437528
mov ecx, dword [ebp - 0xf8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43751e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4389cd
push edx
push ecx
call fcn.00472cbf
add esp, 8
mov edx, dword [ebp - 0x37c]
mov eax, esi
mov dword [ebp - 0xe8], 0
add edx, 0xfffffff0
mov dword [ebp - 0xe4], 0xf
mov byte [ebp - 0xf8], 0
mov byte [ebp - 4], 1
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437564
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00415b90
mov ecx, eax
test ecx, ecx
je 0x4389d2
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x35c], 0
lea ecx, [ebp - 0x380]
mov byte [ebp - 4], 0x1c
jne 0x4375a6
mov eax, 0x5778f8
movzx eax, ax
push eax
call fcn.00432b90
jmp 0x4375b2
push 0
push 0x5778f8
call fcn.0041af00
push 0xf
push str.uninst_open_url
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x380]
mov byte [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x3bc]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
push eax
lea ecx, [edi + 0x7c]
mov byte [ebp - 4], 0x1f
call fcn.00407d40
mov edx, dword [ebp - 0x3bc]
mov eax, esi
mov byte [ebp - 4], 0x1e
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437628
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x54]
mov byte [ebp - 4], 0x1d
cmp edx, 0x10
jb 0x437660
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x437656
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4389dc
push edx
push ecx
call fcn.00472cbf
add esp, 8
mov edx, dword [ebp - 0x380]
mov eax, esi
mov dword [ebp - 0x58], 0
add edx, 0xfffffff0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
mov byte [ebp - 4], 1
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437693
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00415b90
mov ecx, eax
test ecx, ecx
je 0x4389e1
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x35c], 0
lea ecx, [ebp - 0x384]
mov byte [ebp - 4], 0x20
jne 0x4376d5
mov eax, 0x5778f8
movzx eax, ax
push eax
call fcn.00432b90
jmp 0x4376e1
push 0
push 0x5778f8
call fcn.0041af00
lea ecx, [ebp - 0x3d5]
mov byte [ebp - 4], 0x21
call fcn.00436550
mov edx, eax
mov dword [ebp - 0xa0], 0
mov ecx, edx
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x3bc], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437718
sub ecx, dword [ebp - 0x3bc]
push ecx
push edx
lea ecx, [ebp - 0xb0]
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x384]
mov byte [ebp - 4], 0x22
push eax
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x3b8]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
push eax
lea ecx, [edi + 0x80]
mov byte [ebp - 4], 0x23
call fcn.00407d40
mov edx, dword [ebp - 0x3b8]
mov eax, esi
mov byte [ebp - 4], 0x22
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437789
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x9c]
mov byte [ebp - 4], 0x21
cmp edx, 0x10
jb 0x4377c7
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4377bd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4389eb
push edx
push ecx
call fcn.00472cbf
add esp, 8
mov edx, dword [ebp - 0x384]
mov eax, esi
mov dword [ebp - 0xa0], 0
add edx, 0xfffffff0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
mov byte [ebp - 4], 1
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437803
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00415b90
mov ecx, eax
test ecx, ecx
je 0x4389f0
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x35c], 0
lea ecx, [ebp - 0x364]
mov byte [ebp - 4], 0x24
jne 0x437845
mov eax, 0x5778f8
movzx eax, ax
push eax
call fcn.00432b90
jmp 0x437851
push 0
push 0x5778f8
call fcn.0041af00
lea ecx, [ebp - 0x3c5]
mov byte [ebp - 4], 0x25
call fcn.00436640
mov edx, eax
mov dword [ebp - 0x88], 0
mov ecx, edx
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x3b8], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437888
sub ecx, dword [ebp - 0x3b8]
push ecx
push edx
lea ecx, [ebp - 0x98]
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x364]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x428]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
push eax
lea ecx, [edi + 0x84]
mov byte [ebp - 4], 0x27
call fcn.00407d40
mov edx, dword [ebp - 0x428]
mov eax, esi
mov byte [ebp - 4], 0x26
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4378f9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x84]
mov byte [ebp - 4], 0x25
cmp edx, 0x10
jb 0x437937
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43792d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4389fa
push edx
push ecx
call fcn.00472cbf
add esp, 8
mov edx, dword [ebp - 0x364]
mov eax, esi
mov dword [ebp - 0x88], 0
add edx, 0xfffffff0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
mov byte [ebp - 4], 1
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437973
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x13
push str.startmenu_no_uninst
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0xf
mov byte [ebp - 0x140], 0
call fcn.0041cb60
push 0
lea eax, [ebp - 0x140]
mov byte [ebp - 4], 0x28
push eax
lea ecx, [ebp + 8]
call fcn.0050ad60
mov edx, dword [ebp - 0x12c]
mov dword [edi + 0xd4], eax
mov byte [ebp - 4], 1
cmp edx, 0x10
jb 0x4379f9
mov ecx, dword [ebp - 0x140]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4379ef
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4389ff
push edx
push ecx
call fcn.00472cbf
add esp, 8
push 0x5778f8
lea ecx, [ebp - 0x404]
call fcn.00406970
push 0xd
push str.tray_icon_tip
lea ecx, [ebp - 0x308]
mov byte [ebp - 4], 0x29
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x2f4], 0xf
mov byte [ebp - 0x308], 0
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x404]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x308]
push eax
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
push eax
lea ecx, [edi + 0x64]
mov byte [ebp - 4], 0x2b
call fcn.00407d40
mov edx, dword [ebp - 0x420]
mov eax, esi
mov byte [ebp - 4], 0x2a
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437a8e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x308]
call fcn.00407770
mov edx, dword [ebp - 0x404]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437aba
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5778f8
lea ecx, [ebp - 0x400]
call fcn.00406970
push 0xb
push str.pattern_str
lea ecx, [ebp - 0x2f0]
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x2dc], 0xf
mov byte [ebp - 0x2f0], 0
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x400]
mov byte [ebp - 4], 0x2d
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
push eax
lea ecx, [edi + 0x90]
mov byte [ebp - 4], 0x2e
call fcn.00407d40
mov edx, dword [ebp - 0x410]
mov eax, esi
mov byte [ebp - 4], 0x2d
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437b52
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x2f0]
call fcn.00407770
mov edx, dword [ebp - 0x400]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437b7e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5778f8
lea ecx, [ebp - 0x3fc]
call fcn.00406970
push 0xc
push str.silence_inst
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], 0x2f
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 0xf
mov byte [ebp - 0x2d8], 0
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x3fc]
mov byte [ebp - 4], 0x30
push eax
lea eax, [ebp - 0x2d8]
push eax
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
push eax
lea ecx, [edi + 0x88]
mov byte [ebp - 4], 0x31
call fcn.00407d40
mov edx, dword [ebp - 0x414]
mov eax, esi
mov byte [ebp - 4], 0x30
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437c16
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x2d8]
call fcn.00407770
mov edx, dword [ebp - 0x3fc]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437c42
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5778f8
lea ecx, [ebp - 0x3f8]
call fcn.00406970
push 0x16
push str.run_after_silence_inst
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 0x32
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x2ac], 0xf
mov byte [ebp - 0x2c0], 0
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x3f8]
mov byte [ebp - 4], 0x33
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x418]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
push eax
lea ecx, [edi + 0x50]
mov byte [ebp - 4], 0x34
call fcn.00407d40
mov edx, dword [ebp - 0x418]
mov eax, esi
mov byte [ebp - 4], 0x33
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437cd7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x2c0]
call fcn.00407770
mov edx, dword [ebp - 0x3f8]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437d03
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xc
push str.install_tray
lea ecx, [ebp - 0x2a8]
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0xf
mov byte [ebp - 0x2a8], 0
call fcn.0041cb60
push 0
lea eax, [ebp - 0x2a8]
mov byte [ebp - 4], 0x35
push eax
lea ecx, [ebp + 8]
call fcn.0050ad60
lea ecx, [ebp - 0x2a8]
mov dword [edi + 0xc8], eax
mov byte [ebp - 4], 1
call fcn.00407770
push 0x18
push str.delay_install_extra_days
lea ecx, [ebp - 0x290]
mov dword [ebp - 0x280], 0
mov dword [ebp - 0x27c], 0xf
mov byte [ebp - 0x290], 0
call fcn.0041cb60
push 0
lea eax, [ebp - 0x290]
mov byte [ebp - 4], 0x36
push eax
lea ecx, [ebp + 8]
call fcn.0050ad60
lea ecx, [ebp - 0x290]
mov dword [edi + 0xcc], eax
mov byte [ebp - 4], 1
call fcn.00407770
push 0x5778f8
lea ecx, [ebp - 0x3f4]
call fcn.00406970
push 0x11
push str.install_open_text
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x37
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 0xf
mov byte [ebp - 0x278], 0
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x3f4]
mov byte [ebp - 4], 0x38
push eax
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x394]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
push eax
lea ecx, [edi + 0x8c]
mov byte [ebp - 4], 0x39
call fcn.00407d40
mov edx, dword [ebp - 0x394]
mov eax, esi
mov byte [ebp - 4], 0x38
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437e49
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x278]
call fcn.00407770
mov edx, dword [ebp - 0x3f4]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x437e75
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x13
push str.install_open_select
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0xf
mov byte [ebp - 0x260], 0
call fcn.0041cb60
push 0
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 0x3a
push eax
lea ecx, [ebp + 8]
call fcn.0050ad60
lea ecx, [ebp - 0x260]
mov dword [edi + 0xd0], eax
mov byte [ebp - 4], 1
call fcn.00407770
push 0x12
push str.install_show_close
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], 0
call fcn.0041cb60
push 1
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x3b
push eax
lea ecx, [ebp + 8]
call fcn.0050ad60
lea ecx, [ebp - 0x248]
mov dword [edi + 0xd8], eax
mov byte [ebp - 4], 1
call fcn.00407770
push 0xe
push str.pepflashplayer
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x204], 0xf
mov byte [ebp - 0x218], 0
call fcn.0041cb60
push 0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x3c
push eax
lea ecx, [ebp + 8]
call fcn.0050ad60
lea ecx, [ebp - 0x218]
mov dword [edi + 0xc4], eax
mov byte [ebp - 4], 1
call fcn.00407770
push 0x17
push str.exit_when_close_playwnd
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
call fcn.0041cb60
push 0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x3d
push eax
lea ecx, [ebp + 8]
call fcn.0050ad60
lea ecx, [ebp - 0x230]
mov dword [edi + 0xdc], eax
mov byte [ebp - 4], 1
call fcn.00407770
call fcn.00415b90
mov ecx, eax
test ecx, ecx
je 0x438a04
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x354], eax
mov eax, 0x579ca4
mov byte [ebp - 4], 0x3e
test eax, 0xffff0000
jne 0x438011
movzx eax, ax
lea ecx, [ebp - 0x354]
push eax
call fcn.00432b90
jmp 0x438077
push 0
push 0
push 0xffffffffffffffff
push 0x579ca4
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0x354]
lea edi, [eax - 1]
test edi, edi
jle 0x43806c
push edi
call fcn.00438ef0
push edi
push eax
push 0xffffffffffffffff
push 0x579ca4
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov eax, dword [ebp - 0x354]
cmp edi, dword [eax - 8]
jg 0x438a0e
mov dword [eax - 0xc], edi
xor ecx, ecx
mov eax, dword [ebp - 0x354]
mov word [eax + edi*2], cx
jmp 0x438071
call fcn.00411580
mov edi, dword [ebp - 0x38c]
lea ecx, [ebp - 0x3bd]
mov byte [ebp - 4], 0x3f
call fcn.00435a90
mov edx, eax
mov dword [ebp - 0x328], 0
mov ecx, edx
mov dword [ebp - 0x324], 0xf
mov byte [ebp - 0x338], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x394], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4380b0
sub ecx, dword [ebp - 0x394]
push ecx
push edx
lea ecx, [ebp - 0x338]
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x40
push eax
lea eax, [ebp - 0x338]
push eax
lea eax, [ebp - 0x398]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
push eax
lea ecx, [edi + 4]
mov byte [ebp - 4], 0x41
call fcn.00407d40
mov edx, dword [ebp - 0x398]
mov eax, esi
mov byte [ebp - 4], 0x40
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43811e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x338]
call fcn.00407770
mov edx, dword [ebp - 0x354]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43814a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x577c9c
lea ecx, [ebp - 0x3f0]
call fcn.00406970
lea ecx, [ebp - 0x3b4]
mov byte [ebp - 4], 0x42
call fcn.00435ec0
mov edx, eax
mov dword [ebp - 0x310], 0
mov ecx, edx
mov dword [ebp - 0x30c], 0xf
mov byte [ebp - 0x320], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x398], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x438191
sub ecx, dword [ebp - 0x398]
push ecx
push edx
lea ecx, [ebp - 0x320]
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x3f0]
mov byte [ebp - 4], 0x43
push eax
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x39c]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
push eax
lea ecx, [edi + 8]
mov byte [ebp - 4], 0x44
call fcn.00407d40
mov edx, dword [ebp - 0x39c]
mov eax, esi
mov byte [ebp - 4], 0x43
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4381ff
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x320]
call fcn.00407770
mov edx, dword [ebp - 0x3f0]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43822b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x577c9c
lea ecx, [ebp - 0x3ec]
call fcn.00406970
lea ecx, [ebp - 0x3b3]
mov byte [ebp - 4], 0x45
call fcn.00435cc0
mov edx, eax
mov dword [ebp - 0x1f0], 0
mov ecx, edx
mov dword [ebp - 0x1ec], 0xf
mov byte [ebp - 0x200], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x39c], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x438272
sub ecx, dword [ebp - 0x39c]
push ecx
push edx
lea ecx, [ebp - 0x200]
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x3ec]
mov byte [ebp - 4], 0x46
push eax
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
push eax
lea ecx, [edi + 0xc]
mov byte [ebp - 4], 0x47
call fcn.00407d40
mov edx, dword [ebp - 0x41c]
mov eax, esi
mov byte [ebp - 4], 0x46
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4382e0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x200]
call fcn.00407770
mov edx, dword [ebp - 0x3ec]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43830c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [0x5c311c]
lea ecx, [ebp - 0x3e8]
call fcn.00406970
push 0xd
push str.platform_type
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x48
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x1d4], 0xf
mov byte [ebp - 0x1e8], 0
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x3e8]
mov byte [ebp - 4], 0x49
push eax
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x3a4]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
lea ecx, [edi + 0x94]
mov byte [ebp - 4], 0x4a
push eax
call fcn.00407d40
mov edx, dword [ebp - 0x3a4]
mov eax, esi
mov byte [ebp - 4], 0x49
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4383a5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x1e8]
call fcn.00407770
mov edx, dword [ebp - 0x3e8]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4383d1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5778f8
lea ecx, [ebp - 0x3e4]
call fcn.00406970
lea ecx, [ebp - 0x386]
mov byte [ebp - 4], 0x4b
call fcn.00436040
mov edx, eax
mov dword [ebp - 0x1c0], 0
mov ecx, edx
mov dword [ebp - 0x1bc], 0xf
mov byte [ebp - 0x1d0], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x3a4], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x438418
sub ecx, dword [ebp - 0x3a4]
push ecx
push edx
lea ecx, [ebp - 0x1d0]
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x3e4]
mov byte [ebp - 4], 0x4c
push eax
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x3a8]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
push eax
lea ecx, [edi + 0x98]
mov byte [ebp - 4], 0x4d
call fcn.00407d40
mov edx, dword [ebp - 0x3a8]
mov eax, esi
mov byte [ebp - 4], 0x4c
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438489
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x1d0]
call fcn.00407770
mov edx, dword [ebp - 0x3e4]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4384b5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5778f8
lea ecx, [ebp - 0x3e0]
call fcn.00406970
lea ecx, [ebp - 0x3b2]
mov byte [ebp - 4], 0x4e
call fcn.00436940
mov edx, eax
mov dword [ebp - 0x1a8], 0
mov ecx, edx
mov dword [ebp - 0x1a4], 0xf
mov byte [ebp - 0x1b8], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x3a8], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x438500
sub ecx, dword [ebp - 0x3a8]
push ecx
push edx
lea ecx, [ebp - 0x1b8]
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x3e0]
mov byte [ebp - 4], 0x4f
push eax
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x3ac]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
push eax
lea ecx, [edi + 0x9c]
mov byte [ebp - 4], 0x50
call fcn.00407d40
mov edx, dword [ebp - 0x3ac]
mov eax, esi
mov byte [ebp - 4], 0x4f
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438571
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x1b8]
call fcn.00407770
mov edx, dword [ebp - 0x3e0]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43859d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5778f8
lea ecx, [ebp - 0x40c]
call fcn.00406970
lea ecx, [ebp - 0x3b1]
mov byte [ebp - 4], 0x51
call fcn.00436830
mov edx, eax
mov dword [ebp - 0x190], 0
mov ecx, edx
mov dword [ebp - 0x18c], 0xf
mov byte [ebp - 0x1a0], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x3ac], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4385e4
sub ecx, dword [ebp - 0x3ac]
push ecx
push edx
lea ecx, [ebp - 0x1a0]
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x40c]
mov byte [ebp - 4], 0x52
push eax
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
push eax
lea ecx, [edi + 0xa0]
mov byte [ebp - 4], 0x53
call fcn.00407d40
mov edx, dword [ebp - 0x3b0]
mov eax, esi
mov byte [ebp - 4], 0x52
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438655
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x1a0]
call fcn.00407770
mov edx, dword [ebp - 0x40c]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438681
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5778f8
lea ecx, [ebp - 0x3dc]
call fcn.00406970
lea ecx, [ebp - 0x38d]
mov byte [ebp - 4], 0x54
call fcn.004365d0
mov edx, eax
mov dword [ebp - 0x178], 0
mov ecx, edx
mov dword [ebp - 0x174], 0xf
mov byte [ebp - 0x188], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x3b0], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4386c8
sub ecx, dword [ebp - 0x3b0]
push ecx
push edx
lea ecx, [ebp - 0x188]
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x3dc]
mov byte [ebp - 4], 0x55
push eax
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x3c4]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
push eax
lea ecx, [edi + 0xa4]
mov byte [ebp - 4], 0x56
call fcn.00407d40
mov edx, dword [ebp - 0x3c4]
mov eax, esi
mov byte [ebp - 4], 0x55
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438739
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x188]
call fcn.00407770
mov edx, dword [ebp - 0x3dc]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438765
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5778f8
lea ecx, [ebp - 0x360]
call fcn.00406970
lea ecx, [ebp - 0x39d]
mov byte [ebp - 4], 0x57
call fcn.004361f0
mov edx, eax
mov dword [ebp - 0x160], 0
mov ecx, edx
mov dword [ebp - 0x15c], 0xf
mov byte [ebp - 0x170], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x3c4], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4387b0
sub ecx, dword [ebp - 0x3c4]
push ecx
push edx
lea ecx, [ebp - 0x170]
call fcn.0041cb60
push 0xfde9
lea eax, [ebp - 0x360]
mov byte [ebp - 4], 0x58
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp + 8]
call fcn.0050b240
push eax
lea ecx, [edi + 0xa8]
mov byte [ebp - 4], 0x59
call fcn.00407d40
mov edx, dword [ebp - 0x424]
mov eax, esi
mov byte [ebp - 4], 0x58
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438821
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x170]
call fcn.00407770
mov edx, dword [ebp - 0x360]
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x43884b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0x5779a4
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x144], 0xf
mov byte [ebp - 0x158], 0
call fcn.0041cb60
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 0x5a
push eax
lea eax, [ebp - 0x350]
push eax
lea ecx, [ebp + 8]
call fcn.0050b9c0
mov esi, eax
lea eax, [edi + 0xac]
cmp eax, esi
je 0x4388cd
mov ecx, eax
call fcn.00407770
movups xmm0, xmmword [esi]
movups xmmword [edi + 0xac], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [edi + 0xbc], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
lea ecx, [ebp - 0x350]
call fcn.00407770
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 1
call fcn.00407770
lea eax, [edi + 0x94]
push eax
call fcn.00415b00
mov ecx, eax
call fcn.0041f500
mov eax, dword [edi]
cmp dword [eax - 0xc], 0
je 0x43893f
mov eax, dword [edi + 0x14]
cmp dword [eax - 0xc], 0
je 0x43893f
mov eax, dword [edi + 0x10]
cmp dword [eax - 0xc], 0
je 0x43893f
mov eax, dword [edi + 0x1c]
cmp dword [eax - 0xc], 0
je 0x43893f
mov eax, dword [edi + 0x20]
cmp dword [eax - 0xc], 0
je 0x43893f
mov eax, dword [edi + 0x18]
cmp dword [eax - 0xc], 0
je 0x43893f
mov eax, dword [edi + 0x68]
cmp dword [eax - 0xc], 0
je 0x43893f
mov esi, 1
jmp 0x438941
xor esi, esi
lea ecx, [ebp - 0x128]
call fcn.004077c0
lea ecx, [ebp + 8]
call fcn.00507d50
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00472b5d
mov esp, ebp
pop ebp
ret 0x18
call fcn.005213e9
push 0x80004005
call fcn.0040e300
call fcn.005213e9
push 0x80004005
call fcn.0040e300
call fcn.005213e9
push 0x80004005
call fcn.0040e300
call fcn.005213e9
push 0x80004005
call fcn.0040e300
call fcn.005213e9
push 0x80004005
call fcn.0040e300
call fcn.005213e9
push 0x80004005
call fcn.0040e300
call fcn.005213e9
push 0x80004005
call fcn.0040e300
call fcn.005213e9
push 0x80004005
call fcn.0040e300
call fcn.005213e9
push 0x80004005
call fcn.0040e300
call fcn.005213e9
call fcn.005213e9
push 0x80004005
call fcn.0040e300
push 0x80070057
call fcn.0040e300
int3