Function at 0x404130
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x47867a
mov eax, dword fs:[0]
push eax
sub esp, 0x1b8
mov eax, dword [0x4a0800]
xor eax, esp
mov dword [esp + 0x1b0], eax
push ebx
push esi
push edi
mov eax, dword [0x4a0800]
xor eax, esp
push eax
lea eax, [esp + 0x1c8]
mov dword fs:[0], eax
mov esi, ecx
mov ebx, esi
mov dword [esp + 0x38], esi
call fcn.00407fa0
call fcn.00409cf0
mov dword [esp + 0x80], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0x80]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x80]
mov dword [eax], eax
mov eax, dword [esp + 0x80]
xor ebx, ebx
mov dword [eax + 8], eax
mov dword [esp + 0x84], ebx
mov dword [esp + 0x1d0], ebx
call fcn.00409cf0
mov dword [esp + 0xa0], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0xa0]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xa0]
mov dword [eax], eax
mov eax, dword [esp + 0xa0]
mov dword [eax + 8], eax
mov dword [esp + 0xa4], ebx
mov byte [esp + 0x1d0], 1
call fcn.00409cf0
mov dword [esp + 0x50], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0x50]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x50]
mov dword [eax], eax
mov eax, dword [esp + 0x50]
mov dword [eax + 8], eax
mov dword [esp + 0x54], ebx
mov byte [esp + 0x1d0], 2
call fcn.00409cf0
mov dword [esp + 0xf4], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0xf4]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xf4]
mov dword [eax], eax
mov eax, dword [esp + 0xf4]
mov dword [eax + 8], eax
mov dword [esp + 0xf8], ebx
mov byte [esp + 0x1d0], 3
call fcn.00409cf0
mov dword [esp + 0xb0], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0xb0]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [eax], eax
mov eax, dword [esp + 0xb0]
mov dword [eax + 8], eax
mov dword [esp + 0xb4], ebx
mov byte [esp + 0x1d0], 4
call fcn.00446493
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x4042b5
push 0x80004005
call fcn.00402750
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x34], eax
mov byte [esp + 0x1d0], 5
call fcn.0040fb10
mov dword [esp + 0x3c], eax
call fcn.00446493
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x4042f0
push 0x80004005
call fcn.00402750
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x88], eax
mov byte [esp + 0x1d0], 6
call fcn.00446493
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x404325
push 0x80004005
call fcn.00402750
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x8c], eax
mov byte [esp + 0x1d0], 7
call fcn.00446493
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40435a
push 0x80004005
call fcn.00402750
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x48], eax
mov byte [esp + 0x1d0], 8
call fcn.00446493
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40438c
push 0x80004005
call fcn.00402750
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x64], eax
mov byte [esp + 0x1d0], 9
call fcn.00446493
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x4043be
push 0x80004005
call fcn.00402750
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x58], eax
mov byte [esp + 0x1d0], 0xa
call fcn.00446493
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x4043f0
push 0x80004005
call fcn.00402750
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x98], eax
mov byte [esp + 0x1d0], 0xb
call fcn.00446493
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x404425
push 0x80004005
call fcn.00402750
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x94], eax
add esi, 0x58
mov byte [esp + 0x1d0], 0xc
cmp dword [esi + 0x18], 8
jb 0x40444e
mov eax, dword [esi + 4]
jmp 0x404451
lea eax, [esi + 4]
push eax
lea ecx, [esp + 0x8c]
push str.InstallationId_s
push ecx
call fcn.0040a810
mov edx, dword [ebp + 8]
add esp, 0xc
push edx
lea eax, [esp + 0x90]
push str.EventTypeID_d
push eax
call fcn.0040a810
add esp, 0xc
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0xd
je 0x4044a6
push esi
mov edi, eax
call fcn.0042f2c0
mov edi, eax
jmp 0x4044a8
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xe
push str.InstallationId
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea ecx, [esp + 0x7c]
push ecx
mov ecx, esi
mov byte [esp + 0x1d4], 0xe
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404503
mov edx, dword [esp + 0x18]
push edx
call fcn.00438751
add esp, 4
mov eax, dword [ebp + 8]
push eax
lea ecx, [esp + 0x38]
push 0x487d34
push ecx
call fcn.0040a810
add esp, 0xc
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0xf
je 0x404544
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042f220
mov edi, eax
xor ebx, ebx
jmp 0x404546
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xb
push str.EventTypeID
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea edx, [esp + 0x7c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x10
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4045a1
mov eax, dword [esp + 0x18]
push eax
call fcn.00438751
add esp, 4
cmp dword [ebp + 8], 1
jne 0x404835
mov esi, dword [esp + 0x38]
lea ecx, [esp + 0xf0]
push ecx
lea edx, [esp + 0x9c]
push edx
mov ecx, esi
call fcn.00406220
mov eax, 8
cmp dword [esi + 0xc8], eax
jb 0x4045df
mov ecx, dword [esi + 0xb4]
mov dword [esp + 0x60], ecx
jmp 0x4045e9
lea edx, [esi + 0xb4]
mov dword [esp + 0x60], edx
cmp dword [esi + 0x54], eax
jb 0x4045f3
mov edx, dword [esi + 0x40]
jmp 0x4045f6
lea edx, [esi + 0x40]
mov esi, dword [esp + 0x3c]
lea eax, [esi + 0xa38]
mov dword [esp + 0x40], eax
lea edi, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x404607
sub eax, edi
sar eax, 1
mov edi, dword [esp + 0x40]
jne 0x404622
lea edi, [esi + 0x3108]
mov eax, dword [esp + 0x60]
push eax
push edx
mov edx, dword [esp + 0xa0]
lea ecx, [esi + 0x38]
push ecx
push edx
mov ecx, esi
call fcn.00412280
push eax
mov eax, dword [esi + 0x20]
push edi
push eax
lea ecx, [esp + 0x80]
push str.InstallationData_brandId_:___d____countryCode_:___s____languageCode_:___d_____MachineData_:__s___TestData_:__s___startTime_:___s____FirstTime_:___s_
push ecx
call fcn.0040a810
add esp, 0x24
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x11
je 0x40469f
mov ecx, dword [esp + 0x40]
lea edi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x404677
mov ebx, dword [esp + 0x40]
sub ecx, edi
sar ecx, 1
jne 0x404692
lea ebx, [esi + 0x3108]
mov edi, eax
call fcn.0042f220
mov edi, eax
xor ebx, ebx
jmp 0x4046a1
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xb
push str.countryCode
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea edx, [esp + 0x9c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x12
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4046ff
mov eax, dword [esp + 0x18]
push eax
call fcn.00438751
add esp, 4
mov ecx, dword [esp + 0x3c]
call fcn.00412280
push eax
lea ecx, [esp + 0x38]
push 0x487d34
push ecx
call fcn.0040a810
add esp, 0xc
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x13
je 0x404746
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042f220
mov edi, eax
xor ebx, ebx
jmp 0x404748
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xc
push str.languageCode
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea edx, [esp + 0x9c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x14
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4047a6
mov eax, dword [esp + 0x18]
push eax
call fcn.00438751
add esp, 4
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x15
je 0x4047d3
lea ecx, [esp + 0xf0]
push ecx
mov esi, eax
call fcn.0042f3c0
mov edi, eax
jmp 0x4047d5
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xb
push str.MachineData
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea edx, [esp + 0x9c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x16
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404845
mov eax, dword [esp + 0x18]
push eax
call fcn.00438751
add esp, 4
jmp 0x404845
push 0x13
push 0x486ac4
lea ecx, [esp + 0x6c]
call fcn.00402d20
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x17
je 0x404872
lea ecx, [esp + 0x9c]
push ecx
mov esi, eax
call fcn.0042f3c0
mov edi, eax
jmp 0x404874
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0x10
push str.InstallationData
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea edx, [esp + 0x7c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x18
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4048cf
mov eax, dword [esp + 0x18]
push eax
call fcn.00438751
add esp, 4
mov eax, dword [esp + 0x38]
lea ecx, [eax + 0x23c]
mov edi, 8
cmp dword [ecx + 0x18], edi
mov dword [esp + 0x30], ecx
jb 0x4048ec
mov ecx, dword [ecx + 4]
jmp 0x4048ef
add ecx, 4
cmp dword [eax + 0x238], edi
mov dword [esp + 0x60], ecx
lea ecx, [eax + 0x220]
mov dword [esp + 0x5c], ecx
jb 0x40490e
mov edx, dword [ecx + 4]
mov dword [esp + 0x40], edx
jmp 0x404915
add ecx, 4
mov dword [esp + 0x40], ecx
cmp dword [eax + 0x28c], edi
lea ecx, [eax + 0x274]
mov dword [esp + 0x6c], ecx
jb 0x40492c
mov ecx, dword [ecx + 4]
jmp 0x40492f
add ecx, 4
cmp dword [eax + 0x270], edi
mov dword [esp + 0xe8], ecx
lea ecx, [eax + 0x258]
mov dword [esp + 0x74], ecx
jb 0x404954
mov edx, dword [ecx + 4]
mov dword [esp + 0xe0], edx
jmp 0x40495e
add ecx, 4
mov dword [esp + 0xe0], ecx
cmp dword [eax + 0x218], edi
lea ecx, [eax + 0x200]
mov dword [esp + 0x78], ecx
jb 0x404975
mov ecx, dword [ecx + 4]
jmp 0x404978
add ecx, 4
cmp dword [eax + 0x1a8], edi
mov dword [esp + 0xd0], ecx
lea ecx, [eax + 0x190]
mov dword [esp + 0xb8], ecx
jb 0x4049a0
mov edx, dword [ecx + 4]
mov dword [esp + 0xc0], edx
jmp 0x4049aa
add ecx, 4
mov dword [esp + 0xc0], ecx
cmp dword [eax + 0x1fc], edi
lea ecx, [eax + 0x1e4]
mov dword [esp + 0xa8], ecx
jb 0x4049c4
mov ecx, dword [ecx + 4]
jmp 0x4049c7
add ecx, 4
cmp dword [eax + 0x1e0], edi
mov dword [esp + 0xe4], ecx
lea ecx, [eax + 0x1c8]
mov dword [esp + 0xcc], ecx
jb 0x4049ef
mov edx, dword [ecx + 4]
mov dword [esp + 0xec], edx
jmp 0x4049f9
add ecx, 4
mov dword [esp + 0xec], ecx
cmp dword [eax + 0xc8], edi
lea ecx, [eax + 0xb0]
mov dword [esp + 0xc4], ecx
jb 0x404a13
mov ecx, dword [ecx + 4]
jmp 0x404a16
add ecx, 4
cmp dword [eax + 0x54], edi
lea esi, [eax + 0x3c]
mov dword [esp + 0x44], ecx
mov dword [esp + 0xbc], esi
jb 0x404a2e
mov esi, dword [esi + 4]
jmp 0x404a31
add esi, 4
cmp dword [eax + 0xac], edi
lea edx, [eax + 0x94]
mov dword [esp + 0x70], edx
jb 0x404a48
mov edx, dword [edx + 4]
jmp 0x404a4b
add edx, 4
add eax, 0x74
cmp dword [eax + 0x18], edi
mov dword [esp + 0x90], eax
jb 0x404a5f
mov ecx, dword [eax + 4]
jmp 0x404a62
lea ecx, [eax + 4]
mov edi, dword [esp + 0x3c]
lea eax, [edi + 0x838]
mov edi, dword [edi + 0x34]
push edi
mov edi, dword [esp + 0x64]
push edi
mov edi, dword [esp + 0x48]
push edi
mov edi, dword [esp + 0xf4]
push edi
push eax
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0xf4]
push eax
mov eax, dword [esp + 0xe8]
push eax
mov eax, dword [esp + 0xdc]
push eax
mov eax, dword [esp + 0x104]
push eax
mov eax, dword [esp + 0x110]
push eax
mov eax, dword [esp + 0x6c]
push eax
mov eax, dword [esp + 0x68]
mov eax, dword [eax + 0x20]
push esi
push eax
push edx
mov edx, dword [esp + 0x70]
mov eax, dword [edx + 0x90]
push eax
push ecx
lea ecx, [esp + 0x88]
push str.EventData_MachineIDGUID_:___s____MachineID_:___lu____InstallerVersion_:___s____brandId_:___d____startTime_:___s____FirstTime_:___s____setupUrl_:___s____AbortingStage_:___s____Duration_:___s____Error_:___s____CID_:___s____Serial_ID_:___s____ClientVersion_:___s____uninstallTime_:___s____uninstallReason_:___s____testVersion_:___d_
push ecx
call fcn.0040a810
push 0x10
call fcn.00438726
add esp, 0x4c
mov dword [esp + 0x44], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x19
je 0x404b09
mov edx, dword [esp + 0x90]
push edx
mov edi, eax
call fcn.0042f2c0
mov edi, eax
jmp 0x404b0b
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xd
push str.MachineIDGUID
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x1a
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404b66
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00438751
add esp, 4
mov edx, dword [esp + 0x38]
mov eax, dword [edx + 0x90]
push eax
lea ecx, [esp + 0x38]
push 0x486dc4
push ecx
call fcn.0040a810
add esp, 0xc
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x90], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x1b
je 0x404bb1
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042f220
mov edi, eax
xor ebx, ebx
jmp 0x404bb3
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 9
push str.MachineID
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea edx, [esp + 0x4c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x1c
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404c0e
mov eax, dword [esp + 0x18]
push eax
call fcn.00438751
add esp, 4
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x90], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x1d
je 0x404c3b
mov ecx, dword [esp + 0x70]
push ecx
mov edi, eax
call fcn.0042f2c0
mov edi, eax
jmp 0x404c3d
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0x10
push str.InstallerVersion
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea edx, [esp + 0x4c]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x1e
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404c98
mov eax, dword [esp + 0x18]
push eax
call fcn.00438751
add esp, 4
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx + 0x20]
push edx
lea eax, [esp + 0x38]
push 0x487d34
push eax
call fcn.0040a810
add esp, 0xc
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x70], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x1f
je 0x404cdd
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042f220
mov edi, eax
xor ebx, ebx
jmp 0x404cdf
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 7
push str.brandId
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea ecx, [esp + 0x4c]
push ecx
mov ecx, esi
mov byte [esp + 0x1d4], 0x20
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404d3a
mov edx, dword [esp + 0x18]
push edx
call fcn.00438751
add esp, 4
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x70], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x21
je 0x404d68
mov ebx, dword [esp + 0x3c]
add ebx, 0x38
mov edi, eax
call fcn.0042f220
mov edi, eax
xor ebx, ebx
jmp 0x404d6a
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 8
push str.TestData
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x22
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404dc5
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00438751
add esp, 4
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x70], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x23
je 0x404df2
mov edx, dword [esp + 0xbc]
push edx
mov edi, eax
call fcn.0042f2c0
mov edi, eax
jmp 0x404df4
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 9
push str.startTime
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x24
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404e4f
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00438751
add esp, 4
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0xbc], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x25
je 0x404e7f
mov edx, dword [esp + 0xc4]
push edx
mov edi, eax
call fcn.0042f2c0
mov edi, eax
jmp 0x404e81
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 9
push str.FirstTime
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x26
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404edc
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00438751
add esp, 4
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0xc4], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x27
je 0x404f0c
mov edx, dword [esp + 0xcc]
push edx
mov edi, eax
call fcn.0042f2c0
mov edi, eax
jmp 0x404f0e
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 8
push str.setupUrl
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x28
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404f69
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00438751
add esp, 4
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0xcc], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x29
je 0x404f99
mov edx, dword [esp + 0xa8]
push edx
mov edi, eax
call fcn.0042f2c0
mov edi, eax
jmp 0x404f9b
xor edi, edi
mov byte [esp + 0x1d0], 0xc
push 0xd
push str.AbortingStage
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], bx
call fcn.00401750
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x2a
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x404ff6
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00438751
add esp, 4
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0xa8], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x2b
je 0x405026
mov edx, dword [esp + 0xb8]
push edx
mov edi, eax
call fcn.0042f2c0
mov esi, eax
jmp 0x405028
xor esi, esi
mov edx, str.Duration
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x2c
call fcn.00408e20
mov dword [eax], esi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x405072
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00438751
add esp, 4
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0xb8], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x2d
je 0x40509f
mov edx, dword [esp + 0x78]
push edx
mov edi, eax
call fcn.0042f2c0
mov edi, eax
jmp 0x4050a1
xor edi, edi
mov edx, str.Error
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x2e
call fcn.00408e20
mov esi, 8
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], esi
jb 0x4050ef
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00438751
add esp, 4
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x78], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x2f
je 0x405119
mov edx, dword [esp + 0x74]
push edx
mov edi, eax
call fcn.0042f2c0
mov edi, eax
jmp 0x40511b
xor edi, edi
mov edx, 0x486ea0
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x30
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], esi
jb 0x405164
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00438751
add esp, 4
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x74], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x31
je 0x40518f
mov ebx, dword [esp + 0x68]
mov edi, eax
call fcn.0042f220
mov edi, eax
xor ebx, ebx
jmp 0x405191
xor edi, edi
mov esi, dword [esp + 0x38]
mov edx, str.Serial_ID
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x32
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4051df
mov eax, dword [esp + 0x18]
push eax
call fcn.00438751
add esp, 4
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x68], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x33
je 0x405209
mov ecx, dword [esp + 0x6c]
push ecx
mov edi, eax
call fcn.0042f2c0
mov edi, eax
jmp 0x40520b
xor edi, edi
mov edx, str.ClientVersion
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x34
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x405255
mov eax, dword [esp + 0x18]
push eax
call fcn.00438751
add esp, 4
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x6c], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x35
je 0x40527f
mov ecx, dword [esp + 0x5c]
push ecx
mov edi, eax
call fcn.0042f2c0
mov edi, eax
jmp 0x405281
xor edi, edi
mov edx, str.uninstallTime
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x36
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4052cb
mov eax, dword [esp + 0x18]
push eax
call fcn.00438751
add esp, 4
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x5c], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x37
je 0x4052f5
mov ecx, dword [esp + 0x30]
push ecx
mov edi, eax
call fcn.0042f2c0
mov edi, eax
jmp 0x4052f7
xor edi, edi
mov edx, str.uninstallReason
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x38
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x405341
mov eax, dword [esp + 0x18]
push eax
call fcn.00438751
add esp, 4
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx + 0x34]
push edx
lea eax, [esp + 0x38]
push 0x487d34
push eax
call fcn.0040a810
add esp, 0xc
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x39
je 0x40538a
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042f220
mov esi, dword [esp + 0x38]
mov edi, eax
xor ebx, ebx
jmp 0x40538c
xor edi, edi
mov edx, str.testVersion
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea ecx, [esp + 0x4c]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x3a
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x4053d6
mov edx, dword [esp + 0x18]
push edx
call fcn.00438751
add esp, 4
mov eax, dword [ebp + 8]
cmp eax, 0xb
jne 0x405424
call fcn.00446493
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x4053f8
push 0x80004005
call fcn.00402750
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x44], eax
lea ecx, [esp + 0x4c]
push ecx
lea edx, [esp + 0x48]
push edx
mov byte [esp + 0x1d8], 0x3b
call fcn.00408190
jmp 0x405550
cmp eax, 3
jne 0x405594
call fcn.00446493
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x405447
push 0x80004005
call fcn.00402750
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x44], eax
mov byte [esp + 0x1d0], 0x3c
mov ecx, dword [esi + 0x298]
mov edx, dword [esi + 0x294]
mov eax, dword [esi + 0x290]
push ecx
push edx
push eax
lea ecx, [esp + 0x50]
push str._downloadTime_:___lld____isDirect_:___d_
push ecx
call fcn.0040a810
add esp, 0x14
push 0x10
call fcn.00438726
add esp, 4
cmp eax, ebx
je 0x4054a7
fild qword [esi + 0x290]
mov dword [eax], 3
mov edi, eax
fstp qword [eax + 8]
jmp 0x4054a9
xor edi, edi
mov edx, str.downloadTime
lea eax, [esp + 0x14]
call fcn.00401360
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x3d
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0x3c
cmp dword [esp + 0x2c], 8
jb 0x4054eb
mov eax, dword [esp + 0x18]
push eax
call fcn.00438751
add esp, 4
push 0x10
call fcn.00438726
add esp, 4
cmp eax, ebx
je 0x40550c
fild dword [esi + 0x298]
mov dword [eax], 3
mov edi, eax
fstp qword [eax + 8]
jmp 0x40550e
xor edi, edi
mov edx, str.isDirect
lea eax, [esp + 0x14]
call fcn.00401360
lea ecx, [esp + 0x4c]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x3e
call fcn.00408e20
mov dword [eax], edi
mov byte [esp + 0x1d0], 0x3c
cmp dword [esp + 0x2c], 8
jb 0x405550
mov edx, dword [esp + 0x18]
push edx
call fcn.00438751
add esp, 4
push 0x486f2c
lea ecx, [esp + 0x4c]
call fcn.00408d50
mov esi, dword [esp + 0x44]
mov eax, dword [esi - 0xc]
push eax
push esi
lea ecx, [esp + 0x50]
call fcn.00408f70
lea eax, [esi - 0x10]
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x1d0], 0xc
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405594
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x486fbc
lea ecx, [esp + 0x4c]
call fcn.00408d50
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x3f
je 0x4055cc
lea ecx, [esp + 0x4c]
push ecx
mov esi, eax
call fcn.0042f3c0
mov esi, eax
jmp 0x4055ce
xor esi, esi
mov edx, 0x486fc0
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0xc
call fcn.00401360
lea edx, [esp + 0x7c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x40
call fcn.00408e20
mov dword [eax], esi
mov byte [esp + 0x1d0], 0xc
cmp dword [esp + 0x2c], 8
jb 0x405618
mov eax, dword [esp + 0x18]
push eax
call fcn.00438751
add esp, 4
push 0x486fd4
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0x80]
push edx
call fcn.00408c70
add esp, 0xc
lea ecx, [esp + 0x8c]
push ecx
push eax
lea edx, [esp + 0x7c]
push edx
mov byte [esp + 0x1dc], 0x41
call fcn.00408bb0
add esp, 0xc
push 0x486fd4
push eax
lea eax, [esp + 0x70]
push eax
mov byte [esp + 0x1dc], 0x42
call fcn.00408c70
add esp, 0xc
lea ecx, [esp + 0x64]
push ecx
push eax
lea edx, [esp + 0x74]
push edx
mov byte [esp + 0x1dc], 0x43
call fcn.00408bb0
add esp, 0xc
push 0x486fd4
push eax
lea eax, [esp + 0x64]
push eax
mov byte [esp + 0x1dc], 0x44
call fcn.00408c70
add esp, 0xc
lea ecx, [esp + 0x48]
push ecx
push eax
lea edx, [esp + 0x38]
push edx
mov byte [esp + 0x1dc], 0x45
call fcn.00408bb0
add esp, 0xc
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x1d4], 0x46
call fcn.0040a720
mov byte [esp + 0x1d0], 0x45
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4056f9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0x44
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405721
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0x43
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405749
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0x42
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405771
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0x41
mov eax, dword [esp + 0x74]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405799
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0xc
mov eax, dword [esp + 0x78]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4057c1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx + 0x21c]
cmp eax, ebx
jbe 0x4059d4
push eax
lea edx, [esp + 0x44]
push edx
call fcn.004153a0
mov esi, dword [esp + 0x40]
mov byte [esp + 0x1d8], 0x47
mov eax, dword [esp + 0x48]
mov ecx, dword [esi + 0x21c]
push eax
push ecx
lea edx, [esp + 0xa4]
push 0x486fd8
push edx
call fcn.0040a810
add esp, 0x18
push 0x486fd4
lea ecx, [esp + 0x5c]
call fcn.00408a40
mov ecx, dword [esp + 0x94]
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x60]
call fcn.00408f70
mov eax, dword [esi + 0x21c]
push eax
lea ecx, [esp + 0x38]
push 0x486dc4
push ecx
call fcn.0040a810
add esp, 0xc
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x48
je 0x405872
mov ebx, dword [esp + 0x34]
mov edi, eax
call fcn.0042f220
mov esi, eax
xor ebx, ebx
jmp 0x405874
xor esi, esi
mov edx, str.Code
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x47
call fcn.00401360
lea edx, [esp + 0xac]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x49
call fcn.00408e20
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x47
cmp dword [esp + 0x2c], 8
jb 0x4058c1
mov eax, dword [esp + 0x18]
push eax
call fcn.00438751
add esp, 4
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x4a
je 0x4058ec
mov ebx, dword [esp + 0x40]
mov edi, eax
call fcn.0042f220
mov esi, eax
xor ebx, ebx
jmp 0x4058ee
xor esi, esi
mov edx, str.Description
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x47
call fcn.00401360
lea ecx, [esp + 0xac]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x4b
call fcn.00408e20
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x47
cmp dword [esp + 0x2c], 8
jb 0x40593b
mov edx, dword [esp + 0x18]
push edx
call fcn.00438751
add esp, 4
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x4c
je 0x405968
lea ecx, [esp + 0xac]
push ecx
mov esi, eax
call fcn.0042f3c0
mov esi, eax
jmp 0x40596a
xor esi, esi
mov edx, str.SystemError
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x47
call fcn.00401360
lea edx, [esp + 0x7c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x4d
call fcn.00408e20
mov dword [eax], esi
cmp dword [esp + 0x2c], 8
jb 0x4059ac
mov eax, dword [esp + 0x18]
push eax
call fcn.00438751
add esp, 4
mov byte [esp + 0x1d0], 0xc
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4059d4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [esp + 0x58]
lea eax, [esp + 0x188]
call fcn.00401360
mov byte [esp + 0x1d0], 0x4e
mov eax, dword [esp + 0x18c]
mov edi, 8
cmp dword [esp + 0x1a0], edi
jae 0x405a08
lea eax, [esp + 0x18c]
mov esi, dword [ebp + 8]
push eax
push esi
push str.Reporting_event:__d__data_sent:__s
push ebx
push 0x11d
push str.CReportinServiceST::DoReportExec
call fcn.004347c0
add esp, 0x18
push str.Content_Type:_application_x_www_form_urlencoded_r_n
mov word [esp + 0x140], bx
mov dword [esp + 0x142], ebx
mov dword [esp + 0x146], ebx
mov dword [esp + 0x14a], ebx
mov word [esp + 0x14e], bx
mov word [esp + 0x160], bx
mov dword [esp + 0x162], ebx
mov dword [esp + 0x166], ebx
mov dword [esp + 0x16a], ebx
mov word [esp + 0x16e], bx
mov word [esp + 0x120], bx
mov dword [esp + 0x122], ebx
mov dword [esp + 0x126], ebx
mov dword [esp + 0x12a], ebx
mov word [esp + 0x12e], bx
mov word [esp + 0x110], bx
mov dword [esp + 0x112], ebx
mov dword [esp + 0x116], ebx
mov dword [esp + 0x11a], ebx
mov word [esp + 0x11e], bx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
cmp esi, ebx
mov word [esp + 0x10c], di
mov dword [esp + 0x114], eax
je 0x405b35
sub esp, 0x1c
lea ecx, [esp + 0x1a4]
mov eax, esp
mov dword [esp + 0x4c], esp
call fcn.0040dc80
lea edi, [esp + 0x138]
call fcn.004152d0
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + 0x18]
add esp, 0x1c
mov ecx, dword [ecx + 8]
lea edx, [esp + 0x10c]
push edx
mov edx, edi
push edx
lea edx, [esp + 0x164]
push edx
lea edx, [esp + 0x148]
push edx
push eax
push str._bLLLL
push ebx
push ebx
push 1
push 0x68
push ecx
call fcn.0043f529
add esp, 0x2c
call fcn.00409cf0
mov dword [esp + 0xd8], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esp + 0xd8]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xd8]
mov dword [eax], eax
mov eax, dword [esp + 0xd8]
mov dword [eax + 8], eax
mov dword [esp + 0xdc], ebx
push ebx
mov byte [esp + 0x1d4], 0x4f
call fcn.00456321
mov dword [esp + 0x170], eax
add esp, 4
lea eax, [esp + 0x16c]
push eax
mov esi, str._Y__m__dT_H:_M:_S.000Z
lea edi, [esp + 0xcc]
mov dword [esp + 0x174], edx
call fcn.0040a830
push 0x10
mov byte [esp + 0x1d4], 0x50
call fcn.00438726
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x51
je 0x405bd6
mov ecx, dword [esp + 0x38]
add ecx, 0x20
push ecx
mov edi, eax
call fcn.0042f2c0
mov esi, eax
jmp 0x405bd8
xor esi, esi
mov edx, str.target
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x50
call fcn.00401360
lea edx, [esp + 0xd4]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x52
call fcn.00408e20
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x50
cmp dword [esp + 0x2c], 8
jb 0x405c25
mov eax, dword [esp + 0x18]
push eax
call fcn.00438751
add esp, 4
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x53
je 0x405c53
mov ebx, dword [esp + 0xc8]
mov edi, eax
call fcn.0042f220
mov esi, eax
xor ebx, ebx
jmp 0x405c55
xor esi, esi
mov edx, str.eventDateTime
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x50
call fcn.00401360
lea ecx, [esp + 0xd4]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x54
call fcn.00408e20
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x50
cmp dword [esp + 0x2c], 8
jb 0x405ca2
mov edx, dword [esp + 0x18]
push edx
call fcn.00438751
add esp, 4
push 0x10
call fcn.00438726
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x55
je 0x405ccf
lea ecx, [esp + 0xd4]
push ecx
mov esi, eax
call fcn.0042f3c0
mov esi, eax
jmp 0x405cd1
xor esi, esi
mov edx, str.eventHeader
lea eax, [esp + 0x14]
mov byte [esp + 0x1d0], 0x50
call fcn.00401360
lea edx, [esp + 0x7c]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], 0x56
call fcn.00408e20
mov dword [eax], esi
mov byte [esp + 0x1d0], 0x50
cmp dword [esp + 0x2c], 8
jb 0x405d1b
mov eax, dword [esp + 0x18]
push eax
call fcn.00438751
add esp, 4
push 0x10
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], bx
call fcn.00438726
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x1d0], 0x57
je 0x405d58
lea ecx, [esp + 0x7c]
push ecx
mov esi, eax
call fcn.0042f3c0
mov dword [esp + 0x3c], eax
jmp 0x405d5c
mov dword [esp + 0x3c], ebx
mov ecx, dword [esp + 0x3c]
lea esi, [esp + 0x1a4]
mov byte [esp + 0x1d0], 0x50
call fcn.0042f600
mov byte [esp + 0x1d0], 0x58
xor eax, eax
push str.Content_Type:_application_json_r_n
mov word [esp + 0x150], bx
mov dword [esp + 0x152], eax
mov dword [esp + 0x156], eax
mov dword [esp + 0x15a], eax
mov word [esp + 0x15e], ax
mov word [esp + 0x178], bx
mov dword [esp + 0x17a], eax
mov dword [esp + 0x17e], eax
mov dword [esp + 0x182], eax
mov word [esp + 0x186], ax
mov word [esp + 0x130], bx
mov dword [esp + 0x132], eax
mov dword [esp + 0x136], eax
mov dword [esp + 0x13a], eax
mov word [esp + 0x13e], ax
mov word [esp + 0x100], bx
mov dword [esp + 0x102], eax
mov dword [esp + 0x106], eax
mov dword [esp + 0x10a], eax
mov word [esp + 0x10e], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
sub esp, 0x1c
mov dword [esp + 0x120], eax
mov ecx, esi
mov eax, esp
mov word [esp + 0x118], 8
mov dword [esp + 0x4c], esp
call fcn.0040dc80
lea edi, [esp + 0x148]
call fcn.004152d0
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + 0x1c]
add esp, 0x1c
mov ecx, dword [ecx + 0xc]
lea edx, [esp + 0xfc]
push edx
mov edx, edi
push edx
lea edx, [esp + 0x17c]
push edx
lea edx, [esp + 0x158]
push edx
push eax
push str._bLLLL
push ebx
push ebx
push 1
push 0x68
push ecx
call fcn.0043f529
add esp, 0x2c
cmp dword [esp + 0x3c], ebx
je 0x405ea1
mov esi, dword [esp + 0x3c]
mov ecx, esi
call fcn.0042f440
push esi
call fcn.00438751
add esp, 4
mov edi, dword [esp + 0x38]
call fcn.00406190
mov edi, 8
cmp dword [esp + 0x1bc], edi
jb 0x405ec8
mov eax, dword [esp + 0x1a8]
push eax
call fcn.00438751
add esp, 4
mov byte [esp + 0x1d0], 0x4f
mov eax, dword [esp + 0xc8]
mov esi, 7
add eax, 0xfffffff0
mov dword [esp + 0x1bc], esi
mov dword [esp + 0x1b8], ebx
mov word [esp + 0x1a8], bx
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405f0e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [esp + 0xd4]
mov byte [esp + 0x1d0], 0x4e
call fcn.00406130
cmp dword [esp + 0x1a0], edi
jb 0x405f3b
mov ecx, dword [esp + 0x18c]
push ecx
call fcn.00438751
add esp, 4
mov byte [esp + 0x1d0], 0xb
mov eax, dword [esp + 0x94]
add eax, 0xfffffff0
mov dword [esp + 0x1a0], esi
mov dword [esp + 0x19c], ebx
mov word [esp + 0x18c], bx
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x405f7c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0xa
mov eax, dword [esp + 0x98]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405fa7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 9
mov eax, dword [esp + 0x58]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405fcf
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 8
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405ff7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 7
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40601f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 6
mov eax, dword [esp + 0x8c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40604a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 5
mov eax, dword [esp + 0x88]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406075
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 4
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40609d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [esp + 0xac]
mov byte [esp + 0x1d0], 3
call fcn.00406130
lea eax, [esp + 0xf0]
mov byte [esp + 0x1d0], 2
call fcn.00406130
lea eax, [esp + 0x4c]
mov byte [esp + 0x1d0], 1
call fcn.00406130
lea eax, [esp + 0x9c]
mov byte [esp + 0x1d0], bl
call fcn.00406130
lea eax, [esp + 0x7c]
mov dword [esp + 0x1d0], 0xffffffff
call fcn.00406130
mov ecx, dword [esp + 0x1c8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1b0]
xor ecx, esp
call fcn.004552e7
mov esp, ebp
pop ebp
ret 4