Function at 0x402964
Capabilities:
Accept command line arguments
Contain obfuscated stackstrings

Disassembly:
push 0x710
mov eax, 0x43a2e4
call fcn.00424a40
xor ebx, ebx
mov dword [0x44f3bc], ecx
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [ebp - 0x71c]
mov dword [ebp - 0x71c], 8
push eax
mov dword [ebp - 0x718], 0x404
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
sub esp, 0xc
call fcn.00409a82
push ecx
lea ecx, [ebp - 0x314]
call fcn.004026e1
mov dword [ebp - 4], ebx
xor eax, eax
mov dword [ebp - 0x74], ebx
mov ebx, str.value
push ebx
mov dword [ebp - 0x70], 7
mov word [ebp - 0x84], ax
call fcn.0041eb18
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x84]
call fcn.0040bfcb
xor ebx, ebx
xor eax, eax
inc ebx
mov esi, str.Configuration_file__required_
mov byte [ebp - 4], bl
xor edi, edi
push esi
mov dword [ebp - 0x88], 7
mov dword [ebp - 0x8c], edi
mov word [ebp - 0x9c], ax
call fcn.0041eb18
pop ecx
push eax
push esi
lea ecx, [ebp - 0x9c]
call fcn.0040bfcb
mov byte [ebp - 4], 2
xor eax, eax
mov esi, 0x442f94
mov dword [ebp - 0xa0], 7
push esi
mov dword [ebp - 0xa4], edi
mov word [ebp - 0xb4], ax
call fcn.0041eb18
pop ecx
push eax
push esi
lea ecx, [ebp - 0xb4]
call fcn.0040bfcb
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x494]
call fcn.00404641
push edi
push ebx
lea ecx, [ebp - 0xb4]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x9c]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 7
call fcn.0040c301
xor eax, eax
mov dword [ebp - 0xd0], 7
mov esi, 0x442f98
mov dword [ebp - 0xd4], edi
push esi
mov word [ebp - 0xe4], ax
call fcn.0041eb18
pop ecx
push eax
push esi
lea ecx, [ebp - 0xe4]
call fcn.0040bfcb
mov byte [ebp - 4], 8
xor eax, eax
mov esi, 0x442fb0
mov dword [ebp - 0xb8], 7
push esi
mov dword [ebp - 0xbc], edi
mov word [ebp - 0xcc], ax
call fcn.0041eb18
pop ecx
push eax
push esi
lea ecx, [ebp - 0xcc]
call fcn.0040bfcb
lea eax, [ebp - 0xe4]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x1d0]
call fcn.00401233
mov dword [ebp - method.Argument.virtual_0], vtable.FlagArg.0
push edi
push ebx
lea ecx, [ebp - 0xcc]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0xc
call fcn.0040c301
xor eax, eax
mov dword [ebp - 0x70], 7
mov esi, str.value
mov dword [ebp - 0x74], edi
push esi
mov word [ebp - 0x84], ax
call fcn.0041eb18
pop ecx
push eax
push esi
lea ecx, [ebp - 0x84]
call fcn.0040bfcb
mov byte [ebp - 4], 0xd
xor eax, eax
mov esi, 0x442fb4
mov dword [ebp - 0x88], 7
push esi
mov dword [ebp - 0x8c], edi
mov word [ebp - 0x9c], ax
call fcn.0041eb18
pop ecx
push eax
push esi
lea ecx, [ebp - 0x9c]
call fcn.0040bfcb
mov byte [ebp - 4], 0xe
mov dword [ebp - 0xa0], 7
xor eax, eax
mov dword [ebp - 0xa4], edi
mov esi, 0x442fc4
mov word [ebp - 0xb4], ax
push esi
call fcn.0041eb18
pop ecx
push eax
push esi
lea ecx, [ebp - 0xb4]
call fcn.0040bfcb
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x38c]
call fcn.00404641
push edi
push ebx
lea ecx, [ebp - 0xb4]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x9c]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x13
call fcn.0040c301
xor eax, eax
mov dword [ebp - 0x190], 7
mov esi, str.value
mov dword [ebp - 0x194], edi
push esi
mov word [ebp - 0x1a4], ax
call fcn.0041eb18
pop ecx
push eax
push esi
lea ecx, [ebp - 0x1a4]
call fcn.0040bfcb
mov byte [ebp - 4], 0x14
xor eax, eax
mov esi, 0x442fc8
mov dword [ebp - 0xd0], 7
push esi
mov dword [ebp - 0xd4], edi
mov word [ebp - 0xe4], ax
call fcn.0041eb18
pop ecx
push eax
push esi
lea ecx, [ebp - 0xe4]
call fcn.0040bfcb
mov byte [ebp - 4], 0x15
xor eax, eax
mov esi, 0x442fe4
mov dword [ebp - 0xb8], 7
push esi
mov dword [ebp - 0xbc], edi
mov word [ebp - 0xcc], ax
call fcn.0041eb18
pop ecx
push eax
push esi
lea ecx, [ebp - 0xcc]
call fcn.0040bfcb
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x268]
call fcn.00401233
lea eax, [ebp - 0x1a4]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x23c]
mov dword [ebp - 0x268], 0x443390
call fcn.00403da4
mov byte [ebp - 0x224], 0
push edi
push ebx
lea ecx, [ebp - 0xcc]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0xe4]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x1b
call fcn.0040c301
xor eax, eax
mov dword [ebp - 0x70], 7
mov esi, str.value
mov dword [ebp - 0x74], edi
push esi
mov word [ebp - 0x84], ax
call fcn.0041eb18
pop ecx
push eax
push esi
lea ecx, [ebp - 0x84]
call fcn.0040bfcb
mov byte [ebp - 4], 0x1c
xor eax, eax
mov esi, 0x442fe8
mov dword [ebp - 0x88], 7
push esi
mov dword [ebp - 0x8c], edi
mov word [ebp - 0x9c], ax
call fcn.0041eb18
pop ecx
push eax
push esi
lea ecx, [ebp - 0x9c]
call fcn.0040bfcb
mov byte [ebp - 4], 0x1d
xor eax, eax
mov esi, 0x442ff0
mov dword [ebp - 0xa0], 7
push esi
mov dword [ebp - 0xa4], edi
mov word [ebp - 0xb4], ax
call fcn.0041eb18
pop ecx
push eax
push esi
lea ecx, [ebp - 0xb4]
call fcn.0040bfcb
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x404]
call fcn.00404641
push edi
push ebx
lea ecx, [ebp - 0xb4]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x9c]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x22
call fcn.0040c301
xor eax, eax
mov dword [ebp - 0xd0], 7
mov esi, 0x442ff4
mov dword [ebp - 0xd4], edi
push esi
mov word [ebp - 0xe4], ax
call fcn.0041eb18
pop ecx
push eax
push esi
lea ecx, [ebp - 0xe4]
call fcn.0040bfcb
mov byte [ebp - 4], 0x23
xor eax, eax
mov esi, 0x443018
mov dword [ebp - 0xb8], 7
push esi
mov dword [ebp - 0xbc], edi
mov word [ebp - 0xcc], ax
call fcn.0041eb18
pop ecx
push eax
push esi
lea ecx, [ebp - 0xcc]
call fcn.0040bfcb
lea eax, [ebp - 0xe4]
mov byte [ebp - 4], 0x24
push eax
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x294]
call fcn.00401233
mov dword [ebp - method.Argument.virtual_0], vtable.FlagArg.0
push edi
push ebx
lea ecx, [ebp - 0xcc]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0x27
call fcn.0040c301
xor eax, eax
mov dword [ebp - 0x88], 7
mov esi, str.Debug_to_Console
mov dword [ebp - 0x8c], edi
push esi
mov word [ebp - 0x9c], ax
call fcn.0041eb18
pop ecx
push eax
push esi
lea ecx, [ebp - 0x9c]
call fcn.0040bfcb
mov byte [ebp - 4], 0x28
xor eax, eax
mov dword [ebp - 0xa0], 7
mov dword [ebp - 0xa4], edi
mov word [ebp - 0xb4], ax
mov esi, 0x443044
push esi
call fcn.0041eb18
pop ecx
push eax
push esi
lea ecx, [ebp - 0xb4]
call fcn.0040bfcb
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x29
push eax
lea eax, [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.00401233
mov dword [ebp - method.Argument.virtual_0], vtable.FlagArg.0
push edi
push ebx
lea ecx, [ebp - 0xb4]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x2c
call fcn.0040c301
and dword [ebp - 0x74], edi
lea ecx, [ebp - 0x84]
xor eax, eax
mov dword [ebp - 0x70], 7
push eax
mov esi, 0x443918
mov word [ebp - 0x84], ax
push esi
call fcn.0040bfcb
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 0x2d
push eax
lea ecx, [ebp - 0x38c]
call fcn.00404699
push edi
push ebx
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x2c
call fcn.0040c301
xor eax, eax
mov byte [ebp - 0x224], bl
xor ecx, ecx
mov dword [ebp - 0x21c], eax
push eax
mov word [ebp - 0x84], cx
lea ecx, [ebp - 0x84]
push esi
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x70], 7
mov dword [ebp - 0x74], eax
call fcn.0040bfcb
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0x404]
call fcn.00404699
push edi
push ebx
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x2c
call fcn.0040c301
lea eax, [ebp - 0x494]
push eax
lea ecx, [ebp - 0x314]
call fcn.004016f4
lea eax, [ebp - 0x1d0]
push eax
lea ecx, [ebp - 0x314]
call fcn.004016f4
lea eax, [ebp - 0x38c]
push eax
lea ecx, [ebp - 0x314]
call fcn.004016f4
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x314]
call fcn.004016f4
lea eax, [ebp - 0x404]
push eax
lea ecx, [ebp - 0x314]
call fcn.004016f4
lea eax, [ebp - 0x294]
push eax
lea ecx, [ebp - 0x314]
call fcn.004016f4
lea eax, [ebp - 0x2c0]
push eax
lea ecx, [ebp - 0x314]
call fcn.004016f4
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0x84]
call fcn.0040c06b
push ebx
push ecx
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 0x2f
push eax
lea ecx, [ebp - 0x314]
call fcn.00401a4a
push edi
push ebx
lea ecx, [ebp - 0x84]
call fcn.0040c301
push 7
pop edx
xor eax, eax
mov dword [ebp - 0x148], edx
xor ecx, ecx
mov dword [ebp - 0x14c], eax
mov word [ebp - 0x15c], cx
mov dword [ebp - 0x130], edx
mov dword [ebp - 0x134], eax
mov word [ebp - 0x144], cx
mov dword [ebp - 0x100], edx
mov dword [ebp - 0x104], eax
mov word [ebp - 0x114], cx
mov dword [ebp - 0x160], edx
mov dword [ebp - 0x164], eax
mov word [ebp - 0x174], cx
mov dword [ebp - 0x178], edx
mov dword [ebp - 0x17c], eax
mov word [ebp - 0x18c], ax
mov eax, dword [0x44e4e4]
push str.BugSplatRc.dll
mov dword [ebp - 0x714], eax
mov dword [ebp - 0x71c], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
mov dword [ebp - 0x718], esi
test esi, esi
je 0x40317d
push esi
push 0x44e4e4
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
mov byte [ebp - 4], 0x35
test esi, esi
jne 0x403270
push ecx
mov eax, esp
xor edi, edi
push ecx
mov dword [eax], edi
mov eax, esp
mov dword [eax], str.BSSNDRPT:_BugSplatRC_resource_DLL_not_found
call fcn.00409927
pop ecx
pop ecx
push dword [ebp - 0x714]
push 0x44e4e4
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push edi
push ebx
lea ecx, [ebp - 0x18c]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x174]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x114]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x144]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x15c]
call fcn.0040c301
lea ecx, [ebp - 0x2c0]
call fcn.0040129c
lea ecx, [ebp - 0x294]
call fcn.0040129c
lea ecx, [ebp - 0x404]
call fcn.00403d5e
push edi
push ebx
lea ecx, [ebp - 0x23c]
call fcn.0040c301
lea ecx, [ebp - 0x268]
call fcn.0040129c
lea ecx, [ebp - 0x38c]
call fcn.00403d5e
lea ecx, [ebp - 0x1d0]
call fcn.0040129c
lea ecx, [ebp - 0x494]
call fcn.00403d5e
lea ecx, [ebp - 0x2ec]
call fcn.0040129c
lea ecx, [ebp - 0x314]
call fcn.0040287d
xor eax, eax
jmp 0x403d45
mov byte [ebp - 4], 0x36
test byte [ebp - 0x490], bl
jne 0x403311
test byte [ebp - 0x1cc], bl
jne 0x4032f8
and dword [ebp - 0xec], 0
lea ecx, [ebp - 0xfc]
xor eax, eax
mov dword [ebp - 0xe8], 7
push eax
push 0x443918
mov word [ebp - 0xfc], ax
call fcn.0040bfcb
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 0x37
push eax
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x314]
call fcn.00401766
push eax
mov byte [ebp - 4], 0x38
call fcn.00402825
xor edi, edi
lea ecx, [ebp - 0x12c]
push edi
push ebx
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0xfc]
call fcn.0040c301
jmp 0x4032fa
xor edi, edi
push dword [ebp - 0x714]
push 0x44e4e4
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
push esi
jmp 0x4031b2
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebp - 0x6c]
call fcn.00403da4
mov byte [ebp - 4], 0x39
lea edx, [ebp - 0x6c]
cmp dword [ebp - 0x58], 8
lea ecx, [ebp - 0x12c]
push str.Vendor
cmovae edx, dword [ebp - 0x6c]
call fcn.004028fa
pop ecx
push eax
lea ecx, [ebp - 0x15c]
call fcn.00403dcc
xor edi, edi
lea ecx, [ebp - 0x12c]
push edi
push ebx
call fcn.0040c301
cmp dword [ebp - 0x58], 8
lea edx, [ebp - 0x6c]
push str.Application
cmovae edx, dword [ebp - 0x6c]
lea ecx, [ebp - 0x12c]
call fcn.004028fa
pop ecx
push eax
lea ecx, [ebp - 0x144]
call fcn.00403dcc
push edi
push ebx
lea ecx, [ebp - 0x12c]
call fcn.0040c301
cmp dword [ebp - 0x58], 8
lea edx, [ebp - 0x6c]
push str.Version
cmovae edx, dword [ebp - 0x6c]
lea ecx, [ebp - 0x12c]
call fcn.004028fa
pop ecx
push eax
lea ecx, [ebp - 0x114]
call fcn.00403dcc
push edi
push ebx
lea ecx, [ebp - 0x12c]
call fcn.0040c301
cmp dword [ebp - 0x58], 8
lea edx, [ebp - 0x6c]
push str.CrashType
cmovae edx, dword [ebp - 0x6c]
lea ecx, [ebp - 0x12c]
call fcn.004028fa
pop ecx
push eax
lea ecx, [ebp - 0x174]
call fcn.00403dcc
push edi
push ebx
lea ecx, [ebp - 0x12c]
call fcn.0040c301
cmp dword [ebp - 0x58], 8
lea edx, [ebp - 0x6c]
push str.MiniDump
cmovae edx, dword [ebp - 0x6c]
lea ecx, [ebp - 0x12c]
call fcn.004028fa
pop ecx
push eax
lea ecx, [ebp - 0x18c]
call fcn.00403dcc
push edi
push ebx
lea ecx, [ebp - 0x12c]
call fcn.0040c301
cmp dword [ebp - 0x14c], edi
je 0x403b62
cmp dword [ebp - 0x134], edi
je 0x403b62
cmp dword [ebp - 0x104], edi
je 0x403b62
cmp dword [ebp - 0x160], 8
lea esi, [ebp - 0x174]
lea edx, [ebp - 0x114]
cmovae esi, dword [ebp - 0x174]
lea ecx, [ebp - 0x144]
cmp dword [ebp - 0x100], 8
lea eax, [ebp - 0x15c]
push esi
cmovae edx, dword [ebp - 0x114]
cmp dword [ebp - 0x130], 8
push edx
cmovae ecx, dword [ebp - 0x144]
cmp dword [ebp - 0x148], 8
push ecx
cmovae eax, dword [ebp - 0x15c]
lea ecx, [ebp - 0x70c]
push eax
call fcn.0040c5de
mov byte [ebp - 4], 0x3c
cmp dword [ebp - 0x17c], edi
jbe 0x4034de
cmp dword [ebp - 0x178], 8
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0x70c]
cmovae eax, dword [ebp - 0x18c]
push eax
call fcn.0040c93e
test byte [ebp - 0x388], bl
je 0x403506
cmp dword [ebp - 0x318], 8
lea eax, [ebp - 0x32c]
lea ecx, [ebp - 0x70c]
cmovae eax, dword [ebp - 0x32c]
push eax
call fcn.0040c999
test byte [ebp - 0x1cc], bl
lea edx, [ebp - 0x6c]
movzx eax, byte [ebp - 0x6b2]
lea ecx, [ebp - 0xb4]
cmovne eax, ebx
test byte [ebp - 0x290], bl
mov byte [ebp - 0x6b2], al
movzx eax, byte [ebp - 0x6b1]
cmovne eax, ebx
test byte [ebp - 0x2bc], bl
mov byte [ebp - 0x6b1], al
movzx eax, byte [ebp - 0x6b0]
cmovne eax, ebx
cmp dword [ebp - 0x58], 8
push str.DotNetFrameworkFileCount
cmovae edx, dword [ebp - 0x6c]
mov byte [ebp - 0x6b0], al
call fcn.004028fa
pop ecx
mov byte [ebp - 4], 0x3d
cmp dword [ebp - 0xa4], 0
jbe 0x4035b4
cmp dword [ebp - 0xa0], 8
lea eax, [ebp - 0xb4]
lea ecx, [ebp - 0x710]
cmovae eax, dword [ebp - 0xb4]
push eax
call fcn.004098cb
push dword [ebp - 0x710]
call fcn.0041f670
pop ecx
push eax
lea ecx, [ebp - 0x70c]
call fcn.0040c9f4
lea ecx, [ebp - 0x710]
call fcn.004095d5
cmp dword [ebp - 0x58], 8
lea edx, [ebp - 0x6c]
push str.Description
cmovae edx, dword [ebp - 0x6c]
lea ecx, [ebp - 0x9c]
call fcn.004028fa
pop ecx
mov byte [ebp - 4], 0x3e
cmp dword [ebp - 0x8c], 0
jbe 0x4035fd
cmp dword [ebp - 0x88], 8
lea eax, [ebp - 0x9c]
lea ecx, [ebp - 0x70c]
cmovae eax, dword [ebp - 0x9c]
push eax
call fcn.0040c7d2
cmp dword [ebp - 0x58], 8
lea edx, [ebp - 0x6c]
push str.UserZipPath
cmovae edx, dword [ebp - 0x6c]
lea ecx, [ebp - 0x84]
call fcn.004028fa
pop ecx
mov byte [ebp - 4], 0x3f
cmp dword [ebp - 0x74], 0
jbe 0x403640
cmp dword [ebp - 0x70], 8
lea eax, [ebp - 0x84]
lea ecx, [ebp - 0x70c]
cmovae eax, dword [ebp - 0x84]
push eax
call fcn.0040cae8
cmp dword [ebp - 0x58], 8
lea edx, [ebp - 0x6c]
push str.ResourceDllPath
cmovae edx, dword [ebp - 0x6c]
lea ecx, [ebp - 0xcc]
call fcn.004028fa
pop ecx
mov byte [ebp - 4], 0x40
cmp dword [ebp - 0xbc], 0
jbe 0x4036b5
cmp dword [ebp - 0xb8], 8
lea eax, [ebp - 0xcc]
cmovae eax, dword [ebp - 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
mov dword [ebp - 0x718], esi
test esi, esi
je 0x40369e
push esi
push 0x44e4e4
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
jmp 0x4036bb
push ecx
mov eax, esp
push ecx
mov dword [eax], edi
mov eax, esp
mov dword [eax], str.BSSNDRPT:_resource_DLL_not_found
call fcn.00409927
pop ecx
pop ecx
jmp 0x4036bb
mov esi, dword [ebp - 0x718]
cmp dword [ebp - 0x58], 8
lea edx, [ebp - 0x6c]
push str.User
cmovae edx, dword [ebp - 0x6c]
lea ecx, [ebp - 0xe4]
call fcn.004028fa
pop ecx
mov byte [ebp - 4], 0x41
cmp dword [ebp - 0xd4], 0
jbe 0x403704
cmp dword [ebp - 0xd0], 8
lea eax, [ebp - 0xe4]
lea ecx, [ebp - 0x70c]
cmovae eax, dword [ebp - 0xe4]
push eax
call fcn.0040c82d
cmp dword [ebp - 0x58], 8
lea edx, [ebp - 0x6c]
push str.Email
cmovae edx, dword [ebp - 0x6c]
lea ecx, [ebp - 0x1a4]
call fcn.004028fa
pop ecx
mov byte [ebp - 4], 0x42
cmp dword [ebp - 0x194], 0
jbe 0x40374d
cmp dword [ebp - 0x190], 8
lea eax, [ebp - 0x1a4]
lea ecx, [ebp - 0x70c]
cmovae eax, dword [ebp - 0x1a4]
push eax
call fcn.0040c888
cmp dword [ebp - 0x58], 8
lea edx, [ebp - 0x6c]
push str.UserDescription
cmovae edx, dword [ebp - 0x6c]
lea ecx, [ebp - 0x218]
call fcn.004028fa
pop ecx
mov byte [ebp - 4], 0x43
cmp dword [ebp - 0x208], 0
jbe 0x403796
cmp dword [ebp - 0x204], 8
lea eax, [ebp - 0x218]
lea ecx, [ebp - 0x70c]
cmovae eax, dword [ebp - 0x218]
push eax
call fcn.0040c8e3
cmp dword [ebp - 0x58], 8
lea edx, [ebp - 0x6c]
push str.DotNet
cmovae edx, dword [ebp - 0x6c]
lea ecx, [ebp - 0x200]
call fcn.004028fa
pop ecx
mov byte [ebp - 4], 0x44
cmp dword [ebp - 0x1f0], 0
jbe 0x4037df
cmp dword [ebp - 0x1ec], 8
lea eax, [ebp - 0x200]
lea ecx, [ebp - 0x70c]
cmovae eax, dword [ebp - 0x200]
push eax
call fcn.0040c999
cmp dword [ebp - 0x58], 8
lea edx, [ebp - 0x6c]
push 0x44323c
cmovae edx, dword [ebp - 0x6c]
lea ecx, [ebp - 0x1e8]
call fcn.004028fa
pop ecx
mov byte [ebp - 4], 0x45
cmp dword [ebp - 0x1d8], 0
jbe 0x403828
cmp dword [ebp - 0x1d4], 8
lea eax, [ebp - 0x1e8]
lea ecx, [ebp - 0x70c]
cmovae eax, dword [ebp - 0x1e8]
push eax
call fcn.0040ca8d
mov eax, edi
mov dword [ebp - 0x710], edi
cmp eax, 0x3f
jge 0x403885
push eax
push str.AdditionalFile_d
lea eax, [ebp - 0x54]
push 0x20
push eax
call fcn.0041f68d
cmp dword [ebp - 0x58], 8
lea eax, [ebp - 0x54]
lea edx, [ebp - 0x6c]
cmovae edx, dword [ebp - 0x6c]
lea ecx, [ebp - 0xfc]
push eax
call fcn.004028fa
add esp, 0x14
mov byte [ebp - 4], 0x46
cmp dword [ebp - 0xec], 0
jne 0x403aa7
push edi
push ebx
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0x45
call fcn.0040c301
test byte [ebp - 0x400], bl
je 0x403aea
lea eax, [ebp - 0x3a4]
push eax
lea ecx, [ebp - 0xfc]
call fcn.00403da4
mov byte [ebp - 4], 0x47
lea eax, [ebp - 0xfc]
cmp dword [ebp - 0xe8], 8
lea ecx, [ebp - 0x6cc]
cmovae eax, dword [ebp - 0xfc]
push eax
call fcn.00409668
cmp dword [ebp - 0x148], 8
lea eax, [ebp - 0x15c]
lea ecx, [ebp - 0x708]
cmovae eax, dword [ebp - 0x15c]
push eax
call fcn.00409668
cmp dword [ebp - 0x130], 8
lea eax, [ebp - 0x144]
lea ecx, [ebp - 0x704]
cmovae eax, dword [ebp - 0x144]
push eax
call fcn.00409668
cmp dword [ebp - 0x100], 8
lea eax, [ebp - 0x114]
lea ecx, [ebp - 0x700]
cmovae eax, dword [ebp - 0x114]
push eax
call fcn.00409668
cmp dword [ebp - 0x160], 8
lea eax, [ebp - 0x174]
lea ecx, [ebp - 0x6fc]
cmovae eax, dword [ebp - 0x174]
push eax
call fcn.00409668
lea ecx, [ebp - 0x70c]
mov byte [ebp - 0x6b2], bl
call fcn.0040dd97
push edi
push ebx
lea ecx, [ebp - 0xfc]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x1e8]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x200]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x218]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x1a4]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0xe4]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0xcc]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x84]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x9c]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0xb4]
call fcn.0040c301
lea ecx, [ebp - 0x70c]
call fcn.0040c72d
push edi
push ebx
lea ecx, [ebp - 0x6c]
call fcn.0040c301
push dword [ebp - 0x714]
push 0x44e4e4
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push edi
push ebx
lea ecx, [ebp - 0x18c]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x174]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x114]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x144]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x15c]
call fcn.0040c301
lea ecx, [ebp - 0x2c0]
call fcn.0040129c
lea ecx, [ebp - 0x294]
call fcn.0040129c
lea ecx, [ebp - 0x404]
call fcn.00403d5e
push edi
push ebx
lea ecx, [ebp - 0x23c]
call fcn.0040c301
lea ecx, [ebp - 0x268]
call fcn.0040129c
lea ecx, [ebp - 0x38c]
call fcn.00403d5e
lea ecx, [ebp - 0x1d0]
call fcn.0040129c
lea ecx, [ebp - 0x494]
call fcn.00403d5e
jmp 0x403d2d
cmp dword [ebp - 0xe8], 8
lea eax, [ebp - 0xfc]
lea ecx, [ebp - 0x70c]
cmovae eax, dword [ebp - 0xfc]
push eax
call fcn.0040ca01
push edi
push ebx
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0x45
call fcn.0040c301
mov eax, dword [ebp - 0x710]
inc eax
mov dword [ebp - 0x710], eax
jmp 0x403830
cmp byte [ebp - 0x6b0], 0
jne 0x403b0e
cmp byte [ebp - 0x6b1], 0
jne 0x403b0e
cmp dword [ebp - 0x58], 8
lea eax, [ebp - 0x6c]
cmovae eax, dword [ebp - 0x6c]
push eax
call fcn.0041f6d7
pop ecx
lea ecx, [ebp - 0x70c]
call fcn.0040cb47
test al, al
je 0x403b28
lea ecx, [ebp - 0x70c]
call fcn.0040d285
test byte [ebp - 0x264], bl
je 0x403965
mov eax, edi
mov dword [ebp - 0x710], edi
cmp eax, dword [ebp - 0x21c]
jge 0x403965
lea ecx, [ebp - 0x70c]
call fcn.0040d285
mov eax, dword [ebp - 0x710]
inc eax
mov dword [ebp - 0x710], eax
jmp 0x403b3c
test byte [ebp - 0x1cc], bl
jne 0x403bd4
xor eax, eax
mov dword [ebp - 0xe8], 7
push 0x443918
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0xec], edi
mov word [ebp - 0xfc], ax
call fcn.0040c044
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 0x3a
push eax
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x314]
call fcn.00401766
push eax
mov byte [ebp - 4], 0x3b
call fcn.00402825
push edi
push ebx
lea ecx, [ebp - 0x12c]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0xfc]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x6c]
call fcn.0040c301
push dword [ebp - 0x714]
push 0x44e4e4
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push edi
push ebx
lea ecx, [ebp - 0x18c]
call fcn.0040c301
jmp 0x403c9d
push edi
push ebx
lea ecx, [ebp - 0x174]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x114]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x144]
call fcn.0040c301
push edi
push ebx
lea ecx, [ebp - 0x15c]
call fcn.0040c301
lea ecx, [ebp - 0x2c0]
call fcn.0040129c
lea ecx, [ebp - 0x294]
call fcn.0040129c
lea ecx, [ebp - 0x404]
call fcn.00403d5e
push edi
push ebx
lea ecx, [ebp - 0x23c]
call fcn.0040c301
lea ecx, [ebp - 0x268]
call fcn.0040129c
lea ecx, [ebp - 0x38c]
call fcn.00403d5e
lea ecx, [ebp - 0x1d0]
call fcn.0040129c
lea ecx, [ebp - 0x494]
call fcn.00403d5e
mov ebx, edi
lea ecx, [ebp - 0x2ec]
call fcn.0040129c
lea ecx, [ebp - 0x314]
call fcn.0040287d
mov eax, ebx
call fcn.00424992
ret