Function at 0x538530
Capabilities:
Connect pipe
Create pipe
Read file on windows
Reference cloudflare dns server

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59f7f5
mov eax, dword fs:[0]
push eax
mov eax, 0x1814
call fcn.0055ef00
mov eax, dword [0x615720]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1354], ecx
mov eax, dword [ebp - 0x1354]
cmp dword [eax + 0x21c], 0xffffffff
je 0x538589
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x1354]
mov edx, dword [ecx + 0x21c]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0x1000
push 0
lea eax, [ebp - 0x1010]
push eax
call fcn.0055ebc0
add esp, 0xc
mov dword [ebp - 0x1018], 0
push 0
push 0
push 0x1000
push 0x1000
push 0xff
push 6
push 0x40000001
push str..pipeCdmHelperPipe
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov dword [ebp - 0x135c], eax
cmp dword [ebp - 0x135c], 0xffffffff
jne 0x5385e2
jmp 0x53a137
push 0
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x1360], eax
cmp dword [ebp - 0x1360], 0xffffffff
jne 0x538604
jmp 0x53a137
push 0x14
push 0
lea ecx, [ebp - 0x1350]
push ecx
call fcn.0055ebc0
add esp, 0xc
mov edx, dword [ebp - 0x1360]
mov dword [ebp - 0x1340], edx
lea eax, [ebp - 0x1350]
push eax
mov ecx, dword [ebp - 0x135c]
push ecx
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
mov dword [ebp - 0x1420], eax
cmp dword [ebp - 0x1420], 0
je 0x538665
mov edx, dword [ebp - 0x1360]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x135c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x53a137
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1424], eax
mov ecx, dword [ebp - 0x1424]
mov dword [ebp - 0x1408], ecx
cmp dword [ebp - 0x1408], 0x3e5
je 0x53868b
jmp 0x53868d
jmp 0x5386a7
mov edx, dword [ebp - 0x1360]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x135c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x493e0
mov ecx, dword [ebp - 0x1360]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x1410], eax
mov edx, dword [ebp - 0x1410]
mov dword [ebp - 0x1418], edx
cmp dword [ebp - 0x1418], 0
je 0x5386d9
jmp 0x53a0ee
mov eax, dword [ebp - 0x1354]
mov byte [eax + 0x2b8], 1
mov ecx, dword [ebp - 0x1360]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
lea edx, [ebp - 0x1018]
push edx
push 0x1000
lea eax, [ebp - 0x1010]
push eax
mov ecx, dword [ebp - 0x135c]
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x53a0df
lea edx, [ebp - 0x1010]
push edx
lea ecx, [ebp - 0x1060]
call fcn.004e8fb0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1060]
call fcn.004e92b0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15a8], esp
push eax
push ecx
call fcn.004e1e00
add esp, 8
mov dword [ebp - 0x1594], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531db0
lea ecx, [ebp - 0x1011]
call fcn.004e1430
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10a8]
call fcn.004e8f60
mov byte [ebp - 4], 2
lea edx, [ebp - 0x10a8]
push edx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x159c], esp
push 0x5a96b4
call fcn.004e8fb0
mov dword [ebp - 0x1428], eax
mov eax, dword [ebp - 0x1428]
mov dword [ebp - 0x15a4], eax
mov byte [ebp - 4], 3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15ac], esp
lea edx, [ebp - 0x1060]
push edx
call fcn.004e8f30
mov dword [ebp - 0x15b4], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1011]
call fcn.004f9420
mov byte [ebp - 0x1361], al
movzx eax, byte [ebp - 0x1361]
test eax, eax
je 0x538872
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15bc], esp
lea edx, [ebp - 0x10a8]
push edx
call fcn.004e8f30
mov dword [ebp - 0x15c4], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00532e00
mov dword [ebp - 0x1430], eax
cmp dword [ebp - 0x1430], 0xc
jne 0x538872
lea eax, [ebp - 0x1060]
push eax
mov ecx, dword [ebp - 0x1354]
call fcn.00536520
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10a8]
call fcn.004e90c0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1011]
call fcn.004e0610
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1060]
call fcn.004e90c0
jmp 0x53a0df
lea ecx, [ebp - 0x133c]
call fcn.0054e230
mov byte [ebp - 4], 4
push 0x5a9704
lea ecx, [ebp - 0x1078]
call fcn.004e8fb0
mov byte [ebp - 4], 5
push str.1.0.0.1
lea ecx, [ebp - 0x1090]
call fcn.004e8fb0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x133c]
push ecx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1628], esp
lea edx, [ebp - 0x1060]
push edx
call fcn.004e8f30
mov dword [ebp - 0x15fc], eax
lea ecx, [ebp - 0x1011]
call fcn.004fb9b0
mov byte [ebp - 0x1362], al
movzx eax, byte [ebp - 0x1362]
test eax, eax
je 0x53a07b
push 0x5a98a0
lea ecx, [ebp - 0x12f4]
call fcn.004e93b0
test eax, eax
jne 0x53899c
mov ecx, dword [ebp - 0x1354]
mov dword [ecx + 0x2bc], 0
push 0x5a98cc
mov ecx, dword [ebp - 0x1354]
add ecx, 0x288
call fcn.004e9a20
push str.activex
lea ecx, [ebp - 0x1078]
call fcn.004e9110
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1568], esp
push 0x5a99b0
call fcn.004e8fb0
mov dword [ebp - 0x1458], eax
lea edx, [ebp - 0x1640]
push edx
mov ecx, dword [ebp - 0x1354]
call fcn.00531070
mov dword [ebp - 0x1438], eax
mov eax, dword [ebp - 0x1438]
mov dword [ebp - 0x1440], eax
mov ecx, dword [ebp - 0x1440]
push ecx
lea ecx, [ebp - 0x1090]
call fcn.004e9080
lea ecx, [ebp - 0x1640]
call fcn.004e90c0
jmp 0x538af5
push 0x5a9a04
lea ecx, [ebp - 0x12f4]
call fcn.004e93b0
test eax, eax
jne 0x538a4b
mov edx, dword [ebp - 0x1354]
mov dword [edx + 0x2bc], 1
push 0x5a9a08
mov ecx, dword [ebp - 0x1354]
add ecx, 0x288
call fcn.004e9a20
push str.plugin
lea ecx, [ebp - 0x1078]
call fcn.004e9110
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15f4], esp
push 0x5a9ad8
call fcn.004e8fb0
mov dword [ebp - 0x1460], eax
lea eax, [ebp - 0x17f0]
push eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531070
mov dword [ebp - 0x1448], eax
mov ecx, dword [ebp - 0x1448]
mov dword [ebp - 0x13e4], ecx
mov edx, dword [ebp - 0x13e4]
push edx
lea ecx, [ebp - 0x1090]
call fcn.004e9080
lea ecx, [ebp - 0x17f0]
call fcn.004e90c0
jmp 0x538af5
push 0x5a9b4c
lea ecx, [ebp - 0x12f4]
call fcn.004e93b0
test eax, eax
jne 0x538af5
mov eax, dword [ebp - 0x1354]
mov dword [eax + 0x2bc], 2
push 0x5a9b94
mov ecx, dword [ebp - 0x1354]
add ecx, 0x288
call fcn.004e9a20
push str.ppapi
lea ecx, [ebp - 0x1078]
call fcn.004e9110
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1570], esp
push 0x5a9c80
call fcn.004e8fb0
mov dword [ebp - 0x1468], eax
lea ecx, [ebp - 0x1820]
push ecx
mov ecx, dword [ebp - 0x1354]
call fcn.00531070
mov dword [ebp - 0x1384], eax
mov edx, dword [ebp - 0x1384]
mov dword [ebp - 0x143c], edx
mov eax, dword [ebp - 0x143c]
push eax
lea ecx, [ebp - 0x1090]
call fcn.004e9080
lea ecx, [ebp - 0x1820]
call fcn.004e90c0
mov ecx, dword [ebp - 0x1354]
add ecx, 0x288
call fcn.004e9c70
push eax
lea ecx, [ebp - 0x1688]
push ecx
call fcn.004e3950
add esp, 4
mov dword [ebp - 0x138c], eax
mov edx, dword [ebp - 0x138c]
mov dword [ebp - 0x13ec], edx
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x13ec]
call fcn.004e9c70
push eax
push 0x5a9c98
lea eax, [ebp - 0x1748]
push eax
call fcn.004e2580
add esp, 0x10
mov dword [ebp - 0x1394], eax
mov ecx, dword [ebp - 0x1394]
push ecx
mov ecx, dword [ebp - 0x1354]
add ecx, 0x270
call fcn.004e9990
lea ecx, [ebp - 0x1748]
call fcn.004e99d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1688]
call fcn.004e99d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x161c], esp
lea edx, [ebp - 0x130c]
push edx
call fcn.004e8f30
mov dword [ebp - 0x1470], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00532e00
mov dword [ebp - 0x141c], eax
mov eax, dword [ebp - 0x1354]
mov ecx, dword [ebp - 0x141c]
mov dword [eax + 0x2c0], ecx
mov edx, dword [ebp - 0x1354]
mov eax, dword [edx + 0x2c0]
mov dword [ebp - 0x1368], eax
mov ecx, dword [ebp - 0x1368]
sub ecx, 1
mov dword [ebp - 0x1368], ecx
cmp dword [ebp - 0x1368], 0x64
ja case.0x538bff.1
mov edx, dword [ebp - 0x1368]
movzx eax, byte [edx + 0x53a198]
jmp dword [eax*4 + 0x53a150]
mov ecx, dword [ebp - 0x1354]
mov byte [ecx + 0x2b8], 1
push 0x5aa1dc
lea edx, [ebp - 0x1294]
push edx
call fcn.004f4270
add esp, 8
movzx eax, al
test eax, eax
je 0x538cd7
lea ecx, [ebp - 0x12dc]
call fcn.004e92b0
push eax
lea ecx, [ebp - 0x16b8]
push ecx
call fcn.004e1e00
add esp, 8
mov dword [ebp - 0x139c], eax
mov edx, dword [ebp - 0x139c]
mov dword [ebp - 0x13f4], edx
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x13f4]
call fcn.004e9c70
push eax
push 0x5aa230
push 0x5aa28c
lea eax, [ebp - 0x1808]
push eax
call fcn.004e2580
add esp, 0x10
mov dword [ebp - 0x13a4], eax
mov ecx, dword [ebp - 0x13a4]
push ecx
mov ecx, dword [ebp - 0x1354]
add ecx, 0x2a0
call fcn.004e9990
lea ecx, [ebp - 0x1808]
call fcn.004e99d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x16b8]
call fcn.004e99d0
push 0
push 0
push 0x591
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00550a90
jmp case.0x538bff.1
mov edx, dword [ebp - 0x1354]
mov byte [edx + 0x2b8], 1
push 0x5aa948
lea eax, [ebp - 0x12ac]
push eax
call fcn.004f4270
add esp, 8
movzx ecx, al
test ecx, ecx
jne 0x538d23
push 0x5aa964
lea edx, [ebp - 0x12ac]
push edx
call fcn.004f4270
add esp, 8
movzx eax, al
test eax, eax
je 0x538e32
push 1
mov ecx, dword [ebp - 0x1354]
call fcn.00540770
movzx ecx, al
test ecx, ecx
je 0x538d62
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1578], esp
push 0x5aaa38
call fcn.004e98c0
mov dword [ebp - 0x1478], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531cf0
jmp case.0x538bff.1
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15cc], esp
push str.flash_player_update_success__install_offer
call fcn.004e98c0
mov dword [ebp - 0x1480], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531db0
lea ecx, [ebp - 0x12dc]
call fcn.004e92b0
push eax
lea edx, [ebp - 0x16e8]
push edx
call fcn.004e1e00
add esp, 8
mov dword [ebp - 0x1434], eax
mov eax, dword [ebp - 0x1434]
mov dword [ebp - 0x13ac], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x13ac]
call fcn.004e9c70
push eax
push 0x5aac30
push 0x5aaca0
lea ecx, [ebp - 0x1778]
push ecx
call fcn.004e2580
add esp, 0x10
mov dword [ebp - 0x13fc], eax
mov edx, dword [ebp - 0x13fc]
push edx
mov ecx, dword [ebp - 0x1354]
add ecx, 0x2a0
call fcn.004e9990
lea ecx, [ebp - 0x1778]
call fcn.004e99d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x16e8]
call fcn.004e99d0
push 0
push 0
push 0x591
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00550a90
jmp 0x538ed7
lea ecx, [ebp - 0x12dc]
call fcn.004e92b0
push eax
lea eax, [ebp - 0x1718]
push eax
call fcn.004e1e00
add esp, 8
mov dword [ebp - 0x13b4], eax
mov ecx, dword [ebp - 0x13b4]
mov dword [ebp - 0x1378], ecx
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x1378]
call fcn.004e9c70
push eax
push str.___typeshowoffers___fptrue___hsfalse___updatetype
push 0x5aad7c
lea edx, [ebp - 0x17d8]
push edx
call fcn.004e2580
add esp, 0x10
mov dword [ebp - 0x13bc], eax
mov eax, dword [ebp - 0x13bc]
push eax
mov ecx, dword [ebp - 0x1354]
add ecx, 0x2a0
call fcn.004e9990
lea ecx, [ebp - 0x17d8]
call fcn.004e99d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1718]
call fcn.004e99d0
push 0
push 0
push 0x591
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00550a90
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1580], esp
push 0x5aae4c
call fcn.004e98c0
mov dword [ebp - 0x1488], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531cf0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15d0], esp
push 0x5aae7c
call fcn.004e98c0
mov dword [ebp - 0x1490], eax
mov ecx, dword [ebp - 0x1354]
call fcn.005316d0
jmp case.0x538bff.1
lea ecx, [ebp - 0x12c4]
call fcn.004e92b0
push eax
lea ecx, [ebp - 0x1030]
push ecx
call fcn.004e1e00
add esp, 8
mov byte [ebp - 4], 0xb
push 0x5aaee0
lea ecx, [ebp - 0x1030]
call fcn.004e9d40
test eax, eax
jne 0x539038
push 0x5aaeec
lea ecx, [ebp - 0x1030]
call fcn.004e9a20
push 0x5aaef0
mov ecx, dword [ebp - 0x1354]
add ecx, 0x348
call fcn.004e9110
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1588], esp
lea edx, [ebp - 0x1030]
push edx
call fcn.004e9870
mov dword [ebp - 0x1404], eax
mov eax, dword [ebp - 0x1404]
mov dword [ebp - 0x1498], eax
mov byte [ebp - 4], 0xc
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15d8], esp
push 0x5aaf10
call fcn.004e98c0
mov dword [ebp - 0x14a0], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x1354]
call fcn.005318d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1590], esp
lea edx, [ebp - 0x1030]
push edx
call fcn.004e9870
mov dword [ebp - 0x13c4], eax
mov eax, dword [ebp - 0x13c4]
mov dword [ebp - 0x14a8], eax
mov byte [ebp - 4], 0xd
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15e0], esp
push 0x5aafa4
call fcn.004e98c0
mov dword [ebp - 0x14b0], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x1354]
call fcn.00530620
jmp 0x539124
push 0x5aafd0
lea ecx, [ebp - 0x1030]
call fcn.004e9d40
test eax, eax
jne 0x539124
push 0x5aafe4
lea ecx, [ebp - 0x1030]
call fcn.004e9a20
push 0x5aaff4
mov ecx, dword [ebp - 0x1354]
add ecx, 0x348
call fcn.004e9110
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1598], esp
lea edx, [ebp - 0x1030]
push edx
call fcn.004e9870
mov dword [ebp - 0x1444], eax
mov eax, dword [ebp - 0x1444]
mov dword [ebp - 0x14b8], eax
mov byte [ebp - 4], 0xe
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15e8], esp
push 0x5ab030
call fcn.004e98c0
mov dword [ebp - 0x14c0], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x1354]
call fcn.005318d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15a0], esp
lea edx, [ebp - 0x1030]
push edx
call fcn.004e9870
mov dword [ebp - 0x13cc], eax
mov eax, dword [ebp - 0x13cc]
mov dword [ebp - 0x14c8], eax
mov byte [ebp - 4], 0xf
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15f0], esp
push 0x5ab03c
call fcn.004e98c0
mov dword [ebp - 0x14d0], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x1354]
call fcn.00530620
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x144c], esp
push 0x5ab0c4
call fcn.004e98c0
mov dword [ebp - 0x14d8], eax
mov ecx, dword [ebp - 0x1354]
call fcn.005316d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1030]
call fcn.004e99d0
jmp case.0x538bff.1
push 0x5ab0e8
mov ecx, dword [ebp - 0x1354]
add ecx, 0x348
call fcn.004e9110
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15f8], esp
push 0x5ab118
call fcn.004e98c0
mov dword [ebp - 0x140c], eax
mov ecx, dword [ebp - 0x140c]
mov dword [ebp - 0x14e0], ecx
mov byte [ebp - 4], 0x10
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15b0], esp
push 0x5ab128
call fcn.004e98c0
mov dword [ebp - 0x14e8], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x1354]
call fcn.005318d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1600], esp
push 0x5ab178
call fcn.004e98c0
mov dword [ebp - 0x13d4], eax
mov edx, dword [ebp - 0x13d4]
mov dword [ebp - 0x14f0], edx
mov byte [ebp - 4], 0x11
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15b8], esp
push 0x5ab17c
call fcn.004e98c0
mov dword [ebp - 0x14f8], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x1354]
call fcn.00530620
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1608], esp
push 0x5ab194
call fcn.004e98c0
mov dword [ebp - 0x1500], eax
mov ecx, dword [ebp - 0x1354]
call fcn.005316d0
jmp case.0x538bff.1
lea ecx, [ebp - 0x12c4]
call fcn.004e92b0
push eax
lea eax, [ebp - 0x1048]
push eax
call fcn.004e1e00
add esp, 8
mov byte [ebp - 4], 0x12
push 0x5ab1c0
lea ecx, [ebp - 0x1048]
call fcn.004e9d40
test eax, eax
jne 0x539359
push 0x5ab1cc
lea ecx, [ebp - 0x1048]
call fcn.004e9a20
push 0x5ab1fc
mov ecx, dword [ebp - 0x1354]
add ecx, 0x348
call fcn.004e9110
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15c0], esp
lea edx, [ebp - 0x1048]
push edx
call fcn.004e9870
mov dword [ebp - 0x142c], eax
mov eax, dword [ebp - 0x142c]
mov dword [ebp - 0x1508], eax
mov byte [ebp - 4], 0x13
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1610], esp
push 0x5ab258
call fcn.004e98c0
mov dword [ebp - 0x1510], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x1354]
call fcn.005318d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15c8], esp
lea edx, [ebp - 0x1048]
push edx
call fcn.004e9870
mov dword [ebp - 0x13dc], eax
mov eax, dword [ebp - 0x13dc]
mov dword [ebp - 0x1518], eax
mov byte [ebp - 4], 0x14
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1618], esp
push 0x5ab264
call fcn.004e98c0
mov dword [ebp - 0x1520], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x1354]
call fcn.00530620
jmp 0x539445
push 0x5ab284
lea ecx, [ebp - 0x1048]
call fcn.004e9d40
test eax, eax
jne 0x539445
push 0x5ab294
lea ecx, [ebp - 0x1048]
call fcn.004e9a20
push 0x5ab29c
mov ecx, dword [ebp - 0x1354]
add ecx, 0x348
call fcn.004e9110
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1620], esp
lea edx, [ebp - 0x1048]
push edx
call fcn.004e9870
mov dword [ebp - 0x1414], eax
mov eax, dword [ebp - 0x1414]
mov dword [ebp - 0x1528], eax
mov byte [ebp - 4], 0x15
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15d4], esp
push 0x5ab320
call fcn.004e98c0
mov dword [ebp - 0x1530], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x1354]
call fcn.005318d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1614], esp
lea edx, [ebp - 0x1048]
push edx
call fcn.004e9870
mov dword [ebp - 0x137c], eax
mov eax, dword [ebp - 0x137c]
mov dword [ebp - 0x1538], eax
mov byte [ebp - 4], 0x16
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15dc], esp
push 0x5ab3f0
call fcn.004e98c0
mov dword [ebp - 0x1540], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x1354]
call fcn.00530620
mov ecx, dword [ebp - 0x1354]
mov byte [ecx + 0x2b8], 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1604], esp
push 0x5ab400
call fcn.004e98c0
mov dword [ebp - 0x1548], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531cf0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1048]
call fcn.004e99d0
jmp case.0x538bff.1
mov edx, dword [ebp - 0x1354]
mov byte [edx + 0x2b8], 0
jmp case.0x538bff.1
push 0x5ab4f8
push 0x5ab58c
lea eax, [ebp - 0x17a8]
push eax
call fcn.004e2580
add esp, 0xc
mov dword [ebp - 0x1380], eax
mov ecx, dword [ebp - 0x1380]
push ecx
mov ecx, dword [ebp - 0x1354]
add ecx, 0x2a0
call fcn.004e9990
lea ecx, [ebp - 0x17a8]
call fcn.004e99d0
push 0
push 0
push 0x591
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00550a90
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15e4], esp
push 0x5ab630
call fcn.004e98c0
mov dword [ebp - 0x1550], eax
mov ecx, dword [ebp - 0x1354]
call fcn.005316d0
jmp case.0x538bff.1
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1624], esp
push 0x5ab760
call fcn.004e98c0
mov dword [ebp - 0x1388], eax
mov edx, dword [ebp - 0x1388]
mov dword [ebp - 0x1558], edx
mov byte [ebp - 4], 0x17
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15ec], esp
push 0x5ab76c
call fcn.004e98c0
mov dword [ebp - 0x1560], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x1354]
call fcn.00530620
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x160c], esp
push 0x5ab780
call fcn.004e98c0
mov dword [ebp - 0x1450], eax
mov ecx, dword [ebp - 0x1354]
call fcn.005316d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1454], esp
push 0x5ab7d4
call fcn.004e98c0
mov dword [ebp - 0x1390], eax
mov eax, dword [ebp - 0x1390]
mov dword [ebp - 0x145c], eax
mov byte [ebp - 4], 0x18
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1464], esp
push 0x5ab7f8
call fcn.004e98c0
mov dword [ebp - 0x146c], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x1354]
call fcn.005318d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1474], esp
push 0x5ab808
call fcn.004e98c0
mov dword [ebp - 0x1398], eax
mov ecx, dword [ebp - 0x1398]
mov dword [ebp - 0x147c], ecx
mov byte [ebp - 4], 0x19
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1484], esp
push 0x5ab838
call fcn.004e98c0
mov dword [ebp - 0x148c], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x1354]
call fcn.00530620
mov edx, dword [ebp - 0x1354]
mov byte [edx + 0x2b8], 0
jmp case.0x538bff.1
mov eax, dword [ebp - 0x1354]
mov byte [eax + 0x2b8], 0
push 0x5ab900
lea ecx, [ebp - 0x10e4]
push ecx
call fcn.004f4270
add esp, 8
movzx edx, al
test edx, edx
je 0x539688
jmp 0x5396c9
push 0x5abaa8
lea eax, [ebp - 0x10e4]
push eax
call fcn.004f4270
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x5396c9
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1494], esp
push 0x5abab4
call fcn.004e98c0
mov dword [ebp - 0x149c], eax
mov ecx, dword [ebp - 0x1354]
call fcn.005316d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14a4], esp
push 0x5abadc
call fcn.004e98c0
mov dword [ebp - 0x14ac], eax
mov ecx, dword [ebp - 0x1354]
call fcn.005316d0
push 0
push 0xea60
push 0x18
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00551030
jmp case.0x538bff.1
mov edx, dword [ebp - 0x1354]
mov byte [edx + 0x2b8], 0
push 0x5ac188
lea eax, [ebp - 0x10e4]
push eax
call fcn.004f4270
add esp, 8
movzx ecx, al
test ecx, ecx
jne 0x53974e
push 0x5ac198
lea edx, [ebp - 0x10e4]
push edx
call fcn.004f4270
add esp, 8
movzx eax, al
test eax, eax
je 0x539779
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14b4], esp
push 0x5ac1c4
call fcn.004e98c0
mov dword [ebp - 0x14bc], eax
mov ecx, dword [ebp - 0x1354]
call fcn.005316d0
jmp 0x5398c6
push 0x5ac458
lea ecx, [ebp - 0x10e4]
push ecx
call fcn.004f4270
add esp, 8
movzx edx, al
test edx, edx
je 0x5398a0
push 0x5ac6a8
lea eax, [ebp - 0x1264]
push eax
call fcn.004f4270
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x539878
push str.___typeflashupdate___fpfalse___hstrue___updatetype
push 0x5ac70c
lea edx, [ebp - 0x1658]
push edx
call fcn.004e2580
add esp, 0xc
mov dword [ebp - 0x13a0], eax
mov eax, dword [ebp - 0x13a0]
push eax
mov ecx, dword [ebp - 0x1354]
add ecx, 0x2a0
call fcn.004e9990
lea ecx, [ebp - 0x1658]
call fcn.004e99d0
push 0
push 0
push 0x591
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00550a90
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14c4], esp
push 0x5ac7a4
call fcn.004e98c0
mov dword [ebp - 0x14cc], eax
mov ecx, dword [ebp - 0x1354]
call fcn.005316d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14d4], esp
push str.faatuo
call fcn.004e98c0
mov dword [ebp - 0x14dc], eax
mov ecx, dword [ebp - 0x1354]
call fcn.005316d0
mov ecx, dword [ebp - 0x1354]
mov byte [ecx + 0x2b8], 1
mov edx, dword [ebp - 0x1354]
mov byte [edx + 0x2ba], 0
jmp 0x53989e
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14e4], esp
push 0x5ac8f0
call fcn.004e98c0
mov dword [ebp - 0x14ec], eax
mov ecx, dword [ebp - 0x1354]
call fcn.005316d0
jmp 0x5398c6
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14f4], esp
push str.flashatuo
call fcn.004e98c0
mov dword [ebp - 0x14fc], eax
mov ecx, dword [ebp - 0x1354]
call fcn.005316d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1504], esp
push 0x5ac9b4
call fcn.004e98c0
mov dword [ebp - 0x150c], eax
mov ecx, dword [ebp - 0x1354]
call fcn.005316d0
jmp case.0x538bff.1
push 0x5acbe4
lea eax, [ebp - 0x1264]
push eax
call fcn.004f4270
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x53999c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1514], esp
push 0x5acc24
call fcn.004e98c0
mov dword [ebp - 0x151c], eax
mov ecx, dword [ebp - 0x1354]
call fcn.005316d0
push str.___typeflashupdate___fpfalse___hstrue___hstyperc___updatetype
push 0x5acc84
lea edx, [ebp - 0x1670]
push edx
call fcn.004e2580
add esp, 0xc
mov dword [ebp - 0x13a8], eax
mov eax, dword [ebp - 0x13a8]
push eax
mov ecx, dword [ebp - 0x1354]
add ecx, 0x2a0
call fcn.004e9990
lea ecx, [ebp - 0x1670]
call fcn.004e99d0
push 0
push 0
push 0x591
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00550a90
mov ecx, dword [ebp - 0x1354]
mov byte [ecx + 0x2b8], 1
mov edx, dword [ebp - 0x1354]
mov byte [edx + 0x2ba], 0
jmp case.0x538bff.1
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1524], esp
push 0x5acd68
call fcn.004e98c0
mov dword [ebp - 0x152c], eax
mov ecx, dword [ebp - 0x1354]
call fcn.005316d0
mov eax, dword [ebp - 0x1354]
mov byte [eax + 0x2b8], 0
jmp case.0x538bff.1
mov ecx, dword [ebp - 0x1354]
mov byte [ecx + 0x2b8], 1
push 0x5acfb4
lea edx, [ebp - 0x1294]
push edx
call fcn.004f4270
add esp, 8
movzx eax, al
test eax, eax
je 0x539add
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1534], esp
push str.HSCell_file_update__install_flash_player
call fcn.004e98c0
mov dword [ebp - 0x153c], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531db0
lea ecx, [ebp - 0x12dc]
call fcn.004e92b0
push eax
lea ecx, [ebp - 0x16d0]
push ecx
call fcn.004e1e00
add esp, 8
mov dword [ebp - 0x13b0], eax
mov edx, dword [ebp - 0x13b0]
mov dword [ebp - 0x13b8], edx
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x13b8]
call fcn.004e9c70
push eax
push str.___typeflashupdate___updatetype
push 0x5ad104
lea eax, [ebp - 0x16a0]
push eax
call fcn.004e2580
add esp, 0x10
mov dword [ebp - 0x13c0], eax
mov ecx, dword [ebp - 0x13c0]
push ecx
mov ecx, dword [ebp - 0x1354]
add ecx, 0x2a0
call fcn.004e9990
lea ecx, [ebp - 0x16a0]
call fcn.004e99d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x16d0]
call fcn.004e99d0
push 0
push 0
push 0x591
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00550a90
jmp case.0x538bff.1
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1544], esp
push str.HSCell_file_update_ui
call fcn.004e98c0
mov dword [ebp - 0x154c], eax
mov ecx, dword [ebp - 0x1354]
call fcn.00531db0
push str.___typeshowoffers___hsfalse___updatetype
push str._shs
lea edx, [ebp - 0x1700]
push edx
call fcn.004e2580
add esp, 0xc
mov dword [ebp - 0x13c8], eax
mov eax, dword [ebp - 0x13c8]
push eax
mov ecx, dword [ebp - 0x1354]
add ecx, 0x2a0
call fcn.004e9990
lea ecx, [ebp - 0x1700]
call fcn.004e99d0
push 0
push 0
push 0x591
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00550a90
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1554], esp
push 0x5ad280
call fcn.004e98c0
mov dword [ebp - 0x155c], eax
mov ecx, dword [ebp - 0x1354]
call fcn.005316d0
jmp case.0x538bff.1
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1564], esp
push 0x5ad2e4
call fcn.004e98c0
mov dword [ebp - 0x156c], eax
mov ecx, dword [ebp - 0x1354]
call fcn.005316d0
jmp case.0x538bff.1
mov eax, dword [ebp - 0x1354]
mov byte [eax + 0x2bb], 0
push 0x5ad594
lea ecx, [ebp - 0x1264]
push ecx
call fcn.004f4270
add esp, 8
jmp case.0x538bff.1
push 0x5ad79c
lea eax, [ebp - 0x124c]
push eax
call fcn.004f4270
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x539c65
mov edx, dword [ebp - 0x1354]
cmp dword [edx + 0xac], 1
jne 0x539c65
push str.___typeshowoffers___hsfalse___fpfalse___fcfalse___fatrue
push 0x5ad87c
lea eax, [ebp - 0x1730]
push eax
call fcn.004e2580
add esp, 0xc
mov dword [ebp - 0x13d0], eax
mov ecx, dword [ebp - 0x13d0]
push ecx
mov ecx, dword [ebp - 0x1354]
add ecx, 0x2a0
call fcn.004e9990
lea ecx, [ebp - 0x1730]
call fcn.004e99d0
push 0
push 0
push 0x591
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00550a90
mov edx, dword [ebp - 0x1354]
mov byte [edx + 0x2b8], 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1574], esp
push str.CDMShowTime
call fcn.004e98c0
mov dword [ebp - 0x157c], eax
mov ecx, dword [ebp - 0x1354]
call fcn.005316d0
push 0x264
call fcn.0055bea0
add esp, 4
mov dword [ebp - 0x1374], eax
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x1374], 0
je 0x539ccb
mov ecx, dword [ebp - 0x1374]
call fcn.0054f2f0
mov dword [ebp - 0x1370], eax
jmp 0x539cd5
mov dword [ebp - 0x1370], 0
mov eax, dword [ebp - 0x1370]
mov dword [ebp - 0x13d8], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x13d8]
mov dword [ebp - 0x1358], ecx
push 0x264
push 0
mov edx, dword [ebp - 0x1358]
push edx
call fcn.0055ebc0
add esp, 0xc
push str.install
mov ecx, dword [ebp - 0x1358]
call fcn.004e9110
mov eax, dword [ebp - 0x1354]
add eax, 0x2f4
push eax
mov ecx, dword [ebp - 0x1358]
add ecx, 0x18
call fcn.004e90f0
lea ecx, [ebp - 0x1078]
push ecx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x30
call fcn.004e90f0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1584], esp
lea edx, [ebp - 0x1078]
push edx
call fcn.004e8f30
mov dword [ebp - 0x158c], eax
lea eax, [ebp - 0x1760]
push eax
mov ecx, dword [ebp - 0x1354]
call fcn.00533200
mov dword [ebp - 0x13e0], eax
mov ecx, dword [ebp - 0x13e0]
mov dword [ebp - 0x13e8], ecx
mov edx, dword [ebp - 0x13e8]
push edx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x48
call fcn.004e9080
lea ecx, [ebp - 0x1760]
call fcn.004e90c0
lea eax, [ebp - 0x1090]
push eax
mov ecx, dword [ebp - 0x1358]
add ecx, 0x78
call fcn.004e90f0
mov ecx, dword [ebp - 0x1354]
add ecx, 0x2dc
push ecx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x90
call fcn.004e90f0
mov edx, dword [ebp - 0x1354]
add edx, 0x30c
push edx
mov ecx, dword [ebp - 0x1358]
add ecx, 0xa8
call fcn.004e90f0
lea eax, [ebp - 0x17c0]
push eax
call fcn.004e5790
add esp, 4
mov dword [ebp - 0x13f0], eax
mov ecx, dword [ebp - 0x13f0]
mov dword [ebp - 0x13f8], ecx
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x13f8]
call fcn.004e9c70
push eax
lea edx, [ebp - 0x1790]
push edx
call fcn.004e1d70
add esp, 8
mov dword [ebp - 0x1400], eax
mov eax, dword [ebp - 0x1400]
push eax
mov ecx, dword [ebp - 0x1358]
add ecx, 0xc0
call fcn.004e9080
lea ecx, [ebp - 0x1790]
call fcn.004e90c0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x17c0]
call fcn.004e99d0
lea ecx, [ebp - 0x130c]
push ecx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x60
call fcn.004e90f0
mov edx, dword [ebp - 0x1354]
add edx, 0x330
push edx
mov ecx, dword [ebp - 0x1358]
add ecx, 0xd8
call fcn.004e90f0
lea eax, [ebp - 0x12ac]
push eax
mov ecx, dword [ebp - 0x1358]
add ecx, 0xf0
call fcn.004e90f0
lea ecx, [ebp - 0x1204]
push ecx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x108
call fcn.004e90f0
lea edx, [ebp - 0x11ec]
push edx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x120
call fcn.004e90f0
lea eax, [ebp - 0x11d4]
push eax
mov ecx, dword [ebp - 0x1358]
add ecx, 0x138
call fcn.004e90f0
lea ecx, [ebp - 0x11bc]
push ecx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x150
call fcn.004e90f0
lea edx, [ebp - 0x11a4]
push edx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x168
call fcn.004e90f0
lea eax, [ebp - 0x118c]
push eax
mov ecx, dword [ebp - 0x1358]
add ecx, 0x180
call fcn.004e90f0
lea ecx, [ebp - 0x1174]
push ecx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x198
call fcn.004e90f0
lea edx, [ebp - 0x115c]
push edx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x1b0
call fcn.004e90f0
lea eax, [ebp - 0x1144]
push eax
mov ecx, dword [ebp - 0x1358]
add ecx, 0x1c8
call fcn.004e90f0
lea ecx, [ebp - 0x112c]
push ecx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x1e0
call fcn.004e90f0
lea edx, [ebp - 0x1114]
push edx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x1f8
call fcn.004e90f0
lea eax, [ebp - 0x10fc]
push eax
mov ecx, dword [ebp - 0x1358]
add ecx, 0x210
call fcn.004e90f0
lea ecx, [ebp - 0x10e4]
push ecx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x228
call fcn.004e90f0
lea edx, [ebp - 0x121c]
push edx
mov ecx, dword [ebp - 0x1358]
add ecx, 0x240
call fcn.004e90f0
mov dword [ebp - 0x136c], 0
jmp 0x53a026
mov eax, dword [ebp - 0x136c]
add eax, 1
mov dword [ebp - 0x136c], eax
lea ecx, [ebp - 0x10b4]
call fcn.00508f40
cmp dword [ebp - 0x136c], eax
jae 0x53a05f
mov ecx, dword [ebp - 0x136c]
push ecx
lea ecx, [ebp - 0x10b4]
call fcn.00508f60
push eax
mov ecx, dword [ebp - 0x1358]
add ecx, 0x258
call fcn.00508f80
jmp 0x53a017
push 0
mov edx, dword [ebp - 0x1358]
push edx
push 0x52f
mov ecx, dword [ebp - 0x1354]
add ecx, 4
call fcn.00550a90
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1090]
call fcn.004e90c0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1078]
call fcn.004e90c0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x133c]
call fcn.0054fa10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10a8]
call fcn.004e90c0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1011]
call fcn.004e0610
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1060]
call fcn.004e90c0
jmp 0x53a0df
mov eax, dword [ebp - 0x135c]
push eax
call dword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
jmp 0x53a115
mov ecx, dword [ebp - 0x1354]
mov byte [ecx + 0x2b8], 0
mov edx, dword [ebp - 0x135c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1360]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x1354]
cmp dword [ecx + 0x21c], 0xffffffff
je 0x53a137
mov edx, dword [ebp - 0x1354]
mov eax, dword [edx + 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0055e4ed
mov esp, ebp
pop ebp
ret