Function at 0x462270
Capabilities:
Allocate or change rwx memory
Check os version
Get mac address on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1628
call fcn.00414680
mov eax, dword [0x494494]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x6e4], 0
mov dword [ebp - 0x160c], 0
mov dword [ebp - 0x358], 0x200
mov eax, dword [ebp + 8]
mov dword [eax + 0x400], 1
push 0x104
mov ecx, dword [ebp + 8]
add ecx, 0x410
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x5c
mov edx, dword [ebp + 8]
add edx, 0x410
push edx
call fcn.00405ca0
add esp, 8
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0
je 0x46234e
mov eax, dword [ebp - 0x35c]
add eax, 2
mov dword [ebp - 0x35c], eax
je 0x46234e
mov ecx, dword [ebp + 8]
add ecx, 0x410
push ecx
mov edx, dword [ebp + 8]
add edx, 0x618
push edx
call fcn.00407253
add esp, 8
mov dword [ebp - 0x1614], 0x50
lea eax, [ebp - 0x1614]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x38c
push ecx
mov edx, dword [ebp - 0x35c]
push edx
call fcn.00460f40
add esp, 0xc
xor eax, eax
mov ecx, dword [ebp - 0x35c]
mov word [ecx], ax
push str.5.2.7.0
mov edx, dword [ebp + 8]
add edx, 0x37c
push edx
call fcn.004064d0
add esp, 8
mov byte [ebp - 0x354], 0xaf
mov byte [ebp - 0x353], 0xb3
mov byte [ebp - 0x352], 0xb3
mov byte [ebp - 0x351], 0xb7
mov byte [ebp - 0x350], 0xfd
mov byte [ebp - 0x34f], 0xe8
mov byte [ebp - 0x34e], 0xe8
mov byte [ebp - 0x34d], 0xae
mov byte [ebp - 0x34c], 0xa9
mov byte [ebp - 0x34b], 0xb3
mov byte [ebp - 0x34a], 0xe9
mov byte [ebp - 0x349], 0xa3
mov byte [ebp - 0x348], 0xb7
mov byte [ebp - 0x347], 0xa8
mov byte [ebp - 0x346], 0xa8
mov byte [ebp - 0x345], 0xab
mov byte [ebp - 0x344], 0xe9
mov byte [ebp - 0x343], 0xb4
mov byte [ebp - 0x342], 0xae
mov byte [ebp - 0x341], 0xa9
mov byte [ebp - 0x340], 0xa6
mov byte [ebp - 0x33f], 0xe9
mov byte [ebp - 0x33e], 0xa4
mov byte [ebp - 0x33d], 0xa8
mov byte [ebp - 0x33c], 0xaa
mov byte [ebp - 0x33b], 0xe9
mov byte [ebp - 0x33a], 0xa4
mov byte [ebp - 0x339], 0xa9
mov byte [ebp - 0x338], 0xe8
mov byte [ebp - 0x337], 0xae
mov byte [ebp - 0x336], 0xb7
mov byte [ebp - 0x335], 0xab
mov byte [ebp - 0x334], 0xa8
mov byte [ebp - 0x333], 0xa8
mov byte [ebp - 0x332], 0xac
mov byte [ebp - 0x331], 0xb2
mov byte [ebp - 0x330], 0xb7
mov byte [ebp - 0x32f], 0xe8
mov byte [ebp - 0x32e], 0xae
mov byte [ebp - 0x32d], 0xb7
mov byte [ebp - 0x32c], 0xab
mov byte [ebp - 0x32b], 0xa8
mov byte [ebp - 0x32a], 0xa8
mov byte [ebp - 0x329], 0xac
mov byte [ebp - 0x328], 0xb2
mov byte [ebp - 0x327], 0xb7
mov byte [ebp - 0x326], 0xe9
mov byte [ebp - 0x325], 0xb7
mov byte [ebp - 0x324], 0xaf
mov byte [ebp - 0x323], 0xb7
mov byte [ebp - 0x322], 0xf8
mov byte [ebp - 0x321], 0xa1
mov byte [ebp - 0x320], 0xa8
mov byte [ebp - 0x31f], 0xb5
mov byte [ebp - 0x31e], 0xaa
mov byte [ebp - 0x31d], 0xa6
mov byte [ebp - 0x31c], 0xb3
mov byte [ebp - 0x31b], 0xfa
mov byte [ebp - 0x31a], 0xad
mov byte [ebp - 0x319], 0xb4
mov byte [ebp - 0x318], 0xa8
mov byte [ebp - 0x317], 0xa9
mov byte [ebp - 0x316], 0xc7
mov eax, dword [ebp - 0x358]
push eax
push 0
lea ecx, [ebp - 0x1608]
push ecx
call fcn.004067d0
add esp, 0xc
lea edx, [ebp - 0x358]
push edx
lea eax, [ebp - 0x1608]
push eax
push 1
lea ecx, [ebp - 0x354]
push ecx
call fcn.00461000
add esp, 8
push eax
call fcn.0045f640
add esp, 0xc
test eax, eax
jne 0x46257f
mov edx, dword [ebp - 0x358]
push edx
lea eax, [ebp - 0x1608]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x40
push ecx
call fcn.00405d00
add esp, 0xc
mov edx, dword [ebp + 8]
mov dword [edx + 0x3fc], 0
mov byte [ebp - 0x1408], 0x9d
mov byte [ebp - 0x1407], 0xaf
mov byte [ebp - 0x1406], 0xb2
mov byte [ebp - 0x1405], 0x83
mov byte [ebp - 0x1404], 0xa8
mov byte [ebp - 0x1403], 0xa9
mov byte [ebp - 0x1402], 0xa0
mov byte [ebp - 0x1401], 0x81
mov byte [ebp - 0x1400], 0xa6
mov byte [ebp - 0x13ff], 0xa9
mov byte [ebp - 0x13fe], 0xa0
mov byte [ebp - 0x13fd], 0x9e
mov byte [ebp - 0x13fc], 0xb2
mov byte [ebp - 0x13fb], 0xe9
mov byte [ebp - 0x13fa], 0xa2
mov byte [ebp - 0x13f9], 0xbf
mov byte [ebp - 0x13f8], 0xa2
mov byte [ebp - 0x13f7], 0xc7
push 0x6e
push 0
lea eax, [ebp - 0x13f6]
push eax
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x1388], 0xf4
mov byte [ebp - 0x1387], 0xf1
mov byte [ebp - 0x1386], 0xf7
mov byte [ebp - 0x1385], 0x94
mov byte [ebp - 0x1384], 0xa6
mov byte [ebp - 0x1383], 0xa1
mov byte [ebp - 0x1382], 0xa2
mov byte [ebp - 0x1381], 0xe9
mov byte [ebp - 0x1380], 0xa2
mov byte [ebp - 0x137f], 0xbf
mov byte [ebp - 0x137e], 0xa2
mov byte [ebp - 0x137d], 0xc7
push 0x74
push 0
lea ecx, [ebp - 0x137c]
push ecx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x1308], 0xf4
mov byte [ebp - 0x1307], 0xf1
mov byte [ebp - 0x1306], 0xf7
mov byte [ebp - 0x1305], 0x93
mov byte [ebp - 0x1304], 0xb5
mov byte [ebp - 0x1303], 0xa6
mov byte [ebp - 0x1302], 0xbe
mov byte [ebp - 0x1301], 0xe9
mov byte [ebp - 0x1300], 0xa2
mov byte [ebp - 0x12ff], 0xbf
mov byte [ebp - 0x12fe], 0xa2
mov byte [ebp - 0x12fd], 0xc7
push 0x74
push 0
lea edx, [ebp - 0x12fc]
push edx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x1288], 0xf4
mov byte [ebp - 0x1287], 0xf1
mov byte [ebp - 0x1286], 0xf7
mov byte [ebp - 0x1285], 0xb4
mov byte [ebp - 0x1284], 0xa3
mov byte [ebp - 0x1283], 0xe9
mov byte [ebp - 0x1282], 0xa2
mov byte [ebp - 0x1281], 0xbf
mov byte [ebp - 0x1280], 0xa2
mov byte [ebp - 0x127f], 0xc7
push 0x76
push 0
lea eax, [ebp - 0x127e]
push eax
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x1208], 0xf4
mov byte [ebp - 0x1207], 0xf1
mov byte [ebp - 0x1206], 0xf7
mov byte [ebp - 0x1205], 0xb5
mov byte [ebp - 0x1204], 0xb7
mov byte [ebp - 0x1203], 0xe9
mov byte [ebp - 0x1202], 0xa2
mov byte [ebp - 0x1201], 0xbf
mov byte [ebp - 0x1200], 0xa2
mov byte [ebp - 0x11ff], 0xc7
push 0x76
push 0
lea ecx, [ebp - 0x11fe]
push ecx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x1188], 0xf4
mov byte [ebp - 0x1187], 0xf1
mov byte [ebp - 0x1186], 0xf7
mov byte [ebp - 0x1185], 0xb5
mov byte [ebp - 0x1184], 0xb7
mov byte [ebp - 0x1183], 0xb4
mov byte [ebp - 0x1182], 0xe9
mov byte [ebp - 0x1181], 0xa2
mov byte [ebp - 0x1180], 0xbf
mov byte [ebp - 0x117f], 0xa2
mov byte [ebp - 0x117e], 0xc7
push 0x75
push 0
lea edx, [ebp - 0x117d]
push edx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0xfe8], 0x96
mov byte [ebp - 0xfe7], 0x96
mov byte [ebp - 0xfe6], 0x97
mov byte [ebp - 0xfe5], 0x84
mov byte [ebp - 0xfe4], 0x95
mov byte [ebp - 0xfe3], 0x93
mov byte [ebp - 0xfe2], 0x97
mov byte [ebp - 0xfe1], 0xe9
mov byte [ebp - 0xfe0], 0xa2
mov byte [ebp - 0xfdf], 0xbf
mov byte [ebp - 0xfde], 0xa2
mov byte [ebp - 0xfdd], 0xc7
push 0x74
push 0
lea eax, [ebp - 0xfdc]
push eax
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0xf68], 0x96
mov byte [ebp - 0xf67], 0x96
mov byte [ebp - 0xf66], 0x97
mov byte [ebp - 0xf65], 0x84
mov byte [ebp - 0xf64], 0x93
mov byte [ebp - 0xf63], 0xb5
mov byte [ebp - 0xf62], 0xa6
mov byte [ebp - 0xf61], 0xbe
mov byte [ebp - 0xf60], 0xe9
mov byte [ebp - 0xf5f], 0xa2
mov byte [ebp - 0xf5e], 0xbf
mov byte [ebp - 0xf5d], 0xa2
mov byte [ebp - 0xf5c], 0xc7
push 0x73
push 0
lea ecx, [ebp - 0xf5b]
push ecx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x308], 0xac
mov byte [ebp - 0x307], 0xbf
mov byte [ebp - 0x306], 0xa2
mov byte [ebp - 0x305], 0xb3
mov byte [ebp - 0x304], 0xb5
mov byte [ebp - 0x303], 0xa6
mov byte [ebp - 0x302], 0xbe
mov byte [ebp - 0x301], 0xe9
mov byte [ebp - 0x300], 0xa2
mov byte [ebp - 0x2ff], 0xbf
mov byte [ebp - 0x2fe], 0xa2
mov byte [ebp - 0x2fd], 0xc7
push 0x74
push 0
lea edx, [ebp - 0x2fc]
push edx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x288], 0xac
mov byte [ebp - 0x287], 0xae
mov byte [ebp - 0x286], 0xb4
mov byte [ebp - 0x285], 0xab
mov byte [ebp - 0x284], 0xae
mov byte [ebp - 0x283], 0xb1
mov byte [ebp - 0x282], 0xa2
mov byte [ebp - 0x281], 0xe9
mov byte [ebp - 0x280], 0xa2
mov byte [ebp - 0x27f], 0xbf
mov byte [ebp - 0x27e], 0xa2
mov byte [ebp - 0x27d], 0xc7
push 0x74
push 0
lea eax, [ebp - 0x27c]
push eax
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x208], 0xac
mov byte [ebp - 0x207], 0xa9
mov byte [ebp - 0x206], 0xa5
mov byte [ebp - 0x205], 0xa4
mov byte [ebp - 0x204], 0xa2
mov byte [ebp - 0x203], 0xa9
mov byte [ebp - 0x202], 0xb3
mov byte [ebp - 0x201], 0xa2
mov byte [ebp - 0x200], 0xb5
mov byte [ebp - 0x1ff], 0xe9
mov byte [ebp - 0x1fe], 0xa2
mov byte [ebp - 0x1fd], 0xbf
mov byte [ebp - 0x1fc], 0xa2
mov byte [ebp - 0x1fb], 0xc7
push 0x72
push 0
lea ecx, [ebp - 0x1fa]
push ecx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x188], 0xac
mov byte [ebp - 0x187], 0xbf
mov byte [ebp - 0x186], 0xa2
mov byte [ebp - 0x185], 0xb4
mov byte [ebp - 0x184], 0xa4
mov byte [ebp - 0x183], 0xa8
mov byte [ebp - 0x182], 0xb5
mov byte [ebp - 0x181], 0xa2
mov byte [ebp - 0x180], 0xe9
mov byte [ebp - 0x17f], 0xa2
mov byte [ebp - 0x17e], 0xbf
mov byte [ebp - 0x17d], 0xa2
mov byte [ebp - 0x17c], 0xc7
push 0x73
push 0
lea edx, [ebp - 0x17b]
push edx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x108], 0xac
mov byte [ebp - 0x107], 0xb0
mov byte [ebp - 0x106], 0xb4
mov byte [ebp - 0x105], 0xb7
mov byte [ebp - 0x104], 0xb5
mov byte [ebp - 0x103], 0xa8
mov byte [ebp - 0x102], 0xb3
mov byte [ebp - 0x101], 0xa2
mov byte [ebp - 0x100], 0xa4
mov byte [ebp - 0xff], 0xb3
mov byte [ebp - 0xfe], 0xf1
mov byte [ebp - 0xfd], 0xf3
mov byte [ebp - 0xfc], 0xe9
mov byte [ebp - 0xfb], 0xa2
mov byte [ebp - 0xfa], 0xbf
mov byte [ebp - 0xf9], 0xa2
mov byte [ebp - 0xf8], 0xc7
push 0x6f
push 0
lea eax, [ebp - 0xf7]
push eax
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x88], 0xac
mov byte [ebp - 0x87], 0xb7
mov byte [ebp - 0x86], 0xaf
mov byte [ebp - 0x85], 0xa8
mov byte [ebp - 0x84], 0xa9
mov byte [ebp - 0x83], 0xa2
mov byte [ebp - 0x82], 0xb3
mov byte [ebp - 0x81], 0xb5
mov byte [ebp - 0x80], 0xa6
mov byte [ebp - 0x7f], 0xbe
mov byte [ebp - 0x7e], 0xe9
mov byte [ebp - 0x7d], 0xa2
mov byte [ebp - 0x7c], 0xbf
mov byte [ebp - 0x7b], 0xa2
mov byte [ebp - 0x7a], 0xc7
push 0x71
push 0
lea ecx, [ebp - 0x79]
push ecx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0xde8], 0xb0
mov byte [ebp - 0xde7], 0xa6
mov byte [ebp - 0xde6], 0xa9
mov byte [ebp - 0xde5], 0xbf
mov byte [ebp - 0xde4], 0xae
mov byte [ebp - 0xde3], 0xa6
mov byte [ebp - 0xde2], 0xa9
mov byte [ebp - 0xde1], 0xa0
mov byte [ebp - 0xde0], 0xe9
mov byte [ebp - 0xddf], 0xa2
mov byte [ebp - 0xdde], 0xbf
mov byte [ebp - 0xddd], 0xa2
mov byte [ebp - 0xddc], 0xc7
push 0x73
push 0
lea edx, [ebp - 0xddb]
push edx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0xd68], 0xb7
mov byte [ebp - 0xd67], 0xb2
mov byte [ebp - 0xd66], 0xa5
mov byte [ebp - 0xd65], 0xb0
mov byte [ebp - 0xd64], 0xae
mov byte [ebp - 0xd63], 0xa9
mov byte [ebp - 0xd62], 0xe9
mov byte [ebp - 0xd61], 0xa2
mov byte [ebp - 0xd60], 0xbf
mov byte [ebp - 0xd5f], 0xa2
mov byte [ebp - 0xd5e], 0xc7
push 0x75
push 0
lea eax, [ebp - 0xd5d]
push eax
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0xce8], 0xbe
mov byte [ebp - 0xce7], 0xa6
mov byte [ebp - 0xce6], 0xa8
mov byte [ebp - 0xce5], 0xb6
mov byte [ebp - 0xce4], 0xae
mov byte [ebp - 0xce3], 0xa6
mov byte [ebp - 0xce2], 0xa9
mov byte [ebp - 0xce1], 0xb4
mov byte [ebp - 0xce0], 0xaf
mov byte [ebp - 0xcdf], 0xb2
mov byte [ebp - 0xcde], 0xe9
mov byte [ebp - 0xcdd], 0xa2
mov byte [ebp - 0xcdc], 0xbf
mov byte [ebp - 0xcdb], 0xa2
mov byte [ebp - 0xcda], 0xc7
push 0x71
push 0
lea ecx, [ebp - 0xcd9]
push ecx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0xc68], 0x81
mov byte [ebp - 0xc67], 0xb5
mov byte [ebp - 0xc66], 0xbd
mov byte [ebp - 0xc65], 0x94
mov byte [ebp - 0xc64], 0xb3
mov byte [ebp - 0xc63], 0xa6
mov byte [ebp - 0xc62], 0xb3
mov byte [ebp - 0xc61], 0xa2
mov byte [ebp - 0xc60], 0xf5
mov byte [ebp - 0xc5f], 0xac
mov byte [ebp - 0xc5e], 0xe9
mov byte [ebp - 0xc5d], 0xa2
mov byte [ebp - 0xc5c], 0xbf
mov byte [ebp - 0xc5b], 0xa2
mov byte [ebp - 0xc5a], 0xc7
push 0x71
push 0
lea edx, [ebp - 0xc59]
push edx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0xbe8], 0xa1
mov byte [ebp - 0xbe7], 0xbd
mov byte [ebp - 0xbe6], 0xa4
mov byte [ebp - 0xbe5], 0xab
mov byte [ebp - 0xbe4], 0xae
mov byte [ebp - 0xbe3], 0xa2
mov byte [ebp - 0xbe2], 0xa9
mov byte [ebp - 0xbe1], 0xb3
mov byte [ebp - 0xbe0], 0xe9
mov byte [ebp - 0xbdf], 0xa2
mov byte [ebp - 0xbde], 0xbf
mov byte [ebp - 0xbdd], 0xa2
mov byte [ebp - 0xbdc], 0xc7
push 0x73
push 0
lea eax, [ebp - 0xbdb]
push eax
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0xb68], 0x83
mov byte [ebp - 0xb67], 0x81
mov byte [ebp - 0xb66], 0x94
mov byte [ebp - 0xb65], 0xa2
mov byte [ebp - 0xb64], 0xb5
mov byte [ebp - 0xb63], 0xb1
mov byte [ebp - 0xb62], 0xe9
mov byte [ebp - 0xb61], 0xa2
mov byte [ebp - 0xb60], 0xbf
mov byte [ebp - 0xb5f], 0xa2
mov byte [ebp - 0xb5e], 0xc7
push 0x75
push 0
lea ecx, [ebp - 0xb5d]
push ecx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0xae8], 0x85
mov byte [ebp - 0xae7], 0xa6
mov byte [ebp - 0xae6], 0xb5
mov byte [ebp - 0xae5], 0x84
mov byte [ebp - 0xae4], 0xaf
mov byte [ebp - 0xae3], 0xa6
mov byte [ebp - 0xae2], 0xb5
mov byte [ebp - 0xae1], 0xa0
mov byte [ebp - 0xae0], 0xa2
mov byte [ebp - 0xadf], 0xb4
mov byte [ebp - 0xade], 0x97
mov byte [ebp - 0xadd], 0xb5
mov byte [ebp - 0xadc], 0xa8
mov byte [ebp - 0xadb], 0xbf
mov byte [ebp - 0xada], 0xbe
mov byte [ebp - 0xad9], 0xe9
mov byte [ebp - 0xad8], 0xa2
mov byte [ebp - 0xad7], 0xbf
mov byte [ebp - 0xad6], 0xa2
mov byte [ebp - 0xad5], 0xc7
push 0x6c
push 0
lea edx, [ebp - 0xad4]
push edx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0xa68], 0x97
mov byte [ebp - 0xa67], 0xa8
mov byte [ebp - 0xa66], 0xb0
mov byte [ebp - 0xa65], 0xa2
mov byte [ebp - 0xa64], 0xb5
mov byte [ebp - 0xa63], 0x95
mov byte [ebp - 0xa62], 0xa2
mov byte [ebp - 0xa61], 0xaa
mov byte [ebp - 0xa60], 0xae
mov byte [ebp - 0xa5f], 0xa9
mov byte [ebp - 0xa5e], 0xa3
mov byte [ebp - 0xa5d], 0xe9
mov byte [ebp - 0xa5c], 0xa2
mov byte [ebp - 0xa5b], 0xbf
mov byte [ebp - 0xa5a], 0xa2
mov byte [ebp - 0xa59], 0xc7
push 0x70
push 0
lea eax, [ebp - 0xa58]
push eax
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x9e8], 0xb0
mov byte [ebp - 0x9e7], 0xbf
mov byte [ebp - 0x9e6], 0x94
mov byte [ebp - 0x9e5], 0xa2
mov byte [ebp - 0x9e4], 0xb5
mov byte [ebp - 0x9e3], 0xb1
mov byte [ebp - 0x9e2], 0xa2
mov byte [ebp - 0x9e1], 0xb5
mov byte [ebp - 0x9e0], 0xe9
mov byte [ebp - 0x9df], 0xa2
mov byte [ebp - 0x9de], 0xbf
mov byte [ebp - 0x9dd], 0xa2
mov byte [ebp - 0x9dc], 0xc7
push 0x73
push 0
lea ecx, [ebp - 0x9db]
push ecx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x968], 0x83
mov byte [ebp - 0x967], 0xae
mov byte [ebp - 0x966], 0xb4
mov byte [ebp - 0x965], 0xac
mov byte [ebp - 0x964], 0xab
mov byte [ebp - 0x963], 0xa2
mov byte [ebp - 0x962], 0xb4
mov byte [ebp - 0x961], 0xb4
mov byte [ebp - 0x960], 0x91
mov byte [ebp - 0x95f], 0xae
mov byte [ebp - 0x95e], 0xa2
mov byte [ebp - 0x95d], 0xb0
mov byte [ebp - 0x95c], 0xe9
mov byte [ebp - 0x95b], 0xa2
mov byte [ebp - 0x95a], 0xbf
mov byte [ebp - 0x959], 0xa2
mov byte [ebp - 0x958], 0xc7
push 0x6f
push 0
lea edx, [ebp - 0x957]
push edx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x8e8], 0x85
mov byte [ebp - 0x8e7], 0xa6
mov byte [ebp - 0x8e6], 0xb5
mov byte [ebp - 0x8e5], 0x84
mov byte [ebp - 0x8e4], 0xab
mov byte [ebp - 0x8e3], 0xae
mov byte [ebp - 0x8e2], 0xa2
mov byte [ebp - 0x8e1], 0xa9
mov byte [ebp - 0x8e0], 0xb3
mov byte [ebp - 0x8df], 0x91
mov byte [ebp - 0x8de], 0xae
mov byte [ebp - 0x8dd], 0xa2
mov byte [ebp - 0x8dc], 0xb0
mov byte [ebp - 0x8db], 0xe9
mov byte [ebp - 0x8da], 0xa2
mov byte [ebp - 0x8d9], 0xbf
mov byte [ebp - 0x8d8], 0xa2
mov byte [ebp - 0x8d7], 0xc7
push 0x6e
push 0
lea eax, [ebp - 0x8d6]
push eax
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x868], 0x8f
mov byte [ebp - 0x867], 0xae
mov byte [ebp - 0x866], 0xa9
mov byte [ebp - 0x865], 0xb3
mov byte [ebp - 0x864], 0x84
mov byte [ebp - 0x863], 0xab
mov byte [ebp - 0x862], 0xae
mov byte [ebp - 0x861], 0xa2
mov byte [ebp - 0x860], 0xa9
mov byte [ebp - 0x85f], 0xb3
mov byte [ebp - 0x85e], 0xe9
mov byte [ebp - 0x85d], 0xa2
mov byte [ebp - 0x85c], 0xbf
mov byte [ebp - 0x85b], 0xa2
mov byte [ebp - 0x85a], 0xc7
push 0x71
push 0
lea ecx, [ebp - 0x859]
push ecx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x7e8], 0x83
mov byte [ebp - 0x7e7], 0xa2
mov byte [ebp - 0x7e6], 0xb4
mov byte [ebp - 0x7e5], 0xac
mov byte [ebp - 0x7e4], 0xb3
mov byte [ebp - 0x7e3], 0xa8
mov byte [ebp - 0x7e2], 0xb7
mov byte [ebp - 0x7e1], 0x89
mov byte [ebp - 0x7e0], 0xa6
mov byte [ebp - 0x7df], 0xb1
mov byte [ebp - 0x7de], 0xe9
mov byte [ebp - 0x7dd], 0xa2
mov byte [ebp - 0x7dc], 0xbf
mov byte [ebp - 0x7db], 0xa2
mov byte [ebp - 0x7da], 0xc7
push 0x71
push 0
lea edx, [ebp - 0x7d9]
push edx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x768], 0xa1
mov byte [ebp - 0x767], 0xb5
mov byte [ebp - 0x766], 0xa2
mov byte [ebp - 0x765], 0xa2
mov byte [ebp - 0x764], 0xbd
mov byte [ebp - 0x763], 0xa2
mov byte [ebp - 0x762], 0xaa
mov byte [ebp - 0x761], 0xa6
mov byte [ebp - 0x760], 0xa0
mov byte [ebp - 0x75f], 0xae
mov byte [ebp - 0x75e], 0xa4
mov byte [ebp - 0x75d], 0xe9
mov byte [ebp - 0x75c], 0xa2
mov byte [ebp - 0x75b], 0xbf
mov byte [ebp - 0x75a], 0xa2
mov byte [ebp - 0x759], 0xc7
push 0x70
push 0
lea eax, [ebp - 0x758]
push eax
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x6e0], 0x91
mov byte [ebp - 0x6df], 0x85
mov byte [ebp - 0x6de], 0xa8
mov byte [ebp - 0x6dd], 0xbf
mov byte [ebp - 0x6dc], 0x93
mov byte [ebp - 0x6db], 0xb5
mov byte [ebp - 0x6da], 0xa6
mov byte [ebp - 0x6d9], 0xbe
mov byte [ebp - 0x6d8], 0xe9
mov byte [ebp - 0x6d7], 0xa2
mov byte [ebp - 0x6d6], 0xbf
mov byte [ebp - 0x6d5], 0xa2
mov byte [ebp - 0x6d4], 0xc7
push 0x73
push 0
lea ecx, [ebp - 0x6d3]
push ecx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x660], 0x91
mov byte [ebp - 0x65f], 0x85
mov byte [ebp - 0x65e], 0xa8
mov byte [ebp - 0x65d], 0xbf
mov byte [ebp - 0x65c], 0x94
mov byte [ebp - 0x65b], 0xa2
mov byte [ebp - 0x65a], 0xb5
mov byte [ebp - 0x659], 0xb1
mov byte [ebp - 0x658], 0xae
mov byte [ebp - 0x657], 0xa4
mov byte [ebp - 0x656], 0xa2
mov byte [ebp - 0x655], 0xe9
mov byte [ebp - 0x654], 0xa2
mov byte [ebp - 0x653], 0xbf
mov byte [ebp - 0x652], 0xa2
mov byte [ebp - 0x651], 0xc7
push 0x70
push 0
lea edx, [ebp - 0x650]
push edx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x5e0], 0x91
mov byte [ebp - 0x5df], 0x8a
mov byte [ebp - 0x5de], 0xb0
mov byte [ebp - 0x5dd], 0xa6
mov byte [ebp - 0x5dc], 0xb5
mov byte [ebp - 0x5db], 0xa2
mov byte [ebp - 0x5da], 0x92
mov byte [ebp - 0x5d9], 0xb4
mov byte [ebp - 0x5d8], 0xa2
mov byte [ebp - 0x5d7], 0xb5
mov byte [ebp - 0x5d6], 0xe9
mov byte [ebp - 0x5d5], 0xa2
mov byte [ebp - 0x5d4], 0xbf
mov byte [ebp - 0x5d3], 0xa2
mov byte [ebp - 0x5d2], 0xc7
push 0x71
push 0
lea eax, [ebp - 0x5d1]
push eax
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x560], 0x91
mov byte [ebp - 0x55f], 0x8a
mov byte [ebp - 0x55e], 0xb0
mov byte [ebp - 0x55d], 0xa6
mov byte [ebp - 0x55c], 0xb5
mov byte [ebp - 0x55b], 0xa2
mov byte [ebp - 0x55a], 0x93
mov byte [ebp - 0x559], 0xb5
mov byte [ebp - 0x558], 0xa6
mov byte [ebp - 0x557], 0xbe
mov byte [ebp - 0x556], 0xe9
mov byte [ebp - 0x555], 0xa2
mov byte [ebp - 0x554], 0xbf
mov byte [ebp - 0x553], 0xa2
mov byte [ebp - 0x552], 0xc7
push 0x71
push 0
lea ecx, [ebp - 0x551]
push ecx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x4e0], 0x91
mov byte [ebp - 0x4df], 0x8a
mov byte [ebp - 0x4de], 0x92
mov byte [ebp - 0x4dd], 0xb7
mov byte [ebp - 0x4dc], 0xa0
mov byte [ebp - 0x4db], 0xb5
mov byte [ebp - 0x4da], 0xa6
mov byte [ebp - 0x4d9], 0xa3
mov byte [ebp - 0x4d8], 0xa2
mov byte [ebp - 0x4d7], 0x8f
mov byte [ebp - 0x4d6], 0xa2
mov byte [ebp - 0x4d5], 0xab
mov byte [ebp - 0x4d4], 0xb7
mov byte [ebp - 0x4d3], 0xa2
mov byte [ebp - 0x4d2], 0xb5
mov byte [ebp - 0x4d1], 0xe9
mov byte [ebp - 0x4d0], 0xa2
mov byte [ebp - 0x4cf], 0xbf
mov byte [ebp - 0x4ce], 0xa2
mov byte [ebp - 0x4cd], 0xc7
push 0x6c
push 0
lea edx, [ebp - 0x4cc]
push edx
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x460], 0xb1
mov byte [ebp - 0x45f], 0xaa
mov byte [ebp - 0x45e], 0xb3
mov byte [ebp - 0x45d], 0xa8
mov byte [ebp - 0x45c], 0xa8
mov byte [ebp - 0x45b], 0xab
mov byte [ebp - 0x45a], 0xb4
mov byte [ebp - 0x459], 0xa3
mov byte [ebp - 0x458], 0xe9
mov byte [ebp - 0x457], 0xa2
mov byte [ebp - 0x456], 0xbf
mov byte [ebp - 0x455], 0xa2
mov byte [ebp - 0x454], 0xc7
push 0x73
push 0
lea eax, [ebp - 0x453]
push eax
call fcn.004067d0
add esp, 0xc
mov byte [ebp - 0x3e0], 0xb1
mov byte [ebp - 0x3df], 0xaa
mov byte [ebp - 0x3de], 0xa6
mov byte [ebp - 0x3dd], 0xa4
mov byte [ebp - 0x3dc], 0xb3
mov byte [ebp - 0x3db], 0xaf
mov byte [ebp - 0x3da], 0xab
mov byte [ebp - 0x3d9], 0xb7
mov byte [ebp - 0x3d8], 0xe9
mov byte [ebp - 0x3d7], 0xa2
mov byte [ebp - 0x3d6], 0xbf
mov byte [ebp - 0x3d5], 0xa2
mov byte [ebp - 0x3d4], 0xc7
push 0x73
push 0
lea ecx, [ebp - 0x3d3]
push ecx
call fcn.004067d0
add esp, 0xc
push pe_nt_image_headers32
push 0
lea edx, [ebp - 0xee8]
push edx
call fcn.004067d0
add esp, 0xc
mov dword [ebp - 0x1618], 0
jmp 0x4635c0
mov eax, dword [ebp - 0x1618]
add eax, 1
mov dword [ebp - 0x1618], eax
cmp dword [ebp - 0x1618], 6
jae 0x46361e
push 1
mov ecx, dword [ebp - 0x1618]
shl ecx, 7
lea edx, [ebp + ecx - 0x1408]
push edx
call fcn.00461000
add esp, 8
push eax
call fcn.00460e00
add esp, 4
test eax, eax
jbe 0x46361c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3fc]
or ecx, 2
mov edx, dword [ebp + 8]
mov dword [edx + 0x3fc], ecx
push 0x48692c
lea eax, [ebp - 0xee8]
push eax
call fcn.00407225
add esp, 8
jmp 0x46361e
jmp 0x4635b1
mov dword [ebp - 0x161c], 0
jmp 0x463639
mov ecx, dword [ebp - 0x161c]
add ecx, 1
mov dword [ebp - 0x161c], ecx
cmp dword [ebp - 0x161c], 2
jae 0x463697
push 1
mov edx, dword [ebp - 0x161c]
shl edx, 7
lea eax, [ebp + edx - 0xfe8]
push eax
call fcn.00461000
add esp, 8
push eax
call fcn.00460e00
add esp, 4
test eax, eax
jbe 0x463695
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3fc]
or edx, 1
mov eax, dword [ebp + 8]
mov dword [eax + 0x3fc], edx
push 0x48693c
lea ecx, [ebp - 0xee8]
push ecx
call fcn.00407225
add esp, 8
jmp 0x463697
jmp 0x46362a
mov dword [ebp - 0x1620], 0
jmp 0x4636b2
mov edx, dword [ebp - 0x1620]
add edx, 1
mov dword [ebp - 0x1620], edx
cmp dword [ebp - 0x1620], 6
jae 0x463710
push 1
mov eax, dword [ebp - 0x1620]
shl eax, 7
lea ecx, [ebp + eax - 0x308]
push ecx
call fcn.00461000
add esp, 8
push eax
call fcn.00460e00
add esp, 4
test eax, eax
jbe 0x46370e
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3fc]
or eax, 8
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x3fc], eax
push 0x486948
lea edx, [ebp - 0xee8]
push edx
call fcn.00407225
add esp, 8
jmp 0x463710
jmp 0x4636a3
mov dword [ebp - 0x1624], 0
jmp 0x46372b
mov eax, dword [ebp - 0x1624]
add eax, 1
mov dword [ebp - 0x1624], eax
cmp dword [ebp - 0x1624], 0xe
jae 0x463778
push 1
mov ecx, dword [ebp - 0x1624]
shl ecx, 7
lea edx, [ebp + ecx - 0xde8]
push edx
call fcn.00461000
add esp, 8
push eax
call fcn.00460e00
add esp, 4
test eax, eax
jbe 0x463776
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3fc]
or ecx, 0x10000000
mov edx, dword [ebp + 8]
mov dword [edx + 0x3fc], ecx
jmp 0x463778
jmp 0x46371c
push 0x486954
push 0x4b0d28
call fcn.00460cc0
add esp, 8
test eax, eax
jne 0x4637f6
mov dword [ebp - 0x1628], 0
jmp 0x4637a9
mov eax, dword [ebp - 0x1628]
add eax, 1
mov dword [ebp - 0x1628], eax
cmp dword [ebp - 0x1628], 7
jae 0x4637f6
push 1
mov ecx, dword [ebp - 0x1628]
shl ecx, 7
lea edx, [ebp + ecx - 0x6e0]
push edx
call fcn.00461000
add esp, 8
push eax
call fcn.00460e00
add esp, 4
test eax, eax
jbe 0x4637f4
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3fc]
or ecx, 0x20000000
mov edx, dword [ebp + 8]
mov dword [edx + 0x3fc], ecx
jmp 0x4637f6
jmp 0x46379a
call fcn.00460ea0
test eax, eax
je 0x463817
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3fc]
or ecx, 0x40000000
mov edx, dword [ebp + 8]
mov dword [edx + 0x3fc], ecx
mov dword [ebp - 0x1610], pe_nt_image_headers32
lea eax, [ebp - 0x1610]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x240
push ecx
lea edx, [ebp - 0xee8]
push edx
call fcn.00460d50
add esp, 0xc
push 0x40
push 0x1000
push 0x288
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x6e4], eax
mov dword [ebp - 0x314], 0
lea eax, [ebp - 0x160c]
push eax
mov ecx, dword [ebp - 0x6e4]
push ecx
call sub.IPHLPAPI.DLL_GetAdaptersInfo
push 0x8000
push 0
mov edx, dword [ebp - 0x6e4]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualFree]
push 0x40
push 0x1000
mov eax, dword [ebp - 0x160c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x6e4], eax
lea ecx, [ebp - 0x160c]
push ecx
mov edx, dword [ebp - 0x6e4]
push edx
call sub.IPHLPAPI.DLL_GetAdaptersInfo
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0
jne 0x46393b
cmp dword [ebp - 0x6e4], 0
je 0x463939
push 6
mov eax, dword [ebp - 0x6e4]
add eax, 0x194
push eax
lea ecx, [ebp - 0x310]
push ecx
call fcn.00405d00
add esp, 0xc
movzx edx, byte [ebp - 0x30b]
push edx
movzx eax, byte [ebp - 0x30c]
push eax
movzx ecx, byte [ebp - 0x30d]
push ecx
movzx edx, byte [ebp - 0x30e]
push edx
movzx eax, byte [ebp - 0x30f]
push eax
movzx ecx, byte [ebp - 0x310]
push ecx
push 0x486960
push 0x18
mov edx, dword [ebp + 8]
add edx, 0x364
push edx
call fcn.004060e2
add esp, 0x24
jmp 0x463995
push 6
push 0
lea eax, [ebp - 0x310]
push eax
call fcn.004067d0
add esp, 0xc
movzx ecx, byte [ebp - 0x30b]
push ecx
movzx edx, byte [ebp - 0x30c]
push edx
movzx eax, byte [ebp - 0x30d]
push eax
movzx ecx, byte [ebp - 0x30e]
push ecx
movzx edx, byte [ebp - 0x30f]
push edx
movzx eax, byte [ebp - 0x310]
push eax
push str._02X__02X__02X__02X__02X__02X
mov ecx, dword [ebp + 8]
add ecx, 0x364
push ecx
call fcn.00404ce0
add esp, 0x20
push 0x8000
push 0
mov edx, dword [ebp - 0x6e4]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualFree]
push 0x114
push 0
lea eax, [ebp - 0x1108]
push eax
call fcn.004067d0
add esp, 0xc
mov dword [ebp - 0x1108], 0x114
lea ecx, [ebp - 0x1108]
push ecx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x463a15
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x1104]
mov dword [edx + 0x404], eax
mov ecx, dword [ebp - 0x10fc]
push ecx
mov edx, dword [ebp - 0x1100]
push edx
mov eax, dword [ebp - 0x1104]
push eax
push str._d._d._d
mov ecx, dword [ebp + 8]
add ecx, 0x354
push ecx
call fcn.00404d10
add esp, 0x14
push 1
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
push 0
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
push str._d_d
mov edx, dword [ebp + 8]
add edx, 0x340
push edx
call fcn.00404d40
add esp, 0x10
mov eax, dword [ebp + 8]
mov dword [eax + 0x40c], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00405ce8
mov esp, ebp
pop ebp
ret