Function at 0x415ee0
Capabilities:
Connect to wmi namespace via wbemlocator
Get mac address on windows
Get memory capacity
Reference wmi statements

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4687b1
mov eax, dword fs:[0]
push eax
sub esp, 0x580
mov eax, dword [0x48706c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x540], edx
mov dword [ebp - 0x544], ecx
mov dword [ebp - 0x538], ecx
xorps xmm0, xmm0
mov dword [ebp - 0x538], ecx
movq qword [ebp - 0x478], xmm0
movups xmmword [ebp - 0x488], xmm0
mov dword [ebp - 0x478], 0
movups xmmword [ebp - 0x488], xmm0
mov dword [ebp - 0x474], 0x100
mov dword [ebp - 4], 0
lea eax, [ebp - 0x488]
movups xmmword [ebp - 0x43c], xmm0
mov dword [ebp - 0x42c], 0
movups xmmword [ebp - 0x44c], xmm0
mov dword [ebp - 0x44c], eax
movups xmmword [ebp - 0x448], xmm0
mov dword [ebp - 0x438], 0
mov dword [ebp - 0x434], 0x100
mov dword [ebp - 0x430], 0x144
mov byte [ebp - 0x42c], 0
mov dword [ebp - 0x4a8], 0
mov dword [ebp - 0x4a4], 0xf
mov byte [ebp - 0x4b8], 0
mov dword [ebp - 0x4c0], 0
mov dword [ebp - 0x4bc], 0xf
mov byte [ebp - 0x4d0], 0
lea ecx, [ebp - 0x44c]
mov byte [ebp - 4], 3
call fcn.00412d80
push 0
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
js 0x4171a8
lea eax, [ebp - 0x524]
mov dword [ebp - 0x524], 0
push eax
push 0x46e83c
push 1
push 0
push 0x46e90c
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x416034
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x4171a8
push 0xc
mov dword [ebp - 0x520], 0
call fcn.0042bacb
mov esi, eax
add esp, 4
mov dword [ebp - 0x538], esi
mov byte [ebp - 4], 4
test esi, esi
je 0x41608b
xorps xmm0, xmm0
movq qword [esi], xmm0
mov dword [esi + 8], 0
push str.._rootCIMV2
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x417a7e
jmp 0x41608d
xor esi, esi
mov byte [ebp - 4], 3
mov dword [ebp - 0x538], esi
test esi, esi
je 0x417a88
lea edx, [ebp - 0x520]
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x524]
push edx
push 0
push 0
mov ecx, dword [eax]
push 0
push 0
push 0
push 0
push dword [esi]
push eax
call dword [ecx + 0xc]
lea ecx, [esi + 8]
mov byte [ebp - 4], 3
push ecx
mov edi, eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x41610d
mov eax, dword [esi]
test eax, eax
je 0x4160eb
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x416102
push eax
call fcn.0042bac6
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0042bafb
add esp, 8
test edi, edi
jns 0x416128
mov eax, dword [ebp - 0x524]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x4171a8
push 0
push 0
push 3
push 6
push 0
push 0
push 0xa
push dword [ebp - 0x520]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x416169
mov eax, dword [ebp - 0x520]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x524]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x4171a8
push 0xc
mov dword [ebp - 0x518], 0
mov dword [ebp - 0x514], 0
mov dword [ebp - 0x51c], 0
call fcn.0042bacb
mov esi, eax
add esp, 4
mov dword [ebp - 0x538], esi
mov byte [ebp - 4], 6
test esi, esi
je 0x4161cb
xorps xmm0, xmm0
movq qword [esi], xmm0
mov dword [esi + 8], 0
push str.SELECT__FROM_Win32_OperatingSystem
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call fcn.0042ccd0
mov dword [esi], eax
jmp 0x4161cd
xor esi, esi
mov byte [ebp - 4], 3
mov dword [ebp - 0x538], esi
test esi, esi
je 0x417a92
push 0xc
mov byte [ebp - 4], 7
call fcn.0042bacb
mov edi, eax
add esp, 4
mov dword [ebp - 0x53c], edi
mov byte [ebp - 4], 8
test edi, edi
je 0x416227
xorps xmm0, xmm0
movq qword [edi], xmm0
mov dword [edi + 8], 0
push 0x47cb1c
mov dword [edi + 4], 0
mov dword [edi + 8], 1
call fcn.0042ccd0
mov dword [edi], eax
jmp 0x416229
xor edi, edi
mov byte [ebp - 4], 7
mov dword [ebp - 0x53c], edi
test edi, edi
je 0x417a9c
lea edx, [ebp - 0x518]
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x520]
push edx
push 0
push 0x30
push dword [esi]
mov ecx, dword [eax]
push dword [edi]
push eax
call dword [ecx + 0x50]
lea ecx, [edi + 8]
mov dword [ebp - 0x538], eax
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x4162a3
mov ecx, dword [edi]
test ecx, ecx
je 0x416281
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [edi], 0
mov eax, dword [edi + 4]
test eax, eax
je 0x416298
push eax
call fcn.0042bac6
add esp, 4
mov dword [edi + 4], 0
push 0xc
push edi
call fcn.0042bafb
add esp, 8
lea eax, [esi + 8]
mov byte [ebp - 4], 3
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x4162ea
mov eax, dword [esi]
test eax, eax
je 0x4162c8
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4162df
push eax
call fcn.0042bac6
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0042bafb
add esp, 8
cmp dword [ebp - 0x538], 0
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantInit]
jl 0x4164be
mov ecx, dword [ebp - 0x518]
test ecx, ecx
je 0x4164be
mov eax, dword [ecx]
lea edx, [ebp - 0x51c]
push edx
lea edx, [ebp - 0x514]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x51c], 0
je 0x4164be
lea eax, [ebp - 0x534]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp - 0x514]
lea edx, [ebp - 0x534]
push 0
push 0
push edx
mov ecx, dword [eax]
push 0
push 0x47cb20
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x4163ff
push 0
push 0
push 0x400
lea eax, [ebp - 0x428]
push eax
push dword [ebp - 0x52c]
call edi
push eax
push dword [ebp - 0x52c]
push 0
push 0xfde9
call esi
cmp eax, 0x400
jae 0x417aa6
push 5
lea ecx, [ebp - 0x44c]
mov byte [ebp + eax - 0x428], 0
call fcn.004132d0
push 8
push str.hostname
lea ecx, [ebp - 0x44c]
call fcn.004133e0
lea esi, [ebp - 0x428]
lea ecx, [esi + 1]
nop dword [eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x4163d0
sub esi, ecx
lea ecx, [ebp - 0x44c]
push 5
call fcn.004132d0
push esi
lea eax, [ebp - 0x428]
push eax
lea ecx, [ebp - 0x44c]
call fcn.004133e0
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 0x514]
lea edx, [ebp - 0x534]
push 0
push 0
push edx
mov ecx, dword [eax]
push 0
push str.Caption
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x4164b1
push 0
push 0
push 0x400
lea eax, [ebp - 0x428]
push eax
push dword [ebp - 0x52c]
call edi
push eax
push dword [ebp - 0x52c]
push 0
push 0xfde9
call esi
cmp eax, 0x400
jae 0x417aa6
push 5
lea ecx, [ebp - 0x44c]
mov byte [ebp + eax - 0x428], 0
call fcn.004132d0
push 2
push 0x47cb4c
lea ecx, [ebp - 0x44c]
call fcn.004133e0
lea esi, [ebp - 0x428]
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x416488
sub esi, ecx
lea ecx, [ebp - 0x44c]
push 5
call fcn.004132d0
push esi
lea eax, [ebp - 0x428]
push eax
lea ecx, [ebp - 0x44c]
call fcn.004133e0
lea eax, [ebp - 0x534]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x514]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x518]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xc
mov dword [ebp - 0x518], 0
call fcn.0042bacb
mov edi, eax
add esp, 4
mov dword [ebp - 0x53c], edi
mov byte [ebp - 4], 0xa
test edi, edi
je 0x416524
xorps xmm0, xmm0
movq qword [edi], xmm0
mov dword [edi + 8], 0
push str.SELECT__FROM_Win32_processor
mov dword [edi + 4], 0
mov dword [edi + 8], 1
call fcn.0042ccd0
mov dword [edi], eax
jmp 0x416526
xor edi, edi
mov byte [ebp - 4], 3
mov dword [ebp - 0x53c], edi
test edi, edi
je 0x417aab
push 0xc
mov byte [ebp - 4], 0xb
call fcn.0042bacb
mov esi, eax
add esp, 4
mov dword [ebp - 0x538], esi
mov byte [ebp - 4], 0xc
test esi, esi
je 0x416580
xorps xmm0, xmm0
movq qword [esi], xmm0
mov dword [esi + 8], 0
push 0x47cb1c
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call fcn.0042ccd0
mov dword [esi], eax
jmp 0x416582
xor esi, esi
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x538], esi
test esi, esi
je 0x417ab5
lea edx, [ebp - 0x518]
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x520]
push edx
push 0
push 0x30
push dword [edi]
mov ecx, dword [eax]
push dword [esi]
push eax
call dword [ecx + 0x50]
lea ecx, [esi + 8]
mov dword [ebp - 0x538], eax
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x4165fc
mov ecx, dword [esi]
test ecx, ecx
je 0x4165da
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4165f1
push eax
call fcn.0042bac6
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0042bafb
add esp, 8
lea eax, [edi + 8]
mov byte [ebp - 4], 3
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x416643
mov eax, dword [edi]
test eax, eax
je 0x416621
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [edi], 0
mov eax, dword [edi + 4]
test eax, eax
je 0x416638
push eax
call fcn.0042bac6
add esp, 4
mov dword [edi + 4], 0
push 0xc
push edi
call fcn.0042bafb
add esp, 8
cmp dword [ebp - 0x538], 0
jl 0x416780
mov ecx, dword [ebp - 0x518]
test ecx, ecx
je 0x416780
lea edx, [ebp - 0x51c]
mov dword [ebp - 0x514], 0
push edx
lea edx, [ebp - 0x514]
mov dword [ebp - 0x51c], 0
mov eax, dword [ecx]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x51c], 0
je 0x416768
lea eax, [ebp - 0x534]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp - 0x514]
lea edx, [ebp - 0x534]
push 0
push 0
push edx
mov ecx, dword [eax]
push 0
push str.Name
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x41675b
push 0
push 0
push 0x400
lea eax, [ebp - 0x428]
push eax
push dword [ebp - 0x52c]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0x52c]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
cmp eax, 0x400
jae 0x417aa6
push 5
lea ecx, [ebp - 0x44c]
mov byte [ebp + eax - 0x428], 0
call fcn.004132d0
push 3
push 0x47cb7c
lea ecx, [ebp - 0x44c]
call fcn.004133e0
lea esi, [ebp - 0x428]
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x416732
sub esi, ecx
lea ecx, [ebp - 0x44c]
push 5
call fcn.004132d0
push esi
lea eax, [ebp - 0x428]
push eax
lea ecx, [ebp - 0x44c]
call fcn.004133e0
lea eax, [ebp - 0x534]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x514]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x518]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xc
mov dword [ebp - 0x518], 0
call fcn.0042bacb
mov esi, eax
add esp, 4
mov dword [ebp - 0x53c], esi
mov byte [ebp - 4], 0xe
test esi, esi
je 0x4167ce
xorps xmm0, xmm0
movq qword [esi], xmm0
mov dword [esi + 8], 0
push str.SELECT__FROM_Win32_Process
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call fcn.0042ccd0
mov dword [esi], eax
jmp 0x4167d0
xor esi, esi
mov byte [ebp - 4], 3
mov dword [ebp - 0x53c], esi
test esi, esi
je 0x417abf
push 0xc
mov byte [ebp - 4], 0xf
call fcn.0042bacb
mov edi, eax
add esp, 4
mov dword [ebp - 0x538], edi
mov byte [ebp - 4], 0x10
test edi, edi
je 0x41682a
xorps xmm0, xmm0
movq qword [edi], xmm0
mov dword [edi + 8], 0
push 0x47cb1c
mov dword [edi + 4], 0
mov dword [edi + 8], 1
call fcn.0042ccd0
mov dword [edi], eax
jmp 0x41682c
xor edi, edi
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x538], edi
test edi, edi
je 0x417ac9
lea edx, [ebp - 0x518]
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x520]
push edx
push 0
push 0x30
push dword [esi]
mov ecx, dword [eax]
push dword [edi]
push eax
call dword [ecx + 0x50]
lea ecx, [edi + 8]
mov dword [ebp - 0x538], eax
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x4168a6
mov ecx, dword [edi]
test ecx, ecx
je 0x416884
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [edi], 0
mov eax, dword [edi + 4]
test eax, eax
je 0x41689b
push eax
call fcn.0042bac6
add esp, 4
mov dword [edi + 4], 0
push 0xc
push edi
call fcn.0042bafb
add esp, 8
lea eax, [esi + 8]
mov byte [ebp - 4], 3
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x4168ed
mov eax, dword [esi]
test eax, eax
je 0x4168cb
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4168e2
push eax
call fcn.0042bac6
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0042bafb
add esp, 8
cmp dword [ebp - 0x538], 0
jl 0x416cd0
push 5
lea ecx, [ebp - 0x44c]
call fcn.004132d0
push 7
push str.process
lea ecx, [ebp - 0x44c]
call fcn.004133e0
push 4
lea ecx, [ebp - 0x44c]
call fcn.004132d0
push ecx
lea ecx, [ebp - 0x448]
call fcn.00413910
mov esi, dword [ebp - 0x44c]
mov ecx, esi
push 1
mov dword [eax], 0
mov byte [eax + 4], 1
call fcn.00413aa0
mov ecx, dword [esi + 0xc]
test ecx, ecx
jne 0x41696c
push 0x82
push str.d:2024ls2024_rapidjsoninternal_stack.h
push str.stackTop_
call fcn.0044b48e
mov ecx, dword [esi + 0xc]
add esp, 0xc
mov eax, dword [esi + 0x10]
sub eax, ecx
cmp eax, 1
jge 0x416990
push 0x83
push str.d:2024ls2024_rapidjsoninternal_stack.h
push str.static_cast_std::ptrdiff_t__sizeof_T___count_____stackEnd____stackTop__
call fcn.0044b48e
mov ecx, dword [esi + 0xc]
add esp, 0xc
lea eax, [ecx + 1]
mov dword [esi + 0xc], eax
mov byte [ecx], 0x5b
mov ecx, dword [ebp - 0x518]
mov dword [ebp - 0x514], 0
mov dword [ebp - 0x51c], 0
test ecx, ecx
je 0x416cb8
nop dword [eax + eax]
mov eax, dword [ecx]
lea edx, [ebp - 0x51c]
push edx
lea edx, [ebp - 0x514]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x51c], 0
je 0x416cb8
push 3
lea ecx, [ebp - 0x44c]
call fcn.004132d0
push ecx
lea ecx, [ebp - 0x448]
call fcn.00413910
mov esi, dword [ebp - 0x44c]
mov ecx, esi
push 1
mov dword [eax], 0
mov byte [eax + 4], 0
call fcn.00413aa0
mov ecx, dword [esi + 0xc]
test ecx, ecx
jne 0x416a38
push 0x82
push str.d:2024ls2024_rapidjsoninternal_stack.h
push str.stackTop_
call fcn.0044b48e
mov ecx, dword [esi + 0xc]
add esp, 0xc
mov eax, dword [esi + 0x10]
sub eax, ecx
cmp eax, 1
jge 0x416a5c
push 0x83
push str.d:2024ls2024_rapidjsoninternal_stack.h
push str.static_cast_std::ptrdiff_t__sizeof_T___count_____stackEnd____stackTop__
call fcn.0044b48e
mov ecx, dword [esi + 0xc]
add esp, 0xc
lea eax, [ecx + 1]
push 0
mov dword [esi + 0xc], eax
lea edx, [ebp - 0x534]
push 0
mov byte [ecx], 0x7b
mov eax, dword [ebp - 0x514]
push edx
push 0
push str.Name
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x416b2d
push 0
push 0
push 0x400
lea eax, [ebp - 0x428]
push eax
push dword [ebp - 0x52c]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push eax
push dword [ebp - 0x52c]
push 0
push 0
call edi
cmp eax, 0x400
jae 0x417aa6
push 5
lea ecx, [ebp - 0x44c]
mov byte [ebp + eax - 0x428], 0
call fcn.004132d0
push 4
push str.name
lea ecx, [ebp - 0x44c]
call fcn.004133e0
lea esi, [ebp - 0x428]
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x416af5
sub esi, ecx
lea ecx, [ebp - 0x44c]
push 5
call fcn.004132d0
push esi
lea eax, [ebp - 0x428]
push eax
lea ecx, [ebp - 0x44c]
call fcn.004133e0
lea eax, [ebp - 0x534]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x416b33
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 0x514]
lea edx, [ebp - 0x534]
push 0
push 0
push edx
mov ecx, dword [eax]
push 0
push str.CommandLine
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x416bf6
push 0
push 0
push 0x400
lea eax, [ebp - 0x428]
push eax
push dword [ebp - 0x52c]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0x52c]
push 0
push 0
call edi
cmp eax, 0x400
jae 0x417aa6
push 5
lea ecx, [ebp - 0x44c]
mov byte [ebp + eax - 0x428], 0
call fcn.004132d0
push 3
push 0x47cbc4
lea ecx, [ebp - 0x44c]
call fcn.004133e0
lea esi, [ebp - 0x428]
lea ecx, [esi + 1]
nop dword [eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x416bc0
sub esi, ecx
lea ecx, [ebp - 0x44c]
push 5
call fcn.004132d0
push esi
lea eax, [ebp - 0x428]
push eax
lea ecx, [ebp - 0x44c]
call fcn.004133e0
lea eax, [ebp - 0x534]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x514]
lea edx, [ebp - 0x534]
push 0
push 0
push edx
mov ecx, dword [eax]
push 0
push 0x47cbc8
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x416c92
push 0
push 0
push 0x400
lea eax, [ebp - 0x428]
push eax
push dword [ebp - 0x52c]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0x52c]
push 0
push 0
call edi
cmp eax, 0x400
jae 0x417aa6
push 5
lea ecx, [ebp - 0x44c]
mov byte [ebp + eax - 0x428], 0
call fcn.004132d0
push 3
push 0x47cbd8
lea ecx, [ebp - 0x44c]
call fcn.004133e0
push 0xa
lea eax, [ebp - 0x428]
push 0
push eax
call fcn.0044d22c
add esp, 0xc
lea ecx, [ebp - 0x44c]
push eax
call fcn.00412e00
mov eax, dword [ebp - 0x514]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push ecx
lea ecx, [ebp - 0x44c]
call fcn.00412c30
mov ecx, dword [ebp - 0x518]
test ecx, ecx
jne 0x4169c0
push ecx
lea ecx, [ebp - 0x44c]
call fcn.00412aa0
mov eax, dword [ebp - 0x518]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xc
mov dword [ebp - 0x518], 0
call fcn.0042bacb
mov esi, eax
add esp, 4
mov dword [ebp - 0x53c], esi
mov byte [ebp - 4], 0x12
test esi, esi
je 0x416d1e
xorps xmm0, xmm0
movq qword [esi], xmm0
mov dword [esi + 8], 0
push str.SELECT__FROM_Win32_DiskDrive
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call fcn.0042ccd0
mov dword [esi], eax
jmp 0x416d20
xor esi, esi
mov byte [ebp - 4], 3
mov dword [ebp - 0x53c], esi
test esi, esi
je 0x417ad3
push 0xc
mov byte [ebp - 4], 0x13
call fcn.0042bacb
mov edi, eax
add esp, 4
mov dword [ebp - 0x538], edi
mov byte [ebp - 4], 0x14
test edi, edi
je 0x416d7a
xorps xmm0, xmm0
movq qword [edi], xmm0
mov dword [edi + 8], 0
push 0x47cb1c
mov dword [edi + 4], 0
mov dword [edi + 8], 1
call fcn.0042ccd0
mov dword [edi], eax
jmp 0x416d7c
xor edi, edi
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x538], edi
test edi, edi
je 0x417add
lea edx, [ebp - 0x518]
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x520]
push edx
push 0
push 0x30
push dword [esi]
mov ecx, dword [eax]
push dword [edi]
push eax
call dword [ecx + 0x50]
lea ecx, [edi + 8]
mov dword [ebp - 0x538], eax
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x416df6
mov ecx, dword [edi]
test ecx, ecx
je 0x416dd4
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [edi], 0
mov eax, dword [edi + 4]
test eax, eax
je 0x416deb
push eax
call fcn.0042bac6
add esp, 4
mov dword [edi + 4], 0
push 0xc
push edi
call fcn.0042bafb
add esp, 8
lea eax, [esi + 8]
mov byte [ebp - 4], 3
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x416e3d
mov eax, dword [esi]
test eax, eax
je 0x416e1b
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x416e32
push eax
call fcn.0042bac6
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0042bafb
add esp, 8
cmp dword [ebp - 0x538], 0
jl 0x4171a8
push 5
lea ecx, [ebp - 0x44c]
call fcn.004132d0
push 9
push str.diskdrive
lea ecx, [ebp - 0x44c]
call fcn.004133e0
lea ecx, [ebp - 0x44c]
call fcn.00412bb0
mov ecx, dword [ebp - 0x518]
mov dword [ebp - 0x514], 0
mov dword [ebp - 0x51c], 0
test ecx, ecx
je 0x417190
mov eax, dword [ecx]
lea edx, [ebp - 0x51c]
push edx
lea edx, [ebp - 0x514]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x51c], 0
je 0x417190
lea eax, [ebp - 0x534]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push 3
lea ecx, [ebp - 0x44c]
call fcn.004132d0
push ecx
lea ecx, [ebp - 0x448]
call fcn.00413910
mov esi, dword [ebp - 0x44c]
mov ecx, esi
push 1
mov dword [eax], 0
mov byte [eax + 4], 0
call fcn.00413aa0
mov ecx, dword [esi + 0xc]
test ecx, ecx
jne 0x416f1b
push 0x82
push str.d:2024ls2024_rapidjsoninternal_stack.h
push str.stackTop_
call fcn.0044b48e
mov ecx, dword [esi + 0xc]
add esp, 0xc
mov eax, dword [esi + 0x10]
sub eax, ecx
cmp eax, 1
jge 0x416f3f
push 0x83
push str.d:2024ls2024_rapidjsoninternal_stack.h
push str.static_cast_std::ptrdiff_t__sizeof_T___count_____stackEnd____stackTop__
call fcn.0044b48e
mov ecx, dword [esi + 0xc]
add esp, 0xc
lea eax, [ecx + 1]
push 0
mov dword [esi + 0xc], eax
lea edx, [ebp - 0x534]
push 0
mov byte [ecx], 0x7b
mov eax, dword [ebp - 0x514]
push edx
push 0
push str.Model
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x417003
push 0
push 0
push 0x400
lea eax, [ebp - 0x428]
push eax
push dword [ebp - 0x52c]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push eax
push dword [ebp - 0x52c]
push 0
push 0
call edi
cmp eax, 0x400
jae 0x417aa6
push 5
lea ecx, [ebp - 0x44c]
mov byte [ebp + eax - 0x428], 0
call fcn.004132d0
push 4
push str.name
lea ecx, [ebp - 0x44c]
call fcn.004133e0
lea esi, [ebp - 0x428]
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x416fd8
sub esi, ecx
lea ecx, [ebp - 0x44c]
push 5
call fcn.004132d0
push esi
lea eax, [ebp - 0x428]
push eax
lea ecx, [ebp - 0x44c]
call fcn.004133e0
jmp 0x417009
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 0x514]
lea edx, [ebp - 0x534]
push 0
push 0
push edx
mov ecx, dword [eax]
push 0
push str.SerialNumber
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x4170bc
push 0
push 0
push 0x400
lea eax, [ebp - 0x428]
push eax
push dword [ebp - 0x52c]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0x52c]
push 0
push 0
call edi
cmp eax, 0x400
jae 0x417aa6
push 5
lea ecx, [ebp - 0x44c]
mov byte [ebp + eax - 0x428], 0
call fcn.004132d0
push 6
push str.serial
lea ecx, [ebp - 0x44c]
call fcn.004133e0
lea esi, [ebp - 0x428]
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x417093
sub esi, ecx
lea ecx, [ebp - 0x44c]
push 5
call fcn.004132d0
push esi
lea eax, [ebp - 0x428]
push eax
lea ecx, [ebp - 0x44c]
call fcn.004133e0
mov eax, dword [ebp - 0x514]
lea edx, [ebp - 0x534]
push 0
push 0
push edx
mov ecx, dword [eax]
push 0
push str.Size
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x41715d
push 0
push 0
push 0x400
lea eax, [ebp - 0x428]
push eax
push dword [ebp - 0x52c]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0x52c]
push 0
push 0
call edi
cmp eax, 0x400
jae 0x417aa6
push 5
lea ecx, [ebp - 0x44c]
mov byte [ebp + eax - 0x428], 0
call fcn.004132d0
push 4
push str.size
lea ecx, [ebp - 0x44c]
call fcn.004133e0
push 0xa
lea eax, [ebp - 0x428]
push 0
push eax
call fcn.0044d22c
add esp, 0xc
lea ecx, [ebp - 0x44c]
push edx
push eax
call fcn.00418930
push ecx
lea ecx, [ebp - 0x44c]
call fcn.00412c30
lea eax, [ebp - 0x534]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x514]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebp - 0x518]
test ecx, ecx
jne 0x416e96
push ecx
lea ecx, [ebp - 0x44c]
call fcn.00412aa0
mov eax, dword [ebp - 0x518]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x40
lea eax, [ebp - 0x510]
push 0
push eax
call fcn.00443a00
add esp, 0xc
mov dword [ebp - 0x510], 0x40
lea eax, [ebp - 0x510]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
test eax, eax
je 0x41720c
push 5
lea ecx, [ebp - 0x44c]
call fcn.004132d0
push 6
push str.memory
lea ecx, [ebp - 0x44c]
call fcn.004133e0
push dword [ebp - 0x504]
lea ecx, [ebp - 0x44c]
push dword [ebp - 0x508]
call fcn.00418930
push 0x288
mov dword [ebp - 0x51c], 0x288
call fcn.0044ad11
mov edi, eax
add esp, 4
mov dword [ebp - 0x524], edi
test edi, edi
je 0x417870
mov esi, dword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
lea eax, [ebp - 0x51c]
push eax
push edi
call esi
cmp eax, 0x6f
jne 0x417276
push edi
call fcn.0044a1e1
push dword [ebp - 0x51c]
call fcn.0044ad11
mov edi, eax
mov dword [ebp - 0x524], eax
add esp, 8
test edi, edi
je 0x417870
lea eax, [ebp - 0x51c]
push eax
push edi
call esi
test eax, eax
je 0x417288
push edi
call fcn.0044a1e1
add esp, 4
jmp 0x417870
xorps xmm0, xmm0
mov dword [ebp - 0x450], 0
movq qword [ebp - 0x458], xmm0
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x454], 0
mov dword [ebp - 0x450], 0
mov eax, edi
mov dword [ebp - 0x520], eax
mov dword [ebp - 0x490], 0
mov dword [ebp - 0x48c], 0xf
mov byte [ebp - 0x4a0], 0
mov edi, 0xf
mov dword [ebp - 0x460], 0
mov dword [ebp - 0x45c], edi
mov byte [ebp - 0x470], 0
lea edx, [eax + 0x10c]
mov byte [ebp - 4], 0x18
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x417310
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x4a0]
call fcn.00405f60
mov ecx, dword [ebp - 0x520]
cmp dword [ecx + 0x190], 6
jne 0x4173a7
movzx eax, byte [ecx + 0x199]
push eax
movzx eax, byte [ecx + 0x198]
push eax
movzx eax, byte [ecx + 0x197]
push eax
movzx eax, byte [ecx + 0x196]
push eax
movzx eax, byte [ecx + 0x195]
push eax
movzx eax, byte [ecx + 0x194]
push eax
push str._.2X__.2X__.2X__.2X__.2X__.2X
lea eax, [ebp - 0x28]
push 0x18
push eax
call fcn.00401430
lea ecx, [ebp - 0x28]
add esp, 0x24
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x417382
sub ecx, edx
lea eax, [ebp - 0x28]
push ecx
push eax
lea ecx, [ebp - 0x470]
call fcn.00405f60
mov edi, dword [ebp - 0x45c]
mov ecx, dword [ebp - 0x520]
lea esi, [ecx + 0x1ac]
test esi, esi
je 0x4175b4
nop word [eax + eax]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
lea edi, [esi + 4]
mov byte [ebp - 4], 0x19
mov ecx, str.0.0.0.0
mov eax, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x417400
test dl, dl
je 0x4173fc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x417400
add eax, 2
add ecx, 2
test dl, dl
jne 0x4173e0
xor eax, eax
jmp 0x417405
sbb eax, eax
or eax, 1
test eax, eax
jne 0x417410
mov esi, dword [esi]
jmp 0x4175a0
mov ecx, edi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x417415
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x28]
call fcn.00405f60
cmp dword [ebp - 0x490], 0
je 0x417566
cmp dword [ebp - 0x18], 0
je 0x417566
cmp dword [ebp - 0x460], 0
je 0x417566
lea eax, [ebp - 0x4a0]
push eax
lea ecx, [ebp - 0x58c]
call fcn.00403fc0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x574]
call fcn.00403fc0
lea eax, [ebp - 0x470]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0x55c]
call fcn.00403fc0
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x544]
push dword [ebp - 0x53c]
lea ecx, [ebp - 0x530]
mov dword [ebp - 0x530], 0
push eax
lea eax, [ebp - 0x58c]
mov dword [ebp - 0x52c], 0
push eax
mov dword [ebp - 0x528], 0
call fcn.00410100
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x454]
cmp dword [ebp - 0x450], ecx
je 0x41752f
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov eax, dword [ebp - 0x530]
mov dword [ecx], eax
mov eax, dword [ebp - 0x52c]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x528]
mov dword [ecx + 8], eax
add dword [ebp - 0x454], 0xc
mov dword [ebp - 0x530], 0
mov dword [ebp - 0x52c], 0
mov dword [ebp - 0x528], 0
jmp 0x417542
lea eax, [ebp - 0x530]
push eax
push ecx
lea ecx, [ebp - 0x458]
call fcn.004192b0
lea ecx, [ebp - 0x530]
call fcn.00405da0
push fcn.00403e70
push 3
push 0x18
lea eax, [ebp - 0x58c]
mov byte [ebp - 4], 0x19
push eax
call fcn.0042bb2c
mov esi, dword [esi]
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x4175a0
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x417596
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x417a79
push edx
push ecx
call fcn.0042bafb
add esp, 8
test esi, esi
jne 0x4173c0
mov edi, dword [ebp - 0x45c]
mov ecx, dword [ebp - 0x520]
mov ecx, dword [ecx]
mov dword [ebp - 0x520], ecx
mov byte [ebp - 4], 0x17
cmp edi, 0x10
jb 0x4175f4
mov ecx, dword [ebp - 0x470]
inc edi
mov eax, ecx
cmp edi, 0x1000
jb 0x4175ea
mov ecx, dword [ecx - 4]
add edi, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x417a79
push edi
push ecx
call fcn.0042bafb
add esp, 8
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x48c]
cmp edx, 0x10
jb 0x417632
mov ecx, dword [ebp - 0x4a0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x417628
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x417a79
push edx
push ecx
call fcn.0042bafb
add esp, 8
mov eax, dword [ebp - 0x520]
test eax, eax
jne 0x4172c3
push dword [ebp - 0x524]
call fcn.0044a1e1
mov ecx, dword [ebp - 0x454]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0x458]
add esp, 4
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x417861
push 5
lea ecx, [ebp - 0x44c]
call fcn.004132d0
push 9
push str.nicconfig
lea ecx, [ebp - 0x44c]
call fcn.004133e0
lea ecx, [ebp - 0x44c]
call fcn.00412bb0
mov eax, dword [ebp - 0x454]
mov esi, dword [ebp - 0x458]
mov dword [ebp - 0x538], eax
mov dword [ebp - 0x524], esi
cmp esi, eax
je 0x417855
nop word [eax + eax]
lea ecx, [ebp - 0x44c]
call fcn.00412d80
push 5
lea ecx, [ebp - 0x44c]
call fcn.004132d0
push 4
push str.name
lea ecx, [ebp - 0x44c]
call fcn.004133e0
mov edi, dword [esi]
cmp dword [edi + 0x14], 0x10
jb 0x4176f4
mov edi, dword [edi]
mov esi, edi
lea ecx, [esi + 1]
nop dword [eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x417700
sub esi, ecx
test edi, edi
jne 0x417724
push 0xcc
push str.d:2024ls2024_rapidjsonwriter.h
push str.str___0
call fcn.0044b48e
add esp, 0xc
push 5
lea ecx, [ebp - 0x44c]
call fcn.004132d0
push esi
push edi
lea ecx, [ebp - 0x44c]
call fcn.004133e0
push 5
lea ecx, [ebp - 0x44c]
call fcn.004132d0
push 2
push 0x47cc88
lea ecx, [ebp - 0x44c]
call fcn.004133e0
mov edi, dword [ebp - 0x524]
mov edi, dword [edi]
add edi, 0x18
cmp dword [edi + 0x14], 0x10
jb 0x417770
mov edi, dword [edi]
mov esi, edi
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x417775
sub esi, ecx
test edi, edi
jne 0x417799
push 0xcc
push str.d:2024ls2024_rapidjsonwriter.h
push str.str___0
call fcn.0044b48e
add esp, 0xc
push 5
lea ecx, [ebp - 0x44c]
call fcn.004132d0
push esi
push edi
lea ecx, [ebp - 0x44c]
call fcn.004133e0
push 5
lea ecx, [ebp - 0x44c]
call fcn.004132d0
push 3
push 0x47cc8c
lea ecx, [ebp - 0x44c]
call fcn.004133e0
mov eax, dword [ebp - 0x524]
mov edi, dword [eax]
add edi, 0x30
cmp dword [edi + 0x14], 0x10
jb 0x4177e5
mov edi, dword [edi]
mov esi, edi
lea ecx, [esi + 1]
nop word [eax + eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x4177f0
sub esi, ecx
test edi, edi
jne 0x417814
push 0xcc
push str.d:2024ls2024_rapidjsonwriter.h
push str.str___0
call fcn.0044b48e
add esp, 0xc
push 5
lea ecx, [ebp - 0x44c]
call fcn.004132d0
push esi
push edi
lea ecx, [ebp - 0x44c]
call fcn.004133e0
push ecx
lea ecx, [ebp - 0x44c]
call fcn.00412c30
mov esi, dword [ebp - 0x524]
add esi, 0xc
mov dword [ebp - 0x524], esi
cmp esi, dword [ebp - 0x538]
jne 0x4176c0
push ecx
lea ecx, [ebp - 0x44c]
call fcn.00412aa0
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 3
call fcn.00405d20
mov edi, dword [ebp - 0x540]
test edi, edi
je 0x4179e2
push 5
lea ecx, [ebp - 0x44c]
call fcn.004132d0
push 6
push str.chains
lea ecx, [ebp - 0x44c]
call fcn.004133e0
lea ecx, [ebp - 0x44c]
call fcn.00412bb0
mov eax, dword [edi + 0x48]
xor edx, edx
mov esi, dword [edi + 0x44]
mov ecx, eax
sub ecx, esi
xor edi, edi
add ecx, 3
shr ecx, 2
cmp esi, eax
cmova ecx, edx
mov dword [ebp - 0x538], ecx
test ecx, ecx
je 0x4178e9
nop dword [eax + eax]
push dword [esi]
lea ecx, [ebp - 0x44c]
call fcn.00412e00
inc edi
lea esi, [esi + 4]
cmp edi, dword [ebp - 0x538]
jne 0x4178d0
push ecx
lea ecx, [ebp - 0x44c]
call fcn.00412aa0
push 5
lea ecx, [ebp - 0x44c]
call fcn.004132d0
push 4
push str.tech
lea ecx, [ebp - 0x44c]
call fcn.004133e0
mov edi, dword [ebp - 0x540]
add edi, 0x50
cmp dword [edi + 0x14], 0x10
jb 0x417925
mov edi, dword [edi]
mov esi, edi
lea ecx, [esi + 1]
nop word [eax + eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x417930
sub esi, ecx
test edi, edi
jne 0x417954
push 0xcc
push str.d:2024ls2024_rapidjsonwriter.h
push str.str___0
call fcn.0044b48e
add esp, 0xc
push 5
lea ecx, [ebp - 0x44c]
call fcn.004132d0
push esi
push edi
lea ecx, [ebp - 0x44c]
call fcn.004133e0
mov eax, dword [ebp - 0x540]
lea ecx, [ebp - 0x44c]
push 5
mov esi, dword [eax + 0x6c]
call fcn.004132d0
push 6
push str.parent
lea ecx, [ebp - 0x44c]
call fcn.004133e0
push esi
call dword [sym.imp.WS2_32.dll_inet_ntoa]
mov edi, eax
mov esi, edi
lea eax, [esi + 1]
mov cl, byte [esi]
inc esi
test cl, cl
jne 0x4179a4
sub esi, eax
test edi, edi
jne 0x4179c8
push 0xcc
push str.d:2024ls2024_rapidjsonwriter.h
push str.str___0
call fcn.0044b48e
add esp, 0xc
push 5
lea ecx, [ebp - 0x44c]
call fcn.004132d0
push esi
push edi
lea ecx, [ebp - 0x44c]
call fcn.004133e0
push ecx
lea ecx, [ebp - 0x44c]
call fcn.00412c30
lea ecx, [ebp - 0x488]
call fcn.00412eb0
mov edi, dword [ebp - 0x544]
mov edx, eax
mov ecx, edx
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
lea esi, [ecx + 1]
mov byte [edi], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x417a17
sub ecx, esi
push ecx
push edx
mov ecx, edi
call fcn.00405f60
push dword [ebp - 0x440]
call fcn.0044a1e1
push 1
push dword [ebp - 0x444]
call fcn.0042bafb
push dword [ebp - 0x480]
call fcn.0044a1e1
push 1
push dword [ebp - 0x484]
call fcn.0042bafb
add esp, 0x18
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042bab5
mov esp, ebp
pop ebp
ret
call fcn.0044acc1
push 0x8007000e
call fcn.0042ccb0
push 0x8007000e
call fcn.0042ccb0
push 0x8007000e
call fcn.0042ccb0
push 0x8007000e
call fcn.0042ccb0
call fcn.0042c18b
push 0x8007000e
call fcn.0042ccb0
push 0x8007000e
call fcn.0042ccb0
push 0x8007000e
call fcn.0042ccb0
push 0x8007000e
call fcn.0042ccb0
push 0x8007000e
call fcn.0042ccb0
push 0x8007000e
call fcn.0042ccb0
int3