Function at 0x563f57
Capabilities:
Connect to wmi namespace via wbemlocator
Get common file path
Get disk information
Get mac address on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x750
mov eax, dword [0x5c125c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov esi, 0x200
mov edi, ecx
push esi
xor ebx, ebx
mov dword [ebp - 0x710], edi
push ebx
push edi
call fcn.005033f0
push esi
lea eax, [edi + 0x200]
push ebx
push eax
mov dword [ebp - 0x6f8], eax
call fcn.005033f0
push esi
lea eax, [edi + 0x400]
push ebx
push eax
mov dword [ebp - 0x714], eax
call fcn.005033f0
push esi
xor esi, esi
lea ebx, [edi + 0x600]
push esi
push ebx
call fcn.005033f0
push 0x200
lea eax, [edi + 0x800]
push esi
push eax
mov dword [ebp - 0x730], eax
call fcn.005033f0
push 0x200
lea eax, [edi + 0xa00]
push esi
push eax
mov dword [ebp - 0x738], eax
call fcn.005033f0
add esp, 0x48
lea eax, [edi + 0xc00]
mov dword [ebp - 0x740], eax
push 0x200
push esi
push eax
call fcn.005033f0
push 0x200
lea eax, [edi + 0xe00]
push esi
push eax
mov dword [ebp - 0x748], eax
call fcn.005033f0
push 0x200
lea eax, [edi + 0x1000]
push esi
push eax
mov dword [ebp - 0x700], eax
call fcn.005033f0
push 0x200
lea eax, [edi + 0x1200]
push esi
push eax
mov dword [ebp - 0x71c], eax
call fcn.005033f0
push 0x200
lea eax, [edi + 0x1400]
push esi
push eax
mov dword [ebp - 0x750], eax
call fcn.005033f0
push 0x200
lea eax, [edi + 0x1600]
push esi
push eax
call fcn.005033f0
add esp, 0x48
xor eax, eax
push eax
push eax
push eax
push 3
push eax
push eax
push eax
push 0xffffffffffffffff
push eax
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
push 0x10
pop esi
test eax, eax
js 0x56561e
lea eax, [ebp - 0x708]
xor ecx, ecx
push eax
push 0x59ffa8
push 1
push ecx
push 0x59ff98
mov dword [ebp - 0x708], ecx
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x56561e
xor eax, eax
mov dword [ebp - 0x698], 0xf
push 0xb
push 0x59fd3c
lea ecx, [ebp - 0x6ac]
mov dword [ebp - 0x6f4], eax
mov dword [ebp - 0x69c], eax
mov byte [ebp - 0x6ac], al
call fcn.004081d0
mov ecx, dword [ebp - 0x69c]
test ecx, ecx
je 0x56417d
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea ecx, [ebp - 0x64c]
xor eax, eax
mov dword [ebp - 0x638], 0xf
mov dword [ebp - 0x63c], eax
mov byte [ebp - 0x64c], al
lea eax, [ebp - 0x14]
push esi
push eax
movups xmmword [ebp - 0x14], xmm0
call fcn.004081d0
cmp dword [ebp - 0x698], esi
lea ecx, [ebp - 0x6ac]
push dword [ebp - 0x69c]
cmovae ecx, dword [ebp - 0x6ac]
lea eax, [ebp - 0x6ac]
cmovae eax, dword [ebp - 0x6ac]
push ecx
push eax
lea eax, [ebp - 0x64c]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x64c]
push 0
push 1
call fcn.004080b0
mov ecx, dword [ebp - 0x69c]
cmp dword [ebp - 0x698], esi
lea eax, [ebp - 0x6ac]
mov dword [ebp - 0x6ec], ecx
cmovae eax, dword [ebp - 0x6ac]
mov dword [ebp - 0x6f0], eax
lea eax, [ebp - 0x6f0]
push eax
lea eax, [ebp - 0x67c]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x6ac]
call fcn.004080b0
cmp dword [ebp - 0x668], 8
lea esi, [ebp - 0x6f4]
mov eax, dword [ebp - 0x708]
lea edx, [ebp - 0x67c]
cmovae edx, dword [ebp - 0x67c]
push esi
xor esi, esi
mov ecx, dword [eax]
push esi
push esi
push esi
push esi
push esi
push esi
push edx
push eax
call dword [ecx + 0xc]
push 0
push 1
lea ecx, [ebp - 0x67c]
mov esi, eax
call fcn.00407c70
test esi, esi
js 0x565612
xor eax, eax
push eax
push eax
push 3
push 3
push eax
push eax
push 0xa
push dword [ebp - 0x6f4]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
js 0x565606
push 0xf
pop esi
xor eax, eax
mov dword [ebp - 0x698], esi
push 0x29
push 0x59fda8
lea ecx, [ebp - 0x6ac]
mov dword [ebp - 0x6e0], eax
mov dword [ebp - 0x69c], eax
mov byte [ebp - 0x6ac], al
call fcn.004081d0
mov ecx, dword [ebp - 0x69c]
push 0x10
pop edi
test ecx, ecx
je 0x5642e0
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea ecx, [ebp - 0x64c]
xor eax, eax
mov dword [ebp - 0x638], esi
mov dword [ebp - 0x63c], eax
mov byte [ebp - 0x64c], al
lea eax, [ebp - 0x14]
push edi
push eax
movups xmmword [ebp - 0x14], xmm0
call fcn.004081d0
cmp dword [ebp - 0x698], edi
lea ecx, [ebp - 0x6ac]
push dword [ebp - 0x69c]
cmovae ecx, dword [ebp - 0x6ac]
lea eax, [ebp - 0x6ac]
cmovae eax, dword [ebp - 0x6ac]
push ecx
push eax
lea eax, [ebp - 0x64c]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x64c]
push 0
push 1
call fcn.004080b0
mov ecx, dword [ebp - 0x69c]
cmp dword [ebp - 0x698], edi
lea eax, [ebp - 0x6ac]
mov dword [ebp - 0x6ec], ecx
cmovae eax, dword [ebp - 0x6ac]
mov dword [ebp - 0x6f0], eax
lea eax, [ebp - 0x6f0]
push eax
lea eax, [ebp - 0x694]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x6ac]
call fcn.004080b0
cmp dword [ebp - 0x680], 8
lea esi, [ebp - 0x694]
push 3
cmovae esi, dword [ebp - 0x694]
lea ecx, [ebp - 0x664]
xor eax, eax
mov dword [ebp - 0x650], 0xf
push 0x59fd48
mov dword [ebp - 0x654], eax
mov byte [ebp - 0x664], al
call fcn.004081d0
mov ecx, dword [ebp - 0x654]
test ecx, ecx
je 0x5643ea
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea ecx, [ebp - 0x67c]
xor eax, eax
mov dword [ebp - 0x668], 0xf
mov dword [ebp - 0x66c], eax
mov byte [ebp - 0x67c], al
lea eax, [ebp - 0x24]
push edi
push eax
movups xmmword [ebp - 0x24], xmm0
call fcn.004081d0
cmp dword [ebp - 0x650], edi
lea ecx, [ebp - 0x664]
push dword [ebp - 0x654]
cmovae ecx, dword [ebp - 0x664]
lea eax, [ebp - 0x664]
cmovae eax, dword [ebp - 0x664]
push ecx
push eax
lea eax, [ebp - 0x67c]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x67c]
push 0
push 1
call fcn.004080b0
mov ecx, dword [ebp - 0x654]
cmp dword [ebp - 0x650], edi
lea eax, [ebp - 0x664]
mov dword [ebp - 0x6e4], ecx
cmovae eax, dword [ebp - 0x664]
mov dword [ebp - 0x6e8], eax
lea eax, [ebp - 0x6e8]
push eax
lea eax, [ebp - 0x6dc]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x664]
call fcn.004080b0
cmp dword [ebp - 0x6c8], 8
lea edi, [ebp - 0x6e0]
mov eax, dword [ebp - 0x6f4]
lea edx, [ebp - 0x6dc]
cmovae edx, dword [ebp - 0x6dc]
push edi
xor edi, edi
mov ecx, dword [eax]
push edi
push 0x30
push esi
push edx
push eax
call dword [ecx + pe_nt_image_headers32]
push edi
push 1
lea ecx, [ebp - 0x6dc]
mov esi, eax
call fcn.00407c70
push edi
inc edi
lea ecx, [ebp - 0x694]
push edi
call fcn.00407c70
test esi, esi
js 0x564637
xor eax, eax
lea edx, [ebp - 0x6ec]
push edx
mov dword [ebp - 0x6ec], eax
lea edx, [ebp - 0x6e4]
mov dword [ebp - 0x6e4], eax
mov eax, dword [ebp - 0x6e0]
push edx
push edi
push 0xffffffffffffffff
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x56462b
cmp dword [ebp - 0x6ec], 0
jbe 0x56462b
xor eax, eax
lea edi, [ebp - 0x12]
mov word [ebp - 0x14], ax
lea ecx, [ebp - 0x664]
stosd dword es:[edi], eax
push 0xf
pop esi
push 4
stosd dword es:[edi], eax
push 0x59fd4c
mov dword [ebp - 0x650], esi
stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
mov dword [ebp - 0x654], eax
mov byte [ebp - 0x664], al
call fcn.004081d0
mov ecx, dword [ebp - 0x654]
test ecx, ecx
je 0x56458c
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea ecx, [ebp - 0x67c]
xor eax, eax
mov dword [ebp - 0x668], esi
mov dword [ebp - 0x66c], eax
mov byte [ebp - 0x67c], al
lea eax, [ebp - 0x6a4]
push 0x10
push eax
movups xmmword [ebp - 0x6a4], xmm0
call fcn.004081d0
cmp dword [ebp - 0x650], 0x10
lea ecx, [ebp - 0x664]
push dword [ebp - 0x654]
cmovae ecx, dword [ebp - 0x664]
lea eax, [ebp - 0x664]
cmovae eax, dword [ebp - 0x664]
push ecx
push eax
lea eax, [ebp - 0x67c]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x67c]
xor edi, edi
push edi
push 1
call fcn.004080b0
mov ecx, dword [ebp - 0x654]
jmp 0x56458e
xor edi, edi
cmp dword [ebp - 0x650], 0x10
lea eax, [ebp - 0x664]
mov dword [ebp - 0x18], ecx
cmovae eax, dword [ebp - 0x664]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x694]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push edi
push 1
lea ecx, [ebp - 0x664]
call fcn.004080b0
mov eax, dword [ebp - 0x6e4]
lea esi, [ebp - 0x14]
cmp dword [ebp - 0x680], 8
lea edx, [ebp - 0x694]
push edi
cmovae edx, dword [ebp - 0x694]
mov ecx, dword [eax]
push edi
push esi
push edi
push edx
push eax
call dword [ecx + 0x10]
push edi
xor edi, edi
lea ecx, [ebp - 0x694]
inc edi
mov esi, eax
push edi
call fcn.00407c70
test esi, esi
js 0x56461f
push 0x100
push dword [ebp - 0xc]
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x6e4]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x6e0]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x29
push 0x59fda8
lea ecx, [ebp - 0x664]
call fcn.004079e0
cmp dword [ebp - 0x654], 0
je 0x5646bd
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea eax, [ebp - 0x6a4]
push 0x10
push eax
lea ecx, [ebp - 0x67c]
movups xmmword [ebp - 0x6a4], xmm0
call fcn.004079e0
cmp dword [ebp - 0x650], 0x10
lea ecx, [ebp - 0x664]
push dword [ebp - 0x654]
cmovae ecx, dword [ebp - 0x664]
lea eax, [ebp - 0x664]
cmovae eax, dword [ebp - 0x664]
push ecx
push eax
lea eax, [ebp - 0x67c]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x67c]
xor ebx, ebx
push ebx
push edi
call fcn.004080b0
jmp 0x5646bf
xor ebx, ebx
lea eax, [ebp - 0x664]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004076d0
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x6dc]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x664]
call fcn.004080b0
cmp dword [ebp - 0x6c8], 8
lea esi, [ebp - 0x6dc]
push 3
cmovae esi, dword [ebp - 0x6dc]
lea ecx, [ebp - 0x64c]
push 0x59fd48
call fcn.004079e0
cmp dword [ebp - 0x63c], 0
je 0x56477d
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea eax, [ebp - 0x14]
push 0x10
push eax
lea ecx, [ebp - 0x6c4]
movups xmmword [ebp - 0x14], xmm0
call fcn.004079e0
cmp dword [ebp - 0x638], 0x10
lea ecx, [ebp - 0x64c]
push dword [ebp - 0x63c]
cmovae ecx, dword [ebp - 0x64c]
lea eax, [ebp - 0x64c]
cmovae eax, dword [ebp - 0x64c]
push ecx
push eax
lea eax, [ebp - 0x6c4]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x6c4]
push ebx
push edi
call fcn.004080b0
lea eax, [ebp - 0x64c]
push eax
lea ecx, [ebp - 0x6f0]
call fcn.004076d0
lea eax, [ebp - 0x6f0]
push eax
lea eax, [ebp - 0x694]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x64c]
call fcn.004080b0
mov eax, dword [ebp - 0x6f4]
lea edi, [ebp - 0x6e0]
cmp dword [ebp - 0x680], 8
lea edx, [ebp - 0x694]
push edi
cmovae edx, dword [ebp - 0x694]
mov ecx, dword [eax]
push ebx
push 0x30
push esi
push edx
push eax
call dword [ecx + pe_nt_image_headers32]
xor edi, edi
lea ecx, [ebp - 0x694]
push ebx
inc edi
mov esi, eax
push edi
call fcn.00407c70
push ebx
push edi
lea ecx, [ebp - 0x6dc]
call fcn.00407c70
test esi, esi
js 0x564979
mov eax, dword [ebp - 0x6e0]
lea edx, [ebp - 0x6ec]
push edx
lea edx, [ebp - 0x6e4]
mov dword [ebp - 0x6ec], ebx
push edx
push edi
mov dword [ebp - 0x6e4], ebx
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x56496d
cmp dword [ebp - 0x6ec], 0
jbe 0x56496d
xor eax, eax
lea edi, [ebp - 0x12]
mov word [ebp - 0x14], ax
lea ecx, [ebp - 0x64c]
stosd dword es:[edi], eax
push 4
push 0x59fd54
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
call fcn.004079e0
cmp dword [ebp - 0x63c], 0
je 0x5648d7
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea eax, [ebp - 0x6a4]
push 0x10
push eax
lea ecx, [ebp - 0x6c4]
movups xmmword [ebp - 0x6a4], xmm0
call fcn.004079e0
cmp dword [ebp - 0x638], 0x10
lea ecx, [ebp - 0x64c]
push dword [ebp - 0x63c]
cmovae ecx, dword [ebp - 0x64c]
lea eax, [ebp - 0x64c]
cmovae eax, dword [ebp - 0x64c]
push ecx
push eax
lea eax, [ebp - 0x6c4]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x6c4]
xor edi, edi
inc edi
push ebx
push edi
call fcn.004080b0
jmp 0x5648da
xor edi, edi
inc edi
lea eax, [ebp - 0x64c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004076d0
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x694]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x64c]
call fcn.004080b0
mov eax, dword [ebp - 0x6e4]
lea esi, [ebp - 0x14]
cmp dword [ebp - 0x680], 8
lea edx, [ebp - 0x694]
push ebx
cmovae edx, dword [ebp - 0x694]
mov ecx, dword [eax]
push ebx
push esi
push ebx
push edx
push eax
call dword [ecx + 0x10]
push ebx
push edi
lea ecx, [ebp - 0x694]
mov esi, eax
call fcn.00407c70
test esi, esi
js 0x564961
push 0x100
push dword [ebp - 0xc]
push dword [ebp - 0x730]
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x6e4]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x6e0]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x23
push 0x59fdd4
lea ecx, [ebp - 0x64c]
call fcn.004079e0
cmp dword [ebp - 0x63c], 0
je 0x5649fb
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea eax, [ebp - 0x6a4]
push 0x10
push eax
lea ecx, [ebp - 0x6c4]
movups xmmword [ebp - 0x6a4], xmm0
call fcn.004079e0
cmp dword [ebp - 0x638], 0x10
lea ecx, [ebp - 0x64c]
push dword [ebp - 0x63c]
cmovae ecx, dword [ebp - 0x64c]
lea eax, [ebp - 0x64c]
cmovae eax, dword [ebp - 0x64c]
push ecx
push eax
lea eax, [ebp - 0x6c4]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x6c4]
push ebx
push edi
call fcn.004080b0
lea eax, [ebp - 0x64c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004076d0
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x6dc]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x64c]
call fcn.004080b0
cmp dword [ebp - 0x6c8], 8
lea esi, [ebp - 0x6dc]
push 3
cmovae esi, dword [ebp - 0x6dc]
lea ecx, [ebp - 0x664]
push 0x59fd48
call fcn.004079e0
cmp dword [ebp - 0x654], 0
je 0x564ab9
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea eax, [ebp - 0x14]
push 0x10
push eax
lea ecx, [ebp - 0x67c]
movups xmmword [ebp - 0x14], xmm0
call fcn.004079e0
cmp dword [ebp - 0x650], 0x10
lea ecx, [ebp - 0x664]
push dword [ebp - 0x654]
cmovae ecx, dword [ebp - 0x664]
lea eax, [ebp - 0x664]
cmovae eax, dword [ebp - 0x664]
push ecx
push eax
lea eax, [ebp - 0x67c]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x67c]
push ebx
push edi
call fcn.004080b0
lea eax, [ebp - 0x664]
push eax
lea ecx, [ebp - 0x734]
call fcn.004076d0
lea eax, [ebp - 0x734]
push eax
lea eax, [ebp - 0x694]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x664]
call fcn.004080b0
mov eax, dword [ebp - 0x6f4]
lea edi, [ebp - 0x6e0]
cmp dword [ebp - 0x680], 8
lea edx, [ebp - 0x694]
push edi
cmovae edx, dword [ebp - 0x694]
mov ecx, dword [eax]
push ebx
push 0x30
push esi
push edx
push eax
call dword [ecx + pe_nt_image_headers32]
xor edi, edi
lea ecx, [ebp - 0x694]
push ebx
inc edi
mov esi, eax
push edi
call fcn.00407c70
push ebx
push edi
lea ecx, [ebp - 0x6dc]
call fcn.00407c70
test esi, esi
js 0x564cb5
mov eax, dword [ebp - 0x6e0]
lea edx, [ebp - 0x6ec]
push edx
lea edx, [ebp - 0x6e4]
mov dword [ebp - 0x6ec], ebx
push edx
push edi
mov dword [ebp - 0x6e4], ebx
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x564ca9
cmp dword [ebp - 0x6ec], 0
jbe 0x564ca9
xor eax, eax
lea edi, [ebp - 0x12]
mov word [ebp - 0x14], ax
lea ecx, [ebp - 0x64c]
stosd dword es:[edi], eax
push 0xc
push 0x59fd5c
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
call fcn.004079e0
cmp dword [ebp - 0x63c], 0
je 0x564c13
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea eax, [ebp - 0x6a4]
push 0x10
push eax
lea ecx, [ebp - 0x6c4]
movups xmmword [ebp - 0x6a4], xmm0
call fcn.004079e0
cmp dword [ebp - 0x638], 0x10
lea ecx, [ebp - 0x64c]
push dword [ebp - 0x63c]
cmovae ecx, dword [ebp - 0x64c]
lea eax, [ebp - 0x64c]
cmovae eax, dword [ebp - 0x64c]
push ecx
push eax
lea eax, [ebp - 0x6c4]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x6c4]
xor edi, edi
inc edi
push ebx
push edi
call fcn.004080b0
jmp 0x564c16
xor edi, edi
inc edi
lea eax, [ebp - 0x64c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004076d0
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x694]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x64c]
call fcn.004080b0
mov eax, dword [ebp - 0x6e4]
lea esi, [ebp - 0x14]
cmp dword [ebp - 0x680], 8
lea edx, [ebp - 0x694]
push ebx
cmovae edx, dword [ebp - 0x694]
mov ecx, dword [eax]
push ebx
push esi
push ebx
push edx
push eax
call dword [ecx + 0x10]
push ebx
push edi
lea ecx, [ebp - 0x694]
mov esi, eax
call fcn.00407c70
test esi, esi
js 0x564c9d
push 0x100
push dword [ebp - 0xc]
push dword [ebp - 0x738]
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x6e4]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x6e0]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x23
push 0x59fdd4
lea ecx, [ebp - 0x64c]
call fcn.004079e0
cmp dword [ebp - 0x63c], 0
je 0x564d37
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea eax, [ebp - 0x6a4]
push 0x10
push eax
lea ecx, [ebp - 0x6c4]
movups xmmword [ebp - 0x6a4], xmm0
call fcn.004079e0
cmp dword [ebp - 0x638], 0x10
lea ecx, [ebp - 0x64c]
push dword [ebp - 0x63c]
cmovae ecx, dword [ebp - 0x64c]
lea eax, [ebp - 0x64c]
cmovae eax, dword [ebp - 0x64c]
push ecx
push eax
lea eax, [ebp - 0x6c4]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x6c4]
push ebx
push edi
call fcn.004080b0
lea eax, [ebp - 0x64c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004076d0
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x6dc]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x64c]
call fcn.004080b0
cmp dword [ebp - 0x6c8], 8
lea esi, [ebp - 0x6dc]
push 3
cmovae esi, dword [ebp - 0x6dc]
lea ecx, [ebp - 0x664]
push 0x59fd48
call fcn.004079e0
cmp dword [ebp - 0x654], 0
je 0x564df5
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea eax, [ebp - 0x14]
push 0x10
push eax
lea ecx, [ebp - 0x67c]
movups xmmword [ebp - 0x14], xmm0
call fcn.004079e0
cmp dword [ebp - 0x650], 0x10
lea ecx, [ebp - 0x664]
push dword [ebp - 0x654]
cmovae ecx, dword [ebp - 0x664]
lea eax, [ebp - 0x664]
cmovae eax, dword [ebp - 0x664]
push ecx
push eax
lea eax, [ebp - 0x67c]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x67c]
push ebx
push edi
call fcn.004080b0
lea eax, [ebp - 0x664]
push eax
lea ecx, [ebp - 0x73c]
call fcn.004076d0
lea eax, [ebp - 0x73c]
push eax
lea eax, [ebp - 0x694]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x664]
call fcn.004080b0
mov eax, dword [ebp - 0x6f4]
lea edi, [ebp - 0x6e0]
cmp dword [ebp - 0x680], 8
lea edx, [ebp - 0x694]
push edi
cmovae edx, dword [ebp - 0x694]
mov ecx, dword [eax]
push ebx
push 0x30
push esi
push edx
push eax
call dword [ecx + pe_nt_image_headers32]
xor edi, edi
lea ecx, [ebp - 0x694]
push ebx
inc edi
mov esi, eax
push edi
call fcn.00407c70
push ebx
push edi
lea ecx, [ebp - 0x6dc]
call fcn.00407c70
test esi, esi
js 0x565012
mov eax, dword [ebp - 0x6e0]
lea edx, [ebp - 0x6ec]
push edx
lea edx, [ebp - 0x6e4]
mov dword [ebp - 0x6ec], ebx
push edx
push edi
mov dword [ebp - 0x6e4], ebx
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x565006
cmp dword [ebp - 0x6ec], 0
jbe 0x565006
xor eax, eax
lea edi, [ebp - 0x12]
mov word [ebp - 0x14], ax
lea ecx, [ebp - 0x64c]
stosd dword es:[edi], eax
push 0xb
push 0x59fd30
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
call fcn.004079e0
cmp dword [ebp - 0x63c], 0
je 0x564f4f
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea eax, [ebp - 0x6a4]
push 0x10
push eax
lea ecx, [ebp - 0x6c4]
movups xmmword [ebp - 0x6a4], xmm0
call fcn.004079e0
cmp dword [ebp - 0x638], 0x10
lea ecx, [ebp - 0x64c]
push dword [ebp - 0x63c]
cmovae ecx, dword [ebp - 0x64c]
lea eax, [ebp - 0x64c]
cmovae eax, dword [ebp - 0x64c]
push ecx
push eax
lea eax, [ebp - 0x6c4]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x6c4]
xor edi, edi
inc edi
push ebx
push edi
call fcn.004080b0
jmp 0x564f52
xor edi, edi
inc edi
lea eax, [ebp - 0x64c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004076d0
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x694]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x64c]
call fcn.004080b0
mov eax, dword [ebp - 0x6e4]
lea esi, [ebp - 0x14]
cmp dword [ebp - 0x680], 8
lea edx, [ebp - 0x694]
push ebx
cmovae edx, dword [ebp - 0x694]
mov ecx, dword [eax]
push ebx
push esi
push ebx
push edx
push eax
call dword [ecx + 0x10]
push ebx
push edi
lea ecx, [ebp - 0x694]
mov esi, eax
call fcn.00407c70
test esi, esi
js 0x564ffa
mov ebx, dword [ebp - 0x740]
push 0x100
push dword [ebp - 0xc]
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
xor edx, edx
cmp word [ebx], dx
je 0x564fee
mov eax, ebx
cmp word [ebx], 0x2e
jne 0x564fe4
xor ecx, ecx
mov word [ebx], cx
add eax, 2
mov ebx, eax
cmp word [eax], dx
jne 0x564fd9
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
xor ebx, ebx
mov eax, dword [ebp - 0x6e4]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x6e0]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x18
push 0x59fdf8
lea ecx, [ebp - 0x64c]
call fcn.004079e0
cmp dword [ebp - 0x63c], 0
je 0x565094
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea eax, [ebp - 0x6a4]
push 0x10
push eax
lea ecx, [ebp - 0x6c4]
movups xmmword [ebp - 0x6a4], xmm0
call fcn.004079e0
cmp dword [ebp - 0x638], 0x10
lea ecx, [ebp - 0x64c]
push dword [ebp - 0x63c]
cmovae ecx, dword [ebp - 0x64c]
lea eax, [ebp - 0x64c]
cmovae eax, dword [ebp - 0x64c]
push ecx
push eax
lea eax, [ebp - 0x6c4]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x6c4]
push ebx
push edi
call fcn.004080b0
lea eax, [ebp - 0x64c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004076d0
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x694]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x64c]
call fcn.004080b0
cmp dword [ebp - 0x680], 8
lea esi, [ebp - 0x694]
push 3
cmovae esi, dword [ebp - 0x694]
lea ecx, [ebp - 0x664]
push 0x59fd48
call fcn.004079e0
cmp dword [ebp - 0x654], 0
je 0x565150
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea eax, [ebp - 0x14]
push 0x10
push eax
lea ecx, [ebp - 0x6dc]
movups xmmword [ebp - 0x14], xmm0
call fcn.004079e0
cmp dword [ebp - 0x650], 0x10
lea eax, [ebp - 0x664]
push dword [ebp - 0x654]
cmovae eax, dword [ebp - 0x664]
lea ecx, [ebp - 0x664]
push eax
call fcn.00407c60
push eax
lea eax, [ebp - 0x6dc]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x6dc]
push ebx
push edi
call fcn.004080b0
lea eax, [ebp - 0x664]
push eax
lea ecx, [ebp - 0x744]
call fcn.004076d0
lea eax, [ebp - 0x744]
push eax
lea eax, [ebp - 0x67c]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x664]
call fcn.004080b0
lea ecx, [ebp - 0x67c]
call fcn.00407c50
mov ecx, dword [ebp - 0x6f4]
lea edi, [ebp - 0x6e0]
push edi
push ebx
push 0x30
mov edx, dword [ecx]
push esi
push eax
push ecx
call dword [edx + pe_nt_image_headers32]
xor edi, edi
lea ecx, [ebp - 0x67c]
push ebx
inc edi
mov esi, eax
push edi
call fcn.00407c70
push ebx
push edi
lea ecx, [ebp - 0x694]
call fcn.00407c70
test esi, esi
js 0x565324
mov eax, dword [ebp - 0x6e0]
lea edx, [ebp - 0x6ec]
push edx
lea edx, [ebp - 0x6e4]
mov dword [ebp - 0x6ec], ebx
push edx
push edi
mov dword [ebp - 0x6e4], ebx
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x565318
cmp dword [ebp - 0x6ec], 0
jbe 0x565318
xor eax, eax
lea edi, [ebp - 0x12]
mov word [ebp - 0x14], ax
lea ecx, [ebp - 0x67c]
stosd dword es:[edi], eax
push 0xc
push 0x59fd5c
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
call fcn.004079e0
cmp dword [ebp - 0x66c], 0
je 0x56528b
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea eax, [ebp - 0x6a4]
push 0x10
push eax
lea ecx, [ebp - 0x6c4]
movups xmmword [ebp - 0x6a4], xmm0
call fcn.004079e0
lea ecx, [ebp - 0x67c]
call fcn.00407c60
push dword [ebp - 0x66c]
push eax
push eax
lea eax, [ebp - 0x6c4]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x6c4]
xor edi, edi
inc edi
push ebx
push edi
call fcn.004080b0
jmp 0x56528e
xor edi, edi
inc edi
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004076d0
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x694]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x67c]
call fcn.004080b0
lea ecx, [ebp - 0x694]
call fcn.00407c50
mov ecx, dword [ebp - 0x6e4]
lea esi, [ebp - 0x14]
push ebx
push ebx
push esi
mov edx, dword [ecx]
push ebx
push eax
push ecx
call dword [edx + 0x10]
push ebx
push edi
lea ecx, [ebp - 0x694]
mov esi, eax
call fcn.00407c70
test esi, esi
js 0x56530c
push 0x100
push dword [ebp - 0xc]
push dword [ebp - 0x748]
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x6e4]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x6e0]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x18
push 0x59fdf8
lea ecx, [ebp - 0x67c]
call fcn.004079e0
cmp dword [ebp - 0x66c], 0
je 0x565390
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea eax, [ebp - 0x6a4]
push 0x10
push eax
lea ecx, [ebp - 0x6c4]
movups xmmword [ebp - 0x6a4], xmm0
call fcn.004079e0
lea ecx, [ebp - 0x67c]
call fcn.00407c60
push dword [ebp - 0x66c]
push eax
push eax
lea eax, [ebp - 0x6c4]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x6c4]
push ebx
push edi
call fcn.004080b0
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004076d0
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x664]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x67c]
call fcn.004080b0
lea ecx, [ebp - 0x664]
call fcn.00407c50
push 3
push 0x59fd48
lea ecx, [ebp - 0x64c]
mov esi, eax
call fcn.004079e0
cmp dword [ebp - 0x63c], 0
je 0x565431
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea eax, [ebp - 0x14]
push 0x10
push eax
lea ecx, [ebp - 0x694]
movups xmmword [ebp - 0x14], xmm0
call fcn.004079e0
lea ecx, [ebp - 0x64c]
call fcn.00407c60
push dword [ebp - 0x63c]
push eax
push eax
lea eax, [ebp - 0x694]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x694]
push ebx
push edi
call fcn.004080b0
lea eax, [ebp - 0x64c]
push eax
lea ecx, [ebp - 0x74c]
call fcn.004076d0
lea eax, [ebp - 0x74c]
push eax
lea eax, [ebp - 0x6dc]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x64c]
call fcn.004080b0
lea ecx, [ebp - 0x6dc]
call fcn.00407c50
mov ecx, dword [ebp - 0x6f4]
lea edi, [ebp - 0x6e0]
push edi
push ebx
push 0x30
mov edx, dword [ecx]
push esi
push eax
push ecx
call dword [edx + pe_nt_image_headers32]
push ebx
push 1
lea ecx, [ebp - 0x6dc]
mov esi, eax
call fcn.00407c70
push ebx
push 1
lea ecx, [ebp - 0x664]
call fcn.00407c70
test esi, esi
js 0x565600
mov eax, dword [ebp - 0x6e0]
lea edx, [ebp - 0x6ec]
push edx
lea edx, [ebp - 0x6e4]
mov dword [ebp - 0x6ec], ebx
push edx
push 1
mov dword [ebp - 0x6e4], ebx
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x5655f4
cmp dword [ebp - 0x6ec], 0
jbe 0x5655f4
xor eax, eax
lea edi, [ebp - 0x12]
mov word [ebp - 0x14], ax
lea ecx, [ebp - 0x67c]
stosd dword es:[edi], eax
push 0x11
push 0x59fd6c
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
call fcn.004079e0
cmp dword [ebp - 0x66c], 0
je 0x565568
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea eax, [ebp - 0x6a4]
push 0x10
push eax
lea ecx, [ebp - 0x6c4]
movups xmmword [ebp - 0x6a4], xmm0
call fcn.004079e0
lea ecx, [ebp - 0x67c]
call fcn.00407c60
push dword [ebp - 0x66c]
push eax
push eax
lea eax, [ebp - 0x6c4]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x6c4]
push ebx
push 1
call fcn.004080b0
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004076d0
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x694]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x67c]
call fcn.004080b0
lea ecx, [ebp - 0x694]
call fcn.00407c50
mov ecx, dword [ebp - 0x6e4]
lea esi, [ebp - 0x14]
push ebx
push ebx
push esi
mov edx, dword [ecx]
push ebx
push eax
push ecx
call dword [edx + 0x10]
push ebx
push 1
lea ecx, [ebp - 0x694]
mov esi, eax
call fcn.00407c70
test esi, esi
js 0x5655e8
push 0x100
push dword [ebp - 0xc]
push dword [ebp - 0x700]
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x6e4]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x6e0]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov edi, dword [ebp - 0x710]
mov eax, dword [ebp - 0x6f4]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x708]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
xor eax, eax
mov dword [ebp - 0x728], eax
mov dword [ebp - 0x724], eax
mov eax, 1
xor edx, edx
cpuid
mov dword [ebp - 0x728], edx
mov dword [ebp - 0x724], eax
push dword [ebp - 0x724]
push dword [ebp - 0x728]
push str._08X_08X
push edi
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
call edi
add esp, 0x10
xor ebx, ebx
mov esi, ebx
push 0x200
lea eax, [ebp - 0x634]
push ebx
push eax
call fcn.005033f0
lea eax, [ebp - 0x634]
push eax
push esi
call fcn.00565d4d
add esp, 0x14
test eax, eax
jne 0x565690
inc esi
cmp esi, 0xa
jl 0x565662
jmp 0x5656a3
lea eax, [ebp - 0x634]
push eax
push dword [ebp - 0x6f8]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x70c]
mov byte [ebp - 0x6fc], bl
push eax
push ebx
mov dword [ebp - 0x6fb], ebx
mov byte [ebp - 0x6f7], bl
mov dword [ebp - 0x70c], ebx
call sub.IPHLPAPI.DLL_GetAdaptersInfo
push dword [ebp - 0x70c]
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
test esi, esi
je 0x56572e
lea eax, [ebp - 0x70c]
push eax
push esi
call sub.IPHLPAPI.DLL_GetAdaptersInfo
test eax, eax
jne 0x56572e
mov ebx, dword [ebp - 0x6fc]
lea eax, [esi + 8]
push eax
call fcn.00565ecc
pop ecx
mov ecx, eax
cmp ecx, 1
je 0x565708
test ecx, ecx
jne 0x565726
mov ax, word [esi + 0x198]
mov ebx, dword [esi + 0x194]
mov dword [ebp - 0x6fc], ebx
mov word [ebp - 0x6f8], ax
test ecx, ecx
je 0x565734
mov esi, dword [esi]
test esi, esi
jne 0x5656f3
jmp 0x565734
mov ebx, dword [ebp - 0x6fc]
mov eax, dword [ebp - 0x6f8]
shr eax, 8
movzx eax, al
push eax
movzx eax, byte [ebp - 0x6f8]
push eax
mov eax, ebx
shr eax, 0x18
push eax
mov eax, ebx
shr ebx, 8
shr eax, 0x10
movzx eax, al
push eax
movzx eax, bl
push eax
movzx eax, byte [ebp - 0x6fc]
push eax
push str._02X__02X__02X__02X__02X__02X
push dword [ebp - 0x714]
call edi
add esp, 0x20
lea eax, [ebp - 0x72c]
xor ebx, ebx
mov dword [ebp - 0x72c], ebx
push ebx
push ebx
push ebx
push ebx
push eax
push ebx
push ebx
push 0x5a98c4
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je 0x5657b1
push dword [ebp - 0x72c]
push str._08X
push dword [ebp - 0x71c]
call edi
add esp, 0xc
mov esi, 0x208
lea eax, [ebp - 0x434]
push esi
push ebx
push eax
call fcn.005033f0
push esi
lea eax, [ebp - 0x22c]
push ebx
push eax
call fcn.005033f0
add esp, 0x18
lea eax, [ebp - 0x434]
xorps xmm0, xmm0
movlpd qword [ebp - 0x6fc], xmm0
movlpd qword [ebp - 0x718], xmm0
push eax
push ebx
push ebx
push 0x25
push ebx
movlpd qword [ebp - 0x720], xmm0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
js 0x565bb0
push 0xc
push 0x59fd80
lea ecx, [ebp - 0x67c]
call fcn.004079e0
cmp dword [ebp - 0x66c], ebx
je 0x565876
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea eax, [ebp - 0x6a4]
push 0x10
push eax
lea ecx, [ebp - 0x6c4]
movups xmmword [ebp - 0x6a4], xmm0
call fcn.004079e0
lea ecx, [ebp - 0x67c]
call fcn.00407c60
push dword [ebp - 0x66c]
push eax
push eax
lea eax, [ebp - 0x6c4]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x6c4]
push ebx
push 1
call fcn.004080b0
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004076d0
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x694]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x67c]
call fcn.004080b0
lea ecx, [ebp - 0x694]
call fcn.00407c50
push eax
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x22c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
test eax, eax
lea ecx, [ebp - 0x694]
setne bl
xor eax, eax
push eax
push 1
call fcn.00407c70
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
test bl, bl
je 0x565944
xor ebx, ebx
lea eax, [ebp - 0x22c]
push ebx
push ebx
push 3
push ebx
push 1
push accept
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x565946
push ebx
push ebx
lea eax, [ebp - 0x704]
mov dword [ebp - 0x704], ebx
push eax
push esi
mov dword [ebp - 0x700], ebx
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x56593f
lea eax, [ebp - 0x704]
push eax
call fcn.00565d1c
pop ecx
mov dword [ebp - 0x6fc], eax
mov dword [ebp - 0x6f8], edx
push esi
call edi
jmp 0x565946
xor ebx, ebx
push 0xa
push 0x59fd90
lea ecx, [ebp - 0x67c]
call fcn.004079e0
cmp dword [ebp - 0x66c], 0
je 0x5659b3
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea eax, [ebp - 0x6a4]
push 0x10
push eax
lea ecx, [ebp - 0x6c4]
movups xmmword [ebp - 0x6a4], xmm0
call fcn.004079e0
lea ecx, [ebp - 0x67c]
call fcn.00407c60
push dword [ebp - 0x66c]
push eax
push eax
lea eax, [ebp - 0x6c4]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x6c4]
push ebx
push 1
call fcn.004080b0
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004076d0
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x694]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x67c]
call fcn.004080b0
lea ecx, [ebp - 0x694]
call fcn.00407c50
push eax
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x22c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
test eax, eax
lea ecx, [ebp - 0x694]
setne bl
xor eax, eax
push eax
push 1
call fcn.00407c70
test bl, bl
je 0x565a7b
xor ebx, ebx
lea eax, [ebp - 0x22c]
push ebx
push ebx
push 3
push ebx
push 1
push accept
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x565a7d
push ebx
push ebx
lea eax, [ebp - 0x704]
mov dword [ebp - 0x704], ebx
push eax
push esi
mov dword [ebp - 0x700], ebx
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x565a76
lea eax, [ebp - 0x704]
push eax
call fcn.00565d1c
pop ecx
mov dword [ebp - 0x718], eax
mov dword [ebp - 0x714], edx
push esi
call edi
jmp 0x565a7d
xor ebx, ebx
push 0xb
push 0x59fd9c
lea ecx, [ebp - 0x67c]
call fcn.004079e0
cmp dword [ebp - 0x66c], 0
je 0x565aea
movaps xmm0, xmmword [str.jlWo_Hk4yVB0d0]
lea eax, [ebp - 0x6a4]
push 0x10
push eax
lea ecx, [ebp - 0x6c4]
movups xmmword [ebp - 0x6a4], xmm0
call fcn.004079e0
lea ecx, [ebp - 0x67c]
call fcn.00407c60
push dword [ebp - 0x66c]
push eax
push eax
lea eax, [ebp - 0x6c4]
push eax
call fcn.004751f0
add esp, 0x10
lea ecx, [ebp - 0x6c4]
push ebx
push 1
call fcn.004080b0
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004076d0
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x694]
push eax
call fcn.00415ec0
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x67c]
call fcn.004080b0
lea ecx, [ebp - 0x694]
call fcn.00407c50
push eax
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x22c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
test eax, eax
lea ecx, [ebp - 0x694]
setne bl
xor eax, eax
push eax
push 1
call fcn.00407c70
test bl, bl
je 0x565bb0
xor ebx, ebx
lea eax, [ebp - 0x22c]
push ebx
push ebx
push 3
push ebx
push 1
push accept
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x565bb0
push ebx
push ebx
lea eax, [ebp - 0x704]
mov dword [ebp - 0x704], ebx
push eax
push esi
mov dword [ebp - 0x700], ebx
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x565bad
lea eax, [ebp - 0x704]
push eax
call fcn.00565d1c
pop ecx
mov dword [ebp - 0x720], eax
mov dword [ebp - 0x71c], edx
push esi
call edi
push dword [ebp - 0x71c]
push dword [ebp - 0x720]
push dword [ebp - 0x714]
push dword [ebp - 0x718]
push dword [ebp - 0x6f8]
push dword [ebp - 0x6fc]
push str._llu__llu__llu
push 0x100
push dword [ebp - 0x750]
call fcn.00566009
mov ecx, dword [ebp - 4]
add esp, 0x24
mov eax, dword [ebp - 0x710]
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.004fce93
mov esp, ebp
pop ebp
ret