Function at 0x43a080
Capabilities:
Connect to wmi namespace via wbemlocator
Get common file path
Get disk information
Get mac address on windows
Reference wmi statements

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5100f3
mov eax, dword fs:[0]
push eax
sub esp, 0xbb4
mov eax, dword [0x5524b4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x9ac], ecx
push 0x200
push 0
mov eax, dword [ebp - 0x9ac]
push eax
call fcn.004ab2f0
add esp, 0xc
push 0x200
push 0
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x200
push ecx
call fcn.004ab2f0
add esp, 0xc
push 0x200
push 0
mov edx, dword [ebp - 0x9ac]
add edx, 0x400
push edx
call fcn.004ab2f0
add esp, 0xc
push 0x200
push 0
mov eax, dword [ebp - 0x9ac]
add eax, 0x600
push eax
call fcn.004ab2f0
add esp, 0xc
push 0x200
push 0
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x800
push ecx
call fcn.004ab2f0
add esp, 0xc
push 0x200
push 0
mov edx, dword [ebp - 0x9ac]
add edx, 0xa00
push edx
call fcn.004ab2f0
add esp, 0xc
push 0x200
push 0
mov eax, dword [ebp - 0x9ac]
add eax, 0xc00
push eax
call fcn.004ab2f0
add esp, 0xc
push 0x200
push 0
mov ecx, dword [ebp - 0x9ac]
add ecx, 0xe00
push ecx
call fcn.004ab2f0
add esp, 0xc
push 0x200
push 0
mov edx, dword [ebp - 0x9ac]
add edx, 0x1000
push edx
call fcn.004ab2f0
add esp, 0xc
push 0x200
push 0
mov eax, dword [ebp - 0x9ac]
add eax, 0x1200
push eax
call fcn.004ab2f0
add esp, 0xc
push 0x200
push 0
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x1400
push ecx
call fcn.004ab2f0
add esp, 0xc
push 0x200
push 0
mov edx, dword [ebp - 0x9ac]
add edx, 0x1600
push edx
call fcn.004ab2f0
add esp, 0xc
push 0
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov dword [ebp - 0x9a8], eax
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43ad3e
mov dword [ebp - 0xa04], 0
lea eax, [ebp - 0xa04]
push eax
push 0x52b918
push 1
push 0
push 0x52b9e8
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43ad3e
mov dword [ebp - 0x9b4], 0
lea ecx, [ebp - 0x9b4]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push str.ROOTCIMV2
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xa04]
push ecx
mov edx, dword [eax + 0xc]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43ad2a
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
mov eax, dword [ebp - 0x9b4]
push eax
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43ad16
mov dword [ebp - 0x9b0], 0
lea ecx, [ebp - 0x9b0]
push ecx
push 0
push 0x30
push 0x519be0
push 0x519c34
mov edx, dword [ebp - 0x9b4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b4]
push ecx
mov edx, dword [eax + 0x50]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43a430
mov dword [ebp - 0xa94], 0
mov dword [ebp - 0x9dc], 0
lea eax, [ebp - 0xa94]
push eax
lea ecx, [ebp - 0x9dc]
push ecx
push 1
push 0xffffffffffffffff
mov edx, dword [ebp - 0x9b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b0]
push ecx
mov edx, dword [eax + 0x10]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43a41c
cmp dword [ebp - 0xa94], 0
jbe 0x43a41c
xor eax, eax
mov word [ebp - 0xb18], ax
xor ecx, ecx
mov dword [ebp - 0xb16], ecx
mov dword [ebp - 0xb12], ecx
mov dword [ebp - 0xb0e], ecx
mov word [ebp - 0xb0a], cx
push 0
push 0
lea edx, [ebp - 0xb18]
push edx
push 0
push str.UUID
mov eax, dword [ebp - 0x9dc]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9dc]
push edx
mov eax, dword [ecx + 0x10]
call eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43a408
push 0x100
mov ecx, dword [ebp - 0xb10]
push ecx
mov edx, dword [ebp - 0x9ac]
add edx, 0x600
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea eax, [ebp - 0xb18]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0x9dc]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9dc]
push eax
mov ecx, dword [edx + 8]
call ecx
mov edx, dword [ebp - 0x9b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b0]
push ecx
mov edx, dword [eax + 8]
call edx
lea eax, [ebp - 0x9b0]
push eax
push 0
push 0x30
push str.SELECT__FROM_Win32_ComputerSystemProduct
push 0x519c9c
mov ecx, dword [ebp - 0x9b4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b4]
push eax
mov ecx, dword [edx + 0x50]
call ecx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43a573
mov dword [ebp - 0xa98], 0
mov dword [ebp - 0x9e0], 0
lea edx, [ebp - 0xa98]
push edx
lea eax, [ebp - 0x9e0]
push eax
push 1
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x9b0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b0]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43a55f
cmp dword [ebp - 0xa98], 0
jbe 0x43a55f
xor edx, edx
mov word [ebp - 0xb48], dx
xor eax, eax
mov dword [ebp - 0xb46], eax
mov dword [ebp - 0xb42], eax
mov dword [ebp - 0xb3e], eax
mov word [ebp - 0xb3a], ax
push 0
push 0
lea ecx, [ebp - 0xb48]
push ecx
push 0
push str.Name
mov edx, dword [ebp - 0x9e0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9e0]
push ecx
mov edx, dword [eax + 0x10]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43a54b
push 0x100
mov eax, dword [ebp - 0xb40]
push eax
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x800
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea edx, [ebp - 0xb48]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x9e0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9e0]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x9b0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b0]
push eax
mov ecx, dword [edx + 8]
call ecx
lea edx, [ebp - 0x9b0]
push edx
push 0
push 0x30
push 0x519cb0
push 0x519cf8
mov eax, dword [ebp - 0x9b4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b4]
push edx
mov eax, dword [ecx + 0x50]
call eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43a6b5
mov dword [ebp - 0xa9c], 0
mov dword [ebp - 0x9d0], 0
lea ecx, [ebp - 0xa9c]
push ecx
lea edx, [ebp - 0x9d0]
push edx
push 1
push 0xffffffffffffffff
mov eax, dword [ebp - 0x9b0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b0]
push edx
mov eax, dword [ecx + 0x10]
call eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43a6a1
cmp dword [ebp - 0xa9c], 0
jbe 0x43a6a1
xor ecx, ecx
mov word [ebp - 0xb58], cx
xor edx, edx
mov dword [ebp - 0xb56], edx
mov dword [ebp - 0xb52], edx
mov dword [ebp - 0xb4e], edx
mov word [ebp - 0xb4a], dx
push 0
push 0
lea eax, [ebp - 0xb58]
push eax
push 0
push 0x519d00
mov ecx, dword [ebp - 0x9d0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9d0]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43a68d
push 0x100
mov edx, dword [ebp - 0xb50]
push edx
mov eax, dword [ebp - 0x9ac]
add eax, 0xa00
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea ecx, [ebp - 0xb58]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x9d0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9d0]
push ecx
mov edx, dword [eax + 8]
call edx
mov eax, dword [ebp - 0x9b0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b0]
push edx
mov eax, dword [ecx + 8]
call eax
lea ecx, [ebp - 0x9b0]
push ecx
push 0
push 0x30
push str.SELECT__FROM_Win32_OperatingSystem
push 0x519d1c
mov edx, dword [ebp - 0x9b4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b4]
push ecx
mov edx, dword [eax + 0x50]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43a860
mov dword [ebp - 0xaa0], 0
mov dword [ebp - 0x9cc], 0
lea eax, [ebp - 0xaa0]
push eax
lea ecx, [ebp - 0x9cc]
push ecx
push 1
push 0xffffffffffffffff
mov edx, dword [ebp - 0x9b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b0]
push ecx
mov edx, dword [eax + 0x10]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43a84c
cmp dword [ebp - 0xaa0], 0
jbe 0x43a84c
xor eax, eax
mov word [ebp - 0xb68], ax
xor ecx, ecx
mov dword [ebp - 0xb66], ecx
mov dword [ebp - 0xb62], ecx
mov dword [ebp - 0xb5e], ecx
mov word [ebp - 0xb5a], cx
push 0
push 0
lea edx, [ebp - 0xb68]
push edx
push 0
push 0x519da0
mov eax, dword [ebp - 0x9cc]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9cc]
push edx
mov eax, dword [ecx + 0x10]
call eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43a838
push 0x100
mov ecx, dword [ebp - 0xb60]
push ecx
mov edx, dword [ebp - 0x9ac]
add edx, 0xc00
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
mov dword [ebp - 0x9e8], 0
jmp 0x43a7e2
mov eax, dword [ebp - 0x9e8]
add eax, 1
mov dword [ebp - 0x9e8], eax
mov ecx, dword [ebp - 0x9e8]
mov edx, dword [ebp - 0x9ac]
movzx eax, word [edx + ecx*2 + 0xc00]
test eax, eax
je 0x43a82b
mov ecx, dword [ebp - 0x9e8]
mov edx, dword [ebp - 0x9ac]
movzx eax, word [edx + ecx*2 + 0xc00]
cmp eax, 0x2e
jne 0x43a829
xor ecx, ecx
mov edx, dword [ebp - 0x9e8]
mov eax, dword [ebp - 0x9ac]
mov word [eax + edx*2 + 0xc00], cx
jmp 0x43a7d3
lea ecx, [ebp - 0xb68]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x9cc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9cc]
push ecx
mov edx, dword [eax + 8]
call edx
mov eax, dword [ebp - 0x9b0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b0]
push edx
mov eax, dword [ecx + 8]
call eax
lea ecx, [ebp - 0x9b0]
push ecx
push 0
push 0x30
push 0x519d24
push 0x519db8
mov edx, dword [ebp - 0x9b4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b4]
push ecx
mov edx, dword [eax + 0x50]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43a9a3
mov dword [ebp - 0xaa4], 0
mov dword [ebp - 0xa10], 0
lea eax, [ebp - 0xaa4]
push eax
lea ecx, [ebp - 0xa10]
push ecx
push 1
push 0xffffffffffffffff
mov edx, dword [ebp - 0x9b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b0]
push ecx
mov edx, dword [eax + 0x10]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43a98f
cmp dword [ebp - 0xaa4], 0
jbe 0x43a98f
xor eax, eax
mov word [ebp - 0xb78], ax
xor ecx, ecx
mov dword [ebp - 0xb76], ecx
mov dword [ebp - 0xb72], ecx
mov dword [ebp - 0xb6e], ecx
mov word [ebp - 0xb6a], cx
push 0
push 0
lea edx, [ebp - 0xb78]
push edx
push 0
push 0x519dc0
mov eax, dword [ebp - 0xa10]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xa10]
push edx
mov eax, dword [ecx + 0x10]
call eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43a97b
push 0x100
mov ecx, dword [ebp - 0xb70]
push ecx
mov edx, dword [ebp - 0x9ac]
add edx, 0xe00
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea eax, [ebp - 0xb78]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0xa10]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xa10]
push eax
mov ecx, dword [edx + 8]
call ecx
mov edx, dword [ebp - 0x9b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b0]
push ecx
mov edx, dword [eax + 8]
call edx
lea eax, [ebp - 0x9b0]
push eax
push 0
push 0x30
push str.SELECT__FROM_Win32_BIOS
push 0x519e10
mov ecx, dword [ebp - 0x9b4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b4]
push eax
mov ecx, dword [edx + 0x50]
call ecx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43aae6
mov dword [ebp - 0xaa8], 0
mov dword [ebp - 0xa0c], 0
lea edx, [ebp - 0xaa8]
push edx
lea eax, [ebp - 0xa0c]
push eax
push 1
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x9b0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b0]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43aad2
cmp dword [ebp - 0xaa8], 0
jbe 0x43aad2
xor edx, edx
mov word [ebp - 0xb88], dx
xor eax, eax
mov dword [ebp - 0xb86], eax
mov dword [ebp - 0xb82], eax
mov dword [ebp - 0xb7e], eax
mov word [ebp - 0xb7a], ax
push 0
push 0
lea ecx, [ebp - 0xb88]
push ecx
push 0
push str.SMBIOSBIOSVersion
mov edx, dword [ebp - 0xa0c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xa0c]
push ecx
mov edx, dword [eax + 0x10]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43aabe
push 0x100
mov eax, dword [ebp - 0xb80]
push eax
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x1000
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea edx, [ebp - 0xb88]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0xa0c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xa0c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x9b0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b0]
push eax
mov ecx, dword [edx + 8]
call ecx
lea edx, [ebp - 0x9b0]
push edx
push 0
push 0x30
push str.SELECT__FROM_Win32_DiskDrive
push 0x519e78
mov eax, dword [ebp - 0x9b4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b4]
push edx
mov eax, dword [ecx + 0x50]
call eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43ad16
mov dword [ebp - 0xaac], 0
mov dword [ebp - 0x9d4], 0
lea ecx, [ebp - 0xaac]
push ecx
lea edx, [ebp - 0x9d4]
push edx
push 1
push 0xffffffffffffffff
mov eax, dword [ebp - 0x9b0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b0]
push edx
mov eax, dword [ecx + 0x10]
call eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43ad02
cmp dword [ebp - 0xaac], 0
jbe 0x43ad02
xor ecx, ecx
mov word [ebp - 0xb98], cx
xor edx, edx
mov dword [ebp - 0xb96], edx
mov dword [ebp - 0xb92], edx
mov dword [ebp - 0xb8e], edx
mov word [ebp - 0xb8a], dx
push 0
push 0
lea eax, [ebp - 0xb98]
push eax
push 0
push str.SerialNumber
mov ecx, dword [ebp - 0x9d4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9d4]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43acee
xor edx, edx
mov word [ebp - 0x75c], dx
push 0x206
push 0
lea eax, [ebp - 0x75a]
push eax
call fcn.004ab2f0
add esp, 0xc
push 0x100
mov ecx, dword [ebp - 0xb90]
push ecx
lea edx, [ebp - 0x75c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
mov dword [ebp - 0xbb0], 0x208
mov dword [ebp - 0xa08], 0
jmp 0x43ac36
mov eax, dword [ebp - 0xa08]
add eax, 1
mov dword [ebp - 0xa08], eax
cmp dword [ebp - 0xa08], 0x208
jae 0x43ace1
mov ecx, dword [ebp - 0xa08]
movzx edx, word [ebp + ecx*2 - 0x75c]
push edx
call fcn.004b3b02
add esp, 4
test eax, eax
jne 0x43acdc
mov eax, dword [ebp - 0xa08]
lea ecx, [ebp + eax*2 - 0x75c]
mov dword [ebp - 0xa30], ecx
mov edx, dword [ebp - 0x9ac]
add edx, 0x200
mov dword [ebp - 0xa14], edx
mov eax, dword [ebp - 0xa14]
mov dword [ebp - 0xbb4], eax
mov ecx, dword [ebp - 0xa30]
mov dx, word [ecx]
mov word [ebp - 0x9c0], dx
mov eax, dword [ebp - 0xa14]
mov cx, word [ebp - 0x9c0]
mov word [eax], cx
mov edx, dword [ebp - 0xa30]
add edx, 2
mov dword [ebp - 0xa30], edx
mov eax, dword [ebp - 0xa14]
add eax, 2
mov dword [ebp - 0xa14], eax
cmp word [ebp - 0x9c0], 0
jne 0x43ac92
jmp 0x43ace1
jmp 0x43ac27
lea ecx, [ebp - 0xb98]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x9d4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9d4]
push ecx
mov edx, dword [eax + 8]
call edx
mov eax, dword [ebp - 0x9b0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b0]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x9b4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b4]
push eax
mov ecx, dword [edx + 8]
call ecx
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xa04]
push ecx
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0xab4], 0
mov dword [ebp - 0xab0], 0
mov eax, 1
xor edx, edx
cpuid
mov dword [ebp - 0xab4], edx
mov dword [ebp - 0xab0], eax
mov eax, dword [ebp - 0xab0]
push eax
mov ecx, dword [ebp - 0xab4]
push ecx
push str._08X_08X
mov edx, dword [ebp - 0x9ac]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
call fcn.0043a060
test eax, eax
je 0x43adee
mov eax, dword [ebp - 0x9ac]
add eax, 0x200
mov dword [ebp - 0xa00], eax
mov ecx, dword [ebp - 0xa00]
add ecx, 2
mov dword [ebp - 0xaec], ecx
mov edx, dword [ebp - 0xa00]
mov ax, word [edx]
mov word [ebp - 0xa26], ax
add dword [ebp - 0xa00], 2
cmp word [ebp - 0xa26], 0
jne 0x43adb3
mov ecx, dword [ebp - 0xa00]
sub ecx, dword [ebp - 0xaec]
sar ecx, 1
mov dword [ebp - 0xb1c], ecx
jne 0x43ae84
push 0x200
push 0
mov edx, dword [ebp - 0x9ac]
add edx, 0x200
push edx
call fcn.004ab2f0
add esp, 0xc
mov dword [ebp - 0xa18], 0
jmp 0x43ae25
mov eax, dword [ebp - 0xa18]
add eax, 1
mov dword [ebp - 0xa18], eax
cmp dword [ebp - 0xa18], 0xa
jge 0x43ae84
xor ecx, ecx
mov word [ebp - 0x95c], cx
push 0x1fe
push 0
lea edx, [ebp - 0x95a]
push edx
call fcn.004ab2f0
add esp, 0xc
lea eax, [ebp - 0x95c]
push eax
mov ecx, dword [ebp - 0xa18]
push ecx
call fcn.0043c290
add esp, 8
test eax, eax
je 0x43ae82
lea edx, [ebp - 0x95c]
push edx
mov eax, dword [ebp - 0x9ac]
add eax, 0x200
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x43ae84
jmp 0x43ae16
mov byte [ebp - 0x18], 0
xor ecx, ecx
mov dword [ebp - 0x17], ecx
mov byte [ebp - 0x13], cl
mov dword [ebp - 0xa34], 0
lea edx, [ebp - 0xa34]
push edx
push 0
call sub.IPHLPAPI.DLL_GetAdaptersInfo
mov eax, dword [ebp - 0xa34]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0xa38], eax
cmp dword [ebp - 0xa38], 0
je 0x43af56
lea ecx, [ebp - 0xa34]
push ecx
mov edx, dword [ebp - 0xa38]
push edx
call sub.IPHLPAPI.DLL_GetAdaptersInfo
test eax, eax
jne 0x43af56
mov eax, dword [ebp - 0xa38]
mov dword [ebp - 0x9d8], eax
jmp 0x43aefd
mov ecx, dword [ebp - 0x9d8]
mov edx, dword [ecx]
mov dword [ebp - 0x9d8], edx
cmp dword [ebp - 0x9d8], 0
je 0x43af56
mov eax, dword [ebp - 0x9d8]
add eax, 8
push eax
call fcn.0043c4d0
add esp, 4
mov dword [ebp - 0xa5c], eax
cmp dword [ebp - 0xa5c], 1
je 0x43af30
cmp dword [ebp - 0xa5c], 0
jne 0x43af54
mov ecx, dword [ebp - 0x9d8]
add ecx, 0x194
mov edx, dword [ecx]
mov dword [ebp - 0x18], edx
mov ax, word [ecx + 4]
mov word [ebp - 0x14], ax
cmp dword [ebp - 0xa5c], 0
jne 0x43af54
jmp 0x43af56
jmp 0x43aeef
mov ecx, 1
imul edx, ecx, 5
movzx eax, byte [ebp + edx - 0x18]
push eax
mov ecx, 1
shl ecx, 2
movzx edx, byte [ebp + ecx - 0x18]
push edx
mov eax, 1
imul ecx, eax, 3
movzx edx, byte [ebp + ecx - 0x18]
push edx
mov eax, 1
shl eax, 1
movzx ecx, byte [ebp + eax - 0x18]
push ecx
mov edx, 1
shl edx, 0
movzx eax, byte [ebp + edx - 0x18]
push eax
mov ecx, 1
imul edx, ecx, 0
movzx eax, byte [ebp + edx - 0x18]
push eax
push str._02X__02X__02X__02X__02X__02X
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x400
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x20
mov edx, 2
imul eax, edx, 0x103
xor ecx, ecx
mov edx, dword [ebp - 0x9ac]
mov word [edx + eax + 0x200], cx
push 0x200
mov eax, dword [ebp - 0x9ac]
add eax, 0x200
push eax
call fcn.00435570
add esp, 8
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x200
mov dword [ebp - 0x9f8], ecx
mov edx, dword [ebp - 0x9f8]
add edx, 2
mov dword [ebp - 0xb9c], edx
mov eax, dword [ebp - 0x9f8]
mov cx, word [eax]
mov word [ebp - 0xa2a], cx
add dword [ebp - 0x9f8], 2
cmp word [ebp - 0xa2a], 0
jne 0x43b019
mov edx, dword [ebp - 0x9f8]
sub edx, dword [ebp - 0xb9c]
sar edx, 1
mov dword [ebp - 0xba0], edx
je 0x43b104
mov eax, dword [ebp - 0x9ac]
add eax, 0x200
push eax
call fcn.00439ec0
add esp, 4
push eax
lea ecx, [ebp - 0x98c]
call fcn.00409570
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x9b5]
call fcn.004032d0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x98c]
call fcn.00403690
push eax
lea ecx, [ebp - 0x98c]
call fcn.004036a0
push eax
lea ecx, [ebp - 0x9b5]
call fcn.00409740
lea ecx, [ebp - 0x98c]
call fcn.00403690
push eax
lea ecx, [ebp - 0x98c]
call fcn.004036a0
push eax
push 3
push 0x519eec
push 0x519ef0
push reloc.WS2_32.dll_accept
call fcn.00435440
add esp, 0x18
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x9b5]
call fcn.004043e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x98c]
call fcn.00408cf0
jmp 0x43b305
mov byte [ebp - 0x144], 0
push 0x63
push 0
lea ecx, [ebp - 0x143]
push ecx
call fcn.004ab2f0
add esp, 0xc
mov dword [ebp - 0xab8], 0x64
lea edx, [ebp - 0xab8]
push edx
lea eax, [ebp - 0x144]
push eax
push 0x519f10
push 0x519f14
push reloc.WS2_32.dll_accept
call fcn.004352b0
add esp, 0x14
movzx ecx, al
test ecx, ecx
je 0x43b191
lea ecx, [ebp - 0x9b6]
call fcn.004032d0
mov dword [ebp - 4], 2
mov edx, dword [ebp - 0xab8]
push edx
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x9b6]
call fcn.00409740
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9b6]
call fcn.004043e0
push 0x200
push 0
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x200
push ecx
call fcn.004ab2f0
add esp, 0xc
call fcn.00436c70
mov dword [ebp - 0xbac], eax
lea edx, [ebp - 0x144]
mov dword [ebp - 0xa48], edx
cmp dword [ebp - 0xa48], 0
jne 0x43b1dc
mov dword [ebp - 0xa74], 0
jmp 0x43b294
mov eax, dword [ebp - 0xa48]
mov dword [ebp - 0x9e4], eax
mov ecx, dword [ebp - 0x9e4]
add ecx, 1
mov dword [ebp - 0xba4], ecx
mov edx, dword [ebp - 0x9e4]
mov al, byte [edx]
mov byte [ebp - 0x9bb], al
add dword [ebp - 0x9e4], 1
cmp byte [ebp - 0x9bb], 0
jne 0x43b1f7
mov ecx, dword [ebp - 0x9e4]
sub ecx, dword [ebp - 0xba4]
mov dword [ebp - 0xba8], ecx
mov edx, dword [ebp - 0xba8]
add edx, 1
mov dword [ebp - 0xa64], edx
cmp dword [ebp - 0xa64], 0x3fffffff
jle 0x43b24e
mov dword [ebp - 0xabc], 0
jmp 0x43b288
mov eax, dword [ebp - 0xa64]
shl eax, 1
call fcn.004a5030
mov dword [ebp - 0xafc], esp
mov eax, dword [ebp - 0xbac]
push eax
mov ecx, dword [ebp - 0xa64]
push ecx
mov edx, dword [ebp - 0xa48]
push edx
mov eax, dword [ebp - 0xafc]
push eax
call fcn.0043bfb0
mov dword [ebp - 0xabc], eax
mov ecx, dword [ebp - 0xabc]
mov dword [ebp - 0xa74], ecx
mov edx, dword [ebp - 0xa74]
mov dword [ebp - 0xa50], edx
mov eax, dword [ebp - 0x9ac]
add eax, 0x200
mov dword [ebp - 0xa1c], eax
mov ecx, dword [ebp - 0xa1c]
mov dword [ebp - 0xbb8], ecx
mov edx, dword [ebp - 0xa50]
mov ax, word [edx]
mov word [ebp - 0x9c2], ax
mov ecx, dword [ebp - 0xa1c]
mov dx, word [ebp - 0x9c2]
mov word [ecx], dx
mov eax, dword [ebp - 0xa50]
add eax, 2
mov dword [ebp - 0xa50], eax
mov ecx, dword [ebp - 0xa1c]
add ecx, 2
mov dword [ebp - 0xa1c], ecx
cmp word [ebp - 0x9c2], 0
jne 0x43b2bd
mov edx, dword [ebp - 0x9ac]
mov dword [ebp - 0x9fc], edx
mov eax, dword [ebp - 0x9fc]
add eax, 2
mov dword [ebp - 0xb00], eax
mov ecx, dword [ebp - 0x9fc]
mov dx, word [ecx]
mov word [ebp - 0xa28], dx
add dword [ebp - 0x9fc], 2
cmp word [ebp - 0xa28], 0
jne 0x43b320
mov eax, dword [ebp - 0x9fc]
sub eax, dword [ebp - 0xb00]
sar eax, 1
mov dword [ebp - 0xb04], eax
je 0x43b406
mov ecx, dword [ebp - 0x9ac]
push ecx
call fcn.00439ec0
add esp, 4
push eax
lea ecx, [ebp - 0x974]
call fcn.00409570
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x9b7]
call fcn.004032d0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x974]
call fcn.00403690
push eax
lea ecx, [ebp - 0x974]
call fcn.004036a0
push eax
lea ecx, [ebp - 0x9b7]
call fcn.00409740
lea ecx, [ebp - 0x974]
call fcn.00403690
push eax
lea ecx, [ebp - 0x974]
call fcn.004036a0
push eax
push 3
push 0x519f34
push 0x519f38
push reloc.WS2_32.dll_accept
call fcn.00435440
add esp, 0x18
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x9b7]
call fcn.004043e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x974]
call fcn.00408cf0
jmp 0x43b5fc
mov byte [ebp - 0xe0], 0
push 0x63
push 0
lea edx, [ebp - 0xdf]
push edx
call fcn.004ab2f0
add esp, 0xc
mov dword [ebp - 0xa78], 0x64
lea eax, [ebp - 0xa78]
push eax
lea ecx, [ebp - 0xe0]
push ecx
push 0x519f58
push 0x519f5c
push reloc.WS2_32.dll_accept
call fcn.004352b0
add esp, 0x14
movzx edx, al
test edx, edx
je 0x43b493
lea ecx, [ebp - 0x9b8]
call fcn.004032d0
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0xa78]
push eax
lea ecx, [ebp - 0xe0]
push ecx
lea ecx, [ebp - 0x9b8]
call fcn.00409740
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9b8]
call fcn.004043e0
push 0x200
push 0
mov edx, dword [ebp - 0x9ac]
push edx
call fcn.004ab2f0
add esp, 0xc
call fcn.00436c70
mov dword [ebp - 0xadc], eax
lea eax, [ebp - 0xe0]
mov dword [ebp - 0xa58], eax
cmp dword [ebp - 0xa58], 0
jne 0x43b4d8
mov dword [ebp - 0xa80], 0
jmp 0x43b590
mov ecx, dword [ebp - 0xa58]
mov dword [ebp - 0x9ec], ecx
mov edx, dword [ebp - 0x9ec]
add edx, 1
mov dword [ebp - 0xb08], edx
mov eax, dword [ebp - 0x9ec]
mov cl, byte [eax]
mov byte [ebp - 0x9bc], cl
add dword [ebp - 0x9ec], 1
cmp byte [ebp - 0x9bc], 0
jne 0x43b4f3
mov edx, dword [ebp - 0x9ec]
sub edx, dword [ebp - 0xb08]
mov dword [ebp - 0xad8], edx
mov eax, dword [ebp - 0xad8]
add eax, 1
mov dword [ebp - 0xa54], eax
cmp dword [ebp - 0xa54], 0x3fffffff
jle 0x43b54a
mov dword [ebp - 0xa7c], 0
jmp 0x43b584
mov eax, dword [ebp - 0xa54]
shl eax, 1
call fcn.004a5030
mov dword [ebp - 0xae0], esp
mov ecx, dword [ebp - 0xadc]
push ecx
mov edx, dword [ebp - 0xa54]
push edx
mov eax, dword [ebp - 0xa58]
push eax
mov ecx, dword [ebp - 0xae0]
push ecx
call fcn.0043bfb0
mov dword [ebp - 0xa7c], eax
mov edx, dword [ebp - 0xa7c]
mov dword [ebp - 0xa80], edx
mov eax, dword [ebp - 0xa80]
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9ac]
mov dword [ebp - 0xa20], ecx
mov edx, dword [ebp - 0xa20]
mov dword [ebp - 0xbbc], edx
mov eax, dword [ebp - 0xa60]
mov cx, word [eax]
mov word [ebp - 0x9c4], cx
mov edx, dword [ebp - 0xa20]
mov ax, word [ebp - 0x9c4]
mov word [edx], ax
mov ecx, dword [ebp - 0xa60]
add ecx, 2
mov dword [ebp - 0xa60], ecx
mov edx, dword [ebp - 0xa20]
add edx, 2
mov dword [ebp - 0xa20], edx
cmp word [ebp - 0x9c4], 0
jne 0x43b5b4
mov eax, dword [ebp - 0x9ac]
add eax, 0x400
mov dword [ebp - 0x9f0], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 2
mov dword [ebp - 0xae4], ecx
mov edx, dword [ebp - 0x9f0]
mov ax, word [edx]
mov word [ebp - 0xa4a], ax
add dword [ebp - 0x9f0], 2
cmp word [ebp - 0xa4a], 0
jne 0x43b61c
mov ecx, dword [ebp - 0x9f0]
sub ecx, dword [ebp - 0xae4]
sar ecx, 1
mov dword [ebp - 0xae8], ecx
je 0x43b708
mov edx, dword [ebp - 0x9ac]
add edx, 0x400
push edx
call fcn.00439ec0
add esp, 4
push eax
lea ecx, [ebp - 0x9a4]
call fcn.00409570
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x9b9]
call fcn.004032d0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x9a4]
call fcn.00403690
push eax
lea ecx, [ebp - 0x9a4]
call fcn.004036a0
push eax
lea ecx, [ebp - 0x9b9]
call fcn.00409740
lea ecx, [ebp - 0x9a4]
call fcn.00403690
push eax
lea ecx, [ebp - 0x9a4]
call fcn.004036a0
push eax
push 3
push 0x519f7c
push 0x519f80
push reloc.WS2_32.dll_accept
call fcn.00435440
add esp, 0x18
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x9b9]
call fcn.004043e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9a4]
call fcn.00408cf0
jmp 0x43b8fa
mov byte [ebp - 0x7c], 0
push 0x63
push 0
lea eax, [ebp - 0x7b]
push eax
call fcn.004ab2f0
add esp, 0xc
mov dword [ebp - 0xa84], 0x64
lea ecx, [ebp - 0xa84]
push ecx
lea edx, [ebp - 0x7c]
push edx
push 0x519fa0
push 0x519fa4
push reloc.WS2_32.dll_accept
call fcn.004352b0
add esp, 0x14
movzx eax, al
test eax, eax
je 0x43b789
lea ecx, [ebp - 0x9ba]
call fcn.004032d0
mov dword [ebp - 4], 8
mov ecx, dword [ebp - 0xa84]
push ecx
lea edx, [ebp - 0x7c]
push edx
lea ecx, [ebp - 0x9ba]
call fcn.00409740
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9ba]
call fcn.004043e0
push 0x200
push 0
mov eax, dword [ebp - 0x9ac]
add eax, 0x400
push eax
call fcn.004ab2f0
add esp, 0xc
call fcn.00436c70
mov dword [ebp - 0xaf4], eax
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0xa68], ecx
cmp dword [ebp - 0xa68], 0
jne 0x43b7d0
mov dword [ebp - 0xa8c], 0
jmp 0x43b888
mov edx, dword [ebp - 0xa68]
mov dword [ebp - 0x9f4], edx
mov eax, dword [ebp - 0x9f4]
add eax, 1
mov dword [ebp - 0xb38], eax
mov ecx, dword [ebp - 0x9f4]
mov dl, byte [ecx]
mov byte [ebp - 0x9bd], dl
add dword [ebp - 0x9f4], 1
cmp byte [ebp - 0x9bd], 0
jne 0x43b7eb
mov eax, dword [ebp - 0x9f4]
sub eax, dword [ebp - 0xb38]
mov dword [ebp - 0xaf0], eax
mov ecx, dword [ebp - 0xaf0]
add ecx, 1
mov dword [ebp - 0xa70], ecx
cmp dword [ebp - 0xa70], 0x3fffffff
jle 0x43b842
mov dword [ebp - 0xa88], 0
jmp 0x43b87c
mov eax, dword [ebp - 0xa70]
shl eax, 1
call fcn.004a5030
mov dword [ebp - 0xaf8], esp
mov edx, dword [ebp - 0xaf4]
push edx
mov eax, dword [ebp - 0xa70]
push eax
mov ecx, dword [ebp - 0xa68]
push ecx
mov edx, dword [ebp - 0xaf8]
push edx
call fcn.0043bfb0
mov dword [ebp - 0xa88], eax
mov eax, dword [ebp - 0xa88]
mov dword [ebp - 0xa8c], eax
mov ecx, dword [ebp - 0xa8c]
mov dword [ebp - 0xa6c], ecx
mov edx, dword [ebp - 0x9ac]
add edx, 0x400
mov dword [ebp - 0xa24], edx
mov eax, dword [ebp - 0xa24]
mov dword [ebp - 0xbc0], eax
mov ecx, dword [ebp - 0xa6c]
mov dx, word [ecx]
mov word [ebp - 0x9c6], dx
mov eax, dword [ebp - 0xa24]
mov cx, word [ebp - 0x9c6]
mov word [eax], cx
mov edx, dword [ebp - 0xa6c]
add edx, 2
mov dword [ebp - 0xa6c], edx
mov eax, dword [ebp - 0xa24]
add eax, 2
mov dword [ebp - 0xa24], eax
cmp word [ebp - 0x9c6], 0
jne 0x43b8b2
mov dword [ebp - 0xa90], 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0xa90]
push ecx
push 0
push 0
push 0x519fc4
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je 0x43b947
mov edx, dword [ebp - 0xa90]
push edx
push str._08X
mov eax, dword [ebp - 0x9ac]
add eax, 0x1200
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x554], cx
push 0x206
push 0
lea edx, [ebp - 0x552]
push edx
call fcn.004ab2f0
add esp, 0xc
xor eax, eax
mov word [ebp - 0x34c], ax
push 0x206
push 0
lea ecx, [ebp - 0x34a]
push ecx
call fcn.004ab2f0
add esp, 0xc
xorps xmm0, xmm0
movlpd qword [ebp - 0xad4], xmm0
xorps xmm0, xmm0
movlpd qword [ebp - 0xacc], xmm0
xorps xmm0, xmm0
movlpd qword [ebp - 0xac4], xmm0
lea edx, [ebp - 0x554]
push edx
push 0
push 0
push 0x25
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43bbb4
push 0x519fd8
lea eax, [ebp - 0x554]
push eax
lea ecx, [ebp - 0x34c]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
test eax, eax
je 0x43ba70
push 0
push 0
push 3
push 0
push 1
push accept
lea edx, [ebp - 0x34c]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xa3c], eax
cmp dword [ebp - 0xa3c], 0xffffffff
je 0x43ba70
mov dword [ebp - 0xb24], 0
xor eax, eax
mov dword [ebp - 0xb20], eax
push 0
push 0
lea ecx, [ebp - 0xb24]
push ecx
mov edx, dword [ebp - 0xa3c]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x43ba63
lea eax, [ebp - 0xb24]
push eax
call fcn.0043c240
add esp, 4
mov dword [ebp - 0xad4], eax
mov dword [ebp - 0xad0], edx
mov ecx, dword [ebp - 0xa3c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.user32.dll
lea edx, [ebp - 0x554]
push edx
lea eax, [ebp - 0x34c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
test eax, eax
je 0x43bb12
push 0
push 0
push 3
push 0
push 1
push accept
lea ecx, [ebp - 0x34c]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xa40], eax
cmp dword [ebp - 0xa40], 0xffffffff
je 0x43bb12
mov dword [ebp - 0xb2c], 0
xor edx, edx
mov dword [ebp - 0xb28], edx
push 0
push 0
lea eax, [ebp - 0xb2c]
push eax
mov ecx, dword [ebp - 0xa40]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x43bb05
lea edx, [ebp - 0xb2c]
push edx
call fcn.0043c240
add esp, 4
mov dword [ebp - 0xacc], eax
mov dword [ebp - 0xac8], edx
mov eax, dword [ebp - 0xa40]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.notepad.exe
lea ecx, [ebp - 0x554]
push ecx
lea edx, [ebp - 0x34c]
push edx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
test eax, eax
je 0x43bbb4
push 0
push 0
push 3
push 0
push 1
push accept
lea eax, [ebp - 0x34c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xa44], eax
cmp dword [ebp - 0xa44], 0xffffffff
je 0x43bbb4
mov dword [ebp - 0xb34], 0
xor ecx, ecx
mov dword [ebp - 0xb30], ecx
push 0
push 0
lea edx, [ebp - 0xb34]
push edx
mov eax, dword [ebp - 0xa44]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x43bba7
lea ecx, [ebp - 0xb34]
push ecx
call fcn.0043c240
add esp, 4
mov dword [ebp - 0xac4], eax
mov dword [ebp - 0xac0], edx
mov edx, dword [ebp - 0xa44]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xac0]
push eax
mov ecx, dword [ebp - 0xac4]
push ecx
mov edx, dword [ebp - 0xac8]
push edx
mov eax, dword [ebp - 0xacc]
push eax
mov ecx, dword [ebp - 0xad0]
push ecx
mov edx, dword [ebp - 0xad4]
push edx
push str._llu__llu__llu
push 0x100
mov eax, dword [ebp - 0x9ac]
add eax, 0x1400
push eax
call fcn.0043c680
add esp, 0x24
mov eax, dword [ebp - 0x9ac]
lea esp, [ebp - 0xbc8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a4bd0
mov esp, ebp
pop ebp
ret