Function at 0x41e6a0
Capabilities:
Accept command line arguments
Get memory capacity
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x454957
mov eax, dword fs:[0]
push eax
sub esp, 0x6cc
mov eax, dword [0x46b664]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov edi, edx
mov eax, dword [edi + 4]
push eax
mov edx, 2
lea ecx, [ebp - 0x624]
mov word [ebp - 0x624], 0xfeff
call fcn.0041a0b0
xor ebx, ebx
add esp, 4
cmp byte [esi + 0x60], bl
jne 0x420741
cmp byte [esi + 0x5e], bl
je 0x41e730
mov eax, dword [edi + 4]
push 2
push ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
jne 0x41e71a
call fcn.0041a180
mov eax, dword [edi + 4]
push eax
mov edx, 0xc
mov ecx, 0x45dafc
call fcn.0041a0b0
add esp, 4
cmp byte [esi + 0x60], bl
jne 0x420741
mov esi, dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0x8007
call esi
push str.NwSapFeiUt.dll
mov dword [ebp - 0x618], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x60c], eax
mov eax, dword [ebp - 0x618]
push eax
call esi
mov eax, dword [edi + 4]
push 2
push ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
jne 0x41e77e
call fcn.0041a180
xor ecx, ecx
push 3
mov eax, 0x45db2c
lea esi, [ebp - 0x4e8]
mov dword [ebp - 0x4d4], 7
mov dword [ebp - 0x4d8], ebx
mov word [ebp - 0x4e8], cx
call fcn.0040eba0
mov dword [ebp - 4], ebx
mov byte [ebp - 0x60d], bl
cmp dword [ebp - 0x60c], ebx
je 0x41e83a
mov edx, dword [ebp - 0x60c]
push str.GetGeneralSystemInfo86
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
je 0x41e82d
lea ecx, [ebp - 0x620]
pxor xmm0, xmm0
push ecx
movq qword [ebp - 0x61c], xmm0
mov dword [ebp - 0x620], 0xc
call eax
mov eax, dword [ebp - 0x61c]
add esp, 4
cmp eax, ebx
je 0x41e820
mov ecx, eax
lea esi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x41e805
sub ecx, esi
sar ecx, 1
push ecx
lea esi, [ebp - 0x4e8]
call fcn.0040eba0
cmp byte [ebp - 0x618], bl
setne byte [ebp - 0x60d]
mov edx, dword [ebp - 0x60c]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [edi + 4]
mov esi, dword [sym.imp.KERNEL32.dll_WriteFile]
push ebx
lea ecx, [ebp - 0x60c]
push ecx
push 0xa4
push str._r_n
push eax
mov dword [ebp - 0x60c], ebx
call esi
cmp eax, ebx
je 0x420b45
cmp dword [ebp - 0x60c], 0xa4
jne 0x420b45
mov eax, dword [edi + 4]
push ebx
lea edx, [ebp - 0x60c]
push edx
push 6
push 0x45dbf8
push eax
mov dword [ebp - 0x60c], ebx
call esi
cmp eax, ebx
je 0x420ac8
cmp dword [ebp - 0x60c], 6
jne 0x420ac8
mov eax, dword [edi + 4]
push ebx
lea ecx, [ebp - 0x60c]
push ecx
push ebx
push 0x45c490
push eax
mov dword [ebp - 0x60c], ebx
call esi
cmp eax, ebx
je 0x420a4b
cmp dword [ebp - 0x60c], ebx
jne 0x420a4b
mov eax, dword [edi + 4]
push ebx
lea edx, [ebp - 0x60c]
push edx
push 4
push 0x45dc00
push eax
mov dword [ebp - 0x60c], ebx
call esi
cmp eax, ebx
je 0x4209ce
cmp dword [ebp - 0x60c], 4
jne 0x4209ce
lea eax, [ebp - 0x6d0]
push eax
call fcn.0040cca0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x6c0]
push str.Logfile:_t_t
push ecx
call fcn.0040de50
lea edx, [edi + 0x10]
push edx
push eax
call fcn.0040e870
mov eax, dword [edi + 4]
add esp, 0x10
push ebx
lea ecx, [ebp - 0x60c]
push ecx
push 6
push 0x45dbf8
push eax
mov dword [ebp - 0x60c], ebx
call esi
cmp eax, ebx
je 0x420951
cmp dword [ebp - 0x60c], 6
jne 0x420951
lea edx, [ebp - 0x46c]
push edx
lea eax, [ebp - 0x6d0]
push eax
call fcn.004054f0
mov byte [ebp - 4], 0xc
mov edx, dword [eax + 0x10]
mov ecx, dword [edi + 4]
cmp edx, ebx
je 0x41e98d
cmp dword [eax + 0x14], 8
jb 0x41e98f
mov eax, dword [eax]
jmp 0x41e98f
xor eax, eax
push ecx
add edx, edx
mov ecx, eax
call fcn.0041a0b0
add esp, 4
mov byte [ebp - 4], 9
cmp dword [ebp - 0x458], 8
jb 0x41e9b8
mov ecx, dword [ebp - 0x46c]
push ecx
call fcn.00431dda
add esp, 4
mov eax, dword [edi + 4]
push ebx
lea ecx, [ebp - 0x60c]
push ecx
push 4
push 0x45dc00
xor edx, edx
push eax
mov dword [ebp - 0x458], 7
mov dword [ebp - 0x45c], ebx
mov word [ebp - 0x46c], dx
mov dword [ebp - 0x60c], ebx
call esi
cmp eax, ebx
je 0x4208d4
cmp dword [ebp - 0x60c], 4
jne 0x4208d4
lea edx, [ebp - 0x6d8]
push edx
call fcn.00434395
add esp, 4
lea eax, [ebp - 0x6d8]
push eax
lea ecx, [ebp - 0x5c4]
push ecx
call fcn.0043410d
add esp, 8
xor edx, edx
push ebx
mov eax, 0x45c490
lea esi, [ebp - 0x4b0]
mov dword [ebp - 0x49c], 7
mov dword [ebp - 0x4a0], ebx
mov word [ebp - 0x4b0], dx
call fcn.0040eba0
mov byte [ebp - 4], 0xf
mov eax, esi
lea ecx, [ebp - 0x6b8]
call fcn.004257b0
mov byte [ebp - 4], 9
cmp dword [ebp - 0x49c], 8
jb 0x41ea7d
mov eax, dword [ebp - 0x4b0]
push eax
call fcn.00431dda
add esp, 4
lea edx, [ebp - 0x5c4]
push edx
lea eax, [ebp - 0x450]
xor ecx, ecx
push 0x80
push eax
mov dword [ebp - 0x49c], 7
mov dword [ebp - 0x4a0], ebx
mov word [ebp - 0x4b0], cx
call fcn.00434625
lea eax, [ebp - 0x450]
add esp, 0xc
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x41eac0
sub eax, edx
sar eax, 1
cmp word [ebp + eax*2 - 0x452], 0xa
lea eax, [ebp + eax*2 - 0x450]
jne 0x41eae7
xor ecx, ecx
mov word [eax - 2], cx
lea edx, [ebp - 0x450]
push edx
push ecx
lea eax, [ebp - 0x6c0]
push str.Started_logging:_t
push eax
call fcn.0040de50
add esp, 0xc
push eax
call fcn.0040de50
mov eax, dword [edi + 4]
add esp, 8
push ebx
lea ecx, [ebp - 0x60c]
push ecx
push 6
push 0x45dbf8
push eax
mov dword [ebp - 0x60c], ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, ebx
je 0x420857
cmp dword [ebp - 0x60c], 6
jne 0x420857
lea edx, [ebp - 0x46c]
push edx
lea eax, [ebp - 0x6d0]
push eax
call fcn.004054f0
mov byte [ebp - 4], 0x12
mov ecx, dword [eax + 0x10]
mov esi, dword [edi + 4]
cmp ecx, ebx
je 0x41eb6b
cmp dword [eax + 0x14], 8
jb 0x41eb6d
mov eax, dword [eax]
jmp 0x41eb6d
xor eax, eax
lea edx, [ecx + ecx]
push esi
mov ecx, eax
call fcn.0041a0b0
add esp, 4
mov byte [ebp - 4], 9
cmp dword [ebp - 0x458], 8
jb 0x41eb97
mov ecx, dword [ebp - 0x46c]
push ecx
call fcn.00431dda
add esp, 4
mov eax, dword [edi + 4]
push ebx
lea ecx, [ebp - 0x60c]
push ecx
push 4
push 0x45dc00
xor edx, edx
push eax
mov dword [ebp - 0x458], 7
mov dword [ebp - 0x45c], ebx
mov word [ebp - 0x46c], dx
mov dword [ebp - 0x60c], ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, ebx
je 0x4207da
cmp dword [ebp - 0x60c], 4
jne 0x4207da
xor edx, edx
push ebx
mov eax, 0x45c490
lea esi, [ebp - 0x4b0]
mov dword [ebp - 0x49c], 7
mov dword [ebp - 0x4a0], ebx
mov word [ebp - 0x4b0], dx
call fcn.0040eba0
mov byte [ebp - 4], 0x15
mov eax, esi
lea ecx, [ebp - 0x6b8]
call fcn.004257b0
mov byte [ebp - 4], 9
cmp dword [ebp - 0x49c], 8
jb 0x41ec3b
mov eax, dword [ebp - 0x4b0]
push eax
call fcn.00431dda
add esp, 4
lea edx, [ebp - 0x4e8]
push edx
xor ecx, ecx
push ecx
lea eax, [ebp - 0x6c0]
push str.Operating_system:_t
push eax
mov dword [ebp - 0x49c], 7
mov dword [ebp - 0x4a0], ebx
mov word [ebp - 0x4b0], cx
call fcn.0040de50
add esp, 0xc
push eax
call fcn.0040e870
mov eax, dword [edi + 4]
add esp, 8
push ebx
lea ecx, [ebp - 0x60c]
push ecx
push 6
push 0x45dbf8
push eax
mov dword [ebp - 0x60c], ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, ebx
je 0x42075d
cmp dword [ebp - 0x60c], 6
jne 0x42075d
lea edx, [ebp - 0x46c]
push edx
lea eax, [ebp - 0x6d0]
push eax
call fcn.004054f0
mov byte [ebp - 4], 0x18
mov ecx, dword [eax + 0x10]
mov esi, dword [edi + 4]
cmp ecx, ebx
je 0x41ecd8
cmp dword [eax + 0x14], 8
jb 0x41ecda
mov eax, dword [eax]
jmp 0x41ecda
xor eax, eax
lea edx, [ecx + ecx]
push esi
mov ecx, eax
call fcn.0041a0b0
add esp, 4
mov byte [ebp - 4], 9
cmp dword [ebp - 0x458], 8
jb 0x41ed04
mov ecx, dword [ebp - 0x46c]
push ecx
call fcn.00431dda
add esp, 4
mov eax, dword [edi + 4]
xor edx, edx
mov esi, 7
mov word [ebp - 0x46c], dx
push eax
lea edx, [esi - 3]
mov ecx, 0x45dc00
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
call fcn.0041a0b0
xor eax, eax
add esp, 4
mov dword [ebp - 0x49c], esi
mov word [ebp - 0x4b0], ax
push ebx
mov eax, 0x45c490
lea esi, [ebp - 0x4b0]
mov dword [ebp - 0x4a0], ebx
call fcn.0040eba0
mov byte [ebp - 4], 0x19
mov eax, esi
lea ecx, [ebp - 0x6b8]
call fcn.004257b0
mov byte [ebp - 4], 9
cmp dword [ebp - 0x49c], 8
jb 0x41ed85
mov ecx, dword [ebp - 0x4b0]
push ecx
call fcn.00431dda
add esp, 4
xor edx, edx
mov dword [ebp - 0x49c], 7
mov dword [ebp - 0x4a0], ebx
mov word [ebp - 0x4b0], dx
mov esi, str.__Administrator_
cmp byte [ebp - 0x60d], bl
jne 0x41edb0
mov esi, 0x45c490
lea eax, [ebp - 0x46c]
push eax
call fcn.0041aa90
add esp, 4
mov byte [ebp - 4], 0x1a
push esi
push ecx
push eax
push ecx
lea ecx, [ebp - 0x6c0]
push str.Executing_user:_t
push ecx
call fcn.0040de50
add esp, 0xc
push eax
call fcn.0040e870
add esp, 0xc
push eax
call fcn.0040de50
add esp, 8
mov byte [ebp - 4], 9
mov esi, 8
cmp dword [ebp - 0x458], esi
jb 0x41ee0d
mov edx, dword [ebp - 0x46c]
push edx
call fcn.00431dda
add esp, 4
xor eax, eax
mov word [ebp - 0x46c], ax
mov eax, dword [edi + 4]
push eax
mov edx, 6
mov ecx, 0x45dbf8
mov dword [ebp - 0x458], 7
mov dword [ebp - 0x45c], ebx
call fcn.0041a0b0
add esp, 4
lea ecx, [ebp - 0x46c]
push ecx
lea edx, [ebp - 0x6d0]
push edx
call fcn.004054f0
mov byte [ebp - 4], 0x1b
mov edx, dword [eax + 0x10]
mov ecx, dword [edi + 4]
cmp edx, ebx
je 0x41ee66
cmp dword [eax + 0x14], esi
jb 0x41ee68
mov eax, dword [eax]
jmp 0x41ee68
xor eax, eax
push ecx
add edx, edx
mov ecx, eax
call fcn.0041a0b0
add esp, 4
mov byte [ebp - 4], 9
cmp dword [ebp - 0x458], esi
jb 0x41ee90
mov eax, dword [ebp - 0x46c]
push eax
call fcn.00431dda
add esp, 4
mov eax, dword [edi + 4]
xor ecx, ecx
mov esi, 7
mov word [ebp - 0x46c], cx
push eax
lea edx, [esi - 3]
mov ecx, 0x45dc00
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
call fcn.0041a0b0
lea edx, [ebp - 0x558]
add esp, 4
push edx
call fcn.0041a470
add esp, 4
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x520]
push eax
call fcn.00418da0
add esp, 4
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x53c]
push ecx
call fcn.0041a780
add esp, 4
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x49c], esi
xor edx, edx
push ebx
mov eax, 0x45c490
lea esi, [ebp - 0x4b0]
mov dword [ebp - 0x4a0], ebx
mov word [ebp - 0x4b0], dx
call fcn.0040eba0
mov byte [ebp - 4], 0x1f
mov eax, esi
lea ecx, [ebp - 0x6b8]
call fcn.004257b0
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x49c], 8
jb 0x41ef4a
mov eax, dword [ebp - 0x4b0]
push eax
call fcn.00431dda
add esp, 4
lea edx, [ebp - 0x53c]
push edx
xor ecx, ecx
push ecx
lea eax, [ebp - 0x6c0]
push str.Workstation_name:_t
push eax
mov dword [ebp - 0x49c], 7
mov dword [ebp - 0x4a0], ebx
mov word [ebp - 0x4b0], cx
call fcn.0040de50
add esp, 0xc
push eax
call fcn.0040e870
mov eax, dword [edi + 4]
push eax
mov edx, 6
mov ecx, 0x45dbf8
call fcn.0041a0b0
add esp, 0xc
lea ecx, [ebp - 0x46c]
push ecx
lea edx, [ebp - 0x6d0]
push edx
call fcn.004054f0
mov byte [ebp - 4], 0x20
mov edx, dword [eax + 0x10]
mov ecx, dword [edi + 4]
cmp edx, ebx
je 0x41efc6
cmp dword [eax + 0x14], 8
jb 0x41efc8
mov eax, dword [eax]
jmp 0x41efc8
xor eax, eax
push ecx
add edx, edx
mov ecx, eax
call fcn.0041a0b0
add esp, 4
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x458], 8
jb 0x41eff1
mov eax, dword [ebp - 0x46c]
push eax
call fcn.00431dda
add esp, 4
mov eax, dword [edi + 4]
xor ecx, ecx
mov esi, 7
mov word [ebp - 0x46c], cx
push eax
lea edx, [esi - 3]
mov ecx, 0x45dc00
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
call fcn.0041a0b0
add esp, 4
mov dword [ebp - 0x49c], esi
xor edx, edx
push ebx
mov eax, 0x45c490
lea esi, [ebp - 0x4b0]
mov dword [ebp - 0x4a0], ebx
mov word [ebp - 0x4b0], dx
call fcn.0040eba0
mov byte [ebp - 4], 0x21
mov eax, esi
lea ecx, [ebp - 0x6b8]
call fcn.004257b0
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x49c], 8
jb 0x41f072
mov eax, dword [ebp - 0x4b0]
push eax
call fcn.00431dda
add esp, 4
lea edx, [ebp - 0x6c0]
xor ecx, ecx
push str.Windows_directory:_t
mov esi, 7
push edx
mov dword [ebp - 0x49c], esi
mov dword [ebp - 0x4a0], ebx
mov word [ebp - 0x4b0], cx
call fcn.0040de50
lea ecx, [ebp - 0x558]
push ecx
push eax
call fcn.0040e870
mov eax, dword [edi + 4]
push eax
lea edx, [esi - 1]
mov ecx, 0x45dbf8
call fcn.0041a0b0
add esp, 0x14
lea edx, [ebp - 0x46c]
push edx
lea eax, [ebp - 0x6d0]
push eax
call fcn.004054f0
mov byte [ebp - 4], 0x22
mov edx, dword [eax + 0x10]
mov ecx, dword [edi + 4]
cmp edx, ebx
je 0x41f0e9
cmp dword [eax + 0x14], 8
jb 0x41f0eb
mov eax, dword [eax]
jmp 0x41f0eb
xor eax, eax
push ecx
add edx, edx
mov ecx, eax
call fcn.0041a0b0
add esp, 4
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x458], 8
jb 0x41f114
mov ecx, dword [ebp - 0x46c]
push ecx
call fcn.00431dda
add esp, 4
mov eax, dword [edi + 4]
xor edx, edx
mov word [ebp - 0x46c], dx
push eax
mov edx, 4
mov ecx, 0x45dc00
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
call fcn.0041a0b0
add esp, 4
mov eax, 0x45c490
lea ecx, [ebp - 0x46c]
call fcn.0040ec90
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x46c]
lea ecx, [ebp - 0x6b8]
call fcn.004257b0
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x458], 8
jb 0x41f180
mov eax, dword [ebp - 0x46c]
push eax
call fcn.00431dda
add esp, 4
lea edx, [ebp - 0x6c0]
xor ecx, ecx
push str.Temp_directory:_t
push edx
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
mov word [ebp - 0x46c], cx
call fcn.0040de50
lea ecx, [ebp - 0x520]
push ecx
push eax
call fcn.0040e870
mov eax, dword [edi + 4]
push eax
mov edx, 6
mov ecx, 0x45dbf8
call fcn.0041a0b0
add esp, 0x14
lea edx, [ebp - 0x46c]
push edx
lea eax, [ebp - 0x6d0]
push eax
call fcn.004054f0
mov byte [ebp - 4], 0x24
mov edx, dword [eax + 0x10]
mov ecx, dword [edi + 4]
cmp edx, ebx
je 0x41f1f4
cmp dword [eax + 0x14], 8
jb 0x41f1f6
mov eax, dword [eax]
jmp 0x41f1f6
xor eax, eax
push ecx
add edx, edx
mov ecx, eax
call fcn.0041a0b0
add esp, 4
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x458], 8
jb 0x41f21f
mov ecx, dword [ebp - 0x46c]
push ecx
call fcn.00431dda
add esp, 4
mov eax, dword [edi + 4]
xor edx, edx
mov word [ebp - 0x46c], dx
push eax
mov edx, 4
mov ecx, 0x45dc00
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
call fcn.0041a0b0
add esp, 4
mov eax, 0x45c490
lea ecx, [ebp - 0x46c]
call fcn.0040ec90
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x46c]
lea ecx, [ebp - 0x6b8]
call fcn.004257b0
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x458], 8
jb 0x41f28b
mov eax, dword [ebp - 0x46c]
push eax
call fcn.00431dda
add esp, 4
lea edx, [ebp - 0x46c]
xor ecx, ecx
push edx
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
mov word [ebp - 0x46c], cx
call fcn.00418fa0
add esp, 4
mov dword [ebp - 0x618], eax
mov byte [ebp - 4], 0x26
lea eax, [ebp - 0x6c0]
push str.Working_directory:_t
push eax
call fcn.0040de50
mov ecx, dword [ebp - 0x618]
push ecx
push eax
call fcn.0040e870
add esp, 0x10
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x458], 8
jb 0x41f2f6
mov edx, dword [ebp - 0x46c]
push edx
call fcn.00431dda
add esp, 4
xor eax, eax
mov word [ebp - 0x46c], ax
mov eax, dword [edi + 4]
push eax
mov edx, 6
mov ecx, 0x45dbf8
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
call fcn.0041a0b0
add esp, 4
lea ecx, [ebp - 0x46c]
push ecx
lea edx, [ebp - 0x6d0]
push edx
call fcn.004054f0
mov byte [ebp - 4], 0x28
mov edx, dword [eax + 0x10]
mov ecx, dword [edi + 4]
cmp edx, ebx
je 0x41f34c
cmp dword [eax + 0x14], 8
jb 0x41f34e
mov eax, dword [eax]
jmp 0x41f34e
xor eax, eax
push ecx
add edx, edx
mov ecx, eax
call fcn.0041a0b0
add esp, 4
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x458], 8
jb 0x41f377
mov eax, dword [ebp - 0x46c]
push eax
call fcn.00431dda
add esp, 4
mov eax, dword [edi + 4]
xor ecx, ecx
mov word [ebp - 0x46c], cx
lea edx, [ecx + 4]
push eax
mov ecx, 0x45dc00
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
mov edx, 6
mov ecx, 0x45dbf8
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
xor edx, edx
mov ecx, 0x45c490
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
mov edx, 4
mov ecx, 0x45dc00
call fcn.0041a0b0
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea ecx, [ebp - 0x504]
call fcn.0040ec90
mov byte [ebp - 4], 0x29
cmp dword [ebp - 0x4f0], 8
mov esi, dword [ebp - 0x504]
jae 0x41f409
lea esi, [ebp - 0x504]
mov edx, dword [ebp - 0x4f4]
lea eax, [esi + edx*2]
mov dword [ebp - 0x618], eax
cmp esi, eax
ja 0x41f45e
lea esp, [esp]
push 3
push 0x45dd50
push esi
call fcn.004343e6
add esp, 0xc
add esi, 2
test eax, eax
jne 0x41f456
cmp word [esi], bx
je 0x41f456
lea esp, [esp]
cmp word [esi], 0x20
je 0x41f456
mov eax, 0x20
mov word [esi], ax
add esi, 2
cmp word [esi], bx
jne 0x41f440
cmp esi, dword [ebp - 0x618]
jbe 0x41f420
mov eax, 0x45c490
lea ecx, [ebp - 0x46c]
call fcn.0040ec90
mov byte [ebp - 4], 0x2a
lea eax, [ebp - 0x46c]
lea ecx, [ebp - 0x6b8]
call fcn.004257b0
mov byte [ebp - 4], 0x29
cmp dword [ebp - 0x458], 8
jb 0x41f49f
mov ecx, dword [ebp - 0x46c]
push ecx
call fcn.00431dda
add esp, 4
push 0x45dd58
push ecx
lea eax, [ebp - 0x504]
push eax
push ecx
lea ecx, [ebp - 0x6c0]
xor edx, edx
push 0x45dd5c
mov esi, 7
push ecx
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
mov word [ebp - 0x46c], dx
call fcn.0040de50
add esp, 0xc
push eax
call fcn.0040e870
add esp, 0xc
push eax
call fcn.0040de50
mov eax, dword [edi + 4]
push eax
lea edx, [esi - 1]
mov ecx, 0x45dbf8
call fcn.0041a0b0
add esp, 0xc
lea edx, [ebp - 0x46c]
push edx
lea eax, [ebp - 0x6d0]
push eax
call fcn.004054f0
mov byte [ebp - 4], 0x2b
mov edx, dword [eax + 0x10]
mov ecx, dword [edi + 4]
cmp edx, ebx
je 0x41f529
cmp dword [eax + 0x14], 8
jb 0x41f52b
mov eax, dword [eax]
jmp 0x41f52b
xor eax, eax
push ecx
add edx, edx
mov ecx, eax
call fcn.0041a0b0
add esp, 4
mov byte [ebp - 4], 0x29
cmp dword [ebp - 0x458], 8
jb 0x41f554
mov ecx, dword [ebp - 0x46c]
push ecx
call fcn.00431dda
add esp, 4
mov eax, dword [edi + 4]
xor edx, edx
mov word [ebp - 0x46c], dx
push eax
mov edx, 4
mov ecx, 0x45dc00
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
call fcn.0041a0b0
add esp, 4
mov eax, 0x45c490
lea ecx, [ebp - 0x46c]
call fcn.0040ec90
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x46c]
lea ecx, [ebp - 0x6b8]
call fcn.004257b0
mov byte [ebp - 4], 0x29
cmp dword [ebp - 0x458], 8
jb 0x41f5c0
mov eax, dword [ebp - 0x46c]
push eax
call fcn.00431dda
add esp, 4
lea edx, [ebp - 0x46c]
xor ecx, ecx
push edx
mov dword [ebp - 0x458], 7
mov dword [ebp - 0x45c], ebx
mov word [ebp - 0x46c], cx
call fcn.0041acb0
add esp, 4
mov dword [ebp - 0x618], eax
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0x6c0]
push str.Executable:_t_t
push eax
call fcn.0040de50
mov ecx, dword [ebp - 0x618]
mov esi, eax
push ecx
push esi
call fcn.0040e870
push 0x45dd58
push esi
call fcn.0040de50
add esp, 0x18
mov byte [ebp - 4], 0x29
cmp dword [ebp - 0x458], 8
jb 0x41f63c
mov edx, dword [ebp - 0x46c]
push edx
call fcn.00431dda
add esp, 4
xor eax, eax
mov word [ebp - 0x46c], ax
mov eax, dword [edi + 4]
mov esi, 7
push eax
lea edx, [esi - 1]
mov ecx, 0x45dbf8
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
call fcn.0041a0b0
add esp, 4
lea ecx, [ebp - 0x46c]
push ecx
lea edx, [ebp - 0x6d0]
push edx
call fcn.004054f0
mov byte [ebp - 4], 0x2f
mov edx, dword [eax + 0x10]
mov ecx, dword [edi + 4]
cmp edx, ebx
je 0x41f695
cmp dword [eax + 0x14], 8
jb 0x41f697
mov eax, dword [eax]
jmp 0x41f697
xor eax, eax
push ecx
add edx, edx
mov ecx, eax
call fcn.0041a0b0
add esp, 4
mov byte [ebp - 4], 0x29
cmp dword [ebp - 0x458], 8
jb 0x41f6c0
mov eax, dword [ebp - 0x46c]
push eax
call fcn.00431dda
add esp, 4
mov eax, dword [edi + 4]
xor ecx, ecx
mov word [ebp - 0x46c], cx
lea edx, [ecx + 4]
push eax
mov ecx, 0x45dc00
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
call fcn.0041a0b0
lea edx, [ebp - 0x46c]
add esp, 4
push edx
xor ecx, ecx
call fcn.0041acb0
add esp, 4
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x5a0]
push ecx
push eax
call fcn.00417570
mov byte [ebp - 4], 0x32
cmp dword [ebp - 0x458], 8
jb 0x41f727
mov edx, dword [ebp - 0x46c]
push edx
call fcn.00431dda
add esp, 4
xor eax, eax
mov word [ebp - 0x46c], ax
mov eax, 0x45c490
lea ecx, [ebp - 0x46c]
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
call fcn.0040ec90
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x46c]
lea ecx, [ebp - 0x6b8]
call fcn.004257b0
mov byte [ebp - 4], 0x32
cmp dword [ebp - 0x458], 8
jb 0x41f77d
mov ecx, dword [ebp - 0x46c]
push ecx
call fcn.00431dda
add esp, 4
xor edx, edx
lea ecx, [ebp - 0x5a0]
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
mov word [ebp - 0x46c], dx
call fcn.0041e1a0
push eax
push ecx
lea eax, [ebp - 0x6c0]
push str.Version:_t_t
push eax
call fcn.0040de50
add esp, 0xc
push eax
call fcn.0040de50
mov eax, dword [edi + 4]
push eax
mov edx, 6
mov ecx, 0x45dbf8
call fcn.0041a0b0
add esp, 0xc
lea ecx, [ebp - 0x46c]
push ecx
lea edx, [ebp - 0x6d0]
push edx
call fcn.004054f0
mov byte [ebp - 4], 0x35
mov edx, dword [eax + 0x10]
mov ecx, dword [edi + 4]
cmp edx, ebx
je 0x41f7fa
cmp dword [eax + 0x14], 8
jb 0x41f7fc
mov eax, dword [eax]
jmp 0x41f7fc
xor eax, eax
push ecx
add edx, edx
mov ecx, eax
call fcn.0041a0b0
add esp, 4
mov byte [ebp - 4], 0x32
cmp dword [ebp - 0x458], 8
jb 0x41f825
mov eax, dword [ebp - 0x46c]
push eax
call fcn.00431dda
add esp, 4
mov eax, dword [edi + 4]
xor ecx, ecx
mov word [ebp - 0x46c], cx
lea edx, [ecx + 4]
push eax
mov ecx, 0x45dc00
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
call fcn.0041a0b0
add esp, 4
mov eax, 0x45c490
lea ecx, [ebp - 0x46c]
call fcn.0040ec90
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0x46c]
lea ecx, [ebp - 0x6b8]
call fcn.004257b0
mov byte [ebp - 4], 0x32
cmp dword [ebp - 0x458], 8
jb 0x41f88f
mov edx, dword [ebp - 0x46c]
push edx
call fcn.00431dda
add esp, 4
xor eax, eax
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
mov word [ebp - 0x46c], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push ecx
lea ecx, [ebp - 0x6c0]
push str.ProcessId:_t_t
push ecx
call fcn.0040de50
add esp, 0xc
push eax
call fcn.004050d0
mov eax, dword [edi + 4]
push eax
mov edx, 6
mov ecx, 0x45dbf8
call fcn.0041a0b0
add esp, 4
lea edx, [ebp - 0x46c]
push edx
lea eax, [ebp - 0x6d0]
push eax
call fcn.004054f0
mov byte [ebp - 4], 0x37
mov edx, dword [eax + 0x10]
mov ecx, dword [edi + 4]
cmp edx, ebx
je 0x41f907
cmp dword [eax + 0x14], 8
jb 0x41f909
mov eax, dword [eax]
jmp 0x41f909
xor eax, eax
push ecx
add edx, edx
mov ecx, eax
call fcn.0041a0b0
add esp, 4
mov byte [ebp - 4], 0x32
cmp dword [ebp - 0x458], 8
jb 0x41f932
mov ecx, dword [ebp - 0x46c]
push ecx
call fcn.00431dda
add esp, 4
mov eax, dword [edi + 4]
xor edx, edx
mov word [ebp - 0x46c], dx
push eax
mov edx, 4
mov ecx, 0x45dc00
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
call fcn.0041a0b0
add esp, 4
mov eax, 0x45c490
lea ecx, [ebp - 0x46c]
call fcn.0040ec90
mov byte [ebp - 4], 0x38
lea eax, [ebp - 0x46c]
lea ecx, [ebp - 0x6b8]
call fcn.004257b0
mov byte [ebp - 4], 0x32
cmp dword [ebp - 0x458], 8
jb 0x41f99e
mov eax, dword [ebp - 0x46c]
push eax
call fcn.00431dda
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
mov word [ebp - 0x46c], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push ecx
lea edx, [ebp - 0x6c0]
push str.ThreadId:_t_t
push edx
call fcn.0040de50
add esp, 0xc
push eax
call fcn.004050d0
mov eax, dword [edi + 4]
push eax
mov edx, 6
mov ecx, 0x45dbf8
call fcn.0041a0b0
add esp, 4
lea eax, [ebp - 0x46c]
push eax
lea ecx, [ebp - 0x6d0]
push ecx
call fcn.004054f0
mov byte [ebp - 4], 0x39
mov edx, dword [eax + 0x10]
mov ecx, dword [edi + 4]
cmp edx, ebx
je 0x41fa16
cmp dword [eax + 0x14], 8
jb 0x41fa18
mov eax, dword [eax]
jmp 0x41fa18
xor eax, eax
push ecx
add edx, edx
mov ecx, eax
call fcn.0041a0b0
add esp, 4
mov byte [ebp - 4], 0x32
cmp dword [ebp - 0x458], 8
jb 0x41fa41
mov edx, dword [ebp - 0x46c]
push edx
call fcn.00431dda
add esp, 4
xor eax, eax
mov word [ebp - 0x46c], ax
mov eax, dword [edi + 4]
push eax
mov edx, 4
mov ecx, 0x45dc00
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
call fcn.0041a0b0
add esp, 4
push 0x3c
lea ecx, [ebp - 0x604]
push ebx
push ecx
call fcn.004397f0
add esp, 0xc
mov eax, 0x45c490
lea ecx, [ebp - 0x46c]
mov dword [ebp - 0x608], 0x40
call fcn.0040ec90
mov byte [ebp - 4], 0x3a
lea eax, [ebp - 0x46c]
lea ecx, [ebp - 0x6b8]
call fcn.004257b0
mov byte [ebp - 4], 0x32
cmp dword [ebp - 0x458], 8
jb 0x41fac9
mov edx, dword [ebp - 0x46c]
push edx
call fcn.00431dda
add esp, 4
lea ecx, [ebp - 0x608]
xor eax, eax
push ecx
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
mov word [ebp - 0x46c], ax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
test eax, eax
je 0x41fbe5
mov eax, dword [ebp - 0x5fc]
mov edx, dword [ebp - 0x600]
push str._MB_free
push ecx
mov ecx, eax
mov dword [ebp - 0x620], edx
and eax, 0x7fffffff
mov dword [ebp - 0x61c], eax
fild qword [ebp - 0x620]
and ecx, 0x80000000
mov dword [ebp - 0x61c], ecx
mov dword [ebp - 0x620], ebx
fild qword [ebp - 0x620]
sub esp, 8
fchs
faddp st(1)
fmul qword [0x45fd08]
fstp qword [esp]
call fcn.00433ff0
add esp, 8
call fcn.0044ef20
push eax
mov eax, dword [ebp - 0x5f4]
push ecx
push str._MB_of
push ecx
mov ecx, dword [ebp - 0x5f8]
mov dword [ebp - 0x620], ecx
mov ecx, eax
and eax, 0x7fffffff
mov dword [ebp - 0x61c], eax
fild qword [ebp - 0x620]
and ecx, 0x80000000
mov dword [ebp - 0x61c], ecx
mov dword [ebp - 0x620], ebx
fild qword [ebp - 0x620]
sub esp, 8
fchs
faddp st(1)
fmul qword [0x45fd08]
fstp qword [esp]
call fcn.00433ff0
add esp, 8
call fcn.0044ef20
push eax
push ecx
lea edx, [ebp - 0x6c0]
push str.Physical_memory:_t
push edx
call fcn.0040de50
add esp, 0xc
push eax
call fcn.004111a0
add esp, 4
push eax
call fcn.0040de50
add esp, 0xc
push eax
call fcn.004111a0
jmp 0x41fc0d
push 0x45de30
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ecx
lea eax, [ebp - 0x6c0]
push 0x45de34
push eax
call fcn.0040de50
add esp, 0xc
push eax
call fcn.004050d0
add esp, 4
push eax
call fcn.0040de50
mov eax, dword [edi + 4]
add esp, 8
push eax
mov edx, 6
mov ecx, 0x45dbf8
call fcn.0041a0b0
add esp, 4
lea ecx, [ebp - 0x46c]
push ecx
lea edx, [ebp - 0x6d0]
push edx
call fcn.004054f0
mov byte [ebp - 4], 0x3b
mov edx, dword [eax + 0x10]
mov ecx, dword [edi + 4]
cmp edx, ebx
je 0x41fc5a
cmp dword [eax + 0x14], 8
jb 0x41fc5c
mov eax, dword [eax]
jmp 0x41fc5c
xor eax, eax
push ecx
add edx, edx
mov ecx, eax
call fcn.0041a0b0
add esp, 4
mov byte [ebp - 4], 0x32
cmp dword [ebp - 0x458], 8
jb 0x41fc85
mov eax, dword [ebp - 0x46c]
push eax
call fcn.00431dda
add esp, 4
mov eax, dword [edi + 4]
xor ecx, ecx
mov word [ebp - 0x46c], cx
lea edx, [ecx + 4]
push eax
mov ecx, 0x45dc00
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x45c], ebx
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
mov edx, 6
mov ecx, 0x45dbf8
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
xor edx, edx
mov ecx, 0x45c490
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
mov edx, 4
mov ecx, 0x45dc00
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
mov edx, 6
mov ecx, 0x45dbf8
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
mov edx, 0x38
mov ecx, str.System_libraries_information
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
mov edx, 4
mov ecx, 0x45dc00
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
mov edx, 6
mov ecx, 0x45dbf8
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
mov edx, 0x38
mov ecx, str.____________________________
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
mov edx, 4
mov ecx, 0x45dc00
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
mov edx, 6
mov ecx, 0x45dbf8
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
xor edx, edx
mov ecx, 0x45c490
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
mov edx, 4
mov ecx, 0x45dc00
call fcn.0041a0b0
movq xmm0, qword [str.atl.dll]
add esp, 4
push 0x30
lea edx, [ebp - 0x340]
movq qword [ebp - 0x350], xmm0
movq xmm0, qword [0x45dee8]
push ebx
push edx
movq qword [ebp - 0x348], xmm0
call fcn.004397f0
movq xmm0, qword [str.comctl32.dll]
movzx eax, word [0x45dae0]
mov ecx, dword [0x45df00]
movq qword [ebp - 0x310], xmm0
movq xmm0, qword [0x45dad0]
movq qword [ebp - 0x308], xmm0
movq xmm0, qword [0x45dad8]
add esp, 0xc
movq qword [ebp - 0x300], xmm0
pxor xmm0, xmm0
movq qword [ebp - 0x2f6], xmm0
movq qword [ebp - 0x2ee], xmm0
movq qword [ebp - 0x2e6], xmm0
movq qword [ebp - 0x2de], xmm0
movq xmm0, qword [str.mfc42.dll]
push 0x2c
lea edx, [ebp - 0x2bc]
movq qword [ebp - 0x2d0], xmm0
movq xmm0, qword [0x45def8]
push ebx
push edx
mov word [ebp - 0x2f8], ax
mov dword [ebp - 0x2d6], ebx
mov word [ebp - 0x2d2], bx
movq qword [ebp - 0x2c8], xmm0
mov dword [ebp - 0x2c0], ecx
call fcn.004397f0
movq xmm0, qword [str.msvcrt.dll]
movzx ecx, word [0x45df18]
mov eax, dword [0x45df14]
add esp, 0xc
push 0x2a
lea edx, [ebp - 0x27a]
movq qword [ebp - 0x290], xmm0
movq xmm0, qword [0x45df0c]
push ebx
push edx
movq qword [ebp - 0x288], xmm0
mov dword [ebp - 0x280], eax
mov word [ebp - 0x27c], cx
call fcn.004397f0
movq xmm0, qword [str.oleaut32.dll]
movzx eax, word [0x45df34]
movq qword [ebp - 0x250], xmm0
movq xmm0, qword [0x45df24]
movq qword [ebp - 0x248], xmm0
movq xmm0, qword [0x45df2c]
movq qword [ebp - 0x240], xmm0
pxor xmm0, xmm0
movq qword [ebp - 0x236], xmm0
movq qword [ebp - 0x22e], xmm0
movq qword [ebp - 0x226], xmm0
movq qword [ebp - 0x21e], xmm0
movq xmm0, qword [str.shell32.dll]
movq qword [ebp - 0x210], xmm0
movq xmm0, qword [0x45daec]
movq qword [ebp - 0x208], xmm0
movq xmm0, qword [0x45daf4]
movq qword [ebp - 0x200], xmm0
pxor xmm0, xmm0
movq qword [ebp - 0x1f8], xmm0
movq qword [ebp - 0x1f0], xmm0
movq qword [ebp - 0x1e8], xmm0
movq qword [ebp - 0x1e0], xmm0
movq qword [ebp - 0x1d8], xmm0
movq xmm0, qword [str.shlwapi.dll]
add esp, 0xc
mov word [ebp - 0x238], ax
mov dword [ebp - 0x216], ebx
mov word [ebp - 0x212], bx
movq qword [ebp - 0x1d0], xmm0
movq xmm0, qword [0x45df40]
movq qword [ebp - 0x1c8], xmm0
movq xmm0, qword [0x45df48]
movq qword [ebp - 0x1c0], xmm0
pxor xmm0, xmm0
movq qword [ebp - 0x1b8], xmm0
movq qword [ebp - 0x1b0], xmm0
movq qword [ebp - 0x1a8], xmm0
movq qword [ebp - 0x1a0], xmm0
movq qword [ebp - 0x198], xmm0
movq xmm0, qword [str.msi.dll]
push 0x30
lea ecx, [ebp - 0x180]
movq qword [ebp - 0x190], xmm0
movq xmm0, qword [0x45df58]
push ebx
push ecx
movq qword [ebp - 0x188], xmm0
call fcn.004397f0
movq xmm0, qword [str.NwSapSetupEngine.dll]
movq qword [ebp - 0x150], xmm0
movq xmm0, qword [0x45df68]
movq qword [ebp - 0x148], xmm0
movq xmm0, qword [0x45df70]
movq qword [ebp - 0x140], xmm0
movq xmm0, qword [0x45df78]
movq qword [ebp - 0x138], xmm0
movq xmm0, qword [0x45df80]
movq qword [ebp - 0x130], xmm0
pxor xmm0, xmm0
movq qword [ebp - 0x126], xmm0
movq qword [ebp - 0x11e], xmm0
movq xmm0, qword [str.NwSapSetupATLCommon.dll]
movq qword [ebp - 0x110], xmm0
movq xmm0, qword [0x45df94]
movzx edx, word [0x45df88]
movq qword [ebp - 0x108], xmm0
movq xmm0, qword [0x45df9c]
movq qword [ebp - 0x100], xmm0
movq xmm0, qword [0x45dfa4]
movzx eax, word [0x45dfdc]
movq qword [ebp - 0xf8], xmm0
movq xmm0, qword [0x45dfac]
mov ecx, dword [0x45db24]
movq qword [ebp - 0xf0], xmm0
movq xmm0, qword [0x45dfb4]
movq qword [ebp - 0xe8], xmm0
pxor xmm0, xmm0
movq qword [ebp - 0xe0], xmm0
movq qword [ebp - 0xd8], xmm0
movq xmm0, qword [str.NwSapSetupUi.dll]
movq qword [ebp - 0xd0], xmm0
movq xmm0, qword [0x45dfc4]
movq qword [ebp - 0xc8], xmm0
movq xmm0, qword [0x45dfcc]
movq qword [ebp - 0xc0], xmm0
movq xmm0, qword [0x45dfd4]
movq qword [ebp - 0xb8], xmm0
pxor xmm0, xmm0
movq qword [ebp - 0xae], xmm0
movq qword [ebp - 0xa6], xmm0
movq qword [ebp - 0x9e], xmm0
movq xmm0, qword [str.NwSapFeiUt.dll]
movq qword [ebp - 0x90], xmm0
movq xmm0, qword [0x45db14]
mov word [ebp - 0x128], dx
movzx edx, word [0x45db28]
movq qword [ebp - 0x88], xmm0
movq xmm0, qword [0x45db1c]
movq qword [ebp - 0x80], xmm0
pxor xmm0, xmm0
add esp, 0xc
mov dword [ebp - 0x116], ebx
mov word [ebp - 0x112], bx
mov word [ebp - 0xb0], ax
mov dword [ebp - 0x96], ebx
mov word [ebp - 0x92], bx
mov dword [ebp - 0x78], ecx
mov word [ebp - 0x74], dx
movq qword [ebp - 0x72], xmm0
movq qword [ebp - 0x6a], xmm0
movzx ecx, word [0x45dffc]
mov eax, dword [0x45dff8]
movq qword [ebp - 0x62], xmm0
movq qword [ebp - 0x5a], xmm0
movq xmm0, qword [str.NwSapFeiLg.dll]
movq qword [ebp - 0x50], xmm0
movq xmm0, qword [0x45dfe8]
movq qword [ebp - 0x48], xmm0
movq xmm0, qword [0x45dff0]
movq qword [ebp - 0x40], xmm0
pxor xmm0, xmm0
mov word [ebp - 0x52], bx
mov dword [ebp - 0x38], eax
mov word [ebp - 0x34], cx
movq qword [ebp - 0x32], xmm0
movq qword [ebp - 0x2a], xmm0
movq qword [ebp - 0x22], xmm0
movq qword [ebp - 0x1a], xmm0
mov word [ebp - 0x12], bx
mov dword [ebp - 0x60c], ebx
jmp 0x420260
mov esi, dword [ebp - 0x60c]
cmp esi, 8
jne 0x42035d
mov eax, dword [edi + 4]
push eax
lea edx, [esi - 2]
mov ecx, 0x45dbf8
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
xor edx, edx
mov ecx, 0x45c490
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
lea edx, [esi - 4]
mov ecx, 0x45dc00
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
lea edx, [esi - 2]
mov ecx, 0x45dbf8
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
lea edx, [esi + 0x36]
mov ecx, str.SAP_Setup_libraries_information
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
lea edx, [esi - 4]
mov ecx, 0x45dc00
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
lea edx, [esi - 2]
mov ecx, 0x45dbf8
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
lea edx, [esi + 0x36]
mov ecx, str._______________________________
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
lea edx, [esi - 4]
mov ecx, 0x45dc00
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
lea edx, [esi - 2]
mov ecx, 0x45dbf8
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
xor edx, edx
mov ecx, 0x45c490
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
lea edx, [esi - 4]
mov ecx, 0x45dc00
call fcn.0041a0b0
add esp, 4
shl esi, 6
lea eax, [ebp + esi - 0x350]
push eax
lea edx, [ebp - 0x488]
push edx
mov dword [ebp - 0x618], eax
call fcn.004156f0
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x57c]
push ecx
push eax
call fcn.00417570
mov byte [ebp - 4], 0x3e
cmp dword [ebp - 0x474], 8
jb 0x4203a7
mov edx, dword [ebp - 0x488]
push edx
call fcn.00431dda
add esp, 4
mov eax, 7
mov dword [ebp - 0x474], eax
xor ecx, ecx
mov dword [ebp - 0x458], eax
xor edx, edx
push ebx
mov eax, 0x45c490
lea esi, [ebp - 0x46c]
mov dword [ebp - 0x478], ebx
mov word [ebp - 0x488], cx
mov dword [ebp - 0x45c], ebx
mov word [ebp - 0x46c], dx
call fcn.0040eba0
mov byte [ebp - 4], 0x40
mov eax, esi
lea ecx, [ebp - 0x6b8]
call fcn.004257b0
mov byte [ebp - 4], 0x3e
cmp dword [ebp - 0x458], 8
jb 0x420414
mov eax, dword [ebp - 0x46c]
push eax
call fcn.00431dda
add esp, 4
push ebx
lea edx, [ebp - 0x4a8]
xor ecx, ecx
push 0x17
push edx
mov dword [ebp - 0x458], 7
mov dword [ebp - 0x45c], ebx
mov word [ebp - 0x46c], cx
call fcn.004309ca
mov edx, dword [eax + 0xc]
mov ecx, dword [ebp - 0x6c0]
mov ecx, dword [ecx + 4]
add esp, 0xc
push edx
mov edx, dword [eax + 8]
mov eax, dword [eax]
lea ecx, [ebp + ecx - 0x6c0]
push edx
push ecx
call eax
add esp, 0xc
push str.:
push ecx
mov ecx, dword [ebp - 0x618]
push ecx
lea edx, [ebp - 0x6c0]
push edx
call fcn.0040de50
add esp, 0xc
push eax
call fcn.0040de50
add esp, 8
lea ecx, [ebp - 0x57c]
mov esi, eax
call fcn.0041e1a0
push eax
push esi
call fcn.0040de50
mov eax, dword [edi + 4]
push eax
mov edx, 6
mov ecx, 0x45dbf8
call fcn.0041a0b0
add esp, 0xc
lea eax, [ebp - 0x4cc]
push eax
lea ecx, [ebp - 0x6d0]
push ecx
call fcn.004054f0
mov byte [ebp - 4], 0x41
mov edx, dword [eax + 0x10]
mov ecx, dword [edi + 4]
cmp edx, ebx
je 0x4204d9
cmp dword [eax + 0x14], 8
jb 0x4204db
mov eax, dword [eax]
jmp 0x4204db
xor eax, eax
push ecx
add edx, edx
mov ecx, eax
call fcn.0041a0b0
add esp, 4
mov byte [ebp - 4], 0x3e
cmp dword [ebp - 0x4b8], 8
jb 0x420504
mov edx, dword [ebp - 0x4cc]
push edx
call fcn.00431dda
add esp, 4
xor eax, eax
mov word [ebp - 0x4cc], ax
mov eax, dword [edi + 4]
mov esi, 7
push eax
lea edx, [esi - 3]
mov ecx, 0x45dc00
mov dword [ebp - 0x4b8], esi
mov dword [ebp - 0x4bc], ebx
call fcn.0041a0b0
add esp, 4
mov byte [ebp - 4], 0x32
cmp dword [ebp - 0x560], 8
jb 0x42054e
mov ecx, dword [ebp - 0x574]
push ecx
call fcn.00431dda
add esp, 4
mov eax, dword [ebp - 0x60c]
inc eax
xor edx, edx
mov dword [ebp - 0x560], esi
mov dword [ebp - 0x564], ebx
mov word [ebp - 0x574], dx
mov dword [ebp - 0x60c], eax
cmp eax, 0xc
jl 0x420260
mov eax, dword [edi + 4]
push eax
mov edx, 6
mov ecx, 0x45dbf8
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
xor edx, edx
mov ecx, 0x45c490
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
mov edx, 4
mov ecx, 0x45dc00
call fcn.0041a0b0
mov eax, dword [edi + 4]
add esp, 4
push eax
mov edx, 0xac
mov ecx, str._r_n_r_n_r_n
call fcn.0041a0b0
mov edi, dword [edi + 4]
add esp, 4
push edi
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov byte [ebp - 4], 0x29
mov esi, 8
cmp dword [ebp - 0x584], esi
jb 0x4205f8
mov eax, dword [ebp - 0x598]
push eax
call fcn.00431dda
add esp, 4
mov edi, 7
xor ecx, ecx
mov dword [ebp - 0x584], edi
mov dword [ebp - 0x588], ebx
mov word [ebp - 0x598], cx
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x4f0], esi
jb 0x42062d
mov edx, dword [ebp - 0x504]
push edx
call fcn.00431dda
add esp, 4
xor eax, eax
mov dword [ebp - 0x4f0], edi
mov dword [ebp - 0x4f4], ebx
mov word [ebp - 0x504], ax
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0x528], esi
jb 0x42065d
mov ecx, dword [ebp - 0x53c]
push ecx
call fcn.00431dda
add esp, 4
xor edx, edx
mov dword [ebp - 0x528], edi
mov dword [ebp - 0x52c], ebx
mov word [ebp - 0x53c], dx
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x50c], esi
jb 0x42068d
mov eax, dword [ebp - 0x520]
push eax
call fcn.00431dda
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x50c], edi
mov dword [ebp - 0x510], ebx
mov word [ebp - 0x520], cx
mov byte [ebp - 4], 9
cmp dword [ebp - 0x544], esi
jb 0x4206bd
mov edx, dword [ebp - 0x558]
push edx
call fcn.00431dda
add esp, 4
xor eax, eax
mov dword [ebp - 0x544], edi
mov dword [ebp - 0x548], ebx
mov word [ebp - 0x558], ax
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x670]
call fcn.0040db60
lea ecx, [ebp - 0x670]
mov dword [ebp - 0x618], ecx
mov dword [ebp - method.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.virtual_0], vtable.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.0
mov byte [ebp - 4], bl
mov edx, ecx
push edx
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.0042fd7b
add esp, 4
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x4d4], esi
jb 0x42072c
mov eax, dword [ebp - 0x4e8]
push eax
call fcn.00431dda
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x4d4], edi
mov dword [ebp - 0x4d8], ebx
mov word [ebp - 0x4e8], cx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00431de5
mov esp, ebp
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
xor edx, edx
push 0x1b
mov eax, str.WinAPI::writeFile___failed.
lea esi, [ebp - 0x4cc]
mov dword [ebp - 0x4b8], 7
mov dword [ebp - 0x4bc], ebx
mov word [ebp - 0x4cc], dx
call fcn.0040eba0
mov byte [ebp - 4], 0x16
xor eax, eax
push ebx
mov ecx, esi
mov word [ebp - 0x488], ax
push ecx
or eax, 0xffffffff
lea ecx, [ebp - 0x488]
mov dword [ebp - 0x48c], edi
mov dword [ebp - 0x474], 7
mov dword [ebp - 0x478], ebx
call fcn.00401a90
mov byte [ebp - 4], 0x16
push 0x462084
lea edx, [ebp - 0x48c]
push edx
call fcn.00436362
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
xor eax, eax
mov word [ebp - 0x4cc], ax
push 0x1b
mov eax, str.WinAPI::writeFile___failed.
lea esi, [ebp - 0x4cc]
mov dword [ebp - 0x4b8], 7
mov dword [ebp - 0x4bc], ebx
call fcn.0040eba0
mov byte [ebp - 4], 0x13
xor ecx, ecx
push ebx
mov edx, esi
mov word [ebp - 0x488], cx
push edx
or eax, 0xffffffff
lea ecx, [ebp - 0x488]
mov dword [ebp - 0x48c], edi
mov dword [ebp - 0x474], 7
mov dword [ebp - 0x478], ebx
call fcn.00401a90
mov byte [ebp - 4], 0x13
push 0x462084
lea eax, [ebp - 0x48c]
push eax
call fcn.00436362
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
xor ecx, ecx
push 0x1b
mov eax, str.WinAPI::writeFile___failed.
lea esi, [ebp - 0x4cc]
mov dword [ebp - 0x4b8], 7
mov dword [ebp - 0x4bc], ebx
mov word [ebp - 0x4cc], cx
call fcn.0040eba0
mov byte [ebp - 4], 0x10
push ebx
mov eax, esi
xor edx, edx
push eax
or eax, 0xffffffff
lea ecx, [ebp - 0x488]
mov dword [ebp - 0x48c], edi
mov dword [ebp - 0x474], 7
mov dword [ebp - 0x478], ebx
mov word [ebp - 0x488], dx
call fcn.00401a90
mov byte [ebp - 4], 0x10
push 0x462084
lea ecx, [ebp - 0x48c]
push ecx
call fcn.00436362
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
xor edx, edx
push 0x1b
mov eax, str.WinAPI::writeFile___failed.
lea esi, [ebp - 0x4cc]
mov dword [ebp - 0x4b8], 7
mov dword [ebp - 0x4bc], ebx
mov word [ebp - 0x4cc], dx
call fcn.0040eba0
mov byte [ebp - 4], 0xd
xor eax, eax
push ebx
mov ecx, esi
mov word [ebp - 0x488], ax
push ecx
or eax, 0xffffffff
lea ecx, [ebp - 0x488]
mov dword [ebp - 0x48c], edi
mov dword [ebp - 0x474], 7
mov dword [ebp - 0x478], ebx
call fcn.00401a90
mov byte [ebp - 4], 0xd
push 0x462084
lea edx, [ebp - 0x48c]
push edx
call fcn.00436362
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
xor eax, eax
mov word [ebp - 0x4cc], ax
push 0x1b
mov eax, str.WinAPI::writeFile___failed.
lea esi, [ebp - 0x4cc]
mov dword [ebp - 0x4b8], 7
mov dword [ebp - 0x4bc], ebx
call fcn.0040eba0
mov byte [ebp - 4], 0xa
xor ecx, ecx
push ebx
mov edx, esi
mov word [ebp - 0x488], cx
push edx
or eax, 0xffffffff
lea ecx, [ebp - 0x488]
mov dword [ebp - 0x48c], edi
mov dword [ebp - 0x474], 7
mov dword [ebp - 0x478], ebx
call fcn.00401a90
mov byte [ebp - 4], 0xa
push 0x462084
lea eax, [ebp - 0x48c]
push eax
call fcn.00436362
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
xor ecx, ecx
push 0x1b
mov eax, str.WinAPI::writeFile___failed.
lea esi, [ebp - 0x4cc]
mov dword [ebp - 0x4b8], 7
mov dword [ebp - 0x4bc], ebx
mov word [ebp - 0x4cc], cx
call fcn.0040eba0
mov byte [ebp - 4], 7
push ebx
mov eax, esi
xor edx, edx
push eax
or eax, 0xffffffff
lea ecx, [ebp - 0x488]
mov dword [ebp - 0x48c], edi
mov dword [ebp - 0x474], 7
mov dword [ebp - 0x478], ebx
mov word [ebp - 0x488], dx
call fcn.00401a90
mov byte [ebp - 4], 7
push 0x462084
lea ecx, [ebp - 0x48c]
push ecx
call fcn.00436362
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
xor edx, edx
push 0x1b
mov eax, str.WinAPI::writeFile___failed.
lea esi, [ebp - 0x4cc]
mov dword [ebp - 0x4b8], 7
mov dword [ebp - 0x4bc], ebx
mov word [ebp - 0x4cc], dx
call fcn.0040eba0
mov byte [ebp - 4], 5
xor eax, eax
push ebx
mov ecx, esi
mov word [ebp - 0x488], ax
push ecx
or eax, 0xffffffff
lea ecx, [ebp - 0x488]
mov dword [ebp - 0x48c], edi
mov dword [ebp - 0x474], 7
mov dword [ebp - 0x478], ebx
call fcn.00401a90
mov byte [ebp - 4], 5
push 0x462084
lea edx, [ebp - 0x48c]
push edx
call fcn.00436362
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
xor eax, eax
mov word [ebp - 0x4cc], ax
push 0x1b
mov eax, str.WinAPI::writeFile___failed.
lea esi, [ebp - 0x4cc]
mov dword [ebp - 0x4b8], 7
mov dword [ebp - 0x4bc], ebx
call fcn.0040eba0
mov byte [ebp - 4], 3
xor ecx, ecx
push ebx
mov edx, esi
mov word [ebp - 0x488], cx
push edx
or eax, 0xffffffff
lea ecx, [ebp - 0x488]
mov dword [ebp - 0x48c], edi
mov dword [ebp - 0x474], 7
mov dword [ebp - 0x478], ebx
call fcn.00401a90
mov byte [ebp - 4], 3
push 0x462084
lea eax, [ebp - 0x48c]
push eax
call fcn.00436362
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
xor ecx, ecx
push 0x1b
mov eax, str.WinAPI::writeFile___failed.
lea esi, [ebp - 0x4cc]
mov dword [ebp - 0x4b8], 7
mov dword [ebp - 0x4bc], ebx
mov word [ebp - 0x4cc], cx
call fcn.0040eba0
mov byte [ebp - 4], 1
push ebx
mov eax, esi
xor edx, edx
push eax
or eax, 0xffffffff
lea ecx, [ebp - 0x488]
mov dword [ebp - 0x48c], edi
mov dword [ebp - 0x474], 7
mov dword [ebp - 0x478], ebx
mov word [ebp - 0x488], dx
call fcn.00401a90
mov byte [ebp - 4], 1
push 0x462084
lea ecx, [ebp - 0x48c]
push ecx
call fcn.00436362
int3