Function at 0x455040
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4da7c1
mov eax, dword fs:[0]
push eax
sub esp, 0x244
mov eax, dword [0x50f52c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov dword [ebp - 0x1a4], edi
mov eax, dword [ebp + 8]
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x1d4], 1
mov esi, 7
mov dword [ebp - 0x34], esi
xor ebx, ebx
mov dword [ebp - 0x38], ebx
xor ecx, ecx
mov word [ebp - 0x48], cx
push 0xc
push str.SYSTEMACTION
lea ecx, [ebp - 0x4c]
call fcn.00401860
mov dword [ebp - 4], ebx
mov dword [ebp - 0x1ac], esi
mov dword [ebp - 0x1b0], ebx
xor edx, edx
mov word [ebp - 0x1c0], dx
push 0x24
push str.Checking_operating_system_version...
lea ecx, [ebp - 0x1c4]
call fcn.00401860
mov byte [ebp - 4], 1
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x1c4]
push ecx
call fcn.00419d40
mov byte [ebp - 4], bl
cmp dword [ebp - 0x1ac], 8
jb 0x455107
mov edx, dword [ebp - 0x1c0]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x1ac], esi
mov dword [ebp - 0x1b0], ebx
xor eax, eax
mov word [ebp - 0x1c0], ax
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x34], 8
jb 0x455135
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor edx, edx
mov word [ebp - 0x48], dx
lea eax, [ebp - 0x1f0]
push eax
sub esp, 0x1c
mov dword [ebp - 0x1a0], esp
mov ecx, esp
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
mov word [ecx + 4], dx
push esi
push str.Version
call fcn.00401860
mov dword [ebp - 4], 2
sub esp, 0x1c
mov dword [ebp - 0x1a8], esp
mov ecx, esp
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
xor eax, eax
mov word [ecx + 4], ax
push 0x15
push str.Win32_OperatingSystem
call fcn.00401860
mov byte [ebp - 4], 3
mov dword [ebp - 4], 0xffffffff
mov ecx, edi
call fcn.004528e0
cmp eax, ebx
je 0x455219
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor ecx, ecx
mov word [ebp - 0x48], cx
mov edx, dword [ebp - 0x1e8]
mov eax, edx
lea edi, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4551c0
sub eax, edi
sar eax, 1
push eax
push edx
lea ecx, [ebp - 0x4c]
call fcn.00401860
mov dword [ebp - 4], 4
lea edx, [ebp - 0x4c]
push edx
mov ecx, dword [ebp - 0x19c]
call fcn.00430560
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x34], 8
jb 0x455208
mov eax, dword [ebp - 0x48]
push eax
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor ecx, ecx
mov word [ebp - 0x48], cx
jmp 0x45549f
mov dword [ebp - 0x1ac], esi
mov dword [ebp - 0x1b0], ebx
xor edx, edx
mov word [ebp - 0x1c0], dx
push 0xc
push str.SYSTEMACTION
lea ecx, [ebp - 0x1c4]
call fcn.00401860
mov dword [ebp - 4], 5
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor eax, eax
mov word [ebp - 0x48], ax
push 0x27
push str.Failed_to_get_operating_system_version.
lea ecx, [ebp - 0x4c]
call fcn.00401860
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1c4]
push ecx
lea edx, [ebp - 0x4c]
push edx
call fcn.00419d40
mov byte [ebp - 4], 5
mov edi, 8
cmp dword [ebp - 0x34], edi
jb 0x455290
mov eax, dword [ebp - 0x48]
push eax
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor ecx, ecx
mov word [ebp - 0x48], cx
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x1ac], edi
jb 0x4552ba
mov edx, dword [ebp - 0x1c0]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x1ac], esi
mov dword [ebp - 0x1b0], ebx
xor eax, eax
mov word [ebp - 0x1c0], ax
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor ecx, ecx
mov word [ebp - 0x2c], cx
push 0xc
push str.SYSTEMACTION
lea ecx, [ebp - 0x30]
call fcn.00401860
mov dword [ebp - 4], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor edx, edx
mov word [ebp - 0x48], dx
push 0x24
push str.Use_alternate_method_to_get_version.
lea ecx, [ebp - 0x4c]
call fcn.00401860
mov byte [ebp - 4], 8
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x4c]
push ecx
call fcn.00419d40
mov byte [ebp - 4], 7
cmp dword [ebp - 0x34], edi
jb 0x45532e
mov edx, dword [ebp - 0x48]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor eax, eax
mov word [ebp - 0x48], ax
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x18], edi
jb 0x455352
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor edx, edx
mov word [ebp - 0x2c], dx
mov dword [ebp - 4], 9
wait
push 0x4e25d8
lea ecx, [ebp - 0x30]
call fcn.004019e0
mov byte [ebp - 4], 0xa
push 0x24
lea eax, [ebp - 0x30]
push eax
call fcn.00451cd0
push str._system32kernel32.dll
lea ecx, [ebp - 0x30]
call fcn.004019b0
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1a0], esp
lea edx, [ebp - 0x30]
push edx
call fcn.00401960
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x120]
call fcn.004326c0
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x120]
call fcn.0042e880
mov byte [ebp - 4], 0xd
push 0xffffffffffffffff
push 0x4e253c
lea ecx, [ebp - 0x4c]
call fcn.004516b0
push eax
push ebx
lea ecx, [ebp - 0x1c4]
push ecx
lea ecx, [ebp - 0x4c]
call fcn.00430a10
mov byte [ebp - 4], 0xe
push eax
mov ecx, dword [ebp - 0x19c]
call fcn.00430560
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1c4]
call fcn.00490320
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x4c]
call fcn.00490320
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x120]
call fcn.00403750
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x30]
call fcn.00490320
wait
mov dword [ebp - 4], 0xffffffff
jmp 0x45549f
mov esi, 7
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor ecx, ecx
mov word [ebp - 0x48], cx
push 0xc
push str.SYSTEMACTION
lea ecx, [ebp - 0x4c]
call fcn.00401860
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor edx, edx
mov word [ebp - 0x2c], dx
push 0x1f
push str.Checking_system_architecture...
lea ecx, [ebp - 0x30]
call fcn.00401860
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x30]
push ecx
call fcn.00419d40
mov byte [ebp - 4], 0x12
mov edi, 8
cmp dword [ebp - 0x18], edi
jb 0x45550c
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor eax, eax
mov word [ebp - 0x2c], ax
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x34], edi
jb 0x455530
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor edx, edx
mov word [ebp - 0x48], dx
mov ecx, dword [ebp - 0x1a4]
call fcn.00451a80
test eax, eax
mov edx, str.64_bit
jne 0x455555
mov edx, str.32_bit
mov eax, edx
lea edi, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x455560
sub eax, edi
sar eax, 1
push eax
push edx
mov ecx, dword [ebp - 0x19c]
add ecx, 0x16c
call fcn.00401860
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor eax, eax
mov word [ebp - 0x48], ax
push 0xc
push str.SYSTEMACTION
lea ecx, [ebp - 0x4c]
call fcn.00401860
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor ecx, ecx
mov word [ebp - 0x2c], cx
push 0x1e
push str.Checking_service_pack_level...
lea ecx, [ebp - 0x30]
call fcn.00401860
mov byte [ebp - 4], 0x15
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x30]
push eax
call fcn.00419d40
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x18], 8
jb 0x4555e6
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor edx, edx
mov word [ebp - 0x2c], dx
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x34], 8
jb 0x45560b
mov eax, dword [ebp - 0x48]
push eax
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor ecx, ecx
mov word [ebp - 0x48], cx
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x54], ebx
xor edx, edx
mov word [ebp - 0x64], dx
mov dword [ebp - 4], 0x16
lea eax, [ebp - 0x220]
push eax
sub esp, 0x1c
mov dword [ebp - 0x1a0], esp
mov ecx, esp
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
mov word [ecx + 4], dx
push 0x17
push str.ServicePackMajorVersion
call fcn.00401860
mov byte [ebp - 4], 0x17
sub esp, 0x1c
mov dword [ebp - 0x1a8], esp
mov ecx, esp
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
xor eax, eax
mov word [ecx + 4], ax
push 0x15
push str.Win32_OperatingSystem
call fcn.00401860
mov byte [ebp - 4], 0x18
mov byte [ebp - 4], 0x16
mov edi, dword [ebp - 0x1a4]
mov ecx, edi
call fcn.004528e0
cmp eax, ebx
je 0x455791
lea ecx, [ebp - 0x230]
push ecx
sub esp, 0x1c
mov dword [ebp - 0x1a0], esp
mov ecx, esp
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
xor edx, edx
mov word [ecx + 4], dx
push 0x17
push str.ServicePackMinorVersion
call fcn.00401860
mov byte [ebp - 4], 0x19
sub esp, 0x1c
mov dword [ebp - 0x1a8], esp
mov ecx, esp
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
xor eax, eax
mov word [ecx + 4], ax
push 0x15
push str.Win32_OperatingSystem
call fcn.00401860
mov byte [ebp - 4], 0x1a
mov byte [ebp - 4], 0x16
mov ecx, edi
call fcn.004528e0
cmp eax, ebx
je 0x455791
mov ecx, dword [ebp - 0x228]
fild dword [ebp - 0x228]
test ecx, ecx
jge 0x455714
fadd qword [0x4eb810]
fmul qword [0x4eb808]
mov edx, dword [ebp - 0x218]
fild dword [ebp - 0x218]
test edx, edx
jge 0x455730
fadd qword [0x4eb810]
faddp st(1)
fstp qword [ebp - 0x1dc]
lea eax, [ebp - 0x1dc]
push eax
lea ecx, [ebp - 0x30]
push ecx
call fcn.00453790
mov byte [ebp - 4], 0x1b
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x68]
call fcn.00401750
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x18], 8
jb 0x45576e
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor eax, eax
mov word [ebp - 0x2c], ax
lea ecx, [ebp - 0x68]
push ecx
mov ecx, dword [ebp - 0x19c]
add ecx, 0x18
call fcn.00430560
jmp 0x4559eb
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor edx, edx
mov word [ebp - 0x48], dx
push 0xc
push str.SYSTEMACTION
lea ecx, [ebp - 0x4c]
call fcn.00401860
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor eax, eax
mov word [ebp - 0x2c], ax
push 0x21
push str.Failed_to_get_service_pack_level.
lea ecx, [ebp - 0x30]
call fcn.00401860
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.00419d40
mov byte [ebp - 4], 0x1c
mov edi, 8
cmp dword [ebp - 0x18], edi
jb 0x4557f6
mov eax, dword [ebp - 0x2c]
push eax
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor ecx, ecx
mov word [ebp - 0x2c], cx
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x34], edi
jb 0x455817
mov edx, dword [ebp - 0x48]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor eax, eax
mov word [ebp - 0x48], ax
mov dword [ebp - 0x1ac], esi
mov dword [ebp - 0x1b0], ebx
xor ecx, ecx
mov word [ebp - 0x1c0], cx
push 0xc
push str.SYSTEMACTION
lea ecx, [ebp - 0x1c4]
call fcn.00401860
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor edx, edx
mov word [ebp - 0x2c], dx
push 0x2f
push str.Use_alternate_method_to_get_service_pack_level.
lea ecx, [ebp - 0x30]
call fcn.00401860
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x30]
push ecx
call fcn.00419d40
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x18], edi
jb 0x455892
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor eax, eax
mov word [ebp - 0x2c], ax
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x1ac], edi
jb 0x4558b9
mov ecx, dword [ebp - 0x1c0]
push ecx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x1ac], esi
mov dword [ebp - 0x1b0], ebx
xor edx, edx
mov word [ebp - 0x1c0], dx
mov byte [ebp - 4], 0x20
wait
mov dword [ebp - 0x198], 0x114
lea eax, [ebp - 0x198]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
lea eax, [ebp - 0x184]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4558f3
sub eax, edx
sar eax, 1
jne 0x455917
push 0x4e29e4
lea ecx, [ebp - 0x30]
call fcn.004019e0
mov byte [ebp - 4], 0x21
jmp 0x45596d
push ebx
push str._0_9_
lea ecx, [ebp - 0x1dc]
call fcn.004163c0
mov esi, eax
mov byte [ebp - 4], 0x22
lea edx, [ebp - 0x184]
push edx
lea ecx, [ebp - 0x4c]
call fcn.004019e0
mov byte [ebp - 4], 0x23
push ebx
push 0x4e25d8
push esi
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0041abb0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x4c]
call fcn.00490320
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x1dc]
call fcn.00436f10
lea ecx, [ebp - 0x30]
push ecx
mov ecx, dword [ebp - 0x19c]
add ecx, 0x18
call fcn.00430560
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x30]
call fcn.00490320
wait
mov dword [ebp - 4], 0x16
jmp 0x4559eb
mov esi, 7
lea edi, [esi + 1]
push str.SYSTEMACTION
lea ecx, [ebp - 0x4c]
call fcn.004019e0
mov byte [ebp - 4], 0x2a
push str.Checking_system_memory_availability...
lea ecx, [ebp - 0x30]
call fcn.004019e0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.00419d40
mov byte [ebp - 4], 0x2a
cmp dword [ebp - 0x18], edi
jb 0x455a37
mov eax, dword [ebp - 0x2c]
push eax
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor ecx, ecx
mov word [ebp - 0x2c], cx
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x34], edi
jb 0x455a58
mov edx, dword [ebp - 0x48]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor eax, eax
mov word [ebp - 0x48], ax
lea ecx, [ebp - 0x240]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1a0], esp
push str.FreePhysicalMemory
call fcn.004019e0
mov byte [ebp - 4], 0x2c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1a8], esp
push str.Win32_OperatingSystem
call fcn.004019e0
mov byte [ebp - 4], 0x2d
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x1a4]
call fcn.004528e0
cmp eax, ebx
je 0x455b56
lea edx, [ebp - 0x210]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1a0], esp
push str.TotalVisibleMemorySize
call fcn.004019e0
mov byte [ebp - 4], 0x2e
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1a8], esp
push str.Win32_OperatingSystem
call fcn.004019e0
mov byte [ebp - 4], 0x2f
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x1a4]
call fcn.004528e0
cmp eax, ebx
je 0x455b56
mov eax, dword [ebp - 0x19c]
add eax, 0xec
mov dword [ebp - 0x1d0], eax
lea ecx, [ebp - 0x238]
push ecx
call fcn.00453860
mov ecx, dword [ebp - 0x1d0]
mov dword [ecx], eax
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x19c]
add edx, 0xe4
mov dword [ebp - 0x1cc], edx
lea eax, [ebp - 0x208]
push eax
call fcn.00453860
mov ecx, dword [ebp - 0x1cc]
mov dword [ecx], eax
mov dword [ecx + 4], edx
jmp 0x455c68
push str.SYSTEMACTION
lea ecx, [ebp - 0x4c]
call fcn.004019e0
mov byte [ebp - 4], 0x30
push str.Failed_to_get_available_system_memory.
lea ecx, [ebp - 0x30]
call fcn.004019e0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.00419d40
mov byte [ebp - 4], 0x30
cmp dword [ebp - 0x18], edi
jb 0x455b9a
mov eax, dword [ebp - 0x2c]
push eax
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor ecx, ecx
mov word [ebp - 0x2c], cx
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x34], edi
jb 0x455bbb
mov edx, dword [ebp - 0x48]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor eax, eax
mov word [ebp - 0x48], ax
push str.SYSTEMACTION
lea ecx, [ebp - 0x4c]
call fcn.004019e0
mov byte [ebp - 4], 0x32
push str.Use_default_512MB_memory.
lea ecx, [ebp - 0x30]
call fcn.004019e0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.00419d40
mov byte [ebp - 4], 0x32
cmp dword [ebp - 0x18], edi
jb 0x455c0b
mov eax, dword [ebp - 0x2c]
push eax
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor ecx, ecx
mov word [ebp - 0x2c], cx
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x34], edi
jb 0x455c2c
mov edx, dword [ebp - 0x48]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor eax, eax
mov word [ebp - 0x48], ax
mov ecx, dword [ebp - 0x19c]
lea eax, [ecx + 0xec]
mov dword [ebp - 0x1d0], eax
mov dword [eax], 0x80000
mov dword [eax + 4], ebx
lea eax, [ecx + 0xe4]
mov dword [ebp - 0x1cc], eax
mov dword [eax], 0x80000
mov dword [eax + 4], ebx
push str.SYSTEMACTION
lea ecx, [ebp - 0x4c]
call fcn.004019e0
mov byte [ebp - 4], 0x34
push str.Checking_system_locale...
lea ecx, [ebp - 0x30]
call fcn.004019e0
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.00419d40
mov byte [ebp - 4], 0x34
cmp dword [ebp - 0x18], edi
jb 0x455cac
mov eax, dword [ebp - 0x2c]
push eax
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor ecx, ecx
mov word [ebp - 0x2c], cx
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x34], edi
jb 0x455ccd
mov edx, dword [ebp - 0x48]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor eax, eax
mov word [ebp - 0x48], ax
lea ecx, [ebp - 0x1f0]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1a0], esp
push str.Locale
call fcn.004019e0
mov byte [ebp - 4], 0x36
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1a8], esp
push str.Win32_OperatingSystem
call fcn.004019e0
mov byte [ebp - 4], 0x37
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x1a4]
call fcn.004528e0
cmp eax, ebx
je 0x455ec5
mov edx, dword [ebp - 0x1e8]
mov eax, edx
lea ecx, [eax + 2]
mov dword [ebp - 0x1a0], ecx
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x455d40
sub eax, dword [ebp - 0x1a0]
sar eax, 1
mov ecx, dword [ebp - 0x19c]
add ecx, 0xa8
mov dword [ebp - 0x1c8], ecx
push eax
push edx
call fcn.00401860
push str.040c
mov edx, dword [ebp - 0x1c8]
push edx
call fcn.00402330
add esp, 8
test al, al
je 0x455db5
push str.French
mov ecx, dword [ebp - 0x19c]
add ecx, 0x8c
call fcn.00409f50
push 0x4eb5b8
mov ecx, dword [ebp - 0x19c]
add ecx, 0xc4
call fcn.00409f50
jmp 0x455ff4
push str.0407
mov eax, dword [ebp - 0x1c8]
push eax
call fcn.00402330
add esp, 8
test al, al
je 0x455dfe
push str.German
mov ecx, dword [ebp - 0x19c]
add ecx, 0x8c
call fcn.00409f50
push 0x4eb594
mov ecx, dword [ebp - 0x19c]
add ecx, 0xc4
call fcn.00409f50
jmp 0x455ff4
push str.0410
mov ecx, dword [ebp - 0x1c8]
push ecx
call fcn.00402330
add esp, 8
test al, al
je 0x455e47
push str.Italian
mov ecx, dword [ebp - 0x19c]
add ecx, 0x8c
call fcn.00409f50
push 0x4eb570
mov ecx, dword [ebp - 0x19c]
add ecx, 0xc4
call fcn.00409f50
jmp 0x455ff4
push str.0c0a
mov edx, dword [ebp - 0x1c8]
push edx
call fcn.00402330
add esp, 8
mov ecx, dword [ebp - 0x19c]
add ecx, 0x8c
test al, al
je 0x455e90
push str.Spanish
call fcn.00409f50
push 0x4eb54c
mov ecx, dword [ebp - 0x19c]
add ecx, 0xc4
call fcn.00409f50
jmp 0x455ff4
push str.English
call fcn.00409f50
push str.0409
mov ecx, dword [ebp - 0x1c8]
call fcn.00409f50
push 0x4eb528
mov ecx, dword [ebp - 0x19c]
add ecx, 0xc4
call fcn.00409f50
jmp 0x455ff4
push str.SYSTEMACTION
lea ecx, [ebp - 0x4c]
call fcn.004019e0
mov byte [ebp - 4], 0x38
push str.Failed_to_get_system_locale.
lea ecx, [ebp - 0x30]
call fcn.004019e0
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x30]
push ecx
call fcn.00419d40
mov byte [ebp - 4], 0x38
cmp dword [ebp - 0x18], edi
jb 0x455f09
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor eax, eax
mov word [ebp - 0x2c], ax
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x34], edi
jb 0x455f2a
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor edx, edx
mov word [ebp - 0x48], dx
push str.SYSTEMACTION
lea ecx, [ebp - 0x4c]
call fcn.004019e0
mov byte [ebp - 4], 0x3a
push str.Use_default_English_0409_locale.
lea ecx, [ebp - 0x30]
call fcn.004019e0
mov byte [ebp - 4], 0x3b
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x30]
push ecx
call fcn.00419d40
mov byte [ebp - 4], 0x3a
cmp dword [ebp - 0x18], edi
jb 0x455f7a
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor eax, eax
mov word [ebp - 0x2c], ax
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x34], edi
jb 0x455f9b
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor edx, edx
mov word [ebp - 0x48], dx
push esi
push str.English
mov ecx, dword [ebp - 0x19c]
add ecx, 0x8c
call fcn.00401860
mov ecx, dword [ebp - 0x19c]
add ecx, 0xa8
mov dword [ebp - 0x1c8], ecx
push 4
push str.0409
call fcn.00401860
push 2
push 0x4eb528
mov ecx, dword [ebp - 0x19c]
add ecx, 0xc4
call fcn.00401860
push str.SYSTEMACTION
lea ecx, [ebp - 0x4c]
call fcn.004019e0
mov byte [ebp - 4], 0x3c
push str.Checking_system_drive...
lea ecx, [ebp - 0x30]
call fcn.004019e0
mov byte [ebp - 4], 0x3d
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x30]
push ecx
call fcn.00419d40
mov byte [ebp - 4], 0x3c
cmp dword [ebp - 0x18], edi
jb 0x456038
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor eax, eax
mov word [ebp - 0x2c], ax
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x34], edi
jb 0x456059
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor edx, edx
mov word [ebp - 0x48], dx
lea eax, [ebp - 0x1f0]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1a0], esp
push str.SystemDrive
call fcn.004019e0
mov byte [ebp - 4], 0x3e
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1a8], esp
push str.Win32_OperatingSystem
call fcn.004019e0
mov byte [ebp - 4], 0x3f
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x1a4]
call fcn.004528e0
cmp eax, ebx
je 0x4560d1
mov ecx, dword [ebp - 0x19c]
add ecx, 0x60
mov dword [ebp - 0x1a8], ecx
mov edx, dword [ebp - 0x1e8]
push edx
call fcn.00409f50
jmp 0x4561ce
push str.SYSTEMACTION
lea ecx, [ebp - 0x4c]
call fcn.004019e0
mov byte [ebp - 4], 0x40
push str.Failed_to_get_system_drive.
lea ecx, [ebp - 0x30]
call fcn.004019e0
mov byte [ebp - 4], 0x41
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x30]
push ecx
call fcn.00419d40
mov byte [ebp - 4], 0x40
cmp dword [ebp - 0x18], edi
jb 0x456115
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor eax, eax
mov word [ebp - 0x2c], ax
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x34], edi
jb 0x456136
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor edx, edx
mov word [ebp - 0x48], dx
push str.SYSTEMACTION
lea ecx, [ebp - 0x4c]
call fcn.004019e0
mov byte [ebp - 4], 0x42
push str.Use_default_drive_C:
lea ecx, [ebp - 0x30]
call fcn.004019e0
mov byte [ebp - 4], 0x43
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x30]
push ecx
call fcn.00419d40
mov byte [ebp - 4], 0x42
cmp dword [ebp - 0x18], edi
jb 0x456186
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor eax, eax
mov word [ebp - 0x2c], ax
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x34], edi
jb 0x4561a7
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor edx, edx
mov word [ebp - 0x48], dx
mov ecx, dword [ebp - 0x19c]
add ecx, 0x60
mov dword [ebp - 0x1a8], ecx
push 2
push 0x4eb3f0
call fcn.00401860
push str.SYSTEMACTION
lea ecx, [ebp - 0x4c]
call fcn.004019e0
mov byte [ebp - 4], 0x44
push str.Checking_disk_space...
lea ecx, [ebp - 0x30]
call fcn.004019e0
mov byte [ebp - 4], 0x45
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x30]
push ecx
call fcn.00419d40
mov byte [ebp - 4], 0x44
cmp dword [ebp - 0x18], edi
jb 0x456212
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor eax, eax
mov word [ebp - 0x2c], ax
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x34], edi
jb 0x456233
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor edx, edx
mov word [ebp - 0x48], dx
push 0x4eb3a8
lea ecx, [ebp - 0x84]
call fcn.004019e0
mov byte [ebp - 4], 0x46
push 0x4eb3a4
mov eax, dword [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x30]
push ecx
call fcn.00401b00
add esp, 0xc
mov byte [ebp - 4], 0x47
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x84]
call fcn.00401500
mov byte [ebp - 4], 0x46
cmp dword [ebp - 0x18], edi
jb 0x456293
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor eax, eax
mov word [ebp - 0x2c], ax
sub esp, 0x1c
mov dword [ebp - 0x1a0], esp
mov ecx, esp
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
xor edx, edx
mov word [ecx + 4], dx
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x84]
push eax
call fcn.00401750
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x200]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1e0], esp
push str.FreeSpace
call fcn.004019e0
mov byte [ebp - 4], 0x49
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1d8], esp
push str.Win32_LogicalDisk
call fcn.004019e0
mov byte [ebp - 4], 0x4a
mov byte [ebp - 4], 0x46
mov ecx, dword [ebp - 0x1a4]
call fcn.00452150
cmp eax, ebx
je 0x4563d4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1d8], esp
lea edx, [ebp - 0x84]
push edx
call fcn.00401960
mov byte [ebp - 4], 0x4b
lea eax, [ebp - 0x250]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1e0], esp
push str.Size
call fcn.004019e0
mov byte [ebp - 4], 0x4c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1a0], esp
push str.Win32_LogicalDisk
call fcn.004019e0
mov byte [ebp - 4], 0x4d
mov byte [ebp - 4], 0x46
mov ecx, dword [ebp - 0x1a4]
call fcn.00452150
cmp eax, ebx
je 0x4563d4
mov ecx, dword [ebp - 0x19c]
add ecx, 0x84
mov dword [ebp - 0x1a4], ecx
lea edx, [ebp - 0x1f8]
push edx
call fcn.00453860
mov ecx, dword [ebp - 0x1a4]
mov dword [ecx], eax
mov dword [ecx + 4], edx
mov eax, dword [ebp - 0x19c]
add eax, 0x7c
mov dword [ebp - 0x1a0], eax
lea ecx, [ebp - 0x1f8]
push ecx
call fcn.00453860
mov ecx, dword [ebp - 0x1a0]
mov dword [ecx], eax
mov dword [ecx + 4], edx
jmp 0x4564f8
push str.SYSTEMACTION
lea ecx, [ebp - 0x4c]
call fcn.004019e0
mov byte [ebp - 4], 0x4e
push str.Failed_to_get_disk_space.
lea ecx, [ebp - 0x30]
call fcn.004019e0
mov byte [ebp - 4], 0x4f
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x30]
push eax
call fcn.00419d40
mov byte [ebp - 4], 0x4e
cmp dword [ebp - 0x18], edi
jb 0x456418
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor edx, edx
mov word [ebp - 0x2c], dx
mov byte [ebp - 4], 0x46
cmp dword [ebp - 0x34], edi
jb 0x456439
mov eax, dword [ebp - 0x48]
push eax
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor ecx, ecx
mov word [ebp - 0x48], cx
push str.SYSTEMACTION
lea ecx, [ebp - 0x1c4]
call fcn.004019e0
mov byte [ebp - 4], 0x50
push str.Use_default_1GB_disk_space.
lea ecx, [ebp - 0x30]
call fcn.004019e0
mov byte [ebp - 4], 0x51
lea edx, [ebp - 0x1c4]
push edx
lea eax, [ebp - 0x30]
push eax
call fcn.00419d40
mov byte [ebp - 4], 0x50
cmp dword [ebp - 0x18], edi
jb 0x45648f
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor edx, edx
mov word [ebp - 0x2c], dx
mov byte [ebp - 4], 0x46
cmp dword [ebp - 0x1ac], edi
jb 0x4564b6
mov eax, dword [ebp - 0x1c0]
push eax
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x1ac], esi
mov dword [ebp - 0x1b0], ebx
xor ecx, ecx
mov word [ebp - 0x1c0], cx
mov ecx, dword [ebp - 0x19c]
lea eax, [ecx + 0x84]
mov dword [ebp - 0x1a4], eax
mov dword [eax], 0x40000000
mov dword [eax + 4], ebx
lea eax, [ecx + 0x7c]
mov dword [ebp - 0x1a0], eax
mov dword [eax], 0x40000000
mov dword [eax + 4], ebx
push str.System_Information:
lea ecx, [ebp - 0x30]
call fcn.00402c20
mov byte [ebp - 4], 0x52
lea edx, [ebp - 0x30]
push edx
call fcn.0041a150
mov byte [ebp - 4], 0x46
cmp dword [ebp - 0x18], 0x10
jb 0x456528
mov eax, dword [ebp - 0x2c]
push eax
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
push 0x4e25d8
lea ecx, [ebp - 0x4c]
call fcn.004019e0
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x1c4]
push ecx
mov ecx, dword [ebp - 0x19c]
call fcn.0042e880
mov byte [ebp - 4], 0x54
push eax
push str.OS_Version:
lea edx, [ebp - 0x30]
push edx
call fcn.00401a30
add esp, 0xc
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x4c]
push ecx
push eax
call fcn.00419d40
mov byte [ebp - 4], 0x54
cmp dword [ebp - 0x18], edi
jb 0x456591
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor eax, eax
mov word [ebp - 0x2c], ax
mov byte [ebp - 4], 0x53
cmp dword [ebp - 0x1ac], edi
jb 0x4565b8
mov ecx, dword [ebp - 0x1c0]
push ecx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x1ac], esi
mov dword [ebp - 0x1b0], ebx
xor edx, edx
mov word [ebp - 0x1c0], dx
mov byte [ebp - 4], 0x46
cmp dword [ebp - 0x34], edi
jb 0x4565e2
mov eax, dword [ebp - 0x48]
push eax
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor ecx, ecx
mov word [ebp - 0x48], cx
push 0x4e25d8
lea ecx, [ebp - 0x30]
call fcn.004019e0
mov byte [ebp - 4], 0x56
mov edx, dword [ebp - 0x19c]
add edx, 0x16c
push edx
push str.OS_Architecture:
lea eax, [ebp - 0x4c]
push eax
call fcn.00401a30
add esp, 0xc
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x30]
push ecx
push eax
call fcn.00419d40
mov byte [ebp - 4], 0x56
cmp dword [ebp - 0x34], edi
jb 0x456640
mov edx, dword [ebp - 0x48]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor eax, eax
mov word [ebp - 0x48], ax
mov byte [ebp - 4], 0x46
cmp dword [ebp - 0x18], edi
jb 0x456661
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor edx, edx
mov word [ebp - 0x2c], dx
push 0x4e25d8
lea ecx, [ebp - 0x4c]
call fcn.004019e0
mov byte [ebp - 4], 0x58
lea eax, [ebp - 0x1c4]
push eax
mov ecx, dword [ebp - 0x19c]
add ecx, 0x18
call fcn.0042e880
mov byte [ebp - 4], 0x59
push eax
push str.OS_Service_Pack_Level:
lea ecx, [ebp - 0x30]
push ecx
call fcn.00401a30
add esp, 0xc
mov byte [ebp - 4], 0x5a
lea edx, [ebp - 0x4c]
push edx
push eax
call fcn.00419d40
mov byte [ebp - 4], 0x59
cmp dword [ebp - 0x18], edi
jb 0x4566cc
mov eax, dword [ebp - 0x2c]
push eax
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor ecx, ecx
mov word [ebp - 0x2c], cx
mov byte [ebp - 4], 0x58
cmp dword [ebp - 0x1ac], edi
jb 0x4566f3
mov edx, dword [ebp - 0x1c0]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x1ac], esi
mov dword [ebp - 0x1b0], ebx
xor eax, eax
mov word [ebp - 0x1c0], ax
mov byte [ebp - 4], 0x46
cmp dword [ebp - 0x34], edi
jb 0x45671d
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor edx, edx
mov word [ebp - 0x48], dx
push 0x4e25d8
lea ecx, [ebp - 0x30]
call fcn.004019e0
mov byte [ebp - 4], 0x5b
mov eax, dword [ebp - 0x1c8]
push eax
push str.OS_Language:
lea ecx, [ebp - 0x4c]
push ecx
call fcn.00401a30
add esp, 0xc
mov byte [ebp - 4], 0x5c
lea edx, [ebp - 0x30]
push edx
push eax
call fcn.00419d40
mov byte [ebp - 4], 0x5b
cmp dword [ebp - 0x34], edi
jb 0x456775
mov eax, dword [ebp - 0x48]
push eax
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor ecx, ecx
mov word [ebp - 0x48], cx
mov byte [ebp - 4], 0x46
cmp dword [ebp - 0x18], edi
jb 0x456796
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor eax, eax
mov word [ebp - 0x2c], ax
push 0x4e25d8
lea ecx, [ebp - 0x4c]
call fcn.004019e0
mov byte [ebp - 4], 0x5d
mov ecx, dword [ebp - 0x1d0]
push ecx
lea edx, [ebp - 0x1c4]
push edx
call fcn.00410110
mov byte [ebp - 4], 0x5e
push eax
push str.Free_Memory:
lea eax, [ebp - 0x30]
push eax
call fcn.00401a30
add esp, 0xc
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x4c]
push ecx
push eax
call fcn.00419d40
mov byte [ebp - 4], 0x5e
cmp dword [ebp - 0x18], edi
jb 0x4567ff
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor eax, eax
mov word [ebp - 0x2c], ax
mov byte [ebp - 4], 0x5d
cmp dword [ebp - 0x1ac], edi
jb 0x456826
mov ecx, dword [ebp - 0x1c0]
push ecx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x1ac], esi
mov dword [ebp - 0x1b0], ebx
xor edx, edx
mov word [ebp - 0x1c0], dx
mov byte [ebp - 4], 0x46
cmp dword [ebp - 0x34], edi
jb 0x456850
mov eax, dword [ebp - 0x48]
push eax
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor ecx, ecx
mov word [ebp - 0x48], cx
push 0x4e25d8
lea ecx, [ebp - 0x30]
call fcn.004019e0
mov byte [ebp - 4], 0x60
mov edx, dword [ebp - 0x1cc]
push edx
lea eax, [ebp - 0x1c4]
push eax
call fcn.00410110
mov byte [ebp - 4], 0x61
push eax
push str.Total_Memory:
lea ecx, [ebp - 0x4c]
push ecx
call fcn.00401a30
add esp, 0xc
mov byte [ebp - 4], 0x62
lea edx, [ebp - 0x30]
push edx
push eax
call fcn.00419d40
mov byte [ebp - 4], 0x61
cmp dword [ebp - 0x34], edi
jb 0x4568b9
mov eax, dword [ebp - 0x48]
push eax
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor ecx, ecx
mov word [ebp - 0x48], cx
mov byte [ebp - 4], 0x60
cmp dword [ebp - 0x1ac], edi
jb 0x4568e0
mov edx, dword [ebp - 0x1c0]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x1ac], esi
mov dword [ebp - 0x1b0], ebx
xor eax, eax
mov word [ebp - 0x1c0], ax
mov byte [ebp - 4], 0x46
cmp dword [ebp - 0x18], edi
jb 0x45690a
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor edx, edx
mov word [ebp - 0x2c], dx
push 0x4e25d8
lea ecx, [ebp - 0x4c]
call fcn.004019e0
mov byte [ebp - 4], 0x63
mov eax, dword [ebp - 0x1a8]
push eax
push str.System_Drive:
lea ecx, [ebp - 0x30]
push ecx
call fcn.00401a30
add esp, 0xc
mov byte [ebp - 4], 0x64
lea edx, [ebp - 0x4c]
push edx
push eax
call fcn.00419d40
mov byte [ebp - 4], 0x63
cmp dword [ebp - 0x18], edi
jb 0x456962
mov eax, dword [ebp - 0x2c]
push eax
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor ecx, ecx
mov word [ebp - 0x2c], cx
mov byte [ebp - 4], 0x46
cmp dword [ebp - 0x34], edi
jb 0x456983
mov edx, dword [ebp - 0x48]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor eax, eax
mov word [ebp - 0x48], ax
push 0x4e25d8
lea ecx, [ebp - 0x30]
call fcn.004019e0
mov byte [ebp - 4], 0x65
mov ecx, dword [ebp - 0x1a4]
push ecx
lea edx, [ebp - 0x1c4]
push edx
call fcn.00410110
mov byte [ebp - 4], 0x66
push eax
push str.Free_Disk_Space:
lea eax, [ebp - 0x4c]
push eax
call fcn.00401a30
add esp, 0xc
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x30]
push ecx
push eax
call fcn.00419d40
mov byte [ebp - 4], 0x66
cmp dword [ebp - 0x34], edi
jb 0x4569ec
mov edx, dword [ebp - 0x48]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor eax, eax
mov word [ebp - 0x48], ax
mov byte [ebp - 4], 0x65
cmp dword [ebp - 0x1ac], edi
jb 0x456a13
mov ecx, dword [ebp - 0x1c0]
push ecx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x1ac], esi
mov dword [ebp - 0x1b0], ebx
xor edx, edx
mov word [ebp - 0x1c0], dx
mov byte [ebp - 4], 0x46
cmp dword [ebp - 0x18], edi
jb 0x456a3d
mov eax, dword [ebp - 0x2c]
push eax
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor ecx, ecx
mov word [ebp - 0x2c], cx
push 0x4e25d8
lea ecx, [ebp - 0x4c]
call fcn.004019e0
mov byte [ebp - 4], 0x68
mov edx, dword [ebp - 0x1a0]
push edx
lea eax, [ebp - 0x1c4]
push eax
call fcn.00410110
mov byte [ebp - 4], 0x69
push eax
push str.Total_Disk_Space:
lea ecx, [ebp - 0x30]
push ecx
call fcn.00401a30
add esp, 0xc
mov byte [ebp - 4], 0x6a
lea edx, [ebp - 0x4c]
push edx
push eax
call fcn.00419d40
mov byte [ebp - 4], 0x69
cmp dword [ebp - 0x18], edi
jb 0x456aa6
mov eax, dword [ebp - 0x2c]
push eax
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
xor ecx, ecx
mov word [ebp - 0x2c], cx
mov byte [ebp - 4], 0x68
cmp dword [ebp - 0x1ac], edi
jb 0x456acd
mov edx, dword [ebp - 0x1c0]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x1ac], esi
mov dword [ebp - 0x1b0], ebx
xor eax, eax
mov word [ebp - 0x1c0], ax
mov byte [ebp - 4], 0x46
cmp dword [ebp - 0x34], edi
jb 0x456af7
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
xor edx, edx
mov word [ebp - 0x48], dx
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x6c], edi
jb 0x456b18
mov eax, dword [ebp - 0x80]
push eax
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x70], ebx
xor ecx, ecx
mov word [ebp - 0x80], cx
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x50], edi
jb 0x456b3c
mov edx, dword [ebp - 0x64]
push edx
call fcn.004b29fa
add esp, 4
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x54], ebx
xor eax, eax
mov word [ebp - 0x64], ax
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004b3057
mov esp, ebp
pop ebp
ret 4