Function at 0x4307b0
Capabilities:
Get hostname
List user accounts
Query environment variable
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e73cb
mov eax, dword fs:[0]
push eax
mov eax, 0x2bc0
call fcn.004bd3e0
mov eax, dword [0x53d190]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor esi, esi
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], esi
mov dword [ebp - 0x2b5c], esi
mov dword [ebp - 0x2b58], esi
mov dword [ebp - 4], esi
lea eax, [ebp - 0x2b70]
xor ecx, ecx
mov dword [ebp - 0x2b84], esi
push eax
push 0x20019
push ecx
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionWinlogonSpecialAccountsUserList
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x2b88], esi
mov dword [ebp - 0x2bb8], esi
mov dword [ebp - 0x2bbc], esi
mov dword [ebp - 0x2bb0], esi
mov dword [ebp - 0x2bac], esi
mov dword [ebp - 0x2bc0], esi
mov dword [ebp - 0x2bc4], esi
mov dword [ebp - 0x2ba8], esi
mov dword [ebp - 0x2bc8], esi
mov dword [ebp - 0x2b80], esi
mov dword [ebp - 0x2ba4], ecx
mov dword [ebp - 0x2ba0], ecx
mov dword [ebp - 0x2b9c], ecx
mov dword [ebp - 0x2b98], ecx
mov dword [ebp - 0x2b94], ecx
mov dword [ebp - 0x2b90], ecx
mov dword [ebp - 0x2b78], ecx
mov dword [ebp - 0x2b7c], ecx
mov dword [ebp - 0x2b54], ecx
mov dword [ebp - 0x2b8c], ecx
mov dword [ebp - 0x2b70], ecx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea eax, [ebp - 0x2b8c]
push eax
lea eax, [ebp - 0x2b54]
push eax
lea eax, [ebp - 0x2b7c]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x2b78]
push eax
push 2
push 2
push esi
call dword [sym.imp.NETAPI32.dll_NetUserEnum]
test eax, eax
jne 0x4309c1
mov dword [ebp - 0x2b68], eax
cmp dword [ebp - 0x2b7c], eax
jbe 0x4309c1
mov eax, dword [0x58b084]
xor edi, edi
mov esi, dword [ebp - 0x2b78]
mov edx, dword [edi + esi + 0x18]
lea ecx, [edi + esi]
test dl, 2
jne 0x4309a3
test edx, 0x200
jne 0x430915
inc eax
mov dword [0x58b084], eax
jmp 0x4309a3
cmp dword [ecx + 0x50], 0
jne 0x430926
inc eax
mov dword [0x58b084], eax
jmp 0x4309a3
xor edx, edx
mov dword [ebp - 0x2b50], 4
mov dword [ebp - 0x2b74], edx
cmp dword [ebp - 0x2b70], edx
je 0x43096f
lea eax, [ebp - 0x2b50]
push eax
lea eax, [ebp - 0x2b74]
push eax
push edx
push edx
push dword [ecx]
push dword [ebp - 0x2b70]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov eax, dword [0x58b084]
mov edx, dword [ebp - 0x2b74]
mov esi, dword [ebp - 0x2b78]
mov ecx, dword [edi + esi + 0xc]
sub ecx, 1
je 0x430991
sub ecx, 1
jne 0x4309a3
test edx, edx
je 0x430989
inc dword [0x58a074]
jmp 0x4309a3
inc dword [0x58b080]
jmp 0x4309a3
test edx, edx
je 0x43099d
inc dword [0x58b07c]
jmp 0x4309a3
inc dword [0x58b078]
mov ecx, dword [ebp - 0x2b68]
add edi, 0x60
inc ecx
mov dword [ebp - 0x2b68], ecx
cmp ecx, dword [ebp - 0x2b7c]
jb 0x4308f2
xor esi, esi
mov eax, dword [ebp - 0x2b78]
test eax, eax
je 0x4309d2
push eax
call dword [sym.imp.NETAPI32.dll_NetApiBufferFree]
mov eax, dword [ebp - 0x2b70]
test eax, eax
je 0x4309e3
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push str.K7TMBrdg.dll
push 0x5885d0
push str._s_s
lea eax, [ebp - 0x1a30]
push 0x400
push eax
call fcn.0042a5a0
add esp, 0x14
lea eax, [ebp - 0x1a30]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov edi, eax
mov dword [ebp - 0x2b8c], edi
test edi, edi
jne 0x430a41
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
lea eax, [ebp - 0x1a30]
push edi
push eax
push str.PopulateSystemInfo___:_LoadLibrary___failed_for__S___0x_x
call fcn.00428ad0
add esp, 0xc
jmp 0x43369c
push str.K7CmnRes.dll
push 0x5885d0
push str._s_s
lea eax, [ebp - 0x1a30]
push 0x400
push eax
call fcn.0042a5a0
add esp, 0x14
lea eax, [ebp - 0x1a30]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x2b80], eax
test eax, eax
je 0x430a1f
push str.K7TM_GetVersion
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
test edi, edi
jne 0x430aad
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
push edi
push str.K7TM_GetVersion
push str.PopulateSystemInfo___:_GetProcAddress___failed_for__s___0x_x
call fcn.00428ad0
add esp, 0xc
jmp 0x43369c
lea eax, [ebp - 0x2bcc]
mov ecx, edi
push eax
call dword [0x4e82f8]
call edi
cmp eax, 1
je 0x430add
push str.K7TM_GetVersion
push str.PopulateSystemInfo___:__s___failed
or edi, 0xffffffff
call fcn.00428ad0
add esp, 8
jmp 0x43369c
push 0x1000
mov dword [ebp - 0x2b60], 0x1000
mov dword [ebp - 0x2b58], 0x1000
call fcn.004c4a00
mov esi, eax
add esp, 4
mov dword [ebp - 0x2b64], esi
test esi, esi
jne 0x430b20
lea edi, [eax + 0xe]
push edi
push str.PopulateSystemInfo___:_failed___0x_x
call fcn.00428ad0
add esp, 8
jmp 0x43369c
mov al, byte [0x534124]
mov edi, 1
mov byte [esi], al
lea eax, [ebp - 0x2b68]
push eax
push edi
push 0
push str.SOFTWAREClassesCLSIDA66B1D7A_A610_4e66_B8CF_C451D0932B1DGlobalInfo
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x2b5c], edi
mov byte [ebp - 0x230], 0
mov dword [ebp - 0x2b6c], 0x200
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov ecx, eax
test ecx, ecx
je 0x430b6b
mov dword [ebp - 0x2b68], eax
jmp 0x430bc9
lea eax, [ebp - 0x2b6c]
push eax
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x2b50]
push eax
push 0
push str.SysId
push dword [ebp - 0x2b68]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x2b74], eax
test eax, eax
jne 0x430bb1
cmp dword [ebp - 0x2b50], edi
mov ecx, 0xd
cmovne eax, ecx
mov dword [ebp - 0x2b74], eax
push dword [ebp - 0x2b68]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0x2b74]
mov dword [ebp - 0x2b68], ecx
test ecx, ecx
je 0x430be7
push ecx
push ecx
push str.InitSystemInfo___:_RegReadValueA___for_SysID_Failed____u___x
call fcn.00428ad0
mov edi, dword [ebp - 0x2b68]
add esp, 0xc
jmp 0x43369c
push dword [ebp - 0x2bcc]
lea eax, [ebp - 0x1230]
push str._Version_:__d_
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
mov edx, 0x1000
cmp eax, 0xfff
jbe 0x430c73
lea ecx, [eax - 0xfff]
cmp ecx, edx
cmovb ecx, edx
lea eax, [ecx + 0x1000]
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x430c59
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x430c94
mov esi, eax
mov eax, dword [ebp - 0x2b50]
mov dword [ebp - 0x2b60], eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
lea ecx, [esi + 1]
lea edi, [eax + 1]
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x430c94
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
lea eax, [ebp - 0x230]
push eax
push str._SysId_:___s__
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x430d4b
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x430d2b
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x430d11
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x430d4b
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x430d4b
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
push str.clipc.dll
mov dword [ebp - 0x2b70], 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x2b54], eax
test eax, eax
jne 0x430d75
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x430e39
push str.GetOfflineDeviceUniqueID
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x2b50], eax
test eax, eax
jne 0x430d9c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x2b7c], eax
jmp 0x430e27
push 0
push 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x2b70], 0x20
push ecx
lea ecx, [ebp - 0x2b70]
push ecx
lea ecx, [ebp - 0x2bc8]
push ecx
push 0
push 0
mov ecx, eax
call dword [0x4e82f8]
call dword [ebp - 0x2b50]
mov dword [ebp - 0x2b7c], eax
test eax, eax
jne 0x430e27
cmp dword [ebp - 0x2b70], eax
jbe 0x430e1d
lea edi, [ebp - 0x230]
xor esi, esi
nop dword [eax + eax]
movzx eax, byte [ebp + esi - 0x30]
push eax
push str._02X
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
inc esi
add esp, 0xc
add edi, 2
cmp esi, dword [ebp - 0x2b70]
jb 0x430df0
mov edi, dword [ebp - 0x2b5c]
mov esi, dword [ebp - 0x2b64]
mov dword [ebp - 0x2b7c], 0
push dword [ebp - 0x2b54]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x2b7c]
test eax, eax
jne 0x430ff2
push 0x1000
push eax
lea eax, [ebp - 0x2a30]
push eax
call fcn.004beb60
lea edx, [ebp - 0x230]
mov dword [ebp - 0x2b50], 0x1000
add esp, 0xc
lea ecx, [edx + 1]
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x430e70
lea eax, [ebp - 0x2b50]
sub edx, ecx
push eax
lea eax, [ebp - 0x2a30]
inc edx
push eax
lea ecx, [ebp - 0x230]
call fcn.00422ac0
push eax
push str._ODUID_:___s__
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x18
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x430f40
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x430f20
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x430f06
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x430f40
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x430f40
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
push dword [ebp - 0x2bc8]
lea eax, [ebp - 0x1230]
push str._ODUIDMtd_:__d_
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x430ff2
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x430fd2
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x430fb8
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x430ff2
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x430ff2
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
push 0
push str.SOFTWAREK7_ComputingK7TotalSecurityCommonInfoUpdates
push reloc.OLEAUT32.dll_SysReAllocString
mov byte [ebp - 0x230], 0
call fcn.00433990
mov dword [ebp - 0x2b50], eax
test eax, eax
je 0x431037
push 0x200
lea ecx, [ebp - 0x230]
push ecx
push str.UserPublicIP
push eax
call fcn.00433a60
push dword [ebp - 0x2b50]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x230]
push eax
push str._IP_:___s__
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x4310ea
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x4310ca
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x4310b0
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x4310ea
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x4310ea
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
push 0
push str.SOFTWAREK7_ComputingK7TotalSecurityCommonInfoUpdates
push reloc.OLEAUT32.dll_SysReAllocString
mov byte [ebp - 0x230], 0
call fcn.00433990
mov dword [ebp - 0x2b50], eax
test eax, eax
je 0x43112f
push 0x200
lea ecx, [ebp - 0x230]
push ecx
push str.UserTLMeta
push eax
call fcn.00433a60
push dword [ebp - 0x2b50]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x230]
push eax
push str._SRTMMeta_:___s__
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x4311e2
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x4311c2
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x4311a8
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x4311e2
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x4311e2
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
push 0x118
lea eax, [ebp - 0x2b48]
mov byte [ebp - 0x230], 0
push 0
push eax
call fcn.004beb60
add esp, 0xc
mov dword [ebp - 0x2b4c], 0x11c
lea eax, [ebp - 0x2b4c]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
push dword [ebp - 0x2b44]
lea eax, [ebp - 0x230]
push dword [ebp - 0x2b48]
push str._u._u
push 0x200
push eax
call fcn.00428a60
lea eax, [ebp - 0x230]
push eax
push str._OSVer_:___s__
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x24
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x4312eb
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x4312cb
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x4312b1
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x4312eb
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x4312eb
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
movzx eax, word [ebp - 0x2a38]
push eax
push 0x534fac
lea eax, [ebp - 0x230]
push 0x200
push eax
call fcn.00428a60
lea eax, [ebp - 0x230]
push eax
push str._OSSP_:___s__
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x20
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x4313bc
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x43139c
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x431382
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x4313bc
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x4313bc
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
push dword [ebp - 0x2b40]
lea eax, [ebp - 0x1230]
push str._OSBuild_:__u_
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x43146e
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x43144e
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x431434
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x43146e
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x43146e
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
movzx eax, byte [ebp - 0x2a32]
push eax
push str._OSPrdType_:__u_
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x431522
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x431502
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x4314e8
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x431522
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x431522
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
push str.IsWow64Process
push str.kernel32
mov dword [ebp - 0x2b74], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x2b68], eax
test eax, eax
je 0x43156d
lea eax, [ebp - 0x2b74]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, dword [ebp - 0x2b68]
push eax
call dword [0x4e82f8]
call dword [ebp - 0x2b68]
cmp dword [ebp - 0x2b74], 0
mov ecx, 0x536dfc
mov eax, 0x536df8
cmove eax, ecx
push eax
push str._OSArch_:___s__
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x43162e
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x43160e
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x4315f4
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x43162e
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x43162e
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
xor eax, eax
push 0x400
mov word [ebp - 0x1630], ax
lea eax, [ebp - 0x1630]
push eax
push 0x32
push dword [ebp - 0x2b80]
call dword [sym.imp.USER32.dll_LoadStringW]
push 0
push 0
push 0x200
lea eax, [ebp - 0x230]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x1630]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x230]
push eax
push str._K7ProdName_:___s__
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x43172a
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x43170a
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x4316f0
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x43172a
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x43172a
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
push 0x200
lea eax, [ebp - 0x230]
mov byte [ebp - 0x230], 0
push eax
push 0x36
push dword [ebp - 0x2b80]
call dword [sym.imp.USER32.dll_LoadStringA]
lea eax, [ebp - 0x230]
push eax
push str._K7ProdLang_:___s__
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x4317fe
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x4317de
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x4317c4
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x4317fe
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x4317fe
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
push 0
push str.SOFTWAREK7_ComputingK7TotalSecurityCommonInfoUpdates
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x2bb4], 0
call fcn.00433990
mov dword [ebp - 0x2b50], eax
test eax, eax
je 0x431841
lea ecx, [ebp - 0x2bb4]
push ecx
push str.VersionTSProgram
push eax
call fcn.00433a10
push dword [ebp - 0x2b50]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x2bb4]
lea eax, [ebp - 0x1230]
push str._K7ProdVer_:__u_
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x4318f3
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x4318d3
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x4318b9
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x4318f3
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x4318f3
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
xor ecx, ecx
mov dword [ebp - 0x2b7c], 0
push str.Iphlpapi.dll
mov dword [ebp - 0x2b78], ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x2b54], eax
test eax, eax
jne 0x431925
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x431b5b
push str.GetNetworkParams
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x2b70], eax
test eax, eax
jne 0x431946
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x431a94
lea ecx, [ebp - 0x2b7c]
push ecx
push 0
mov ecx, eax
call dword [0x4e82f8]
call dword [ebp - 0x2b70]
mov eax, dword [ebp - 0x2b7c]
test eax, eax
je 0x431a94
push eax
call fcn.004c4a00
add esp, 4
mov dword [ebp - 0x2b74], eax
test eax, eax
je 0x431a94
lea ecx, [ebp - 0x2b7c]
push ecx
mov ecx, dword [ebp - 0x2b70]
push eax
call dword [0x4e82f8]
call dword [ebp - 0x2b70]
test eax, eax
jne 0x431a73
mov eax, dword [ebp - 0x2b74]
add eax, 0x10c
mov ecx, eax
mov dword [ebp - 0x2b68], eax
xor eax, eax
mov dword [ebp - 0x2b50], ecx
test ecx, ecx
je 0x4319fb
xor esi, esi
mov edi, ecx
nop word [eax + eax]
lea eax, [edi + 4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, dword [edi]
inc esi
add esi, eax
test edi, edi
jne 0x4319d0
mov edi, dword [ebp - 0x2b5c]
mov dword [ebp - 0x2b70], esi
mov esi, dword [ebp - 0x2b64]
mov eax, dword [ebp - 0x2b70]
inc eax
push eax
mov dword [ebp - 0x2b70], eax
call fcn.004c4a00
mov ecx, eax
add esp, 4
mov dword [ebp - 0x2b78], ecx
test ecx, ecx
je 0x431a73
cmp dword [ebp - 0x2b68], 0
mov byte [ecx], 0
je 0x431a65
mov esi, dword [ebp - 0x2b70]
mov edi, dword [ebp - 0x2b68]
nop
lea eax, [edi + 4]
mov edx, esi
push eax
call fcn.0042e980
mov ecx, dword [ebp - 0x2b78]
mov edx, esi
push 0x535b60
call fcn.0042e980
mov edi, dword [edi]
mov ecx, dword [ebp - 0x2b78]
test edi, edi
jne 0x431a30
mov edi, dword [ebp - 0x2b5c]
mov esi, dword [ebp - 0x2b64]
mov dword [ebp - 0x2ba4], ecx
xor ecx, ecx
mov dword [ebp - 0x2b78], ecx
push dword [ebp - 0x2b74]
call fcn.004c4990
mov eax, dword [ebp - 0x2b78]
add esp, 4
test eax, eax
je 0x431a94
push eax
call fcn.004c4990
add esp, 4
push dword [ebp - 0x2b54]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x2ba4]
test eax, eax
je 0x431b5b
push eax
push str._DNSServers_:___s__
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x431b5b
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x431b3b
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x431b21
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x431b5b
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x431b5b
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
lea ecx, [ebp - 0x2ba0]
call fcn.0042ecd0
mov eax, dword [ebp - 0x2ba0]
test eax, eax
je 0x431c21
push eax
push str._ActiveNetworks_:__s_
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x431c21
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x431c01
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x431be7
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x431c21
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x431c21
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
lea ecx, [ebp - 0x2b9c]
call fcn.0042f0b0
mov eax, dword [ebp - 0x2b9c]
test eax, eax
je 0x431ce7
push eax
push str._VolumeProperties_:__s_
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x431ce7
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x431cc7
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x431cad
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x431ce7
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x431ce7
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
lea ecx, [ebp - 0x2b98]
call fcn.0042f5d0
mov eax, dword [ebp - 0x2b98]
test eax, eax
je 0x431dad
push eax
push str._ProductsConflict_:__s_
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x431dad
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x431d8d
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x431d73
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x431dad
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x431dad
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
lea ecx, [ebp - 0x2b94]
call fcn.0042fc10
mov eax, dword [ebp - 0x2b94]
test eax, eax
je 0x431e73
push eax
push str._ProductsWSCAntiVirus_:__s_
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x431e73
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x431e53
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x431e39
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x431e73
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x431e73
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
lea ecx, [ebp - 0x2b90]
call fcn.004301e0
mov eax, dword [ebp - 0x2b90]
test eax, eax
je 0x431f39
push eax
push str._ProductsWSCFireWall_:__s_
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x431f39
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x431f19
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x431eff
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x431f39
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x431f39
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
lea eax, [ebp - 0x2b68]
mov dword [ebp - 0x2b6c], 4
push eax
push 1
push 0
push 0x536f20
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x431f96
lea eax, [ebp - 0x2b6c]
push eax
lea eax, [ebp - 0x2b84]
push eax
lea eax, [ebp - 0x2b50]
push eax
push 0
push str.LastUpdateTime
push dword [ebp - 0x2b68]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push dword [ebp - 0x2b68]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x2b84]
lea eax, [ebp - 0x1230]
push str._LastUpdateTime_:__d_
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x432048
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x432028
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x43200e
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x432048
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x432048
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
push 0
call fcn.004cb764
mov ecx, dword [ebp - 0x2b84]
add esp, 4
cmp eax, ecx
jbe 0x432060
sub eax, ecx
jmp 0x432062
xor eax, eax
push eax
push str._DiffLastUpdateTime_:__d_
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x43210f
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x4320ef
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x4320d5
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x43210f
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x43210f
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
lea eax, [ebp - 0x2b68]
mov dword [ebp - 0x2b6c], 4
push eax
push 1
push 0
push 0x536f20
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x43216c
lea eax, [ebp - 0x2b6c]
push eax
lea eax, [ebp - 0x2b88]
push eax
lea eax, [ebp - 0x2b50]
push eax
push 0
push str.AVProgramDate
push dword [ebp - 0x2b68]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push dword [ebp - 0x2b68]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x2b88]
lea eax, [ebp - 0x1230]
push str._AVDatTime_:__d_
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x43221e
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x4321fe
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x4321e4
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x43221e
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x43221e
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
push 0
call fcn.004cb764
mov ecx, dword [ebp - 0x2b88]
add esp, 4
cmp eax, ecx
jbe 0x432236
sub eax, ecx
jmp 0x432238
xor eax, eax
push eax
push str._DiffAVDatsTime_:__d_
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x4322e5
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x4322c5
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x4322ab
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x4322e5
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x4322e5
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
lea eax, [ebp - 0x2b68]
mov dword [ebp - 0x2b6c], 4
push eax
push 1
push 0
push 0x536f20
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x432342
lea eax, [ebp - 0x2b6c]
push eax
lea eax, [ebp - 0x2bb8]
push eax
lea eax, [ebp - 0x2b50]
push eax
push 0
push str.SubscriptionStatus
push dword [ebp - 0x2b68]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push dword [ebp - 0x2b68]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x2bb8]
lea eax, [ebp - 0x1230]
push str._SubscriptionStatus_:__d_
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x4323f4
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x4323d4
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x4323ba
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x4323f4
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x4323f4
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
lea eax, [ebp - 0x2b68]
mov dword [ebp - 0x2b6c], 4
push eax
push 1
push 0
push 0x536f20
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x432451
lea eax, [ebp - 0x2b6c]
push eax
lea eax, [ebp - 0x2bbc]
push eax
lea eax, [ebp - 0x2b50]
push eax
push 0
push str.SubscriptionType
push dword [ebp - 0x2b68]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push dword [ebp - 0x2b68]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x2bbc]
lea eax, [ebp - 0x1230]
push str._SubscriptionType_:__d_
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x432503
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x4324e3
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x4324c9
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x432503
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x432503
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
lea edx, [ebp - 0x2bac]
lea ecx, [ebp - 0x2bb0]
call fcn.0042eb10
push 0
test eax, eax
jne 0x4328a7
mov dword [ebp - 0x2b68], eax
mov dword [ebp - 0x2b74], eax
call fcn.004cb764
mov ecx, dword [ebp - 0x2bb0]
add esp, 4
cmp eax, ecx
jbe 0x432546
mov edx, eax
sub edx, ecx
mov dword [ebp - 0x2b68], edx
mov ecx, dword [ebp - 0x2bac]
cmp eax, ecx
jbe 0x432558
sub eax, ecx
mov dword [ebp - 0x2b74], eax
push 1
push str._WinUpdtStatus_:__d_
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x432606
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x4325e6
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x4325cc
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x432606
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x432606
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
push dword [ebp - 0x2bb0]
lea eax, [ebp - 0x1230]
push str._WinUpdtLastChecked_:__d_
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x4326b8
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x432698
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x43267e
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x4326b8
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x4326b8
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
push dword [ebp - 0x2bac]
lea eax, [ebp - 0x1230]
push str._WinUpdtLastInstalled_:__d_
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x43276a
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x43274a
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x432730
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x43276a
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x43276a
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
push dword [ebp - 0x2b68]
lea eax, [ebp - 0x1230]
push str._DiffWinUpdtLastChecked_:__d_
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x43281c
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x4327fc
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x4327e2
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x43281c
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x43281c
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
push dword [ebp - 0x2b74]
lea eax, [ebp - 0x1230]
push str._DiffWinUpdtLastInstalled_:__d_
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x432953
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x432933
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x43289f
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x432953
mov ecx, dword [ebp - 0x2b50]
jmp 0x43291f
push str._WinUpdtStatus_:__d_
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x432953
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x432933
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x432919
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x432953
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov dword [ebp - 0x2b60], ecx
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x432953
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
lea eax, [ebp - 0x2b68]
mov dword [ebp - 0x2b6c], 4
push eax
push 1
push 0
push 0x536f20
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4329b0
lea eax, [ebp - 0x2b6c]
push eax
lea eax, [ebp - 0x2bc0]
push eax
lea eax, [ebp - 0x2b50]
push eax
push 0
push 0x53712c
push dword [ebp - 0x2b68]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push dword [ebp - 0x2b68]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x2bc0]
lea eax, [ebp - 0x1230]
push str._ProxyEnabled_:__d_
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x432a62
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x432a42
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x432a28
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x432a62
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x432a62
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x2b6c], 0x400
mov word [ebp - 0x1630], ax
lea eax, [ebp - 0x2b68]
push eax
push 1
push 0
push 0x536f20
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x432ac8
lea eax, [ebp - 0x2b6c]
push eax
lea eax, [ebp - 0x1630]
push eax
lea eax, [ebp - 0x2b50]
push eax
push 0
push str.UIDBizSrvID
push dword [ebp - 0x2b68]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push dword [ebp - 0x2b68]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x1630]
push eax
push str._BizServerID_:___S__
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x432b7b
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x432b5b
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x432b41
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x432b7b
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x432b7b
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x2b6c], 0x400
mov word [ebp - 0x1630], ax
lea eax, [ebp - 0x2b68]
push eax
push 1
push 0
push 0x536f20
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x432d0b
lea eax, [ebp - 0x2b6c]
push eax
lea eax, [ebp - 0x1630]
push eax
lea eax, [ebp - 0x2b50]
push eax
push 0
push str.LocalIPString
push dword [ebp - 0x2b68]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x2b74], eax
test eax, eax
jne 0x432bf8
cmp dword [ebp - 0x2b50], 1
mov ecx, 0xd
cmovne eax, ecx
mov dword [ebp - 0x2b74], eax
push dword [ebp - 0x2b68]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0x2b74], 0
jne 0x432d0b
mov ecx, str.0.0.0.0
lea eax, [ebp - 0x1630]
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x432c46
test dx, dx
je 0x432c42
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x432c46
add eax, 4
add ecx, 4
test dx, dx
jne 0x432c20
xor eax, eax
jmp 0x432c4b
sbb eax, eax
or eax, 1
test eax, eax
je 0x432d0b
lea ecx, [ebp - 0x1630]
call fcn.0042ea90
push eax
push str._IPLocal_:___S__
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x432d0b
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x432ceb
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x432cd1
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x432d0b
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x432d0b
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x2b6c], 0x400
mov word [ebp - 0x1630], ax
lea eax, [ebp - 0x2b6c]
push eax
lea eax, [ebp - 0x1630]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea ecx, [ebp - 0x1630]
call fcn.0042ea90
push eax
push str._ComputerName_:___S__
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x432dea
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x432dca
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x432db0
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x432dea
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x432dea
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
lea eax, [ebp - 0x2bc4]
push eax
lea eax, [ebp - 0x2ba8]
push eax
push 0
call dword [sym.imp.NETAPI32.dll_NetGetJoinInformation]
test eax, eax
jne 0x432f72
push dword [ebp - 0x2bc4]
lea eax, [ebp - 0x1230]
push str._NetJoinStatus_:___u__
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x432eba
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x432e9a
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x432e80
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x432eba
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x432eba
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
mov ecx, dword [ebp - 0x2ba8]
call fcn.0042ea90
push eax
push str._DomainName_:___S__
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x432f72
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x432f52
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x432f38
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x432f72
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x432f72
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
mov eax, 1
mov byte [ebp - 0x230], 0
xor ecx, ecx
xorps xmm0, xmm0
push ebx
cpuid
mov dword [ebp - 0x2b50], ebx
movups xmmword [ebp - 0x20], xmm0
pop ebx
lea esi, [ebp - 0x20]
mov dword [esi], eax
lea eax, [ebp - 0x20]
mov esi, dword [ebp - 0x2b50]
mov dword [eax + 4], esi
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
test dword [ebp - 0x18], 0x80000000
je 0x433104
mov eax, 0x40000000
xor ecx, ecx
push ebx
cpuid
mov dword [ebp - 0x2b50], ebx
pop ebx
lea esi, [ebp - 0x20]
mov byte [ebp - 0x224], 0
mov dword [esi], eax
lea eax, [ebp - 0x20]
mov esi, dword [ebp - 0x2b50]
mov dword [eax + 4], esi
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x14]
push 0x1000
mov dword [ebp - 0x228], eax
lea eax, [ebp - 0x2a30]
push 0
push eax
call fcn.004beb60
lea edx, [ebp - 0x230]
mov dword [ebp - 0x2b50], 0x1000
add esp, 0xc
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x433028
lea eax, [ebp - 0x2b50]
sub edx, ecx
push eax
lea eax, [ebp - 0x2a30]
inc edx
push eax
lea ecx, [ebp - 0x230]
call fcn.00422ac0
push eax
push str._HypervisorVendor_:___s__
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x18
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, dword [ebp - 0x2b64]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x43310a
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x4330e2
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x4330c8
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x43310a
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x43310a
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
jmp 0x43310a
mov esi, dword [ebp - 0x2b64]
push 0x200
lea eax, [ebp - 0x1630]
push eax
push str.FIRMWARE_TYPE
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
jne 0x433142
movq xmm0, qword [str.BIOS]
mov ax, word [0x537254]
movq qword [ebp - 0x1630], xmm0
mov word [ebp - 0x1628], ax
lea ecx, [ebp - 0x1630]
call fcn.0042ea90
push eax
push str._FirmwareType_:___S__
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x4331fa
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x4331da
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x4331c0
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x4331fa
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x4331fa
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
push 0x200
lea eax, [ebp - 0x1630]
push eax
push str.PROCESSOR_IDENTIFIER
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x4332d1
lea ecx, [ebp - 0x1630]
call fcn.0042ea90
push eax
push str._ProcesssorIdentifier_:___S__
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x4332d1
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x4332b1
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x433297
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x4332d1
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x4332d1
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
push 0x200
lea eax, [ebp - 0x1630]
push eax
push str.PROCESSOR_LEVEL
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x4333ad
push 0xa
lea eax, [ebp - 0x1630]
push 0
push eax
call fcn.004cb73a
push eax
push str._ProcesssorLevel_:__u_
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x1c
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x4333ad
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x43338d
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x433373
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x4333ad
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x4333ad
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
push 0x200
lea eax, [ebp - 0x1630]
push eax
push str.NUMBER_OF_PROCESSORS
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x433489
push 0xa
lea eax, [ebp - 0x1630]
push 0
push eax
call fcn.004cb73a
push eax
push str._ProcesssorCount_:__u_
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x1c
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x433489
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x433469
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x43344f
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x433489
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x433489
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
push dword [0x58b084]
lea eax, [ebp - 0x1230]
push dword [0x58b07c]
push dword [0x58a074]
push dword [0x58b078]
push dword [0x58b080]
push str._UsersStats_:___LLAU_:__u___LLSU_:__u___LSAU_:__u___LSSU_:__u___LOU_:__u_
push 0x1000
push eax
call fcn.00428a60
add esp, 0x20
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x433553
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x433533
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x433519
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x433553
mov esi, eax
mov eax, dword [ebp - 0x2b50]
mov dword [ebp - 0x2b60], eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x433553
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
push 2
push str._VersionMeta_:__d
lea eax, [ebp - 0x1230]
push 0x1000
push eax
call fcn.00428a60
add esp, 0x10
lea eax, [ebp - 0x1230]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x2b54], eax
test esi, esi
je 0x43369a
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, eax
jae 0x4335e5
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x4335cb
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x433605
mov ecx, dword [ebp - 0x2b50]
mov esi, eax
mov eax, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], ecx
lea ecx, [edi + esi]
add edi, eax
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x433605
push eax
lea eax, [ebp - 0x1230]
push eax
push ecx
call fcn.004becc0
add esp, 0xc
test esi, esi
je 0x43369a
mov ecx, dword [ebp - 0x2b60]
mov edx, ecx
sub edx, edi
cmp edx, 2
jae 0x433669
mov eax, 2
sub eax, edx
mov edx, 0x1000
cmp eax, 0x1000
cmovb eax, edx
add eax, ecx
push eax
push esi
mov dword [ebp - 0x2b50], eax
call fcn.004c5280
add esp, 8
test eax, eax
jne 0x433655
push str._CContiguousBuffer__realloc_failed
call fcn.00428ad0
add esp, 4
jmp 0x433682
mov esi, eax
mov eax, dword [ebp - 0x2b50]
mov dword [ebp - 0x2b64], esi
mov dword [ebp - 0x2b60], eax
lea ecx, [edi + esi]
add edi, 2
mov dword [ebp - 0x2b5c], edi
test ecx, ecx
je 0x433682
mov ax, word [0x5344f0]
mov word [ecx], ax
test esi, esi
je 0x43369a
mov dword [0x589de8], esi
xor esi, esi
mov dword [0x589dec], edi
mov dword [ebp - 0x2b64], esi
xor edi, edi
mov eax, dword [ebp - 0x2ba8]
test eax, eax
je 0x4336ad
push eax
call dword [sym.imp.NETAPI32.dll_NetApiBufferFree]
mov eax, dword [ebp - 0x2ba4]
test eax, eax
je 0x4336c0
push eax
call fcn.004c4990
add esp, 4
mov eax, dword [ebp - 0x2ba0]
test eax, eax
je 0x4336d3
push eax
call fcn.004c4990
add esp, 4
mov eax, dword [ebp - 0x2b9c]
test eax, eax
je 0x4336e6
push eax
call fcn.004c4990
add esp, 4
mov eax, dword [ebp - 0x2b98]
test eax, eax
je 0x4336f9
push eax
call fcn.004c4990
add esp, 4
mov eax, dword [ebp - 0x2b94]
test eax, eax
je 0x43370c
push eax
call fcn.004c4990
add esp, 4
mov eax, dword [ebp - 0x2b90]
test eax, eax
je 0x43371f
push eax
call fcn.004c4990
add esp, 4
mov eax, dword [ebp - 0x2b8c]
test eax, eax
je 0x433730
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x2b80]
test eax, eax
je 0x433741
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp - 4], 1
test esi, esi
je 0x433755
push esi
call fcn.004c4990
add esp, 4
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004bcc56
mov esp, ebp
pop ebp
ret