Function at 0x4aed49
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
mov eax, 0x12cc
call fcn.00576c30
sub esp, eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x11a0], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x119c], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x11a8], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x11a4], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x11b0], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x11ac], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x11b8], eax
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0x11b4], eax
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0x11c0], eax
mov eax, dword [ebp + 0x40]
mov dword [ebp - 0x11bc], eax
mov eax, dword [ebp + 0x4c]
mov dword [ebp - 0x11c8], eax
mov eax, dword [ebp + 0x50]
mov dword [ebp - 0x11c4], eax
mov eax, dword [ebp + 0x70]
mov dword [ebp - 0x11d0], eax
mov eax, dword [ebp + 0x74]
mov dword [ebp - 0x11cc], eax
mov eax, dword [ebp + 0x78]
mov dword [ebp - 0x11d8], eax
mov eax, dword [ebp + 0x7c]
mov dword [ebp - 0x11d4], eax
mov eax, dword [ebp + 0x80]
mov dword [ebp - 0x11e0], eax
mov eax, dword [ebp + 0x84]
mov dword [ebp - 0x11dc], eax
mov eax, dword [ebp + 0x8c]
mov dword [ebp - 0x11e8], eax
mov eax, dword [ebp + 0x90]
mov dword [ebp - 0x11e4], eax
mov eax, dword [ebp + 0xa4]
mov dword [ebp - 0x11f0], eax
mov eax, dword [ebp + 0xa8]
mov dword [ebp - 0x11ec], eax
lea eax, [ebp - 0x1190]
mov dword [esp + 0x34], eax
lea eax, [ebp - 0x1188]
mov dword [esp + 0x30], eax
lea eax, [ebp - 0x1178]
mov dword [esp + 0x2c], eax
lea eax, [ebp - 0x1170]
mov dword [esp + 0x28], eax
lea eax, [ebp - 0x116c]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x1168]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x1164]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1148]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1144]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1140]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x13c]
mov dword [esp + 8], eax
lea eax, [ebp - 0x138]
mov dword [esp + 4], eax
lea eax, [ebp - 0x134]
mov dword [esp], eax
call sym.___super_fnc__977
mov eax, dword [ebp - 0x13c]
test eax, eax
je 0x4aeed7
mov eax, 0
jmp 0x4b064b
lea eax, [ebp - 0x1198]
mov dword [esp + 0x60], eax
lea eax, [ebp - 0x1194]
mov dword [esp + 0x5c], eax
lea eax, [ebp - 0x1190]
mov dword [esp + 0x58], eax
lea eax, [ebp - 0x118c]
mov dword [esp + 0x54], eax
lea eax, [ebp - 0x1188]
mov dword [esp + 0x50], eax
lea eax, [ebp - 0x1184]
mov dword [esp + 0x4c], eax
lea eax, [ebp - 0x117c]
mov dword [esp + 0x48], eax
lea eax, [ebp - 0x1178]
mov dword [esp + 0x44], eax
lea eax, [ebp - 0x1174]
mov dword [esp + 0x40], eax
lea eax, [ebp - 0x1170]
mov dword [esp + 0x3c], eax
lea eax, [ebp - 0x116c]
mov dword [esp + 0x38], eax
lea eax, [ebp - 0x1168]
mov dword [esp + 0x34], eax
lea eax, [ebp - 0x1164]
mov dword [esp + 0x30], eax
lea eax, [ebp - 0x1160]
mov dword [esp + 0x2c], eax
lea eax, [ebp - 0x115c]
mov dword [esp + 0x28], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x1154]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x114c]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1148]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1144]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1140]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x113c]
mov dword [esp + 8], eax
lea eax, [ebp - 0x93c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__978
mov eax, dword [ebp - 0x1150]
test eax, eax
jne 0x4aefe9
mov eax, 0
jmp 0x4b064b
lea eax, [ebp - 0x1158]
mov dword [esp], eax
call sym.___super_fnc__979
mov eax, dword [ebp - 0x130]
cmp eax, 0xa
je 0x4af891
cmp eax, 0xa
ja 0x4aff9e
cmp eax, 5
je 0x4af022
cmp eax, 6
je 0x4af2a2
jmp 0x4aff9e
mov eax, dword [ebp - 0x12c]
cmp eax, 2
je 0x4af12c
cmp eax, 2
ja 0x4b01ee
test eax, eax
je 0x4af048
cmp eax, 1
je 0x4af0b5
jmp 0x4b01ee
lea eax, [ebp - 0x1188]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x117c]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x1170]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x115c]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1148]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x93c]
mov dword [esp + 8], eax
lea eax, [ebp - 0x13c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x138]
mov dword [esp], eax
call sym.___super_fnc__980
jmp 0x4af29d
lea eax, [ebp - 0x1188]
mov dword [esp + 0x28], eax
lea eax, [ebp - 0x1180]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x1178]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x1170]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x116c]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1168]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1160]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 8], eax
lea eax, [ebp - 0x93c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__981
jmp 0x4af29d
movzx eax, byte [ebp - 0x1a]
cmp al, 1
jne 0x4af21c
movzx eax, word [ebp - 0x1c]
cmp ax, 0x200
jne 0x4af1af
lea eax, [ebp - 0x1198]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x1194]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x117c]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x116c]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1164]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1160]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 8], eax
lea eax, [ebp - 0x93c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__982
jmp 0x4af29c
lea eax, [ebp - 0x118c]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x1184]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x116c]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1168]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1148]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1144]
mov dword [esp + 8], eax
lea eax, [ebp - 0x93c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__983
jmp 0x4af29c
lea eax, [ebp - 0x1194]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1178]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1170]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1168]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1160]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1140]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__984
lea eax, [ebp - 0x1168]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 4], eax
lea eax, [ebp - 0x93c]
mov dword [esp], eax
call sym.___super_fnc__985
nop
jmp 0x4b01ee
mov eax, dword [ebp - 0x12c]
cmp eax, 3
je 0x4af5a6
cmp eax, 3
ja 0x4b01f1
cmp eax, 2
je 0x4af4c4
cmp eax, 2
ja 0x4b01f1
test eax, eax
je 0x4af2de
cmp eax, 1
je 0x4af3e2
jmp 0x4b01f1
movzx eax, byte [ebp - 0x1a]
cmp al, 1
jne 0x4af35d
lea eax, [ebp - 0x118c]
mov dword [esp + 0x28], eax
lea eax, [ebp - 0x1188]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x1174]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x116c]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1160]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x115c]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1154]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 8], eax
lea eax, [ebp - 0x93c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__986
jmp 0x4af88c
lea eax, [ebp - 0x1198]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1188]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1180]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1170]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x116c]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1144]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__987
lea eax, [ebp - 0x1170]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 4], eax
lea eax, [ebp - 0x93c]
mov dword [esp], eax
call sym.___super_fnc__988
jmp 0x4af88c
movzx eax, byte [ebp - 0x1a]
cmp al, 1
jne 0x4af457
lea eax, [ebp - 0x1198]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x117c]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x1178]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1174]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1170]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x93c]
mov dword [esp + 8], eax
lea eax, [ebp - 0x13c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x138]
mov dword [esp], eax
call sym.___super_fnc__989
jmp 0x4af88c
lea eax, [ebp - 0x1188]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x1184]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x1180]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x117c]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1178]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1140]
mov dword [esp + 8], eax
lea eax, [ebp - 0x93c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__990
jmp 0x4af88c
movzx eax, byte [ebp - 0x1a]
cmp al, 1
jne 0x4af539
lea eax, [ebp - 0x1194]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x118c]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x117c]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1168]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x115c]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1144]
mov dword [esp + 8], eax
lea eax, [ebp - 0x93c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__991
jmp 0x4af88c
lea eax, [ebp - 0x1194]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x1184]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x1180]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1174]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1164]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1154]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 8], eax
lea eax, [ebp - 0x93c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__992
jmp 0x4af88c
movzx eax, byte [ebp - 0x1a]
cmp al, 1
jne 0x4af641
lea eax, [ebp - 0x1194]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x1184]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1178]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1170]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x116c]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x115c]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1148]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__993
lea eax, [ebp - 0x1184]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 4], eax
lea eax, [ebp - 0x93c]
mov dword [esp], eax
call sym.___super_fnc__994
jmp 0x4af88b
mov eax, dword [ebp - 0x1158]
mov edx, dword [ebp - 0x1160]
mov ecx, dword [ebp - 0x1158]
mov ebx, dword [ebp - 0x1158]
mov edi, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11f4], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11f8], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11fc], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1200], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1204], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1208], esi
mov esi, dword [ebp - 0x1174]
mov dword [ebp - 0x120c], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1210], esi
mov esi, dword [ebp - 0x1174]
mov dword [ebp - 0x1214], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1218], esi
mov esi, dword [ebp - 0x1140]
mov dword [ebp - 0x121c], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1220], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1224], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1228], esi
mov esi, dword [ebp - 0x1148]
mov dword [ebp - 0x122c], esi
mov esi, dword [ebp - 0x1188]
mov dword [ebp - 0x1230], esi
mov esi, dword [ebp - 0x1158]
mov dword [esp + 0x9c], eax
fld qword [0x58d928]
fstp qword [esp + 0x94]
mov dword [esp + 0x90], edx
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x84], edi
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x80], eax
mov eax, dword [ebp - 0x11f8]
mov dword [esp + 0x7c], eax
mov eax, dword [ebp - 0x11fc]
mov dword [esp + 0x78], eax
mov eax, dword [ebp - 0x1200]
mov dword [esp + 0x74], eax
mov eax, dword [ebp - 0x1204]
mov dword [esp + 0x70], eax
mov dword [esp + 0x6c], 0x38
mov eax, dword [ebp - 0x1208]
mov dword [esp + 0x68], eax
mov dword [esp + 0x64], 0x10f
mov eax, dword [ebp - 0x120c]
mov dword [esp + 0x60], eax
mov eax, dword [ebp - 0x1210]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x1214]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x1218]
mov dword [esp + 0x54], eax
fld qword [0x58d918]
fstp qword [esp + 0x4c]
mov eax, dword [ebp - 0x121c]
mov dword [esp + 0x48], eax
mov eax, dword [ebp - 0x1220]
mov dword [esp + 0x44], eax
fld qword [0x58d900]
fstp qword [esp + 0x3c]
mov eax, dword [ebp - 0x1224]
mov dword [esp + 0x38], eax
mov eax, dword [ebp - 0x1228]
mov dword [esp + 0x34], eax
mov eax, dword [ebp - 0x122c]
mov dword [esp + 0x30], eax
fld qword [0x58d928]
fstp qword [esp + 0x28]
fld1
fstp qword [esp + 0x20]
mov eax, dword [ebp - 0x1230]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], esi
fld qword [0x58d928]
fstp qword [esp + 0x10]
fld qword [0x58d900]
fstp qword [esp + 8]
fld qword [0x58d900]
fstp qword [esp]
call sym._ExportWinAPI
mov dword [ebp - 0x1188], eax
mov eax, dword [ebp - 0x1188]
mov ecx, eax
mov eax, dword [ebp - 0x1150]
lea edx, [ebp - 0x93c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.Windows_Server_2012_R2__wS
mov dword [esp + 4], 0x400
mov dword [esp], eax
call ecx
mov dword [ebp - 0x1158], eax
nop
jmp 0x4b01f1
mov eax, dword [ebp - 0x12c]
test eax, eax
jne 0x4b01f4
movzx eax, byte [ebp - 0x1a]
cmp al, 1
jne 0x4afd52
mov eax, dword [ebp - 0x128]
cmp eax, 0x55ef
jbe 0x4afb07
mov eax, dword [ebp - 0x1158]
mov edx, dword [ebp - 0x1184]
mov ecx, dword [ebp - 0x1158]
mov ebx, dword [ebp - 0x1158]
mov edi, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11f4], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11f8], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11fc], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1200], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1204], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1208], esi
mov esi, dword [ebp - 0x1144]
mov dword [ebp - 0x120c], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1210], esi
mov esi, dword [ebp - 0x1180]
mov dword [ebp - 0x1214], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1218], esi
mov esi, dword [ebp - 0x115c]
mov dword [ebp - 0x121c], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1220], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1224], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1228], esi
mov esi, dword [ebp - 0x138]
mov dword [ebp - 0x122c], esi
mov esi, dword [ebp - 0x1140]
mov dword [ebp - 0x1230], esi
mov esi, dword [ebp - 0x1158]
mov dword [esp + 0x9c], eax
fld qword [0x58d910]
fstp qword [esp + 0x94]
mov dword [esp + 0x90], edx
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x84], edi
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x80], eax
mov eax, dword [ebp - 0x11f8]
mov dword [esp + 0x7c], eax
mov eax, dword [ebp - 0x11fc]
mov dword [esp + 0x78], eax
mov eax, dword [ebp - 0x1200]
mov dword [esp + 0x74], eax
mov eax, dword [ebp - 0x1204]
mov dword [esp + 0x70], eax
mov dword [esp + 0x6c], 0x38
mov eax, dword [ebp - 0x1208]
mov dword [esp + 0x68], eax
mov dword [esp + 0x64], 0x10f
mov eax, dword [ebp - 0x120c]
mov dword [esp + 0x60], eax
mov eax, dword [ebp - 0x1210]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x1214]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x1218]
mov dword [esp + 0x54], eax
fld1
fstp qword [esp + 0x4c]
mov eax, dword [ebp - 0x121c]
mov dword [esp + 0x48], eax
mov eax, dword [ebp - 0x1220]
mov dword [esp + 0x44], eax
fldz
fstp qword [esp + 0x3c]
mov eax, dword [ebp - 0x1224]
mov dword [esp + 0x38], eax
mov eax, dword [ebp - 0x1228]
mov dword [esp + 0x34], eax
mov eax, dword [ebp - 0x122c]
mov dword [esp + 0x30], eax
fld qword [0x58d910]
fstp qword [esp + 0x28]
fld qword [0x58d8f0]
fstp qword [esp + 0x20]
mov eax, dword [ebp - 0x1230]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], esi
fld qword [0x58d908]
fstp qword [esp + 0x10]
fld qword [0x58d900]
fstp qword [esp + 8]
fld qword [0x58d8f8]
fstp qword [esp]
call sym._ExportWinAPI
mov dword [ebp - 0x118c], eax
mov eax, dword [ebp - 0x118c]
mov ecx, eax
mov eax, dword [ebp - 0x1150]
lea edx, [ebp - 0x93c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.Windows_11__wS
mov dword [esp + 4], 0x400
mov dword [esp], eax
call ecx
mov dword [ebp - 0x1158], eax
jmp 0x4aff98
mov eax, dword [ebp - 0x1158]
mov edx, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x1158]
mov ebx, dword [ebp - 0x1158]
mov edi, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11f4], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11f8], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11fc], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1200], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1204], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1208], esi
mov esi, dword [ebp - 0x1164]
mov dword [ebp - 0x120c], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1210], esi
mov esi, dword [ebp - 0x1154]
mov dword [ebp - 0x1214], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1218], esi
mov esi, dword [ebp - 0x1148]
mov dword [ebp - 0x121c], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1220], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1224], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1228], esi
mov esi, dword [ebp - 0x116c]
mov dword [ebp - 0x122c], esi
mov esi, dword [ebp - 0x118c]
mov dword [ebp - 0x1230], esi
mov esi, dword [ebp - 0x1158]
mov dword [esp + 0x9c], eax
fld qword [0x58d920]
fstp qword [esp + 0x94]
mov dword [esp + 0x90], edx
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x84], edi
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x80], eax
mov eax, dword [ebp - 0x11f8]
mov dword [esp + 0x7c], eax
mov eax, dword [ebp - 0x11fc]
mov dword [esp + 0x78], eax
mov eax, dword [ebp - 0x1200]
mov dword [esp + 0x74], eax
mov eax, dword [ebp - 0x1204]
mov dword [esp + 0x70], eax
mov dword [esp + 0x6c], 0x38
mov eax, dword [ebp - 0x1208]
mov dword [esp + 0x68], eax
mov dword [esp + 0x64], 0x10f
mov eax, dword [ebp - 0x120c]
mov dword [esp + 0x60], eax
mov eax, dword [ebp - 0x1210]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x1214]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x1218]
mov dword [esp + 0x54], eax
fldz
fstp qword [esp + 0x4c]
mov eax, dword [ebp - 0x121c]
mov dword [esp + 0x48], eax
mov eax, dword [ebp - 0x1220]
mov dword [esp + 0x44], eax
fld qword [0x58d8f0]
fstp qword [esp + 0x3c]
mov eax, dword [ebp - 0x1224]
mov dword [esp + 0x38], eax
mov eax, dword [ebp - 0x1228]
mov dword [esp + 0x34], eax
mov eax, dword [ebp - 0x122c]
mov dword [esp + 0x30], eax
fld qword [0x58d910]
fstp qword [esp + 0x28]
fld qword [0x58d910]
fstp qword [esp + 0x20]
mov eax, dword [ebp - 0x1230]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], esi
fld qword [0x58d8f0]
fstp qword [esp + 0x10]
fld qword [0x58d920]
fstp qword [esp + 8]
fld1
fstp qword [esp]
call sym._ExportWinAPI
mov dword [ebp - 0x1190], eax
mov eax, dword [ebp - 0x1190]
mov ecx, eax
mov eax, dword [ebp - 0x1150]
lea edx, [ebp - 0x93c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.Windows_10__wS
mov dword [esp + 4], 0x400
mov dword [esp], eax
call ecx
mov dword [ebp - 0x1158], eax
jmp 0x4aff98
mov eax, dword [ebp - 0x1158]
mov edx, dword [ebp - 0x116c]
mov ecx, dword [ebp - 0x1158]
mov ebx, dword [ebp - 0x1158]
mov edi, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11f4], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11f8], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11fc], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1200], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1204], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1208], esi
mov esi, dword [ebp - 0x138]
mov dword [ebp - 0x120c], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1210], esi
mov esi, dword [ebp - 0x117c]
mov dword [ebp - 0x1214], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1218], esi
mov esi, dword [ebp - 0x1174]
mov dword [ebp - 0x121c], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1220], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1224], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1228], esi
mov esi, dword [ebp - 0x117c]
mov dword [ebp - 0x122c], esi
mov esi, dword [ebp - 0x117c]
mov dword [ebp - 0x1230], esi
mov esi, dword [ebp - 0x1158]
mov dword [esp + 0x9c], eax
fld qword [0x58d900]
fstp qword [esp + 0x94]
mov dword [esp + 0x90], edx
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x84], edi
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x80], eax
mov eax, dword [ebp - 0x11f8]
mov dword [esp + 0x7c], eax
mov eax, dword [ebp - 0x11fc]
mov dword [esp + 0x78], eax
mov eax, dword [ebp - 0x1200]
mov dword [esp + 0x74], eax
mov eax, dword [ebp - 0x1204]
mov dword [esp + 0x70], eax
mov dword [esp + 0x6c], 0x38
mov eax, dword [ebp - 0x1208]
mov dword [esp + 0x68], eax
mov dword [esp + 0x64], 0x10f
mov eax, dword [ebp - 0x120c]
mov dword [esp + 0x60], eax
mov eax, dword [ebp - 0x1210]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x1214]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x1218]
mov dword [esp + 0x54], eax
fld qword [0x58d910]
fstp qword [esp + 0x4c]
mov eax, dword [ebp - 0x121c]
mov dword [esp + 0x48], eax
mov eax, dword [ebp - 0x1220]
mov dword [esp + 0x44], eax
fld qword [0x58d910]
fstp qword [esp + 0x3c]
mov eax, dword [ebp - 0x1224]
mov dword [esp + 0x38], eax
mov eax, dword [ebp - 0x1228]
mov dword [esp + 0x34], eax
mov eax, dword [ebp - 0x122c]
mov dword [esp + 0x30], eax
fld qword [0x58d908]
fstp qword [esp + 0x28]
fld qword [0x58d928]
fstp qword [esp + 0x20]
mov eax, dword [ebp - 0x1230]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], esi
fldz
fstp qword [esp + 0x10]
fld qword [0x58d900]
fstp qword [esp + 8]
fld1
fstp qword [esp]
call sym._ExportWinAPI
mov dword [ebp - 0x1194], eax
mov eax, dword [ebp - 0x1194]
mov ecx, eax
mov eax, dword [ebp - 0x1150]
lea edx, [ebp - 0x93c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.Windows_Server_2016_or_higher__wS
mov dword [esp + 4], 0x400
mov dword [esp], eax
call ecx
mov dword [ebp - 0x1158], eax
nop
jmp 0x4b01f4
mov eax, dword [ebp - 0x1158]
mov edx, dword [ebp - 0x1154]
mov ecx, dword [ebp - 0x1158]
mov ebx, dword [ebp - 0x1158]
mov edi, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11f4], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11f8], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11fc], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1200], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1204], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1208], esi
mov esi, dword [ebp - 0x1164]
mov dword [ebp - 0x120c], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1210], esi
mov esi, dword [ebp - 0x118c]
mov dword [ebp - 0x1214], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1218], esi
mov esi, dword [ebp - 0x116c]
mov dword [ebp - 0x121c], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1220], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1224], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1228], esi
mov esi, dword [ebp - 0x1160]
mov dword [ebp - 0x122c], esi
mov esi, dword [ebp - 0x1160]
mov dword [ebp - 0x1230], esi
mov esi, dword [ebp - 0x1158]
mov dword [esp + 0x9c], eax
fld qword [0x58d8f8]
fstp qword [esp + 0x94]
mov dword [esp + 0x90], edx
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x84], edi
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x80], eax
mov eax, dword [ebp - 0x11f8]
mov dword [esp + 0x7c], eax
mov eax, dword [ebp - 0x11fc]
mov dword [esp + 0x78], eax
mov eax, dword [ebp - 0x1200]
mov dword [esp + 0x74], eax
mov eax, dword [ebp - 0x1204]
mov dword [esp + 0x70], eax
mov dword [esp + 0x6c], 0x38
mov eax, dword [ebp - 0x1208]
mov dword [esp + 0x68], eax
mov dword [esp + 0x64], 0x10f
mov eax, dword [ebp - 0x120c]
mov dword [esp + 0x60], eax
mov eax, dword [ebp - 0x1210]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x1214]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x1218]
mov dword [esp + 0x54], eax
fld qword [0x58d918]
fstp qword [esp + 0x4c]
mov eax, dword [ebp - 0x121c]
mov dword [esp + 0x48], eax
mov eax, dword [ebp - 0x1220]
mov dword [esp + 0x44], eax
fld qword [0x58d920]
fstp qword [esp + 0x3c]
mov eax, dword [ebp - 0x1224]
mov dword [esp + 0x38], eax
mov eax, dword [ebp - 0x1228]
mov dword [esp + 0x34], eax
mov eax, dword [ebp - 0x122c]
mov dword [esp + 0x30], eax
fldz
fstp qword [esp + 0x28]
fldz
fstp qword [esp + 0x20]
mov eax, dword [ebp - 0x1230]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], esi
fld qword [0x58d8f0]
fstp qword [esp + 0x10]
fld qword [0x58d908]
fstp qword [esp + 8]
fld qword [0x58d900]
fstp qword [esp]
call sym._ExportWinAPI
mov dword [ebp - 0x1198], eax
mov eax, dword [ebp - 0x1198]
mov ecx, eax
mov eax, dword [ebp - 0x1150]
lea edx, [ebp - 0x93c]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], str.Unknown
mov dword [esp + 8], str.Windows__wS__wS
mov dword [esp + 4], 0x400
mov dword [esp], eax
call ecx
mov dword [ebp - 0x1158], eax
jmp 0x4b01f5
nop
jmp 0x4b01f5
nop
jmp 0x4b01f5
nop
mov eax, dword [ebp - 0x1158]
test eax, eax
jg 0x4b0419
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x11f4], eax
mov edx, dword [ebp - 0x1160]
mov ecx, dword [ebp - 0x1160]
mov ebx, dword [ebp - 0x1158]
mov esi, dword [ebp - 0x1164]
mov edi, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x11f8], eax
mov eax, dword [ebp - 0x1148]
mov dword [ebp - 0x11fc], eax
mov eax, dword [ebp - 0x1178]
mov dword [ebp - 0x1200], eax
mov eax, dword [ebp - 0x1140]
mov dword [ebp - 0x1204], eax
mov eax, dword [ebp - 0x117c]
mov dword [ebp - 0x1208], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x120c], eax
mov eax, dword [ebp - 0x115c]
mov dword [ebp - 0x1210], eax
mov eax, dword [ebp - 0x1194]
mov dword [ebp - 0x1214], eax
mov eax, dword [ebp - 0x1198]
mov dword [ebp - 0x1218], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x121c], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x1220], eax
mov eax, dword [ebp - 0x1160]
mov dword [ebp - 0x1224], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x1228], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x122c], eax
mov eax, dword [ebp - 0x1150]
mov dword [ebp - 0x1230], eax
mov eax, dword [ebp - 0x1194]
mov dword [ebp - 0x1234], eax
fld qword [0x58d908]
fstp qword [esp + 0x98]
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x94], eax
fld qword [0x58d910]
fstp qword [esp + 0x8c]
mov dword [esp + 0x88], edx
mov dword [esp + 0x84], ecx
mov dword [esp + 0x80], ebx
mov dword [esp + 0x7c], esi
mov dword [esp + 0x78], edi
mov eax, dword [ebp - 0x11f8]
mov dword [esp + 0x74], eax
fldz
fstp qword [esp + 0x6c]
mov eax, dword [ebp - 0x11fc]
mov dword [esp + 0x68], eax
fldz
fstp qword [esp + 0x60]
mov eax, dword [ebp - 0x1200]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x1204]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x1208]
mov dword [esp + 0x54], eax
mov eax, dword [ebp - 0x120c]
mov dword [esp + 0x50], eax
mov eax, dword [ebp - 0x1210]
mov dword [esp + 0x4c], eax
fld qword [0x58d910]
fstp qword [esp + 0x44]
mov eax, dword [ebp - 0x1214]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0x1218]
mov dword [esp + 0x3c], eax
fld qword [0x58d8f8]
fstp qword [esp + 0x34]
mov eax, dword [ebp - 0x121c]
mov dword [esp + 0x30], eax
mov eax, dword [ebp - 0x1220]
mov dword [esp + 0x2c], eax
mov eax, dword [ebp - 0x1224]
mov dword [esp + 0x28], eax
fld qword [0x58d928]
fstp qword [esp + 0x20]
mov eax, dword [ebp - 0x1228]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x122c]
mov dword [esp + 0x18], eax
mov eax, dword [ebp - 0x1230]
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x1234]
mov dword [esp + 0x10], eax
fld1
fstp qword [esp + 8]
fld qword [0x58d918]
fstp qword [esp]
call sym._ByteFree
mov eax, 0
jmp 0x4b064b
mov eax, dword [ebp - 0x1158]
cmp eax, 0x3ff
jle 0x4b0645
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x11f4], eax
mov edx, dword [ebp - 0x1188]
mov ecx, dword [ebp - 0x138]
mov ebx, dword [ebp - 0x1158]
mov esi, dword [ebp - 0x115c]
mov edi, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x11f8], eax
mov eax, dword [ebp - 0x1190]
mov dword [ebp - 0x11fc], eax
mov eax, dword [ebp - 0x118c]
mov dword [ebp - 0x1200], eax
mov eax, dword [ebp - 0x115c]
mov dword [ebp - 0x1204], eax
mov eax, dword [ebp - 0x116c]
mov dword [ebp - 0x1208], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x120c], eax
mov eax, dword [ebp - 0x1144]
mov dword [ebp - 0x1210], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x1214], eax
mov eax, dword [ebp - 0x1190]
mov dword [ebp - 0x1218], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x121c], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x1220], eax
mov eax, dword [ebp - 0x1154]
mov dword [ebp - 0x1224], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x1228], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x122c], eax
mov eax, dword [ebp - 0x1150]
mov dword [ebp - 0x1230], eax
mov eax, dword [ebp - 0x1148]
mov dword [ebp - 0x1234], eax
fld qword [0x58d8f8]
fstp qword [esp + 0x98]
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x94], eax
fld qword [0x58d8f8]
fstp qword [esp + 0x8c]
mov dword [esp + 0x88], edx
mov dword [esp + 0x84], ecx
mov dword [esp + 0x80], ebx
mov dword [esp + 0x7c], esi
mov dword [esp + 0x78], edi
mov eax, dword [ebp - 0x11f8]
mov dword [esp + 0x74], eax
fld qword [0x58d910]
fstp qword [esp + 0x6c]
mov eax, dword [ebp - 0x11fc]
mov dword [esp + 0x68], eax
fld qword [0x58d918]
fstp qword [esp + 0x60]
mov eax, dword [ebp - 0x1200]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x1204]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x1208]
mov dword [esp + 0x54], eax
mov eax, dword [ebp - 0x120c]
mov dword [esp + 0x50], eax
mov eax, dword [ebp - 0x1210]
mov dword [esp + 0x4c], eax
fld qword [0x58d908]
fstp qword [esp + 0x44]
mov eax, dword [ebp - 0x1214]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0x1218]
mov dword [esp + 0x3c], eax
fld1
fstp qword [esp + 0x34]
mov eax, dword [ebp - 0x121c]
mov dword [esp + 0x30], eax
mov eax, dword [ebp - 0x1220]
mov dword [esp + 0x2c], eax
mov eax, dword [ebp - 0x1224]
mov dword [esp + 0x28], eax
fld qword [0x58d908]
fstp qword [esp + 0x20]
mov eax, dword [ebp - 0x1228]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x122c]
mov dword [esp + 0x18], eax
mov eax, dword [ebp - 0x1230]
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x1234]
mov dword [esp + 0x10], eax
fld qword [0x58d8f8]
fstp qword [esp + 8]
fld qword [0x58d928]
fstp qword [esp]
call sym._ByteFree
mov eax, 0
jmp 0x4b064b
mov eax, dword [ebp - 0x1150]
add esp, 0x12cc
pop ebx
pop esi
pop edi
pop ebp
ret