Function at 0x42fbd0
Capabilities:
Connect to wmi namespace via wbemlocator
Get common file path
Get disk information
Get mac address on windows
Reference wmi statements

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f38d3
mov eax, dword fs:[0]
push eax
sub esp, 0xbb4
mov eax, dword [0x52d474]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x9ac], ecx
push 0x200
push 0
mov eax, dword [ebp - 0x9ac]
push eax
call fcn.00493270
add esp, 0xc
push 0x200
push 0
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x200
push ecx
call fcn.00493270
add esp, 0xc
push 0x200
push 0
mov edx, dword [ebp - 0x9ac]
add edx, 0x400
push edx
call fcn.00493270
add esp, 0xc
push 0x200
push 0
mov eax, dword [ebp - 0x9ac]
add eax, 0x600
push eax
call fcn.00493270
add esp, 0xc
push 0x200
push 0
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x800
push ecx
call fcn.00493270
add esp, 0xc
push 0x200
push 0
mov edx, dword [ebp - 0x9ac]
add edx, 0xa00
push edx
call fcn.00493270
add esp, 0xc
push 0x200
push 0
mov eax, dword [ebp - 0x9ac]
add eax, 0xc00
push eax
call fcn.00493270
add esp, 0xc
push 0x200
push 0
mov ecx, dword [ebp - 0x9ac]
add ecx, 0xe00
push ecx
call fcn.00493270
add esp, 0xc
push 0x200
push 0
mov edx, dword [ebp - 0x9ac]
add edx, 0x1000
push edx
call fcn.00493270
add esp, 0xc
push 0x200
push 0
mov eax, dword [ebp - 0x9ac]
add eax, 0x1200
push eax
call fcn.00493270
add esp, 0xc
push 0x200
push 0
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x1400
push ecx
call fcn.00493270
add esp, 0xc
push 0x200
push 0
mov edx, dword [ebp - 0x9ac]
add edx, 0x1600
push edx
call fcn.00493270
add esp, 0xc
push 0
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov dword [ebp - 0x9a8], eax
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43088e
mov dword [ebp - 0xa04], 0
lea eax, [ebp - 0xa04]
push eax
push 0x50b5ec
push 1
push 0
push 0x50b6bc
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43088e
mov dword [ebp - 0x9b4], 0
lea ecx, [ebp - 0x9b4]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4fa498
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xa04]
push ecx
mov edx, dword [eax + 0xc]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43087a
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
mov eax, dword [ebp - 0x9b4]
push eax
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x430866
mov dword [ebp - 0x9b0], 0
lea ecx, [ebp - 0x9b0]
push ecx
push 0
push 0x30
push 0x4fa4b0
push 0x4fa504
mov edx, dword [ebp - 0x9b4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b4]
push ecx
mov edx, dword [eax + 0x50]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x42ff80
mov dword [ebp - 0xa94], 0
mov dword [ebp - 0x9dc], 0
lea eax, [ebp - 0xa94]
push eax
lea ecx, [ebp - 0x9dc]
push ecx
push 1
push 0xffffffffffffffff
mov edx, dword [ebp - 0x9b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b0]
push ecx
mov edx, dword [eax + 0x10]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x42ff6c
cmp dword [ebp - 0xa94], 0
jbe 0x42ff6c
xor eax, eax
mov word [ebp - 0xb18], ax
xor ecx, ecx
mov dword [ebp - 0xb16], ecx
mov dword [ebp - 0xb12], ecx
mov dword [ebp - 0xb0e], ecx
mov word [ebp - 0xb0a], cx
push 0
push 0
lea edx, [ebp - 0xb18]
push edx
push 0
push str.UUID
mov eax, dword [ebp - 0x9dc]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9dc]
push edx
mov eax, dword [ecx + 0x10]
call eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x42ff58
push 0x100
mov ecx, dword [ebp - 0xb10]
push ecx
mov edx, dword [ebp - 0x9ac]
add edx, 0x600
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea eax, [ebp - 0xb18]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0x9dc]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9dc]
push eax
mov ecx, dword [edx + 8]
call ecx
mov edx, dword [ebp - 0x9b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b0]
push ecx
mov edx, dword [eax + 8]
call edx
lea eax, [ebp - 0x9b0]
push eax
push 0
push 0x30
push str.SELECT__FROM_Win32_ComputerSystemProduct
push 0x4fa56c
mov ecx, dword [ebp - 0x9b4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b4]
push eax
mov ecx, dword [edx + 0x50]
call ecx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x4300c3
mov dword [ebp - 0xa98], 0
mov dword [ebp - 0x9e0], 0
lea edx, [ebp - 0xa98]
push edx
lea eax, [ebp - 0x9e0]
push eax
push 1
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x9b0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b0]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x4300af
cmp dword [ebp - 0xa98], 0
jbe 0x4300af
xor edx, edx
mov word [ebp - 0xb48], dx
xor eax, eax
mov dword [ebp - 0xb46], eax
mov dword [ebp - 0xb42], eax
mov dword [ebp - 0xb3e], eax
mov word [ebp - 0xb3a], ax
push 0
push 0
lea ecx, [ebp - 0xb48]
push ecx
push 0
push str.Name
mov edx, dword [ebp - 0x9e0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9e0]
push ecx
mov edx, dword [eax + 0x10]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43009b
push 0x100
mov eax, dword [ebp - 0xb40]
push eax
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x800
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea edx, [ebp - 0xb48]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x9e0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9e0]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x9b0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b0]
push eax
mov ecx, dword [edx + 8]
call ecx
lea edx, [ebp - 0x9b0]
push edx
push 0
push 0x30
push 0x4fa580
push 0x4fa5c8
mov eax, dword [ebp - 0x9b4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b4]
push edx
mov eax, dword [ecx + 0x50]
call eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x430205
mov dword [ebp - 0xa9c], 0
mov dword [ebp - 0x9d0], 0
lea ecx, [ebp - 0xa9c]
push ecx
lea edx, [ebp - 0x9d0]
push edx
push 1
push 0xffffffffffffffff
mov eax, dword [ebp - 0x9b0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b0]
push edx
mov eax, dword [ecx + 0x10]
call eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x4301f1
cmp dword [ebp - 0xa9c], 0
jbe 0x4301f1
xor ecx, ecx
mov word [ebp - 0xb58], cx
xor edx, edx
mov dword [ebp - 0xb56], edx
mov dword [ebp - 0xb52], edx
mov dword [ebp - 0xb4e], edx
mov word [ebp - 0xb4a], dx
push 0
push 0
lea eax, [ebp - 0xb58]
push eax
push 0
push 0x4fa5d0
mov ecx, dword [ebp - 0x9d0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9d0]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x4301dd
push 0x100
mov edx, dword [ebp - 0xb50]
push edx
mov eax, dword [ebp - 0x9ac]
add eax, 0xa00
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea ecx, [ebp - 0xb58]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x9d0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9d0]
push ecx
mov edx, dword [eax + 8]
call edx
mov eax, dword [ebp - 0x9b0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b0]
push edx
mov eax, dword [ecx + 8]
call eax
lea ecx, [ebp - 0x9b0]
push ecx
push 0
push 0x30
push str.SELECT__FROM_Win32_OperatingSystem
push 0x4fa5ec
mov edx, dword [ebp - 0x9b4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b4]
push ecx
mov edx, dword [eax + 0x50]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x4303b0
mov dword [ebp - 0xaa0], 0
mov dword [ebp - 0x9cc], 0
lea eax, [ebp - 0xaa0]
push eax
lea ecx, [ebp - 0x9cc]
push ecx
push 1
push 0xffffffffffffffff
mov edx, dword [ebp - 0x9b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b0]
push ecx
mov edx, dword [eax + 0x10]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43039c
cmp dword [ebp - 0xaa0], 0
jbe 0x43039c
xor eax, eax
mov word [ebp - 0xb68], ax
xor ecx, ecx
mov dword [ebp - 0xb66], ecx
mov dword [ebp - 0xb62], ecx
mov dword [ebp - 0xb5e], ecx
mov word [ebp - 0xb5a], cx
push 0
push 0
lea edx, [ebp - 0xb68]
push edx
push 0
push 0x4fa670
mov eax, dword [ebp - 0x9cc]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9cc]
push edx
mov eax, dword [ecx + 0x10]
call eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x430388
push 0x100
mov ecx, dword [ebp - 0xb60]
push ecx
mov edx, dword [ebp - 0x9ac]
add edx, 0xc00
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
mov dword [ebp - 0x9e8], 0
jmp 0x430332
mov eax, dword [ebp - 0x9e8]
add eax, 1
mov dword [ebp - 0x9e8], eax
mov ecx, dword [ebp - 0x9e8]
mov edx, dword [ebp - 0x9ac]
movzx eax, word [edx + ecx*2 + 0xc00]
test eax, eax
je 0x43037b
mov ecx, dword [ebp - 0x9e8]
mov edx, dword [ebp - 0x9ac]
movzx eax, word [edx + ecx*2 + 0xc00]
cmp eax, 0x2e
jne 0x430379
xor ecx, ecx
mov edx, dword [ebp - 0x9e8]
mov eax, dword [ebp - 0x9ac]
mov word [eax + edx*2 + 0xc00], cx
jmp 0x430323
lea ecx, [ebp - 0xb68]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x9cc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9cc]
push ecx
mov edx, dword [eax + 8]
call edx
mov eax, dword [ebp - 0x9b0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b0]
push edx
mov eax, dword [ecx + 8]
call eax
lea ecx, [ebp - 0x9b0]
push ecx
push 0
push 0x30
push 0x4fa5f4
push 0x4fa688
mov edx, dword [ebp - 0x9b4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b4]
push ecx
mov edx, dword [eax + 0x50]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x4304f3
mov dword [ebp - 0xaa4], 0
mov dword [ebp - 0xa10], 0
lea eax, [ebp - 0xaa4]
push eax
lea ecx, [ebp - 0xa10]
push ecx
push 1
push 0xffffffffffffffff
mov edx, dword [ebp - 0x9b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b0]
push ecx
mov edx, dword [eax + 0x10]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x4304df
cmp dword [ebp - 0xaa4], 0
jbe 0x4304df
xor eax, eax
mov word [ebp - 0xb78], ax
xor ecx, ecx
mov dword [ebp - 0xb76], ecx
mov dword [ebp - 0xb72], ecx
mov dword [ebp - 0xb6e], ecx
mov word [ebp - 0xb6a], cx
push 0
push 0
lea edx, [ebp - 0xb78]
push edx
push 0
push 0x4fa690
mov eax, dword [ebp - 0xa10]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xa10]
push edx
mov eax, dword [ecx + 0x10]
call eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x4304cb
push 0x100
mov ecx, dword [ebp - 0xb70]
push ecx
mov edx, dword [ebp - 0x9ac]
add edx, 0xe00
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea eax, [ebp - 0xb78]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0xa10]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xa10]
push eax
mov ecx, dword [edx + 8]
call ecx
mov edx, dword [ebp - 0x9b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b0]
push ecx
mov edx, dword [eax + 8]
call edx
lea eax, [ebp - 0x9b0]
push eax
push 0
push 0x30
push str.SELECT__FROM_Win32_BIOS
push 0x4fa6e0
mov ecx, dword [ebp - 0x9b4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b4]
push eax
mov ecx, dword [edx + 0x50]
call ecx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x430636
mov dword [ebp - 0xaa8], 0
mov dword [ebp - 0xa0c], 0
lea edx, [ebp - 0xaa8]
push edx
lea eax, [ebp - 0xa0c]
push eax
push 1
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x9b0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b0]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x430622
cmp dword [ebp - 0xaa8], 0
jbe 0x430622
xor edx, edx
mov word [ebp - 0xb88], dx
xor eax, eax
mov dword [ebp - 0xb86], eax
mov dword [ebp - 0xb82], eax
mov dword [ebp - 0xb7e], eax
mov word [ebp - 0xb7a], ax
push 0
push 0
lea ecx, [ebp - 0xb88]
push ecx
push 0
push str.SMBIOSBIOSVersion
mov edx, dword [ebp - 0xa0c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xa0c]
push ecx
mov edx, dword [eax + 0x10]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43060e
push 0x100
mov eax, dword [ebp - 0xb80]
push eax
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x1000
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea edx, [ebp - 0xb88]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0xa0c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xa0c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x9b0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b0]
push eax
mov ecx, dword [edx + 8]
call ecx
lea edx, [ebp - 0x9b0]
push edx
push 0
push 0x30
push str.SELECT__FROM_Win32_DiskDrive
push 0x4fa748
mov eax, dword [ebp - 0x9b4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b4]
push edx
mov eax, dword [ecx + 0x50]
call eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x430866
mov dword [ebp - 0xaac], 0
mov dword [ebp - 0x9d4], 0
lea ecx, [ebp - 0xaac]
push ecx
lea edx, [ebp - 0x9d4]
push edx
push 1
push 0xffffffffffffffff
mov eax, dword [ebp - 0x9b0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b0]
push edx
mov eax, dword [ecx + 0x10]
call eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x430852
cmp dword [ebp - 0xaac], 0
jbe 0x430852
xor ecx, ecx
mov word [ebp - 0xb98], cx
xor edx, edx
mov dword [ebp - 0xb96], edx
mov dword [ebp - 0xb92], edx
mov dword [ebp - 0xb8e], edx
mov word [ebp - 0xb8a], dx
push 0
push 0
lea eax, [ebp - 0xb98]
push eax
push 0
push str.SerialNumber
mov ecx, dword [ebp - 0x9d4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9d4]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43083e
xor edx, edx
mov word [ebp - 0x75c], dx
push 0x206
push 0
lea eax, [ebp - 0x75a]
push eax
call fcn.00493270
add esp, 0xc
push 0x100
mov ecx, dword [ebp - 0xb90]
push ecx
lea edx, [ebp - 0x75c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
mov dword [ebp - 0xbb0], 0x208
mov dword [ebp - 0xa08], 0
jmp 0x430786
mov eax, dword [ebp - 0xa08]
add eax, 1
mov dword [ebp - 0xa08], eax
cmp dword [ebp - 0xa08], 0x208
jae 0x430831
mov ecx, dword [ebp - 0xa08]
movzx edx, word [ebp + ecx*2 - 0x75c]
push edx
call fcn.0049c283
add esp, 4
test eax, eax
jne 0x43082c
mov eax, dword [ebp - 0xa08]
lea ecx, [ebp + eax*2 - 0x75c]
mov dword [ebp - 0xa30], ecx
mov edx, dword [ebp - 0x9ac]
add edx, 0x200
mov dword [ebp - 0xa14], edx
mov eax, dword [ebp - 0xa14]
mov dword [ebp - 0xbb4], eax
mov ecx, dword [ebp - 0xa30]
mov dx, word [ecx]
mov word [ebp - 0x9c0], dx
mov eax, dword [ebp - 0xa14]
mov cx, word [ebp - 0x9c0]
mov word [eax], cx
mov edx, dword [ebp - 0xa30]
add edx, 2
mov dword [ebp - 0xa30], edx
mov eax, dword [ebp - 0xa14]
add eax, 2
mov dword [ebp - 0xa14], eax
cmp word [ebp - 0x9c0], 0
jne 0x4307e2
jmp 0x430831
jmp 0x430777
lea ecx, [ebp - 0xb98]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x9d4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9d4]
push ecx
mov edx, dword [eax + 8]
call edx
mov eax, dword [ebp - 0x9b0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b0]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x9b4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b4]
push eax
mov ecx, dword [edx + 8]
call ecx
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xa04]
push ecx
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0xab4], 0
mov dword [ebp - 0xab0], 0
mov eax, 1
xor edx, edx
cpuid
mov dword [ebp - 0xab4], edx
mov dword [ebp - 0xab0], eax
mov eax, dword [ebp - 0xab0]
push eax
mov ecx, dword [ebp - 0xab4]
push ecx
push str._08X_08X
mov edx, dword [ebp - 0x9ac]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
call fcn.0042fbb0
test eax, eax
je 0x43093e
mov eax, dword [ebp - 0x9ac]
add eax, 0x200
mov dword [ebp - 0xa00], eax
mov ecx, dword [ebp - 0xa00]
add ecx, 2
mov dword [ebp - 0xaec], ecx
mov edx, dword [ebp - 0xa00]
mov ax, word [edx]
mov word [ebp - 0xa26], ax
add dword [ebp - 0xa00], 2
cmp word [ebp - 0xa26], 0
jne 0x430903
mov ecx, dword [ebp - 0xa00]
sub ecx, dword [ebp - 0xaec]
sar ecx, 1
mov dword [ebp - 0xb1c], ecx
jne 0x4309d4
push 0x200
push 0
mov edx, dword [ebp - 0x9ac]
add edx, 0x200
push edx
call fcn.00493270
add esp, 0xc
mov dword [ebp - 0xa18], 0
jmp 0x430975
mov eax, dword [ebp - 0xa18]
add eax, 1
mov dword [ebp - 0xa18], eax
cmp dword [ebp - 0xa18], 0xa
jge 0x4309d4
xor ecx, ecx
mov word [ebp - 0x95c], cx
push 0x1fe
push 0
lea edx, [ebp - 0x95a]
push edx
call fcn.00493270
add esp, 0xc
lea eax, [ebp - 0x95c]
push eax
mov ecx, dword [ebp - 0xa18]
push ecx
call fcn.00431e10
add esp, 8
test eax, eax
je 0x4309d2
lea edx, [ebp - 0x95c]
push edx
mov eax, dword [ebp - 0x9ac]
add eax, 0x200
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4309d4
jmp 0x430966
mov byte [ebp - 0x18], 0
xor ecx, ecx
mov dword [ebp - 0x17], ecx
mov byte [ebp - 0x13], cl
mov dword [ebp - 0xa34], 0
lea edx, [ebp - 0xa34]
push edx
push 0
call sub.IPHLPAPI.DLL_GetAdaptersInfo
mov eax, dword [ebp - 0xa34]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0xa38], eax
cmp dword [ebp - 0xa38], 0
je 0x430aa6
lea ecx, [ebp - 0xa34]
push ecx
mov edx, dword [ebp - 0xa38]
push edx
call sub.IPHLPAPI.DLL_GetAdaptersInfo
test eax, eax
jne 0x430aa6
mov eax, dword [ebp - 0xa38]
mov dword [ebp - 0x9d8], eax
jmp 0x430a4d
mov ecx, dword [ebp - 0x9d8]
mov edx, dword [ecx]
mov dword [ebp - 0x9d8], edx
cmp dword [ebp - 0x9d8], 0
je 0x430aa6
mov eax, dword [ebp - 0x9d8]
add eax, 8
push eax
call fcn.00432050
add esp, 4
mov dword [ebp - 0xa5c], eax
cmp dword [ebp - 0xa5c], 1
je 0x430a80
cmp dword [ebp - 0xa5c], 0
jne 0x430aa4
mov ecx, dword [ebp - 0x9d8]
add ecx, 0x194
mov edx, dword [ecx]
mov dword [ebp - 0x18], edx
mov ax, word [ecx + 4]
mov word [ebp - 0x14], ax
cmp dword [ebp - 0xa5c], 0
jne 0x430aa4
jmp 0x430aa6
jmp 0x430a3f
mov ecx, 1
imul edx, ecx, 5
movzx eax, byte [ebp + edx - 0x18]
push eax
mov ecx, 1
shl ecx, 2
movzx edx, byte [ebp + ecx - 0x18]
push edx
mov eax, 1
imul ecx, eax, 3
movzx edx, byte [ebp + ecx - 0x18]
push edx
mov eax, 1
shl eax, 1
movzx ecx, byte [ebp + eax - 0x18]
push ecx
mov edx, 1
shl edx, 0
movzx eax, byte [ebp + edx - 0x18]
push eax
mov ecx, 1
imul edx, ecx, 0
movzx eax, byte [ebp + edx - 0x18]
push eax
push str._02X__02X__02X__02X__02X__02X
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x400
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x20
mov edx, dword [ebp - 0x9ac]
add edx, 0x200
push edx
call fcn.00429a00
add esp, 4
mov eax, dword [ebp - 0x9ac]
add eax, 0x200
mov dword [ebp - 0x9f8], eax
mov ecx, dword [ebp - 0x9f8]
add ecx, 2
mov dword [ebp - 0xb9c], ecx
mov edx, dword [ebp - 0x9f8]
mov ax, word [edx]
mov word [ebp - 0xa2a], ax
add dword [ebp - 0x9f8], 2
cmp word [ebp - 0xa2a], 0
jne 0x430b49
mov ecx, dword [ebp - 0x9f8]
sub ecx, dword [ebp - 0xb9c]
sar ecx, 1
mov dword [ebp - 0xba0], ecx
je 0x430c35
mov edx, dword [ebp - 0x9ac]
add edx, 0x200
push edx
call fcn.0042fa10
add esp, 4
push eax
lea ecx, [ebp - 0x98c]
call fcn.00405490
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x9b5]
call fcn.00401950
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x98c]
call fcn.00402fa0
push eax
lea ecx, [ebp - 0x98c]
call fcn.00402fb0
push eax
lea ecx, [ebp - 0x9b5]
call fcn.00405740
lea ecx, [ebp - 0x98c]
call fcn.00402fa0
push eax
lea ecx, [ebp - 0x98c]
call fcn.00402fb0
push eax
push 3
push 0x4fa7bc
push 0x4fa7c0
push reloc.WS2_32.dll_accept
call fcn.004298d0
add esp, 0x18
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x9b5]
call fcn.004043e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x98c]
call fcn.00404c10
jmp 0x430e36
mov byte [ebp - 0x144], 0
push 0x63
push 0
lea eax, [ebp - 0x143]
push eax
call fcn.00493270
add esp, 0xc
mov dword [ebp - 0xab8], 0x64
lea ecx, [ebp - 0xab8]
push ecx
lea edx, [ebp - 0x144]
push edx
push 0x4fa7e0
push 0x4fa7e4
push reloc.WS2_32.dll_accept
call fcn.00429740
add esp, 0x14
movzx eax, al
test eax, eax
je 0x430cc2
lea ecx, [ebp - 0x9b6]
call fcn.00401950
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0xab8]
push ecx
lea edx, [ebp - 0x144]
push edx
lea ecx, [ebp - 0x9b6]
call fcn.00405740
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9b6]
call fcn.004043e0
push 0x200
push 0
mov eax, dword [ebp - 0x9ac]
add eax, 0x200
push eax
call fcn.00493270
add esp, 0xc
call fcn.0040db30
mov dword [ebp - 0xbac], eax
lea ecx, [ebp - 0x144]
mov dword [ebp - 0xa48], ecx
cmp dword [ebp - 0xa48], 0
jne 0x430d0c
mov dword [ebp - 0xa74], 0
jmp 0x430dc4
mov edx, dword [ebp - 0xa48]
mov dword [ebp - 0x9e4], edx
mov eax, dword [ebp - 0x9e4]
add eax, 1
mov dword [ebp - 0xba4], eax
mov ecx, dword [ebp - 0x9e4]
mov dl, byte [ecx]
mov byte [ebp - 0x9bb], dl
add dword [ebp - 0x9e4], 1
cmp byte [ebp - 0x9bb], 0
jne 0x430d27
mov eax, dword [ebp - 0x9e4]
sub eax, dword [ebp - 0xba4]
mov dword [ebp - 0xba8], eax
mov ecx, dword [ebp - 0xba8]
add ecx, 1
mov dword [ebp - 0xa64], ecx
cmp dword [ebp - 0xa64], 0x3fffffff
jle 0x430d7e
mov dword [ebp - 0xabc], 0
jmp 0x430db8
mov eax, dword [ebp - 0xa64]
shl eax, 1
call fcn.00491e30
mov dword [ebp - 0xafc], esp
mov edx, dword [ebp - 0xbac]
push edx
mov eax, dword [ebp - 0xa64]
push eax
mov ecx, dword [ebp - 0xa48]
push ecx
mov edx, dword [ebp - 0xafc]
push edx
call fcn.00431ae0
mov dword [ebp - 0xabc], eax
mov eax, dword [ebp - 0xabc]
mov dword [ebp - 0xa74], eax
mov ecx, dword [ebp - 0xa74]
mov dword [ebp - 0xa50], ecx
mov edx, dword [ebp - 0x9ac]
add edx, 0x200
mov dword [ebp - 0xa1c], edx
mov eax, dword [ebp - 0xa1c]
mov dword [ebp - 0xbb8], eax
mov ecx, dword [ebp - 0xa50]
mov dx, word [ecx]
mov word [ebp - 0x9c2], dx
mov eax, dword [ebp - 0xa1c]
mov cx, word [ebp - 0x9c2]
mov word [eax], cx
mov edx, dword [ebp - 0xa50]
add edx, 2
mov dword [ebp - 0xa50], edx
mov eax, dword [ebp - 0xa1c]
add eax, 2
mov dword [ebp - 0xa1c], eax
cmp word [ebp - 0x9c2], 0
jne 0x430dee
mov ecx, dword [ebp - 0x9ac]
mov dword [ebp - 0x9fc], ecx
mov edx, dword [ebp - 0x9fc]
add edx, 2
mov dword [ebp - 0xb00], edx
mov eax, dword [ebp - 0x9fc]
mov cx, word [eax]
mov word [ebp - 0xa28], cx
add dword [ebp - 0x9fc], 2
cmp word [ebp - 0xa28], 0
jne 0x430e51
mov edx, dword [ebp - 0x9fc]
sub edx, dword [ebp - 0xb00]
sar edx, 1
mov dword [ebp - 0xb04], edx
je 0x430f37
mov eax, dword [ebp - 0x9ac]
push eax
call fcn.0042fa10
add esp, 4
push eax
lea ecx, [ebp - 0x974]
call fcn.00405490
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x9b7]
call fcn.00401950
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x974]
call fcn.00402fa0
push eax
lea ecx, [ebp - 0x974]
call fcn.00402fb0
push eax
lea ecx, [ebp - 0x9b7]
call fcn.00405740
lea ecx, [ebp - 0x974]
call fcn.00402fa0
push eax
lea ecx, [ebp - 0x974]
call fcn.00402fb0
push eax
push 3
push 0x4fa804
push 0x4fa808
push reloc.WS2_32.dll_accept
call fcn.004298d0
add esp, 0x18
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x9b7]
call fcn.004043e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x974]
call fcn.00404c10
jmp 0x43112d
mov byte [ebp - 0xe0], 0
push 0x63
push 0
lea ecx, [ebp - 0xdf]
push ecx
call fcn.00493270
add esp, 0xc
mov dword [ebp - 0xa78], 0x64
lea edx, [ebp - 0xa78]
push edx
lea eax, [ebp - 0xe0]
push eax
push 0x4fa828
push 0x4fa82c
push reloc.WS2_32.dll_accept
call fcn.00429740
add esp, 0x14
movzx ecx, al
test ecx, ecx
je 0x430fc4
lea ecx, [ebp - 0x9b8]
call fcn.00401950
mov dword [ebp - 4], 5
mov edx, dword [ebp - 0xa78]
push edx
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x9b8]
call fcn.00405740
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9b8]
call fcn.004043e0
push 0x200
push 0
mov ecx, dword [ebp - 0x9ac]
push ecx
call fcn.00493270
add esp, 0xc
call fcn.0040db30
mov dword [ebp - 0xadc], eax
lea edx, [ebp - 0xe0]
mov dword [ebp - 0xa58], edx
cmp dword [ebp - 0xa58], 0
jne 0x431009
mov dword [ebp - 0xa80], 0
jmp 0x4310c1
mov eax, dword [ebp - 0xa58]
mov dword [ebp - 0x9ec], eax
mov ecx, dword [ebp - 0x9ec]
add ecx, 1
mov dword [ebp - 0xb08], ecx
mov edx, dword [ebp - 0x9ec]
mov al, byte [edx]
mov byte [ebp - 0x9bc], al
add dword [ebp - 0x9ec], 1
cmp byte [ebp - 0x9bc], 0
jne 0x431024
mov ecx, dword [ebp - 0x9ec]
sub ecx, dword [ebp - 0xb08]
mov dword [ebp - 0xad8], ecx
mov edx, dword [ebp - 0xad8]
add edx, 1
mov dword [ebp - 0xa54], edx
cmp dword [ebp - 0xa54], 0x3fffffff
jle 0x43107b
mov dword [ebp - 0xa7c], 0
jmp 0x4310b5
mov eax, dword [ebp - 0xa54]
shl eax, 1
call fcn.00491e30
mov dword [ebp - 0xae0], esp
mov eax, dword [ebp - 0xadc]
push eax
mov ecx, dword [ebp - 0xa54]
push ecx
mov edx, dword [ebp - 0xa58]
push edx
mov eax, dword [ebp - 0xae0]
push eax
call fcn.00431ae0
mov dword [ebp - 0xa7c], eax
mov ecx, dword [ebp - 0xa7c]
mov dword [ebp - 0xa80], ecx
mov edx, dword [ebp - 0xa80]
mov dword [ebp - 0xa60], edx
mov eax, dword [ebp - 0x9ac]
mov dword [ebp - 0xa20], eax
mov ecx, dword [ebp - 0xa20]
mov dword [ebp - 0xbbc], ecx
mov edx, dword [ebp - 0xa60]
mov ax, word [edx]
mov word [ebp - 0x9c4], ax
mov ecx, dword [ebp - 0xa20]
mov dx, word [ebp - 0x9c4]
mov word [ecx], dx
mov eax, dword [ebp - 0xa60]
add eax, 2
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0xa20]
add ecx, 2
mov dword [ebp - 0xa20], ecx
cmp word [ebp - 0x9c4], 0
jne 0x4310e5
mov edx, dword [ebp - 0x9ac]
add edx, 0x400
mov dword [ebp - 0x9f0], edx
mov eax, dword [ebp - 0x9f0]
add eax, 2
mov dword [ebp - 0xae4], eax
mov ecx, dword [ebp - 0x9f0]
mov dx, word [ecx]
mov word [ebp - 0xa4a], dx
add dword [ebp - 0x9f0], 2
cmp word [ebp - 0xa4a], 0
jne 0x43114e
mov eax, dword [ebp - 0x9f0]
sub eax, dword [ebp - 0xae4]
sar eax, 1
mov dword [ebp - 0xae8], eax
je 0x43123a
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x400
push ecx
call fcn.0042fa10
add esp, 4
push eax
lea ecx, [ebp - 0x9a4]
call fcn.00405490
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x9b9]
call fcn.00401950
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x9a4]
call fcn.00402fa0
push eax
lea ecx, [ebp - 0x9a4]
call fcn.00402fb0
push eax
lea ecx, [ebp - 0x9b9]
call fcn.00405740
lea ecx, [ebp - 0x9a4]
call fcn.00402fa0
push eax
lea ecx, [ebp - 0x9a4]
call fcn.00402fb0
push eax
push 3
push 0x4fa84c
push 0x4fa850
push reloc.WS2_32.dll_accept
call fcn.004298d0
add esp, 0x18
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x9b9]
call fcn.004043e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9a4]
call fcn.00404c10
jmp 0x43142d
mov byte [ebp - 0x7c], 0
push 0x63
push 0
lea edx, [ebp - 0x7b]
push edx
call fcn.00493270
add esp, 0xc
mov dword [ebp - 0xa84], 0x64
lea eax, [ebp - 0xa84]
push eax
lea ecx, [ebp - 0x7c]
push ecx
push 0x4fa870
push 0x4fa874
push reloc.WS2_32.dll_accept
call fcn.00429740
add esp, 0x14
movzx edx, al
test edx, edx
je 0x4312bb
lea ecx, [ebp - 0x9ba]
call fcn.00401950
mov dword [ebp - 4], 8
mov eax, dword [ebp - 0xa84]
push eax
lea ecx, [ebp - 0x7c]
push ecx
lea ecx, [ebp - 0x9ba]
call fcn.00405740
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9ba]
call fcn.004043e0
push 0x200
push 0
mov edx, dword [ebp - 0x9ac]
add edx, 0x400
push edx
call fcn.00493270
add esp, 0xc
call fcn.0040db30
mov dword [ebp - 0xaf4], eax
lea eax, [ebp - 0x7c]
mov dword [ebp - 0xa68], eax
cmp dword [ebp - 0xa68], 0
jne 0x431303
mov dword [ebp - 0xa8c], 0
jmp 0x4313bb
mov ecx, dword [ebp - 0xa68]
mov dword [ebp - 0x9f4], ecx
mov edx, dword [ebp - 0x9f4]
add edx, 1
mov dword [ebp - 0xb38], edx
mov eax, dword [ebp - 0x9f4]
mov cl, byte [eax]
mov byte [ebp - 0x9bd], cl
add dword [ebp - 0x9f4], 1
cmp byte [ebp - 0x9bd], 0
jne 0x43131e
mov edx, dword [ebp - 0x9f4]
sub edx, dword [ebp - 0xb38]
mov dword [ebp - 0xaf0], edx
mov eax, dword [ebp - 0xaf0]
add eax, 1
mov dword [ebp - 0xa70], eax
cmp dword [ebp - 0xa70], 0x3fffffff
jle 0x431375
mov dword [ebp - 0xa88], 0
jmp 0x4313af
mov eax, dword [ebp - 0xa70]
shl eax, 1
call fcn.00491e30
mov dword [ebp - 0xaf8], esp
mov ecx, dword [ebp - 0xaf4]
push ecx
mov edx, dword [ebp - 0xa70]
push edx
mov eax, dword [ebp - 0xa68]
push eax
mov ecx, dword [ebp - 0xaf8]
push ecx
call fcn.00431ae0
mov dword [ebp - 0xa88], eax
mov edx, dword [ebp - 0xa88]
mov dword [ebp - 0xa8c], edx
mov eax, dword [ebp - 0xa8c]
mov dword [ebp - 0xa6c], eax
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x400
mov dword [ebp - 0xa24], ecx
mov edx, dword [ebp - 0xa24]
mov dword [ebp - 0xbc0], edx
mov eax, dword [ebp - 0xa6c]
mov cx, word [eax]
mov word [ebp - 0x9c6], cx
mov edx, dword [ebp - 0xa24]
mov ax, word [ebp - 0x9c6]
mov word [edx], ax
mov ecx, dword [ebp - 0xa6c]
add ecx, 2
mov dword [ebp - 0xa6c], ecx
mov edx, dword [ebp - 0xa24]
add edx, 2
mov dword [ebp - 0xa24], edx
cmp word [ebp - 0x9c6], 0
jne 0x4313e5
mov dword [ebp - 0xa90], 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xa90]
push eax
push 0
push 0
push 0x4fa894
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je 0x43147b
mov ecx, dword [ebp - 0xa90]
push ecx
push str._08X
mov edx, dword [ebp - 0x9ac]
add edx, 0x1200
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
xor eax, eax
mov word [ebp - 0x554], ax
push 0x206
push 0
lea ecx, [ebp - 0x552]
push ecx
call fcn.00493270
add esp, 0xc
xor edx, edx
mov word [ebp - 0x34c], dx
push 0x206
push 0
lea eax, [ebp - 0x34a]
push eax
call fcn.00493270
add esp, 0xc
xorps xmm0, xmm0
movlpd qword [ebp - 0xad4], xmm0
xorps xmm0, xmm0
movlpd qword [ebp - 0xacc], xmm0
xorps xmm0, xmm0
movlpd qword [ebp - 0xac4], xmm0
lea ecx, [ebp - 0x554]
push ecx
push 0
push 0
push 0x25
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x4316e8
push 0x4fa8a8
lea edx, [ebp - 0x554]
push edx
lea eax, [ebp - 0x34c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
test eax, eax
je 0x4315a4
push 0
push 0
push 3
push 0
push 1
push accept
lea ecx, [ebp - 0x34c]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xa3c], eax
cmp dword [ebp - 0xa3c], 0xffffffff
je 0x4315a4
mov dword [ebp - 0xb24], 0
xor edx, edx
mov dword [ebp - 0xb20], edx
push 0
push 0
lea eax, [ebp - 0xb24]
push eax
mov ecx, dword [ebp - 0xa3c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x431597
lea edx, [ebp - 0xb24]
push edx
call fcn.00431dc0
add esp, 4
mov dword [ebp - 0xad4], eax
mov dword [ebp - 0xad0], edx
mov eax, dword [ebp - 0xa3c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.user32.dll
lea ecx, [ebp - 0x554]
push ecx
lea edx, [ebp - 0x34c]
push edx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
test eax, eax
je 0x431646
push 0
push 0
push 3
push 0
push 1
push accept
lea eax, [ebp - 0x34c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xa40], eax
cmp dword [ebp - 0xa40], 0xffffffff
je 0x431646
mov dword [ebp - 0xb2c], 0
xor ecx, ecx
mov dword [ebp - 0xb28], ecx
push 0
push 0
lea edx, [ebp - 0xb2c]
push edx
mov eax, dword [ebp - 0xa40]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x431639
lea ecx, [ebp - 0xb2c]
push ecx
call fcn.00431dc0
add esp, 4
mov dword [ebp - 0xacc], eax
mov dword [ebp - 0xac8], edx
mov edx, dword [ebp - 0xa40]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.notepad.exe
lea eax, [ebp - 0x554]
push eax
lea ecx, [ebp - 0x34c]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
test eax, eax
je 0x4316e8
push 0
push 0
push 3
push 0
push 1
push accept
lea edx, [ebp - 0x34c]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xa44], eax
cmp dword [ebp - 0xa44], 0xffffffff
je 0x4316e8
mov dword [ebp - 0xb34], 0
xor eax, eax
mov dword [ebp - 0xb30], eax
push 0
push 0
lea ecx, [ebp - 0xb34]
push ecx
mov edx, dword [ebp - 0xa44]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x4316db
lea eax, [ebp - 0xb34]
push eax
call fcn.00431dc0
add esp, 4
mov dword [ebp - 0xac4], eax
mov dword [ebp - 0xac0], edx
mov ecx, dword [ebp - 0xa44]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0xac0]
push edx
mov eax, dword [ebp - 0xac4]
push eax
mov ecx, dword [ebp - 0xac8]
push ecx
mov edx, dword [ebp - 0xacc]
push edx
mov eax, dword [ebp - 0xad0]
push eax
mov ecx, dword [ebp - 0xad4]
push ecx
push str._llu__llu__llu
push 0x100
mov edx, dword [ebp - 0x9ac]
add edx, 0x1400
push edx
call fcn.004322e0
add esp, 0x24
mov eax, dword [ebp - 0x9ac]
lea esp, [ebp - 0xbc8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00491511
mov esp, ebp
pop ebp
ret