Function at 0x42fe40
Capabilities:
Connect to wmi namespace via wbemlocator
Get common file path
Get disk information
Get mac address on windows
Reference wmi statements

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f3ed3
mov eax, dword fs:[0]
push eax
sub esp, 0xbb4
mov eax, dword [0x52e474]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x9ac], ecx
push 0x200
push 0
mov eax, dword [ebp - 0x9ac]
push eax
call fcn.004938a0
add esp, 0xc
push 0x200
push 0
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x200
push ecx
call fcn.004938a0
add esp, 0xc
push 0x200
push 0
mov edx, dword [ebp - 0x9ac]
add edx, 0x400
push edx
call fcn.004938a0
add esp, 0xc
push 0x200
push 0
mov eax, dword [ebp - 0x9ac]
add eax, 0x600
push eax
call fcn.004938a0
add esp, 0xc
push 0x200
push 0
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x800
push ecx
call fcn.004938a0
add esp, 0xc
push 0x200
push 0
mov edx, dword [ebp - 0x9ac]
add edx, 0xa00
push edx
call fcn.004938a0
add esp, 0xc
push 0x200
push 0
mov eax, dword [ebp - 0x9ac]
add eax, 0xc00
push eax
call fcn.004938a0
add esp, 0xc
push 0x200
push 0
mov ecx, dword [ebp - 0x9ac]
add ecx, 0xe00
push ecx
call fcn.004938a0
add esp, 0xc
push 0x200
push 0
mov edx, dword [ebp - 0x9ac]
add edx, 0x1000
push edx
call fcn.004938a0
add esp, 0xc
push 0x200
push 0
mov eax, dword [ebp - 0x9ac]
add eax, 0x1200
push eax
call fcn.004938a0
add esp, 0xc
push 0x200
push 0
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x1400
push ecx
call fcn.004938a0
add esp, 0xc
push 0x200
push 0
mov edx, dword [ebp - 0x9ac]
add edx, 0x1600
push edx
call fcn.004938a0
add esp, 0xc
push 0
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov dword [ebp - 0x9a8], eax
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x430afe
mov dword [ebp - 0xa04], 0
lea eax, [ebp - 0xa04]
push eax
push 0x50c63c
push 1
push 0
push 0x50c70c
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x430afe
mov dword [ebp - 0x9b4], 0
lea ecx, [ebp - 0x9b4]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4fb4a8
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xa04]
push ecx
mov edx, dword [eax + 0xc]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x430aea
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
mov eax, dword [ebp - 0x9b4]
push eax
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x430ad6
mov dword [ebp - 0x9b0], 0
lea ecx, [ebp - 0x9b0]
push ecx
push 0
push 0x30
push 0x4fb4c0
push 0x4fb514
mov edx, dword [ebp - 0x9b4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b4]
push ecx
mov edx, dword [eax + 0x50]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x4301f0
mov dword [ebp - 0xa94], 0
mov dword [ebp - 0x9dc], 0
lea eax, [ebp - 0xa94]
push eax
lea ecx, [ebp - 0x9dc]
push ecx
push 1
push 0xffffffffffffffff
mov edx, dword [ebp - 0x9b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b0]
push ecx
mov edx, dword [eax + 0x10]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x4301dc
cmp dword [ebp - 0xa94], 0
jbe 0x4301dc
xor eax, eax
mov word [ebp - 0xb18], ax
xor ecx, ecx
mov dword [ebp - 0xb16], ecx
mov dword [ebp - 0xb12], ecx
mov dword [ebp - 0xb0e], ecx
mov word [ebp - 0xb0a], cx
push 0
push 0
lea edx, [ebp - 0xb18]
push edx
push 0
push str.UUID
mov eax, dword [ebp - 0x9dc]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9dc]
push edx
mov eax, dword [ecx + 0x10]
call eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x4301c8
push 0x100
mov ecx, dword [ebp - 0xb10]
push ecx
mov edx, dword [ebp - 0x9ac]
add edx, 0x600
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea eax, [ebp - 0xb18]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0x9dc]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9dc]
push eax
mov ecx, dword [edx + 8]
call ecx
mov edx, dword [ebp - 0x9b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b0]
push ecx
mov edx, dword [eax + 8]
call edx
lea eax, [ebp - 0x9b0]
push eax
push 0
push 0x30
push str.SELECT__FROM_Win32_ComputerSystemProduct
push 0x4fb57c
mov ecx, dword [ebp - 0x9b4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b4]
push eax
mov ecx, dword [edx + 0x50]
call ecx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x430333
mov dword [ebp - 0xa98], 0
mov dword [ebp - 0x9e0], 0
lea edx, [ebp - 0xa98]
push edx
lea eax, [ebp - 0x9e0]
push eax
push 1
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x9b0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b0]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43031f
cmp dword [ebp - 0xa98], 0
jbe 0x43031f
xor edx, edx
mov word [ebp - 0xb48], dx
xor eax, eax
mov dword [ebp - 0xb46], eax
mov dword [ebp - 0xb42], eax
mov dword [ebp - 0xb3e], eax
mov word [ebp - 0xb3a], ax
push 0
push 0
lea ecx, [ebp - 0xb48]
push ecx
push 0
push str.Name
mov edx, dword [ebp - 0x9e0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9e0]
push ecx
mov edx, dword [eax + 0x10]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43030b
push 0x100
mov eax, dword [ebp - 0xb40]
push eax
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x800
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea edx, [ebp - 0xb48]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x9e0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9e0]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x9b0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b0]
push eax
mov ecx, dword [edx + 8]
call ecx
lea edx, [ebp - 0x9b0]
push edx
push 0
push 0x30
push 0x4fb590
push 0x4fb5d8
mov eax, dword [ebp - 0x9b4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b4]
push edx
mov eax, dword [ecx + 0x50]
call eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x430475
mov dword [ebp - 0xa9c], 0
mov dword [ebp - 0x9d0], 0
lea ecx, [ebp - 0xa9c]
push ecx
lea edx, [ebp - 0x9d0]
push edx
push 1
push 0xffffffffffffffff
mov eax, dword [ebp - 0x9b0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b0]
push edx
mov eax, dword [ecx + 0x10]
call eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x430461
cmp dword [ebp - 0xa9c], 0
jbe 0x430461
xor ecx, ecx
mov word [ebp - 0xb58], cx
xor edx, edx
mov dword [ebp - 0xb56], edx
mov dword [ebp - 0xb52], edx
mov dword [ebp - 0xb4e], edx
mov word [ebp - 0xb4a], dx
push 0
push 0
lea eax, [ebp - 0xb58]
push eax
push 0
push 0x4fb5e0
mov ecx, dword [ebp - 0x9d0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9d0]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43044d
push 0x100
mov edx, dword [ebp - 0xb50]
push edx
mov eax, dword [ebp - 0x9ac]
add eax, 0xa00
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea ecx, [ebp - 0xb58]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x9d0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9d0]
push ecx
mov edx, dword [eax + 8]
call edx
mov eax, dword [ebp - 0x9b0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b0]
push edx
mov eax, dword [ecx + 8]
call eax
lea ecx, [ebp - 0x9b0]
push ecx
push 0
push 0x30
push str.SELECT__FROM_Win32_OperatingSystem
push 0x4fb5fc
mov edx, dword [ebp - 0x9b4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b4]
push ecx
mov edx, dword [eax + 0x50]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x430620
mov dword [ebp - 0xaa0], 0
mov dword [ebp - 0x9cc], 0
lea eax, [ebp - 0xaa0]
push eax
lea ecx, [ebp - 0x9cc]
push ecx
push 1
push 0xffffffffffffffff
mov edx, dword [ebp - 0x9b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b0]
push ecx
mov edx, dword [eax + 0x10]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43060c
cmp dword [ebp - 0xaa0], 0
jbe 0x43060c
xor eax, eax
mov word [ebp - 0xb68], ax
xor ecx, ecx
mov dword [ebp - 0xb66], ecx
mov dword [ebp - 0xb62], ecx
mov dword [ebp - 0xb5e], ecx
mov word [ebp - 0xb5a], cx
push 0
push 0
lea edx, [ebp - 0xb68]
push edx
push 0
push 0x4fb680
mov eax, dword [ebp - 0x9cc]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9cc]
push edx
mov eax, dword [ecx + 0x10]
call eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x4305f8
push 0x100
mov ecx, dword [ebp - 0xb60]
push ecx
mov edx, dword [ebp - 0x9ac]
add edx, 0xc00
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
mov dword [ebp - 0x9e8], 0
jmp 0x4305a2
mov eax, dword [ebp - 0x9e8]
add eax, 1
mov dword [ebp - 0x9e8], eax
mov ecx, dword [ebp - 0x9e8]
mov edx, dword [ebp - 0x9ac]
movzx eax, word [edx + ecx*2 + 0xc00]
test eax, eax
je 0x4305eb
mov ecx, dword [ebp - 0x9e8]
mov edx, dword [ebp - 0x9ac]
movzx eax, word [edx + ecx*2 + 0xc00]
cmp eax, 0x2e
jne 0x4305e9
xor ecx, ecx
mov edx, dword [ebp - 0x9e8]
mov eax, dword [ebp - 0x9ac]
mov word [eax + edx*2 + 0xc00], cx
jmp 0x430593
lea ecx, [ebp - 0xb68]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x9cc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9cc]
push ecx
mov edx, dword [eax + 8]
call edx
mov eax, dword [ebp - 0x9b0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b0]
push edx
mov eax, dword [ecx + 8]
call eax
lea ecx, [ebp - 0x9b0]
push ecx
push 0
push 0x30
push 0x4fb604
push 0x4fb698
mov edx, dword [ebp - 0x9b4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b4]
push ecx
mov edx, dword [eax + 0x50]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x430763
mov dword [ebp - 0xaa4], 0
mov dword [ebp - 0xa10], 0
lea eax, [ebp - 0xaa4]
push eax
lea ecx, [ebp - 0xa10]
push ecx
push 1
push 0xffffffffffffffff
mov edx, dword [ebp - 0x9b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b0]
push ecx
mov edx, dword [eax + 0x10]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43074f
cmp dword [ebp - 0xaa4], 0
jbe 0x43074f
xor eax, eax
mov word [ebp - 0xb78], ax
xor ecx, ecx
mov dword [ebp - 0xb76], ecx
mov dword [ebp - 0xb72], ecx
mov dword [ebp - 0xb6e], ecx
mov word [ebp - 0xb6a], cx
push 0
push 0
lea edx, [ebp - 0xb78]
push edx
push 0
push 0x4fb6a0
mov eax, dword [ebp - 0xa10]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xa10]
push edx
mov eax, dword [ecx + 0x10]
call eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43073b
push 0x100
mov ecx, dword [ebp - 0xb70]
push ecx
mov edx, dword [ebp - 0x9ac]
add edx, 0xe00
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea eax, [ebp - 0xb78]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0xa10]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xa10]
push eax
mov ecx, dword [edx + 8]
call ecx
mov edx, dword [ebp - 0x9b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9b0]
push ecx
mov edx, dword [eax + 8]
call edx
lea eax, [ebp - 0x9b0]
push eax
push 0
push 0x30
push str.SELECT__FROM_Win32_BIOS
push 0x4fb6f0
mov ecx, dword [ebp - 0x9b4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b4]
push eax
mov ecx, dword [edx + 0x50]
call ecx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x4308a6
mov dword [ebp - 0xaa8], 0
mov dword [ebp - 0xa0c], 0
lea edx, [ebp - 0xaa8]
push edx
lea eax, [ebp - 0xa0c]
push eax
push 1
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x9b0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b0]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x430892
cmp dword [ebp - 0xaa8], 0
jbe 0x430892
xor edx, edx
mov word [ebp - 0xb88], dx
xor eax, eax
mov dword [ebp - 0xb86], eax
mov dword [ebp - 0xb82], eax
mov dword [ebp - 0xb7e], eax
mov word [ebp - 0xb7a], ax
push 0
push 0
lea ecx, [ebp - 0xb88]
push ecx
push 0
push str.SMBIOSBIOSVersion
mov edx, dword [ebp - 0xa0c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xa0c]
push ecx
mov edx, dword [eax + 0x10]
call edx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x43087e
push 0x100
mov eax, dword [ebp - 0xb80]
push eax
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x1000
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea edx, [ebp - 0xb88]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0xa0c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xa0c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x9b0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b0]
push eax
mov ecx, dword [edx + 8]
call ecx
lea edx, [ebp - 0x9b0]
push edx
push 0
push 0x30
push str.SELECT__FROM_Win32_DiskDrive
push 0x4fb758
mov eax, dword [ebp - 0x9b4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b4]
push edx
mov eax, dword [ecx + 0x50]
call eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x430ad6
mov dword [ebp - 0xaac], 0
mov dword [ebp - 0x9d4], 0
lea ecx, [ebp - 0xaac]
push ecx
lea edx, [ebp - 0x9d4]
push edx
push 1
push 0xffffffffffffffff
mov eax, dword [ebp - 0x9b0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b0]
push edx
mov eax, dword [ecx + 0x10]
call eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x430ac2
cmp dword [ebp - 0xaac], 0
jbe 0x430ac2
xor ecx, ecx
mov word [ebp - 0xb98], cx
xor edx, edx
mov dword [ebp - 0xb96], edx
mov dword [ebp - 0xb92], edx
mov dword [ebp - 0xb8e], edx
mov word [ebp - 0xb8a], dx
push 0
push 0
lea eax, [ebp - 0xb98]
push eax
push 0
push str.SerialNumber
mov ecx, dword [ebp - 0x9d4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9d4]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x430aae
xor edx, edx
mov word [ebp - 0x75c], dx
push 0x206
push 0
lea eax, [ebp - 0x75a]
push eax
call fcn.004938a0
add esp, 0xc
push 0x100
mov ecx, dword [ebp - 0xb90]
push ecx
lea edx, [ebp - 0x75c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
mov dword [ebp - 0xbb0], 0x208
mov dword [ebp - 0xa08], 0
jmp 0x4309f6
mov eax, dword [ebp - 0xa08]
add eax, 1
mov dword [ebp - 0xa08], eax
cmp dword [ebp - 0xa08], 0x208
jae 0x430aa1
mov ecx, dword [ebp - 0xa08]
movzx edx, word [ebp + ecx*2 - 0x75c]
push edx
call fcn.0049c8ee
add esp, 4
test eax, eax
jne 0x430a9c
mov eax, dword [ebp - 0xa08]
lea ecx, [ebp + eax*2 - 0x75c]
mov dword [ebp - 0xa30], ecx
mov edx, dword [ebp - 0x9ac]
add edx, 0x200
mov dword [ebp - 0xa14], edx
mov eax, dword [ebp - 0xa14]
mov dword [ebp - 0xbb4], eax
mov ecx, dword [ebp - 0xa30]
mov dx, word [ecx]
mov word [ebp - 0x9c0], dx
mov eax, dword [ebp - 0xa14]
mov cx, word [ebp - 0x9c0]
mov word [eax], cx
mov edx, dword [ebp - 0xa30]
add edx, 2
mov dword [ebp - 0xa30], edx
mov eax, dword [ebp - 0xa14]
add eax, 2
mov dword [ebp - 0xa14], eax
cmp word [ebp - 0x9c0], 0
jne 0x430a52
jmp 0x430aa1
jmp 0x4309e7
lea ecx, [ebp - 0xb98]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x9d4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9d4]
push ecx
mov edx, dword [eax + 8]
call edx
mov eax, dword [ebp - 0x9b0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b0]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x9b4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b4]
push eax
mov ecx, dword [edx + 8]
call ecx
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xa04]
push ecx
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0xab4], 0
mov dword [ebp - 0xab0], 0
mov eax, 1
xor edx, edx
cpuid
mov dword [ebp - 0xab4], edx
mov dword [ebp - 0xab0], eax
mov eax, dword [ebp - 0xab0]
push eax
mov ecx, dword [ebp - 0xab4]
push ecx
push str._08X_08X
mov edx, dword [ebp - 0x9ac]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
call fcn.0042fe20
test eax, eax
je 0x430bae
mov eax, dword [ebp - 0x9ac]
add eax, 0x200
mov dword [ebp - 0xa00], eax
mov ecx, dword [ebp - 0xa00]
add ecx, 2
mov dword [ebp - 0xaec], ecx
mov edx, dword [ebp - 0xa00]
mov ax, word [edx]
mov word [ebp - 0xa26], ax
add dword [ebp - 0xa00], 2
cmp word [ebp - 0xa26], 0
jne 0x430b73
mov ecx, dword [ebp - 0xa00]
sub ecx, dword [ebp - 0xaec]
sar ecx, 1
mov dword [ebp - 0xb1c], ecx
jne 0x430c44
push 0x200
push 0
mov edx, dword [ebp - 0x9ac]
add edx, 0x200
push edx
call fcn.004938a0
add esp, 0xc
mov dword [ebp - 0xa18], 0
jmp 0x430be5
mov eax, dword [ebp - 0xa18]
add eax, 1
mov dword [ebp - 0xa18], eax
cmp dword [ebp - 0xa18], 0xa
jge 0x430c44
xor ecx, ecx
mov word [ebp - 0x95c], cx
push 0x1fe
push 0
lea edx, [ebp - 0x95a]
push edx
call fcn.004938a0
add esp, 0xc
lea eax, [ebp - 0x95c]
push eax
mov ecx, dword [ebp - 0xa18]
push ecx
call fcn.00432080
add esp, 8
test eax, eax
je 0x430c42
lea edx, [ebp - 0x95c]
push edx
mov eax, dword [ebp - 0x9ac]
add eax, 0x200
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x430c44
jmp 0x430bd6
mov byte [ebp - 0x18], 0
xor ecx, ecx
mov dword [ebp - 0x17], ecx
mov byte [ebp - 0x13], cl
mov dword [ebp - 0xa34], 0
lea edx, [ebp - 0xa34]
push edx
push 0
call sub.IPHLPAPI.DLL_GetAdaptersInfo
mov eax, dword [ebp - 0xa34]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0xa38], eax
cmp dword [ebp - 0xa38], 0
je 0x430d16
lea ecx, [ebp - 0xa34]
push ecx
mov edx, dword [ebp - 0xa38]
push edx
call sub.IPHLPAPI.DLL_GetAdaptersInfo
test eax, eax
jne 0x430d16
mov eax, dword [ebp - 0xa38]
mov dword [ebp - 0x9d8], eax
jmp 0x430cbd
mov ecx, dword [ebp - 0x9d8]
mov edx, dword [ecx]
mov dword [ebp - 0x9d8], edx
cmp dword [ebp - 0x9d8], 0
je 0x430d16
mov eax, dword [ebp - 0x9d8]
add eax, 8
push eax
call fcn.004322c0
add esp, 4
mov dword [ebp - 0xa5c], eax
cmp dword [ebp - 0xa5c], 1
je 0x430cf0
cmp dword [ebp - 0xa5c], 0
jne 0x430d14
mov ecx, dword [ebp - 0x9d8]
add ecx, 0x194
mov edx, dword [ecx]
mov dword [ebp - 0x18], edx
mov ax, word [ecx + 4]
mov word [ebp - 0x14], ax
cmp dword [ebp - 0xa5c], 0
jne 0x430d14
jmp 0x430d16
jmp 0x430caf
mov ecx, 1
imul edx, ecx, 5
movzx eax, byte [ebp + edx - 0x18]
push eax
mov ecx, 1
shl ecx, 2
movzx edx, byte [ebp + ecx - 0x18]
push edx
mov eax, 1
imul ecx, eax, 3
movzx edx, byte [ebp + ecx - 0x18]
push edx
mov eax, 1
shl eax, 1
movzx ecx, byte [ebp + eax - 0x18]
push ecx
mov edx, 1
shl edx, 0
movzx eax, byte [ebp + edx - 0x18]
push eax
mov ecx, 1
imul edx, ecx, 0
movzx eax, byte [ebp + edx - 0x18]
push eax
push str._02X__02X__02X__02X__02X__02X
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x400
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x20
mov edx, dword [ebp - 0x9ac]
add edx, 0x200
push edx
call fcn.00429c60
add esp, 4
mov eax, dword [ebp - 0x9ac]
add eax, 0x200
mov dword [ebp - 0x9f8], eax
mov ecx, dword [ebp - 0x9f8]
add ecx, 2
mov dword [ebp - 0xb9c], ecx
mov edx, dword [ebp - 0x9f8]
mov ax, word [edx]
mov word [ebp - 0xa2a], ax
add dword [ebp - 0x9f8], 2
cmp word [ebp - 0xa2a], 0
jne 0x430db9
mov ecx, dword [ebp - 0x9f8]
sub ecx, dword [ebp - 0xb9c]
sar ecx, 1
mov dword [ebp - 0xba0], ecx
je 0x430ea5
mov edx, dword [ebp - 0x9ac]
add edx, 0x200
push edx
call fcn.0042fc80
add esp, 4
push eax
lea ecx, [ebp - 0x98c]
call fcn.00405480
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x9b5]
call fcn.00401920
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x98c]
call fcn.00402f90
push eax
lea ecx, [ebp - 0x98c]
call fcn.00402fa0
push eax
lea ecx, [ebp - 0x9b5]
call fcn.00405730
lea ecx, [ebp - 0x98c]
call fcn.00402f90
push eax
lea ecx, [ebp - 0x98c]
call fcn.00402fa0
push eax
push 3
push 0x4fb7cc
push 0x4fb7d0
push reloc.WS2_32.dll_accept
call fcn.00429b30
add esp, 0x18
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x9b5]
call fcn.004043d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x98c]
call fcn.00404c00
jmp 0x4310a6
mov byte [ebp - 0x144], 0
push 0x63
push 0
lea eax, [ebp - 0x143]
push eax
call fcn.004938a0
add esp, 0xc
mov dword [ebp - 0xab8], 0x64
lea ecx, [ebp - 0xab8]
push ecx
lea edx, [ebp - 0x144]
push edx
push 0x4fb7f0
push 0x4fb7f4
push reloc.WS2_32.dll_accept
call fcn.004299a0
add esp, 0x14
movzx eax, al
test eax, eax
je 0x430f32
lea ecx, [ebp - 0x9b6]
call fcn.00401920
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0xab8]
push ecx
lea edx, [ebp - 0x144]
push edx
lea ecx, [ebp - 0x9b6]
call fcn.00405730
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9b6]
call fcn.004043d0
push 0x200
push 0
mov eax, dword [ebp - 0x9ac]
add eax, 0x200
push eax
call fcn.004938a0
add esp, 0xc
call fcn.0040df10
mov dword [ebp - 0xbac], eax
lea ecx, [ebp - 0x144]
mov dword [ebp - 0xa48], ecx
cmp dword [ebp - 0xa48], 0
jne 0x430f7c
mov dword [ebp - 0xa74], 0
jmp 0x431034
mov edx, dword [ebp - 0xa48]
mov dword [ebp - 0x9e4], edx
mov eax, dword [ebp - 0x9e4]
add eax, 1
mov dword [ebp - 0xba4], eax
mov ecx, dword [ebp - 0x9e4]
mov dl, byte [ecx]
mov byte [ebp - 0x9bb], dl
add dword [ebp - 0x9e4], 1
cmp byte [ebp - 0x9bb], 0
jne 0x430f97
mov eax, dword [ebp - 0x9e4]
sub eax, dword [ebp - 0xba4]
mov dword [ebp - 0xba8], eax
mov ecx, dword [ebp - 0xba8]
add ecx, 1
mov dword [ebp - 0xa64], ecx
cmp dword [ebp - 0xa64], 0x3fffffff
jle 0x430fee
mov dword [ebp - 0xabc], 0
jmp 0x431028
mov eax, dword [ebp - 0xa64]
shl eax, 1
call fcn.00492450
mov dword [ebp - 0xafc], esp
mov edx, dword [ebp - 0xbac]
push edx
mov eax, dword [ebp - 0xa64]
push eax
mov ecx, dword [ebp - 0xa48]
push ecx
mov edx, dword [ebp - 0xafc]
push edx
call fcn.00431d50
mov dword [ebp - 0xabc], eax
mov eax, dword [ebp - 0xabc]
mov dword [ebp - 0xa74], eax
mov ecx, dword [ebp - 0xa74]
mov dword [ebp - 0xa50], ecx
mov edx, dword [ebp - 0x9ac]
add edx, 0x200
mov dword [ebp - 0xa1c], edx
mov eax, dword [ebp - 0xa1c]
mov dword [ebp - 0xbb8], eax
mov ecx, dword [ebp - 0xa50]
mov dx, word [ecx]
mov word [ebp - 0x9c2], dx
mov eax, dword [ebp - 0xa1c]
mov cx, word [ebp - 0x9c2]
mov word [eax], cx
mov edx, dword [ebp - 0xa50]
add edx, 2
mov dword [ebp - 0xa50], edx
mov eax, dword [ebp - 0xa1c]
add eax, 2
mov dword [ebp - 0xa1c], eax
cmp word [ebp - 0x9c2], 0
jne 0x43105e
mov ecx, dword [ebp - 0x9ac]
mov dword [ebp - 0x9fc], ecx
mov edx, dword [ebp - 0x9fc]
add edx, 2
mov dword [ebp - 0xb00], edx
mov eax, dword [ebp - 0x9fc]
mov cx, word [eax]
mov word [ebp - 0xa28], cx
add dword [ebp - 0x9fc], 2
cmp word [ebp - 0xa28], 0
jne 0x4310c1
mov edx, dword [ebp - 0x9fc]
sub edx, dword [ebp - 0xb00]
sar edx, 1
mov dword [ebp - 0xb04], edx
je 0x4311a7
mov eax, dword [ebp - 0x9ac]
push eax
call fcn.0042fc80
add esp, 4
push eax
lea ecx, [ebp - 0x974]
call fcn.00405480
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x9b7]
call fcn.00401920
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x974]
call fcn.00402f90
push eax
lea ecx, [ebp - 0x974]
call fcn.00402fa0
push eax
lea ecx, [ebp - 0x9b7]
call fcn.00405730
lea ecx, [ebp - 0x974]
call fcn.00402f90
push eax
lea ecx, [ebp - 0x974]
call fcn.00402fa0
push eax
push 3
push 0x4fb814
push 0x4fb818
push reloc.WS2_32.dll_accept
call fcn.00429b30
add esp, 0x18
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x9b7]
call fcn.004043d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x974]
call fcn.00404c00
jmp 0x43139d
mov byte [ebp - 0xe0], 0
push 0x63
push 0
lea ecx, [ebp - 0xdf]
push ecx
call fcn.004938a0
add esp, 0xc
mov dword [ebp - 0xa78], 0x64
lea edx, [ebp - 0xa78]
push edx
lea eax, [ebp - 0xe0]
push eax
push 0x4fb838
push 0x4fb83c
push reloc.WS2_32.dll_accept
call fcn.004299a0
add esp, 0x14
movzx ecx, al
test ecx, ecx
je 0x431234
lea ecx, [ebp - 0x9b8]
call fcn.00401920
mov dword [ebp - 4], 5
mov edx, dword [ebp - 0xa78]
push edx
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x9b8]
call fcn.00405730
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9b8]
call fcn.004043d0
push 0x200
push 0
mov ecx, dword [ebp - 0x9ac]
push ecx
call fcn.004938a0
add esp, 0xc
call fcn.0040df10
mov dword [ebp - 0xadc], eax
lea edx, [ebp - 0xe0]
mov dword [ebp - 0xa58], edx
cmp dword [ebp - 0xa58], 0
jne 0x431279
mov dword [ebp - 0xa80], 0
jmp 0x431331
mov eax, dword [ebp - 0xa58]
mov dword [ebp - 0x9ec], eax
mov ecx, dword [ebp - 0x9ec]
add ecx, 1
mov dword [ebp - 0xb08], ecx
mov edx, dword [ebp - 0x9ec]
mov al, byte [edx]
mov byte [ebp - 0x9bc], al
add dword [ebp - 0x9ec], 1
cmp byte [ebp - 0x9bc], 0
jne 0x431294
mov ecx, dword [ebp - 0x9ec]
sub ecx, dword [ebp - 0xb08]
mov dword [ebp - 0xad8], ecx
mov edx, dword [ebp - 0xad8]
add edx, 1
mov dword [ebp - 0xa54], edx
cmp dword [ebp - 0xa54], 0x3fffffff
jle 0x4312eb
mov dword [ebp - 0xa7c], 0
jmp 0x431325
mov eax, dword [ebp - 0xa54]
shl eax, 1
call fcn.00492450
mov dword [ebp - 0xae0], esp
mov eax, dword [ebp - 0xadc]
push eax
mov ecx, dword [ebp - 0xa54]
push ecx
mov edx, dword [ebp - 0xa58]
push edx
mov eax, dword [ebp - 0xae0]
push eax
call fcn.00431d50
mov dword [ebp - 0xa7c], eax
mov ecx, dword [ebp - 0xa7c]
mov dword [ebp - 0xa80], ecx
mov edx, dword [ebp - 0xa80]
mov dword [ebp - 0xa60], edx
mov eax, dword [ebp - 0x9ac]
mov dword [ebp - 0xa20], eax
mov ecx, dword [ebp - 0xa20]
mov dword [ebp - 0xbbc], ecx
mov edx, dword [ebp - 0xa60]
mov ax, word [edx]
mov word [ebp - 0x9c4], ax
mov ecx, dword [ebp - 0xa20]
mov dx, word [ebp - 0x9c4]
mov word [ecx], dx
mov eax, dword [ebp - 0xa60]
add eax, 2
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0xa20]
add ecx, 2
mov dword [ebp - 0xa20], ecx
cmp word [ebp - 0x9c4], 0
jne 0x431355
mov edx, dword [ebp - 0x9ac]
add edx, 0x400
mov dword [ebp - 0x9f0], edx
mov eax, dword [ebp - 0x9f0]
add eax, 2
mov dword [ebp - 0xae4], eax
mov ecx, dword [ebp - 0x9f0]
mov dx, word [ecx]
mov word [ebp - 0xa4a], dx
add dword [ebp - 0x9f0], 2
cmp word [ebp - 0xa4a], 0
jne 0x4313be
mov eax, dword [ebp - 0x9f0]
sub eax, dword [ebp - 0xae4]
sar eax, 1
mov dword [ebp - 0xae8], eax
je 0x4314aa
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x400
push ecx
call fcn.0042fc80
add esp, 4
push eax
lea ecx, [ebp - 0x9a4]
call fcn.00405480
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x9b9]
call fcn.00401920
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x9a4]
call fcn.00402f90
push eax
lea ecx, [ebp - 0x9a4]
call fcn.00402fa0
push eax
lea ecx, [ebp - 0x9b9]
call fcn.00405730
lea ecx, [ebp - 0x9a4]
call fcn.00402f90
push eax
lea ecx, [ebp - 0x9a4]
call fcn.00402fa0
push eax
push 3
push 0x4fb85c
push 0x4fb860
push reloc.WS2_32.dll_accept
call fcn.00429b30
add esp, 0x18
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x9b9]
call fcn.004043d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9a4]
call fcn.00404c00
jmp 0x43169d
mov byte [ebp - 0x7c], 0
push 0x63
push 0
lea edx, [ebp - 0x7b]
push edx
call fcn.004938a0
add esp, 0xc
mov dword [ebp - 0xa84], 0x64
lea eax, [ebp - 0xa84]
push eax
lea ecx, [ebp - 0x7c]
push ecx
push 0x4fb880
push 0x4fb884
push reloc.WS2_32.dll_accept
call fcn.004299a0
add esp, 0x14
movzx edx, al
test edx, edx
je 0x43152b
lea ecx, [ebp - 0x9ba]
call fcn.00401920
mov dword [ebp - 4], 8
mov eax, dword [ebp - 0xa84]
push eax
lea ecx, [ebp - 0x7c]
push ecx
lea ecx, [ebp - 0x9ba]
call fcn.00405730
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9ba]
call fcn.004043d0
push 0x200
push 0
mov edx, dword [ebp - 0x9ac]
add edx, 0x400
push edx
call fcn.004938a0
add esp, 0xc
call fcn.0040df10
mov dword [ebp - 0xaf4], eax
lea eax, [ebp - 0x7c]
mov dword [ebp - 0xa68], eax
cmp dword [ebp - 0xa68], 0
jne 0x431573
mov dword [ebp - 0xa8c], 0
jmp 0x43162b
mov ecx, dword [ebp - 0xa68]
mov dword [ebp - 0x9f4], ecx
mov edx, dword [ebp - 0x9f4]
add edx, 1
mov dword [ebp - 0xb38], edx
mov eax, dword [ebp - 0x9f4]
mov cl, byte [eax]
mov byte [ebp - 0x9bd], cl
add dword [ebp - 0x9f4], 1
cmp byte [ebp - 0x9bd], 0
jne 0x43158e
mov edx, dword [ebp - 0x9f4]
sub edx, dword [ebp - 0xb38]
mov dword [ebp - 0xaf0], edx
mov eax, dword [ebp - 0xaf0]
add eax, 1
mov dword [ebp - 0xa70], eax
cmp dword [ebp - 0xa70], 0x3fffffff
jle 0x4315e5
mov dword [ebp - 0xa88], 0
jmp 0x43161f
mov eax, dword [ebp - 0xa70]
shl eax, 1
call fcn.00492450
mov dword [ebp - 0xaf8], esp
mov ecx, dword [ebp - 0xaf4]
push ecx
mov edx, dword [ebp - 0xa70]
push edx
mov eax, dword [ebp - 0xa68]
push eax
mov ecx, dword [ebp - 0xaf8]
push ecx
call fcn.00431d50
mov dword [ebp - 0xa88], eax
mov edx, dword [ebp - 0xa88]
mov dword [ebp - 0xa8c], edx
mov eax, dword [ebp - 0xa8c]
mov dword [ebp - 0xa6c], eax
mov ecx, dword [ebp - 0x9ac]
add ecx, 0x400
mov dword [ebp - 0xa24], ecx
mov edx, dword [ebp - 0xa24]
mov dword [ebp - 0xbc0], edx
mov eax, dword [ebp - 0xa6c]
mov cx, word [eax]
mov word [ebp - 0x9c6], cx
mov edx, dword [ebp - 0xa24]
mov ax, word [ebp - 0x9c6]
mov word [edx], ax
mov ecx, dword [ebp - 0xa6c]
add ecx, 2
mov dword [ebp - 0xa6c], ecx
mov edx, dword [ebp - 0xa24]
add edx, 2
mov dword [ebp - 0xa24], edx
cmp word [ebp - 0x9c6], 0
jne 0x431655
mov dword [ebp - 0xa90], 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xa90]
push eax
push 0
push 0
push 0x4fb8a4
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je 0x4316eb
mov ecx, dword [ebp - 0xa90]
push ecx
push str._08X
mov edx, dword [ebp - 0x9ac]
add edx, 0x1200
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
xor eax, eax
mov word [ebp - 0x554], ax
push 0x206
push 0
lea ecx, [ebp - 0x552]
push ecx
call fcn.004938a0
add esp, 0xc
xor edx, edx
mov word [ebp - 0x34c], dx
push 0x206
push 0
lea eax, [ebp - 0x34a]
push eax
call fcn.004938a0
add esp, 0xc
xorps xmm0, xmm0
movlpd qword [ebp - 0xad4], xmm0
xorps xmm0, xmm0
movlpd qword [ebp - 0xacc], xmm0
xorps xmm0, xmm0
movlpd qword [ebp - 0xac4], xmm0
lea ecx, [ebp - 0x554]
push ecx
push 0
push 0
push 0x25
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jl 0x431958
push 0x4fb8b8
lea edx, [ebp - 0x554]
push edx
lea eax, [ebp - 0x34c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
test eax, eax
je 0x431814
push 0
push 0
push 3
push 0
push 1
push accept
lea ecx, [ebp - 0x34c]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xa3c], eax
cmp dword [ebp - 0xa3c], 0xffffffff
je 0x431814
mov dword [ebp - 0xb24], 0
xor edx, edx
mov dword [ebp - 0xb20], edx
push 0
push 0
lea eax, [ebp - 0xb24]
push eax
mov ecx, dword [ebp - 0xa3c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x431807
lea edx, [ebp - 0xb24]
push edx
call fcn.00432030
add esp, 4
mov dword [ebp - 0xad4], eax
mov dword [ebp - 0xad0], edx
mov eax, dword [ebp - 0xa3c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.user32.dll
lea ecx, [ebp - 0x554]
push ecx
lea edx, [ebp - 0x34c]
push edx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
test eax, eax
je 0x4318b6
push 0
push 0
push 3
push 0
push 1
push accept
lea eax, [ebp - 0x34c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xa40], eax
cmp dword [ebp - 0xa40], 0xffffffff
je 0x4318b6
mov dword [ebp - 0xb2c], 0
xor ecx, ecx
mov dword [ebp - 0xb28], ecx
push 0
push 0
lea edx, [ebp - 0xb2c]
push edx
mov eax, dword [ebp - 0xa40]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x4318a9
lea ecx, [ebp - 0xb2c]
push ecx
call fcn.00432030
add esp, 4
mov dword [ebp - 0xacc], eax
mov dword [ebp - 0xac8], edx
mov edx, dword [ebp - 0xa40]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.notepad.exe
lea eax, [ebp - 0x554]
push eax
lea ecx, [ebp - 0x34c]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
test eax, eax
je 0x431958
push 0
push 0
push 3
push 0
push 1
push accept
lea edx, [ebp - 0x34c]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xa44], eax
cmp dword [ebp - 0xa44], 0xffffffff
je 0x431958
mov dword [ebp - 0xb34], 0
xor eax, eax
mov dword [ebp - 0xb30], eax
push 0
push 0
lea ecx, [ebp - 0xb34]
push ecx
mov edx, dword [ebp - 0xa44]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x43194b
lea eax, [ebp - 0xb34]
push eax
call fcn.00432030
add esp, 4
mov dword [ebp - 0xac4], eax
mov dword [ebp - 0xac0], edx
mov ecx, dword [ebp - 0xa44]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0xac0]
push edx
mov eax, dword [ebp - 0xac4]
push eax
mov ecx, dword [ebp - 0xac8]
push ecx
mov edx, dword [ebp - 0xacc]
push edx
mov eax, dword [ebp - 0xad0]
push eax
mov ecx, dword [ebp - 0xad4]
push ecx
push str._llu__llu__llu
push 0x100
mov edx, dword [ebp - 0x9ac]
add edx, 0x1400
push edx
call fcn.00432550
add esp, 0x24
mov eax, dword [ebp - 0x9ac]
lea esp, [ebp - 0xbc8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00491b3a
mov esp, ebp
pop ebp
ret