Function at 0x434f88
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57bcca
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1178
call fcn.0054a640
mov eax, dword [0x67d978]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 8]
mov dword [ebp - 0xe10], eax
xor ebx, ebx
mov dword [ebp - 0xe0c], ebx
push str.Short_Remote_Information_Thread
lea ecx, [ebp - 0x30]
call fcn.00414eb2
mov dword [ebp - 4], ebx
push ebx
xor edi, edi
inc edi
push edi
lea ecx, [ebp - 0x30]
call fcn.00411efe
push str.ShortRemoteInfo::run__
call fcn.00438337
push str._remote_
lea ecx, [ebp - 0x4c]
call fcn.00415a69
mov dword [ebp - 4], 2
push 0x271a
lea ecx, [ebp - 0x30]
call fcn.004901f2
pop ecx
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x5d8]
push eax
call fcn.00409e88
mov byte [ebp - 4], 5
push ebx
push edi
lea ecx, [ebp - 0x30]
call fcn.0041382c
mov ecx, dword [0x6b56b4]
mov eax, dword [ecx]
push 0x69bec4
call dword [eax + 0x24]
mov dword [ebp - 0xdd8], eax
lea eax, [ebp - 0xdd8]
push eax
lea esi, [ebp - 0x30]
call fcn.004380ec
pop ecx
mov byte [ebp - 4], 6
push eax
lea esi, [ebp - 0x5d8]
call fcn.0040a212
mov byte [ebp - 4], 5
push ebx
push edi
lea ecx, [ebp - 0x30]
call fcn.0041382c
lea edx, [ebp - 0x30]
mov ecx, esi
call fcn.00409f9c
mov byte [ebp - 4], 7
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x4c]
call fcn.004123fc
mov byte [ebp - 4], 5
push ebx
push edi
lea ecx, [ebp - 0x30]
call fcn.0041382c
push str.__remote_
lea ecx, [ebp - 0x4c]
call fcn.00412eb0
push 2
push ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov dword [ebp - 0xe28], ebx
mov dword [ebp - 0xe3c], ebx
lea eax, [ebp - 0xe28]
push eax
push 0x60d2d0
push 5
push ebx
push 0x6118dc
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x4376b4
mov eax, dword [ebp - 0xe28]
mov ecx, dword [eax]
lea edx, [ebp - 0xe3c]
push edx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push str.RootCimv2
push eax
call dword [ecx + 0xc]
test eax, eax
jne 0x437698
push fcn.00415ae1
push fcn.00415aa6
push 8
push 0x1c
lea eax, [ebp - 0x530]
push eax
call fcn.0053674b
mov byte [ebp - 4], 8
push str.Win32_UserAccount
lea ecx, [ebp - 0x530]
call fcn.00414331
push str.Win32_ComputerSystem
lea ecx, [ebp - 0x514]
call fcn.00414331
push str.Win32_OperatingSystem
lea ecx, [ebp - 0x4f8]
call fcn.00414331
push str.Win32_Processor
lea ecx, [ebp - 0x4dc]
call fcn.00414331
push str.Win32_PhysicalMemory
lea ecx, [ebp - 0x4c0]
call fcn.00414331
push str.Win32_LogicalDisk_WHERE_SIZE_0
lea ecx, [ebp - 0x4a4]
call fcn.00414331
push str.Win32_NetworkAdapter
lea ecx, [ebp - 0x488]
call fcn.00414331
push str.Win32_NetworkAdapterConfiguration
lea ecx, [ebp - 0x46c]
call fcn.00414331
push str.Domain_UserName_Domain_LastBootUpTime
lea ecx, [ebp - 0x450]
call fcn.00415a69
mov byte [ebp - 4], 9
push str.Name_Capacity
lea ecx, [ebp - 0x434]
call fcn.00415a69
mov byte [ebp - 4], 0xa
push str.Caption_Version_CSDVersion
lea ecx, [ebp - 0x418]
call fcn.00415a69
mov byte [ebp - 4], 0xb
push str.DeviceID_Size_FileSystem_Freespace
lea ecx, [ebp - 0x3fc]
call fcn.00415a69
mov byte [ebp - 4], 0xc
push str.Name_IPAddress_IPSubnet_DefaultIPGateway_DNSDomain_Speed
lea ecx, [ebp - 0x3e0]
call fcn.00415a69
mov byte [ebp - 4], 0xe
push str.0_1_1_2
lea ecx, [ebp - 0x330]
call fcn.00415a69
mov byte [ebp - 4], 0xf
push 0x61ffa4
lea ecx, [ebp - 0x314]
call fcn.00415a69
mov byte [ebp - 4], 0x10
push str.2_2_2
lea ecx, [ebp - 0x2f8]
call fcn.00415a69
mov byte [ebp - 4], 0x11
push str.5_5_5_5
lea ecx, [ebp - 0x2dc]
call fcn.00415a69
mov byte [ebp - 4], 0x12
push str.6_7_7_7_7_6
lea ecx, [ebp - 0x2c0]
call fcn.00415a69
mov byte [ebp - 4], 0x14
push 0x2755
lea ecx, [ebp - 0x110]
call fcn.004901f2
mov dword [ebp - 0xdec], eax
mov byte [ebp - 4], 0x15
mov dword [esp], 0x274e
lea ecx, [ebp - 0x180]
call fcn.004901f2
mov dword [ebp - 0xde4], eax
mov byte [ebp - 4], 0x16
mov dword [esp], 0x2736
lea ecx, [ebp - 0x164]
call fcn.004901f2
mov dword [ebp - 0xdd8], eax
mov byte [ebp - 4], 0x17
mov dword [esp], 0x272c
lea ecx, [ebp - 0xbc]
call fcn.004901f2
pop ecx
mov byte [ebp - 4], 0x18
mov esi, 0x61ffe0
push esi
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.0040a121
add esp, 0xc
mov byte [ebp - 4], 0x19
push dword [ebp - 0xdd8]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00432403
add esp, 0xc
mov byte [ebp - 4], 0x1a
push esi
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.0040a121
add esp, 0xc
mov byte [ebp - 4], 0x1b
push dword [ebp - 0xde4]
push eax
lea eax, [ebp - 0xeb8]
push eax
call fcn.00432403
add esp, 0xc
mov byte [ebp - 4], 0x1c
push esi
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0040a121
add esp, 0xc
mov byte [ebp - 4], 0x1d
push dword [ebp - 0xdec]
push eax
lea eax, [ebp - 0x2a0]
push eax
call fcn.00432403
add esp, 0xc
mov byte [ebp - 4], 0x1f
push ebx
push edi
lea ecx, [ebp - 0x30]
call fcn.0041382c
mov byte [ebp - 4], 0x20
push ebx
push edi
lea ecx, [ebp - 0xeb8]
call fcn.0041382c
mov byte [ebp - 4], 0x21
push ebx
push edi
lea ecx, [ebp - 0x68]
call fcn.0041382c
mov byte [ebp - 4], 0x22
push ebx
push edi
lea ecx, [ebp - 0xd8]
call fcn.0041382c
mov byte [ebp - 4], 0x23
push ebx
push edi
lea ecx, [ebp - 0xf4]
call fcn.0041382c
mov byte [ebp - 4], 0x24
push ebx
push edi
lea ecx, [ebp - 0xbc]
call fcn.0041382c
mov byte [ebp - 4], 0x25
push ebx
push edi
lea ecx, [ebp - 0x164]
call fcn.0041382c
mov byte [ebp - 4], 0x26
push ebx
push edi
lea ecx, [ebp - 0x180]
call fcn.0041382c
mov byte [ebp - 4], 0x27
push ebx
push edi
lea ecx, [ebp - 0x110]
call fcn.0041382c
push 0x275f
lea ecx, [ebp - 0x68]
call fcn.004901f2
mov dword [ebp - 0xdd8], eax
mov byte [ebp - 4], 0x28
mov dword [esp], 0x275b
lea ecx, [ebp - 0xeb8]
call fcn.004901f2
pop ecx
mov byte [ebp - 4], 0x29
push esi
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0040a121
add esp, 0xc
mov byte [ebp - 4], 0x2a
push dword [ebp - 0xdd8]
push eax
lea eax, [ebp - 0x284]
push eax
call fcn.00432403
add esp, 0xc
mov byte [ebp - 4], 0x2c
push ebx
push edi
lea ecx, [ebp - 0x30]
call fcn.0041382c
mov byte [ebp - 4], 0x2d
push ebx
push edi
lea ecx, [ebp - 0xeb8]
call fcn.0041382c
mov byte [ebp - 4], 0x2e
push ebx
push edi
lea ecx, [ebp - 0x68]
call fcn.0041382c
push 0x2766
lea ecx, [ebp - 0xbc]
call fcn.004901f2
mov dword [ebp - 0xde4], eax
mov byte [ebp - 4], 0x2f
mov dword [esp], 0x2764
lea ecx, [ebp - 0xf4]
call fcn.004901f2
mov dword [ebp - 0xdd8], eax
mov byte [ebp - 4], 0x30
mov dword [esp], 0x2762
lea ecx, [ebp - 0xd8]
call fcn.004901f2
pop ecx
mov byte [ebp - 4], 0x31
push esi
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.0040a121
add esp, 0xc
mov byte [ebp - 4], 0x32
push dword [ebp - 0xdd8]
push eax
lea eax, [ebp - 0xeb8]
push eax
call fcn.00432403
add esp, 0xc
mov byte [ebp - 4], 0x33
push esi
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0040a121
add esp, 0xc
mov byte [ebp - 4], 0x34
push dword [ebp - 0xde4]
push eax
lea eax, [ebp - 0x268]
push eax
call fcn.00432403
add esp, 0xc
mov byte [ebp - 4], 0x36
push ebx
push edi
lea ecx, [ebp - 0x30]
call fcn.0041382c
mov byte [ebp - 4], 0x37
push ebx
push edi
lea ecx, [ebp - 0xeb8]
call fcn.0041382c
mov byte [ebp - 4], 0x38
push ebx
push edi
lea ecx, [ebp - 0x68]
call fcn.0041382c
mov byte [ebp - 4], 0x39
push ebx
push edi
lea ecx, [ebp - 0xd8]
call fcn.0041382c
mov byte [ebp - 4], 0x3a
push ebx
push edi
lea ecx, [ebp - 0xf4]
call fcn.0041382c
mov byte [ebp - 4], 0x3b
push ebx
push edi
lea ecx, [ebp - 0xbc]
call fcn.0041382c
push 0x61ffe4
lea ecx, [ebp - 0x24c]
call fcn.00415a69
mov byte [ebp - 4], 0x3c
push 0x2771
lea ecx, [ebp - 0x12c]
call fcn.004901f2
mov dword [ebp - 0xe04], eax
mov byte [ebp - 4], 0x3d
mov dword [esp], 0x276e
lea ecx, [ebp - 0x148]
call fcn.004901f2
mov dword [ebp - 0xe08], eax
mov byte [ebp - 4], 0x3e
mov dword [esp], 0x276d
lea ecx, [ebp - 0x1f0]
call fcn.004901f2
mov dword [ebp - 0xdec], eax
mov byte [ebp - 4], 0x3f
mov dword [esp], 0x276a
lea ecx, [ebp - 0x19c]
call fcn.004901f2
mov dword [ebp - 0xde4], eax
mov byte [ebp - 4], 0x40
mov dword [esp], 0x2768
lea ecx, [ebp - 0x1b8]
call fcn.004901f2
mov dword [ebp - 0xdd8], eax
mov byte [ebp - 4], 0x41
mov dword [esp], 0x2762
lea ecx, [ebp - 0xf64]
call fcn.004901f2
pop ecx
mov byte [ebp - 4], 0x42
push esi
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0040a121
add esp, 0xc
mov byte [ebp - 4], 0x43
push dword [ebp - 0xdd8]
push eax
lea eax, [ebp - 0x180]
push eax
call fcn.00432403
add esp, 0xc
mov byte [ebp - 4], 0x44
push esi
push eax
lea eax, [ebp - 0x164]
push eax
call fcn.0040a121
add esp, 0xc
mov byte [ebp - 4], 0x45
push dword [ebp - 0xde4]
push eax
lea eax, [ebp - 0xbc]
push eax
call fcn.00432403
add esp, 0xc
mov byte [ebp - 4], 0x46
push esi
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.0040a121
add esp, 0xc
mov byte [ebp - 4], 0x47
push dword [ebp - 0xdec]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00432403
add esp, 0xc
mov byte [ebp - 4], 0x48
push esi
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.0040a121
add esp, 0xc
mov byte [ebp - 4], 0x49
push dword [ebp - 0xe08]
push eax
lea eax, [ebp - 0xeb8]
push eax
call fcn.00432403
add esp, 0xc
mov byte [ebp - 4], 0x4a
push esi
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0040a121
add esp, 0xc
mov byte [ebp - 4], 0x4b
push dword [ebp - 0xe04]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.00432403
add esp, 0xc
mov byte [ebp - 4], 0x4d
push ebx
push edi
lea ecx, [ebp - 0x30]
call fcn.0041382c
mov byte [ebp - 4], 0x4e
push ebx
push edi
lea ecx, [ebp - 0xeb8]
call fcn.0041382c
mov byte [ebp - 4], 0x4f
push ebx
push edi
lea ecx, [ebp - 0x68]
call fcn.0041382c
mov byte [ebp - 4], 0x50
push ebx
push edi
lea ecx, [ebp - 0xd8]
call fcn.0041382c
mov byte [ebp - 4], 0x51
push ebx
push edi
lea ecx, [ebp - 0xf4]
call fcn.0041382c
mov byte [ebp - 4], 0x52
push ebx
push edi
lea ecx, [ebp - 0xbc]
call fcn.0041382c
mov byte [ebp - 4], 0x53
push ebx
push edi
lea ecx, [ebp - 0x164]
call fcn.0041382c
mov byte [ebp - 4], 0x54
push ebx
push edi
lea ecx, [ebp - 0x180]
call fcn.0041382c
mov byte [ebp - 4], 0x55
push ebx
push edi
lea ecx, [ebp - 0x110]
call fcn.0041382c
mov byte [ebp - 4], 0x56
push ebx
push edi
lea ecx, [ebp - 0xf64]
call fcn.0041382c
mov byte [ebp - 4], 0x57
push ebx
push edi
lea ecx, [ebp - 0x1b8]
call fcn.0041382c
mov byte [ebp - 4], 0x58
push ebx
push edi
lea ecx, [ebp - 0x19c]
call fcn.0041382c
mov byte [ebp - 4], 0x59
push ebx
push edi
lea ecx, [ebp - 0x1f0]
call fcn.0041382c
mov byte [ebp - 4], 0x5a
push ebx
push edi
lea ecx, [ebp - 0x148]
call fcn.0041382c
mov byte [ebp - 4], 0x5b
push ebx
push edi
lea ecx, [ebp - 0x12c]
call fcn.0041382c
mov byte [ebp - 4], 0x5c
push 0x2726
lea ecx, [ebp - 0x3c0]
call fcn.004901f2
mov byte [ebp - 4], 0x5d
mov dword [esp], 0x2773
lea ecx, [ebp - 0x3a4]
call fcn.004901f2
mov byte [ebp - 4], 0x5e
mov dword [esp], 0x2775
lea ecx, [ebp - 0x388]
call fcn.004901f2
mov byte [ebp - 4], 0x5f
mov dword [esp], 0x2777
lea ecx, [ebp - 0x36c]
call fcn.004901f2
mov byte [ebp - 4], 0x60
mov dword [esp], 0x2779
lea ecx, [ebp - 0x350]
call fcn.004901f2
pop ecx
mov byte [ebp - 4], 0x62
mov dword [ebp - 0xde0], ebx
mov esi, fcn.00415ae1
cmp dword [ebp - 0xde0], 5
jae 0x43761d
mov eax, dword [ebp + 0xc]
cmp byte [eax], bl
jne 0x43761d
mov dword [ebp - 0x88], 7
push ebx
lea ecx, [ebp - 0xa0]
call fcn.00412c1b
mov byte [ebp - 4], 0x63
mov dword [ebp - 0xdd0], ebx
mov dword [ebp - 0xdcc], ebx
mov dword [ebp - 0xdc8], ebx
mov byte [ebp - 4], 0x64
mov dword [ebp - 0xdf0], ebx
mov dword [ebp - 0xe20], ebx
mov dword [ebp - 0xe1c], ebx
mov dword [ebp - 0xe18], ebx
mov byte [ebp - 4], 0x65
mov dword [ebp - 0xe78], ebx
mov dword [ebp - 0xe74], ebx
mov dword [ebp - 0xe70], ebx
mov byte [ebp - 4], 0x66
mov dword [ebp - 0xdfc], ebx
mov dword [ebp - 0xdf8], ebx
mov dword [ebp - 0xdf4], ebx
mov byte [ebp - 4], 0x67
push 1
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0xdc0], esp
push 0x62000c
push eax
call fcn.00438124
pop ecx
pop ecx
mov byte [ebp - 4], 0x68
mov esi, dword [ebp - 0xde0]
imul esi, esi, 0x1c
lea eax, [ebp + esi - 0x450]
push eax
mov byte [ebp - 4], 0x67
lea edi, [ebp - 0xe24]
call fcn.004381a6
add esp, 0x14
push 1
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0xdc0], esp
push 0x62000c
push eax
call fcn.00438124
pop ecx
pop ecx
mov byte [ebp - 4], 0x69
lea eax, [ebp + esi - 0x330]
push eax
mov byte [ebp - 4], 0x67
lea edi, [ebp - 0xe7c]
call fcn.004381a6
add esp, 0x14
push 1
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0xdc0], esp
push 0x62000c
push eax
call fcn.00438124
pop ecx
pop ecx
mov byte [ebp - 4], 0x6a
lea eax, [ebp + esi - 0x2a0]
push eax
mov byte [ebp - 4], 0x67
lea edi, [ebp - 0xe00]
call fcn.004381a6
add esp, 0x14
push 0x620010
lea ecx, [ebp - 0x4c]
call fcn.00412eb0
push str.__category_
push 0xffffffffffffffff
push ebx
lea ecx, [ebp + esi - 0x3c0]
push ecx
mov ecx, eax
call fcn.004123fc
mov ecx, eax
call fcn.00412eb0
mov dword [ebp - 0xdbc], ebx
lea ecx, [ebp - 0xe24]
call fcn.0042cd9e
test eax, eax
jbe 0x43669f
mov eax, dword [ebp + 0xc]
cmp byte [eax], bl
jne 0x43757e
mov dword [ebp - 0xed4], ebx
mov dword [ebp - 0xed0], ebx
mov dword [ebp - 0xecc], ebx
mov byte [ebp - 4], 0x6b
lea eax, [ebp - 0xed8]
push eax
lea eax, [ebp - 0xdd4]
call fcn.004379f4
push dword [ebp - 0xdbc]
lea esi, [ebp - 0xe7c]
call fcn.00437816
push eax
lea ecx, [ebp - 0x1f0]
call fcn.00415abb
mov byte [ebp - 4], 0x6c
lea eax, [ebp - 0xee0]
push eax
lea eax, [ebp - 0x1f0]
push eax
call fcn.00438724
pop ecx
pop ecx
mov edi, eax
push dword [ebp - 0xdbc]
lea esi, [ebp - 0xe24]
call fcn.00437816
mov esi, eax
push str.Select
lea ecx, [ebp - 0xa0]
call fcn.00412eb0
push 0xffffffffffffffff
push ebx
push esi
mov ecx, eax
call fcn.004123fc
push str._from
mov ecx, eax
call fcn.00412eb0
push 0xffffffffffffffff
push ebx
imul edi, edi, 0x1c
lea ecx, [ebp + edi - 0x530]
push ecx
mov ecx, eax
call fcn.004123fc
cmp dword [ebp - 0x88], 8
mov edi, dword [ebp - 0x9c]
jae 0x435ada
lea edi, [ebp - 0x9c]
push 0xc
call fcn.00536391
pop ecx
mov esi, eax
mov dword [ebp - 0xdc0], esi
mov byte [ebp - 4], 0x6d
cmp esi, ebx
je 0x435afc
push edi
call fcn.0043c07e
mov esi, eax
jmp 0x435afe
xor esi, esi
mov byte [ebp - 4], 0x6c
mov dword [ebp - 0xe5c], esi
cmp esi, ebx
jne 0x435b16
push 0x8007000e
call fcn.005162a0
mov byte [ebp - 4], 0x6e
cmp esi, ebx
je 0x435b22
mov esi, dword [esi]
jmp 0x435b24
xor esi, esi
mov eax, dword [ebp - 0xe3c]
mov ecx, dword [eax]
lea edx, [ebp - 0xdf0]
push edx
push ebx
push 0x10
push esi
push 0x620060
push eax
call dword [ecx + 0x50]
neg eax
sbb al, al
inc al
mov byte [ebp - 0xde5], al
mov byte [ebp - 4], 0x6c
lea edi, [ebp - 0xe5c]
call fcn.0043c03e
cmp byte [ebp - 0xde5], bl
je 0x436657
lea ecx, [ebp - 0xa0]
call fcn.0043c0ae
mov dword [ebp - 0xfc8], ebx
push 0x4c
push ebx
lea eax, [ebp - 0xfc4]
push eax
call fcn.005389c0
add esp, 0xc
mov eax, dword [ebp - 0xdf0]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
cmp dword [ebp - 0xde0], 3
je 0x435bc3
cmp dword [ebp - 0xde0], 4
je 0x435bc3
cmp dword [ebp - 0xde0], 1
je 0x435bc3
lea edx, [ebp - 0xe14]
push edx
lea edx, [ebp - 0xfc8]
push edx
push 1
jmp 0x435bd3
lea edx, [ebp - 0xe14]
push edx
lea edx, [ebp - 0xfc8]
push edx
push 0x14
push 0xffffffffffffffff
mov eax, dword [ebp - 0xdf0]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
cmp eax, 0x80041003
jne 0x435bed
call fcn.00438234
cmp dword [ebp - 0xe14], ebx
je 0x436965
mov dword [ebp - 0xdc4], ebx
jle 0x436661
mov eax, dword [ebp + 0xc]
cmp byte [eax], bl
jne 0x436661
lea eax, [ebp - 0xe38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp - 0xdc4]
cmp dword [ebp + eax*4 - 0xfc8], ebx
je 0x43663d
push dword [ebp - 0xdbc]
lea esi, [ebp - 0xe24]
call fcn.00437816
cmp dword [eax + 0x18], 8
jb 0x435c4c
mov ecx, dword [eax + 4]
jmp 0x435c4f
lea ecx, [eax + 4]
mov eax, dword [ebp - 0xdc4]
mov eax, dword [ebp + eax*4 - 0xfc8]
mov edx, dword [eax]
push ebx
push ebx
lea esi, [ebp - 0xe38]
push esi
push ebx
push ecx
push eax
call dword [edx + 0x10]
cmp eax, ebx
jl 0x43662a
test byte [ebp - 0xe38], 1
jne 0x4365d6
cmp word [ebp - 0xe38], 0x2008
jne 0x435d84
push 0x617934
lea ecx, [ebp - 0xf64]
call fcn.00415a69
mov byte [ebp - 4], 0x6f
lea eax, [ebp - 0xf64]
push eax
push ecx
push dword [ebp - 0xdbc]
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov ecx, eax
call fcn.00437883
mov byte [ebp - 4], 0x6c
push ebx
push 1
lea ecx, [ebp - 0xf64]
call fcn.0041382c
push dword [ebp - 0xdbc]
lea ecx, [ebp - 0xdd4]
call fcn.00437961
mov ecx, eax
call fcn.0042cd9e
mov edi, eax
dec edi
push dword [ebp - 0xe30]
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetElemsize]
dec eax
mov dword [ebp - 0xdc0], eax
mov eax, ebx
mov dword [ebp - 0xe44], eax
js 0x435d84
mov dword [ebp - 0xddc], eax
lea eax, [ebp - 0xe48]
push eax
lea eax, [ebp - 0xddc]
push eax
push dword [ebp - 0xe30]
call dword [sym.imp.OLEAUT32.dll_SafeArrayPutElement]
push 0x620264
test eax, eax
jne 0x435d41
push dword [ebp - 0xe48]
jmp 0x435d46
push 0x620268
push edi
push ecx
push dword [ebp - 0xdbc]
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
mov ecx, eax
call fcn.00412eb0
mov ecx, eax
call fcn.00412eb0
mov eax, dword [ebp - 0xe44]
inc eax
mov dword [ebp - 0xe44], eax
cmp eax, dword [ebp - 0xdc0]
jle 0x435d10
cmp word [ebp - 0xe38], 8
jne 0x43662a
push 0x62026c
push ecx
mov edi, dword [ebp - 0xdbc]
push edi
lea esi, [ebp - 0xe24]
call fcn.00437816
pop ecx
mov ecx, eax
call fcn.0040ac8c
test eax, eax
jne 0x436006
lea eax, [ebp - 0xe38]
push eax
lea eax, [ebp - 0xef8]
push eax
call fcn.0043bf24
mov byte [ebp - 4], 0x70
lea eax, [ebp - 0xe40]
push eax
lea esi, [ebp - 0xef8]
call fcn.0043bf5a
mov byte [ebp - 4], 0x72
mov eax, esi
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0xe40]
cmp eax, ebx
je 0x435dfe
mov eax, dword [eax]
jmp 0x435e00
xor eax, eax
push eax
lea ecx, [ebp - 0x84]
call fcn.00415a69
mov byte [ebp - 4], 0x73
push 4
push ebx
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0x84]
call fcn.004377e1
mov byte [ebp - 4], 0x74
push 2
pop esi
push esi
push 4
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x84]
call fcn.004377e1
mov byte [ebp - 4], 0x75
push esi
push 6
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x84]
call fcn.004377e1
mov byte [ebp - 4], 0x76
push esi
push 8
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x84]
call fcn.004377e1
mov byte [ebp - 4], 0x77
push esi
push 0xa
lea eax, [ebp - 0x180]
push eax
lea ecx, [ebp - 0x84]
call fcn.004377e1
mov byte [ebp - 4], 0x78
push esi
push 0xc
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x84]
call fcn.004377e1
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0x84]
call fcn.0043c0ae
or edi, 0xffffffff
push edi
push ebx
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x84]
call fcn.004123fc
mov esi, 0x62028c
push esi
mov ecx, eax
call fcn.00412eb0
push edi
push ebx
lea ecx, [ebp - 0xf4]
push ecx
mov ecx, eax
call fcn.004123fc
push esi
mov ecx, eax
call fcn.00412eb0
push edi
push ebx
lea ecx, [ebp - 0xd8]
push ecx
mov ecx, eax
call fcn.004123fc
mov esi, 0x620268
push esi
mov ecx, eax
call fcn.00412eb0
push edi
push ebx
lea ecx, [ebp - 0x164]
push ecx
mov ecx, eax
call fcn.004123fc
mov edi, 0x620a10
push edi
mov ecx, eax
call fcn.00412eb0
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x180]
push ecx
mov ecx, eax
call fcn.004123fc
push edi
mov ecx, eax
call fcn.00412eb0
push esi
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x110]
push ecx
mov ecx, eax
call fcn.004123fc
mov ecx, eax
call fcn.00412eb0
lea eax, [ebp - 0x84]
push eax
push ecx
push dword [ebp - 0xdbc]
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov ecx, eax
call fcn.00437883
mov byte [ebp - 4], 0x78
push ebx
xor esi, esi
inc esi
push esi
lea ecx, [ebp - 0x110]
call fcn.0041382c
mov byte [ebp - 4], 0x77
push ebx
push esi
lea ecx, [ebp - 0x180]
call fcn.0041382c
mov byte [ebp - 4], 0x76
push ebx
push esi
lea ecx, [ebp - 0x164]
call fcn.0041382c
mov byte [ebp - 4], 0x75
push ebx
push esi
lea ecx, [ebp - 0xbc]
call fcn.0041382c
mov byte [ebp - 4], 0x74
push ebx
push esi
lea ecx, [ebp - 0xf4]
call fcn.0041382c
mov byte [ebp - 4], 0x73
push ebx
push esi
lea ecx, [ebp - 0xd8]
call fcn.0041382c
mov byte [ebp - 4], 0x72
push ebx
push esi
lea ecx, [ebp - 0x84]
call fcn.0041382c
mov byte [ebp - 4], 0x6c
lea edi, [ebp - 0xe40]
jmp 0x4365cf
push 0x620290
push ecx
push edi
lea esi, [ebp - 0xe24]
call fcn.00437816
pop ecx
mov ecx, eax
call fcn.0040ac8c
test eax, eax
je 0x43644f
push str.Freespace
push ecx
push edi
call fcn.00437816
pop ecx
mov ecx, eax
call fcn.0040ac8c
test eax, eax
je 0x43644f
push str.Capacity
push ecx
push edi
call fcn.00437816
pop ecx
mov ecx, eax
call fcn.0040ac8c
test eax, eax
jne 0x43617e
lea eax, [ebp - 0xe38]
push eax
lea eax, [ebp - 0xf28]
push eax
call fcn.0043bf24
mov byte [ebp - 4], 0x81
lea eax, [ebp - 0xe04]
push eax
lea esi, [ebp - 0xf28]
call fcn.0043bf5a
mov byte [ebp - 4], 0x83
mov eax, esi
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0xe04]
cmp eax, ebx
je 0x4360a4
mov eax, dword [eax]
jmp 0x4360a6
xor eax, eax
push eax
lea ecx, [ebp - 0x20c]
call fcn.00415a69
mov byte [ebp - 4], 0x84
push str._.2f
lea eax, [ebp - 0x878]
push eax
call fcn.00409f00
mov byte [ebp - 4], 0x85
lea eax, [ebp - 0xee8]
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.00438798
pop ecx
pop ecx
fmul qword [0x6341e0]
fstp dword [ebp - 0xdc0]
lea eax, [ebp - 0xdc0]
push eax
lea esi, [ebp - 0x878]
call fcn.00438293
lea edx, [ebp - 0x108c]
mov ecx, esi
call fcn.00409f9c
mov byte [ebp - 4], 0x86
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x20c]
call fcn.00413799
mov byte [ebp - 4], 0x85
push ebx
push 1
lea ecx, [ebp - 0x108c]
call fcn.0041382c
lea eax, [ebp - 0x20c]
push eax
push ecx
push dword [ebp - 0xdbc]
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov ecx, eax
call fcn.00437883
mov byte [ebp - 4], 0x84
mov eax, esi
push eax
call fcn.00402184
mov byte [ebp - 4], 0x83
push ebx
push 1
lea ecx, [ebp - 0x20c]
call fcn.0041382c
mov byte [ebp - 4], 0x6c
lea edi, [ebp - 0xe04]
jmp 0x4365cf
push str.Speed
push ecx
push edi
lea esi, [ebp - 0xe24]
call fcn.00437816
pop ecx
mov ecx, eax
call fcn.0040ac8c
test eax, eax
jne 0x4362be
lea eax, [ebp - 0xe38]
push eax
lea eax, [ebp - 0xf48]
push eax
call fcn.0043bf24
mov byte [ebp - 4], 0x87
lea eax, [ebp - 0xe08]
push eax
lea esi, [ebp - 0xf48]
call fcn.0043bf5a
mov byte [ebp - 4], 0x89
mov eax, esi
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0xe08]
cmp eax, ebx
je 0x4361e4
mov eax, dword [eax]
jmp 0x4361e6
xor eax, eax
push eax
lea ecx, [ebp - 0x12c]
call fcn.00415a69
mov byte [ebp - 4], 0x8a
push str._.2f_Mbit_s
lea eax, [ebp - 0xb18]
push eax
call fcn.00409f00
mov byte [ebp - 4], 0x8b
lea eax, [ebp - 0xee4]
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.00438798
pop ecx
pop ecx
fdiv qword [0x6341d8]
fstp dword [ebp - 0xdc0]
lea eax, [ebp - 0xdc0]
push eax
lea esi, [ebp - 0xb18]
call fcn.00438293
lea edx, [ebp - 0x10e0]
mov ecx, esi
call fcn.00409f9c
mov byte [ebp - 4], 0x8c
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x12c]
call fcn.00413799
mov byte [ebp - 4], 0x8b
push ebx
push 1
lea ecx, [ebp - 0x10e0]
call fcn.0041382c
lea eax, [ebp - 0x12c]
push eax
push ecx
push dword [ebp - 0xdbc]
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov ecx, eax
call fcn.00437883
mov byte [ebp - 4], 0x8a
mov eax, esi
push eax
call fcn.00402184
mov byte [ebp - 4], 0x89
push ebx
push 1
lea ecx, [ebp - 0x12c]
call fcn.0041382c
mov byte [ebp - 4], 0x6c
lea edi, [ebp - 0xe08]
jmp 0x4365cf
push str.DeviceID
push ecx
push edi
lea esi, [ebp - 0xe24]
call fcn.00437816
pop ecx
mov ecx, eax
call fcn.0040ac8c
test eax, eax
lea eax, [ebp - 0xe38]
push eax
jne 0x4363ba
lea eax, [ebp - 0xf08]
push eax
call fcn.0043bf24
mov byte [ebp - 4], 0x8d
lea eax, [ebp - 0xdec]
push eax
lea esi, [ebp - 0xf08]
call fcn.0043bf5a
mov byte [ebp - 4], 0x8f
mov eax, esi
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0xdec]
cmp eax, ebx
je 0x436324
mov eax, dword [eax]
jmp 0x436326
xor eax, eax
push eax
lea ecx, [ebp - 0x148]
call fcn.00415a69
mov byte [ebp - 4], 0x90
mov dword [ebp - 0xdc0], 0x3a
push 1
lea eax, [ebp - 0xdc0]
push eax
xor eax, eax
lea ecx, [ebp - 0x148]
call fcn.0040b38c
cmp eax, 0xffffffff
je 0x43636b
lea ecx, [eax + 1]
push ecx
push eax
lea ecx, [ebp - 0x148]
call fcn.00411cbf
lea eax, [ebp - 0x148]
push eax
push ecx
push dword [ebp - 0xdbc]
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov ecx, eax
call fcn.00437883
lea eax, [ebp - 0xe38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov byte [ebp - 4], 0x8f
push ebx
push 1
lea ecx, [ebp - 0x148]
call fcn.0041382c
mov byte [ebp - 4], 0x6c
lea edi, [ebp - 0xdec]
jmp 0x4365cf
lea eax, [ebp - 0xf18]
push eax
call fcn.0043bf24
mov byte [ebp - 4], 0x91
lea eax, [ebp - 0xde4]
push eax
lea esi, [ebp - 0xf18]
call fcn.0043bf5a
mov byte [ebp - 4], 0x93
mov eax, esi
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0xde4]
cmp eax, ebx
je 0x4363f7
mov eax, dword [eax]
jmp 0x4363f9
xor eax, eax
push eax
lea ecx, [ebp - 0x68]
call fcn.00415a69
mov byte [ebp - 4], 0x94
lea eax, [ebp - 0x68]
push eax
push ecx
push dword [ebp - 0xdbc]
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov ecx, eax
call fcn.00437883
lea eax, [ebp - 0xe38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov byte [ebp - 4], 0x93
push ebx
push 1
lea ecx, [ebp - 0x68]
call fcn.0041382c
mov byte [ebp - 4], 0x6c
lea edi, [ebp - 0xde4]
jmp 0x4365cf
lea eax, [ebp - 0xe38]
push eax
lea eax, [ebp - 0xf38]
push eax
call fcn.0043bf24
mov byte [ebp - 4], 0x7a
lea eax, [ebp - 0xdd8]
push eax
lea esi, [ebp - 0xf38]
call fcn.0043bf5a
mov byte [ebp - 4], 0x7c
mov eax, esi
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0xdd8]
cmp eax, ebx
je 0x436493
mov eax, dword [eax]
jmp 0x436495
xor eax, eax
push eax
lea ecx, [ebp - 0x1d4]
call fcn.00415a69
mov byte [ebp - 4], 0x7d
push str._.2f_GiB
lea eax, [ebp - 0x680]
push eax
call fcn.00409f00
mov byte [ebp - 4], 0x7e
lea eax, [ebp - 0xedc]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.00438798
pop ecx
pop ecx
fmul qword [0x6341d0]
fstp dword [ebp - 0xdc0]
lea eax, [ebp - 0xdc0]
push eax
lea esi, [ebp - 0x680]
call fcn.00438293
lea edx, [ebp - 0x1118]
mov ecx, esi
call fcn.00409f9c
mov byte [ebp - 4], 0x7f
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x1d4]
call fcn.00413799
mov byte [ebp - 4], 0x7e
push ebx
push 1
lea ecx, [ebp - 0x1118]
call fcn.0041382c
push str.Freespace
push ecx
push edi
lea esi, [ebp - 0xe24]
call fcn.00437816
pop ecx
mov ecx, eax
call fcn.0040ac8c
test eax, eax
jne 0x436582
push 0x27bc
lea ecx, [ebp - 0x1150]
call fcn.004901f2
mov esi, eax
mov byte [ebp - 4], 0x80
mov dword [esp], 0x620268
lea ecx, [ebp - 0x1d4]
call fcn.00412eb0
push 0xffffffffffffffff
push ebx
push esi
mov ecx, eax
call fcn.004123fc
mov byte [ebp - 4], 0x7e
push ebx
push 1
lea ecx, [ebp - 0x1150]
call fcn.0041382c
lea eax, [ebp - 0x1d4]
push eax
push ecx
push dword [ebp - 0xdbc]
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov ecx, eax
call fcn.00437883
mov byte [ebp - 4], 0x7d
lea eax, [ebp - 0x680]
push eax
call fcn.00402184
mov byte [ebp - 4], 0x7c
push ebx
push 1
lea ecx, [ebp - 0x1d4]
call fcn.0041382c
mov byte [ebp - 4], 0x6c
lea edi, [ebp - 0xdd8]
call fcn.0043c03e
jmp 0x43662a
push 0x617934
lea ecx, [ebp - 0xeb8]
call fcn.00415a69
mov byte [ebp - 4], 0x95
lea eax, [ebp - 0xeb8]
push eax
push ecx
push dword [ebp - 0xdbc]
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov ecx, eax
call fcn.00437883
mov byte [ebp - 4], 0x6c
push ebx
push 1
lea ecx, [ebp - 0xeb8]
call fcn.0041382c
lea eax, [ebp - 0xe38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0xdc4]
mov eax, dword [ebp + eax*4 - 0xfc8]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
inc dword [ebp - 0xdc4]
mov eax, dword [ebp - 0xdc4]
cmp eax, dword [ebp - 0xe14]
jl 0x435c05
jmp 0x436661
push str.ShortRemoteInfo.QueryExFailure
call fcn.0042e877
mov byte [ebp - 4], 0x6b
push ebx
push 1
lea ecx, [ebp - 0x1f0]
call fcn.0041382c
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0xed8]
call fcn.00407743
inc dword [ebp - 0xdbc]
lea ecx, [ebp - 0xe24]
call fcn.0042cd9e
cmp dword [ebp - 0xdbc], eax
jb 0x435a0b
mov eax, dword [ebp + 0xc]
cmp byte [eax], bl
jne 0x43757e
mov eax, dword [ebp - 0xde0]
sub eax, ebx
je 0x43741e
dec eax
je 0x43713f
dec eax
je 0x437018
dec eax
je 0x436e96
dec eax
jne 0x43757e
push ebx
lea ecx, [ebp - 0xdd4]
call fcn.00437961
mov ecx, eax
call fcn.0042cd9e
mov dword [ebp - 0xdc0], eax
mov dword [ebp - 0xdbc], ebx
mov eax, dword [ebp - 0xdc0]
cmp dword [ebp - 0xdbc], eax
jae 0x43757e
mov eax, dword [ebp + 0xc]
cmp byte [eax], bl
jne 0x43757e
push 0x617934
push ecx
push dword [ebp - 0xdbc]
push ecx
push 1
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
pop ecx
mov ecx, eax
call fcn.0040ac8c
test eax, eax
je 0x436e8b
mov dword [ebp - 0xe88], ebx
mov dword [ebp - 0xe84], ebx
mov dword [ebp - 0xe80], ebx
mov byte [ebp - 4], 0xac
mov dword [ebp - 0xe98], ebx
mov dword [ebp - 0xe94], ebx
mov dword [ebp - 0xe90], ebx
mov byte [ebp - 4], 0xad
mov dword [ebp - 0xe54], ebx
mov dword [ebp - 0xe50], ebx
mov dword [ebp - 0xe4c], ebx
mov byte [ebp - 4], 0xae
mov dword [ebp - 0xe68], ebx
mov dword [ebp - 0xe64], ebx
mov dword [ebp - 0xe60], ebx
mov byte [ebp - 4], 0xaf
push 1
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0xddc], esp
push 0x62078c
push eax
call fcn.00438124
pop ecx
pop ecx
mov byte [ebp - 4], 0xb0
push dword [ebp - 0xdbc]
push ecx
push 1
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
push eax
mov byte [ebp - 4], 0xaf
lea edi, [ebp - 0xe8c]
call fcn.004381a6
add esp, 0x14
push 1
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0xddc], esp
push 0x62078c
push eax
call fcn.00438124
pop ecx
pop ecx
mov byte [ebp - 4], 0xb1
push dword [ebp - 0xdbc]
push ecx
push 2
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
push eax
mov byte [ebp - 4], 0xaf
lea edi, [ebp - 0xe9c]
call fcn.004381a6
add esp, 0x14
push 1
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0xddc], esp
push 0x62078c
push eax
call fcn.00438124
pop ecx
pop ecx
mov byte [ebp - 4], 0xb2
push dword [ebp - 0xdbc]
push ecx
push 4
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
push eax
mov byte [ebp - 4], 0xaf
lea edi, [ebp - 0xe58]
call fcn.004381a6
add esp, 0x14
push 1
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0xddc], esp
push 0x62078c
push eax
call fcn.00438124
pop ecx
pop ecx
mov byte [ebp - 4], 0xb3
push dword [ebp - 0xdbc]
push ecx
push 3
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
push eax
mov byte [ebp - 4], 0xaf
lea edi, [ebp - 0xe6c]
call fcn.004381a6
add esp, 0x14
push str._value__s__value__item__s__item_
lea eax, [ebp - 0x7d0]
push eax
call fcn.00409f00
mov byte [ebp - 4], 0xb4
mov byte [ebp - 4], 0xb5
wait
push dword [ebp - 0xdbc]
push ecx
push ebx
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
push eax
push ecx
push ebx
lea esi, [ebp - 0xe00]
call fcn.00437816
push eax
lea esi, [ebp - 0x7d0]
call fcn.0040a212
pop ecx
mov esi, eax
call fcn.0040a212
lea edx, [ebp - 0x1188]
lea ecx, [ebp - 0x7d0]
call fcn.00409f9c
mov byte [ebp - 4], 0xb6
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x4c]
call fcn.004123fc
mov byte [ebp - 4], 0xb5
push ebx
push 1
lea ecx, [ebp - 0x1188]
call fcn.0041382c
wait
mov dword [ebp - 4], 0xb4
jmp 0x436ab8
push str.Got_no_results_from_data_record_in_DoShortRemoteInfo__._Remote_info_will_be_incomplete.
call fcn.0042e877
push str._remote___remote_
mov ecx, dword [ebp - 0xe10]
call fcn.00415a69
or dword [ebp - 0xe0c], 1
mov byte [ebp - 4], 0x6b
push ebx
push 1
lea ecx, [ebp - 0x1f0]
call fcn.0041382c
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0xed8]
call fcn.00407743
mov byte [ebp - 4], 0x66
lea ecx, [ebp - 0xe00]
call fcn.00407743
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0xe7c]
call fcn.00407743
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0xe24]
call fcn.00407743
mov byte [ebp - 4], 0x63
mov eax, dword [ebp - 0xdd0]
cmp eax, ebx
je 0x4369f9
push dword [ebp - 0xdcc]
call fcn.00437e7f
push dword [ebp - 0xdd0]
call fcn.00535941
pop ecx
mov dword [ebp - 0xdd0], ebx
mov dword [ebp - 0xdcc], ebx
mov dword [ebp - 0xdc8], ebx
mov byte [ebp - 4], 0x62
push ebx
push 1
lea ecx, [ebp - 0xa0]
call fcn.0041382c
mov byte [ebp - 4], 0x5c
mov esi, fcn.00415ae1
push esi
push 5
push 0x1c
pop edi
push edi
lea eax, [ebp - 0x3c0]
push eax
call fcn.005366e8
mov byte [ebp - 4], 0x14
push esi
push 5
push edi
lea eax, [ebp - 0x2a0]
push eax
call fcn.005366e8
mov byte [ebp - 4], 0xe
push esi
push 5
push edi
lea eax, [ebp - 0x330]
push eax
call fcn.005366e8
mov byte [ebp - 4], 8
push esi
push 5
push edi
lea eax, [ebp - 0x450]
push eax
call fcn.005366e8
mov byte [ebp - 4], 5
push esi
push 8
push edi
lea eax, [ebp - 0x530]
push eax
call fcn.005366e8
mov byte [ebp - 4], 2
lea eax, [ebp - 0x5d8]
push eax
call fcn.00402184
mov byte [ebp - 4], bl
push ebx
push 1
jmp 0x437738
lea ecx, [ebp - 0xe8c]
call fcn.0042cd9e
cmp eax, ebx
je 0x436c77
xor edi, edi
dec eax
mov dword [ebp - 0xddc], eax
cmp eax, ebx
jbe 0x436c77
push edi
lea esi, [ebp - 0xe8c]
call fcn.00437816
push eax
lea ecx, [ebp - 0x30]
call fcn.00415abb
mov byte [ebp - 4], 0xb8
lea eax, [ebp - 0x30]
push eax
push ecx
push 1
lea esi, [ebp - 0xe00]
call fcn.00437816
pop ecx
push eax
lea esi, [ebp - 0x101c]
call fcn.00437760
pop ecx
pop ecx
mov byte [ebp - 4], 0xb9
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x4c]
call fcn.004123fc
mov byte [ebp - 4], 0xb8
push ebx
push 1
mov ecx, esi
call fcn.0041382c
push 0x617934
lea ecx, [ebp - 0x1b8]
call fcn.00415a69
mov byte [ebp - 4], 0xba
lea ecx, [ebp - 0xe9c]
call fcn.0042cd9e
cmp eax, edi
jbe 0x436b72
push edi
lea esi, [ebp - 0xe9c]
call fcn.00437816
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x1b8]
call fcn.00413799
lea eax, [ebp - 0x1b8]
push eax
push ecx
push 2
lea esi, [ebp - 0xe00]
call fcn.00437816
pop ecx
push eax
lea esi, [ebp - 0x1134]
call fcn.00437760
pop ecx
pop ecx
mov byte [ebp - 4], 0xbb
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x4c]
call fcn.004123fc
mov byte [ebp - 4], 0xba
push ebx
push 1
mov ecx, esi
call fcn.0041382c
push 0x617934
lea ecx, [ebp - 0x19c]
call fcn.00415a69
mov byte [ebp - 4], 0xbc
lea ecx, [ebp - 0xe6c]
call fcn.0042cd9e
cmp eax, edi
jbe 0x436bf2
push edi
lea esi, [ebp - 0xe6c]
call fcn.00437816
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x19c]
call fcn.00413799
lea eax, [ebp - 0x19c]
push eax
push ecx
push 3
lea esi, [ebp - 0xe00]
call fcn.00437816
pop ecx
push eax
lea esi, [ebp - 0x1054]
call fcn.00437760
pop ecx
pop ecx
mov byte [ebp - 4], 0xbd
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x4c]
call fcn.004123fc
mov byte [ebp - 4], 0xbc
push ebx
xor esi, esi
inc esi
push esi
lea ecx, [ebp - 0x1054]
call fcn.0041382c
mov byte [ebp - 4], 0xba
push ebx
push esi
lea ecx, [ebp - 0x19c]
call fcn.0041382c
mov byte [ebp - 4], 0xb8
push ebx
push esi
lea ecx, [ebp - 0x1b8]
call fcn.0041382c
mov byte [ebp - 4], 0xb4
push ebx
push esi
lea ecx, [ebp - 0x30]
call fcn.0041382c
inc edi
cmp edi, dword [ebp - 0xddc]
jb 0x436adc
lea ecx, [ebp - 0xe58]
call fcn.0042cd9e
test eax, eax
je 0x436d73
lea ecx, [ebp - 0xe58]
call fcn.0042cd9e
mov dword [ebp - 0xddc], eax
mov dword [ebp - 0xdc4], ebx
mov eax, dword [ebp - 0xddc]
dec eax
cmp dword [ebp - 0xdc4], eax
jae 0x436d73
push str._value__s__value__item__s__item_
lea eax, [ebp - 0xd10]
push eax
call fcn.00409f00
mov byte [ebp - 4], 0xbe
mov byte [ebp - 4], 0xbf
wait
push dword [ebp - 0xdc4]
lea esi, [ebp - 0xe58]
call fcn.00437816
push eax
push ecx
push 4
lea esi, [ebp - 0xe00]
call fcn.00437816
push eax
lea esi, [ebp - 0xd10]
call fcn.0040a212
pop ecx
mov esi, eax
call fcn.0040a212
lea edx, [ebp - 0x10fc]
lea ecx, [ebp - 0xd10]
call fcn.00409f9c
mov byte [ebp - 4], 0xc0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x4c]
call fcn.004123fc
mov byte [ebp - 4], 0xbf
push ebx
push 1
lea ecx, [ebp - 0x10fc]
call fcn.0041382c
wait
mov dword [ebp - 4], 0xbe
jmp 0x436d58
mov byte [ebp - 4], 0xb4
lea eax, [ebp - 0xd10]
push eax
call fcn.00402184
inc dword [ebp - 0xdc4]
jmp 0x436ca1
push str._value__s__value__item__s__item_
lea eax, [ebp - 0x728]
push eax
call fcn.00409f00
mov byte [ebp - 4], 0xc2
mov byte [ebp - 4], 0xc3
wait
push dword [ebp - 0xdbc]
push ecx
push 5
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
push eax
push ecx
push 5
lea esi, [ebp - 0xe00]
call fcn.00437816
push eax
lea esi, [ebp - 0x728]
call fcn.0040a212
pop ecx
mov esi, eax
call fcn.0040a212
lea edx, [ebp - 0xfe4]
lea ecx, [ebp - 0x728]
call fcn.00409f9c
mov byte [ebp - 4], 0xc4
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x4c]
call fcn.004123fc
mov byte [ebp - 4], 0xc3
push ebx
push 1
lea ecx, [ebp - 0xfe4]
call fcn.0041382c
wait
mov dword [ebp - 4], 0xc2
jmp 0x436e22
push str.__break_
lea ecx, [ebp - 0x4c]
call fcn.00412eb0
mov byte [ebp - 4], 0xb4
lea eax, [ebp - 0x728]
push eax
call fcn.00402184
mov byte [ebp - 4], 0xaf
lea eax, [ebp - 0x7d0]
push eax
call fcn.00402184
mov byte [ebp - 4], 0xae
lea ecx, [ebp - 0xe6c]
call fcn.00407743
mov byte [ebp - 4], 0xad
lea ecx, [ebp - 0xe58]
call fcn.00407743
mov byte [ebp - 4], 0xac
lea ecx, [ebp - 0xe9c]
call fcn.00407743
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0xe8c]
call fcn.00407743
inc dword [ebp - 0xdbc]
jmp 0x4366f3
push ebx
lea ecx, [ebp - 0xdd4]
call fcn.00437961
mov ecx, eax
call fcn.0042cd9e
mov dword [ebp - 0xdc0], eax
mov dword [ebp - 0xdbc], ebx
mov eax, dword [ebp - 0xdc0]
cmp dword [ebp - 0xdbc], eax
jae 0x43757e
mov eax, dword [ebp + 0xc]
cmp byte [eax], bl
jne 0x43757e
push str._value__s__value__item__s__item_
lea eax, [ebp - 0x920]
push eax
call fcn.00409f00
mov byte [ebp - 4], 0xa8
mov byte [ebp - 4], 0xa9
wait
push dword [ebp - 0xdbc]
push ecx
push 2
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
mov edi, eax
push 0x620268
push ecx
push dword [ebp - 0xdbc]
push ecx
push 1
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
pop ecx
mov ecx, eax
call fcn.00412eb0
push 0xffffffffffffffff
push ebx
push edi
mov ecx, eax
call fcn.004123fc
mov edi, eax
push dword [ebp - 0xdbc]
push ecx
push 3
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
mov esi, eax
push 0x62073c
mov ecx, edi
call fcn.00412eb0
push 0xffffffffffffffff
push ebx
push esi
mov ecx, eax
call fcn.004123fc
push eax
push ecx
push dword [ebp - 0xdbc]
push ecx
push ebx
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
push eax
lea esi, [ebp - 0x920]
call fcn.0040a212
pop ecx
mov esi, eax
call fcn.0040a212
lea edx, [ebp - 0x116c]
lea ecx, [ebp - 0x920]
call fcn.00409f9c
mov byte [ebp - 4], 0xaa
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x4c]
call fcn.004123fc
mov byte [ebp - 4], 0xa9
push ebx
push 1
lea ecx, [ebp - 0x116c]
call fcn.0041382c
wait
mov dword [ebp - 4], 0xa8
jmp 0x436ffd
mov byte [ebp - 4], 0x67
lea eax, [ebp - 0x920]
push eax
call fcn.00402184
inc dword [ebp - 0xdbc]
jmp 0x436eb5
push str._value__s__value__item__s__item__value__s__value__item__s__item__value__s__value__item__s__item_
lea eax, [ebp - 0xa70]
push eax
call fcn.00409f00
mov byte [ebp - 4], 0xa4
mov byte [ebp - 4], 0xa5
wait
push ebx
push ecx
push 2
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
push eax
push ecx
push 2
lea esi, [ebp - 0xe00]
call fcn.00437816
push eax
push ecx
push ebx
push ecx
push 1
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
push eax
push ecx
push 1
lea esi, [ebp - 0xe00]
call fcn.00437816
push eax
push ecx
push ebx
push ecx
push ebx
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
push eax
push ecx
push ebx
lea esi, [ebp - 0xe00]
call fcn.00437816
push eax
lea esi, [ebp - 0xa70]
call fcn.0040a212
pop ecx
mov esi, eax
call fcn.0040a212
pop ecx
mov esi, eax
call fcn.0040a212
pop ecx
mov esi, eax
call fcn.0040a212
pop ecx
mov esi, eax
call fcn.0040a212
pop ecx
mov esi, eax
call fcn.0040a212
lea edx, [ebp - 0x10c4]
lea ecx, [ebp - 0xa70]
call fcn.00409f9c
mov byte [ebp - 4], 0xa6
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x4c]
call fcn.004123fc
mov byte [ebp - 4], 0xa5
push ebx
push 1
lea ecx, [ebp - 0x10c4]
call fcn.0041382c
wait
mov dword [ebp - 4], 0xa4
jmp 0x437130
mov byte [ebp - 4], 0x67
lea eax, [ebp - 0xa70]
jmp 0x437578
mov dword [ebp - 0xdc4], ebx
mov dword [ebp - 0xdbc], ebx
push 1
lea ecx, [ebp - 0xdd4]
call fcn.00437961
mov ecx, eax
call fcn.0042cd9e
cmp dword [ebp - 0xdbc], eax
jae 0x4371cb
mov byte [ebp - 4], 0x9a
wait
push dword [ebp - 0xdbc]
push ecx
push 1
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
push eax
call fcn.0043827f
pop ecx
fiadd dword [ebp - 0xdc4]
call fcn.00559b10
mov dword [ebp - 0xdc4], eax
wait
mov dword [ebp - 4], 0x67
jmp 0x4371c3
inc dword [ebp - 0xdbc]
jmp 0x43714b
mov eax, dword [ebp - 0xdc4]
cmp eax, 0x3e8
jl 0x43728e
cdq
and edx, 0x3ff
add eax, edx
sar eax, 0xa
mov dword [ebp - 0xdc4], eax
push str._.2f_GiB
lea eax, [ebp - 0xc68]
push eax
call fcn.00409f00
mov byte [ebp - 4], 0x9c
lea eax, [ebp - 0xdc4]
push eax
lea esi, [ebp - 0xc68]
call fcn.0048e327
lea edx, [ebp - 0x1000]
mov ecx, esi
call fcn.00409f9c
mov esi, eax
mov byte [ebp - 4], 0x9d
push 1
lea ecx, [ebp - 0xdd4]
call fcn.00437961
mov ecx, dword [eax + 4]
push eax
push ecx
lea ecx, [ebp - 0xec8]
call fcn.00426b9c
push esi
push dword [ebp - 0xec4]
push dword [ebp - 0xec8]
lea eax, [ebp - 0xf74]
push eax
push 1
lea ecx, [ebp - 0xdd4]
call fcn.00437961
mov ecx, eax
call fcn.004378d9
mov byte [ebp - 4], 0x9c
push ebx
push 1
lea ecx, [ebp - 0x1000]
call fcn.0041382c
mov byte [ebp - 4], 0x67
lea eax, [ebp - 0xc68]
jmp 0x437329
push str._.2f_MiB
lea eax, [ebp - 0xdb8]
push eax
call fcn.00409f00
mov byte [ebp - 4], 0x9e
lea eax, [ebp - 0xdc4]
push eax
lea esi, [ebp - 0xdb8]
call fcn.0048e327
lea edx, [ebp - 0x1038]
mov ecx, esi
call fcn.00409f9c
mov esi, eax
mov byte [ebp - 4], 0x9f
push 1
lea ecx, [ebp - 0xdd4]
call fcn.00437961
mov ecx, dword [eax + 4]
push eax
push ecx
lea ecx, [ebp - 0xec0]
call fcn.00426b9c
push esi
push dword [ebp - 0xebc]
push dword [ebp - 0xec0]
lea eax, [ebp - 0xf6c]
push eax
push 1
lea ecx, [ebp - 0xdd4]
call fcn.00437961
mov ecx, eax
call fcn.004378d9
mov byte [ebp - 4], 0x9e
push ebx
push 1
lea ecx, [ebp - 0x1038]
call fcn.0041382c
mov byte [ebp - 4], 0x67
lea eax, [ebp - 0xdb8]
push eax
call fcn.00402184
push str._value__s__value__item__s__item__value__s__value__item__s__item_
lea eax, [ebp - 0xbc0]
push eax
call fcn.00409f00
mov byte [ebp - 4], 0xa0
mov byte [ebp - 4], 0xa1
wait
push ebx
push ecx
push 1
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
push eax
push ecx
push 1
lea esi, [ebp - 0xe00]
call fcn.00437816
push eax
push ecx
push ebx
push ecx
push ebx
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
push eax
push ecx
push ebx
lea esi, [ebp - 0xe00]
call fcn.00437816
push eax
lea esi, [ebp - 0xbc0]
call fcn.0040a212
pop ecx
mov esi, eax
call fcn.0040a212
pop ecx
mov esi, eax
call fcn.0040a212
pop ecx
mov esi, eax
call fcn.0040a212
lea edx, [ebp - 0x1070]
lea ecx, [ebp - 0xbc0]
call fcn.00409f9c
mov byte [ebp - 4], 0xa2
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x4c]
call fcn.004123fc
mov byte [ebp - 4], 0xa1
push ebx
push 1
lea ecx, [ebp - 0x1070]
call fcn.0041382c
wait
mov dword [ebp - 4], 0xa0
jmp 0x43740f
mov byte [ebp - 4], 0x67
lea eax, [ebp - 0xbc0]
jmp 0x437578
push str._value__s__value__item__s__item__value__s__value__item__s__item__value__s__value__item__s__item__value__s__value__item__s__item_
lea eax, [ebp - 0x9c8]
push eax
call fcn.00409f00
mov byte [ebp - 4], 0x96
mov byte [ebp - 4], 0x97
wait
push ebx
push ecx
push 3
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
push eax
push ecx
push 3
lea esi, [ebp - 0xe00]
call fcn.00437816
push eax
push ecx
push ebx
push ecx
push 2
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
push eax
push ecx
push 2
lea esi, [ebp - 0xe00]
call fcn.00437816
push eax
push ecx
push ebx
push ecx
push 1
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
push eax
push ecx
push 1
lea esi, [ebp - 0xe00]
call fcn.00437816
push eax
push ecx
push ebx
push ecx
push ebx
lea ecx, [ebp - 0xdd4]
call fcn.00437961
pop ecx
mov esi, eax
call fcn.00437816
push eax
push ecx
push ebx
lea esi, [ebp - 0xe00]
call fcn.00437816
push eax
lea esi, [ebp - 0x9c8]
call fcn.0040a212
pop ecx
mov esi, eax
call fcn.0040a212
pop ecx
mov esi, eax
call fcn.0040a212
pop ecx
mov esi, eax
call fcn.0040a212
pop ecx
mov esi, eax
call fcn.0040a212
pop ecx
mov esi, eax
call fcn.0040a212
pop ecx
mov esi, eax
call fcn.0040a212
pop ecx
mov esi, eax
call fcn.0040a212
lea edx, [ebp - 0x10a8]
lea ecx, [ebp - 0x9c8]
call fcn.00409f9c
mov byte [ebp - 4], 0x98
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x4c]
call fcn.004123fc
mov byte [ebp - 4], 0x97
push ebx
push 1
lea ecx, [ebp - 0x10a8]
call fcn.0041382c
wait
mov dword [ebp - 4], 0x96
jmp 0x43756e
mov byte [ebp - 4], 0x67
lea eax, [ebp - 0x9c8]
push eax
call fcn.00402184
lea esi, [ebp - 0xdd4]
call fcn.00437a58
mov eax, dword [ebp - 0xdf0]
cmp eax, ebx
je 0x437599
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x66
lea ecx, [ebp - 0xe00]
call fcn.00407743
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0xe7c]
call fcn.00407743
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0xe24]
call fcn.00407743
mov byte [ebp - 4], 0x63
mov eax, dword [ebp - 0xdd0]
cmp eax, ebx
je 0x4375eb
push dword [ebp - 0xdcc]
call fcn.00437e7f
push dword [ebp - 0xdd0]
call fcn.00535941
pop ecx
mov dword [ebp - 0xdd0], ebx
mov dword [ebp - 0xdcc], ebx
mov dword [ebp - 0xdc8], ebx
mov byte [ebp - 4], 0x62
push ebx
push 1
lea ecx, [ebp - 0xa0]
call fcn.0041382c
inc dword [ebp - 0xde0]
xor edi, edi
inc edi
jmp 0x435881
mov eax, dword [ebp - 0xe3c]
cmp eax, ebx
je 0x43762d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x5c
push esi
push 5
push 0x1c
lea eax, [ebp - 0x3c0]
push eax
call fcn.005366e8
mov byte [ebp - 4], 0x14
push esi
push 5
push 0x1c
lea eax, [ebp - 0x2a0]
push eax
call fcn.005366e8
mov byte [ebp - 4], 0xe
push esi
push 5
push 0x1c
lea eax, [ebp - 0x330]
push eax
call fcn.005366e8
mov byte [ebp - 4], 8
push esi
push 5
push 0x1c
lea eax, [ebp - 0x450]
push eax
call fcn.005366e8
mov byte [ebp - 4], 5
push esi
push 8
push 0x1c
lea eax, [ebp - 0x530]
push eax
call fcn.005366e8
jmp 0x4376a2
push str.ShortRemoteInfo.CanNOTConnectToServer
call fcn.0042e877
mov eax, dword [ebp - 0xe28]
cmp eax, ebx
je 0x4376be
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x4376be
push str.ShortRemoteInfo.CreatingInstanceFailed
call fcn.0042e877
push str.__end_
lea ecx, [ebp - 0x4c]
call fcn.00412eb0
mov dword [ebp - 0xdc0], 0x64
push str.ShortRemoteInfo.SendStream
lea ecx, [ebp - 0x30]
call fcn.00415a69
mov byte [ebp - 4], 0xc6
lea eax, [ebp - 0x30]
push eax
push 0x6aa4d0
lea esi, [ebp - 0xdc0]
call fcn.004010d3
mov byte [ebp - 4], 5
push ebx
push edi
lea ecx, [ebp - 0x30]
call fcn.0041382c
call dword [sym.imp.ole32.dll_CoUninitialize]
lea eax, [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0xe10]
call fcn.00415abb
or dword [ebp - 0xe0c], edi
mov byte [ebp - 4], 2
lea eax, [ebp - 0x5d8]
push eax
call fcn.00402184
mov byte [ebp - 4], bl
push ebx
push edi
lea ecx, [ebp - 0x4c]
call fcn.0041382c
mov eax, dword [ebp - 0xe10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00536476
leave
ret