Function at 0x448400
Capabilities:
Connect to wmi namespace via wbemlocator
Parse pe header
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x493771
mov eax, dword fs:[0]
push eax
sub esp, 0x178
mov eax, dword [0x4b30fc]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x9c], eax
cmp dword [eax + 8], 0
je 0x44a424
push 0
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
js 0x44a424
lea eax, [ebp - 0x184]
mov dword [ebp - fcn.0044fd20], vtable.std::_Func_impl_no_alloc_class__lambda_702c41efecad5351a2fad07605b88e4f___void___.0
mov dword [ebp - 0x160], eax
mov dword [ebp - 4], 0
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x48], 0
push eax
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 1
call fcn.0044fd20
mov ecx, dword [ebp - 0x160]
mov dword [ebp - 0x48], eax
test ecx, ecx
je 0x4484bb
mov edx, dword [ecx]
lea eax, [ebp - 0x184]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov dword [ebp - 0x160], 0
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
mov dword [ebp - 4], 2
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
js 0x44a3f5
mov dword [ebp - 0xb0], 0
lea eax, [ebp - 0xb0]
push eax
push 0x4964a0
push 1
push 0
push 0x4964b0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x44a3d7
mov dword [ebp - 0xa4], 0
mov byte [ebp - 4], 4
mov edi, dword [ebp - 0xb0]
push 0xc
call fcn.0046aa7a
mov esi, eax
add esp, 4
mov dword [ebp - 0x88], esi
mov byte [ebp - 4], 5
test esi, esi
je 0x448562
push str.ROOTCIMV2
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x44a442
jmp 0x448564
xor esi, esi
mov byte [ebp - 4], 4
mov dword [ebp - 0x88], esi
test esi, esi
je 0x44a44c
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0xa4]
test ecx, ecx
je 0x448594
mov dword [ebp - 0xa4], 0
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [edi]
lea ecx, [ebp - 0xa4]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push dword [esi]
push edi
call dword [eax + 0xc]
or ebx, 0xffffffff
mov byte [ebp - 4], 4
mov edi, eax
mov ecx, ebx
lock xadd dword [esi + 8], ecx
dec ecx
jne 0x4485f7
mov ecx, dword [esi]
test ecx, ecx
je 0x4485d5
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4485ec
push eax
call fcn.0046abc8
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.0046a718
add esp, 8
test edi, edi
js 0x44a3b9
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [ebp - 0xa4]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
js 0x44a3b9
lea eax, [ebp - 0xa4]
push str.os_architecture
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x98], eax
call fcn.00430b10
mov edi, dword [ebp - 0x9c]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x78]
mov ecx, edi
push eax
call fcn.0044b7c0
mov ecx, dword [ebp - 0x18]
cmp ecx, 8
jb 0x448689
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44867f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a456
push ecx
push edx
call fcn.0046a718
add esp, 8
mov esi, dword [ebp - 0x78]
cmp esi, dword [edi + 4]
je 0x4487ff
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a45b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x70], eax
push str.OSArchitecture
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 7
call fcn.00402a50
test al, al
jne 0x4486d3
push 0xe
push str.OSArchitecture
lea ecx, [ebp - 0x70]
call fcn.00402d80
mov byte [ebp - 4], 8
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a465
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x74], eax
push str.Win32_OperatingSystem
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 9
call fcn.00402a50
test al, al
jne 0x448715
push 0x15
push str.Win32_OperatingSystem
lea ecx, [ebp - 0x74]
call fcn.00402d80
mov byte [ebp - 4], 0xa
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a46f
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x78], edi
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044a660
mov byte [ebp - 4], 0xd
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x448770
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xe
mov eax, ebx
mov edx, dword [ebp - 0x74]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44878e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xf
mov eax, ebx
mov edx, dword [ebp - 0x70]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4487ac
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp word [ebp - 0x94], 8
jne 0x4487e8
mov edx, dword [ebp - 0x8c]
mov edi, dword [esi + 0x20]
test edx, edx
jne 0x4487c7
xor ecx, ecx
jmp 0x4487df
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4487d0
sub ecx, esi
sar ecx, 1
push ecx
push edx
mov ecx, edi
call fcn.00402d80
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 4
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edi, dword [ebp - 0x9c]
push str.os_installdate
lea ecx, [ebp - 0x2c]
call fcn.00430b10
lea eax, [ebp - 0x2c]
mov ecx, edi
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.0044b7c0
mov ecx, dword [ebp - 0x18]
mov esi, dword [eax]
cmp ecx, 8
jb 0x44885a
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x448850
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a479
push ecx
push edx
call fcn.0046a718
add esp, 8
cmp esi, dword [edi + 4]
je 0x4489cf
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a47e
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x70], eax
push str.InstallDate
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x10
call fcn.00402a50
test al, al
jne 0x4488a1
push 0xb
push str.InstallDate
lea ecx, [ebp - 0x70]
call fcn.00402d80
mov byte [ebp - 4], 0x11
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a488
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x74], eax
push str.Win32_OperatingSystem
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x12
call fcn.00402a50
test al, al
jne 0x4488e3
push 0x15
push str.Win32_OperatingSystem
lea ecx, [ebp - 0x74]
call fcn.00402d80
mov byte [ebp - 4], 0x13
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a492
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x78], edi
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044a660
mov byte [ebp - 4], 0x16
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x44893e
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x17
mov eax, ebx
mov edx, dword [ebp - 0x74]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44895c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x18
mov eax, ebx
mov edx, dword [ebp - 0x70]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44897a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp word [ebp - 0x94], 8
jne 0x4489b8
mov edx, dword [ebp - 0x8c]
mov edi, dword [esi + 0x20]
test edx, edx
jne 0x448995
xor ecx, ecx
jmp 0x4489af
mov ecx, edx
lea esi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4489a0
sub ecx, esi
sar ecx, 1
push ecx
push edx
mov ecx, edi
call fcn.00402d80
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 4
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edi, dword [ebp - 0x9c]
push str.os_name
lea ecx, [ebp - 0x2c]
call fcn.00430b10
lea eax, [ebp - 0x2c]
mov ecx, edi
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.0044b7c0
mov ecx, dword [ebp - 0x18]
mov esi, dword [eax]
cmp ecx, 8
jb 0x448a2a
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x448a20
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a49c
push ecx
push edx
call fcn.0046a718
add esp, 8
cmp esi, dword [edi + 4]
je 0x448b9f
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a4a1
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x70], eax
push str.Caption
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x19
call fcn.00402a50
test al, al
jne 0x448a71
push 7
push str.Caption
lea ecx, [ebp - 0x70]
call fcn.00402d80
mov byte [ebp - 4], 0x1a
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a4ab
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x74], eax
push str.Win32_OperatingSystem
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x1b
call fcn.00402a50
test al, al
jne 0x448ab3
push 0x15
push str.Win32_OperatingSystem
lea ecx, [ebp - 0x74]
call fcn.00402d80
mov byte [ebp - 4], 0x1c
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a4b5
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x78], edi
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044a660
mov byte [ebp - 4], 0x1f
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x448b0e
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x20
mov eax, ebx
mov edx, dword [ebp - 0x74]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x448b2c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x21
mov eax, ebx
mov edx, dword [ebp - 0x70]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x448b4a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp word [ebp - 0x94], 8
jne 0x448b88
mov edx, dword [ebp - 0x8c]
mov edi, dword [esi + 0x20]
test edx, edx
jne 0x448b65
xor ecx, ecx
jmp 0x448b7f
mov ecx, edx
lea esi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x448b70
sub ecx, esi
sar ecx, 1
push ecx
push edx
mov ecx, edi
call fcn.00402d80
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 4
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edi, dword [ebp - 0x9c]
push str.os_virtmem
lea ecx, [ebp - 0x2c]
call fcn.00430b10
lea eax, [ebp - 0x2c]
mov ecx, edi
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.0044b7c0
mov ecx, dword [ebp - 0x18]
mov esi, dword [eax]
cmp ecx, 8
jb 0x448bfa
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x448bf0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a4bf
push ecx
push edx
call fcn.0046a718
add esp, 8
cmp esi, dword [edi + 4]
je 0x448d6f
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a4c4
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x70], eax
push str.TotalVirtualMemorySize
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x22
call fcn.00402a50
test al, al
jne 0x448c41
push 0x16
push str.TotalVirtualMemorySize
lea ecx, [ebp - 0x70]
call fcn.00402d80
mov byte [ebp - 4], 0x23
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a4ce
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x74], eax
push str.Win32_OperatingSystem
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x24
call fcn.00402a50
test al, al
jne 0x448c83
push 0x15
push str.Win32_OperatingSystem
lea ecx, [ebp - 0x74]
call fcn.00402d80
mov byte [ebp - 4], 0x25
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a4d8
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x78], edi
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044a660
mov byte [ebp - 4], 0x28
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x448cde
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x29
mov eax, ebx
mov edx, dword [ebp - 0x74]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x448cfc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2a
mov eax, ebx
mov edx, dword [ebp - 0x70]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x448d1a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp word [ebp - 0x94], 8
jne 0x448d58
mov edx, dword [ebp - 0x8c]
mov edi, dword [esi + 0x20]
test edx, edx
jne 0x448d35
xor ecx, ecx
jmp 0x448d4f
mov ecx, edx
lea esi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x448d40
sub ecx, esi
sar ecx, 1
push ecx
push edx
mov ecx, edi
call fcn.00402d80
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 4
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edi, dword [ebp - 0x9c]
push str.os_mem
lea ecx, [ebp - 0x2c]
call fcn.00430b10
lea eax, [ebp - 0x2c]
mov ecx, edi
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.0044b7c0
mov ecx, dword [ebp - 0x18]
mov esi, dword [eax]
cmp ecx, 8
jb 0x448dca
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x448dc0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a4e2
push ecx
push edx
call fcn.0046a718
add esp, 8
cmp esi, dword [edi + 4]
je 0x448f3f
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a4e7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x70], eax
push str.TotalVisibleMemorySize
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x2b
call fcn.00402a50
test al, al
jne 0x448e11
push 0x16
push str.TotalVisibleMemorySize
lea ecx, [ebp - 0x70]
call fcn.00402d80
mov byte [ebp - 4], 0x2c
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a4f1
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x74], eax
push str.Win32_OperatingSystem
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x2d
call fcn.00402a50
test al, al
jne 0x448e53
push 0x15
push str.Win32_OperatingSystem
lea ecx, [ebp - 0x74]
call fcn.00402d80
mov byte [ebp - 4], 0x2e
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a4fb
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x78], edi
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x2f
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044a660
mov byte [ebp - 4], 0x31
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x448eae
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x32
mov eax, ebx
mov edx, dword [ebp - 0x74]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x448ecc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x33
mov eax, ebx
mov edx, dword [ebp - 0x70]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x448eea
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp word [ebp - 0x94], 8
jne 0x448f28
mov edx, dword [ebp - 0x8c]
mov edi, dword [esi + 0x20]
test edx, edx
jne 0x448f05
xor ecx, ecx
jmp 0x448f1f
mov ecx, edx
lea esi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x448f10
sub ecx, esi
sar ecx, 1
push ecx
push edx
mov ecx, edi
call fcn.00402d80
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 4
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edi, dword [ebp - 0x9c]
push str.cpu_name
lea ecx, [ebp - 0x2c]
call fcn.00430b10
lea eax, [ebp - 0x2c]
mov ecx, edi
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.0044b7c0
mov ecx, dword [ebp - 0x18]
mov esi, dword [eax]
cmp ecx, 8
jb 0x448f9a
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x448f90
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a505
push ecx
push edx
call fcn.0046a718
add esp, 8
cmp esi, dword [edi + 4]
je 0x44910f
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a50a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x70], eax
push str.Name
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x34
call fcn.00402a50
test al, al
jne 0x448fe1
push 4
push str.Name
lea ecx, [ebp - 0x70]
call fcn.00402d80
mov byte [ebp - 4], 0x35
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a514
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x74], eax
push str.Win32_Processor
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x36
call fcn.00402a50
test al, al
jne 0x449023
push 0xf
push str.Win32_Processor
lea ecx, [ebp - 0x74]
call fcn.00402d80
mov byte [ebp - 4], 0x37
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a51e
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x78], edi
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x38
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044a660
mov byte [ebp - 4], 0x3a
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x44907e
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x3b
mov eax, ebx
mov edx, dword [ebp - 0x74]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44909c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x3c
mov eax, ebx
mov edx, dword [ebp - 0x70]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4490ba
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp word [ebp - 0x94], 8
jne 0x4490f8
mov edx, dword [ebp - 0x8c]
mov edi, dword [esi + 0x20]
test edx, edx
jne 0x4490d5
xor ecx, ecx
jmp 0x4490ef
mov ecx, edx
lea esi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4490e0
sub ecx, esi
sar ecx, 1
push ecx
push edx
mov ecx, edi
call fcn.00402d80
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 4
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edi, dword [ebp - 0x9c]
push str.pc_vendor
lea ecx, [ebp - 0x2c]
call fcn.00430b10
lea eax, [ebp - 0x2c]
mov ecx, edi
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.0044b7c0
mov ecx, dword [ebp - 0x18]
mov esi, dword [eax]
cmp ecx, 8
jb 0x44916a
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x449160
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a528
push ecx
push edx
call fcn.0046a718
add esp, 8
cmp esi, dword [edi + 4]
je 0x4492df
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a52d
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x70], eax
push str.Vendor
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x3d
call fcn.00402a50
test al, al
jne 0x4491b1
push 6
push str.Vendor
lea ecx, [ebp - 0x70]
call fcn.00402d80
mov byte [ebp - 4], 0x3e
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a537
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x74], eax
push str.Win32_ComputerSystemProduct
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x3f
call fcn.00402a50
test al, al
jne 0x4491f3
push 0x1b
push str.Win32_ComputerSystemProduct
lea ecx, [ebp - 0x74]
call fcn.00402d80
mov byte [ebp - 4], 0x40
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a541
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x78], edi
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x41
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044a660
mov byte [ebp - 4], 0x43
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x44924e
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x44
mov eax, ebx
mov edx, dword [ebp - 0x74]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44926c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x45
mov eax, ebx
mov edx, dword [ebp - 0x70]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44928a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp word [ebp - 0x94], 8
jne 0x4492c8
mov edx, dword [ebp - 0x8c]
mov edi, dword [esi + 0x20]
test edx, edx
jne 0x4492a5
xor ecx, ecx
jmp 0x4492bf
mov ecx, edx
lea esi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4492b0
sub ecx, esi
sar ecx, 1
push ecx
push edx
mov ecx, edi
call fcn.00402d80
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 4
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edi, dword [ebp - 0x9c]
push str.pc_version
lea ecx, [ebp - 0x2c]
call fcn.00430b10
lea eax, [ebp - 0x2c]
mov ecx, edi
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.0044b7c0
mov ecx, dword [ebp - 0x18]
mov esi, dword [eax]
cmp ecx, 8
jb 0x44933a
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x449330
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a54b
push ecx
push edx
call fcn.0046a718
add esp, 8
cmp esi, dword [edi + 4]
je 0x4494af
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a550
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x70], eax
push str.Version
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x46
call fcn.00402a50
test al, al
jne 0x449381
push 7
push str.Version
lea ecx, [ebp - 0x70]
call fcn.00402d80
mov byte [ebp - 4], 0x47
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a55a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x74], eax
push str.Win32_ComputerSystemProduct
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x48
call fcn.00402a50
test al, al
jne 0x4493c3
push 0x1b
push str.Win32_ComputerSystemProduct
lea ecx, [ebp - 0x74]
call fcn.00402d80
mov byte [ebp - 4], 0x49
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a564
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x78], edi
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x4a
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044a660
mov byte [ebp - 4], 0x4c
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x44941e
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x4d
mov eax, ebx
mov edx, dword [ebp - 0x74]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44943c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x4e
mov eax, ebx
mov edx, dword [ebp - 0x70]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44945a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp word [ebp - 0x94], 8
jne 0x449498
mov edx, dword [ebp - 0x8c]
mov edi, dword [esi + 0x20]
test edx, edx
jne 0x449475
xor ecx, ecx
jmp 0x44948f
mov ecx, edx
lea esi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x449480
sub ecx, esi
sar ecx, 1
push ecx
push edx
mov ecx, edi
call fcn.00402d80
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 4
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edi, dword [ebp - 0x9c]
push str.gpu_name
lea ecx, [ebp - 0x2c]
call fcn.00430b10
lea eax, [ebp - 0x2c]
mov ecx, edi
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.0044b7c0
mov ecx, dword [ebp - 0x18]
mov esi, dword [eax]
cmp ecx, 8
jb 0x44950a
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x449500
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a56e
push ecx
push edx
call fcn.0046a718
add esp, 8
cmp esi, dword [edi + 4]
je 0x44967f
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a573
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x70], eax
push str.Name
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x4f
call fcn.00402a50
test al, al
jne 0x449551
push 4
push str.Name
lea ecx, [ebp - 0x70]
call fcn.00402d80
mov byte [ebp - 4], 0x50
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a57d
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x74], eax
push str.Win32_VideoController
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x51
call fcn.00402a50
test al, al
jne 0x449593
push 0x15
push str.Win32_VideoController
lea ecx, [ebp - 0x74]
call fcn.00402d80
mov byte [ebp - 4], 0x52
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a587
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x78], edi
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x53
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044a660
mov byte [ebp - 4], 0x55
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4495ee
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x56
mov eax, ebx
mov edx, dword [ebp - 0x74]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44960c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x57
mov eax, ebx
mov edx, dword [ebp - 0x70]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44962a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp word [ebp - 0x94], 8
jne 0x449668
mov edx, dword [ebp - 0x8c]
mov edi, dword [esi + 0x20]
test edx, edx
jne 0x449645
xor ecx, ecx
jmp 0x44965f
mov ecx, edx
lea esi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x449650
sub ecx, esi
sar ecx, 1
push ecx
push edx
mov ecx, edi
call fcn.00402d80
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 4
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edi, dword [ebp - 0x9c]
push str.gpu_ram
lea ecx, [ebp - 0x2c]
call fcn.00430b10
lea eax, [ebp - 0x2c]
mov ecx, edi
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.0044b7c0
mov ecx, dword [ebp - 0x18]
mov edi, dword [eax]
mov dword [ebp - 0x88], edi
cmp ecx, 8
jb 0x4496e0
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4496d6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a591
push ecx
push edx
call fcn.0046a718
add esp, 8
mov eax, dword [ebp - 0x9c]
cmp edi, dword [eax + 4]
je 0x449ee7
mov ecx, dword [0x4b89cc]
cmp dword [ecx - 0xc], 0
je 0x449ee7
add ecx, 0xfffffff0
call fcn.00402c30
lea esi, [eax + 0x10]
mov dword [ebp - 0x84], esi
mov byte [ebp - 4], 0x58
mov edx, dword [eax + 4]
mov dword [ebp - 0x7c], edx
test edx, edx
js 0x44a604
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, edx
or eax, ecx
jge 0x449748
push edx
lea ecx, [ebp - 0x84]
call fcn.00402d20
mov esi, dword [ebp - 0x84]
mov edx, dword [ebp - 0x7c]
lea eax, [edx + 1]
push eax
push esi
call fcn.00479ce5
mov eax, dword [ebp - 0x7c]
add esp, 8
cmp eax, dword [esi - 8]
jg 0x44a604
xor ecx, ecx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
cmp dword [esi - 0xc], ecx
jl 0x4499f4
push str.INTEL
push esi
call fcn.0046be07
add esp, 8
test eax, eax
je 0x4499f4
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
je 0x4499f4
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a596
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x70], eax
push str.TotalPhysicalMemory
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x59
call fcn.00402a50
test al, al
jne 0x4497d4
push 0x13
push str.TotalPhysicalMemory
lea ecx, [ebp - 0x70]
call fcn.00402d80
mov byte [ebp - 4], 0x5a
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a5a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x74], eax
push str.Win32_ComputerSystem
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x5b
call fcn.00402a50
test al, al
jne 0x449816
push 0x14
push str.Win32_ComputerSystem
lea ecx, [ebp - 0x74]
call fcn.00402d80
mov byte [ebp - 4], 0x5c
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a5aa
mov eax, dword [ecx]
call dword [eax + 0xc]
lea ebx, [eax + 0x10]
mov dword [ebp - 0x78], ebx
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x5d
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044a660
lea edx, [ebx - 0x10]
mov byte [ebp - 4], 0x5f
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x449871
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x60
mov eax, ebx
mov edx, dword [ebp - 0x74]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44988f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x61
mov eax, ebx
mov edx, dword [ebp - 0x70]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4498ad
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp word [ebp - 0x3c], 8
jne 0x4499ec
push dword [ebp - 0x34]
xorps xmm0, xmm0
lea ecx, [ebp - 0x2c]
movlpd qword [ebp - 0x8c], xmm0
call fcn.00430b10
sub esp, 8
mov byte [ebp - 4], 0x62
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0x15c]
push eax
call fcn.0044b400
mov byte [ebp - 4], 0x64
mov ecx, dword [ebp - 0x18]
cmp ecx, 8
jb 0x449922
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x449918
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a5b4
push ecx
push edx
call fcn.0046a718
add esp, 8
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x15c]
call fcn.0044b830
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ecx + 4]
mov edx, dword [ebp + eax - 0x150]
mov eax, edx
shr eax, 2
test al, 1
jne 0x44997c
test dl, 6
jne 0x44997c
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x88]
shrd ecx, eax, 1
shr eax, 1
push eax
push ecx
push str._llu
push dword [edi + 0x20]
call fcn.00402ff0
mov ecx, dword [ebp - 0x15c]
add esp, 0x10
mov eax, dword [ecx + 4]
mov dword [ebp + eax - method.std::basic_istringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.virtual_0], vtable.std::basic_istringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov eax, dword [ebp - 0x15c]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x60]
mov dword [ebp + ecx - 0x160], eax
lea ecx, [ebp - 0x14c]
call fcn.004304a0
mov eax, dword [ebp - 0x15c]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_istream_wchar_t__struct_std::char_traits_wchar_t__.virtual_0], vtable.std::basic_istream_wchar_t__struct_std::char_traits_wchar_t__.0
mov eax, dword [ebp - 0x15c]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x18]
mov dword [ebp + ecx - 0x160], eax
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 0x65
push eax
mov dword [ebp - 0xfc], vtable.std::ios_base.0
call fcn.00458ad2
add esp, 4
lea eax, [ebp - 0x3c]
jmp 0x449ec5
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a5b9
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x70], eax
push str.PNPDeviceID
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x66
call fcn.00402a50
test al, al
jne 0x449a32
push 0xb
push str.PNPDeviceID
lea ecx, [ebp - 0x70]
call fcn.00402d80
mov byte [ebp - 4], 0x67
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a5c3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x74], eax
push str.Win32_VideoController
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x68
call fcn.00402a50
test al, al
jne 0x449a74
push 0x15
push str.Win32_VideoController
lea ecx, [ebp - 0x74]
call fcn.00402d80
mov byte [ebp - 4], 0x69
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a5cd
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x78], edi
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x6a
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044a660
mov byte [ebp - 4], 0x6c
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x449acc
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x6d
mov eax, ebx
mov edx, dword [ebp - 0x74]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x449aea
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x6e
mov eax, ebx
mov edx, dword [ebp - 0x70]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x449b08
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp word [ebp - 0x24], 8
jne 0x449ec2
mov edi, dword [ebp - 0x1c]
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a5d7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x70], eax
push edi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x6f
call fcn.00402a50
test al, al
jne 0x449b69
test edi, edi
jne 0x449b49
xor ecx, ecx
jmp 0x449b5f
mov ecx, edi
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x449b50
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x70]
call fcn.00402d80
mov byte [ebp - 4], 0x70
mov edi, dword [ebp - 0x70]
mov edx, dword [edi - 0xc]
mov dword [ebp - 0x7c], edx
test edx, edx
js 0x44a604
mov eax, dword [edi - 8]
mov ecx, 1
sub ecx, dword [edi - 4]
sub eax, edx
or eax, ecx
jge 0x449b9e
push edx
lea ecx, [ebp - 0x70]
call fcn.00402d20
mov edi, dword [ebp - 0x70]
mov edx, dword [ebp - 0x7c]
lea eax, [edx + 1]
push eax
push edi
call fcn.004789fa
mov eax, dword [ebp - 0x7c]
add esp, 8
cmp eax, dword [edi - 8]
jg 0x44a604
xor ecx, ecx
mov dword [edi - 0xc], eax
mov word [edi + eax*2], cx
cmp dword [edi - 0xc], ecx
je 0x449ea7
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a5e1
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x80], eax
mov byte [ebp - 4], 0x71
mov dword [ebp - 0xac], 0
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a5eb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov byte [ebp - 4], 0x72
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a5f5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x74], eax
push str.SYSTEMControlSet001ControlClass4d36e968_e325_11ce_bfc1_08002be10318_
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x73
call fcn.00402a50
test al, al
jne 0x449c4d
push 0x4a
push str.SYSTEMControlSet001ControlClass4d36e968_e325_11ce_bfc1_08002be10318_
lea ecx, [ebp - 0x74]
call fcn.00402d80
mov byte [ebp - 4], 0x74
xor eax, eax
mov dword [ebp - 0x78], reloc.OLEAUT32.dll_SysReAllocString
nop word [eax + eax]
push eax
lea eax, [ebp - 0x7c]
push str._04d
push eax
call fcn.00402ff0
add esp, 0xc
lea eax, [ebp - 0x7c]
lea edx, [ebp - 0x74]
lea ecx, [ebp - 0xa8]
push eax
call fcn.0042d680
add esp, 4
mov byte [ebp - 4], 0x75
lea edx, [ebp - 0x78]
push str.MatchingDeviceId
push dword [eax]
lea ecx, [ebp - 0x30]
call fcn.00422320
add esp, 8
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x76
call fcn.00403230
mov byte [ebp - 4], 0x75
mov eax, ebx
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x449ccb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x74
mov eax, ebx
mov edx, dword [ebp - 0xa8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x449cec
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x80]
mov ebx, dword [esi - 0xc]
test ebx, ebx
js 0x44a604
mov eax, dword [esi - 8]
mov ecx, 1
sub ecx, dword [esi - 4]
sub eax, ebx
or eax, ecx
jge 0x449d17
push ebx
lea ecx, [ebp - 0x80]
call fcn.00402d20
mov esi, dword [ebp - 0x80]
lea eax, [ebx + 1]
push eax
push esi
call fcn.004789fa
add esp, 8
cmp ebx, dword [esi - 8]
jg 0x44a604
xor eax, eax
mov dword [esi - 0xc], ebx
mov word [esi + ebx*2], ax
cmp dword [esi - 0xc], eax
je 0x449d57
cmp dword [edi - 0xc], eax
jl 0x449d57
push esi
push edi
call fcn.0046be07
add esp, 8
test eax, eax
je 0x449d57
sub eax, edi
sar eax, 1
cmp eax, 0xffffffff
jne 0x449d73
mov eax, dword [ebp - 0xac]
mov ebx, 0xffffffff
inc eax
cmp dword [esi - 0xc], 0
mov dword [ebp - 0xac], eax
jne 0x449c60
cmp dword [esi - 0xc], 0
je 0x449e47
lea eax, [ebp - 0x7c]
mov dword [ebp - 0xac], 0
push eax
lea edx, [ebp - 0x74]
lea ecx, [ebp - 0xa8]
call fcn.0042d680
add esp, 4
lea ecx, [ebp - 0xac]
push ecx
push 0x20019
push 0
push dword [eax]
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edx, dword [ebp - 0xa8]
or ebx, 0xffffffff
mov dword [ebp - 0x30], eax
add edx, 0xfffffff0
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x449ddd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x449e4a
mov dword [ebp - 0x78], eax
xorps xmm0, xmm0
lea eax, [ebp - 0xa8]
movlpd qword [ebp - 0x34], xmm0
push eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0xa8], 8
push eax
lea eax, [ebp - 0x78]
push eax
push 0
push str.HardwareInformation.qwMemorySize
push dword [ebp - 0xac]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x449e4a
mov eax, dword [ebp - 0x78]
cmp eax, 0xb
je 0x449e29
cmp eax, 3
jne 0x449e4a
push dword [ebp - 0x30]
mov eax, dword [ebp - 0x88]
push dword [ebp - 0x34]
push str._llu
push dword [eax + 0x20]
call fcn.00402ff0
add esp, 0x10
jmp 0x449e4a
or ebx, 0xffffffff
mov byte [ebp - 4], 0x72
mov eax, ebx
mov edx, dword [ebp - 0x74]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x449e68
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x71
mov eax, ebx
mov edx, dword [ebp - 0x7c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x449e86
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x70
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x449ea1
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x84]
mov byte [ebp - 4], 0x6e
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x449ec2
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov byte [ebp - 4], 4
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x449ee7
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
push str.dsk_mbsec
lea ecx, [ebp - 0x2c]
call fcn.00430b10
mov edi, dword [ebp - 0x9c]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x88]
mov ecx, edi
push eax
call fcn.0044b7c0
mov ecx, dword [ebp - 0x18]
mov esi, dword [eax]
cmp ecx, 8
jb 0x449f48
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x449f3e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a5ff
push ecx
push edx
call fcn.0046a718
add esp, 8
cmp esi, dword [edi + 4]
je 0x44a1e9
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a60e
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x80], eax
push str.WHERE_Name____Total_
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x77
call fcn.00402a50
test al, al
jne 0x449f8f
push 0x15
push str.WHERE_Name____Total_
lea ecx, [ebp - 0x80]
call fcn.00402d80
mov byte [ebp - 4], 0x78
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a618
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
push str.DiskBytesPersec
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x79
call fcn.00402a50
test al, al
jne 0x449fd1
push 0xf
push str.DiskBytesPersec
lea ecx, [ebp - 0x7c]
call fcn.00402d80
mov byte [ebp - 4], 0x7a
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a622
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x84], eax
push str.Win32_PerfRawData_PerfDisk_PhysicalDisk
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x7b
call fcn.00402a50
test al, al
jne 0x44a01c
push 0x27
push str.Win32_PerfRawData_PerfDisk_PhysicalDisk
lea ecx, [ebp - 0x84]
call fcn.00402d80
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x7c
push eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044a660
mov byte [ebp - 4], 0x7e
mov eax, ebx
mov edx, dword [ebp - 0x84]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44a05f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x7f
mov eax, ebx
mov edx, dword [ebp - 0x7c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44a07d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x80
mov eax, ebx
mov edx, dword [ebp - 0x80]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44a09b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp word [ebp - 0x24], 8
jne 0x44a1db
push dword [ebp - 0x1c]
xorps xmm0, xmm0
lea ecx, [ebp - 0x44]
movlpd qword [ebp - 0x8c], xmm0
call fcn.00430b10
sub esp, 8
mov byte [ebp - 4], 0x81
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0x15c]
push eax
call fcn.0044b400
mov byte [ebp - 4], 0x83
mov ecx, dword [ebp - 0x30]
cmp ecx, 8
jb 0x44a110
mov edx, dword [ebp - 0x44]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44a106
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a62c
push ecx
push edx
call fcn.0046a718
add esp, 8
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x15c]
call fcn.0044b830
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ecx + 4]
mov edx, dword [ebp + eax - 0x150]
mov eax, edx
shr eax, 2
test al, 1
jne 0x44a16b
test dl, 6
jne 0x44a16b
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x88]
shrd ecx, eax, 0x17
shr eax, 0x17
push eax
push ecx
push str._llu
push dword [esi + 0x20]
call fcn.00402ff0
mov ecx, dword [ebp - 0x15c]
add esp, 0x10
mov eax, dword [ecx + 4]
mov dword [ebp + eax - method.std::basic_istringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.virtual_0], vtable.std::basic_istringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov eax, dword [ebp - 0x15c]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x60]
mov dword [ebp + ecx - 0x160], eax
lea ecx, [ebp - 0x14c]
call fcn.004304a0
mov eax, dword [ebp - 0x15c]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_istream_wchar_t__struct_std::char_traits_wchar_t__.virtual_0], vtable.std::basic_istream_wchar_t__struct_std::char_traits_wchar_t__.0
mov eax, dword [ebp - 0x15c]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x18]
mov dword [ebp + ecx - 0x160], eax
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 0x84
push eax
mov dword [ebp - 0xfc], vtable.std::ios_base.0
call fcn.00458ad2
add esp, 4
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 4
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push str.dsk_iosec
lea ecx, [ebp - 0x2c]
call fcn.00430b10
lea eax, [ebp - 0x2c]
mov ecx, edi
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.0044b7c0
mov ecx, dword [ebp - 0x18]
mov esi, dword [eax]
cmp ecx, 8
jb 0x44a244
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44a23a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a631
push ecx
push edx
call fcn.0046a718
add esp, 8
cmp esi, dword [edi + 4]
je 0x44a3b9
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a636
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x80], eax
push str.WHERE_Name____Total_
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x85
call fcn.00402a50
test al, al
jne 0x44a28b
push 0x15
push str.WHERE_Name____Total_
lea ecx, [ebp - 0x80]
call fcn.00402d80
mov byte [ebp - 4], 0x86
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a640
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
push str.DiskTransfersPersec
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x87
call fcn.00402a50
test al, al
jne 0x44a2cd
push 0x13
push str.DiskTransfersPersec
lea ecx, [ebp - 0x7c]
call fcn.00402d80
mov byte [ebp - 4], 0x88
call fcn.00403910
mov ecx, eax
test ecx, ecx
je 0x44a64a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x84], eax
push str.Win32_PerfRawData_PerfDisk_PhysicalDisk
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x89
call fcn.00402a50
test al, al
jne 0x44a318
push 0x27
push str.Win32_PerfRawData_PerfDisk_PhysicalDisk
lea ecx, [ebp - 0x84]
call fcn.00402d80
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x8a
push eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044a660
mov byte [ebp - 4], 0x8c
mov eax, ebx
mov edx, dword [ebp - 0x84]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44a35b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x8d
mov eax, ebx
mov edx, dword [ebp - 0x7c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44a379
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x8e
mov edx, dword [ebp - 0x80]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x44a395
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp word [ebp - 0x24], 3
jne 0x44a3af
push dword [ebp - 0x1c]
push 0x4a3b70
push dword [esi + 0x20]
call fcn.00402ff0
add esp, 0xc
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xa4]
test ecx, ecx
je 0x44a3d7
mov dword [ebp - 0xa4], 0
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0xb0]
test ecx, ecx
je 0x44a3f5
mov dword [ebp - 0xb0], 0
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [ebp - 4], 0x8f
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x44a654
mov eax, dword [ecx]
call dword [eax + 8]
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x44a424
mov edx, dword [ecx]
lea eax, [ebp - 0x6c]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0046a70a
mov esp, ebp
pop ebp
ret 4
push 0x8007000e
call fcn.0046a410
push 0x8007000e
call fcn.0046a410
call fcn.0046fc3f
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
call fcn.0046fc3f
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
call fcn.0046fc3f
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
call fcn.0046fc3f
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
call fcn.0046fc3f
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
call fcn.0046fc3f
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
call fcn.0046fc3f
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
call fcn.0046fc3f
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
call fcn.0046fc3f
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
call fcn.0046fc3f
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
call fcn.0046fc3f
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
call fcn.0046fc3f
push 0x80070057
call fcn.004036e0
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
call fcn.0046fc3f
call fcn.0046fc3f
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
push 0x80004005
call fcn.004036e0
call fcn.0045347e
int3