Function at 0x436680
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
mov eax, 0x12bc
call fcn.00578070
sub esp, eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x11a0], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x119c], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x11a8], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x11a4], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x11b0], eax
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0x11ac], eax
mov eax, dword [ebp + 0x40]
mov dword [ebp - 0x11b8], eax
mov eax, dword [ebp + 0x44]
mov dword [ebp - 0x11b4], eax
mov eax, dword [ebp + 0x6c]
mov dword [ebp - 0x11c0], eax
mov eax, dword [ebp + 0x70]
mov dword [ebp - 0x11bc], eax
mov eax, dword [ebp + 0x90]
mov dword [ebp - 0x11c8], eax
mov eax, dword [ebp + 0x94]
mov dword [ebp - 0x11c4], eax
lea eax, [ebp - 0x118c]
mov dword [esp + 0x30], eax
lea eax, [ebp - 0x1184]
mov dword [esp + 0x2c], eax
lea eax, [ebp - 0x1178]
mov dword [esp + 0x28], eax
lea eax, [ebp - 0x1170]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x1168]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x1164]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1160]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1154]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1144]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x13c]
mov dword [esp + 8], eax
lea eax, [ebp - 0x138]
mov dword [esp + 4], eax
lea eax, [ebp - 0x134]
mov dword [esp], eax
call sym.___super_fnc__985
mov eax, dword [ebp - 0x13c]
test eax, eax
je 0x43679e
mov eax, 0
jmp 0x4387d4
lea eax, [ebp - 0x1198]
mov dword [esp + 0x60], eax
lea eax, [ebp - 0x1194]
mov dword [esp + 0x5c], eax
lea eax, [ebp - 0x1190]
mov dword [esp + 0x58], eax
lea eax, [ebp - 0x118c]
mov dword [esp + 0x54], eax
lea eax, [ebp - 0x1184]
mov dword [esp + 0x50], eax
lea eax, [ebp - 0x1180]
mov dword [esp + 0x4c], eax
lea eax, [ebp - 0x117c]
mov dword [esp + 0x48], eax
lea eax, [ebp - 0x1178]
mov dword [esp + 0x44], eax
lea eax, [ebp - 0x1174]
mov dword [esp + 0x40], eax
lea eax, [ebp - 0x1170]
mov dword [esp + 0x3c], eax
lea eax, [ebp - 0x116c]
mov dword [esp + 0x38], eax
lea eax, [ebp - 0x1168]
mov dword [esp + 0x34], eax
lea eax, [ebp - 0x1164]
mov dword [esp + 0x30], eax
lea eax, [ebp - 0x1160]
mov dword [esp + 0x2c], eax
lea eax, [ebp - 0x115c]
mov dword [esp + 0x28], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x1154]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x114c]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1148]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1144]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1140]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x113c]
mov dword [esp + 8], eax
lea eax, [ebp - 0x93c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__986
mov eax, dword [ebp - 0x1150]
test eax, eax
jne 0x4368b0
mov eax, 0
jmp 0x4387d4
lea eax, [ebp - 0x1158]
mov dword [esp], eax
call sym.___super_fnc__987
mov eax, dword [ebp - 0x130]
cmp eax, 0xa
je 0x4379ac
cmp eax, 0xa
ja 0x43811a
cmp eax, 5
je 0x4368e9
cmp eax, 6
je 0x436bac
jmp 0x43811a
mov eax, dword [ebp - 0x12c]
cmp eax, 2
je 0x4369fb
cmp eax, 2
ja 0x438389
test eax, eax
je 0x436913
cmp eax, 1
je 0x436998
jmp 0x438389
lea eax, [ebp - 0x1194]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x118c]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1174]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1170]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1168]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x115c]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__988
lea eax, [ebp - 0x115c]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 4], eax
lea eax, [ebp - 0x93c]
mov dword [esp], eax
call sym.___super_fnc__989
jmp 0x436ba7
lea eax, [ebp - 0x1190]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x118c]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x117c]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1160]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1148]
mov dword [esp + 8], eax
lea eax, [ebp - 0x93c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__990
jmp 0x436ba7
movzx eax, byte [ebp - 0x1a]
cmp al, 1
jne 0x436b30
movzx eax, word [ebp - 0x1c]
cmp ax, 0x200
jne 0x436aa4
lea eax, [ebp - 0x1180]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x1178]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1174]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x116c]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1168]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1164]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x115c]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__991
lea eax, [ebp - 0x1164]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 4], eax
lea eax, [ebp - 0x93c]
mov dword [esp], eax
call sym.___super_fnc__992
jmp 0x436ba6
lea eax, [ebp - 0x1188]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x117c]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1170]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1168]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1160]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1154]
mov dword [esp + 8], eax
lea eax, [ebp - 0x13c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x138]
mov dword [esp], eax
call sym.___super_fnc__993
lea eax, [ebp - 0x1168]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 4], eax
lea eax, [ebp - 0x93c]
mov dword [esp], eax
call sym.___super_fnc__994
jmp 0x436ba6
lea eax, [ebp - 0x118c]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1180]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1168]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1154]
mov dword [esp + 8], eax
lea eax, [ebp - 0x13c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x138]
mov dword [esp], eax
call sym.___super_fnc__995
lea eax, [ebp - 0x1168]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 4], eax
lea eax, [ebp - 0x93c]
mov dword [esp], eax
call sym.___super_fnc__996
nop
jmp 0x438389
mov eax, dword [ebp - 0x12c]
cmp eax, 3
je 0x4374cb
cmp eax, 3
ja 0x43838c
cmp eax, 2
je 0x436fe7
cmp eax, 2
ja 0x43838c
test eax, eax
je 0x436be8
cmp eax, 1
je 0x436cfe
jmp 0x43838c
movzx eax, byte [ebp - 0x1a]
cmp al, 1
jne 0x436c79
lea eax, [ebp - 0x1194]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x118c]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1170]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x116c]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1164]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1140]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__997
lea eax, [ebp - 0x116c]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 4], eax
lea eax, [ebp - 0x93c]
mov dword [esp], eax
call sym.___super_fnc__998
jmp 0x4379a7
lea eax, [ebp - 0x1198]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1190]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1180]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1170]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1168]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x13c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x138]
mov dword [esp], eax
call sym.___super_fnc__999
lea eax, [ebp - 0x1170]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 4], eax
lea eax, [ebp - 0x93c]
mov dword [esp], eax
call sym.___super_fnc__1000
jmp 0x4379a7
movzx eax, byte [ebp - 0x1a]
cmp al, 1
jne 0x436d81
lea eax, [ebp - 0x1198]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1174]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1170]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x115c]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x13c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x138]
mov dword [esp], eax
call sym.___super_fnc__1001
lea eax, [ebp - 0x1174]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 4], eax
lea eax, [ebp - 0x93c]
mov dword [esp], eax
call sym.___super_fnc__1002
jmp 0x4379a7
mov eax, dword [ebp - 0x1190]
mov edx, dword [ebp - 0x1158]
mov ecx, dword [ebp - 0x1158]
mov ebx, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11cc], esi
mov edi, dword [ebp - 0x1154]
mov dword [ebp - 0x11d0], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11d4], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11d8], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11dc], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e0], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11e4], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e8], edi
mov esi, dword [ebp - 0x1160]
mov dword [ebp - 0x11ec], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f0], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11f4], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f8], edi
mov esi, dword [ebp - 0x118c]
mov dword [ebp - 0x11fc], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x1200], edi
mov esi, dword [ebp - 0x1178]
mov dword [ebp - 0x1204], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x1208], edi
mov esi, dword [ebp - 0x1194]
mov dword [ebp - 0x120c], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x1210], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1214], esi
mov edi, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x1158]
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], edx
fld1
fstp qword [esp + 0x84]
mov dword [esp + 0x80], 0x10f
fld qword [0x58fc30]
fstp qword [esp + 0x78]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x70], ebx
fld qword [0x58fc40]
fstp qword [esp + 0x68]
fld qword [0x58fc30]
fstp qword [esp + 0x60]
mov eax, dword [ebp - 0x11cc]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x11d0]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x11d4]
mov dword [esp + 0x54], eax
mov eax, dword [ebp - 0x11d8]
mov dword [esp + 0x50], eax
mov eax, dword [ebp - 0x11dc]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp - 0x11e0]
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], 0x38
mov eax, dword [ebp - 0x11e4]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0x11e8]
mov dword [esp + 0x3c], eax
mov eax, dword [ebp - 0x11ec]
mov dword [esp + 0x38], eax
mov eax, dword [ebp - 0x11f0]
mov dword [esp + 0x34], eax
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x30], eax
mov eax, dword [ebp - 0x11f8]
mov dword [esp + 0x2c], eax
mov eax, dword [ebp - 0x11fc]
mov dword [esp + 0x28], eax
mov eax, dword [ebp - 0x1200]
mov dword [esp + 0x24], eax
mov eax, dword [ebp - 0x1204]
mov dword [esp + 0x20], eax
mov eax, dword [ebp - 0x1208]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x120c]
mov dword [esp + 0x18], eax
fldz
fstp qword [esp + 0x10]
mov eax, dword [ebp - 0x1210]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x1214]
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], esi
call sym._ExportWinAPI
mov dword [ebp - 0x1178], eax
mov eax, dword [ebp - 0x1178]
mov ecx, eax
mov eax, dword [ebp - 0x1150]
lea edx, [ebp - 0x93c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.Windows_Server_2008_R2__wS
mov dword [esp + 4], 0x400
mov dword [esp], eax
call ecx
mov dword [ebp - 0x1158], eax
jmp 0x4379a7
movzx eax, byte [ebp - 0x1a]
cmp al, 1
jne 0x43725d
mov eax, dword [ebp - 0x1174]
mov edx, dword [ebp - 0x1158]
mov ecx, dword [ebp - 0x1158]
mov ebx, dword [ebp - 0x13c]
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11cc], edi
mov esi, dword [ebp - 0x115c]
mov dword [ebp - 0x11d0], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11d4], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11d8], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11dc], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e0], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11e4], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e8], esi
mov edi, dword [ebp - 0x116c]
mov dword [ebp - 0x11ec], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f0], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x11f4], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f8], esi
mov edi, dword [ebp - 0x1144]
mov dword [ebp - 0x11fc], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1200], esi
mov edi, dword [ebp - 0x1174]
mov dword [ebp - 0x1204], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1208], esi
mov edi, dword [ebp - 0x118c]
mov dword [ebp - 0x120c], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1210], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x1214], edi
mov edi, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x1158]
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], edx
fld qword [0x58fc68]
fstp qword [esp + 0x84]
mov dword [esp + 0x80], 0x10f
fld qword [0x58fc50]
fstp qword [esp + 0x78]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x70], ebx
fld qword [0x58fc60]
fstp qword [esp + 0x68]
fld qword [0x58fc58]
fstp qword [esp + 0x60]
mov eax, dword [ebp - 0x11cc]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x11d0]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x11d4]
mov dword [esp + 0x54], eax
mov eax, dword [ebp - 0x11d8]
mov dword [esp + 0x50], eax
mov eax, dword [ebp - 0x11dc]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp - 0x11e0]
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], 0x38
mov eax, dword [ebp - 0x11e4]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0x11e8]
mov dword [esp + 0x3c], eax
mov eax, dword [ebp - 0x11ec]
mov dword [esp + 0x38], eax
mov eax, dword [ebp - 0x11f0]
mov dword [esp + 0x34], eax
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x30], eax
mov eax, dword [ebp - 0x11f8]
mov dword [esp + 0x2c], eax
mov eax, dword [ebp - 0x11fc]
mov dword [esp + 0x28], eax
mov eax, dword [ebp - 0x1200]
mov dword [esp + 0x24], eax
mov eax, dword [ebp - 0x1204]
mov dword [esp + 0x20], eax
mov eax, dword [ebp - 0x1208]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x120c]
mov dword [esp + 0x18], eax
fldz
fstp qword [esp + 0x10]
mov eax, dword [ebp - 0x1210]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x1214]
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], esi
call sym._ExportWinAPI
mov dword [ebp - 0x117c], eax
mov eax, dword [ebp - 0x117c]
mov ecx, eax
mov eax, dword [ebp - 0x1150]
lea edx, [ebp - 0x93c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.Windows_8__wS
mov dword [esp + 4], 0x400
mov dword [esp], eax
call ecx
mov dword [ebp - 0x1158], eax
jmp 0x4379a7
mov eax, dword [ebp - 0x1174]
mov edx, dword [ebp - 0x1158]
mov ecx, dword [ebp - 0x1158]
mov ebx, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11cc], esi
mov edi, dword [ebp - 0x1174]
mov dword [ebp - 0x11d0], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11d4], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11d8], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11dc], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e0], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11e4], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e8], edi
mov esi, dword [ebp - 0x1194]
mov dword [ebp - 0x11ec], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f0], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11f4], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f8], edi
mov esi, dword [ebp - 0x1140]
mov dword [ebp - 0x11fc], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x1200], edi
mov esi, dword [ebp - 0x1168]
mov dword [ebp - 0x1204], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x1208], edi
mov esi, dword [ebp - 0x1148]
mov dword [ebp - 0x120c], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x1210], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1214], esi
mov edi, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x1158]
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], edx
fld qword [0x58fc58]
fstp qword [esp + 0x84]
mov dword [esp + 0x80], 0x10f
fld qword [0x58fc50]
fstp qword [esp + 0x78]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x70], ebx
fld qword [0x58fc40]
fstp qword [esp + 0x68]
fld qword [0x58fc30]
fstp qword [esp + 0x60]
mov eax, dword [ebp - 0x11cc]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x11d0]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x11d4]
mov dword [esp + 0x54], eax
mov eax, dword [ebp - 0x11d8]
mov dword [esp + 0x50], eax
mov eax, dword [ebp - 0x11dc]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp - 0x11e0]
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], 0x38
mov eax, dword [ebp - 0x11e4]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0x11e8]
mov dword [esp + 0x3c], eax
mov eax, dword [ebp - 0x11ec]
mov dword [esp + 0x38], eax
mov eax, dword [ebp - 0x11f0]
mov dword [esp + 0x34], eax
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x30], eax
mov eax, dword [ebp - 0x11f8]
mov dword [esp + 0x2c], eax
mov eax, dword [ebp - 0x11fc]
mov dword [esp + 0x28], eax
mov eax, dword [ebp - 0x1200]
mov dword [esp + 0x24], eax
mov eax, dword [ebp - 0x1204]
mov dword [esp + 0x20], eax
mov eax, dword [ebp - 0x1208]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x120c]
mov dword [esp + 0x18], eax
fld qword [0x58fc60]
fstp qword [esp + 0x10]
mov eax, dword [ebp - 0x1210]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x1214]
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], esi
call sym._ExportWinAPI
mov dword [ebp - 0x1180], eax
mov eax, dword [ebp - 0x1180]
mov ecx, eax
mov eax, dword [ebp - 0x1150]
lea edx, [ebp - 0x93c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.Windows_Server_2012__wS
mov dword [esp + 4], 0x400
mov dword [esp], eax
call ecx
mov dword [ebp - 0x1158], eax
jmp 0x4379a7
movzx eax, byte [ebp - 0x1a]
cmp al, 1
jne 0x43773d
mov eax, dword [ebp - 0x1178]
mov edx, dword [ebp - 0x1158]
mov ecx, dword [ebp - 0x1158]
mov ebx, dword [ebp - 0x13c]
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11cc], edi
mov esi, dword [ebp - 0x115c]
mov dword [ebp - 0x11d0], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11d4], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11d8], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11dc], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e0], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11e4], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e8], esi
mov edi, dword [ebp - 0x118c]
mov dword [ebp - 0x11ec], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f0], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x11f4], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f8], esi
mov edi, dword [ebp - 0x1160]
mov dword [ebp - 0x11fc], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1200], esi
mov edi, dword [ebp - 0x1170]
mov dword [ebp - 0x1204], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1208], esi
mov edi, dword [ebp - 0x1188]
mov dword [ebp - 0x120c], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1210], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x1214], edi
mov edi, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x1158]
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], edx
fldz
fstp qword [esp + 0x84]
mov dword [esp + 0x80], 0x10f
fld qword [0x58fc30]
fstp qword [esp + 0x78]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x70], ebx
fld qword [0x58fc50]
fstp qword [esp + 0x68]
fldz
fstp qword [esp + 0x60]
mov eax, dword [ebp - 0x11cc]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x11d0]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x11d4]
mov dword [esp + 0x54], eax
mov eax, dword [ebp - 0x11d8]
mov dword [esp + 0x50], eax
mov eax, dword [ebp - 0x11dc]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp - 0x11e0]
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], 0x38
mov eax, dword [ebp - 0x11e4]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0x11e8]
mov dword [esp + 0x3c], eax
mov eax, dword [ebp - 0x11ec]
mov dword [esp + 0x38], eax
mov eax, dword [ebp - 0x11f0]
mov dword [esp + 0x34], eax
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x30], eax
mov eax, dword [ebp - 0x11f8]
mov dword [esp + 0x2c], eax
mov eax, dword [ebp - 0x11fc]
mov dword [esp + 0x28], eax
mov eax, dword [ebp - 0x1200]
mov dword [esp + 0x24], eax
mov eax, dword [ebp - 0x1204]
mov dword [esp + 0x20], eax
mov eax, dword [ebp - 0x1208]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x120c]
mov dword [esp + 0x18], eax
fld qword [0x58fc48]
fstp qword [esp + 0x10]
mov eax, dword [ebp - 0x1210]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x1214]
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], esi
call sym._ExportWinAPI
mov dword [ebp - 0x1184], eax
mov eax, dword [ebp - 0x1184]
mov ecx, eax
mov eax, dword [ebp - 0x1150]
lea edx, [ebp - 0x93c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.Windows_8.1__wS
mov dword [esp + 4], 0x400
mov dword [esp], eax
call ecx
mov dword [ebp - 0x1158], eax
jmp 0x4379a6
mov eax, dword [ebp - 0x1160]
mov edx, dword [ebp - 0x1158]
mov ecx, dword [ebp - 0x1158]
mov ebx, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11cc], esi
mov edi, dword [ebp - 0x115c]
mov dword [ebp - 0x11d0], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11d4], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11d8], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11dc], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e0], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11e4], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e8], edi
mov esi, dword [ebp - 0x1194]
mov dword [ebp - 0x11ec], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f0], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11f4], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f8], edi
mov esi, dword [ebp - 0x1194]
mov dword [ebp - 0x11fc], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x1200], edi
mov esi, dword [ebp - 0x1194]
mov dword [ebp - 0x1204], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x1208], edi
mov esi, dword [ebp - 0x115c]
mov dword [ebp - 0x120c], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x1210], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1214], esi
mov edi, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x1158]
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], edx
fld qword [0x58fc60]
fstp qword [esp + 0x84]
mov dword [esp + 0x80], 0x10f
fld qword [0x58fc40]
fstp qword [esp + 0x78]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x70], ebx
fld qword [0x58fc48]
fstp qword [esp + 0x68]
fld qword [0x58fc50]
fstp qword [esp + 0x60]
mov eax, dword [ebp - 0x11cc]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x11d0]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x11d4]
mov dword [esp + 0x54], eax
mov eax, dword [ebp - 0x11d8]
mov dword [esp + 0x50], eax
mov eax, dword [ebp - 0x11dc]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp - 0x11e0]
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], 0x38
mov eax, dword [ebp - 0x11e4]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0x11e8]
mov dword [esp + 0x3c], eax
mov eax, dword [ebp - 0x11ec]
mov dword [esp + 0x38], eax
mov eax, dword [ebp - 0x11f0]
mov dword [esp + 0x34], eax
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x30], eax
mov eax, dword [ebp - 0x11f8]
mov dword [esp + 0x2c], eax
mov eax, dword [ebp - 0x11fc]
mov dword [esp + 0x28], eax
mov eax, dword [ebp - 0x1200]
mov dword [esp + 0x24], eax
mov eax, dword [ebp - 0x1204]
mov dword [esp + 0x20], eax
mov eax, dword [ebp - 0x1208]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x120c]
mov dword [esp + 0x18], eax
fld qword [0x58fc68]
fstp qword [esp + 0x10]
mov eax, dword [ebp - 0x1210]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x1214]
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], esi
call sym._ExportWinAPI
mov dword [ebp - 0x1188], eax
mov eax, dword [ebp - 0x1188]
mov ecx, eax
mov eax, dword [ebp - 0x1150]
lea edx, [ebp - 0x93c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.Windows_Server_2012_R2__wS
mov dword [esp + 4], 0x400
mov dword [esp], eax
call ecx
mov dword [ebp - 0x1158], eax
nop
jmp 0x43838c
mov eax, dword [ebp - 0x12c]
test eax, eax
jne 0x43838f
movzx eax, byte [ebp - 0x1a]
cmp al, 1
jne 0x437eab
mov eax, dword [ebp - 0x128]
cmp eax, 0x55ef
jbe 0x437c45
mov eax, dword [ebp - 0x1144]
mov edx, dword [ebp - 0x1158]
mov ecx, dword [ebp - 0x1158]
mov ebx, dword [ebp - 0x13c]
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11cc], edi
mov esi, dword [ebp - 0x1180]
mov dword [ebp - 0x11d0], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11d4], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11d8], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11dc], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e0], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11e4], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e8], esi
mov edi, dword [ebp - 0x1170]
mov dword [ebp - 0x11ec], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f0], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x11f4], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f8], esi
mov edi, dword [ebp - 0x1148]
mov dword [ebp - 0x11fc], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1200], esi
mov edi, dword [ebp - 0x1194]
mov dword [ebp - 0x1204], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1208], esi
mov edi, dword [ebp - 0x118c]
mov dword [ebp - 0x120c], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1210], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x1214], edi
mov edi, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x1158]
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], edx
fld qword [0x58fc68]
fstp qword [esp + 0x84]
mov dword [esp + 0x80], 0x10f
fld qword [0x58fc50]
fstp qword [esp + 0x78]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x70], ebx
fld qword [0x58fc58]
fstp qword [esp + 0x68]
fld qword [0x58fc58]
fstp qword [esp + 0x60]
mov eax, dword [ebp - 0x11cc]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x11d0]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x11d4]
mov dword [esp + 0x54], eax
mov eax, dword [ebp - 0x11d8]
mov dword [esp + 0x50], eax
mov eax, dword [ebp - 0x11dc]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp - 0x11e0]
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], 0x38
mov eax, dword [ebp - 0x11e4]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0x11e8]
mov dword [esp + 0x3c], eax
mov eax, dword [ebp - 0x11ec]
mov dword [esp + 0x38], eax
mov eax, dword [ebp - 0x11f0]
mov dword [esp + 0x34], eax
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x30], eax
mov eax, dword [ebp - 0x11f8]
mov dword [esp + 0x2c], eax
mov eax, dword [ebp - 0x11fc]
mov dword [esp + 0x28], eax
mov eax, dword [ebp - 0x1200]
mov dword [esp + 0x24], eax
mov eax, dword [ebp - 0x1204]
mov dword [esp + 0x20], eax
mov eax, dword [ebp - 0x1208]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x120c]
mov dword [esp + 0x18], eax
fld qword [0x58fc30]
fstp qword [esp + 0x10]
mov eax, dword [ebp - 0x1210]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x1214]
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], esi
call sym._ExportWinAPI
mov dword [ebp - 0x118c], eax
mov eax, dword [ebp - 0x118c]
mov ecx, eax
mov eax, dword [ebp - 0x1150]
lea edx, [ebp - 0x93c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.Windows_11__wS
mov dword [esp + 4], 0x400
mov dword [esp], eax
call ecx
mov dword [ebp - 0x1158], eax
jmp 0x438114
mov eax, dword [ebp - 0x1170]
mov edx, dword [ebp - 0x1158]
mov ecx, dword [ebp - 0x1158]
mov ebx, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11cc], esi
mov edi, dword [ebp - 0x1174]
mov dword [ebp - 0x11d0], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11d4], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11d8], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11dc], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e0], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11e4], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e8], edi
mov esi, dword [ebp - 0x1180]
mov dword [ebp - 0x11ec], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f0], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11f4], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f8], edi
mov esi, dword [ebp - 0x117c]
mov dword [ebp - 0x11fc], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x1200], edi
mov esi, dword [ebp - 0x1188]
mov dword [ebp - 0x1204], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x1208], edi
mov esi, dword [ebp - 0x1140]
mov dword [ebp - 0x120c], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x1210], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1214], esi
mov edi, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x1158]
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], edx
fld qword [0x58fc60]
fstp qword [esp + 0x84]
mov dword [esp + 0x80], 0x10f
fld1
fstp qword [esp + 0x78]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x70], ebx
fld1
fstp qword [esp + 0x68]
fld qword [0x58fc58]
fstp qword [esp + 0x60]
mov eax, dword [ebp - 0x11cc]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x11d0]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x11d4]
mov dword [esp + 0x54], eax
mov eax, dword [ebp - 0x11d8]
mov dword [esp + 0x50], eax
mov eax, dword [ebp - 0x11dc]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp - 0x11e0]
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], 0x38
mov eax, dword [ebp - 0x11e4]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0x11e8]
mov dword [esp + 0x3c], eax
mov eax, dword [ebp - 0x11ec]
mov dword [esp + 0x38], eax
mov eax, dword [ebp - 0x11f0]
mov dword [esp + 0x34], eax
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x30], eax
mov eax, dword [ebp - 0x11f8]
mov dword [esp + 0x2c], eax
mov eax, dword [ebp - 0x11fc]
mov dword [esp + 0x28], eax
mov eax, dword [ebp - 0x1200]
mov dword [esp + 0x24], eax
mov eax, dword [ebp - 0x1204]
mov dword [esp + 0x20], eax
mov eax, dword [ebp - 0x1208]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x120c]
mov dword [esp + 0x18], eax
fld qword [0x58fc48]
fstp qword [esp + 0x10]
mov eax, dword [ebp - 0x1210]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x1214]
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], esi
call sym._ExportWinAPI
mov dword [ebp - 0x1190], eax
mov eax, dword [ebp - 0x1190]
mov ecx, eax
mov eax, dword [ebp - 0x1150]
lea edx, [ebp - 0x93c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.Windows_10__wS
mov dword [esp + 4], 0x400
mov dword [esp], eax
call ecx
mov dword [ebp - 0x1158], eax
jmp 0x438114
mov eax, dword [ebp - 0x1194]
mov edx, dword [ebp - 0x1158]
mov ecx, dword [ebp - 0x1158]
mov ebx, dword [ebp - 0x13c]
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11cc], edi
mov esi, dword [ebp - 0x1194]
mov dword [ebp - 0x11d0], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11d4], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11d8], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11dc], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e0], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11e4], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e8], esi
mov edi, dword [ebp - 0x1194]
mov dword [ebp - 0x11ec], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f0], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x11f4], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f8], esi
mov edi, dword [ebp - 0x1168]
mov dword [ebp - 0x11fc], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1200], esi
mov edi, dword [ebp - 0x1154]
mov dword [ebp - 0x1204], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1208], esi
mov edi, dword [ebp - 0x1148]
mov dword [ebp - 0x120c], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x1210], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x1214], edi
mov edi, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x1158]
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], edx
fld qword [0x58fc50]
fstp qword [esp + 0x84]
mov dword [esp + 0x80], 0x10f
fld qword [0x58fc40]
fstp qword [esp + 0x78]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x70], ebx
fld qword [0x58fc38]
fstp qword [esp + 0x68]
fld qword [0x58fc58]
fstp qword [esp + 0x60]
mov eax, dword [ebp - 0x11cc]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x11d0]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x11d4]
mov dword [esp + 0x54], eax
mov eax, dword [ebp - 0x11d8]
mov dword [esp + 0x50], eax
mov eax, dword [ebp - 0x11dc]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp - 0x11e0]
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], 0x38
mov eax, dword [ebp - 0x11e4]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0x11e8]
mov dword [esp + 0x3c], eax
mov eax, dword [ebp - 0x11ec]
mov dword [esp + 0x38], eax
mov eax, dword [ebp - 0x11f0]
mov dword [esp + 0x34], eax
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x30], eax
mov eax, dword [ebp - 0x11f8]
mov dword [esp + 0x2c], eax
mov eax, dword [ebp - 0x11fc]
mov dword [esp + 0x28], eax
mov eax, dword [ebp - 0x1200]
mov dword [esp + 0x24], eax
mov eax, dword [ebp - 0x1204]
mov dword [esp + 0x20], eax
mov eax, dword [ebp - 0x1208]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x120c]
mov dword [esp + 0x18], eax
fld qword [0x58fc50]
fstp qword [esp + 0x10]
mov eax, dword [ebp - 0x1210]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x1214]
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], esi
call sym._ExportWinAPI
mov dword [ebp - 0x1194], eax
mov eax, dword [ebp - 0x1194]
mov ecx, eax
mov eax, dword [ebp - 0x1150]
lea edx, [ebp - 0x93c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.Windows_Server_2016_or_higher__wS
mov dword [esp + 4], 0x400
mov dword [esp], eax
call ecx
mov dword [ebp - 0x1158], eax
nop
jmp 0x43838f
mov eax, dword [ebp - 0x1178]
mov edx, dword [ebp - 0x1158]
mov ecx, dword [ebp - 0x1158]
mov ebx, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11cc], esi
mov edi, dword [ebp - 0x138]
mov dword [ebp - 0x11d0], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11d4], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11d8], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11dc], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e0], edi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11e4], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e8], edi
mov esi, dword [ebp - 0x1194]
mov dword [ebp - 0x11ec], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f0], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11f4], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f8], edi
mov esi, dword [ebp - 0x1140]
mov dword [ebp - 0x11fc], esi
mov edi, dword [ebp - 0x13c]
mov dword [ebp - 0x1200], edi
mov esi, dword [ebp - 0x138]
mov dword [ebp - 0x1204], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x1208], edi
mov esi, dword [ebp - 0x1174]
mov dword [ebp - 0x120c], esi
mov edi, dword [ebp - 0x1158]
mov dword [ebp - 0x1210], edi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x1214], esi
mov edi, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x1158]
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], edx
fld qword [0x58fc48]
fstp qword [esp + 0x84]
mov dword [esp + 0x80], 0x10f
fld qword [0x58fc50]
fstp qword [esp + 0x78]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x70], ebx
fld qword [0x58fc60]
fstp qword [esp + 0x68]
fld qword [0x58fc48]
fstp qword [esp + 0x60]
mov eax, dword [ebp - 0x11cc]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x11d0]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x11d4]
mov dword [esp + 0x54], eax
mov eax, dword [ebp - 0x11d8]
mov dword [esp + 0x50], eax
mov eax, dword [ebp - 0x11dc]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp - 0x11e0]
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], 0x38
mov eax, dword [ebp - 0x11e4]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0x11e8]
mov dword [esp + 0x3c], eax
mov eax, dword [ebp - 0x11ec]
mov dword [esp + 0x38], eax
mov eax, dword [ebp - 0x11f0]
mov dword [esp + 0x34], eax
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x30], eax
mov eax, dword [ebp - 0x11f8]
mov dword [esp + 0x2c], eax
mov eax, dword [ebp - 0x11fc]
mov dword [esp + 0x28], eax
mov eax, dword [ebp - 0x1200]
mov dword [esp + 0x24], eax
mov eax, dword [ebp - 0x1204]
mov dword [esp + 0x20], eax
mov eax, dword [ebp - 0x1208]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x120c]
mov dword [esp + 0x18], eax
fldz
fstp qword [esp + 0x10]
mov eax, dword [ebp - 0x1210]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x1214]
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], esi
call sym._ExportWinAPI
mov dword [ebp - 0x1198], eax
mov eax, dword [ebp - 0x1198]
mov ecx, eax
mov eax, dword [ebp - 0x1150]
lea edx, [ebp - 0x93c]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], str.Unknown
mov dword [esp + 8], str.Windows__wS__wS
mov dword [esp + 4], 0x400
mov dword [esp], eax
call ecx
mov dword [ebp - 0x1158], eax
jmp 0x438390
nop
jmp 0x438390
nop
jmp 0x438390
nop
mov eax, dword [ebp - 0x1158]
test eax, eax
jg 0x4385af
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x11cc], eax
mov edx, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x13c]
mov ebx, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x1190]
mov edi, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x118c]
mov dword [ebp - 0x11d0], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x11d4], eax
mov eax, dword [ebp - 0x1164]
mov dword [ebp - 0x11d8], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x11dc], eax
mov eax, dword [ebp - 0x1188]
mov dword [ebp - 0x11e0], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x11e4], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x11e8], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x11ec], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x11f0], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x11f4], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x11f8], eax
mov eax, dword [ebp - 0x1150]
mov dword [ebp - 0x11fc], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x1200], eax
mov eax, dword [ebp - 0x1170]
mov dword [ebp - 0x1204], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x1208], eax
fld qword [0x58fc48]
fstp qword [esp + 0x9c]
mov eax, dword [ebp - 0x11cc]
mov dword [esp + 0x98], eax
mov dword [esp + 0x94], edx
mov dword [esp + 0x90], ecx
fld qword [0x58fc50]
fstp qword [esp + 0x88]
mov dword [esp + 0x84], ebx
mov dword [esp + 0x80], esi
mov dword [esp + 0x7c], edi
mov eax, dword [ebp - 0x11d0]
mov dword [esp + 0x78], eax
mov eax, dword [ebp - 0x11d4]
mov dword [esp + 0x74], eax
mov eax, dword [ebp - 0x11d8]
mov dword [esp + 0x70], eax
fld qword [0x58fc50]
fstp qword [esp + 0x68]
mov eax, dword [ebp - 0x11dc]
mov dword [esp + 0x64], eax
mov eax, dword [ebp - 0x11e0]
mov dword [esp + 0x60], eax
mov eax, dword [ebp - 0x11e4]
mov dword [esp + 0x5c], eax
fld qword [0x58fc68]
fstp qword [esp + 0x54]
mov eax, dword [ebp - 0x11e8]
mov dword [esp + 0x50], eax
mov eax, dword [ebp - 0x11ec]
mov dword [esp + 0x4c], eax
fld qword [0x58fc68]
fstp qword [esp + 0x44]
mov eax, dword [ebp - 0x11f0]
mov dword [esp + 0x40], eax
fld qword [0x58fc58]
fstp qword [esp + 0x38]
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x34], eax
mov eax, dword [ebp - 0x11f8]
mov dword [esp + 0x30], eax
mov eax, dword [ebp - 0x11fc]
mov dword [esp + 0x2c], eax
fld1
fstp qword [esp + 0x24]
fldz
fstp qword [esp + 0x1c]
mov eax, dword [ebp - 0x1200]
mov dword [esp + 0x18], eax
fld qword [0x58fc48]
fstp qword [esp + 0x10]
fld qword [0x58fc50]
fstp qword [esp + 8]
mov eax, dword [ebp - 0x1204]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x1208]
mov dword [esp], eax
call sym._ByteFree
mov eax, 0
jmp 0x4387d4
mov eax, dword [ebp - 0x1158]
cmp eax, 0x3ff
jle 0x4387ce
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x11cc], eax
mov edx, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x13c]
mov ebx, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x117c]
mov edi, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x1144]
mov dword [ebp - 0x11d0], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x11d4], eax
mov eax, dword [ebp - 0x1178]
mov dword [ebp - 0x11d8], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x11dc], eax
mov eax, dword [ebp - 0x1184]
mov dword [ebp - 0x11e0], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x11e4], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x11e8], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x11ec], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x11f0], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x11f4], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x11f8], eax
mov eax, dword [ebp - 0x1150]
mov dword [ebp - 0x11fc], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x1200], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x1204], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x1208], eax
fld qword [0x58fc48]
fstp qword [esp + 0x9c]
mov eax, dword [ebp - 0x11cc]
mov dword [esp + 0x98], eax
mov dword [esp + 0x94], edx
mov dword [esp + 0x90], ecx
fld qword [0x58fc40]
fstp qword [esp + 0x88]
mov dword [esp + 0x84], ebx
mov dword [esp + 0x80], esi
mov dword [esp + 0x7c], edi
mov eax, dword [ebp - 0x11d0]
mov dword [esp + 0x78], eax
mov eax, dword [ebp - 0x11d4]
mov dword [esp + 0x74], eax
mov eax, dword [ebp - 0x11d8]
mov dword [esp + 0x70], eax
fld qword [0x58fc60]
fstp qword [esp + 0x68]
mov eax, dword [ebp - 0x11dc]
mov dword [esp + 0x64], eax
mov eax, dword [ebp - 0x11e0]
mov dword [esp + 0x60], eax
mov eax, dword [ebp - 0x11e4]
mov dword [esp + 0x5c], eax
fld qword [0x58fc30]
fstp qword [esp + 0x54]
mov eax, dword [ebp - 0x11e8]
mov dword [esp + 0x50], eax
mov eax, dword [ebp - 0x11ec]
mov dword [esp + 0x4c], eax
fld1
fstp qword [esp + 0x44]
mov eax, dword [ebp - 0x11f0]
mov dword [esp + 0x40], eax
fld qword [0x58fc38]
fstp qword [esp + 0x38]
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x34], eax
mov eax, dword [ebp - 0x11f8]
mov dword [esp + 0x30], eax
mov eax, dword [ebp - 0x11fc]
mov dword [esp + 0x2c], eax
fld qword [0x58fc58]
fstp qword [esp + 0x24]
fld qword [0x58fc60]
fstp qword [esp + 0x1c]
mov eax, dword [ebp - 0x1200]
mov dword [esp + 0x18], eax
fld qword [0x58fc68]
fstp qword [esp + 0x10]
fldz
fstp qword [esp + 8]
mov eax, dword [ebp - 0x1204]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x1208]
mov dword [esp], eax
call sym._ByteFree
mov eax, 0
jmp 0x4387d4
mov eax, dword [ebp - 0x1150]
add esp, 0x12bc
pop ebx
pop esi
pop edi
pop ebp
ret