Function at 0x489800
Capabilities:
Delete file
Get common file path
Set socket configuration

Disassembly:
push 0xffffffffffffffff
push 0x5668f0
mov eax, dword fs:[0]
push eax
mov eax, 0x1458
mov dword fs:[0], esp
call fcn.0053aa40
mov eax, dword [0x5af710]
xor eax, esp
push ebx
push ebp
push esi
push edi
mov esi, ecx
push 0x3ff
lea edi, [esi + 0x6c]
push edi
mov dword [esp + 0x146c], eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea edx, [esp + 0x1064]
sub edx, edi
mov eax, edi
mov dword [esp + 0x14], edx
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x489851
lea edi, [esp + 0x1064]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x489863
mov eax, dword [0x579588]
mov ecx, dword [0x57958c]
mov edx, dword [0x579590]
mov dword [edi], eax
mov eax, dword [0x579594]
mov dword [edi + 4], ecx
mov cl, byte [0x579598]
mov dword [edi + 8], edx
mov dword [edi + 0xc], eax
push 0x1008
mov byte [edi + 0x10], cl
call fcn.0055044f
mov edi, eax
add esp, 4
mov dword [esp + 0x10], edi
xor ebx, ebx
cmp edi, ebx
mov dword [esp + 0x1470], ebx
je 0x4898d2
push ecx
lea edx, [esp + 0x1068]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.004071e0
mov ecx, edi
call fcn.0044fd30
jmp 0x4898d4
xor eax, eax
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
or ebp, 0xffffffff
push 0x574430
mov dword [esp + 0x147c], ebp
mov dword [esi + 0x48], eax
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x5743b8
mov dword [esp + 0x1480], 1
call fcn.004071e0
mov dword [esp + 0x147c], ebp
mov ecx, dword [esi + 0x48]
call fcn.0044fbf0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x572aed
mov dword [0x5b21c0], eax
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.RegIP
mov dword [esp + 0x147c], 2
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x5743b8
mov byte [esp + 0x1480], 3
call fcn.004071e0
lea eax, [esp + 0x28]
mov dword [esp + 0x147c], ebp
mov ecx, dword [esi + 0x48]
push eax
call fcn.0044fdb0
mov eax, dword [eax]
mov edi, dword [sym.imp.WSOCK32.dll_inet_addr]
push eax
call edi
mov dword [esi + 0x48c], eax
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4899ab
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x572aed
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.ScanIP
mov dword [esp + 0x147c], 4
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x5743b8
mov byte [esp + 0x1480], 5
call fcn.004071e0
lea eax, [esp + 0x28]
mov dword [esp + 0x147c], ebp
mov ecx, dword [esi + 0x48]
push eax
call fcn.0044fdb0
mov eax, dword [eax]
push eax
call edi
mov dword [esi + 0x490], eax
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x489a2d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x490]
push eax
call fcn.00503ddc
add esp, 4
test al, al
jne 0x489a46
mov dword [esi + 0x490], ebx
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.FilePoint
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.INWEEK
mov dword [esp + 0x1480], 6
call fcn.004071e0
mov dword [esp + 0x147c], ebp
mov ecx, dword [esi + 0x48]
call fcn.0044fbf0
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Port
mov dword [esi + 0x4a8], eax
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x5743b8
mov dword [esp + 0x1480], 7
call fcn.004071e0
mov dword [esp + 0x147c], ebp
mov ecx, dword [esi + 0x48]
call fcn.0044fbf0
cmp eax, ebx
mov dword [esi + 0x538], eax
jne 0x489ada
mov dword [esi + 0x538], 0x5659
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.DownLoadPort
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x5743b8
mov dword [esp + 0x1480], 8
call fcn.004071e0
mov dword [esp + 0x147c], ebp
mov ecx, dword [esi + 0x48]
call fcn.0044fbf0
cmp eax, ebx
mov dword [esi + 0x53c], eax
jne 0x489b2b
mov dword [esi + 0x53c], 0x635
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x572aed
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.Version
mov dword [esp + 0x147c], 9
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x5743b8
mov byte [esp + 0x1480], 0xa
call fcn.004071e0
lea ecx, [esp + 0x28]
push ecx
mov dword [esp + 0x1480], ebp
mov ecx, dword [esi + 0x48]
call fcn.0044fdb0
mov ecx, dword [eax]
mov eax, ecx
mov dword [esp + 0x1470], 0xb
lea edi, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x489b97
sub eax, edi
push eax
push ecx
mov ecx, esi
call fcn.00404640
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov dword [esp + 0x1470], ebp
lea edx, [eax + 0xc]
mov ecx, ebp
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x489bcd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push ebx
push esi
call fcn.00504688
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
add esp, 8
push str.c:_vrvedp.log
call edi
push str.c:_vrvreg.log
call edi
lea ebx, [esi + 0x6c]
push ebx
lea ecx, [esp + 0x14]
call fcn.004071e0
push str.Distribute
push eax
lea eax, [esp + 0x24]
push eax
mov dword [esp + 0x147c], 0xc
call fcn.0040b420
mov eax, dword [eax]
add esp, 0xc
push eax
call edi
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x489c38
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov dword [esp + 0x1470], ebp
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x489c5c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push ebx
lea ecx, [esp + 0x20]
call fcn.004071e0
push str.Distribute
push eax
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x147c], 0xd
call fcn.0040b420
mov eax, dword [eax]
push eax
call fcn.0054ea4a
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
add esp, 0x10
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x489ca9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov dword [esp + 0x1470], ebp
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x489ccd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push ebx
lea ecx, [esp + 0x20]
call fcn.004071e0
push str.Distributepatch
push eax
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x147c], 0xe
call fcn.0040b420
mov eax, dword [eax]
add esp, 0xc
push eax
call edi
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x489d17
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov dword [esp + 0x1470], ebp
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x489d3b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push ebx
lea ecx, [esp + 0x20]
call fcn.004071e0
push str.Distributepatch
push eax
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x147c], 0xf
call fcn.0040b420
mov eax, dword [eax]
push eax
call fcn.0054ea4a
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
add esp, 0x10
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x489d88
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov dword [esp + 0x1470], ebp
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x489dac
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push ebx
lea ecx, [esp + 0x20]
call fcn.004071e0
push str.DistributeOnline
push eax
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x147c], 0x10
call fcn.0040b420
mov eax, dword [eax]
add esp, 0xc
push eax
call edi
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x489df6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov dword [esp + 0x1470], ebp
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x489e1a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push ebx
lea ecx, [esp + 0x20]
call fcn.004071e0
push str.DistributeOnline
push eax
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x147c], 0x11
call fcn.0040b420
mov eax, dword [eax]
push eax
call fcn.0054ea4a
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
add esp, 0x10
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x489e67
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov dword [esp + 0x1470], ebp
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x489e8b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov edx, dword [esp + 0x14]
mov eax, ebx
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x489e91
lea edi, [esp + 0x1064]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x489ea3
mov eax, dword [str.edpoem.win]
mov ecx, dword [0x57953c]
mov edx, dword [0x579540]
mov dword [edi], eax
push ecx
mov dword [edi + 4], ecx
lea eax, [esp + 0x1068]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov dword [edi + 8], edx
call fcn.004071e0
lea ecx, [esp + 0x60]
call fcn.0044fd30
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov ebx, 0x12
push 0x579534
mov dword [esp + 0x1478], ebx
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.CAPTION
mov byte [esp + 0x147c], 0x13
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x579534
mov byte [esp + 0x1480], 0x14
call fcn.004071e0
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x6c]
mov byte [esp + 0x1480], bl
call fcn.0044fdb0
lea ecx, [esi + 0x534]
push eax
mov byte [esp + 0x1474], 0x15
call fcn.0040b4e0
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x1470], bl
lea edx, [eax + 0xc]
mov ecx, ebp
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x489f7d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
lea edi, [esi + 0x6c]
push edi
call fcn.004071e0
push edi
lea ecx, [esp + 0x20]
mov byte [esp + 0x147c], 0x16
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.DistributeUpdate
push eax
push ecx
mov byte [esp + 0x1488], 0x17
call fcn.0040b420
add esp, 0xc
mov byte [esp + 0x147c], 0x18
call fcn.00482130
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
add esp, 0xc
mov byte [esp + 0x1470], bl
lea edx, [eax + 0xc]
lock xadd dword [edx], ebp
dec ebp
test ebp, ebp
jg 0x489ff1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ecx, esi
call fcn.00488d80
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x572aed
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x573c04
mov byte [esp + 0x147c], 0x19
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.IPMACBIND
mov byte [esp + 0x1480], 0x1a
call fcn.004071e0
lea eax, [esp + 0x20]
mov byte [esp + 0x147c], bl
mov ecx, dword [esi + 0x48]
push eax
call fcn.0044fdb0
mov edi, dword [eax]
mov eax, edi
mov byte [esp + 0x1470], 0x1b
lea ebp, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48a060
sub eax, ebp
push eax
push edi
lea ecx, [esi + 0x4f8]
call fcn.00404640
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x1470], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48a09b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x572aed
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.MACAddress
mov byte [esp + 0x147c], 0x1c
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.IPMACBIND
mov byte [esp + 0x1480], 0x1d
call fcn.004071e0
lea eax, [esp + 0x20]
mov byte [esp + 0x147c], bl
mov ecx, dword [esi + 0x48]
push eax
call fcn.0044fdb0
mov edi, dword [eax]
mov eax, edi
mov byte [esp + 0x1470], 0x1e
lea ebp, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48a101
sub eax, ebp
push eax
push edi
lea ecx, [esi + 0x514]
call fcn.00404640
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x1470], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48a13c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x572aed
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.LastIPAddress
mov byte [esp + 0x147c], 0x1f
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.LAST_ADDR
mov byte [esp + 0x1480], 0x20
call fcn.004071e0
lea eax, [esp + 0x20]
mov byte [esp + 0x147c], bl
mov ecx, dword [esi + 0x48]
push eax
call fcn.0044fdb0
mov eax, dword [eax]
push eax
call dword [sym.imp.WSOCK32.dll_inet_addr]
mov dword [esi + 0x594], eax
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48a1c0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
xor eax, eax
lea ecx, [esi + 0x598]
mov dword [ecx], eax
push ecx
mov word [ecx + 4], ax
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x572aed
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.BuilderNumber
mov byte [esp + 0x147c], 0x21
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x5743b8
mov byte [esp + 0x1480], 0x22
call fcn.004071e0
lea edx, [esp + 0x20]
mov byte [esp + 0x147c], bl
mov ecx, dword [esi + 0x48]
push edx
call fcn.0044fdb0
lea edi, [esi + 0x4f0]
push eax
mov ecx, edi
mov byte [esp + 0x1474], 0x23
call fcn.0040b4e0
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x1470], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48a260
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov edi, dword [edi]
push edi
mov ecx, esi
call fcn.004839a0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x572aed
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.RegistUserName
mov byte [esp + 0x147c], 0x24
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.INFOMATION
mov byte [esp + 0x1480], 0x25
call fcn.004071e0
lea eax, [esp + 0x20]
mov byte [esp + 0x147c], bl
mov ecx, dword [esi + 0x48]
push eax
call fcn.0044fdb0
lea ecx, [esi + 0x54c]
push eax
mov byte [esp + 0x1474], 0x26
call fcn.0040b4e0
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x1470], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48a2fa
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
xor edi, edi
push 0x572aed
mov dword [esi + 0x4a0], edi
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.IEVersion
mov byte [esp + 0x147c], 0x27
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x5743b8
mov byte [esp + 0x1480], 0x28
call fcn.004071e0
lea eax, [esp + 0x20]
mov byte [esp + 0x147c], bl
mov ecx, dword [esi + 0x48]
push eax
call fcn.0044fdb0
lea ecx, [esi + 0x4f4]
push eax
mov byte [esp + 0x1474], 0x29
call fcn.0040b4e0
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x1470], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48a392
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x572aed
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.SignCode
mov byte [esp + 0x147c], 0x2a
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x5743b8
mov byte [esp + 0x1480], 0x2b
call fcn.004071e0
lea eax, [esp + 0x20]
mov byte [esp + 0x147c], bl
mov ecx, dword [esi + 0x48]
push eax
call fcn.0044fdb0
lea ecx, [esi + 0x4ec]
push eax
mov byte [esp + 0x1474], 0x2c
call fcn.0040b4e0
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x1470], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48a422
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x572aed
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.HostName
mov byte [esp + 0x147c], 0x2d
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.INFOMATION
mov byte [esp + 0x1480], 0x2e
call fcn.004071e0
lea eax, [esp + 0x20]
mov byte [esp + 0x147c], bl
mov ecx, dword [esi + 0x48]
push eax
call fcn.0044fdb0
lea ecx, [esi + 0x4c0]
push eax
mov byte [esp + 0x1474], 0x2f
call fcn.0040b4e0
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x1470], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48a4b2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push edi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.MemroySize
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.INFOMATION
mov byte [esp + 0x1480], 0x30
call fcn.004071e0
mov byte [esp + 0x147c], bl
mov ecx, dword [esi + 0x48]
call fcn.0044fbf0
push edi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.MemorySizeEx
mov dword [esi + 0x4ac], eax
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.INFOMATION
mov byte [esp + 0x1480], 0x31
call fcn.004071e0
mov byte [esp + 0x147c], bl
mov ecx, dword [esi + 0x48]
call fcn.0044fbf0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.NotifyWarning
mov dword [esi + 0x4b0], eax
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x5743b8
mov byte [esp + 0x1480], 0x32
call fcn.004071e0
mov byte [esp + 0x147c], bl
mov ecx, dword [esi + 0x48]
call fcn.0044fbf0
mov dword [esi + 0x530], eax
mov dword [esp + 0x58], 0xf
mov dword [esp + 0x54], edi
mov byte [esp + 0x44], 0
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x28]
mov bl, 0x33
push ecx
mov byte [esp + 0x1478], bl
call fcn.004b13a0
add esp, 8
cmp dword [eax + 0x18], 0x10
mov byte [esp + 0x1470], 0x34
jb 0x48a5b2
mov eax, dword [eax + 4]
jmp 0x48a5b5
add eax, 4
test eax, eax
lea ebp, [esi + 0x4b4]
jne 0x48a5c3
xor edx, edx
jmp 0x48a5d1
mov edx, eax
lea edi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x48a5c8
sub edx, edi
push edx
push eax
mov ecx, ebp
call fcn.004037b0
mov eax, dword [esp + 0x3c]
mov edi, 0x10
cmp eax, edi
mov byte [esp + 0x1470], bl
jb 0x48a5fb
mov edx, dword [esp + 0x28]
push edx
call fcn.0055047a
add esp, 4
call fcn.005040f5
dec eax
neg eax
sbb al, al
inc al
mov byte [esi + 0x4b8], al
call fcn.00504137
test eax, eax
setne al
mov byte [esi + 0x4b9], al
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x572aed
mov dword [esi + 0x5a4], eax
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.LastLogonUserName
mov byte [esp + 0x147c], 0x35
call fcn.004071e0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.INFOMATION
mov byte [esp + 0x1480], 0x36
call fcn.004071e0
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x1480], bl
mov ecx, dword [esi + 0x48]
call fcn.0044fdb0
lea ecx, [esi + 0x554]
push eax
mov byte [esp + 0x1474], 0x37
call fcn.0040b4e0
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x1470], bl
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x48a6b9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 0
push str.edpscr_s.exe
mov ecx, esi
call fcn.00488940
cmp dword [esp + 0x58], edi
jb 0x48a6da
mov eax, dword [esp + 0x44]
push eax
call fcn.0055047a
add esp, 4
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
mov dword [esp + 0x58], 0xf
mov dword [esp + 0x54], 0
mov byte [esp + 0x44], 0
mov dword [esp + 0x1470], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48a718
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ecx, dword [esp + 0x1468]
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x145c]
pop ebp
pop ebx
xor ecx, esp
call fcn.0053aaae
add esp, 0x1464
ret