Function at 0x4ff460
Capabilities:
Get hostname

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5c44d3
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x15a8
call fcn.00570340
mov eax, dword [0x61f138]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp - 0xe38]
mov ecx, 0x6d9780
mov dword [ebp - 0xf10], eax
mov dword [ebp - 0xf10], 0x6d9780
call fcn.00468260
mov ecx, 0x6d97ec
mov dword [ebp - 4], 0
call fcn.00468170
mov byte [ebp - 4], 1
mov ecx, 0x10
mov dword [0x6d985c], 0xffffffff
mov dword [0x6d9860], 0x10
call fcn.004d4f00
mov dword [0x6d9864], eax
mov byte [ebp - 4], 3
mov ecx, 0x10
mov dword [0x6d986c], 0xffffffff
mov dword [0x6d9870], 0x10
call fcn.004d4f00
mov dword [0x6d9874], eax
mov dword [0x6d9878], 0
mov dword [0x6d987c], 0
mov dword [0x6d9880], 0
mov dword [0x6d9894], 0
mov dword [0x6d9898], 0xf
mov byte [0x6d9884], 0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xcc4]
mov byte [0x6d98a0], 0
mov dword [0x6d98a4], 0x38e7
call 0x4fd3a0
mov ecx, eax
mov dword [ebp - 0xa6c], 0
mov dword [ebp - 0xa68], 0
mov dword [ebp - 0xa80], 1
mov eax, dword [ecx]
mov dword [ebp - 0xa7c], eax
mov eax, dword [ecx + 4]
mov dword [ebp - 0xa78], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0xa74], eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0xa70], eax
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0xa6c], eax
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0xa68], eax
xor eax, eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
mov word [ecx], ax
mov edx, dword [ebp - 0xcb0]
cmp edx, 8
jb 0x4ff616
mov ecx, dword [ebp - 0xcc4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4ff60c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x500f10
push edx
push ecx
call fcn.0056eec5
add esp, 8
xor eax, eax
mov dword [ebp - 0xcb4], 0
mov dword [ebp - 0xcb0], 7
mov word [ebp - 0xcc4], ax
lea eax, [ebp - 0xa64]
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xa80]
push eax
push ecx
mov ecx, 0x6d98a8
call fcn.00505600
push 0x438770
push 1
push 0x1c
lea eax, [ebp - 0xa80]
mov byte [ebp - 4], 0xa
push eax
call fcn.0056f875
lea eax, [ebp - 0xe5c]
mov dword [ebp - 0xe64], 1
lea ecx, [ebp - 0xe64]
mov byte [ebp - 0xe60], 0
push eax
push ecx
mov ecx, 0x6d98b0
call fcn.005054e0
lea eax, [ebp - 0xe64]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xe6c]
mov dword [ebp - 0xe6c], 1
push eax
push ecx
mov ecx, 0x6d98b8
mov byte [ebp - 0xe68], 1
call fcn.005054e0
lea eax, [ebp - 0xe6c]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xe74]
mov dword [ebp - 0xe74], 1
push eax
push ecx
mov ecx, 0x6d98c0
mov byte [ebp - 0xe70], 0
call fcn.005054e0
lea eax, [ebp - 0xf14]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x818]
mov dword [ebp - 0xf14], 0x100
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
je 0x4ff75b
xor eax, eax
mov dword [ebp - 0xa38], 0
lea ecx, [ebp - 0x818]
mov dword [ebp - 0xa34], 7
mov word [ebp - 0xa48], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4ff737
sub ecx, edx
lea eax, [ebp - 0x818]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xa48]
call fcn.00445cb0
jmp 0x4ff7ab
sub esp, 8
lea ecx, [ebp - 0x10e8]
call fcn.00442390
mov byte [ebp - 4], 0xe
call fcn.005988f5
push eax
push ecx
mov edx, str.Computer
lea ecx, [ebp - 0x10d8]
call fcn.00449e10
add esp, 4
mov ecx, eax
call fcn.00442d30
lea eax, [ebp - 0xa48]
push eax
lea ecx, [ebp - 0x10d0]
call fcn.004466f0
lea ecx, [ebp - 0x10e8]
call fcn.0043ae30
mov eax, dword [ebp - 0xa48]
mov dword [ebp - 0xbd0], eax
mov eax, dword [ebp - 0xa44]
mov dword [ebp - 0xbcc], eax
mov eax, dword [ebp - 0xa40]
mov dword [ebp - 0xbc8], eax
mov eax, dword [ebp - 0xa3c]
mov dword [ebp - 0xbc4], eax
mov eax, dword [ebp - 0xa38]
mov dword [ebp - 0xbc0], eax
mov eax, dword [ebp - 0xa34]
mov dword [ebp - 0xbbc], eax
xor eax, eax
mov dword [ebp - 0xbd4], 1
mov dword [ebp - 0xa38], 0
mov dword [ebp - 0xa34], 7
mov word [ebp - 0xa48], ax
lea eax, [ebp - 0xbb8]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xbd4]
push eax
push ecx
mov ecx, 0x6d98c8
call fcn.00505600
push 0x438770
push 1
push 0x1c
lea eax, [ebp - 0xbd4]
mov byte [ebp - 4], 0x11
push eax
call fcn.0056f875
lea ecx, [ebp - 0xbec]
call fcn.004fdd10
mov ecx, eax
mov dword [ebp - 0xa50], 0
mov dword [ebp - 0xa4c], 0
mov dword [ebp - 0xa64], 1
mov eax, dword [ecx]
mov dword [ebp - 0xa60], eax
mov eax, dword [ecx + 4]
mov dword [ebp - 0xa5c], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0xa58], eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0xa54], eax
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0xa50], eax
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0xa4c], eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
mov edx, dword [ebp - 0xbd8]
cmp edx, 0x10
jb 0x4ff8fa
mov ecx, dword [ebp - 0xbec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4ff8f0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x500f15
push edx
push ecx
call fcn.0056eec5
add esp, 8
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbd8], 0xf
mov byte [ebp - 0xbec], 0
lea eax, [ebp - 0xa48]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xa64]
push eax
push ecx
mov ecx, 0x6d98d0
call fcn.00505570
push 0x438780
push 1
push 0x1c
lea eax, [ebp - 0xa64]
mov byte [ebp - 4], 0x14
push eax
call fcn.0056f875
mov ebx, dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea eax, [ebp - 0x618]
push eax
push 0
push 0
push 0x23
push 0
call ebx
lea ecx, [ebp - 0x618]
add ecx, 0xfffffffe
lea ebx, [ebx]
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x4ff970
mov eax, dword [str.Aeroadmin_]
mov dword [ecx], eax
mov eax, dword [0x5f3458]
mov dword [ecx + 4], eax
mov eax, dword [0x5f345c]
mov dword [ecx + 8], eax
mov eax, dword [0x5f3460]
mov dword [ecx + 0xc], eax
mov eax, dword [0x5f3464]
mov dword [ecx + 0x10], eax
mov eax, dword [0x5f3468]
mov dword [ecx + 0x14], eax
xor eax, eax
lea ecx, [ebp - 0x618]
mov dword [ebp - 0xab8], 0
mov dword [ebp - 0xab4], 7
lea edx, [ecx + 2]
mov word [ebp - 0xac8], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4ff9d1
sub ecx, edx
lea eax, [ebp - 0x618]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xac8]
call fcn.00445cb0
mov eax, dword [ebp - 0xac8]
mov dword [ebp - 0xbb4], eax
mov eax, dword [ebp - 0xac4]
mov dword [ebp - 0xbb0], eax
mov eax, dword [ebp - 0xac0]
mov dword [ebp - 0xbac], eax
mov eax, dword [ebp - 0xabc]
mov dword [ebp - 0xba8], eax
mov eax, dword [ebp - 0xab8]
mov dword [ebp - 0xba4], eax
mov eax, dword [ebp - 0xab4]
mov dword [ebp - 0xbb8], 1
mov dword [ebp - 0xba0], eax
lea eax, [ebp - 0xb9c]
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xbb8]
push eax
push ecx
mov ecx, 0x6d98d8
call fcn.00505600
push 0x438770
push 1
push 0x1c
lea eax, [ebp - 0xbb8]
mov byte [ebp - 4], 0x17
push eax
call fcn.0056f875
lea eax, [ebp - 0xe74]
mov dword [ebp - 0xe7c], 1
lea ecx, [ebp - 0xe7c]
mov byte [ebp - 0xe78], 0
push eax
push ecx
mov ecx, 0x6d98e0
call fcn.005054e0
lea eax, [ebp - 0xe7c]
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xe84]
mov dword [ebp - 0xe84], 1
push eax
push ecx
mov ecx, 0x6d98e8
mov byte [ebp - 0xe80], 0
call fcn.005054e0
lea eax, [ebp - 0xe84]
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0xe8c]
mov dword [ebp - 0xe8c], 1
push eax
push ecx
mov ecx, 0x6d98f0
mov byte [ebp - 0xe88], 0
call fcn.005054e0
lea eax, [ebp - 0xe8c]
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xe94]
mov dword [ebp - 0xe94], 1
push eax
push ecx
mov ecx, 0x6d98f8
mov dword [ebp - 0xe90], 0x41900000
call fcn.005054e0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xe9c]
mov dword [ebp - 0xe9c], 1
lea eax, [ebp - 0xe94]
mov byte [ebp - 0xe98], 1
push eax
push ecx
mov ecx, 0x6d9900
call fcn.005054e0
lea eax, [ebp - 0xe9c]
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xea4]
mov dword [ebp - 0xea4], 1
push eax
push ecx
mov ecx, 0x6d9908
mov dword [ebp - 0xea0], 0x42700000
call fcn.005054e0
xor eax, eax
mov byte [ebp - 4], 0x1d
push eax
push 0x5e1af8
lea ecx, [ebp - 0xae0]
mov dword [ebp - 0xad0], 0
mov dword [ebp - 0xacc], 7
mov word [ebp - 0xae0], ax
call fcn.00445cb0
mov eax, dword [ebp - 0xae0]
mov dword [ebp - 0xb98], eax
mov eax, dword [ebp - 0xadc]
mov dword [ebp - 0xb94], eax
mov eax, dword [ebp - 0xad8]
mov dword [ebp - 0xb90], eax
mov eax, dword [ebp - 0xad4]
mov dword [ebp - 0xb8c], eax
mov eax, dword [ebp - 0xad0]
mov dword [ebp - 0xb88], eax
mov eax, dword [ebp - 0xacc]
mov dword [ebp - 0xb9c], 1
mov dword [ebp - 0xb84], eax
lea eax, [ebp - 0xb80]
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0xb9c]
push eax
push ecx
mov ecx, 0x6d9910
call fcn.00505600
push 0x438770
push 1
push 0x1c
lea eax, [ebp - 0xb9c]
mov byte [ebp - 4], 0x20
push eax
call fcn.0056f875
lea eax, [ebp - 0x418]
push eax
push 0
push 0
push 0x23
push 0
call ebx
lea edi, [ebp - 0x418]
add edi, 0xfffffffe
lea ecx, [ecx]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4ffc60
mov ecx, 0xb
mov dword [ebp - 0xae8], 0
mov esi, str.AeroadminRecordings_
mov dword [ebp - 0xae4], 7
rep movsd dword es:[edi], dword [esi]
xor eax, eax
lea ecx, [ebp - 0x418]
mov word [ebp - 0xaf8], ax
lea edx, [ecx + 2]
movsw word es:[edi], word [esi]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4ffca0
sub ecx, edx
lea eax, [ebp - 0x418]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xaf8]
call fcn.00445cb0
mov eax, dword [ebp - 0xaf8]
mov dword [ebp - 0xb7c], eax
mov eax, dword [ebp - 0xaf4]
mov dword [ebp - 0xb78], eax
mov eax, dword [ebp - 0xaf0]
mov dword [ebp - 0xb74], eax
mov eax, dword [ebp - 0xaec]
mov dword [ebp - 0xb70], eax
mov eax, dword [ebp - 0xae8]
mov dword [ebp - 0xb6c], eax
mov eax, dword [ebp - 0xae4]
mov dword [ebp - 0xb80], 1
mov dword [ebp - 0xb68], eax
lea eax, [ebp - 0xb64]
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xb80]
push eax
push ecx
mov ecx, 0x6d9918
call fcn.00505600
push 0x438770
push 1
push 0x1c
lea eax, [ebp - 0xb80]
mov byte [ebp - 4], 0x23
push eax
call fcn.0056f875
lea eax, [ebp - 0xf24]
mov dword [ebp - 0xf2c], 1
lea ecx, [ebp - 0xf2c]
mov byte [ebp - 0xf28], 0
push eax
push ecx
mov ecx, 0x6d9920
call fcn.005054e0
lea eax, [ebp - 0xea4]
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0xeac]
mov dword [ebp - 0xeac], 1
push eax
push ecx
mov ecx, 0x6d9928
mov byte [ebp - 0xea8], 0
call fcn.005054e0
lea eax, [ebp - 0xeac]
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0xeb4]
mov dword [ebp - 0xeb4], 1
push eax
push ecx
mov ecx, 0x6d9930
mov dword [ebp - 0xeb0], 0x41c80000
call fcn.005054e0
lea eax, [ebp - 0xec4]
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0xecc]
mov dword [ebp - 0xecc], 1
push eax
push ecx
mov ecx, 0x6d9938
mov dword [ebp - 0xec8], 0x32
call fcn.005054e0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xebc]
mov dword [ebp - 0xebc], 1
lea eax, [ebp - 0xeb4]
mov dword [ebp - 0xeb8], 0xffffffff
push eax
push ecx
mov ecx, 0x6d9940
call fcn.005054e0
lea eax, [ebp - 0xf44]
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xf4c]
mov dword [ebp - 0xf4c], 1
push eax
push ecx
mov ecx, 0x6d9948
mov dword [ebp - 0xf48], 0xffffffff
call fcn.005054e0
lea eax, [ebp - 0xf3c]
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xf44]
mov dword [ebp - 0xf44], 1
push eax
push ecx
mov ecx, 0x6d9950
mov dword [ebp - 0xf40], 0x42c80000
call fcn.005054e0
lea eax, [ebp - 0xf34]
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xf3c]
mov dword [ebp - 0xf3c], 1
push eax
push ecx
mov ecx, 0x6d9958
mov dword [ebp - 0xf38], 0x42c80000
call fcn.005054e0
lea eax, [ebp - 0xf2c]
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xf34]
mov dword [ebp - 0xf34], 1
push eax
push ecx
mov ecx, 0x6d9960
mov byte [ebp - 0xf30], 0
call fcn.005054e0
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0xb10]
push 0
push 0x5e1a69
mov dword [ebp - 0xb00], 0
mov dword [ebp - 0xafc], 0xf
mov byte [ebp - 0xb10], 0
call fcn.004462c0
mov eax, dword [ebp - 0xb10]
mov dword [ebp - 0xb44], eax
mov eax, dword [ebp - 0xb0c]
mov dword [ebp - 0xb40], eax
mov eax, dword [ebp - 0xb08]
mov dword [ebp - 0xb3c], eax
mov eax, dword [ebp - 0xb04]
mov dword [ebp - 0xb38], eax
mov eax, dword [ebp - 0xb00]
mov dword [ebp - 0xb34], eax
mov eax, dword [ebp - 0xafc]
mov dword [ebp - 0xb48], 1
mov dword [ebp - 0xb30], eax
lea eax, [ebp - 0xb2c]
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb48]
push eax
push ecx
mov ecx, 0x6d9968
call fcn.00505570
push 0x438780
push 1
mov byte [ebp - 4], 0x2f
lea eax, [ebp - 0xb48]
push 0x1c
push eax
call fcn.0056f875
push 0
push 0x5e1a69
lea ecx, [ebp - 0xab0]
mov dword [ebp - 0xaa0], 0
mov dword [ebp - 0xa9c], 0xf
mov byte [ebp - 0xab0], 0
call fcn.004462c0
mov eax, dword [ebp - 0xab0]
mov dword [ebp - 0xb60], eax
mov eax, dword [ebp - 0xaac]
mov dword [ebp - 0xb5c], eax
mov eax, dword [ebp - 0xaa8]
mov dword [ebp - 0xb58], eax
mov eax, dword [ebp - 0xaa4]
mov dword [ebp - 0xb54], eax
mov eax, dword [ebp - 0xaa0]
mov dword [ebp - 0xb50], eax
mov eax, dword [ebp - 0xa9c]
mov dword [ebp - 0xb64], 1
mov dword [ebp - 0xb4c], eax
lea eax, [ebp - 0xb48]
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0xb64]
push eax
push ecx
mov ecx, 0x6d9970
call fcn.00505570
push 0x438780
push 1
push 0x1c
lea eax, [ebp - 0xb64]
mov byte [ebp - 4], 0x32
push eax
call fcn.0056f875
push 0
push 0x5e1a69
lea ecx, [ebp - 0xa98]
mov dword [ebp - 0xa88], 0
mov dword [ebp - 0xa84], 0xf
mov byte [ebp - 0xa98], 0
call fcn.004462c0
mov eax, dword [ebp - 0xa98]
mov dword [ebp - 0xb28], eax
mov eax, dword [ebp - 0xa94]
mov dword [ebp - 0xb24], eax
mov eax, dword [ebp - 0xa90]
mov dword [ebp - 0xb20], eax
mov eax, dword [ebp - 0xa8c]
mov dword [ebp - 0xb1c], eax
mov eax, dword [ebp - 0xa88]
mov dword [ebp - 0xb18], eax
mov eax, dword [ebp - 0xa84]
mov dword [ebp - 0xb2c], 1
mov dword [ebp - 0xb14], eax
lea eax, [ebp - 0xb10]
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0xb2c]
push eax
push ecx
mov ecx, 0x6d9978
call fcn.00505570
push 0x438780
push 1
push 0x1c
lea eax, [ebp - 0xb2c]
mov byte [ebp - 4], 0x35
push eax
call fcn.0056f875
lea eax, [ebp - 0xf04]
mov dword [ebp - 0xf0c], 1
mov dword [ebp - 0xf08], 0
lea ecx, [ebp - 0xf0c]
push eax
push ecx
mov ecx, 0x6d9980
call fcn.005054e0
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0xc04]
push 0
push 0x5e1a69
mov dword [ebp - 0xf18], 1
mov dword [ebp - 0xbf4], 0
mov dword [ebp - 0xbf0], 0xf
mov byte [ebp - 0xc04], 0
call fcn.004462c0
lea eax, [ebp - 0xc04]
push eax
lea eax, [ebp - 0xf18]
push eax
lea ecx, [ebp - 0xcfc]
call fcn.0050ae80
lea ecx, [ebp - 0xc04]
call fcn.004414e0
lea eax, [ebp - 0xce0]
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0xcfc]
push eax
push ecx
mov ecx, 0x6d9988
call fcn.00505570
push 0x438780
push 1
push 0x1c
lea eax, [ebp - 0xcfc]
mov byte [ebp - 4], 0x39
push eax
call fcn.0056f875
lea eax, [ebp - 0xefc]
mov dword [ebp - 0xf04], 1
lea ecx, [ebp - 0xf04]
mov dword [ebp - 0xf00], 0
push eax
push ecx
mov ecx, 0x6d9990
call fcn.005054e0
lea eax, [ebp - 0xef4]
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0xefc]
mov dword [ebp - 0xefc], 1
push eax
push ecx
mov ecx, 0x6d9998
mov dword [ebp - 0xef8], 0x173f
call fcn.005054e0
lea eax, [ebp - 0xeec]
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0xef4]
mov dword [ebp - 0xef4], 1
push eax
push ecx
mov ecx, 0x6d99a0
mov dword [ebp - 0xef0], 0x173e
call fcn.005054e0
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0xc1c]
push 0
push 0x5e1a69
mov dword [ebp - 0xf1c], 1
mov dword [ebp - 0xc0c], 0
mov dword [ebp - 0xc08], 0xf
mov byte [ebp - 0xc1c], 0
call fcn.004462c0
lea eax, [ebp - 0xc1c]
push eax
lea eax, [ebp - 0xf1c]
push eax
lea ecx, [ebp - 0xce0]
call fcn.0050ae80
lea ecx, [ebp - 0xc1c]
call fcn.004414e0
lea eax, [ebp - 0xcc4]
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0xce0]
push eax
push ecx
mov ecx, 0x6d99a8
call fcn.00505570
push 0x438780
push 1
push 0x1c
lea eax, [ebp - 0xce0]
mov byte [ebp - 4], 0x3f
push eax
call fcn.0056f875
lea eax, [ebp - 0xee4]
mov dword [ebp - 0xeec], 1
lea ecx, [ebp - 0xeec]
mov dword [ebp - 0xee8], 0
push eax
push ecx
mov ecx, 0x6d99b0
call fcn.005054e0
lea eax, [ebp - 0xebc]
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0xec4]
mov dword [ebp - 0xec4], 1
push eax
push ecx
mov ecx, 0x6d99b8
mov byte [ebp - 0xec0], 0
call fcn.005054e0
xor eax, eax
mov byte [ebp - 4], 0x41
push eax
push 0x5e1af8
lea ecx, [ebp - 0xc34]
mov dword [ebp - 0xf20], 1
mov dword [ebp - 0xc24], 0
mov dword [ebp - 0xc20], 7
mov word [ebp - 0xc34], ax
call fcn.00445cb0
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xf20]
push eax
lea ecx, [ebp - 0xd18]
call fcn.0050ae20
lea ecx, [ebp - 0xc34]
call fcn.00445c30
lea eax, [ebp - 0xcfc]
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0xd18]
push eax
push ecx
mov ecx, 0x6d99c0
call fcn.00505600
push 0x438770
push 1
push 0x1c
lea eax, [ebp - 0xd18]
mov byte [ebp - 4], 0x44
push eax
call fcn.0056f875
xor eax, eax
mov dword [ebp - 0xf24], 1
push eax
mov dword [ebp - 0xc3c], 0
mov dword [ebp - 0xc38], 7
mov word [ebp - 0xc4c], ax
push 0x5e1af8
lea ecx, [ebp - 0xc4c]
call fcn.00445cb0
lea eax, [ebp - 0xc4c]
push eax
lea eax, [ebp - 0xf24]
push eax
lea ecx, [ebp - 0xd34]
call fcn.0050ae20
lea ecx, [ebp - 0xc4c]
call fcn.00445c30
lea eax, [ebp - 0xd18]
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0xd34]
push eax
push ecx
mov ecx, 0x6d99c8
call fcn.00505600
push 0x438770
push 1
push 0x1c
lea eax, [ebp - 0xd34]
mov byte [ebp - 4], 0x47
push eax
call fcn.0056f875
xor eax, eax
mov dword [ebp - 0xe4c], 1
push eax
push 0x5e1af8
lea ecx, [ebp - 0xc64]
mov dword [ebp - 0xc54], 0
mov dword [ebp - 0xc50], 7
mov word [ebp - 0xc64], ax
call fcn.00445cb0
lea eax, [ebp - 0xc64]
push eax
lea eax, [ebp - 0xe4c]
push eax
lea ecx, [ebp - 0xd50]
call fcn.0050ae20
lea ecx, [ebp - 0xc64]
call fcn.00445c30
lea eax, [ebp - 0xd34]
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0xd50]
push eax
push ecx
mov ecx, 0x6d99d0
call fcn.00505600
push 0x438770
push 1
push 0x1c
lea eax, [ebp - 0xd50]
mov byte [ebp - 4], 0x4a
push eax
call fcn.0056f875
xor eax, eax
mov dword [ebp - 0xe50], 1
push eax
push 0x5e1af8
lea ecx, [ebp - 0xc7c]
mov dword [ebp - 0xc6c], 0
mov dword [ebp - 0xc68], 7
mov word [ebp - 0xc7c], ax
call fcn.00445cb0
lea eax, [ebp - 0xc7c]
push eax
lea eax, [ebp - 0xe50]
push eax
lea ecx, [ebp - 0xd6c]
call fcn.0050ae20
lea ecx, [ebp - 0xc7c]
call fcn.00445c30
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0xd6c]
lea eax, [ebp - 0xd50]
push eax
push ecx
mov ecx, 0x6d99d8
call fcn.00505600
push 0x438770
push 1
push 0x1c
lea eax, [ebp - 0xd6c]
mov byte [ebp - 4], 0x4d
push eax
call fcn.0056f875
xor eax, eax
mov dword [ebp - 0xe54], 1
push eax
push 0x5e1af8
lea ecx, [ebp - 0xc94]
mov dword [ebp - 0xc84], 0
mov dword [ebp - 0xc80], 7
mov word [ebp - 0xc94], ax
call fcn.00445cb0
lea eax, [ebp - 0xc94]
push eax
lea eax, [ebp - 0xe54]
push eax
lea ecx, [ebp - 0xd88]
call fcn.0050ae20
lea ecx, [ebp - 0xc94]
call fcn.00445c30
lea eax, [ebp - 0xd6c]
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0xd88]
push eax
push ecx
mov ecx, 0x6d99e0
call fcn.00505600
push 0x438770
push 1
push 0x1c
lea eax, [ebp - 0xd88]
mov byte [ebp - 4], 0x50
push eax
call fcn.0056f875
lea eax, [ebp - 0xedc]
mov dword [ebp - 0xee4], 1
lea ecx, [ebp - 0xee4]
mov byte [ebp - 0xee0], 0
push eax
push ecx
mov ecx, 0x6d99e8
call fcn.005054e0
xor eax, eax
mov byte [ebp - 4], 0x51
push eax
push 0x5e1af8
lea ecx, [ebp - 0xcac]
mov dword [ebp - 0xe58], 1
mov dword [ebp - 0xc9c], 0
mov dword [ebp - 0xc98], 7
mov word [ebp - 0xcac], ax
call fcn.00445cb0
lea eax, [ebp - 0xcac]
push eax
lea eax, [ebp - 0xe58]
push eax
lea ecx, [ebp - 0xda4]
call fcn.0050ae20
lea ecx, [ebp - 0xcac]
call fcn.00445c30
lea eax, [ebp - 0xd88]
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0xda4]
push eax
push ecx
mov ecx, 0x6d99f0
call fcn.00505600
push 0x438770
push 1
push 0x1c
lea eax, [ebp - 0xda4]
mov byte [ebp - 4], 0x54
push eax
call fcn.0056f875
lea eax, [ebp - 0xed4]
mov dword [ebp - 0xedc], 1
lea ecx, [ebp - 0xedc]
mov byte [ebp - 0xed8], 0
push eax
push ecx
mov ecx, 0x6d99f8
call fcn.005054e0
lea eax, [ebp - 0xecc]
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xed4]
mov dword [ebp - 0xed4], 1
push eax
push ecx
mov ecx, 0x6d9a00
mov byte [ebp - 0xed0], 0
call fcn.005054e0
mov byte [ebp - 4], 0x56
mov dword [0x6d9a08], 0
mov dword [0x6d9a0c], 0
call fcn.00448ff0
mov dword [0x6d9a08], eax
mov byte [ebp - 4], 0x57
mov dword [0x6d9a10], 0
mov dword [0x6d9a14], 0
call fcn.0050aa50
mov dword [0x6d9a10], eax
mov byte [ebp - 4], 0x58
mov dword [0x6d9a18], 1
mov dword [0x6d9a1c], 0
mov dword [0x6d9a20], 0
call fcn.0050ab70
mov dword [0x6d9a1c], eax
mov dword [0x6d9a24], 0x1000000
mov word [0x6d9a28], 0
mov byte [0x6d9a2a], 0
mov dword [0x6d9a2c], 0
mov dword [0x6d9a30], 0
mov dword [0x6d9a34], 0x64
mov dword [0x6d9a38], 0x64
mov dword [0x6d9a3c], 0
mov dword [0x6d9a40], 0
mov byte [ebp - 4], 0x59
lea eax, [ebp - 0x218]
cmp byte [0x6c4e42], 0
jne 0x50086e
push eax
push 0
push 0
push 0x23
push 0
call ebx
lea ecx, [ebp - 0x218]
add ecx, 0xfffffffe
nop
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x500820
mov eax, dword [str.Aeroadmin]
mov dword [ecx], eax
mov eax, dword [0x5f3d40]
mov dword [ecx + 4], eax
mov eax, dword [0x5f3d44]
mov dword [ecx + 8], eax
mov eax, dword [0x5f3d48]
mov dword [ecx + 0xc], eax
mov eax, dword [0x5f3d4c]
mov dword [ecx + 0x10], eax
mov ax, word [0x5f3d50]
mov word [ecx + 0x14], ax
lea eax, [ebp - 0x218]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
jmp 0x500899
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push 0x5c
push eax
call fcn.00585f4e
add esp, 8
xor ecx, ecx
mov word [eax], cx
lea ecx, [ebp - 0x218]
add ecx, 0xfffffffe
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x5008a2
mov eax, dword [0x5f6368]
mov dword [ecx], eax
mov eax, dword [0x5f636c]
push 0
mov dword [ecx + 4], eax
mov eax, dword [0x5f6370]
push 0x80
mov dword [ecx + 8], eax
mov eax, dword [0x5f6374]
push 3
push 0
mov dword [ecx + 0xc], eax
mov eax, dword [0x5f6378]
push 1
mov dword [ecx + 0x10], eax
lea eax, [ebp - 0x218]
push SysReAllocString
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x500ac8
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edi, eax
cmp edi, 0x14
jae 0x500981
sub esp, 8
lea ecx, [ebp - 0x15b8]
call fcn.00443510
mov edx, str.guid.bin_is_corrupted
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x15a8]
call fcn.00449a40
lea eax, [ebp - 0xe1c]
push eax
lea ecx, [ebp - 0x15b8]
call fcn.004433d0
push 0x292
mov edx, str.settings.cpp
mov byte [ebp - 4], 0x5b
mov ecx, eax
call fcn.004c2da0
add esp, 4
lea ecx, [ebp - 0xe1c]
call fcn.004414e0
lea ecx, [ebp - 0x15b8]
mov byte [ebp - 4], 0x59
call fcn.0043aef0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x500ac8
mov dword [ebp - 0xe48], 0
mov dword [ebp - 0xe44], 0
mov dword [ebp - 0xe40], 0
mov dword [ebp - 0xe3c], 0
lea eax, [ebp - 0xe44]
mov byte [ebp - 4], 0x5c
push eax
push edi
mov ecx, eax
call fcn.00461bf0
push 0
lea eax, [ebp - 0xf7c]
push eax
mov eax, dword [ebp - 0xe44]
add eax, dword [ebp - 0xe48]
push edi
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 0x6d989c
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0xe48]
call fcn.00449400
mov edi, eax
lea eax, [ebp - 0xe5c]
push 4
push eax
mov ecx, edi
call fcn.004fbaa0
mov esi, dword [ebp - 0xe5c]
test esi, esi
je 0x500a2f
push 0x6d9878
push esi
mov ecx, 0x6d9878
call fcn.00461bf0
push esi
push dword [0x6d9878]
mov ecx, edi
call fcn.004fbaa0
mov edx, 0x6d9884
mov ecx, edi
call fcn.004fbd70
mov dword [ebp - 4], 0x5c
jmp 0x500ab9
lea ecx, [ebp - 0xe44]
mov byte [ebp - 4], 0x59
call fcn.0043afb0
lea eax, [ebp - 0xa18]
mov dword [0x6d989c], 0
push eax
push 0
push 0
push 0x23
push 0
call ebx
lea edi, [ebp - 0xa18]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x500af0
sub esp, 0xc
lea eax, [ebp - 0xa18]
mov ecx, 9
mov esi, str.Aeroadminconfig
rep movsd dword es:[edi], dword [esi]
push eax
lea ecx, [ebp - 0x1038]
call fcn.00505ed0
mov eax, dword [ebp - 0x1038]
mov eax, dword [eax + 4]
cmp dword [ebp + eax - 0x102c], 0
jne 0x500b8c
push str.en_US
push 0
call fcn.00599864
add esp, 8
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0xf68]
push 0
mov byte [ebp - 0xf70], 0
call fcn.00508940
lea edx, [ebp - 0xf70]
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0x1038]
call fcn.00505700
push 2
lea eax, [ebp - 0xf70]
push eax
call fcn.00500fb0
lea ecx, [ebp - 0xf70]
call fcn.00505b50
mov dword [ebp - 4], 0x61
lea ecx, [ebp - 0x1038]
mov byte [ebp - 4], 0x59
call fcn.00500f20
push 0xa
push 0x7c
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edi, eax
push edi
push 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov esi, eax
test esi, esi
je 0x500dfb
push edi
push 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0xa1c], 0xf
mov byte [ebp - 0xa30], 0
lea eax, [eax + eax*2]
mov byte [ebp - 4], 0x6a
test eax, eax
jne 0x500d08
mov dword [ebp - 0xa20], eax
mov byte [ebp + eax - 0xa30], al
jmp 0x500d16
push 0
push eax
lea ecx, [ebp - 0xa30]
call fcn.004463e0
mov eax, dword [ebp - 0xa20]
lea ecx, [ebp - 0xa30]
cmp dword [ebp - 0xa1c], 0x10
lea edx, [ebp - 0xe38]
mov dword [ebp - 0xe38], eax
movzx eax, word [esi]
cmovae ecx, dword [ebp - 0xa30]
push eax
lea eax, [esi + 2]
push eax
call fcn.0052dd70
push str.en_US
push 0
call fcn.00599864
add esp, 8
lea ecx, [ebp - 0x1508]
call fcn.00443510
mov byte [ebp - 4], 0x6b
lea edx, [ebp - 0xa30]
cmp dword [ebp - 0xa1c], 0x10
lea ecx, [ebp - 0x14f8]
push dword [ebp - 0xa20]
cmovae edx, dword [ebp - 0xa30]
call fcn.0044d730
add esp, 4
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0xf58]
push 0
mov byte [ebp - 0xf60], 0
call fcn.00508940
lea edx, [ebp - 0xf60]
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x1508]
call fcn.00505700
push 8
lea eax, [ebp - 0xf60]
push eax
call fcn.00500fb0
lea ecx, [ebp - 0xf60]
call fcn.00505b50
lea ecx, [ebp - 0x1508]
mov dword [ebp - 4], 0x6b
call fcn.0043aef0
lea ecx, [ebp - 0xa30]
mov byte [ebp - 4], 0x59
call fcn.004414e0
call fcn.004fc740
mov eax, 0x6d9780
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0056eeb4
mov esp, ebp
pop ebp
ret
call fcn.00591dc6
call fcn.00591dc6
int3