Function at 0x527057
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
mov eax, 0x12ec
call fcn.00867f10
sub esp, eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x11a0], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x119c], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x11a8], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x11a4], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x11b0], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x11ac], eax
mov eax, dword [ebp + 0x48]
mov dword [ebp - 0x11b8], eax
mov eax, dword [ebp + 0x4c]
mov dword [ebp - 0x11b4], eax
mov eax, dword [ebp + 0x54]
mov dword [ebp - 0x11c0], eax
mov eax, dword [ebp + 0x58]
mov dword [ebp - 0x11bc], eax
mov eax, dword [ebp + 0x64]
mov dword [ebp - 0x11c8], eax
mov eax, dword [ebp + 0x68]
mov dword [ebp - 0x11c4], eax
mov eax, dword [ebp + 0x74]
mov dword [ebp - 0x11d0], eax
mov eax, dword [ebp + 0x78]
mov dword [ebp - 0x11cc], eax
mov eax, dword [ebp + 0x90]
mov dword [ebp - 0x11d8], eax
mov eax, dword [ebp + 0x94]
mov dword [ebp - 0x11d4], eax
lea eax, [ebp - 0x1190]
mov dword [esp + 0x30], eax
lea eax, [ebp - 0x1184]
mov dword [esp + 0x2c], eax
lea eax, [ebp - 0x1180]
mov dword [esp + 0x28], eax
lea eax, [ebp - 0x1170]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x1164]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x115c]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1154]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1148]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1144]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x13c]
mov dword [esp + 8], eax
lea eax, [ebp - 0x138]
mov dword [esp + 4], eax
lea eax, [ebp - 0x134]
mov dword [esp], eax
call sym.___super_fnc__980
mov eax, dword [ebp - 0x13c]
test eax, eax
je 0x527199
mov eax, 0
jmp 0x5288a0
lea eax, [ebp - 0x1198]
mov dword [esp + 0x64], eax
lea eax, [ebp - 0x1194]
mov dword [esp + 0x60], eax
lea eax, [ebp - 0x1190]
mov dword [esp + 0x5c], eax
lea eax, [ebp - 0x118c]
mov dword [esp + 0x58], eax
lea eax, [ebp - 0x1188]
mov dword [esp + 0x54], eax
lea eax, [ebp - 0x1184]
mov dword [esp + 0x50], eax
lea eax, [ebp - 0x117c]
mov dword [esp + 0x4c], eax
lea eax, [ebp - 0x1178]
mov dword [esp + 0x48], eax
lea eax, [ebp - 0x1174]
mov dword [esp + 0x44], eax
lea eax, [ebp - 0x1170]
mov dword [esp + 0x40], eax
lea eax, [ebp - 0x116c]
mov dword [esp + 0x3c], eax
lea eax, [ebp - 0x1168]
mov dword [esp + 0x38], eax
lea eax, [ebp - 0x1164]
mov dword [esp + 0x34], eax
lea eax, [ebp - 0x1160]
mov dword [esp + 0x30], eax
lea eax, [ebp - 0x115c]
mov dword [esp + 0x2c], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0x28], eax
lea eax, [ebp - 0x1154]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x114c]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1148]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1144]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1140]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x113c]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x93c]
mov dword [esp + 8], eax
lea eax, [ebp - 0x13c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x138]
mov dword [esp], eax
call sym.___super_fnc__981
mov eax, dword [ebp - 0x1150]
test eax, eax
jne 0x5272b5
mov eax, 0
jmp 0x5288a0
lea eax, [ebp - 0x1158]
mov dword [esp], eax
call sym.___super_fnc__982
mov eax, dword [ebp - 0x130]
cmp eax, 0xa
je 0x527c26
cmp eax, 0xa
ja 0x528217
cmp eax, 5
je 0x5272ee
cmp eax, 6
je 0x527543
jmp 0x528217
mov eax, dword [ebp - 0x12c]
cmp eax, 2
je 0x5273ee
cmp eax, 2
ja 0x528407
test eax, eax
je 0x527314
cmp eax, 1
je 0x527381
jmp 0x528407
lea eax, [ebp - 0x1194]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x1188]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x1184]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1174]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x116c]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x115c]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 8], eax
lea eax, [ebp - 0x93c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__983
jmp 0x52753e
lea eax, [ebp - 0x1190]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x1168]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x1160]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1144]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1140]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x93c]
mov dword [esp + 8], eax
lea eax, [ebp - 0x13c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x138]
mov dword [esp], eax
call sym.___super_fnc__984
jmp 0x52753e
movzx eax, byte [ebp - 0x1a]
cmp al, 1
jne 0x5274e9
movzx eax, word [ebp - 0x1c]
cmp ax, 0x200
jne 0x527471
lea eax, [ebp - 0x1190]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x118c]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x117c]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1170]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1164]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1144]
mov dword [esp + 8], eax
lea eax, [ebp - 0x93c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__985
jmp 0x52753d
lea eax, [ebp - 0x1198]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1184]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1168]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x115c]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1154]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__986
lea eax, [ebp - 0x1168]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 4], eax
lea eax, [ebp - 0x93c]
mov dword [esp], eax
call sym.___super_fnc__987
jmp 0x52753d
lea eax, [ebp - 0x1190]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1188]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x116c]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1168]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 8], eax
lea eax, [ebp - 0x93c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__988
nop
jmp 0x528407
mov eax, dword [ebp - 0x12c]
cmp eax, 3
je 0x527853
cmp eax, 3
ja 0x52840a
cmp eax, 2
je 0x52776d
cmp eax, 2
ja 0x52840a
test eax, eax
je 0x52757f
cmp eax, 1
je 0x527695
jmp 0x52840a
movzx eax, byte [ebp - 0x1a]
cmp al, 1
jne 0x527610
lea eax, [ebp - 0x1198]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1194]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x116c]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1160]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1140]
mov dword [esp + 8], eax
lea eax, [ebp - 0x13c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x138]
mov dword [esp], eax
call sym.___super_fnc__989
lea eax, [ebp - 0x116c]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 4], eax
lea eax, [ebp - 0x93c]
mov dword [esp], eax
call sym.___super_fnc__990
jmp 0x527c21
lea eax, [ebp - 0x118c]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1180]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1174]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1170]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1164]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1148]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__991
lea eax, [ebp - 0x1170]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 4], eax
lea eax, [ebp - 0x93c]
mov dword [esp], eax
call sym.___super_fnc__992
jmp 0x527c21
movzx eax, byte [ebp - 0x1a]
cmp al, 1
jne 0x52770a
lea eax, [ebp - 0x1180]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x1178]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x1174]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1170]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1148]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1144]
mov dword [esp + 8], eax
lea eax, [ebp - 0x93c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__993
jmp 0x527c21
lea eax, [ebp - 0x1198]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x117c]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1178]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1164]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x115c]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 8], eax
lea eax, [ebp - 0x93c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__994
jmp 0x527c21
movzx eax, byte [ebp - 0x1a]
cmp al, 1
jne 0x5277f0
lea eax, [ebp - 0x1190]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x1180]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x117c]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1170]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1144]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__995
lea eax, [ebp - 0x117c]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 4], eax
lea eax, [ebp - 0x93c]
mov dword [esp], eax
call sym.___super_fnc__996
jmp 0x527c21
lea eax, [ebp - 0x1180]
mov dword [esp + 0x20], eax
lea eax, [ebp - 0x1174]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1164]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x115c]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1158]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1150]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1144]
mov dword [esp + 8], eax
lea eax, [ebp - 0x93c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___super_fnc__997
jmp 0x527c21
movzx eax, byte [ebp - 0x1a]
cmp al, 1
jne 0x527a42
mov eax, dword [ebp - 0x1154]
mov edx, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x1184]
mov ebx, dword [ebp - 0x13c]
mov edi, dword [ebp - 0x1190]
mov esi, dword [ebp - 0x1190]
mov dword [ebp - 0x11dc], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e0], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e4], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e8], esi
mov esi, dword [ebp - 0x1170]
mov dword [ebp - 0x11ec], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f0], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f4], esi
mov esi, dword [ebp - 0x1158]
fld1
fstp qword [esp + 0xbc]
mov dword [esp + 0xb8], eax
fld qword [0x880a50]
fstp qword [esp + 0xb0]
mov dword [esp + 0xac], 0x38
mov dword [esp + 0xa8], edx
fld qword [0x880a50]
fstp qword [esp + 0xa0]
mov dword [esp + 0x9c], ecx
fld qword [0x880a48]
fstp qword [esp + 0x94]
fld qword [0x880a48]
fstp qword [esp + 0x8c]
mov dword [esp + 0x88], 0x10f
mov dword [esp + 0x84], ebx
fld qword [0x880a50]
fstp qword [esp + 0x7c]
fld qword [0x880a40]
fstp qword [esp + 0x74]
mov dword [esp + 0x70], edi
fld qword [0x880a48]
fstp qword [esp + 0x68]
fld1
fstp qword [esp + 0x60]
mov eax, dword [ebp - 0x11dc]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x11e0]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x11e4]
mov dword [esp + 0x54], eax
mov eax, dword [ebp - 0x11e8]
mov dword [esp + 0x50], eax
mov eax, dword [ebp - 0x11ec]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp - 0x11f0]
mov dword [esp + 0x48], eax
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x44], eax
fld qword [0x880a40]
fstp qword [esp + 0x3c]
fld qword [0x880a48]
fstp qword [esp + 0x34]
fld qword [0x880a48]
fstp qword [esp + 0x2c]
fld1
fstp qword [esp + 0x24]
fld qword [0x880a50]
fstp qword [esp + 0x1c]
fld qword [0x880a58]
fstp qword [esp + 0x14]
fld qword [0x880a68]
fstp qword [esp + 0xc]
mov dword [esp + 8], esi
fldz
fstp qword [esp]
call sym._ExportWinAPI
mov dword [ebp - 0x1184], eax
mov eax, dword [ebp - 0x1184]
mov ecx, eax
mov eax, dword [ebp - 0x1150]
lea edx, [ebp - 0x93c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x87eef8
mov dword [esp + 4], 0x400
mov dword [esp], eax
call ecx
mov dword [ebp - 0x1158], eax
jmp 0x527c20
mov eax, dword [ebp - 0x1178]
mov edx, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x1144]
mov ebx, dword [ebp - 0x13c]
mov edi, dword [ebp - 0x1154]
mov esi, dword [ebp - 0x1174]
mov dword [ebp - 0x11dc], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e0], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e4], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e8], esi
mov esi, dword [ebp - 0x1164]
mov dword [ebp - 0x11ec], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f0], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f4], esi
mov esi, dword [ebp - 0x1158]
fld qword [0x880a30]
fstp qword [esp + 0xbc]
mov dword [esp + 0xb8], eax
fld qword [0x880a60]
fstp qword [esp + 0xb0]
mov dword [esp + 0xac], 0x38
mov dword [esp + 0xa8], edx
fld qword [0x880a40]
fstp qword [esp + 0xa0]
mov dword [esp + 0x9c], ecx
fldz
fstp qword [esp + 0x94]
fld qword [0x880a48]
fstp qword [esp + 0x8c]
mov dword [esp + 0x88], 0x10f
mov dword [esp + 0x84], ebx
fld qword [0x880a38]
fstp qword [esp + 0x7c]
fld qword [0x880a48]
fstp qword [esp + 0x74]
mov dword [esp + 0x70], edi
fld qword [0x880a50]
fstp qword [esp + 0x68]
fld1
fstp qword [esp + 0x60]
mov eax, dword [ebp - 0x11dc]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x11e0]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x11e4]
mov dword [esp + 0x54], eax
mov eax, dword [ebp - 0x11e8]
mov dword [esp + 0x50], eax
mov eax, dword [ebp - 0x11ec]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp - 0x11f0]
mov dword [esp + 0x48], eax
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x44], eax
fld1
fstp qword [esp + 0x3c]
fld qword [0x880a30]
fstp qword [esp + 0x34]
fldz
fstp qword [esp + 0x2c]
fld qword [0x880a60]
fstp qword [esp + 0x24]
fld qword [0x880a68]
fstp qword [esp + 0x1c]
fld qword [0x880a30]
fstp qword [esp + 0x14]
fld qword [0x880a40]
fstp qword [esp + 0xc]
mov dword [esp + 8], esi
fld qword [0x880a40]
fstp qword [esp]
call sym._ExportWinAPI
mov dword [ebp - 0x1188], eax
mov eax, dword [ebp - 0x1188]
mov ecx, eax
mov eax, dword [ebp - 0x1150]
lea edx, [ebp - 0x93c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.Windows_Server_2012_R2__wS
mov dword [esp + 4], 0x400
mov dword [esp], eax
call ecx
mov dword [ebp - 0x1158], eax
nop
jmp 0x52840a
mov eax, dword [ebp - 0x12c]
test eax, eax
jne 0x52840d
movzx eax, byte [ebp - 0x1a]
cmp al, 1
jne 0x52802b
mov eax, dword [ebp - 0x128]
cmp eax, 0x55ef
jbe 0x527e40
mov eax, dword [ebp - 0x118c]
mov edx, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x1154]
mov ebx, dword [ebp - 0x13c]
mov edi, dword [ebp - 0x1148]
mov esi, dword [ebp - 0x1160]
mov dword [ebp - 0x11dc], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e0], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e4], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e8], esi
mov esi, dword [ebp - 0x1144]
mov dword [ebp - 0x11ec], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f0], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f4], esi
mov esi, dword [ebp - 0x1158]
fld qword [0x880a58]
fstp qword [esp + 0xbc]
mov dword [esp + 0xb8], eax
fld qword [0x880a68]
fstp qword [esp + 0xb0]
mov dword [esp + 0xac], 0x38
mov dword [esp + 0xa8], edx
fld qword [0x880a40]
fstp qword [esp + 0xa0]
mov dword [esp + 0x9c], ecx
fld qword [0x880a50]
fstp qword [esp + 0x94]
fld qword [0x880a40]
fstp qword [esp + 0x8c]
mov dword [esp + 0x88], 0x10f
mov dword [esp + 0x84], ebx
fld qword [0x880a58]
fstp qword [esp + 0x7c]
fld qword [0x880a30]
fstp qword [esp + 0x74]
mov dword [esp + 0x70], edi
fld qword [0x880a50]
fstp qword [esp + 0x68]
fld qword [0x880a60]
fstp qword [esp + 0x60]
mov eax, dword [ebp - 0x11dc]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x11e0]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x11e4]
mov dword [esp + 0x54], eax
mov eax, dword [ebp - 0x11e8]
mov dword [esp + 0x50], eax
mov eax, dword [ebp - 0x11ec]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp - 0x11f0]
mov dword [esp + 0x48], eax
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x44], eax
fldz
fstp qword [esp + 0x3c]
fld qword [0x880a60]
fstp qword [esp + 0x34]
fld qword [0x880a48]
fstp qword [esp + 0x2c]
fld qword [0x880a60]
fstp qword [esp + 0x24]
fld qword [0x880a38]
fstp qword [esp + 0x1c]
fld qword [0x880a50]
fstp qword [esp + 0x14]
fld qword [0x880a48]
fstp qword [esp + 0xc]
mov dword [esp + 8], esi
fld qword [0x880a50]
fstp qword [esp]
call sym._ExportWinAPI
mov dword [ebp - 0x118c], eax
mov eax, dword [ebp - 0x118c]
mov ecx, eax
mov eax, dword [ebp - 0x1150]
lea edx, [ebp - 0x93c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.Windows_11__wS
mov dword [esp + 4], 0x400
mov dword [esp], eax
call ecx
mov dword [ebp - 0x1158], eax
jmp 0x528211
mov eax, dword [ebp - 0x1154]
mov edx, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x1160]
mov ebx, dword [ebp - 0x13c]
mov edi, dword [ebp - 0x1154]
mov esi, dword [ebp - 0x1164]
mov dword [ebp - 0x11dc], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e0], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e4], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e8], esi
mov esi, dword [ebp - 0x1144]
mov dword [ebp - 0x11ec], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f0], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f4], esi
mov esi, dword [ebp - 0x1158]
fld qword [0x880a48]
fstp qword [esp + 0xbc]
mov dword [esp + 0xb8], eax
fld qword [0x880a48]
fstp qword [esp + 0xb0]
mov dword [esp + 0xac], 0x38
mov dword [esp + 0xa8], edx
fld qword [0x880a68]
fstp qword [esp + 0xa0]
mov dword [esp + 0x9c], ecx
fld qword [0x880a38]
fstp qword [esp + 0x94]
fld qword [0x880a30]
fstp qword [esp + 0x8c]
mov dword [esp + 0x88], 0x10f
mov dword [esp + 0x84], ebx
fld qword [0x880a30]
fstp qword [esp + 0x7c]
fld qword [0x880a58]
fstp qword [esp + 0x74]
mov dword [esp + 0x70], edi
fld qword [0x880a48]
fstp qword [esp + 0x68]
fld qword [0x880a30]
fstp qword [esp + 0x60]
mov eax, dword [ebp - 0x11dc]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x11e0]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x11e4]
mov dword [esp + 0x54], eax
mov eax, dword [ebp - 0x11e8]
mov dword [esp + 0x50], eax
mov eax, dword [ebp - 0x11ec]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp - 0x11f0]
mov dword [esp + 0x48], eax
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x44], eax
fldz
fstp qword [esp + 0x3c]
fld qword [0x880a60]
fstp qword [esp + 0x34]
fldz
fstp qword [esp + 0x2c]
fld qword [0x880a30]
fstp qword [esp + 0x24]
fld qword [0x880a30]
fstp qword [esp + 0x1c]
fld qword [0x880a68]
fstp qword [esp + 0x14]
fld qword [0x880a48]
fstp qword [esp + 0xc]
mov dword [esp + 8], esi
fld qword [0x880a58]
fstp qword [esp]
call sym._ExportWinAPI
mov dword [ebp - 0x1190], eax
mov eax, dword [ebp - 0x1190]
mov ecx, eax
mov eax, dword [ebp - 0x1150]
lea edx, [ebp - 0x93c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.Windows_10__wS
mov dword [esp + 4], 0x400
mov dword [esp], eax
call ecx
mov dword [ebp - 0x1158], eax
jmp 0x528211
mov eax, dword [ebp - 0x1170]
mov edx, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x1174]
mov ebx, dword [ebp - 0x13c]
mov edi, dword [ebp - 0x118c]
mov esi, dword [ebp - 0x1154]
mov dword [ebp - 0x11dc], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e0], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e4], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e8], esi
mov esi, dword [ebp - 0x1188]
mov dword [ebp - 0x11ec], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f0], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f4], esi
mov esi, dword [ebp - 0x1158]
fldz
fstp qword [esp + 0xbc]
mov dword [esp + 0xb8], eax
fld qword [0x880a38]
fstp qword [esp + 0xb0]
mov dword [esp + 0xac], 0x38
mov dword [esp + 0xa8], edx
fld qword [0x880a40]
fstp qword [esp + 0xa0]
mov dword [esp + 0x9c], ecx
fld qword [0x880a40]
fstp qword [esp + 0x94]
fld qword [0x880a40]
fstp qword [esp + 0x8c]
mov dword [esp + 0x88], 0x10f
mov dword [esp + 0x84], ebx
fld qword [0x880a48]
fstp qword [esp + 0x7c]
fld qword [0x880a68]
fstp qword [esp + 0x74]
mov dword [esp + 0x70], edi
fld qword [0x880a48]
fstp qword [esp + 0x68]
fld1
fstp qword [esp + 0x60]
mov eax, dword [ebp - 0x11dc]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x11e0]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x11e4]
mov dword [esp + 0x54], eax
mov eax, dword [ebp - 0x11e8]
mov dword [esp + 0x50], eax
mov eax, dword [ebp - 0x11ec]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp - 0x11f0]
mov dword [esp + 0x48], eax
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x44], eax
fld qword [0x880a38]
fstp qword [esp + 0x3c]
fld qword [0x880a58]
fstp qword [esp + 0x34]
fld qword [0x880a48]
fstp qword [esp + 0x2c]
fld qword [0x880a58]
fstp qword [esp + 0x24]
fld qword [0x880a58]
fstp qword [esp + 0x1c]
fld qword [0x880a40]
fstp qword [esp + 0x14]
fld qword [0x880a68]
fstp qword [esp + 0xc]
mov dword [esp + 8], esi
fld qword [0x880a48]
fstp qword [esp]
call sym._ExportWinAPI
mov dword [ebp - 0x1194], eax
mov eax, dword [ebp - 0x1194]
mov ecx, eax
mov eax, dword [ebp - 0x1150]
lea edx, [ebp - 0x93c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.Windows_Server_2016_or_higher__wS
mov dword [esp + 4], 0x400
mov dword [esp], eax
call ecx
mov dword [ebp - 0x1158], eax
nop
jmp 0x52840d
mov eax, dword [ebp - 0x1194]
mov edx, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x1194]
mov ebx, dword [ebp - 0x13c]
mov edi, dword [ebp - 0x1140]
mov esi, dword [ebp - 0x1160]
mov dword [ebp - 0x11dc], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e0], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e4], esi
mov esi, dword [ebp - 0x13c]
mov dword [ebp - 0x11e8], esi
mov esi, dword [ebp - 0x115c]
mov dword [ebp - 0x11ec], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f0], esi
mov esi, dword [ebp - 0x1158]
mov dword [ebp - 0x11f4], esi
mov esi, dword [ebp - 0x1158]
fld qword [0x880a68]
fstp qword [esp + 0xbc]
mov dword [esp + 0xb8], eax
fld1
fstp qword [esp + 0xb0]
mov dword [esp + 0xac], 0x38
mov dword [esp + 0xa8], edx
fld qword [0x880a48]
fstp qword [esp + 0xa0]
mov dword [esp + 0x9c], ecx
fld qword [0x880a50]
fstp qword [esp + 0x94]
fldz
fstp qword [esp + 0x8c]
mov dword [esp + 0x88], 0x10f
mov dword [esp + 0x84], ebx
fld qword [0x880a38]
fstp qword [esp + 0x7c]
fld qword [0x880a40]
fstp qword [esp + 0x74]
mov dword [esp + 0x70], edi
fld qword [0x880a48]
fstp qword [esp + 0x68]
fld qword [0x880a60]
fstp qword [esp + 0x60]
mov eax, dword [ebp - 0x11dc]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x11e0]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x11e4]
mov dword [esp + 0x54], eax
mov eax, dword [ebp - 0x11e8]
mov dword [esp + 0x50], eax
mov eax, dword [ebp - 0x11ec]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp - 0x11f0]
mov dword [esp + 0x48], eax
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x44], eax
fld qword [0x880a40]
fstp qword [esp + 0x3c]
fld qword [0x880a60]
fstp qword [esp + 0x34]
fld qword [0x880a68]
fstp qword [esp + 0x2c]
fld qword [0x880a58]
fstp qword [esp + 0x24]
fld qword [0x880a30]
fstp qword [esp + 0x1c]
fld qword [0x880a40]
fstp qword [esp + 0x14]
fld qword [0x880a58]
fstp qword [esp + 0xc]
mov dword [esp + 8], esi
fld qword [0x880a40]
fstp qword [esp]
call sym._ExportWinAPI
mov dword [ebp - 0x1198], eax
mov eax, dword [ebp - 0x1198]
mov ecx, eax
mov eax, dword [ebp - 0x1150]
lea edx, [ebp - 0x93c]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], str.Unknown
mov dword [esp + 8], str.Windows__wS__wS
mov dword [esp + 4], 0x400
mov dword [esp], eax
call ecx
mov dword [ebp - 0x1158], eax
jmp 0x52840e
nop
jmp 0x52840e
nop
jmp 0x52840e
nop
mov eax, dword [ebp - 0x1158]
test eax, eax
jg 0x528652
mov eax, dword [ebp - 0x117c]
mov dword [ebp - 0x11dc], eax
mov edx, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x1150]
mov ebx, dword [ebp - 0x1158]
mov esi, dword [ebp - 0x13c]
mov edi, dword [ebp - 0x118c]
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x11e0], eax
mov eax, dword [ebp - 0x1194]
mov dword [ebp - 0x11e4], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x11e8], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x11ec], eax
mov eax, dword [ebp - 0x1180]
mov dword [ebp - 0x11f0], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x11f4], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x11f8], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x11fc], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x1200], eax
mov eax, dword [ebp - 0x1180]
mov dword [ebp - 0x1204], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x1208], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x120c], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x1210], eax
mov eax, dword [ebp - 0x1140]
mov dword [ebp - 0x1214], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x1218], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x121c], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x1220], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x1224], eax
mov eax, dword [ebp - 0x11dc]
mov dword [esp + 0x94], eax
mov dword [esp + 0x90], edx
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x84], esi
mov dword [esp + 0x80], edi
fld qword [0x880a50]
fstp qword [esp + 0x78]
fld qword [0x880a60]
fstp qword [esp + 0x70]
mov eax, dword [ebp - 0x11e0]
mov dword [esp + 0x6c], eax
mov eax, dword [ebp - 0x11e4]
mov dword [esp + 0x68], eax
mov eax, dword [ebp - 0x11e8]
mov dword [esp + 0x64], eax
mov eax, dword [ebp - 0x11ec]
mov dword [esp + 0x60], eax
mov eax, dword [ebp - 0x11f0]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x11f8]
mov dword [esp + 0x54], eax
fld1
fstp qword [esp + 0x4c]
fld qword [0x880a68]
fstp qword [esp + 0x44]
mov eax, dword [ebp - 0x11fc]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0x1200]
mov dword [esp + 0x3c], eax
mov eax, dword [ebp - 0x1204]
mov dword [esp + 0x38], eax
mov eax, dword [ebp - 0x1208]
mov dword [esp + 0x34], eax
fld qword [0x880a40]
fstp qword [esp + 0x2c]
mov eax, dword [ebp - 0x120c]
mov dword [esp + 0x28], eax
fld qword [0x880a50]
fstp qword [esp + 0x20]
mov eax, dword [ebp - 0x1210]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x1214]
mov dword [esp + 0x18], eax
mov eax, dword [ebp - 0x1218]
mov dword [esp + 0x14], eax
fld qword [0x880a48]
fstp qword [esp + 0xc]
mov eax, dword [ebp - 0x121c]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x1220]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x1224]
mov dword [esp], eax
call sym._ByteFree
mov eax, 0
jmp 0x5288a0
mov eax, dword [ebp - 0x1158]
cmp eax, 0x3ff
jle 0x52889a
mov eax, dword [ebp - 0x118c]
mov dword [ebp - 0x11dc], eax
mov edx, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x1150]
mov ebx, dword [ebp - 0x1158]
mov esi, dword [ebp - 0x13c]
mov edi, dword [ebp - 0x1194]
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x11e0], eax
mov eax, dword [ebp - 0x118c]
mov dword [ebp - 0x11e4], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x11e8], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x11ec], eax
mov eax, dword [ebp - 0x1178]
mov dword [ebp - 0x11f0], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x11f4], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x11f8], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x11fc], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x1200], eax
mov eax, dword [ebp - 0x1184]
mov dword [ebp - 0x1204], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x1208], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x120c], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x1210], eax
mov eax, dword [ebp - 0x1198]
mov dword [ebp - 0x1214], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x1218], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x121c], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x1220], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x1224], eax
mov eax, dword [ebp - 0x11dc]
mov dword [esp + 0x94], eax
mov dword [esp + 0x90], edx
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x84], esi
mov dword [esp + 0x80], edi
fld qword [0x880a38]
fstp qword [esp + 0x78]
fld qword [0x880a58]
fstp qword [esp + 0x70]
mov eax, dword [ebp - 0x11e0]
mov dword [esp + 0x6c], eax
mov eax, dword [ebp - 0x11e4]
mov dword [esp + 0x68], eax
mov eax, dword [ebp - 0x11e8]
mov dword [esp + 0x64], eax
mov eax, dword [ebp - 0x11ec]
mov dword [esp + 0x60], eax
mov eax, dword [ebp - 0x11f0]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp - 0x11f4]
mov dword [esp + 0x58], eax
mov eax, dword [ebp - 0x11f8]
mov dword [esp + 0x54], eax
fld qword [0x880a58]
fstp qword [esp + 0x4c]
fld qword [0x880a60]
fstp qword [esp + 0x44]
mov eax, dword [ebp - 0x11fc]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0x1200]
mov dword [esp + 0x3c], eax
mov eax, dword [ebp - 0x1204]
mov dword [esp + 0x38], eax
mov eax, dword [ebp - 0x1208]
mov dword [esp + 0x34], eax
fld qword [0x880a58]
fstp qword [esp + 0x2c]
mov eax, dword [ebp - 0x120c]
mov dword [esp + 0x28], eax
fld qword [0x880a38]
fstp qword [esp + 0x20]
mov eax, dword [ebp - 0x1210]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x1214]
mov dword [esp + 0x18], eax
mov eax, dword [ebp - 0x1218]
mov dword [esp + 0x14], eax
fld qword [0x880a38]
fstp qword [esp + 0xc]
mov eax, dword [ebp - 0x121c]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x1220]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x1224]
mov dword [esp], eax
call sym._ByteFree
mov eax, 0
jmp 0x5288a0
mov eax, dword [ebp - 0x1150]
add esp, 0x12ec
pop ebx
pop esi
pop edi
pop ebp
ret