Function at 0x43a674
Capabilities:
Delete file

Disassembly:
mov eax, 0x561038
call fcn.0053c1d0
sub esp, 0x2fc
mov eax, dword [0x5af710]
and dword [ebp - 0x50], 0
push ebx
push esi
push edi
push 1
xor eax, ebp
mov dword [ebp - 0x4c], ecx
push 2
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x10], eax
call fcn.00404a20
push dword [ebp + 8]
and dword [ebp - 4], 0
lea eax, [ebp - 0x250]
push str.Mode:
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
cmp dword [0x5b21c0], 0x211
mov edi, 0x572a6c
mov esi, 0x572a3c
mov ebx, 0x572a34
jne 0x43a89a
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 1
push 2
lea ecx, [ebp - 0x118]
call fcn.00404a20
push edi
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 1
call fcn.00407320
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 2
jb 0x43a723
mov eax, dword [eax + 4]
jmp 0x43a726
add eax, 4
push eax
push 0x572a4c
push edi
push 0x572a48
push 0x211
push 0x572a40
push dword [ebp - 0x68]
mov eax, 0x572a38
push esi
push dword [ebp - 0x6a]
push esi
push dword [ebp - 0x6c]
push eax
push dword [ebp - 0x6e]
push ebx
push dword [ebp - 0x72]
push ebx
push dword [ebp - 0x74]
push eax
push 0xb23
push esi
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x54], esp
push str..FunctionEx.cpp
call fcn.00405500
lea eax, [ebp - 0x2c]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 3
jb 0x43a78e
mov eax, dword [eax + 4]
jmp 0x43a791
add eax, 4
push eax
lea eax, [ebp - 0x118]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00402c50
push 0
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.00402c50
lea eax, [ebp - 0x118]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0
call fcn.004028d0
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xcc], 0x572840
call fcn.0054dfcb
cmp dword [ebp + 8], 1
jne 0x43aa78
mov ecx, dword [ebp - 0x4c]
add ecx, 0xc4
push 1
call fcn.004293f8
mov ecx, dword [ebp - 0x4c]
movzx ecx, byte [ecx + 0xac]
cmp eax, ecx
je 0x43aa71
cmp dword [0x5b21c0], 0x211
jne 0x43aa60
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 1
push 2
lea ecx, [ebp - 0x118]
call fcn.00404a20
push edi
push 0x574cb4
push 0x572a4c
push edi
push 0x572a48
push 0x211
push 0x572a40
push dword [ebp - 0x68]
mov eax, 0x572a38
push esi
push dword [ebp - 0x6a]
mov byte [ebp - 4], 4
push esi
push dword [ebp - 0x6c]
push eax
push dword [ebp - 0x6e]
push ebx
push dword [ebp - 0x72]
push ebx
push dword [ebp - 0x74]
push eax
push 0xb28
push esi
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x54], esp
push str..FunctionEx.cpp
call fcn.00405500
lea eax, [ebp - 0x2c]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 5
jb 0x43a960
mov eax, dword [eax + 4]
jmp 0x43a963
add eax, 4
push eax
lea eax, [ebp - 0x118]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov byte [ebp - 4], 4
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00402c50
lea eax, [ebp - 0x118]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0
call fcn.004028d0
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xcc], 0x572840
call fcn.0054dfcb
mov eax, dword [ebp - 0x4c]
and dword [eax + 0xb8], 0
and dword [eax + 0xbc], 0
push 1
jmp 0x43ac51
cmp dword [ebp + 8], 2
jne 0x43ac68
mov ecx, dword [ebp - 0x4c]
add ecx, 0xc4
push 0
call fcn.004293f8
mov ecx, dword [ebp - 0x4c]
movzx ecx, byte [ecx + 0xac]
cmp eax, ecx
je 0x43ac4f
cmp dword [0x5b21c0], 0x211
jne 0x43ac3e
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 1
push 2
lea ecx, [ebp - 0x118]
call fcn.00404a20
push edi
push 0x574c9c
push 0x572a4c
push edi
push 0x572a48
push 0x211
push 0x572a40
push dword [ebp - 0x68]
mov eax, 0x572a38
push esi
push dword [ebp - 0x6a]
mov byte [ebp - 4], 6
push esi
push dword [ebp - 0x6c]
push eax
push dword [ebp - 0x6e]
push ebx
push dword [ebp - 0x72]
push ebx
push dword [ebp - 0x74]
push eax
push 0xb32
push esi
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x54], esp
push str..FunctionEx.cpp
call fcn.00405500
lea eax, [ebp - 0x2c]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 7
jb 0x43ab3e
mov eax, dword [eax + 4]
jmp 0x43ab41
add eax, 4
push eax
lea eax, [ebp - 0x118]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov byte [ebp - 4], 6
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00402c50
lea eax, [ebp - 0x118]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0
call fcn.004028d0
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xcc], 0x572840
call fcn.0054dfcb
mov eax, dword [ebp - 0x4c]
and dword [eax + 0xb8], 0
and dword [eax + 0xbc], 0
push 0
mov ecx, dword [ebp - 0x4c]
add ecx, 0xc4
call fcn.004293f8
mov ecx, dword [ebp - 0x4c]
mov byte [ecx + 0xac], al
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp dword [eax + 0x60], ecx
jne 0x43ac7e
mov dword [eax + 0xb8], ecx
mov dword [eax + 0xbc], ecx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xc]
mov dword [eax + 0x60], ecx
mov ecx, dword [0x5b096c]
call fcn.00429760
test eax, eax
mov eax, dword [ebp - 0x4c]
jne 0x43af09
mov ecx, dword [eax + 0x10]
mov dword [eax + 0x14], ecx
mov ecx, dword [eax + 0x14]
mov dword [eax + 0x10], ecx
cmp dword [0x5b21c0], 0x211
jne 0x43ae46
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 1
push 2
lea ecx, [ebp - 0x118]
call fcn.00404a20
push edi
push 0x574c80
push 0x572a4c
push edi
push 0x572a48
push 0x211
push 0x572a40
push dword [ebp - 0x68]
mov eax, 0x572a38
push esi
push dword [ebp - 0x6a]
mov byte [ebp - 4], 8
push esi
push dword [ebp - 0x6c]
push eax
push dword [ebp - 0x6e]
push ebx
push dword [ebp - 0x72]
push ebx
push dword [ebp - 0x74]
push eax
push 0xb45
push esi
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x54], esp
push str..FunctionEx.cpp
call fcn.00405500
lea eax, [ebp - 0x2c]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 9
jb 0x43ad43
mov eax, dword [eax + 4]
jmp 0x43ad46
add eax, 4
push eax
lea eax, [ebp - 0x118]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov byte [ebp - 4], 8
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00402c50
lea eax, [ebp - 0x118]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0
call fcn.004028d0
mov edi, 0x572840
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xcc], edi
call fcn.0054dfcb
jmp 0x43ae4b
mov edi, 0x572840
mov esi, dword [ebp - 0x4c]
mov ecx, esi
call fcn.004291dd
and dword [esi + 0x60], 0
push 1
push 2
lea ecx, [ebp - 0x1d0]
call fcn.00404a20
mov eax, dword [0x5b096c]
add eax, 0x6c
push str._tracert.lg
push eax
lea eax, [ebp - 0x1d0]
push eax
mov byte [ebp - 4], 0xa
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x1d0]
call fcn.00407320
cmp dword [eax + 0x18], 0x10
jb 0x43aeaa
mov eax, dword [eax + 4]
jmp 0x43aead
add eax, 4
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
push eax
call esi
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00402c50
mov eax, dword [0x5b096c]
push dword [eax + 0x5ac]
call esi
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0
call fcn.004028d0
lea ecx, [ebp - 0x184]
mov dword [ebp - 0x184], edi
call fcn.0054dfcb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x204]
call fcn.004028d0
mov dword [ebp - 0x204], edi
jmp 0x43beb1
cmp dword [eax + 0xb8], 0
jne 0x43af3d
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xc]
mov dword [eax + 0xb8], ecx
lea eax, [ebp - 0x6c]
push eax
call fcn.004189e9
mov edx, dword [eax]
mov ecx, dword [ebp - 0x4c]
mov dword [ecx + 0xb0], edx
mov eax, dword [eax + 4]
mov dword [ecx + 0xb4], eax
mov eax, ecx
mov ecx, dword [eax + 0xc]
mov edx, ecx
sub edx, dword [eax + 0xb8]
mov eax, dword [eax + 0xbc]
test eax, eax
mov dword [ebp - 0x7c], edx
je 0x43af63
sub ecx, eax
cmp ecx, 0xea60
jbe 0x43be90
mov eax, dword [ebp - 0x7c]
xor edx, edx
mov ecx, 0x3e8
div ecx
lea ecx, [ebp - 0x6c]
push eax
xor eax, eax
push eax
push eax
push eax
call fcn.0041881c
mov ecx, dword [eax]
mov edx, dword [ebp - 0x4c]
mov eax, dword [eax + 4]
add edx, 0xb0
add ecx, dword [edx]
push 1
adc eax, dword [edx + 4]
mov dword [ebp - 0x6c], ecx
push 2
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x68], eax
call fcn.00404a20
mov ecx, dword [0x5b096c]
lea eax, [ebp - 0x134]
push eax
mov byte [ebp - 4], 0xb
call fcn.004820b0
cmp dword [eax + 0x14], 0
mov ecx, dword [0x5b096c]
mov byte [ebp - 4], 0xc
jne 0x43afff
lea eax, [ebp - 0x54]
push eax
call fcn.004832c0
push dword [eax]
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x50], 1
call fcn.00405500
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x50], 3
jmp 0x43b01c
lea eax, [ebp - 0x2c]
push eax
call fcn.004820b0
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x50], 4
push str._Y__m__d__H:_M:_S
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0041916d
mov dword [ebp - 0x88], eax
mov ecx, dword [ebp - 0x4c]
push str._Y__m__d__H:_M:_S
lea eax, [ebp - 0x94]
push eax
add ecx, 0xb0
mov dword [ebp - 4], 0x10
call fcn.0041916d
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x11
call fcn.004be950
pop ecx
mov ecx, dword [ebp - 0x88]
mov ecx, dword [ecx]
mov eax, dword [eax]
mov dword [ebp - 0x88], ecx
mov ecx, dword [ebp - 0x84]
mov ecx, dword [ecx]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x84], ecx
xor edx, edx
mov ecx, 0xea60
div ecx
push edi
mov byte [ebp - 4], 0x12
push eax
mov eax, 0x572bf8
push eax
push str.Standing
push edi
push dword [ebp - 0x88]
push eax
push str.EndTime
push edi
push dword [ebp - 0x84]
push eax
push str.StartTime
push edi
push dword [ebp - 0x8c]
push eax
push str.SysUserName
push dword [ebp - 0x98]
lea eax, [ebp - 0x118]
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.0040b751
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.0040bbec
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, dword [ebp - 0x90]
add ecx, 0xfffffff0
call fcn.00401250
mov ecx, dword [ebp - 0x94]
add ecx, 0xfffffff0
call fcn.00401250
mov ecx, dword [ebp - 0x80]
add ecx, 0xfffffff0
call fcn.00401250
test byte [ebp - 0x50], 4
je 0x43b1a3
and dword [ebp - 0x50], 0xfffffffb
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00402c50
test byte [ebp - 0x50], 2
je 0x43b1b9
and dword [ebp - 0x50], 0xfffffffd
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.00402c50
test byte [ebp - 0x50], 1
mov dword [ebp - 4], 0xc
je 0x43b1d1
mov ecx, dword [ebp - 0x54]
add ecx, 0xfffffff0
call fcn.00401250
push 0
push 1
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 0xb
call fcn.00402c50
push 1
push 1
push 0x31
call fcn.004338e1
add esp, 0xc
test eax, eax
mov dword [ebp - 0x50], eax
jne 0x43b237
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], al
call fcn.004028d0
mov esi, 0x572840
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xcc], esi
call fcn.0054dfcb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x204]
call fcn.004028d0
mov dword [ebp - 0x204], esi
jmp 0x43beb1
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x118]
call fcn.00407320
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x13
jb 0x43b255
mov eax, dword [eax + 4]
jmp 0x43b258
add eax, 4
mov ecx, dword [ebp - 0x50]
push eax
call fcn.0040e73e
neg eax
sbb al, al
push 0
inc al
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x75], al
mov byte [ebp - 4], 0xb
call fcn.00402c50
cmp byte [ebp - 0x75], 0
je 0x43b447
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 1
push 2
lea ecx, [ebp - 0x1d0]
call fcn.00404a20
push edi
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x14
call fcn.00407320
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x15
jb 0x43b2c0
mov eax, dword [eax + 4]
jmp 0x43b2c3
add eax, 4
push eax
push 0x572a4c
push edi
push 0x572a48
push 0x10000000
push 0x572a40
push dword [ebp - 0x58]
mov eax, 0x572a38
push esi
push dword [ebp - 0x5a]
push esi
push dword [ebp - 0x5c]
push eax
push dword [ebp - 0x5e]
push ebx
push dword [ebp - 0x62]
push ebx
push dword [ebp - 0x64]
push eax
push 0xb69
push esi
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x54], esp
push str..FunctionEx.cpp
call fcn.00405500
lea eax, [ebp - 0x2c]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x16
jb 0x43b32b
mov eax, dword [eax + 4]
jmp 0x43b32e
add eax, 4
push eax
lea eax, [ebp - 0x1d0]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push 0
xor edi, edi
inc edi
push edi
lea ecx, [ebp - 0x2c]
call fcn.00402c50
push 0
push edi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00402c50
lea eax, [ebp - 0x1d0]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0xb
call fcn.004028d0
mov esi, 0x572840
lea ecx, [ebp - 0x184]
mov dword [ebp - 0x184], esi
call fcn.0054dfcb
mov ecx, dword [ebp - 0x50]
push edi
call fcn.00428dd5
jmp 0x43b669
mov eax, dword [ebp - 0x4c]
mov al, byte [eax + 0xac]
cmp al, 6
jae 0x43bc33
lea eax, [ebp - 0x2c]
push eax
call fcn.0042c0f9
pop ecx
cmp dword [ebp - 0x14], 0x10
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], 0x17
jae 0x43b472
lea eax, [ebp - 0x28]
mov ecx, dword [ebp - 0x50]
push eax
call fcn.0040e73e
test eax, eax
jne 0x43b6b0
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x118]
push eax
call fcn.0040b751
pop ecx
pop ecx
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 1
push 2
lea ecx, [ebp - 0x1d0]
call fcn.00404a20
push edi
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x18
call fcn.00407320
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x19
jb 0x43b4d4
mov eax, dword [eax + 4]
jmp 0x43b4d7
add eax, 4
push eax
push 0x572a4c
push edi
push 0x572a48
push 0x10000000
push 0x572a40
push dword [ebp - 0x58]
mov eax, 0x572a38
push esi
push dword [ebp - 0x5a]
push esi
push dword [ebp - 0x5c]
push eax
push dword [ebp - 0x5e]
push ebx
push dword [ebp - 0x62]
push ebx
push dword [ebp - 0x64]
push eax
push 0xb76
push esi
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x54], esp
push str..FunctionEx.cpp
call fcn.00405500
lea eax, [ebp - 0x26c]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x1a
jb 0x43b542
mov eax, dword [eax + 4]
jmp 0x43b545
add eax, 4
push eax
lea eax, [ebp - 0x1d0]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
xor ebx, ebx
push ebx
xor edi, edi
inc edi
push edi
lea ecx, [ebp - 0x26c]
call fcn.00402c50
push ebx
push edi
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x18
call fcn.00402c50
lea eax, [ebp - 0x1d0]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0x17
call fcn.004028d0
mov esi, 0x572840
lea ecx, [ebp - 0x184]
mov dword [ebp - 0x184], esi
call fcn.0054dfcb
mov ecx, dword [ebp - 0x50]
push edi
call fcn.00428dd5
push ebx
push edi
lea ecx, [ebp - 0x2c]
call fcn.00402c50
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0
call fcn.004028d0
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xcc], esi
call fcn.0054dfcb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x204]
call fcn.004028d0
lea ecx, [ebp - 0x204]
mov dword [ebp - 0x204], esi
call fcn.0054dfcb
mov eax, edi
jmp 0x43bebf
mov eax, dword [ebp - 0x50]
and dword [eax + 0x10], 0
or dword [ebp - 0x44], 0xffffffff
mov word [ebp - 0x40], 2
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x48], 0x572c04
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x1b
call fcn.00408250
test eax, eax
je 0x43b899
cmp dword [0x5b21c0], 0x235
jne 0x43b883
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 1
push 2
lea ecx, [ebp - 0x1d0]
call fcn.00404a20
push edi
push str.connect_manger_server
push 0x572a4c
push edi
push 0x572a48
push 0x235
push 0x572a40
push dword [ebp - 0x58]
mov eax, 0x572a38
push esi
push dword [ebp - 0x5a]
mov byte [ebp - 4], 0x1c
push esi
push dword [ebp - 0x5c]
push eax
push dword [ebp - 0x5e]
push ebx
push dword [ebp - 0x62]
push ebx
push dword [ebp - 0x64]
push eax
push 0xb80
push esi
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x54], esp
push str..FunctionEx.cpp
call fcn.00405500
lea eax, [ebp - 0x150]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x1d
jb 0x43b780
mov eax, dword [eax + 4]
jmp 0x43b783
add eax, 4
push eax
lea eax, [ebp - 0x1d0]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov byte [ebp - 4], 0x1c
push 0
push 1
lea ecx, [ebp - 0x150]
call fcn.00402c50
lea eax, [ebp - 0x1d0]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0x1b
call fcn.004028d0
lea ecx, [ebp - 0x184]
mov dword [ebp - 0x184], 0x572840
call fcn.0054dfcb
push 0
push dword [ebp - 0x50]
call fcn.00405430
mov ecx, eax
call fcn.0042d528
jmp 0x43bc16
lea ecx, [ebp - 0x48]
call fcn.00409890
test eax, eax
mov dword [ebp - 0x54], eax
jne 0x43bbec
cmp dword [0x5b21c0], 0x212
jne 0x43ba4c
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 1
push 2
lea ecx, [ebp - 0x1d0]
call fcn.00404a20
push edi
push 0x572d9c
push 0x572a4c
push edi
push 0x572a48
push 0x212
push 0x572a40
push dword [ebp - 0x58]
mov eax, 0x572a38
push esi
push dword [ebp - 0x5a]
mov byte [ebp - 4], 0x1e
push esi
push dword [ebp - 0x5c]
push eax
push dword [ebp - 0x5e]
push ebx
push dword [ebp - 0x62]
push ebx
push dword [ebp - 0x64]
push eax
push 0xb88
push esi
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x80], esp
push str..FunctionEx.cpp
call fcn.00405500
lea eax, [ebp - 0x150]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x1f
jb 0x43b949
mov eax, dword [eax + 4]
jmp 0x43b94c
add eax, 4
push eax
lea eax, [ebp - 0x1d0]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov byte [ebp - 4], 0x1e
push 0
push 1
lea ecx, [ebp - 0x150]
call fcn.00402c50
lea eax, [ebp - 0x1d0]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0x1b
call fcn.004028d0
lea ecx, [ebp - 0x184]
mov dword [ebp - 0x184], 0x572840
call fcn.0054dfcb
cmp dword [0x5b21c0], 0x211
jne 0x43bbec
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 1
push 2
lea ecx, [ebp - 0x1d0]
call fcn.00404a20
push edi
push 0x572d9c
push 0x572a4c
push edi
push 0x572a48
push 0x211
push 0x572a40
push dword [ebp - 0x58]
mov eax, 0x572a38
push esi
push dword [ebp - 0x5a]
mov byte [ebp - 4], 0x20
push esi
push dword [ebp - 0x5c]
push eax
push dword [ebp - 0x5e]
push ebx
push dword [ebp - 0x62]
push ebx
push dword [ebp - 0x64]
push eax
push 0xb89
push esi
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x80], esp
push str..FunctionEx.cpp
call fcn.00405500
lea eax, [ebp - 0x150]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x21
jb 0x43bae9
mov eax, dword [eax + 4]
jmp 0x43baec
add eax, 4
push eax
lea eax, [ebp - 0x1d0]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov byte [ebp - 4], 0x20
push 0
push 1
lea ecx, [ebp - 0x150]
call fcn.00402c50
lea eax, [ebp - 0x1d0]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0x1b
call fcn.004028d0
lea ecx, [ebp - 0x184]
mov dword [ebp - 0x184], 0x572840
call fcn.0054dfcb
mov esi, dword [ebp - 0x50]
push dword [ebp - 0x54]
mov ecx, esi
call fcn.0040b9ec
mov eax, dword [esi]
mov ecx, dword [eax + 0x10]
push 0
push ecx
push eax
push dword [ebp - 0x44]
call fcn.00503ed7
add esp, 0x10
push 1
mov ecx, esi
call fcn.00428dd5
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x17
call fcn.0040b997
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00402c50
jmp 0x43be60
cmp al, 0xb
ja 0x43bc66
mov esi, dword [ebp - 0x50]
mov eax, dword [esi]
mov ecx, dword [ebp - 0x4c]
push 0
push 0x32
push esi
mov word [eax + 6], 2
call fcn.00429ae8
push eax
call fcn.0042d74d
add esp, 0x10
push 1
mov ecx, esi
call fcn.00428dd5
jmp 0x43be60
call fcn.005504da
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x4c]
movzx eax, byte [eax + 0xac]
push eax
lea eax, [ebp - 0x7c]
push 0x574c40
push eax
mov byte [ebp - 4], 0x22
call fcn.0040b350
add esp, 0xc
cmp dword [0x5b21c0], 0x211
jne 0x43be4b
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 1
push 2
lea ecx, [ebp - 0x308]
call fcn.00404a20
push edi
push dword [ebp - 0x7c]
mov eax, 0x572a38
push 0x572a4c
push edi
push 0x572a48
push 0x211
push 0x572a40
push dword [ebp - 0x11c]
mov byte [ebp - 4], 0x23
push esi
push dword [ebp - 0x11e]
push esi
push dword [ebp - 0x120]
push eax
push dword [ebp - 0x122]
push ebx
push dword [ebp - 0x126]
push ebx
push dword [ebp - 0x128]
push eax
push 0xb9e
push esi
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x54], esp
push str..FunctionEx.cpp
call fcn.00405500
lea eax, [ebp - 0x288]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x24
jb 0x43bd48
mov eax, dword [eax + 4]
jmp 0x43bd4b
add eax, 4
push eax
lea eax, [ebp - 0x308]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov byte [ebp - 4], 0x23
push 0
push 1
lea ecx, [ebp - 0x288]
call fcn.00402c50
lea eax, [ebp - 0x308]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 4], 0x22
call fcn.004028d0
lea ecx, [ebp - 0x2bc]
mov dword [ebp - 0x2bc], 0x572840
call fcn.0054dfcb
mov ecx, dword [ebp - 0x50]
push 1
call fcn.00428dd5
mov ecx, dword [ebp - 0x7c]
add ecx, 0xfffffff0
call fcn.00401250
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xc]
mov dword [eax + 0xbc], ecx
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0
call fcn.004028d0
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xcc], 0x572840
call fcn.0054dfcb
mov ecx, dword [ebp - 0x4c]
call fcn.0042f3f2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x204]
call fcn.004028d0
mov dword [ebp - 0x204], 0x572840
lea ecx, [ebp - 0x204]
call fcn.0054dfcb
xor eax, eax
inc eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0053aaae
leave
ret 4