Function at 0x440430
Capabilities:
Execute anti-debugging instructions

Disassembly:
push 0xffffffffffffffff
push 0x4c79e8
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push ebp
push esi
push edi
mov eax, dword [0x53856c]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0x1c], edi
cmp byte [edi + 0x960], 0
je 0x44046d
mov al, 1
jmp 0x440c0a
mov byte [esp + 0x1b], 1
call fcn.00444b70
mov ebp, dword [0x4d6164]
test al, al
je 0x440496
call ebp
mov ebx, eax
call fcn.0044e230
mov ecx, eax
mov eax, 0x520d24
call fcn.0044e670
push 0x43
call dword [0x4d62c4]
test eax, eax
setne al
mov byte [edi + 6], al
call fcn.00444b70
test al, al
je 0x4404fa
call ebp
mov ebx, eax
call fcn.0044e230
mov esi, eax
cmp byte [esi], 0
je 0x4404fa
mov ecx, esi
call fcn.0044e760
mov eax, dword [esi + 4]
xor ecx, ecx
cmp eax, ecx
jg 0x4404d4
mov dword [esi + 4], ecx
jmp 0x4404fa
mov dword [esi + eax*8 + 0xfc8], ecx
mov dword [esi + eax*8 + 0xfcc], ecx
add dword [esi + 4], 0xffffffff
je 0x4404fa
add esi, 8
mov dword [esp + 0x20], esi
mov ebx, dword [esp + 0x20]
rdtsc
mov dword [ebx], eax
mov dword [ebx + 4], edx
call fcn.00444b70
test al, al
je 0x440518
call ebp
mov ebx, eax
call fcn.0044e230
mov ecx, eax
mov eax, str.Popup_TimeLastInfo
call fcn.0044e670
call fcn.00441d00
mov byte [edi + 7], al
call fcn.00444b70
test al, al
je 0x440574
call ebp
mov ebx, eax
call fcn.0044e230
mov esi, eax
cmp byte [esi], 0
je 0x440574
mov ecx, esi
call fcn.0044e760
mov eax, dword [esi + 4]
xor ecx, ecx
cmp eax, ecx
jg 0x44054e
mov dword [esi + 4], ecx
jmp 0x440574
mov dword [esi + eax*8 + 0xfc8], ecx
mov dword [esi + eax*8 + 0xfcc], ecx
add dword [esi + 4], 0xffffffff
je 0x440574
add esi, 8
mov dword [esp + 0x20], esi
mov ebx, dword [esp + 0x20]
rdtsc
mov dword [ebx], eax
mov dword [ebx + 4], edx
call fcn.00444b70
test al, al
je 0x440592
call ebp
mov ebx, eax
call fcn.0044e230
mov ecx, eax
mov eax, 0x520d50
call fcn.0044e670
mov edi, dword [esp + 0x34]
mov ecx, dword [esp + 0x1c]
mov eax, edi
call fcn.004410a0
test al, al
jne 0x4405a9
mov byte [esp + 0x1b], al
call fcn.00444b70
test al, al
je 0x4405fd
call ebp
mov ebx, eax
call fcn.0044e230
mov esi, eax
cmp byte [esi], 0
je 0x4405fd
mov ecx, esi
call fcn.0044e760
mov eax, dword [esi + 4]
xor ecx, ecx
cmp eax, ecx
jg 0x4405d7
mov dword [esi + 4], ecx
jmp 0x4405fd
mov dword [esi + eax*8 + 0xfc8], ecx
mov dword [esi + eax*8 + 0xfcc], ecx
add dword [esi + 4], 0xffffffff
je 0x4405fd
add esi, 8
mov dword [esp + 0x20], esi
mov ebx, dword [esp + 0x20]
rdtsc
mov dword [ebx], eax
mov dword [ebx + 4], edx
call fcn.00444b70
test al, al
je 0x44061b
call ebp
mov ebx, eax
call fcn.0044e230
mov ecx, eax
mov eax, 0x520d68
call fcn.0044e670
mov ecx, dword [esp + 0x1c]
mov edx, edi
call fcn.00440f10
test al, al
jne 0x44062e
mov byte [esp + 0x1b], al
call fcn.00444b70
test al, al
je 0x440682
call ebp
mov ebx, eax
call fcn.0044e230
mov esi, eax
cmp byte [esi], 0
je 0x440682
mov ecx, esi
call fcn.0044e760
mov eax, dword [esi + 4]
xor ecx, ecx
cmp eax, ecx
jg 0x44065c
mov dword [esi + 4], ecx
jmp 0x440682
mov dword [esi + eax*8 + 0xfc8], ecx
mov dword [esi + eax*8 + 0xfcc], ecx
add dword [esi + 4], 0xffffffff
je 0x440682
add esi, 8
mov dword [esp + 0x20], esi
mov ebx, dword [esp + 0x20]
rdtsc
mov dword [ebx], eax
mov dword [ebx + 4], edx
call fcn.00444b70
test al, al
je 0x4406a0
call ebp
mov ebx, eax
call fcn.0044e230
mov ecx, eax
mov eax, 0x520d80
call fcn.0044e670
mov edi, dword [esp + 0x1c]
call fcn.00440c20
test al, al
jne 0x4406b1
mov byte [esp + 0x1b], al
call fcn.00444b70
test al, al
je 0x440709
call ebp
mov ebx, eax
call fcn.0044e230
mov esi, eax
cmp byte [esi], 0
je 0x440709
mov ecx, esi
call fcn.0044e760
mov eax, dword [esi + 4]
xor ecx, ecx
or edi, 0xffffffff
cmp eax, ecx
jg 0x4406e2
mov dword [esi + 4], ecx
jmp 0x44070c
mov dword [esi + eax*8 + 0xfc8], ecx
mov dword [esi + eax*8 + 0xfcc], ecx
add dword [esi + 4], edi
je 0x44070c
add esi, 8
mov dword [esp + 0x20], esi
mov ebx, dword [esp + 0x20]
rdtsc
mov dword [ebx], eax
mov dword [ebx + 4], edx
jmp 0x44070c
or edi, 0xffffffff
call fcn.00444b70
test al, al
je 0x44072a
call ebp
mov ebx, eax
call fcn.0044e230
mov ecx, eax
mov eax, 0x520d98
call fcn.0044e670
mov ecx, dword [esp + 0x34]
mov esi, dword [esp + 0x1c]
push ecx
mov ebx, esi
call fcn.00441120
test al, al
jne 0x440744
mov byte [esp + 0x1b], al
jmp 0x4407ad
call fcn.00444b70
test al, al
je 0x44076a
mov dword [esp + 0x20], 0x520db0
call ebp
mov ebx, eax
call fcn.0044e230
mov ecx, eax
mov eax, 0x520db0
call fcn.0044e670
xor ebx, ebx
mov dword [esp + 0x2c], ebx
mov ecx, dword [esp + 0x34]
push esi
call fcn.004416c0
test al, al
je 0x440789
mov eax, esi
call fcn.00441ae0
test al, al
jne 0x44078d
mov byte [esp + 0x1b], bl
mov dword [esp + 0x2c], edi
call fcn.00444b70
test al, al
je 0x4407ad
call ebp
mov ebx, eax
call fcn.0044e230
cmp byte [eax], 0
je 0x4407ad
call fcn.0044e710
call fcn.00444b70
test al, al
je 0x440800
call ebp
mov ebx, eax
call fcn.0044e230
mov esi, eax
cmp byte [esi], 0
je 0x440800
mov ecx, esi
call fcn.0044e760
mov eax, dword [esi + 4]
xor ecx, ecx
cmp eax, ecx
jg 0x4407db
mov dword [esi + 4], ecx
jmp 0x440800
mov dword [esi + eax*8 + 0xfc8], ecx
mov dword [esi + eax*8 + 0xfcc], ecx
add dword [esi + 4], edi
je 0x440800
add esi, 8
mov dword [esp + 0x20], esi
mov ebx, dword [esp + 0x20]
rdtsc
mov dword [ebx], eax
mov dword [ebx + 4], edx
call fcn.00444b70
test al, al
je 0x44081e
call ebp
mov ebx, eax
call fcn.0044e230
mov ecx, eax
mov eax, 0x520dc8
call fcn.0044e670
call fcn.00444620
mov edx, dword [esp + 0x1c]
push eax
add edx, 0x4ba
push 0xb
push edx
call fcn.004ab011
add esp, 0xc
call fcn.00444b70
test al, al
je 0x44088c
call ebp
mov ebx, eax
call fcn.0044e230
mov esi, eax
cmp byte [esi], 0
je 0x44088c
mov ecx, esi
call fcn.0044e760
mov eax, dword [esi + 4]
xor ecx, ecx
cmp eax, ecx
jg 0x440867
mov dword [esi + 4], ecx
jmp 0x44088c
mov dword [esi + eax*8 + 0xfc8], ecx
mov dword [esi + eax*8 + 0xfcc], ecx
add dword [esi + 4], edi
je 0x44088c
add esi, 8
mov dword [esp + 0x20], esi
mov ebx, dword [esp + 0x20]
rdtsc
mov dword [ebx], eax
mov dword [ebx + 4], edx
call fcn.00444b70
test al, al
je 0x4408aa
call ebp
mov ebx, eax
call fcn.0044e230
mov ecx, eax
mov eax, 0x520de0
call fcn.0044e670
mov eax, dword [esp + 0x1c]
call fcn.00441b20
test al, al
jne 0x4408bb
mov byte [esp + 0x1b], al
call fcn.00444b70
test al, al
je 0x44090e
call ebp
mov ebx, eax
call fcn.0044e230
mov esi, eax
cmp byte [esi], 0
je 0x44090e
mov ecx, esi
call fcn.0044e760
mov eax, dword [esi + 4]
xor ecx, ecx
cmp eax, ecx
jg 0x4408e9
mov dword [esi + 4], ecx
jmp 0x44090e
mov dword [esi + eax*8 + 0xfc8], ecx
mov dword [esi + eax*8 + 0xfcc], ecx
add dword [esi + 4], edi
je 0x44090e
add esi, 8
mov dword [esp + 0x20], esi
mov ebx, dword [esp + 0x20]
rdtsc
mov dword [ebx], eax
mov dword [ebx + 4], edx
call fcn.00444b70
test al, al
je 0x44092c
call ebp
mov ebx, eax
call fcn.0044e230
mov ecx, eax
mov eax, 0x520dfc
call fcn.0044e670
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x1c]
call fcn.00441b70
test al, al
jne 0x440941
mov byte [esp + 0x1b], al
call fcn.00444b70
test al, al
je 0x440994
call ebp
mov ebx, eax
call fcn.0044e230
mov esi, eax
cmp byte [esi], 0
je 0x440994
mov ecx, esi
call fcn.0044e760
mov eax, dword [esi + 4]
xor ecx, ecx
cmp eax, ecx
jg 0x44096f
mov dword [esi + 4], ecx
jmp 0x440994
mov dword [esi + eax*8 + 0xfc8], ecx
mov dword [esi + eax*8 + 0xfcc], ecx
add dword [esi + 4], edi
je 0x440994
add esi, 8
mov dword [esp + 0x20], esi
mov ebx, dword [esp + 0x20]
rdtsc
mov dword [ebx], eax
mov dword [ebx + 4], edx
call fcn.00444b70
test al, al
je 0x4409b2
call ebp
mov ebx, eax
call fcn.0044e230
mov ecx, eax
mov eax, 0x520e1c
call fcn.0044e670
mov ebx, dword [esp + 0x34]
mov edi, dword [esp + 0x1c]
call fcn.00442a60
test al, al
jne 0x4409c7
mov byte [esp + 0x1b], al
call fcn.00444b70
test al, al
je 0x440a1b
call ebp
mov ebx, eax
call fcn.0044e230
mov esi, eax
cmp byte [esi], 0
je 0x440a1b
mov ecx, esi
call fcn.0044e760
mov eax, dword [esi + 4]
xor ecx, ecx
cmp eax, ecx
jg 0x4409f5
mov dword [esi + 4], ecx
jmp 0x440a1b
mov dword [esi + eax*8 + 0xfc8], ecx
mov dword [esi + eax*8 + 0xfcc], ecx
add dword [esi + 4], 0xffffffff
je 0x440a1b
add esi, 8
mov dword [esp + 0x20], esi
mov ebx, dword [esp + 0x20]
rdtsc
mov dword [ebx], eax
mov dword [ebx + 4], edx
call fcn.00444b70
test al, al
je 0x440a39
call ebp
mov ebx, eax
call fcn.0044e230
mov ecx, eax
mov eax, 0x520e34
call fcn.0044e670
mov edi, dword [esp + 0x34]
mov ecx, dword [esp + 0x1c]
mov edx, edi
call fcn.00442570
test al, al
jne 0x440a50
mov byte [esp + 0x1b], al
call fcn.00444b70
test al, al
je 0x440aa4
call ebp
mov ebx, eax
call fcn.0044e230
mov esi, eax
cmp byte [esi], 0
je 0x440aa4
mov ecx, esi
call fcn.0044e760
mov eax, dword [esi + 4]
xor ecx, ecx
cmp eax, ecx
jg 0x440a7e
mov dword [esi + 4], ecx
jmp 0x440aa4
mov dword [esi + eax*8 + 0xfc8], ecx
mov dword [esi + eax*8 + 0xfcc], ecx
add dword [esi + 4], 0xffffffff
je 0x440aa4
add esi, 8
mov dword [esp + 0x34], esi
mov ebx, dword [esp + 0x34]
rdtsc
mov dword [ebx], eax
mov dword [ebx + 4], edx
call fcn.00444b70
test al, al
je 0x440ac2
call ebp
mov ebx, eax
call fcn.0044e230
mov ecx, eax
mov eax, 0x520e4c
call fcn.0044e670
mov esi, dword [esp + 0x1c]
push 0x521030
mov byte [esi + 0x9a4], 0
call dword [0x4d60e8]
test eax, eax
je 0x440ae3
mov byte [esi + 0x9a4], 1
call fcn.00444b70
test al, al
je 0x440b37
call ebp
mov ebx, eax
call fcn.0044e230
mov esi, eax
cmp byte [esi], 0
je 0x440b37
mov ecx, esi
call fcn.0044e760
mov eax, dword [esi + 4]
xor ecx, ecx
cmp eax, ecx
jg 0x440b11
mov dword [esi + 4], ecx
jmp 0x440b37
mov dword [esi + eax*8 + 0xfc8], ecx
mov dword [esi + eax*8 + 0xfcc], ecx
add dword [esi + 4], 0xffffffff
je 0x440b37
add esi, 8
mov dword [esp + 0x34], esi
mov ebx, dword [esp + 0x34]
rdtsc
mov dword [ebx], eax
mov dword [ebx + 4], edx
call fcn.00444b70
test al, al
je 0x440b55
call ebp
mov ebx, eax
call fcn.0044e230
mov ecx, eax
mov eax, 0x520e70
call fcn.0044e670
mov esi, dword [esp + 0x1c]
cmp byte [esi + 0x962], 0
jne 0x440b84
mov eax, dword [esi]
mov edx, dword [eax + 4]
push 0x52104c
mov ecx, esi
call edx
push eax
call fcn.004ab635
add esp, 8
test eax, eax
jne 0x440b84
mov byte [esi + 0x9a5], 1
call fcn.00444b70
test al, al
je 0x440bd8
call ebp
mov ebx, eax
call fcn.0044e230
mov esi, eax
cmp byte [esi], 0
je 0x440bd8
mov ecx, esi
call fcn.0044e760
mov eax, dword [esi + 4]
xor ecx, ecx
cmp eax, ecx
jg 0x440bb2
mov dword [esi + 4], ecx
jmp 0x440bd8
mov dword [esi + eax*8 + 0xfc8], ecx
mov dword [esi + eax*8 + 0xfcc], ecx
add dword [esi + 4], 0xffffffff
je 0x440bd8
add esi, 8
mov dword [esp + 0x34], esi
mov ebx, dword [esp + 0x34]
rdtsc
mov dword [ebx], eax
mov dword [ebx + 4], edx
cmp byte [esp + 0x1b], 0
jne 0x440bfe
mov ecx, edi
call fcn.004384d0
push 0x520e90
push case.0x44a944.0
mov edx, eax
call fcn.004397d0
add esp, 8
xor al, al
jmp 0x440c0a
mov ecx, dword [esp + 0x1c]
mov al, 1
mov byte [ecx + 0x960], al
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret 4