Function at 0x446510
Capabilities:
Check os version
Set file attributes

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x48d308
push eax
mov eax, 0xa2d4
mov dword fs:[0], esp
call fcn.0042b9c0
push ebx
push esi
push edi
push eax
xor eax, eax
pop eax
je 0x44653d
invalid
xor esi, esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x34], esp
mov ebx, 0x104d5000
mov eax, dword [ebp - 0x34]
cmp eax, esi
jne 0x446557
mov dword [0x104d5000], ebx
mov al, byte [ebp - 0x35]
push esi
lea ecx, [ebp - 0x30]
mov byte [ebp - 0x30], al
call fcn.004017b0
mov edi, 0x4b8e88
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b8e88
lea ecx, [ebp - 0x30]
call fcn.00412ff0
mov edi, 0x4b3da0
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp - 4], esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b3da0
lea ecx, [ebp - 0x30]
call fcn.0041d2b0
mov edi, 0x4b3da0
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b3da0
lea ecx, [ebp - 0x30]
call fcn.0041d2b0
mov edi, 0x4b3da0
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b3da0
lea ecx, [ebp - 0x30]
call fcn.0041d2b0
mov edi, 0x4a0190
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4a0190
lea ecx, [ebp - 0x30]
call fcn.0041d2b0
mov ecx, dword [0x492cd4]
push ecx
push esi
push 0x4cbcb0
lea ecx, [ebp - 0x30]
call fcn.00412f10
mov edi, 0x4a0190
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4a0190
lea ecx, [ebp - 0x30]
call fcn.0041d2b0
mov edi, 0x4b8e84
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b8e84
lea ecx, [ebp - 0x30]
call fcn.0041d2b0
mov edi, 0x4b8e80
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b8e80
lea ecx, [ebp - 0x30]
call fcn.0041d2b0
mov edi, 0x4b8e7c
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b8e7c
lea ecx, [ebp - 0x30]
call fcn.0041d2b0
mov al, byte [0x4cb9ad]
test al, al
je 0x4466a3
mov edi, str._netbar_
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str._netbar_
jmp 0x4466b8
mov edi, str._std_
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str._std_
lea ecx, [ebp - 0x30]
call fcn.0041d2b0
mov edx, dword [0x492cd4]
lea ecx, [ebp - 0x30]
push edx
push esi
push 0x4cbd90
call fcn.00412f10
mov al, byte [0x4cb878]
push esi
lea ecx, [ebp - 0x20]
mov byte [ebp - 0x20], al
call fcn.004017b0
mov ecx, dword [0x492cd4]
push ecx
push esi
push 0x4cb878
lea ecx, [ebp - 0x20]
call fcn.004094e0
mov edi, 0x4b3b88
or ecx, 0xffffffff
xor eax, eax
mov byte [ebp - 4], 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b3b88
lea ecx, [ebp - 0x20]
call fcn.0041d2b0
mov edx, dword [0x492cd4]
lea ecx, [ebp - 0x20]
push edx
push esi
push 0x4cbcb0
call fcn.00412f10
mov edi, 0x4b3b88
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b3b88
lea ecx, [ebp - 0x20]
call fcn.0041d2b0
mov eax, dword [0x492cd4]
lea ecx, [ebp - 0x20]
push eax
push esi
push 0x4cbd90
call fcn.00412f10
push eax
xor eax, eax
pop eax
je 0x44676a
invalid
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x34], esp
mov eax, dword [ebp - 0x34]
cmp eax, esi
jne 0x44677d
mov dword [0x104d5000], ebx
lea ecx, [ebp - 0xec]
call fcn.00447360
mov ecx, dword [0x492cd4]
lea edx, [ebp - 0x30]
push ecx
push esi
push edx
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 2
call fcn.004094e0
mov eax, dword [0x492cd4]
lea ecx, [ebp - 0x20]
push eax
push esi
push ecx
lea ecx, [ebp - 0xdc]
call fcn.004094e0
mov edx, dword [0x492cd4]
lea ecx, [ebp - 0xbc]
push edx
push esi
push 0x4cbc60
call fcn.004094e0
mov eax, dword [0x492cd4]
lea ecx, [ebp - 0xac]
push eax
push esi
push 0x4cbd20
call fcn.004094e0
push 0x4cbcb0
lea ecx, [ebp - 0x48]
push 0x4b8e58
push ecx
call fcn.0040a260
add esp, 0xc
mov edx, dword [ebp - 0xc4]
push eax
push edx
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 3
call fcn.0044a750
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.004017b0
mov eax, dword [ebp - 0x1c]
cmp eax, esi
jne 0x44682f
mov eax, 0x48e810
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 1
push esi
lea ecx, [ebp - 0x134]
call fcn.004520d0
lea eax, [ebp - 0xec]
lea ecx, [ebp - 0x134]
push eax
mov byte [ebp - 4], 7
call fcn.00452370
test al, al
jne 0x446886
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 2
call fcn.004522b0
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 1
call fcn.004473c0
jmp 0x446949
mov edi, dword [sym.imp.WINMM.dll_timeGetTime]
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 0x35], 0
lea ecx, [ebp - 0x190]
push ecx
lea ecx, [ebp - 0x134]
call fcn.00452dd0
mov eax, dword [ebp - 0x190]
mov byte [ebp - 4], 8
test al, al
jne 0x446913
test ah, ah
jne 0x446902
mov al, byte [0x4cbdf0]
test al, al
jne 0x446908
push eax
xor eax, eax
pop eax
je 0x4468cb
invalid
call edi
mov esi, eax
xor eax, eax
mov edx, 0x64
sub edx, eax
push edx
call ebx
call edi
cmp eax, esi
jb 0x4468e5
sub eax, esi
jmp 0x4468e8
sub eax, esi
dec eax
cmp eax, 0x64
jb 0x4468d1
push 1
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 7
call fcn.004017b0
xor esi, esi
jmp 0x446896
mov byte [ebp - 0x35], 1
jmp 0x446913
lea ecx, [ebp - 0x134]
call fcn.00452d20
push 1
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 7
call fcn.004017b0
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 2
call fcn.004522b0
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 1
call fcn.004473c0
mov al, byte [ebp - 0x35]
test al, al
jne 0x446979
push 1
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0
call fcn.004017b0
push 1
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004017b0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x35]
lea ecx, [ebp - 0x98]
push eax
call fcn.004122c0
lea ecx, [ebp - 0xd]
mov byte [ebp - 4], 9
push ecx
lea ecx, [ebp - 0x88]
call fcn.004122c0
lea edx, [ebp - 0x157]
lea ecx, [ebp - 0x78]
push edx
mov byte [ebp - 4], 0xa
call fcn.004122c0
lea eax, [ebp - 0x156]
lea ecx, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0xb
call fcn.004122c0
mov byte [ebp - 4], 0xc
push eax
xor eax, eax
pop eax
je 0x4469cd
invalid
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x34], esp
mov eax, dword [ebp - 0x34]
cmp eax, esi
jne 0x4469e4
mov dword [0x104d5000], 0x104d5000
lea ecx, [ebp - 0x155]
push ecx
lea ecx, [ebp - 0x48]
call fcn.004122c0
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x20]
push edx
push eax
mov byte [ebp - 4], 0xd
call fcn.0044be40
add esp, 8
test al, al
je 0x446d25
lea ecx, [ebp - 0x158]
lea edx, [ebp - 0x99]
push ecx
push edx
lea ecx, [ebp - 0x58]
call fcn.004128a0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xe
xor ebx, ebx
call fcn.00412880
test eax, eax
jbe 0x446b69
xor esi, esi
mov eax, dword [ebp - 0x44]
mov eax, dword [eax + esi + 4]
test eax, eax
jne 0x446a4d
mov eax, 0x48e810
mov ecx, dword [0x4cbc84]
test ecx, ecx
jne 0x446a5c
mov ecx, 0x48e810
push eax
push ecx
call fcn.0042c2e0
add esp, 8
test eax, eax
jne 0x446a77
mov edi, dword [ebp - 0x44]
push 0x4cbc80
jmp 0x446b1a
mov eax, dword [ebp - 0x44]
mov eax, dword [eax + esi + 4]
test eax, eax
jne 0x446a87
mov eax, 0x48e810
mov ecx, dword [0x4cbdb4]
test ecx, ecx
jne 0x446a96
mov ecx, 0x48e810
push eax
push ecx
call fcn.0042c2e0
add esp, 8
test eax, eax
jne 0x446aae
mov edi, dword [ebp - 0x44]
push 0x4cbdb0
jmp 0x446b1a
mov eax, dword [ebp - 0x44]
mov eax, dword [eax + esi + 4]
test eax, eax
jne 0x446abe
mov eax, 0x48e810
mov ecx, dword [0x4cbc74]
test ecx, ecx
jne 0x446acd
mov ecx, 0x48e810
push eax
push ecx
call fcn.0042c2e0
add esp, 8
test eax, eax
jne 0x446ae5
mov edi, dword [ebp - 0x44]
push 0x4cbc70
jmp 0x446b1a
mov eax, dword [ebp - 0x44]
mov eax, dword [eax + esi + 4]
test eax, eax
jne 0x446af5
mov eax, 0x48e810
mov ecx, dword [0x4cbda4]
test ecx, ecx
jne 0x446b04
mov ecx, 0x48e810
push eax
push ecx
call fcn.0042c2e0
add esp, 8
test eax, eax
jne 0x446b32
mov edi, dword [ebp - 0x44]
push 0x4cbda0
lea ecx, [ebp - 0x58]
call fcn.00412950
mov ecx, dword [0x492cd4]
lea edx, [edi + esi + 0x10]
push ecx
push 0
push edx
jmp 0x446b4e
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x58]
lea edi, [eax + esi]
push edi
call fcn.00412950
mov ecx, dword [0x492cd4]
add edi, 0x10
push ecx
push 0
push edi
mov ecx, eax
call fcn.004094e0
lea ecx, [ebp - 0x48]
inc ebx
add esi, 0x20
call fcn.00412880
cmp ebx, eax
jb 0x446a3d
mov esi, dword [ebp - 0x54]
lea edx, [ebp - 0x34]
push 0x4cbc80
push edx
lea ecx, [ebp - 0x58]
call fcn.00412a90
cmp dword [eax], esi
sete al
test al, al
jne 0x446d19
mov esi, dword [ebp - 0x54]
lea eax, [ebp - 0x248]
push 0x4cbdb0
push eax
lea ecx, [ebp - 0x58]
call fcn.00412a90
cmp dword [eax], esi
sete al
test al, al
jne 0x446d19
mov esi, dword [ebp - 0x54]
lea ecx, [ebp - 0x24c]
push 0x4cbc70
push ecx
lea ecx, [ebp - 0x58]
call fcn.00412a90
cmp dword [eax], esi
sete al
test al, al
jne 0x446d19
mov esi, dword [ebp - 0x54]
lea edx, [ebp - 0x244]
push 0x4cbda0
push edx
lea ecx, [ebp - 0x58]
call fcn.00412a90
cmp dword [eax], esi
sete al
test al, al
jne 0x446d19
push 0x4cbc80
lea ecx, [ebp - 0x58]
call fcn.00412950
mov ecx, dword [0x492cd4]
push ecx
push 0
push eax
lea ecx, [ebp - 0x98]
call fcn.004094e0
push 0x4cbdb0
lea ecx, [ebp - 0x58]
call fcn.00412950
mov edx, dword [0x492cd4]
lea ecx, [ebp - 0x88]
push edx
push 0
push eax
call fcn.004094e0
push 0x4cbc70
lea ecx, [ebp - 0x58]
call fcn.00412950
mov ecx, dword [0x492cd4]
push ecx
push 0
push eax
lea ecx, [ebp - 0x78]
call fcn.004094e0
push 0x4cbda0
lea ecx, [ebp - 0x58]
call fcn.00412950
mov edx, dword [0x492cd4]
lea ecx, [ebp - 0x68]
push edx
push 0
push eax
call fcn.004094e0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xd
call fcn.00412b40
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xc
call fcn.00412840
mov edi, 0x4b8e88
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b8e88
lea ecx, [ebp - 0x30]
call fcn.00412ff0
mov eax, dword [0x492cd4]
lea ecx, [ebp - 0x98]
push eax
push 0
push ecx
lea ecx, [ebp - 0x30]
call fcn.00412f10
mov edi, 0x4b8e54
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b8e54
lea ecx, [ebp - 0x30]
call fcn.0041d2b0
mov edx, dword [0x492cd4]
lea eax, [ebp - 0x88]
push edx
push 0
push eax
lea ecx, [ebp - 0x30]
call fcn.00412f10
mov al, byte [0x4cb9ad]
test al, al
je 0x446d74
mov edi, str._netbar_
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str._netbar_
jmp 0x446d89
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xd
call fcn.00412b40
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xc
call fcn.00412840
push 1
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x11
call fcn.004017b0
push 1
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x10
call fcn.004017b0
push 1
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xf
call fcn.004017b0
push 1
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 1
call fcn.004017b0
jmp 0x446949
mov edi, str._std_
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str._std_
lea ecx, [ebp - 0x30]
call fcn.0041d2b0
mov ecx, dword [0x492cd4]
push ecx
push 0
push 0x4cbd70
lea ecx, [ebp - 0x30]
call fcn.00412f10
mov edx, dword [0x492cd4]
lea ecx, [ebp - 0x20]
push edx
push 0
push 0x4cb878
call fcn.004094e0
mov edi, 0x4b3b88
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b3b88
lea ecx, [ebp - 0x20]
call fcn.0041d2b0
mov eax, dword [0x492cd4]
lea ecx, [ebp - 0x20]
push eax
push 0
push 0x4cbcb0
call fcn.00412f10
mov edi, 0x4b3b88
or ecx, 0xffffffff
xor eax, eax
mov edx, dword [ebp - 0x18]
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov esi, ecx
mov ecx, dword [0x492cd4]
sub ecx, edx
cmp ecx, esi
ja 0x446e14
call fcn.0047ac24
test esi, esi
jbe 0x446e54
mov edx, dword [ebp - 0x18]
push 0
lea ecx, [ebp - 0x20]
lea ebx, [edx + esi]
push ebx
call fcn.00401850
test al, al
je 0x446e54
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x18]
push ebx
lea edi, [ecx + eax]
mov ecx, esi
mov edx, ecx
mov esi, 0x4b3b88
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x20]
call fcn.004099d0
mov eax, dword [0x492cd4]
xor esi, esi
push eax
push esi
push 0x4cbd70
lea ecx, [ebp - 0x20]
call fcn.00412f10
push eax
xor eax, eax
pop eax
je 0x446e72
invalid
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x34], esp
mov eax, dword [ebp - 0x34]
cmp eax, esi
jne 0x446e89
mov dword [0x104d5000], 0x104d5000
lea ecx, [ebp - 0xec]
call fcn.00447360
mov ecx, dword [0x492cd4]
lea edx, [ebp - 0x30]
push ecx
push esi
push edx
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x12
call fcn.004094e0
mov eax, dword [0x492cd4]
lea ecx, [ebp - 0x20]
push eax
push esi
push ecx
lea ecx, [ebp - 0xdc]
call fcn.004094e0
mov edx, dword [0x492cd4]
lea ecx, [ebp - 0xbc]
push edx
push esi
push 0x4cbc60
call fcn.004094e0
mov eax, dword [0x492cd4]
lea ecx, [ebp - 0xac]
push eax
push esi
push 0x4cbd20
call fcn.004094e0
push 0x4cbcb0
lea ecx, [ebp - 0x144]
push 0x4b8e58
push ecx
call fcn.0040a260
add esp, 0xc
mov edx, dword [ebp - 0xc4]
push eax
push edx
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x13
call fcn.0044a750
push 1
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x12
call fcn.004017b0
push eax
xor eax, eax
pop eax
je 0x446f3d
invalid
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x34], esp
mov eax, dword [ebp - 0x34]
cmp eax, esi
jne 0x446f54
mov dword [0x104d5000], 0x104d5000
lea eax, [ebp - 0x240]
push eax
call fcn.00448fa0
lea ecx, [ebp - 0x34]
lea edx, [ebp - 0xa2e0]
push ecx
push edx
mov dword [ebp - 0x34], 0xa000
call sub.iphlpapi.dll_GetAdaptersInfo
test eax, eax
jne 0x446fdf
mov ecx, dword [ebp - 0xa150]
cmp ecx, esi
jle 0x446f9d
cmp eax, 6
jae 0x446f9d
mov dl, byte [ebp + eax - 0xa14c]
mov byte [ebp + eax - 0x230], dl
inc eax
cmp eax, ecx
jl 0x446f85
lea eax, [ebp - 0xa130]
push 0x10
lea ecx, [ebp - 0x229]
push eax
push ecx
call fcn.00432900
lea edx, [ebp - 0xa120]
push 0x10
lea eax, [ebp - 0x218]
push edx
push eax
call fcn.00432900
lea ecx, [ebp - 0xa108]
push 0x10
lea edx, [ebp - 0x207]
push ecx
push edx
call fcn.00432900
add esp, 0x24
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0x2e0], 0x94
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x2d8]
mov dword [ebp - 0x1ee], eax
mov eax, dword [0x4cb940]
mov dword [ebp - 0x1f6], ecx
mov ecx, dword [ebp - 0x2d0]
cmp eax, 0x20
mov dword [ebp - 0x1f2], edx
mov dword [ebp - 0x1ea], ecx
jbe 0x44704b
mov ecx, 0x4cb938
call fcn.004096e0
mov eax, dword [0x4cb93c]
push 0x20
lea edx, [ebp - 0x1e6]
push eax
push edx
jmp 0x44707c
push 0x4c05e4
mov ecx, 0x4cb938
call fcn.004149b0
test eax, eax
je 0x447081
mov esi, dword [0x4cb940]
mov ecx, 0x4cb938
call fcn.004096e0
mov eax, dword [0x4cb93c]
push esi
push eax
lea eax, [ebp - 0x1e6]
push eax
call fcn.004086f0
mov al, byte [0x4cb9ac]
test al, al
je 0x4470a3
mov ecx, 8
mov eax, 0x31313131
lea edi, [ebp - 0x1e6]
rep stosd dword es:[edi], eax
mov byte [ebp - 0x1c7], 0
mov ecx, dword [0x4cb9bc]
mov edx, dword [0x4cb9c0]
mov eax, dword [0x4cb9c4]
mov dword [ebp - 0x1a6], ecx
mov ecx, dword [0x4cb9c8]
mov dword [ebp - 0x1a2], edx
mov dword [ebp - 0x19a], ecx
mov cl, byte [0x4cb9ad]
test cl, cl
setne dl
mov dword [ebp - 0x19e], eax
mov al, byte [ebp - 0x99]
xor esi, esi
lea ecx, [ebp - 0x48]
push esi
mov dword [ebp - 0x196], 0x3000101
mov byte [ebp - 0x192], dl
mov byte [ebp - 0x48], al
call fcn.004017b0
mov edi, 0x4c05e4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4c05e4
lea ecx, [ebp - 0x48]
call fcn.00412ff0
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x240]
push ecx
push edx
mov byte [ebp - 4], 0x14
call fcn.00448ff0
push 0x4b8e50
lea eax, [ebp - 0x154]
push 0x4cbcb0
push eax
call fcn.00414500
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x144]
push ecx
mov bl, 0x15
push eax
push edx
mov byte [ebp - 4], bl
call fcn.00414630
add esp, 0x18
push eax
mov eax, dword [ebp - 0xc4]
push eax
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x16
call fcn.0044a750
push 1
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], bl
call fcn.004017b0
push 1
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0x14
call fcn.004017b0
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x12
call fcn.004017b0
push 1
push esi
lea ecx, [ebp - 0x134]
call fcn.004520d0
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x17
push ecx
lea ecx, [ebp - 0x134]
call fcn.00452370
test al, al
je 0x447267
mov edi, dword [sym.imp.WINMM.dll_timeGetTime]
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
lea edx, [ebp - 0x190]
lea ecx, [ebp - 0x134]
push edx
call fcn.00452dd0
mov eax, dword [ebp - 0x190]
mov byte [ebp - 4], 0x18
test al, al
jne 0x447256
test ah, ah
jne 0x447256
mov al, byte [0x4cbdf0]
test al, al
jne 0x44724b
push eax
xor eax, eax
pop eax
je 0x447214
invalid
call edi
mov esi, eax
xor eax, eax
mov ecx, 0x64
sub ecx, eax
push ecx
call ebx
call edi
cmp eax, esi
jb 0x44722e
sub eax, esi
jmp 0x447231
sub eax, esi
dec eax
cmp eax, 0x64
jb 0x44721a
push 1
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x17
call fcn.004017b0
xor esi, esi
jmp 0x4471df
lea ecx, [ebp - 0x134]
call fcn.00452d20
push 1
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x17
call fcn.004017b0
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 0x12
call fcn.004522b0
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0xc
call fcn.004473c0
push 1
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x1b
call fcn.004017b0
push 1
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x1a
call fcn.004017b0
push 1
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x19
call fcn.004017b0
mov ecx, dword [ebp - 0x94]
cmp ecx, esi
je 0x4472d8
mov al, byte [ecx - 1]
test al, al
je 0x4472ce
cmp al, 0xff
je 0x4472ce
dec al
mov byte [ecx - 1], al
jmp 0x4472d8
dec ecx
push ecx
call fcn.00486808
add esp, 4
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x94], esi
cmp ecx, esi
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x8c], esi
je 0x44730d
mov al, byte [ecx - 1]
test al, al
je 0x447303
cmp al, 0xff
je 0x447303
dec al
mov byte [ecx - 1], al
jmp 0x44730d
dec ecx
push ecx
call fcn.00486808
add esp, 4
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], esi
cmp ecx, esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
je 0x447348
mov al, byte [ecx - 1]
test al, al
je 0x44733e
cmp al, 0xff
je 0x44733e
dec al
mov byte [ecx - 1], al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
dec ecx
push ecx
call fcn.00486808
add esp, 4
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret