Function at 0x439b90
Capabilities:
Check for time delay via queryperformancecounter
Get file size
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f60f0
mov eax, dword fs:[0]
push eax
sub esp, 0xe0
mov eax, dword [0x52de04]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
xorps xmm0, xmm0
mov esi, dword [ebp + 8]
xor ebx, ebx
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0xe0], eax
xor eax, eax
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0xd4]
push eax
mov dword [ebp - 0xc0], esi
mov dword [ebp - 0xc4], edi
movlpd qword [ebp - 0x94], xmm0
movlpd qword [ebp - 0x88], xmm0
call fcn.00441f70
add esp, 4
mov byte [ebp - 0x7c], bl
lea eax, [ebp - 0x94]
push eax
push dword [esi]
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x439ea1
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x6c], eax
nop
mov ecx, dword [ebp - 0x94]
mov eax, ecx
mov edx, dword [ebp - 0x90]
or eax, edx
jne 0x439eb9
lea eax, [ebp - 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov eax, dword [ebp - 0xc8]
xor ecx, ecx
or ecx, dword [ebp - 0xcc]
mov edx, 0xcccccccd
add ecx, 0x2ac18000
adc eax, 0xfe624e21
mov dword [ebp - 0x78], eax
lea edi, [edx - 1]
mov eax, ecx
mul edx
mov eax, ecx
mov ecx, 0xcccccccd
mov esi, edx
mul edi
mov edi, eax
mov dword [ebp - 0x98], edx
mov eax, dword [ebp - 0x78]
mul ecx
mov ecx, eax
mov dword [ebp - 0xd8], edx
mov eax, dword [ebp - 0x78]
mov edx, 0xcccccccc
mul edx
add ecx, esi
mov dword [ebp - 0x9c], edx
mov edx, dword [ebp - 0xd8]
adc edx, 0
mov dword [ebp - 0x78], eax
mov esi, eax
add edi, ecx
mov ecx, dword [ebp - 0x98]
adc ecx, 0
xor eax, eax
add edx, ecx
mov ecx, dword [ebp - 0x9c]
adc eax, eax
add esi, edx
adc ecx, eax
shrd esi, ecx, 3
shr ecx, 3
sub esi, dword [ebp - 0xd4]
sbb ecx, dword [ebp - 0xd0]
mov dword [ebp - 0x9c], ecx
jne 0x439cfd
cmp esi, 0x11e1a300
ja 0x439cfd
xor al, al
jmp 0x439cff
mov al, 1
test al, al
jne 0x43a2ea
test ebx, ebx
jne 0x439d30
mov eax, dword [0x68abdc]
test eax, eax
jne 0x439d21
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x4c]
mov ecx, 1
cmp ecx, eax
sbb ebx, ebx
and ebx, 0xffffffe0
add ebx, 0x20
cmp ebx, 8
jb 0x439e83
cmp ebx, 0x20
jae 0x439d45
pause
jmp 0x439e83
jne 0x439e18
push 7
call fcn.00440440
add esp, 4
lea ecx, [ebp - 0x8c]
push ecx
lea ecx, [ebp - 0xe8]
push ecx
lea ecx, [ebp - 0xec]
push ecx
call eax
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
jne 0x439d91
mov ecx, dword [ebp - 0x8c]
mov eax, 0xd1b71759
lea ecx, [ecx - 1]
mul ecx
mov eax, edx
shr eax, 0xd
jmp 0x439dcc
mov eax, dword [ebp - 0x8c]
mov ecx, 0x5f5e100
push dword [ebp - 0x7c]
mul ecx
push dword [ebp - 0x80]
mov edi, eax
mov esi, edx
push 0x38d7e
sub edi, 1
push 0xa4c67fff
sbb esi, 0
call fcn.004b4100
add eax, 1
adc edx, 0
push edx
push eax
push esi
push edi
call fcn.004b4100
lea esi, [eax + 1]
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x74], esi
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
jne 0x439e04
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
xor eax, eax
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0xa8], ecx
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xa4], eax
jmp 0x439e83
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x6c], eax
jmp 0x439e83
mov esi, dword [ebp - 0x74]
test esi, esi
jne 0x439e26
test bl, 1
je 0x439e7b
jmp 0x439e69
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
jne 0x439e4d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ecx, ecx
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ecx
jmp 0x439e59
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x88]
sub eax, dword [ebp - 0x6c]
sbb ecx, dword [ebp - 0x70]
test ecx, ecx
ja 0x439e76
jb 0x439e69
cmp eax, esi
jae 0x439e76
call dword [sym.imp.KERNEL32.dll_SwitchToThread]
test eax, eax
jne 0x439e83
push eax
jmp 0x439e7d
xor eax, eax
mov dword [ebp - 0x74], eax
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [ebp - 0xc0]
lea eax, [ebp - 0x94]
push eax
inc ebx
push dword [esi]
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x439c30
call sub.KERNEL32.dll_GetLastError
push eax
lea ecx, [ebp - 0x80]
call fcn.0043c440
push 0
lea eax, [ebp - 0x80]
jmp 0x43a2f6
cmp ecx, 1
jne 0x439ec6
test edx, edx
je 0x43a2ea
cmp byte [ebp + 0x1c], 0
je 0x439ed3
mov eax, connect
jmp 0x439edc
movzx eax, byte [ebp + 0x20]
sub eax, 0x40000000
push 0xffffffffffffffff
push dword [ebp - 0xc4]
lea ecx, [ebp - 0xbc]
push 0
push 0
push 0
push eax
push esi
call fcn.00438a10
mov ebx, dword [ebp - 0xbc]
mov dword [ebp - 4], 0
mov dword [ebp - 0xd8], ebx
mov eax, dword [ebx]
nop
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp eax, 2
je 0x43a24b
lea eax, [ebp - 0xcc]
push eax
call fcn.00441f70
xor eax, eax
xorps xmm0, xmm0
mov dword [ebp - 0x6c], eax
add esp, 4
mov dword [ebp - 0x78], eax
mov eax, dword [ebx]
movlpd qword [ebp - 0x80], xmm0
nop
cmp eax, 2
je 0x43a1b8
mov ecx, dword [ebp - 0x7c]
mov dword [ebp - 0x70], ecx
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x74], ecx
cmp eax, 3
je 0x43a30d
lea eax, [ebp - 0xd4]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov ebx, dword [ebp - 0xd0]
xor ecx, ecx
or ecx, dword [ebp - 0xd4]
mov edx, 0xcccccccd
add ecx, 0x2ac18000
mov eax, ecx
adc ebx, 0xfe624e21
lea edi, [edx - 1]
mov dword [ebp - 0x9c], ebx
mul edx
mov eax, ecx
mov ecx, 0xcccccccd
mov esi, edx
mul edi
mov edi, eax
mov dword [ebp - 0x98], edx
mov eax, ebx
mul ecx
mov ebx, edx
mov ecx, eax
mov eax, dword [ebp - 0x9c]
mov edx, 0xcccccccc
mul edx
add ecx, esi
mov dword [ebp - 0x9c], eax
adc ebx, 0
add edi, ecx
mov ecx, dword [ebp - 0x98]
adc ecx, 0
xor eax, eax
add ebx, ecx
mov ecx, dword [ebp - 0x9c]
adc eax, eax
add ecx, ebx
adc edx, eax
shrd ecx, edx, 3
shr edx, 3
sub ecx, dword [ebp - 0xcc]
sbb edx, dword [ebp - 0xc8]
jne 0x43a004
cmp ecx, 0x11e1a300
ja 0x43a004
xor al, al
jmp 0x43a006
mov al, 1
test al, al
jne 0x43a30d
mov ebx, dword [ebp - 0x78]
test ebx, ebx
jne 0x43a03a
mov eax, dword [0x68abdc]
test eax, eax
jne 0x43a02b
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x20]
mov ecx, 1
cmp ecx, eax
sbb ebx, ebx
and ebx, 0xffffffe0
add ebx, 0x20
cmp ebx, 8
jb 0x43a196
cmp ebx, 0x20
jae 0x43a04f
pause
jmp 0x43a196
jne 0x43a12b
push 7
call fcn.00440440
add esp, 4
lea ecx, [ebp - 0x8c]
push ecx
lea ecx, [ebp - 0xec]
push ecx
lea ecx, [ebp - 0xe8]
push ecx
call eax
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
jne 0x43a09e
mov ecx, dword [ebp - 0x8c]
mov eax, 0xd1b71759
lea ecx, [ecx - 1]
mul ecx
mov eax, edx
shr eax, 0xd
jmp 0x43a0df
mov eax, dword [ebp - 0x8c]
mov ecx, 0x5f5e100
push dword [ebp - 0xa4]
mul ecx
push dword [ebp - 0xa8]
mov edi, eax
mov esi, edx
push 0x38d7e
sub edi, 1
push 0xa4c67fff
sbb esi, 0
call fcn.004b4100
add eax, 1
adc edx, 0
push edx
push eax
push esi
push edi
call fcn.004b4100
lea esi, [eax + 1]
lea eax, [ebp - 0x94]
mov dword [ebp - 0x6c], esi
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
jne 0x43a117
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
xor eax, eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x90], eax
jmp 0x43a196
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x74], eax
jmp 0x43a196
mov esi, dword [ebp - 0x6c]
test esi, esi
jne 0x43a139
test bl, 1
je 0x43a18e
jmp 0x43a17c
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
jne 0x43a160
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ecx, ecx
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ecx
jmp 0x43a16c
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x88]
sub eax, dword [ebp - 0x74]
sbb ecx, dword [ebp - 0x70]
test ecx, ecx
ja 0x43a189
jb 0x43a17c
cmp eax, esi
jae 0x43a189
call dword [sym.imp.KERNEL32.dll_SwitchToThread]
test eax, eax
jne 0x43a196
push eax
jmp 0x43a190
xor eax, eax
mov dword [ebp - 0x6c], eax
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0xd8]
inc ebx
mov dword [ebp - 0x78], ebx
mov eax, dword [eax]
nop
cmp eax, 2
jne 0x439f53
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp - 0xc0]
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], 0
push eax
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], connect
mov dword [ebp - 0x14], 0xffffffff
call fcn.00441dd0
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x43a1fb
sub eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov eax, dword [ebp - 0x14]
cmp eax, 0xffffffff
je 0x43a206
push eax
call edi
cmp byte [ebp + 0x1c], 0
je 0x43a213
mov eax, connect
jmp 0x43a21c
movzx eax, byte [ebp + 0x20]
sub eax, 0x40000000
push 0xffffffffffffffff
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x50]
push 0
push 0
push 0
push eax
push esi
call fcn.00438a10
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x50]
call fcn.00441dd0
lea ecx, [ebp - 0x50]
call fcn.0043d500
mov ebx, dword [ebp - 0xe0]
mov eax, dword [ebp - 0xbc]
mov edx, dword [ebx]
mov ecx, dword [ebx + 4]
mov esi, dword [ebx + 8]
mov dword [ebx], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebx + 4], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xb8], ecx
mov ecx, dword [ebx + 0xc]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xb0], ecx
mov ecx, dword [ebx + 0x10]
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xb4], esi
mov dword [ebx + 0x10], eax
mov dword [ebp - 0xac], ecx
test edx, edx
je 0x43a2c6
sub edx, esi
push edx
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov ecx, dword [ebp - 0xac]
mov dword [ebp - 0xbc], 0
cmp ecx, 0xffffffff
je 0x43a2ce
push ecx
call edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b3f28
mov esp, ebp
pop ebp
ret
push 0
push 0x13
lea ecx, [ebp - 0x80]
call fcn.0043c480
push eax
lea ecx, [ebp - 0x68]
call fcn.0043c620
push 0x521ce8
lea eax, [ebp - 0x68]
push eax
call fcn.004b8c76
push 0
push 0x13
lea ecx, [ebp - 0xe4]
call fcn.0043c480
push eax
lea ecx, [ebp - 0x3c]
call fcn.0043c620
push 0x521ce8
lea eax, [ebp - 0x3c]
push eax
call fcn.004b8c76
int3