Function at 0x44193d
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x133f
sub esp, 0x70
push fcn.0044193d
xor esi, esi
push esi
push esi
push esi
push esi
push esi
push esi
mov eax, dword [str.MotherboardUUID]
test eax, eax
je 0x441996
mov edx, 0x185e9a0
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
mov edx, 0x1866ef0
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417469
jmp 0x4419c3
push 0
mov edx, 0x1866ef0
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call dword [sym.imp.KERNEL32.DLL_DeleteFileA]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
fldcw word [ebp - 0x10]
fild dword [0x186b404]
mov eax, dword [0x45dedc]
call fcn.0045a848
fcompp
fnstsw ax
sahf
jne 0x441b13
fild dword [0x186b41c]
mov eax, dword [0x45daac]
call fcn.0045a848
fcompp
fnstsw ax
sahf
je 0x441a83
fild dword [0x186b3a8]
mov eax, dword [0x45daac]
call fcn.0045a848
fcompp
fnstsw ax
sahf
je 0x441a83
fild dword [0x186b3ec]
mov eax, dword [0x45daac]
call fcn.0045a848
fcompp
fnstsw ax
sahf
je 0x441a83
fild dword [0x186b3a0]
mov eax, dword [0x45daac]
call fcn.0045a848
fcompp
fnstsw ax
sahf
je 0x441a83
fild dword [0x186b578]
mov eax, dword [0x45daac]
call fcn.0045a848
fcompp
fnstsw ax
sahf
je 0x441a83
fild dword [0x186b3b8]
mov eax, dword [0x45daac]
call fcn.0045a848
fcompp
fnstsw ax
sahf
jne 0x441b13
push dword [0x45daac]
call fcn.004339a6
test eax, eax
je 0x441ad7
mov edx, 0x1866f08
call fcn.0045b687
mov eax, dword [0x45daac]
call fcn.0045a848
call fcn.004592f4
call fcn.0045ab3a
mov edx, 0x1866f1c
call fcn.0045b687
call fcn.0045ab3a
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
jmp 0x441b13
mov edx, 0x1866f08
call fcn.0045b687
mov eax, dword [0x45daac]
call fcn.0045a848
call fcn.004592f4
call fcn.0045ab3a
mov edx, 0x1866f28
call fcn.0045b687
call fcn.0045ab3a
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
mov eax, dword [0x45da90]
test eax, eax
je 0x441b45
push 0x33
call fcn.0041cf9a
mov edx, 0x1866f34
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
jmp 0x441b5d
mov edx, 0x1866f48
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
mov eax, dword [0x45dacc]
test eax, eax
je 0x441b8f
push 0x36
call fcn.0041cf9a
mov edx, 0x1866f5c
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
jmp 0x441ba7
mov edx, 0x1866f78
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
mov eax, dword [0x45dad4]
test eax, eax
je 0x4423d6
push 0
mov edx, 0x1866f94
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
test eax, eax
je 0x44214e
mov edx, 0x1866fc0
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.0041a604
push 0
mov edx, 0x1866ff0
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
test eax, eax
je 0x441f45
push 0
push 0
push 5
mov edx, 0x1860cb0
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
mov edx, 0x1867014
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.0043d938
push 0
push 0
push 0
push 0
mov eax, 1
lea ebx, [esp + 0xc]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0x98]
push ebx
mov edx, 0x18618cc
call fcn.0045b687
lea ebx, [esp + 0x10]
push ebx
call fcn.0045a876
mov edx, 0x18618b4
call fcn.0045b687
lea ebx, [esp + 0x10]
push ebx
call fcn.0045a876
fild qword [0x186adc4]
call fcn.0045a86f
lea ebx, [esp + 0x10]
push ebx
mov dword [ebx], eax
call fcn.00431242
push eax
mov ebx, esp
mov eax, dword [ebx + 0xc]
call fcn.00456355
mov eax, dword [ebx + 8]
call fcn.00456355
pop eax
add esp, 0x10
mov eax, 4
mov edx, dword [ebp - 0x98]
call fcn.0045b670
mov edx, 0x185ea14
call fcn.0045b687
mov dword [ebp - 0x30], eax
call fcn.00459871
cmp eax, dword [ebp - 0x30]
jne 0x441d5b
mov edx, 0x1867028
call fcn.0045b687
mov edx, dword [ebp - 0x98]
call fcn.0045b670
call fcn.0045ab3a
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
push 0
push 1
push 5
mov edx, dword [ebp - 0x98]
call fcn.0045b670
push 0
mov ebx, esp
call fcn.0045a876
mov edx, 0x1867014
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.0043d938
jmp 0x441d73
mov edx, 0x1867034
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
push 0
push 0
push 1
mov edx, 0x1860cb0
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
mov edx, 0x1867014
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.0043d938
push 0
push 0
push 1
mov edx, 0x1860cb0
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
mov edx, 0x1867048
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.0043d938
push 0
push 1
push 1
mov edx, 0x1867070
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
mov edx, 0x1867048
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.0043d938
push 0
push 0
push 1
mov edx, 0x186707c
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
mov edx, 0x18666e4
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.0043d938
push 0
push 1
push 1
mov edx, 0x186708c
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
mov edx, 0x18666e4
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.0043d938
push 0
push 1
push 1
mov edx, 0x18670a0
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
mov edx, 0x18666e4
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.0043d938
push 0
push 0
push 1
mov edx, 0x1860cb0
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
mov edx, 0x18670c0
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.0043d938
push 0
push 1
push 1
mov edx, 0x186708c
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
mov edx, 0x18670c0
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.0043d938
mov edx, 0x185e9a0
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
mov edx, 0x1861b0c
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
call fcn.004174f2
mov edx, 0x18670d4
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
jmp 0x442149
push 0
mov edx, 0x1866ff0
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
test eax, eax
je 0x441fc0
mov edx, 0x185e9a0
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
mov edx, 0x1861b0c
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
call fcn.004174f2
mov edx, 0x18670d4
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
jmp 0x442149
push 0
mov edx, 0x18670e8
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
test eax, eax
je 0x44203b
mov edx, 0x185e9a0
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
mov edx, 0x1867108
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
call fcn.004174f2
mov edx, 0x1867128
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
jmp 0x442149
push 0
mov edx, 0x1865688
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
test eax, eax
je 0x4420b6
mov edx, 0x185e9a0
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
mov edx, 0x1865688
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
call fcn.004174f2
mov edx, 0x1867154
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
jmp 0x442149
push 0
mov edx, 0x1867188
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
test eax, eax
je 0x442131
mov edx, 0x185e9a0
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
mov edx, 0x1867188
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
call fcn.004174f2
mov edx, 0x18671bc
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
jmp 0x442149
mov edx, 0x18671cc
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
jmp 0x4423d1
push 0
mov edx, 0x18671e4
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
test eax, eax
je 0x4421c5
push 0
mov edx, 0x186720c
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call fcn.00418529
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
mov edx, 0x1867220
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
jmp 0x4423d1
push 0
mov edx, 0x1866ff0
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
test eax, eax
je 0x442240
mov edx, 0x185e9a0
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
mov edx, 0x1861b0c
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
call fcn.004174f2
mov edx, 0x18670d4
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
jmp 0x4423d1
push 0
mov edx, 0x1867230
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
test eax, eax
je 0x4422c3
mov edx, 0x185e9a0
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
mov edx, 0x1867250
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
call fcn.004174f2
test eax, eax
je 0x4422a6
mov edx, 0x1867270
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
jmp 0x4423d1
push 0
mov edx, 0x186729c
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
test eax, eax
je 0x44233e
mov edx, 0x185e9a0
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
mov edx, 0x186729c
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
call fcn.004174f2
mov edx, 0x18672c4
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
jmp 0x4423d1
push 0
mov edx, 0x1867188
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
test eax, eax
je 0x4423b9
mov edx, 0x185e9a0
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
mov edx, 0x1867188
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
call fcn.004174f2
mov edx, 0x18671bc
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
jmp 0x4423d1
mov edx, 0x18671cc
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
jmp 0x4423ee
mov edx, 0x18672f8
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
mov eax, dword [0x45dad8]
test eax, eax
je 0x442631
push 0
mov edx, 0x1867308
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call dword [sym.imp.KERNEL32.DLL_DeleteFileA]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
fldcw word [ebp - 0x10]
push 0
mov edx, 0x1867334
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call dword [sym.imp.KERNEL32.DLL_DeleteFileA]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
fldcw word [ebp - 0x10]
push 0
mov edx, 0x1861864
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
test eax, eax
je 0x442535
mov edx, 0x1867360
call fcn.0045b687
mov ebx, 0x45def0
mov ecx, 0x104
call fcn.0045b4a3
push 0
mov ebx, 0x45def0
call fcn.0045b45a
mov edx, 0x1867388
call fcn.0045b687
call fcn.0045ab3a
lea ebx, [esp]
call fcn.0045a938
call dword [sym.imp.KERNEL32.DLL_DeleteFileA]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
fldcw word [ebp - 0x10]
call fcn.004410b5
mov edx, 0x185e9a0
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
mov edx, 0x1861864
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
call fcn.004174f2
mov edx, 0x186739c
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
mov dword [0x45deb4], 1
jmp 0x44262c
push 0
mov edx, 0x18673ac
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
test eax, eax
je 0x442614
mov edx, 0x18673cc
call fcn.0045b687
mov ebx, 0x45def0
mov ecx, 0x104
call fcn.0045b4a3
push 0
mov ebx, 0x45def0
call fcn.0045b45a
mov edx, 0x1867388
call fcn.0045b687
call fcn.0045ab3a
lea ebx, [esp]
call fcn.0045a938
call dword [sym.imp.KERNEL32.DLL_DeleteFileA]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
fldcw word [ebp - 0x10]
call fcn.004410b5
mov edx, 0x185e9a0
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
mov edx, 0x18673ac
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
call fcn.004174f2
mov edx, 0x18673e0
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
mov dword [0x45deb4], 1
jmp 0x44262c
mov edx, 0x1867400
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
jmp 0x442649
mov edx, 0x1867414
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
mov eax, dword [0x45da8c]
test eax, eax
je 0x44268e
push 1
mov edx, 0x1867424
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.0041ceb6
mov edx, 0x1867438
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
jmp 0x4426a6
mov edx, 0x186744c
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
mov eax, dword [0x45dac8]
test eax, eax
je 0x4426e6
push 1
mov edx, 0x1867464
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.0041ceb6
mov edx, 0x1867478
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
mov eax, dword [0x45dab8]
test eax, eax
je 0x4427a1
mov edx, 0x1867490
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
push 0
mov edx, 0x18674a4
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call fcn.004124a4
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
push 0
push 1
mov edx, 0x18674a4
call fcn.0045b687
lea ebx, [esp + 4]
call fcn.0045a938
call fcn.00412768
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
mov edx, 0x185e9a0
call fcn.0045b687
mov eax, 0x800000ff
call fcn.00452ee2
mov ebx, str.AcpiData
call fcn.0045b45a
mov edx, 0x18674c0
call fcn.0045b687
call fcn.0045ab3a
mov eax, 0x800000ff
call fcn.00452ee2
call fcn.004174f2
jmp 0x4427b9
mov edx, 0x18674d8
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
mov eax, dword [0x45dae4]
test eax, eax
je 0x44286a
mov eax, dword [0x45daf4]
test eax, eax
je 0x44286a
push 0
push 0
mov edx, 0x1861864
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x44286a
push 0
push 0
mov edx, 0x18673ac
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x44286a
mov edx, 0x18674ec
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
call fcn.00441377
mov dword [0x45dae4], 0
fild dword [0x186b3c8]
mov eax, dword [0x45dae4]
call fcn.0045a848
fcompp
fnstsw ax
sahf
jne 0x442a26
call fcn.0041969c
call fcn.00456355
mov eax, dword [str.S_1_5_18SoftwareMicrosoftOfficeCommonClientTelemetry]
test eax, eax
je 0x442924
fild dword [0x186b388]
mov eax, dword [0x45daf0]
call fcn.0045a848
fcompp
fnstsw ax
sahf
jne 0x4428ea
push 0
push 1
mov edx, 0x1866acc
call fcn.0045b687
lea ebx, [esp + 4]
call fcn.0045a938
call fcn.00412768
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
jmp 0x442915
push 0
push 2
mov edx, 0x1866acc
call fcn.0045b687
lea ebx, [esp + 4]
call fcn.0045a938
call fcn.00412768
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
mov dword [0x45dff4], 1
jmp 0x442a21
mov eax, dword [0x45daec]
test eax, eax
je 0x442a21
push 0
push 0
mov edx, 0x1861864
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x442a21
push 0
push 0
mov edx, 0x18673ac
call fcn.0045b687
lea ebx, [esp]
call fcn.0045a938
call fcn.00419351
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x442a21
fild dword [0x186b388]
mov eax, dword [0x45daf0]
call fcn.0045a848
fcompp
fnstsw ax
sahf
jne 0x4429ec
push 0
push 1
mov edx, 0x1866acc
call fcn.0045b687
lea ebx, [esp + 4]
call fcn.0045a938
call fcn.00412768
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
jmp 0x442a17
push 0
push 2
mov edx, 0x1866acc
call fcn.0045b687
lea ebx, [esp + 4]
call fcn.0045a938
call fcn.00412768
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
mov dword [0x45dff4], 1
jmp 0x442a43
mov edx, 0x1867508
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
call fcn.00441377
fild dword [0x186b388]
mov eax, dword [0x45db0c]
call fcn.0045a848
fcompp
fnstsw ax
sahf
jne 0x442a8f
mov edx, 0x186751c
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
mov edx, 0x1867534
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
fild dword [0x186b388]
mov eax, dword [0x45dadc]
call fcn.0045a848
fcompp
fnstsw ax
sahf
jne 0x442ac3
mov edx, 0x1867550
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
fild dword [0x186b388]
mov eax, dword [0x45daa4]
call fcn.0045a848
fcompp
fnstsw ax
sahf
jne 0x442af7
mov edx, 0x1867564
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
fild dword [0x186b388]
mov eax, dword [0x45dab4]
call fcn.0045a848
fcompp
fnstsw ax
sahf
jne 0x442b2b
mov edx, 0x1867578
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
fild dword [0x186b388]
mov eax, dword [str..DEFAULTSoftwareMicrosoftOfficeCommonClientTelemetry]
call fcn.0045a848
fcompp
fnstsw ax
sahf
jne 0x442b5f
mov edx, 0x186758c
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
fild dword [0x186b388]
mov eax, dword [0x45dab0]
call fcn.0045a848
fcompp
fnstsw ax
sahf
jne 0x442b93
mov edx, 0x18675a0
call fcn.0045b687
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00417148
mov ebx, 0x45d884
call fcn.0045b45a
call fcn.0045b655
test eax, eax
je 0x442bd6
mov edx, 0x18675b4
call fcn.0045b687
mov ebx, 0x45d884
call fcn.0045b45a
call fcn.0045ab3a
push 0
mov ebx, esp
call fcn.0045a876
call fcn.0041a3a0
jmp 0x442bd6
mov ebx, str.NLMTODDDDDDDDDNLKTQ1vLDDMTWD
call fcn.0045b45a
call fcn.0045b655
test eax, eax
je 0x442c19
mov edx, 0x18675b4
call fcn.0045b687
mov ebx, str.NLMTODDDDDDDDDNLKTQ1vLDDMTWD
call fcn.0045b45a
call fcn.0045ab3a
push 0
mov ebx, esp
call fcn.0045a876
call fcn.0041a46c
jmp 0x442c19
mov ebx, 0x45d984
call fcn.0045b45a
call fcn.0045b655
test eax, eax
je 0x442c5c
mov edx, 0x18675b4
call fcn.0045b687
mov ebx, 0x45d984
call fcn.0045b45a
call fcn.0045ab3a
push 0
mov ebx, esp
call fcn.0045a876
call fcn.0041a538
jmp 0x442c5c
mov eax, dword [0x45dac4]
test eax, eax
je 0x442c95
mov ecx, 0x42b15e
push ecx
push 0
push 0x100000
push 0
lea ebx, [ebp - 0x9c]
call fcn.0045065d
mov esi, dword [ebx]
mov eax, esi
lea ebx, [ebp - 0x9c]
call fcn.00450637
mov esi, dword [ebx]
call fcn.0045b4f9
lea esp, [ebp - 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret