Function at 0x444c40
Capabilities:
Check for time delay via gettickcount
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46557f
mov eax, dword fs:[0]
push eax
mov eax, 0x4300
call fcn.004646d0
mov eax, dword [0x48602c]
xor eax, ebp
mov dword [ebp - 0x20], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x4300], ecx
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x10], 0
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x150], ecx
mov dword [ebp - 0x18], 0
mov edx, dword [ebp - 0x150]
and edx, 0x7fffffff
mov dword [ebp - 0x150], edx
mov eax, dword [ebp - 0x150]
and eax, 0xf000
shr eax, 0xc
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x150]
and ecx, 0xfff
mov dword [ebp - 0x150], ecx
mov edx, dword [ebp - 0x150]
mov dword [ebp - 0x4304], edx
mov eax, dword [ebp - 0x4304]
sub eax, 0x100
mov dword [ebp - 0x4304], eax
cmp dword [ebp - 0x4304], 0x14
ja case.0x444d0e.2
mov ecx, dword [ebp - 0x4304]
movzx edx, byte [ecx + 0x445e14]
jmp dword [edx*4 + 0x445de8]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x12a4], eax
mov word [ebp - 0x1aa4], 0
push 0x7fe
push 0
lea ecx, [ebp - 0x1aa2]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov dword [ebp - 0x1298], 0
mov edx, dword [ebp - 0x1c]
add edx, 0xc
mov dword [ebp - 0x12a0], edx
push 0x400
mov eax, dword [ebp - 0x12a0]
add eax, 4
push eax
lea ecx, [ebp - 0x1aa4]
push ecx
call fcn.004023b0
add esp, 0xc
lea edx, [ebp - 0x1aa4]
push edx
call dword [sym.imp.MSVCR80.dll_wcslen]
add esp, 4
mov dword [ebp - 0x1298], eax
cmp dword [ebp - 0x1298], 0
jg 0x444d95
jmp case.0x444d0e.2
mov eax, dword [ebp - 0x1298]
cmp eax, dword [0x14a1c50]
jne 0x444dc8
mov ecx, dword [ebp - 0x1298]
push ecx
push 0x14a1c58
lea edx, [ebp - 0x1aa4]
push edx
call dword [sym.imp.MSVCR80.dll_wcsncmp]
add esp, 0xc
test eax, eax
jne 0x444dc8
jmp case.0x444d0e.2
mov eax, dword [ebp - 0x1298]
mov dword [0x14a1c50], eax
push 0x800
push 0
push 0x14a1c58
call sub.MSVCR80.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x1aa4]
push ecx
push 0x400
push 0x14a1c58
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
add esp, 0xc
call fcn.00447070
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x444e14
jmp case.0x444d0e.2
lea edx, [ebp - 0x14c]
push edx
mov ecx, dword [ebp - 0x10]
call fcn.004558b0
mov dword [ebp - 0x129c], 0x113c
mov eax, dword [ebp - 0x129c]
push eax
push 0
lea ecx, [ebp - 0x1294]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x168], edx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x164], eax
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x160], ecx
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x15c], edx
push 0x14a1c58
push 0x400
lea eax, [ebp - 0x968]
push eax
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
add esp, 0xc
mov ecx, dword [ebp - 0x129c]
push ecx
lea edx, [ebp - 0x1294]
push edx
push 0x106
push pe_nt_image_headers32
mov ecx, dword [ebp - 0x4300]
call fcn.004433d0
jmp case.0x444d0e.2
mov eax, dword [ebp + 8]
push eax
push str.call_back:_d
mov ecx, dword [ebp - 0x4300]
push ecx
call fcn.00443590
add esp, 0xc
call fcn.00447070
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x444ed6
jmp case.0x444d0e.2
lea edx, [ebp - 0x14c]
push edx
mov ecx, dword [ebp - 0x10]
call fcn.004558b0
mov dword [ebp - 0x1aa8], str.Some_drive_s____1__are_being_in_use_now__so_the_current_operation_can_not_be_completed._Would_you_like_to_close_these_the_programs_that_are_running_on_these_drives_and_then_proceed__n_nIf_you_click_No__the_program_will_prompt_the_operation_will_be_realized_under_a_Restart_Mode._r_n
push 0x107
mov eax, dword [ebp - 0x1aa8]
push eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x40]
mov dword [ecx], edx
mov eax, dword [ebp - 0x3c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x38]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x34]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x4300]
call fcn.004439b0
mov dword [ebp - 0x14], eax
jmp case.0x444d0e.2
call fcn.00447070
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x444f3d
jmp case.0x444d0e.2
lea ecx, [ebp - 0x14c]
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.004558b0
cmp dword [ebp + 8], 0x101
jne 0x444f61
mov dword [ebp - 0x14], 0xc9
jmp case.0x444d0e.2
mov edx, dword [ebp - 0x4300]
cmp dword [edx + 0x824], 0
jbe 0x444f8c
mov eax, dword [ebp - 0x4300]
mov dword [eax + 0x824], 0
mov dword [ebp - 0x14], 0x130
jmp case.0x444d0e.2
mov ecx, dword [ebp + 0xc]
add ecx, 0xc
mov dword [ebp - 0x20e0], ecx
mov dword [ebp - 0x20dc], 0
push 0x62c
push 0
lea edx, [ebp - 0x20d8]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x20d8], eax
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x20d4], ecx
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x20d0], edx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x20cc], eax
mov dword [ebp - 0x20dc], 0x102
mov ecx, dword [ebp - 0x20e0]
push ecx
lea edx, [ebp - 0x20c4]
push edx
call sub.NTHelp.dll_void___cdecl_Help32::CopyString_wchar_t___wchar_t__
add esp, 8
mov ecx, dword [ebp - 0x4300]
call fcn.00443790
push 0x630
lea eax, [ebp - 0x20dc]
push eax
push 0x10e
push pe_nt_image_headers32
mov ecx, dword [ebp - 0x4300]
call fcn.004433d0
mov dword [ebp - 0x1aac], 0x1d4c0
mov ecx, dword [ebp - 0x1aac]
push ecx
mov edx, dword [ebp - 0x4300]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x20e4], eax
cmp dword [ebp - 0x20e4], 0x102
jne 0x445067
mov dword [ebp - 0x14], 0x17
jmp case.0x444d0e.2
mov ecx, dword [ebp - 0x4300]
mov edx, dword [ecx + 0x824]
add edx, 1
mov eax, dword [ebp - 0x4300]
mov dword [eax + 0x824], edx
push 0x630
push 0
lea ecx, [ebp - 0x20dc]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x4300]
mov eax, dword [edx + 0x20]
push eax
mov ecx, dword [ebp - 0x4300]
add ecx, 0x24
push ecx
lea edx, [ebp - 0x20dc]
push edx
call sub.MSVCR80.dll_memcpy
add esp, 0xc
lea eax, [ebp - 0x1ebc]
push eax
call dword [sym.imp.MSVCR80.dll_wcslen]
add esp, 4
shl eax, 1
push eax
lea ecx, [ebp - 0x1ebc]
push ecx
mov edx, dword [ebp - 0x20e0]
add edx, 0x208
push edx
call sub.MSVCR80.dll_memcpy
add esp, 0xc
lea eax, [ebp - 0x1cb4]
push eax
call dword [sym.imp.MSVCR80.dll_wcslen]
add esp, 4
shl eax, 1
push eax
lea ecx, [ebp - 0x1cb4]
push ecx
mov edx, dword [ebp - 0x20e0]
add edx, 0x410
push edx
call sub.MSVCR80.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x20c8]
mov dword [ebp - 0x14], eax
jmp case.0x444d0e.2
push 0x50e
mov ecx, dword [ebp + 8]
push ecx
push 0x4705dc
mov edx, dword [ebp - 0x4300]
push edx
call fcn.00443590
add esp, 0x10
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x251c], eax
mov dword [ebp - 0x14], 0x17
call fcn.00447070
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x44516c
jmp case.0x444d0e.2
lea ecx, [ebp - 0x14c]
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.004558b0
mov edx, dword [ebp - 0x251c]
add edx, 0xc
push edx
lea ecx, [ebp - 0x2300]
call fcn.0040c610
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x2300]
call fcn.00403980
mov dword [ebp - 0x2518], eax
mov dword [ebp - 0x2e54], 0
push 0x21c
push 0
lea eax, [ebp - 0x2e50]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
mov dword [ebp - 0x2514], 0x220
mov dword [ebp - 0x2e54], 0x10b
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x2e50], ecx
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x2e4c], edx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2e48], eax
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x2e44], ecx
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x2e40], edx
mov dword [ebp - 0x2e58], 0
jmp 0x445224
mov eax, dword [ebp - 0x2e58]
add eax, 1
mov dword [ebp - 0x2e58], eax
mov ecx, dword [ebp - 0x2e58]
cmp ecx, dword [ebp - 0x2518]
jae 0x4452a0
push 0x104
push 0
lea edx, [ebp - 0x2e3c]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x2e58]
push eax
lea ecx, [ebp - 0x2300]
call fcn.00407a90
mov ecx, eax
call dword [sym.imp.MSVCP80.dll_public:_wchar_t_const____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::c_str_void_const]
push eax
push 0x104
lea ecx, [ebp - 0x2e3c]
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
add esp, 0xc
mov edx, dword [ebp - 0x2514]
push edx
lea eax, [ebp - 0x2e54]
push eax
push 0x110
push pe_nt_image_headers32
mov ecx, dword [ebp - 0x4300]
call fcn.004433d0
jmp 0x445215
mov ecx, 0x3f
mov esi, 0x470608
lea edi, [ebp - 0x2824]
rep movsd dword es:[edi], dword [esi]
push 0x10b
lea ecx, [ebp - 0x2824]
push ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x40]
mov dword [edx], eax
mov ecx, dword [ebp - 0x3c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x38]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x34]
mov dword [edx + 0xc], ecx
mov ecx, dword [ebp - 0x4300]
call fcn.004439b0
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x40
je 0x445305
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2300]
call fcn.00403960
jmp case.0x444d0e.2
mov dword [ebp - 0x22f0], 0
lea edx, [ebp - 0x22f0]
push edx
call fcn.0044d7e0
add esp, 4
test eax, eax
je 0x445340
mov ecx, dword [ebp - 0x4300]
call fcn.00443f10
movzx eax, al
test eax, eax
jne 0x445340
mov dword [ebp - 0x4308], 0
jmp 0x44534a
mov dword [ebp - 0x4308], 1
mov cl, byte [ebp - 0x4308]
mov byte [ebp - 0x250d], cl
movzx edx, byte [ebp - 0x250d]
push edx
mov al, byte [ebp - 0x250d]
push eax
push 1
push 1
call fcn.00441660
add esp, 0xc
push eax
push 0x470730
mov ecx, dword [ebp - 0x4300]
push ecx
call fcn.00443590
add esp, 0x10
mov word [ebp - 0x250c], 0
push 0x206
push 0
lea edx, [ebp - 0x250a]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
lea eax, [ebp - 0x250c]
push eax
call sub.NTHelp.dll_void___cdecl_Help32::GetModuleFilePath_wchar_t__
add esp, 4
lea ecx, [ebp - 0x250c]
push ecx
call sub.NTHelp.dll_int___cdecl_Help32::IsEmpty_wchar_t__
add esp, 4
test eax, eax
je 0x4453e5
mov dword [ebp - 0x14], 0x17
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2300]
call fcn.00403960
jmp case.0x444d0e.2
mov word [ebp - 0x2724], 0
push 0x206
push 0
lea edx, [ebp - 0x2722]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
push 6
lea eax, [ebp - 0x250c]
push eax
lea ecx, [ebp - 0x2724]
push ecx
call sub.MSVCR80.dll_memcpy
add esp, 0xc
mov word [ebp - 0x2c34], 0
push 0x206
push 0
lea edx, [ebp - 0x2c32]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
lea eax, [ebp - 0x2724]
push eax
push 0x470784
lea ecx, [ebp - 0x2c34]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea edx, [ebp - 0x2c34]
push edx
mov ecx, dword [ebp - 0x4300]
call fcn.00442cd0
mov word [ebp - 0x22ec], 0
push 0x206
push 0
lea eax, [ebp - 0x22ea]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
mov word [ebp - 0x2a2c], 0
push 0x206
push 0
lea ecx, [ebp - 0x2a2a]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
lea edx, [ebp - 0x2a2c]
push edx
lea eax, [ebp - 0x22ec]
push eax
mov ecx, dword [ebp - 0x10]
call fcn.004562e0
test eax, eax
jne 0x445518
lea ecx, [ebp - 0x2a2c]
push ecx
lea edx, [ebp - 0x22ec]
push edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x40]
mov dword [eax], ecx
mov edx, dword [ebp - 0x3c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x38]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x34]
mov dword [eax + 0xc], edx
mov ecx, dword [ebp - 0x4300]
call fcn.004437f0
test eax, eax
jne 0x445518
mov dword [ebp - 0x14], 0x17
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2300]
call fcn.00403960
jmp case.0x444d0e.2
lea eax, [ebp - 0x2a2c]
push eax
lea ecx, [ebp - 0x22ec]
push ecx
push 0x470704
mov edx, dword [ebp - 0x4300]
push edx
call fcn.00443590
add esp, 0x10
push 0x208
push 0
lea eax, [ebp - 0x2c34]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x2724]
push ecx
push 0x4707a4
lea edx, [ebp - 0x2c34]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x2a2c]
push eax
lea ecx, [ebp - 0x22ec]
push ecx
lea edx, [ebp - 0x2c34]
push edx
mov ecx, dword [ebp - 0x4300]
call fcn.00442950
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2300]
call fcn.00403960
jmp case.0x444d0e.2
push 0x562
mov eax, dword [ebp + 8]
push eax
push 0x4707c4
mov ecx, dword [ebp - 0x4300]
push ecx
call fcn.00443590
add esp, 0x10
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x2e74], edx
mov dword [ebp - 0x14], 0x20
call fcn.00447070
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x4455e3
jmp case.0x444d0e.2
lea eax, [ebp - 0x14c]
push eax
mov ecx, dword [ebp - 0x10]
call fcn.004558b0
mov ecx, dword [ebp - 0x2e74]
add ecx, 0xc
push ecx
lea ecx, [ebp - 0x2e68]
call fcn.0040c610
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x2e68]
call fcn.00403980
mov dword [ebp - 0x2e70], eax
mov dword [ebp - 0x3194], 0
push 0x21c
push 0
lea edx, [ebp - 0x3190]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov dword [ebp - 0x2e6c], 0x220
xor eax, eax
cmp dword [ebp - 0x18], 1
sete al
lea eax, [eax + eax + 0x10a]
mov dword [ebp - 0x3194], eax
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x3190], ecx
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x318c], edx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x3188], eax
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x3184], ecx
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x3180], edx
mov dword [ebp - 0x3198], 0
jmp 0x4456a7
mov eax, dword [ebp - 0x3198]
add eax, 1
mov dword [ebp - 0x3198], eax
mov ecx, dword [ebp - 0x3198]
cmp ecx, dword [ebp - 0x2e70]
jae 0x445723
push 0x104
push 0
lea edx, [ebp - 0x317c]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x3198]
push eax
lea ecx, [ebp - 0x2e68]
call fcn.00407a90
mov ecx, eax
call dword [sym.imp.MSVCP80.dll_public:_wchar_t_const____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::c_str_void_const]
push eax
push 0x104
lea ecx, [ebp - 0x317c]
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
add esp, 0xc
mov edx, dword [ebp - 0x2e6c]
push edx
lea eax, [ebp - 0x3194]
push eax
push 0x110
push pe_nt_image_headers32
mov ecx, dword [ebp - 0x4300]
call fcn.004433d0
jmp 0x445698
mov ecx, 0x3f
mov esi, 0x4707f0
lea edi, [ebp - 0x2f74]
rep movsd dword es:[edi], dword [esi]
push 0x10a
lea ecx, [ebp - 0x2f74]
push ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x40]
mov dword [edx], eax
mov ecx, dword [ebp - 0x3c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x38]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x34]
mov dword [edx + 0xc], ecx
mov ecx, dword [ebp - 0x4300]
call fcn.004439b0
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2e68]
call fcn.00403960
jmp case.0x444d0e.2
push 0x584
mov edx, dword [ebp + 8]
push edx
push str.call_back:_d_line:_d
mov eax, dword [ebp - 0x4300]
push eax
call fcn.00443590
add esp, 0x10
call fcn.00447070
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x4457b2
jmp 0x445a7c
lea ecx, [ebp - 0x14c]
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.004558b0
mov ecx, 0x3f
mov esi, str.The_current_operation_needs_to_be_completed_in_a_Restart_Mode._Click_Yes_to_restart_the_computer_or_click_No_to_cancel._r_n
lea edi, [ebp - 0x38c4]
rep movsd dword es:[edi], dword [esi]
push 0x108
lea edx, [ebp - 0x38c4]
push edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x40]
mov dword [eax], ecx
mov edx, dword [ebp - 0x3c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x38]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x34]
mov dword [eax + 0xc], edx
mov ecx, dword [ebp - 0x4300]
call fcn.004439b0
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x445814
jmp 0x445a7c
mov dword [ebp - 0x33a8], 0
lea eax, [ebp - 0x33a8]
push eax
call fcn.0044d7e0
add esp, 4
test eax, eax
je 0x44584f
mov ecx, dword [ebp - 0x4300]
call fcn.00443f10
movzx ecx, al
test ecx, ecx
jne 0x44584f
mov dword [ebp - 0x430c], 0
jmp 0x445859
mov dword [ebp - 0x430c], 1
mov dl, byte [ebp - 0x430c]
mov byte [ebp - 0x35b5], dl
movzx eax, byte [ebp - 0x35b5]
push eax
mov cl, byte [ebp - 0x35b5]
push ecx
push 1
push 1
call fcn.00441660
add esp, 0xc
push eax
push str.SetUefiEntry_Onetime_Result:_d_Ignore:_d
mov edx, dword [ebp - 0x4300]
push edx
call fcn.00443590
add esp, 0x10
mov word [ebp - 0x35b4], 0
push 0x206
push 0
lea eax, [ebp - 0x35b2]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x35b4]
push ecx
call sub.NTHelp.dll_void___cdecl_Help32::GetModuleFilePath_wchar_t__
add esp, 4
lea edx, [ebp - 0x35b4]
push edx
call sub.NTHelp.dll_int___cdecl_Help32::IsEmpty_wchar_t__
add esp, 4
test eax, eax
je 0x4458e2
mov dword [ebp - 0x14], 0x17
jmp 0x445a7c
mov word [ebp - 0x37c4], 0
push 0x206
push 0
lea eax, [ebp - 0x37c2]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
push 6
lea ecx, [ebp - 0x35b4]
push ecx
lea edx, [ebp - 0x37c4]
push edx
call sub.MSVCR80.dll_memcpy
add esp, 0xc
mov word [ebp - 0x3cd4], 0
push 0x206
push 0
lea eax, [ebp - 0x3cd2]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x37c4]
push ecx
push str._s_adapter.lst
lea edx, [ebp - 0x3cd4]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x3cd4]
push eax
mov ecx, dword [ebp - 0x4300]
call fcn.00442cd0
mov word [ebp - 0x33a4], 0
push 0x206
push 0
lea ecx, [ebp - 0x33a2]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov word [ebp - 0x3acc], 0
push 0x206
push 0
lea edx, [ebp - 0x3aca]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
lea eax, [ebp - 0x3acc]
push eax
lea ecx, [ebp - 0x33a4]
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.004562e0
test eax, eax
jne 0x445a00
lea edx, [ebp - 0x3acc]
push edx
lea eax, [ebp - 0x33a4]
push eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x40]
mov dword [ecx], edx
mov eax, dword [ebp - 0x3c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x38]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x34]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x4300]
call fcn.004437f0
test eax, eax
jne 0x445a00
mov dword [ebp - 0x14], 0x17
jmp 0x445a7c
lea ecx, [ebp - 0x3acc]
push ecx
lea edx, [ebp - 0x33a4]
push edx
push str.NasUser:_s_NasPass:_s
mov eax, dword [ebp - 0x4300]
push eax
call fcn.00443590
add esp, 0x10
push 0x208
push 0
lea ecx, [ebp - 0x3cd4]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
lea edx, [ebp - 0x37c4]
push edx
push str._sexcinfo.ini
lea eax, [ebp - 0x3cd4]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea ecx, [ebp - 0x3acc]
push ecx
lea edx, [ebp - 0x33a4]
push edx
lea eax, [ebp - 0x3cd4]
push eax
mov ecx, dword [ebp - 0x4300]
call fcn.00442950
xor ecx, ecx
jne 0x44579f
jmp case.0x444d0e.2
push str.Start_MakeDisk
mov edx, dword [ebp - 0x4300]
push edx
call fcn.00443590
add esp, 8
mov word [ebp - 0x3edc], 0
push 0x206
push 0
lea eax, [ebp - 0x3eda]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
mov word [ebp - 0x40e4], 0
push 0x206
push 0
lea ecx, [ebp - 0x40e2]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov word [ebp - 0x42f4], 0
push 0x206
push 0
lea edx, [ebp - 0x42f2]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x104
lea eax, [ebp - 0x3edc]
push eax
push 0
call fcn.0044ecf0
add esp, 0xc
lea ecx, [ebp - 0x3edc]
push ecx
lea edx, [ebp - 0x42f4]
push edx
call dword [sym.imp.MSVCR80.dll_wcscat]
add esp, 8
push str._ampe_tmp.iso
lea eax, [ebp - 0x42f4]
push eax
call dword [sym.imp.MSVCR80.dll_wcscat]
add esp, 8
lea ecx, [ebp - 0x42f4]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea edx, [ebp - 0x3edc]
push edx
lea eax, [ebp - 0x40e4]
push eax
call dword [sym.imp.MSVCR80.dll_wcscat]
add esp, 8
push 0x470b10
lea ecx, [ebp - 0x40e4]
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat]
add esp, 8
lea edx, [ebp - 0x40e4]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x470b24
mov eax, dword [ebp - 0x4300]
add eax, 0x1510
push eax
call dword [sym.imp.MSVCR80.dll_wcscpy]
add esp, 8
push 0x104
mov ecx, dword [ebp - 0x4300]
add ecx, 0x1510
push ecx
push 0
call fcn.0044ecf0
add esp, 0xc
push str.isoprogress
mov edx, dword [ebp - 0x4300]
add edx, 0x1510
push edx
call dword [sym.imp.MSVCR80.dll_wcscat]
add esp, 8
mov eax, dword [ebp - 0x4300]
add eax, 0x1510
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x40e8], eax
mov ecx, dword [ebp - 0x4300]
mov byte [ecx + 0x19ec], 0
mov edx, dword [ebp - 0x4300]
mov dword [edx + 0x19f0], 0
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x4300]
mov byte [eax + 0x19ed], 1
mov ecx, dword [ebp - 0x4300]
call fcn.00444090
mov dword [ebp - 0x42f8], eax
mov ecx, dword [ebp - 0x42f8]
push ecx
push str.Startup_makedisc_use_user_exitcode:_d
mov edx, dword [ebp - 0x4300]
push edx
call fcn.00443590
add esp, 0xc
cmp dword [ebp - 0x42f8], 0
jne 0x445c73
mov ecx, dword [ebp - 0x4300]
call fcn.00444000
movzx eax, al
test eax, eax
je 0x445c73
push 0
mov ecx, dword [ebp - 0x4300]
call fcn.00443e20
jmp 0x445d13
push str.Try_use_download
mov ecx, dword [ebp - 0x4300]
push ecx
call fcn.00443590
add esp, 8
push 1
mov ecx, dword [ebp - 0x4300]
call fcn.00443e20
mov edx, dword [ebp - 0x4300]
mov byte [edx + 0x19ec], 1
mov ecx, dword [ebp - 0x4300]
call fcn.00443700
mov ecx, dword [ebp - 0x4300]
mov dword [ecx + 0x19f0], eax
mov edx, dword [ebp - 0x4300]
mov eax, dword [edx + 0x19f0]
push eax
push str.Download_PE_Result:_d
mov ecx, dword [ebp - 0x4300]
push ecx
call fcn.00443590
add esp, 0xc
mov edx, dword [ebp - 0x4300]
cmp dword [edx + 0x19f0], 0
je 0x445d0b
lea eax, [ebp - 0x42f4]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x40e4]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebp - 0x14], 0x17
jmp 0x445d13
xor edx, edx
jne 0x445be9
mov eax, dword [ebp - 0x4300]
mov byte [eax + 0x19ec], 0
mov ecx, dword [ebp - 0x4300]
mov byte [ecx + 0x19ed], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x40e8]
xor edx, edx
mov ecx, 0x3e8
div ecx
push eax
push str.MakePE_Use_Time:_d
mov edx, dword [ebp - 0x4300]
push edx
call fcn.00443590
add esp, 0xc
jmp case.0x444d0e.2
mov dword [ebp - 0x14], 0x3a
jmp case.0x444d0e.2
mov dword [ebp - 0x42fc], 1
lea eax, [ebp - 0x42fc]
push eax
call fcn.0044d7e0
add esp, 4
test eax, eax
jne 0x445d8a
mov dword [ebp - 0x14], 0x17
jmp case.0x444d0e.2
mov dword [ebp - 0x14], 0
jmp case.0x444d0e.2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CALLBACK_CMD_ASK_FOR_REBOOT:_d
mov ecx, dword [ebp - 0x4300]
push ecx
call fcn.00443590
add esp, 0xc
mov ecx, dword [ebp - 0x4300]
call fcn.00443b20
movzx edx, al
test edx, edx
je case.0x444d0e.2
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x20]
xor ecx, ebp
call fcn.0043ad38
mov esp, ebp
pop ebp
ret 0x18