Function at 0x440589
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x168
mov eax, dword [0x5025d0]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
push edi
push 0x103
xor ebx, ebx
lea eax, [ebp - 0x123]
push ebx
push eax
mov byte [ebp - 0x124], 0
call fcn.004a8c80
xor eax, eax
mov byte [ebp - 0x1c], bl
lea edi, [ebp - 0x1b]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov word [ebp - 0x168], bx
lea edi, [ebp - 0x166]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
mov word [ebp - 0x158], bx
lea edi, [ebp - 0x156]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
cmp dword [ebp + 8], ebx
mov dword [ebp - 0x128], ebx
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x130], ebx
mov dword [ebp - 0x12c], ebx
stosw word es:[edi], ax
je 0x44062b
cmp dword [0x5fbef4], ebx
je 0x44062b
xor eax, eax
inc eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004a8565
leave
ret
cmp dword [0x5fbef8], ebx
je 0x440659
call fcn.0049a965
mov esi, eax
jmp 0x440651
call fcn.0049a965
sub eax, esi
cmp eax, 0x2710
jae 0x440659
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x5fbef8], ebx
jne 0x44063c
push str.GatMem.sat
xor esi, esi
push ebx
inc esi
push ebx
mov dword [0x5fbef8], esi
call fcn.0045bc06
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x124]
push 0x4c8500
push eax
call fcn.004a8bfe
add esp, 0x10
lea edi, [ebp - 0x124]
call fcn.00419e19
test eax, eax
jne 0x4406a1
mov dword [0x5fbef8], ebx
xor eax, eax
jmp 0x44061c
push 0x12d6
push str..Network.c
mov edx, 0x4c722c
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x13c], esi
call fcn.0041bb64
mov edi, eax
cmp edi, ebx
pop ecx
pop ecx
mov dword [ebp - 0x138], edi
je 0x440694
push edi
push esi
lea eax, [ebp - 0x128]
push 4
push eax
call fcn.004a8fc5
add esp, 0x10
cmp eax, esi
jae 0x4406ef
mov ecx, edi
call fcn.0041bf91
jmp 0x440694
push 0xa
pop eax
cmp dword [ebp - 0x128], eax
jle 0x440700
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], ebx
jle 0x4406e6
push edi
call fcn.004a842e
cmp eax, 0xffffffff
pop ecx
je 0x440749
mov edi, str.Thank_you_Jesus_for_your_help.__I_adore_you_desperately.__I_love_you_so_much__violently.__I_depsperately_want_you_more_than_anything_
mov ebx, edi
dec ebx
movsx ecx, byte [ebx + esi]
cmp eax, ecx
jne 0x440741
push edi
call fcn.004a7f30
cmp esi, eax
pop ecx
jge 0x440797
push dword [ebp - 0x138]
inc esi
call fcn.004a842e
cmp eax, 0xffffffff
pop ecx
jne 0x44071c
mov edi, dword [ebp - 0x138]
xor ebx, ebx
mov ecx, edi
call fcn.0041bf91
push 0x1309
push str..Network.c
mov edx, 0x4c7368
lea ecx, [ebp - 0x124]
call fcn.0041bb64
mov esi, eax
cmp esi, ebx
pop ecx
pop ecx
je 0x440694
push esi
push 1
lea eax, [ebp - 0x128]
push 4
push eax
mov dword [ebp - 0x128], ebx
call fcn.004a7ca6
add esp, 0x10
mov ecx, esi
jmp 0x4406e8
mov edi, dword [ebp - 0x138]
push edi
xor ebx, ebx
inc ebx
push ebx
lea eax, [ebp - 0x168]
push 0x10
push eax
call fcn.004a8fc5
add esp, 0x10
cmp eax, ebx
jae 0x4407ca
mov ecx, edi
call fcn.0041bf91
and dword [0x5fbef8], 0
jmp 0x44069a
lea eax, [ebp - 0x158]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov cx, word [ebp - 0x166]
xor eax, eax
cmp cx, word [ebp - 0x156]
push edi
setne al
push ebx
push 0x10
push 0x5f8c5c
mov dword [ebp - 0x148], eax
call fcn.004a8fc5
add esp, 0x10
cmp eax, ebx
jb 0x4407b7
push edi
push ebx
push 0x10
push 0x5f8c6c
call fcn.004a8fc5
add esp, 0x10
cmp eax, ebx
jae 0x44082f
mov ecx, edi
call fcn.0041bf91
xor eax, eax
and dword [0x5fbef8], 0
jmp 0x44061c
xor eax, eax
cmp dword [ebp - 0x128], eax
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x140], eax
jle 0x440a08
xor eax, eax
push edi
push ebx
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x134], eax
lea eax, [ebp - 0x134]
push 4
push eax
call fcn.004a8fc5
push edi
push ebx
mov esi, eax
lea eax, [ebp - 0x130]
push 4
push eax
call fcn.004a8fc5
push edi
push ebx
add esi, eax
lea eax, [ebp - 0x12c]
push 4
push eax
call fcn.004a8fc5
add eax, esi
add esp, 0x30
cmp eax, 3
jl 0x4409f9
xor esi, esi
cmp dword [ebp - 0x12c], esi
je 0x440a02
cmp dword [ebp - 0x130], esi
jl 0x440a02
cmp dword [ebp - 0x134], esi
jl 0x440a02
cmp dword [ebp - 0x130], esi
jne 0x4408d9
cmp dword [ebp - 0x134], esi
je 0x440a02
sub dword [ebp - 0x12c], 0x309
mov ecx, dword [ebp - 0x12c]
lea eax, [ebp - 0x1c]
call fcn.004425d3
lea ecx, [ebp - 0x1c]
call fcn.0044262c
cmp eax, dword [ebp - 0x12c]
jne 0x440964
mov esi, dword [0x5f8734]
xor edi, edi
test esi, esi
jle 0x44098a
mov ebx, 0x5f8c80
mov ecx, ebx
call fcn.0044262c
cmp dword [ebp - 0x12c], eax
mov esi, dword [0x5f8734]
je 0x44092f
inc edi
add ebx, 0x14
cmp edi, esi
jl 0x440912
cmp edi, 0xa
jge 0x440961
cmp edi, esi
jge 0x440987
mov edx, dword [ebp - 0x134]
mov eax, edi
shl eax, 2
lea ecx, [eax + 0x5f8d48]
cmp edx, dword [ecx]
jle 0x44094f
mov dword [ecx], edx
mov ecx, dword [ebp - 0x130]
lea eax, [eax + 0x5f8d70]
cmp ecx, dword [eax]
jle 0x440961
mov dword [eax], ecx
xor ebx, ebx
inc ebx
inc dword [ebp - 0x140]
mov eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0x128]
mov edi, dword [ebp - 0x138]
jl 0x440849
jmp 0x440a08
xor ebx, ebx
inc ebx
cmp dword [ebp - 0x148], 0
je 0x4409bc
call fcn.00440ecc
test eax, eax
je 0x4409b6
push 0xa8c
lea ecx, [ebp - 0x1c]
call fcn.0043e119
test eax, eax
pop ecx
jne 0x4409b6
mov dword [ebp - 0x144], ebx
jmp 0x440964
mov esi, dword [0x5f8734]
lea eax, [ebp - 0x1c]
push eax
mov eax, esi
imul eax, eax, 0x14
push 0x14
add eax, 0x5f8c80
pop ecx
call fcn.00477a48
mov eax, dword [ebp - 0x134]
mov dword [esi*4 + 0x5f8d48], eax
mov eax, dword [ebp - 0x130]
mov dword [esi*4 + 0x5f8d70], eax
inc esi
pop ecx
mov dword [0x5f8734], esi
jmp 0x440964
and dword [ebp - 0x13c], 0
jmp 0x440a08
mov dword [ebp - 0x13c], esi
mov ecx, edi
call fcn.0041bf91
cmp dword [ebp - 0x144], 0
je 0x440a1d
call fcn.0044027f
mov eax, dword [ebp - 0x13c]
test eax, eax
je 0x440823
mov dword [0x5fbef4], ebx
jmp 0x440823