Function at 0x44273d
Capabilities:
Check os version
Contain obfuscated stackstrings
Get cpu information
Get disk information
Get disk size
Get memory capacity
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5029db
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x64c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x600], ecx
mov dword [ebp - 0x5fc], 0
mov dword [ebp - 4], 1
wait
cmp dword [ebp + 0xc], 0
jne 0x442db7
lea ecx, [ebp - 0x68]
call fcn.00401590
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00401590
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
call fcn.00401590
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x60]
call fcn.00401590
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x64]
call fcn.00401590
mov byte [ebp - 4], 6
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x118], 0x94
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
jne 0x442849
push 0x545a3c
mov ecx, dword [ebp + 8]
call fcn.004dcb6c
mov ecx, dword [ebp - 0x5fc]
or ecx, 1
mov dword [ebp - 0x5fc], ecx
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x64]
call fcn.004dcafe
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x60]
call fcn.004dcafe
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
call fcn.004dcafe
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.004dcafe
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x68]
call fcn.004dcafe
mov eax, dword [ebp + 8]
wait
jmp 0x4434cb
cmp dword [ebp - 0x108], 2
jne 0x442a8c
push str.Windows_NT
lea ecx, [ebp - 0x120]
call fcn.004dcc87
mov dword [ebp - 0x70], 0x40
lea edx, [ebp - 0x11c]
push edx
push 1
push 0
push str.SystemCurrentControlSetControlProductOptions
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4428ff
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x545a84
mov ecx, dword [ebp + 8]
call fcn.004dcb6c
mov ecx, dword [ebp - 0x5fc]
or ecx, 1
mov dword [ebp - 0x5fc], ecx
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x64]
call fcn.004dcafe
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x60]
call fcn.004dcafe
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
call fcn.004dcafe
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.004dcafe
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x68]
call fcn.004dcafe
mov eax, dword [ebp + 8]
wait
jmp 0x4434cb
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x5c]
push eax
push 0
push 0
push str.ProductType
mov ecx, dword [ebp - 0x11c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x11c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0x14], 0
je 0x4429a1
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x545a9c
mov ecx, dword [ebp + 8]
call fcn.004dcb6c
mov ecx, dword [ebp - 0x5fc]
or ecx, 1
mov dword [ebp - 0x5fc], ecx
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x64]
call fcn.004dcafe
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x60]
call fcn.004dcafe
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
call fcn.004dcafe
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.004dcafe
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x68]
call fcn.004dcafe
mov eax, dword [ebp + 8]
wait
jmp 0x4434cb
push str.WinNT
lea edx, [ebp - 0x5c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4429c6
push str.Windows_NT_Workstation
lea ecx, [ebp - 0x120]
call fcn.004dcc87
jmp 0x4429fb
push str.ServerNT
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4429eb
push str.Windows_NT_Server
lea ecx, [ebp - 0x120]
call fcn.004dcc87
jmp 0x4429fb
push str.Windows_NT_Server___Domain_Controller
lea ecx, [ebp - 0x120]
call fcn.004dcc87
cmp dword [ebp - 0x114], 3
je 0x442a0d
cmp dword [ebp - 0x110], 0x33
jne 0x442a1c
push str.3.51
lea ecx, [ebp - 0x18]
call fcn.004dcc87
jmp 0x442a29
push 0x545b18
lea ecx, [ebp - 0x18]
call fcn.004dcc87
push 0xa
lea ecx, [ebp - 0x84]
push ecx
mov edx, dword [ebp - 0x10c]
push edx
call fcn.0047326c
add esp, 0xc
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.004dcb6c
mov dword [ebp - 0x604], eax
mov ecx, dword [ebp - 0x604]
mov dword [ebp - 0x608], ecx
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x608]
push edx
lea ecx, [ebp - 0x64]
call fcn.004dcc37
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5d0]
call fcn.004dcafe
jmp 0x442b4f
cmp dword [ebp - 0x108], 1
jne 0x442b3f
push str.Windows_95
lea ecx, [ebp - 0x120]
call fcn.004dcc87
cmp dword [ebp - 0x114], 4
ja 0x442ac4
cmp dword [ebp - 0x114], 4
jne 0x442ad4
cmp dword [ebp - 0x110], 0
jbe 0x442ad4
push str.Windows_98
lea ecx, [ebp - 0x120]
call fcn.004dcc87
mov eax, dword [ebp - 0x10c]
and eax, 0xff
mov dword [ebp - 0x6c], eax
push 0xa
lea ecx, [ebp - 0x84]
push ecx
mov edx, dword [ebp - 0x6c]
push edx
call fcn.0047326c
add esp, 0xc
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x5d4]
call fcn.004dcb6c
mov dword [ebp - 0x60c], eax
mov ecx, dword [ebp - 0x60c]
mov dword [ebp - 0x610], ecx
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x610]
push edx
lea ecx, [ebp - 0x64]
call fcn.004dcc37
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5d4]
call fcn.004dcafe
jmp 0x442b4f
push str.Windows_3.1
lea ecx, [ebp - 0x120]
call fcn.004dcc87
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0x5d8]
call fcn.004dcb6c
mov dword [ebp - 0x614], eax
mov ecx, dword [ebp - 0x614]
mov dword [ebp - 0x618], ecx
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x618]
push edx
lea ecx, [ebp - 0x60]
call fcn.004dcc37
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5d8]
call fcn.004dcafe
lea ecx, [ebp - 0x60]
call fcn.004dcfc5
lea eax, [ebp - 0x60]
push eax
push 0x545b40
lea ecx, [ebp - 0x64]
push ecx
push str._Build
lea edx, [ebp - 0x18]
push edx
push str._Ver
lea eax, [ebp - 0x120]
push eax
push 0x553eb0
lea ecx, [ebp - 0x5dc]
push ecx
call fcn.004dce07
mov dword [ebp - 0x61c], eax
mov edx, dword [ebp - 0x61c]
mov dword [ebp - 0x620], edx
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x620]
push eax
lea ecx, [ebp - 0x5e0]
push ecx
call fcn.004dcd93
mov dword [ebp - 0x624], eax
mov edx, dword [ebp - 0x624]
mov dword [ebp - 0x628], edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x628]
push eax
lea ecx, [ebp - 0x5e4]
push ecx
call fcn.004dcd2d
mov dword [ebp - 0x62c], eax
mov edx, dword [ebp - 0x62c]
mov dword [ebp - 0x630], edx
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x630]
push eax
lea ecx, [ebp - 0x5e8]
push ecx
call fcn.004dcd93
mov dword [ebp - 0x634], eax
mov edx, dword [ebp - 0x634]
mov dword [ebp - 0x638], edx
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x638]
push eax
lea ecx, [ebp - 0x5ec]
push ecx
call fcn.004dcd2d
mov dword [ebp - 0x63c], eax
mov edx, dword [ebp - 0x63c]
mov dword [ebp - 0x640], edx
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x640]
push eax
lea ecx, [ebp - 0x5f0]
push ecx
call fcn.004dcd93
mov dword [ebp - 0x644], eax
mov edx, dword [ebp - 0x644]
mov dword [ebp - 0x648], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x648]
push eax
lea ecx, [ebp - 0x5f4]
push ecx
call fcn.004dcd2d
mov dword [ebp - 0x64c], eax
mov edx, dword [ebp - 0x64c]
mov dword [ebp - 0x650], edx
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x650]
push eax
lea ecx, [ebp - 0x68]
call fcn.004dcc37
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x5f4]
call fcn.004dcafe
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x5f0]
call fcn.004dcafe
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x5ec]
call fcn.004dcafe
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x5e8]
call fcn.004dcafe
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x5e4]
call fcn.004dcafe
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x5e0]
call fcn.004dcafe
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5dc]
call fcn.004dcafe
lea ecx, [ebp - 0x68]
push ecx
mov ecx, dword [ebp + 8]
call fcn.004dc873
mov edx, dword [ebp - 0x5fc]
or edx, 1
mov dword [ebp - 0x5fc], edx
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x64]
call fcn.004dcafe
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x60]
call fcn.004dcafe
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
call fcn.004dcafe
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.004dcafe
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x68]
call fcn.004dcafe
mov eax, dword [ebp + 8]
wait
jmp 0x4434cb
cmp dword [ebp + 0xc], 1
jne 0x442e5a
push 0x553eb4
lea ecx, [ebp - 0x124]
call fcn.004dcb6c
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x148], 0x20
lea eax, [ebp - 0x148]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov ecx, dword [ebp - 0x140]
mov dword [ebp - 0x128], ecx
mov edx, dword [ebp - 0x128]
shr edx, 0xa
shr edx, 0xa
mov dword [ebp - 0x128], edx
mov eax, dword [ebp - 0x128]
push eax
push str._ldMB
lea ecx, [ebp - 0x124]
push ecx
call fcn.004d2181
add esp, 0xc
lea edx, [ebp - 0x124]
push edx
mov ecx, dword [ebp + 8]
call fcn.004dc873
mov eax, dword [ebp - 0x5fc]
or al, 1
mov dword [ebp - 0x5fc], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x124]
call fcn.004dcafe
mov eax, dword [ebp + 8]
wait
jmp 0x4434cb
cmp dword [ebp + 0xc], 2
jne 0x442fd9
lea ecx, [ebp - 0x554]
call fcn.00445a20
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x54c], 0x400
lea ecx, [ebp - 0x558]
call fcn.00401590
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x550], str.HARDWAREDESCRIPTIONSystemCentralProcessor0
push 0xf003f
mov ecx, dword [ebp - 0x550]
push ecx
push 0x80000002
lea ecx, [ebp - 0x554]
call fcn.00445aa0
test eax, eax
jne 0x442f97
mov dword [ebp - 0x55c], str.ProcessorNameString
lea edx, [ebp - 0x54c]
push edx
mov eax, dword [ebp - 0x55c]
push eax
lea ecx, [ebp - 0x548]
push ecx
lea ecx, [ebp - 0x554]
call fcn.00445af0
test eax, eax
jne 0x442f54
lea edx, [ebp - 0x548]
push edx
lea ecx, [ebp - 0x558]
call fcn.004dcc87
push 0x553eb8
push 0x545ba0
lea ecx, [ebp - 0x558]
call fcn.004d1a22
lea eax, [ebp - 0x558]
push eax
mov ecx, dword [ebp + 8]
call fcn.004dc873
mov ecx, dword [ebp - 0x5fc]
or ecx, 1
mov dword [ebp - 0x5fc], ecx
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x558]
call fcn.004dcafe
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x554]
call fcn.00445a40
mov eax, dword [ebp + 8]
wait
jmp 0x4434cb
push 0x545ba4
mov ecx, dword [ebp + 8]
call fcn.004dcb6c
mov edx, dword [ebp - 0x5fc]
or edx, 1
mov dword [ebp - 0x5fc], edx
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x558]
call fcn.004dcafe
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x554]
call fcn.00445a40
mov eax, dword [ebp + 8]
wait
jmp 0x4434cb
push str.CPU
mov ecx, dword [ebp + 8]
call fcn.004dcb6c
mov eax, dword [ebp - 0x5fc]
or al, 1
mov dword [ebp - 0x5fc], eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x558]
call fcn.004dcafe
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x554]
call fcn.00445a40
mov eax, dword [ebp + 8]
wait
jmp 0x4434cb
cmp dword [ebp + 0xc], 3
jne 0x443413
mov dword [ebp - 0x5b4], 0
mov dword [ebp - 0x5a8], 0
mov dword [ebp - 0x56c], 0
mov dword [ebp - 0x568], 0
lea ecx, [ebp - 0x578]
call fcn.00401590
mov byte [ebp - 4], 0x14
push 0x553ebc
lea ecx, [ebp - 0x5b0]
call fcn.004dcb6c
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x5a4]
call fcn.00401590
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x580]
call fcn.00401590
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x570], 0
mov dword [ebp - 0x590], 0
mov byte [ebp - 0x57c], 0x41
jmp 0x443078
mov cl, byte [ebp - 0x57c]
add cl, 1
mov byte [ebp - 0x57c], cl
movsx edx, byte [ebp - 0x57c]
cmp edx, 0x5a
jg 0x443176
movsx eax, byte [ebp - 0x57c]
push eax
push 0x545bb4
lea ecx, [ebp - 0x578]
push ecx
call fcn.004d2181
add esp, 0xc
lea ecx, [ebp - 0x578]
call fcn.00458a80
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
cmp eax, 3
jne 0x4430e1
lea edx, [ebp - 0x578]
push edx
lea ecx, [ebp - 0x5b0]
call fcn.004dcf16
mov eax, dword [ebp - 0x5a8]
add eax, 1
mov dword [ebp - 0x5a8], eax
jmp 0x443171
lea ecx, [ebp - 0x578]
call fcn.00458a80
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
cmp eax, 5
jne 0x44312a
lea ecx, [ebp - 0x578]
push ecx
lea ecx, [ebp - 0x5b0]
call fcn.004dcf16
mov edx, dword [ebp - 0x5a8]
add edx, 1
mov dword [ebp - 0x5a8], edx
mov eax, dword [ebp - 0x56c]
add eax, 1
mov dword [ebp - 0x56c], eax
jmp 0x443171
lea ecx, [ebp - 0x578]
call fcn.00458a80
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
cmp eax, 2
jne 0x443171
lea ecx, [ebp - 0x578]
push ecx
lea ecx, [ebp - 0x5b0]
call fcn.004dcf16
mov edx, dword [ebp - 0x5a8]
add edx, 1
mov dword [ebp - 0x5a8], edx
mov eax, dword [ebp - 0x568]
add eax, 1
mov dword [ebp - 0x568], eax
jmp 0x443069
mov dword [ebp - 0x5a0], 0
mov dword [ebp - 0x5ac], 0
jmp 0x44319b
mov ecx, dword [ebp - 0x5ac]
add ecx, 1
mov dword [ebp - 0x5ac], ecx
mov edx, dword [ebp - 0x5ac]
cmp edx, dword [ebp - 0x5a8]
jge 0x44335d
push 2
mov eax, dword [ebp - 0x5a0]
push eax
lea ecx, [ebp - 0x5f8]
push ecx
lea ecx, [ebp - 0x5b0]
call fcn.004d1bf9
mov dword [ebp - 0x654], eax
mov edx, dword [ebp - 0x654]
mov dword [ebp - 0x658], edx
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x658]
push eax
lea ecx, [ebp - 0x5a4]
call fcn.004dcc37
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x5f8]
call fcn.004dcafe
lea ecx, [ebp - 0x5a4]
call fcn.00458a80
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
mov dword [ebp - 0x5bc], eax
lea ecx, [ebp - 0x59c]
push ecx
lea edx, [ebp - 0x564]
push edx
lea eax, [ebp - 0x58c]
push eax
lea ecx, [ebp - 0x5a4]
call fcn.00458a80
push eax
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExA]
cmp dword [ebp - 0x5b4], 0
je 0x443280
lea ecx, [ebp - 0x5c0]
call fcn.00401590
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x5b4]
push ecx
push str.GetDiskFreeSpace___error_d
lea edx, [ebp - 0x5c0]
push edx
call fcn.004d2181
add esp, 0xc
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x5c0]
call fcn.004dcafe
push 0
push 0x400
mov eax, dword [ebp - 0x588]
push eax
mov ecx, dword [ebp - 0x58c]
push ecx
call fcn.00473440
push 0
push 0x400
push edx
push eax
call fcn.00473440
mov dword [ebp - 0x594], eax
push 0
push 0x400
mov edx, dword [ebp - 0x560]
push edx
mov eax, dword [ebp - 0x564]
push eax
call fcn.00473440
push 0
push 0x400
push edx
push eax
call fcn.00473440
mov dword [ebp - 0x5b8], eax
mov ecx, dword [ebp - 0x5b8]
sub ecx, dword [ebp - 0x594]
mov dword [ebp - 0x65c], ecx
fild dword [ebp - 0x65c]
fidiv dword [ebp - 0x5b8]
fmul dword [0x50c4d8]
call fcn.0047340c
mov dword [ebp - 0x584], eax
mov edx, 0x64
sub edx, dword [ebp - 0x584]
mov dword [ebp - 0x574], edx
cmp dword [ebp - 0x5bc], 3
jne 0x443349
mov eax, dword [ebp - 0x570]
add eax, dword [ebp - 0x5b8]
mov dword [ebp - 0x570], eax
mov ecx, dword [ebp - 0x590]
add ecx, dword [ebp - 0x594]
mov dword [ebp - 0x590], ecx
mov edx, dword [ebp - 0x5a0]
add edx, 2
mov dword [ebp - 0x5a0], edx
jmp 0x44318c
mov eax, dword [ebp - 0x590]
cdq
and edx, 0x3ff
add eax, edx
sar eax, 0xa
push eax
mov eax, dword [ebp - 0x570]
sub eax, dword [ebp - 0x590]
cdq
and edx, 0x3ff
add eax, edx
sar eax, 0xa
push eax
mov eax, dword [ebp - 0x570]
cdq
and edx, 0x3ff
add eax, edx
sar eax, 0xa
push eax
push str._dGB
lea eax, [ebp - 0x578]
push eax
call fcn.004d2181
add esp, 0x14
lea ecx, [ebp - 0x578]
push ecx
mov ecx, dword [ebp + 8]
call fcn.004dc873
mov edx, dword [ebp - 0x5fc]
or edx, 1
mov dword [ebp - 0x5fc], edx
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x580]
call fcn.004dcafe
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x5a4]
call fcn.004dcafe
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x5b0]
call fcn.004dcafe
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x578]
call fcn.004dcafe
mov eax, dword [ebp + 8]
wait
jmp 0x4434cb
cmp dword [ebp + 0xc], 4
jne 0x44349d
lea ecx, [ebp - 0x5c8]
call fcn.00401590
mov byte [ebp - 4], 0x1a
push 0
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [ebp - 0x5cc], eax
push 1
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [ebp - 0x5c4], eax
mov eax, dword [ebp - 0x5c4]
push eax
mov ecx, dword [ebp - 0x5cc]
push ecx
push 0x545bdc
lea edx, [ebp - 0x5c8]
push edx
call fcn.004d2181
add esp, 0x10
lea eax, [ebp - 0x5c8]
push eax
mov ecx, dword [ebp + 8]
call fcn.004dc873
mov ecx, dword [ebp - 0x5fc]
or ecx, 1
mov dword [ebp - 0x5fc], ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x5c8]
call fcn.004dcafe
mov eax, dword [ebp + 8]
wait
jmp 0x4434cb
jmp 0x4434a5
mov dword [ebp - 4], 0
push 0x545be4
mov ecx, dword [ebp + 8]
call fcn.004dcb6c
mov edx, dword [ebp - 0x5fc]
or edx, 1
mov dword [ebp - 0x5fc], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8