Function at 0x447ec0
Capabilities:
Delete file

Disassembly:
mov eax, 0x561e76
call fcn.0053c1d0
sub esp, 0x240
mov eax, dword [0x5af710]
and dword [ebp - 0x34], 0
push ebx
xor eax, ebp
push esi
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x90]
push edi
push eax
mov dword [ebp - 0x30], ecx
call fcn.004be950
pop ecx
and dword [ebp - 4], 0
cmp dword [0x5b21c0], 0x211
mov edi, 0x572a6c
mov esi, 0x572a3c
mov ebx, 0x572a34
jne 0x4480dd
lea eax, [ebp - 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 1
push 2
lea ecx, [ebp - 0x130]
call fcn.00404a20
mov ecx, dword [ebp - 0x30]
push edi
lea eax, [ebp - 0x70]
push eax
add ecx, 0xc4
mov byte [ebp - 4], 1
call fcn.0042a538
push eax
lea eax, [ebp - 0x6c]
push 0x575204
push eax
mov byte [ebp - 4], 2
call fcn.0042a827
add esp, 0xc
push dword [eax]
mov eax, 0x572a38
push 0x572a4c
push edi
push 0x572a48
push 0x211
push 0x572a40
push dword [ebp - 0x3c]
mov byte [ebp - 4], 3
push esi
push dword [ebp - 0x3e]
push esi
push dword [ebp - 0x40]
push eax
push dword [ebp - 0x42]
push ebx
push dword [ebp - 0x46]
push ebx
push dword [ebp - 0x48]
push eax
push 0x673
push esi
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x38], esp
push str..FunctionEx.cpp
call fcn.00405500
lea eax, [ebp - 0x2c]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 4
jb 0x447fc7
mov eax, dword [eax + 4]
jmp 0x447fca
add eax, 4
push eax
lea eax, [ebp - 0x130]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00402c50
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.00401250
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
mov byte [ebp - 4], 1
call fcn.00401250
lea eax, [ebp - 0x130]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0
call fcn.004028d0
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xe4], 0x572840
call fcn.0054dfcb
mov ecx, dword [ebp - 0x30]
add ecx, 0xc4
push ecx
mov eax, esp
mov dword [ebp - 0x38], esp
push eax
call fcn.0042a538
mov ecx, dword [ebp - 0x30]
call fcn.00446f6b
test eax, eax
je 0x4494bb
mov ecx, dword [ebp - 0x30]
mov eax, dword [ecx + 0x60]
test eax, eax
je 0x44811d
mov ecx, dword [ecx + 0xc]
sub ecx, eax
cmp ecx, 0xea60
jbe 0x448664
cmp dword [0x5b21c0], 0x211
jne 0x4482b7
lea eax, [ebp - 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 1
push 2
lea ecx, [ebp - 0x130]
call fcn.00404a20
push edi
push 0x5751dc
push 0x572a4c
push edi
push 0x572a48
push 0x211
push 0x572a40
push dword [ebp - 0x3c]
mov eax, 0x572a38
push esi
push dword [ebp - 0x3e]
mov byte [ebp - 4], 5
push esi
push dword [ebp - 0x40]
push eax
push dword [ebp - 0x42]
push ebx
push dword [ebp - 0x46]
push ebx
push dword [ebp - 0x48]
push eax
push 0x67a
push esi
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x38], esp
push str..FunctionEx.cpp
call fcn.00405500
lea eax, [ebp - 0x2c]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 6
jb 0x4481b7
mov eax, dword [eax + 4]
jmp 0x4481ba
add eax, 4
push eax
lea eax, [ebp - 0x130]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov byte [ebp - 4], 5
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00402c50
lea eax, [ebp - 0x130]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0
call fcn.004028d0
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xe4], 0x572840
call fcn.0054dfcb
push 0
call fcn.00444772
pop ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0xc4
test eax, eax
jl 0x44846f
push 0
call fcn.004293f8
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ecx + 0xac]
cmp eax, ecx
je 0x4482f6
mov eax, dword [ebp - 0x30]
and dword [eax + 0xb8], 0
and dword [eax + 0xbc], 0
mov ecx, dword [ebp - 0x30]
push 0
add ecx, 0xc4
call fcn.004293f8
mov ecx, dword [ebp - 0x30]
mov byte [ecx + 0xac], al
cmp dword [0x5b21c0], 0x211
jne 0x448648
lea eax, [ebp - 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 1
push 2
lea ecx, [ebp - 0x130]
call fcn.00404a20
push edi
push 0x5751cc
push 0x572a4c
push edi
push 0x572a48
push 0x211
push 0x572a40
push dword [ebp - 0x3c]
mov eax, 0x572a38
push esi
push dword [ebp - 0x3e]
mov byte [ebp - 4], 7
push esi
push dword [ebp - 0x40]
push eax
push dword [ebp - 0x42]
push ebx
push dword [ebp - 0x46]
push ebx
push dword [ebp - 0x48]
push eax
push 0x686
push esi
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x38], esp
push str..FunctionEx.cpp
call fcn.00405500
lea eax, [ebp - 0x2c]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 8
jb 0x4483a9
mov eax, dword [eax + 4]
jmp 0x4483ac
add eax, 4
push eax
lea eax, [ebp - 0x130]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
mov byte [ebp - 4], 7
jmp 0x448609
push 1
call fcn.004293f8
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ecx + 0xac]
cmp eax, ecx
je 0x448495
mov eax, dword [ebp - 0x30]
and dword [eax + 0xb8], 0
and dword [eax + 0xbc], 0
mov ecx, dword [ebp - 0x30]
push 1
add ecx, 0xc4
call fcn.004293f8
mov ecx, dword [ebp - 0x30]
mov byte [ecx + 0xac], al
cmp dword [0x5b21c0], 0x211
jne 0x448648
lea eax, [ebp - 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 1
push 2
lea ecx, [ebp - 0x130]
call fcn.00404a20
push edi
push 0x5751c0
push 0x572a4c
push edi
push 0x572a48
push 0x211
push 0x572a40
push dword [ebp - 0x3c]
mov eax, 0x572a38
push esi
push dword [ebp - 0x3e]
mov byte [ebp - 4], 9
push esi
push dword [ebp - 0x40]
push eax
push dword [ebp - 0x42]
push ebx
push dword [ebp - 0x46]
push ebx
push dword [ebp - 0x48]
push eax
push 0x692
push esi
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x38], esp
push str..FunctionEx.cpp
call fcn.00405500
lea eax, [ebp - 0x2c]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0xa
jb 0x448548
mov eax, dword [eax + 4]
jmp 0x44854b
add eax, 4
push eax
lea eax, [ebp - 0x130]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
mov byte [ebp - 4], 9
pop ecx
pop ecx
push 0
lea ecx, [ebp - 0x2c]
push 1
call fcn.00402c50
lea eax, [ebp - 0x130]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0
call fcn.004028d0
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xe4], 0x572840
call fcn.0054dfcb
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp dword [eax + 0x60], ecx
jne 0x44865e
mov dword [eax + 0xb8], ecx
mov dword [eax + 0xbc], ecx
mov ecx, dword [eax + 0xc]
mov dword [eax + 0x60], ecx
mov ecx, dword [0x5b096c]
call fcn.00429760
test eax, eax
mov eax, dword [ebp - 0x30]
jne 0x4488cf
mov ecx, dword [eax + 0x10]
mov dword [eax + 0x14], ecx
mov ecx, dword [eax + 0x14]
mov dword [eax + 0x10], ecx
cmp dword [0x5b21c0], 0x211
jne 0x448820
lea eax, [ebp - 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 1
push 2
lea ecx, [ebp - 0x130]
call fcn.00404a20
push edi
push 0x574c80
push 0x572a4c
push edi
push 0x572a48
push 0x211
push 0x572a40
push dword [ebp - 0x3c]
mov eax, 0x572a38
push esi
push dword [ebp - 0x3e]
mov byte [ebp - 4], 0xb
push esi
push dword [ebp - 0x40]
push eax
push dword [ebp - 0x42]
push ebx
push dword [ebp - 0x46]
push ebx
push dword [ebp - 0x48]
push eax
push 0x6a1
push esi
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x38], esp
push str..FunctionEx.cpp
call fcn.00405500
lea eax, [ebp - 0x2c]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0xc
jb 0x448720
mov eax, dword [eax + 4]
jmp 0x448723
add eax, 4
push eax
lea eax, [ebp - 0x130]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov byte [ebp - 4], 0xb
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00402c50
lea eax, [ebp - 0x130]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0
call fcn.004028d0
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xe4], 0x572840
call fcn.0054dfcb
mov esi, dword [ebp - 0x30]
mov ecx, esi
call fcn.004291dd
and dword [esi + 0x60], 0
push 1
push 2
lea ecx, [ebp - 0x1b0]
call fcn.00404a20
mov eax, dword [0x5b096c]
add eax, 0x6c
push str._tracert.lg
push eax
lea eax, [ebp - 0x1b0]
push eax
mov byte [ebp - 4], 0xd
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x1b0]
call fcn.00407320
cmp dword [eax + 0x18], 0x10
jb 0x44887f
mov eax, dword [eax + 4]
jmp 0x448882
add eax, 4
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
push eax
call esi
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00402c50
mov eax, dword [0x5b096c]
push dword [eax + 0x5ac]
call esi
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0
call fcn.004028d0
mov dword [ebp - 0x164], 0x572840
lea ecx, [ebp - 0x164]
call fcn.0054dfcb
xor esi, esi
jmp 0x449663
cmp dword [eax + 0xb8], 0
jne 0x448903
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov dword [eax + 0xb8], ecx
lea eax, [ebp - 0x40]
push eax
call fcn.004189e9
mov edx, dword [eax]
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 0xb0], edx
mov eax, dword [eax + 4]
mov dword [ecx + 0xb4], eax
mov eax, ecx
mov ecx, dword [eax + 0xc]
mov edx, ecx
sub edx, dword [eax + 0xb8]
mov eax, dword [eax + 0xbc]
test eax, eax
mov dword [ebp - 0x70], edx
je 0x448929
sub ecx, eax
cmp ecx, 0xea60
jbe 0x4494ab
mov eax, dword [ebp - 0x70]
xor edx, edx
mov ecx, 0x3e8
div ecx
lea ecx, [ebp - 0x40]
push eax
xor eax, eax
push eax
push eax
push eax
call fcn.0041881c
mov ecx, dword [eax]
mov edx, dword [ebp - 0x30]
mov eax, dword [eax + 4]
add edx, 0xb0
add ecx, dword [edx]
push 1
adc eax, dword [edx + 4]
mov dword [ebp - 0x40], ecx
push 2
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x3c], eax
call fcn.00404a20
mov ecx, dword [0x5b096c]
lea eax, [ebp - 0xb0]
push eax
mov byte [ebp - 4], 0xe
call fcn.004820b0
cmp dword [eax + 0x14], 0
mov ecx, dword [0x5b096c]
mov byte [ebp - 4], 0xf
jne 0x4489c2
lea eax, [ebp - 0x38]
push eax
call fcn.004832c0
push dword [eax]
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x34], 1
call fcn.00405500
mov dword [ebp - 0x6c], eax
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x34], 3
jmp 0x4489dc
lea eax, [ebp - 0x2c]
push eax
call fcn.004820b0
mov dword [ebp - 0x6c], eax
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x34], 4
push str._Y__m__d__H:_M:_S
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x40]
call fcn.0041916d
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x30]
push str._Y__m__d__H:_M:_S
lea eax, [ebp - 0x80]
push eax
add ecx, 0xb0
mov dword [ebp - 4], 0x13
call fcn.0041916d
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x88]
push eax
add ecx, 0xc4
mov byte [ebp - 4], 0x14
call fcn.0042a538
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x94]
push eax
mov byte [ebp - 4], 0x15
call fcn.004be950
pop ecx
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ecx]
mov eax, dword [eax]
mov dword [ebp - 0x74], ecx
mov ecx, dword [ebp - 0x78]
mov ecx, dword [ecx]
mov dword [ebp - 0x78], ecx
mov ecx, dword [ebp - 0x7c]
mov ecx, dword [ecx]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x7c], ecx
xor edx, edx
mov ecx, 0xea60
div ecx
push edi
mov byte [ebp - 4], 0x16
push eax
mov eax, 0x572bf8
push eax
push str.Standing
push edi
push dword [ebp - 0x74]
push eax
push str.EndTime
push edi
push dword [ebp - 0x78]
push eax
push str.StartTime
push edi
push dword [ebp - 0x6c]
push eax
push str.SysUserName
push edi
push dword [ebp - 0x7c]
push eax
push str.AlarmNetWork
push dword [ebp - 0x8c]
lea eax, [ebp - 0x130]
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.0040b751
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.0040bbec
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, dword [ebp - 0x94]
add ecx, 0xfffffff0
call fcn.00401250
mov ecx, dword [ebp - 0x88]
add ecx, 0xfffffff0
call fcn.00401250
mov ecx, dword [ebp - 0x80]
add ecx, 0xfffffff0
call fcn.00401250
mov ecx, dword [ebp - 0x84]
add ecx, 0xfffffff0
call fcn.00401250
test byte [ebp - 0x34], 4
je 0x448ba4
and dword [ebp - 0x34], 0xfffffffb
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00402c50
test byte [ebp - 0x34], 2
je 0x448bba
and dword [ebp - 0x34], 0xfffffffd
push 0
push 1
lea ecx, [ebp - 0x68]
call fcn.00402c50
test byte [ebp - 0x34], 1
mov dword [ebp - 4], 0xf
je 0x448bd2
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
call fcn.00401250
push 0
push 1
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0xe
call fcn.00402c50
push 1
push 4
push 0x31
call fcn.004338e1
add esp, 0xc
mov dword [ebp - 0x34], eax
test eax, eax
mov byte [ebp - 4], 0x17
jne 0x448d92
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 1
push 2
lea ecx, [ebp - 0x1b0]
call fcn.00404a20
push edi
push 0x572aa0
push 0x572a4c
push edi
push 0x572a48
push 0x10000000
push 0x572a40
push dword [ebp - 0x50]
mov eax, 0x572a38
push esi
push dword [ebp - 0x52]
mov byte [ebp - 4], 0x18
push esi
push dword [ebp - 0x54]
push eax
push dword [ebp - 0x56]
push ebx
push dword [ebp - 0x5a]
push ebx
push dword [ebp - 0x5c]
push eax
push 0x6c6
push esi
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x38], esp
push str..FunctionEx.cpp
call fcn.00405500
lea eax, [ebp - 0xb0]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x19
jb 0x448c8f
mov eax, dword [eax + 4]
jmp 0x448c92
add eax, 4
push eax
lea eax, [ebp - 0x1b0]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov byte [ebp - 4], 0x18
push 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.00402c50
lea eax, [ebp - 0x1b0]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x17
call fcn.004028d0
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x164], 0x572840
call fcn.0054dfcb
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x130]
call fcn.00407320
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x1a
jb 0x448db3
mov eax, dword [eax + 4]
jmp 0x448db6
add eax, 4
mov ecx, dword [ebp - 0x34]
push eax
call fcn.0040e73e
neg eax
sbb al, al
push 0
inc al
push 1
lea ecx, [ebp - 0xb0]
mov byte [ebp - 0x49], al
mov byte [ebp - 4], 0x17
call fcn.00402c50
cmp byte [ebp - 0x49], 0
je 0x448fb1
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 1
push 2
lea ecx, [ebp - 0x1b0]
call fcn.00404a20
push edi
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x1b
call fcn.00407320
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x1c
jb 0x448e21
mov eax, dword [eax + 4]
jmp 0x448e24
add eax, 4
push eax
push 0x572a4c
push edi
push 0x572a48
push 0x10000000
push 0x572a40
push dword [ebp - 0x50]
mov eax, 0x572a38
push esi
push dword [ebp - 0x52]
push esi
push dword [ebp - 0x54]
push eax
push dword [ebp - 0x56]
push ebx
push dword [ebp - 0x5a]
push ebx
push dword [ebp - 0x5c]
push eax
push 0x6cb
push esi
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x38], esp
push str..FunctionEx.cpp
call fcn.00405500
lea eax, [ebp - 0xb0]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x1d
jb 0x448e8f
mov eax, dword [eax + 4]
jmp 0x448e92
add eax, 4
push eax
lea eax, [ebp - 0x1b0]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.00402c50
push 0
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1b
call fcn.00402c50
lea eax, [ebp - 0x1b0]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x17
call fcn.004028d0
mov esi, 0x572840
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x164], esi
call fcn.0054dfcb
mov ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x4491d7
push 1
jmp 0x4491d2
mov eax, dword [ebp - 0x30]
mov al, byte [eax + 0xac]
cmp al, 6
jae 0x44921d
lea eax, [ebp - 0x2c]
push eax
call fcn.0042c0f9
pop ecx
cmp dword [ebp - 0x14], 0x10
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], 0x1e
jae 0x448fdc
lea eax, [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
push eax
call fcn.0040e73e
test eax, eax
jne 0x4491f7
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.0040b751
pop ecx
pop ecx
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 1
push 2
lea ecx, [ebp - 0x1b0]
call fcn.00404a20
push edi
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x1f
call fcn.00407320
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x20
jb 0x44903e
mov eax, dword [eax + 4]
jmp 0x449041
add eax, 4
push eax
push 0x572a4c
push edi
push 0x572a48
push 0x10000000
push 0x572a40
push dword [ebp - 0x50]
mov eax, 0x572a38
push esi
push dword [ebp - 0x52]
push esi
push dword [ebp - 0x54]
push eax
push dword [ebp - 0x56]
push ebx
push dword [ebp - 0x5a]
push ebx
push dword [ebp - 0x5c]
push eax
push 0x6d6
push esi
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x38], esp
push str..FunctionEx.cpp
call fcn.00405500
lea eax, [ebp - 0xb0]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x21
jb 0x4490ac
mov eax, dword [eax + 4]
jmp 0x4490af
add eax, 4
push eax
lea eax, [ebp - 0x1b0]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
xor ebx, ebx
push ebx
xor edi, edi
inc edi
push edi
lea ecx, [ebp - 0xb0]
call fcn.00402c50
push ebx
push edi
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 0x1f
call fcn.00402c50
lea eax, [ebp - 0x1b0]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x1e
call fcn.004028d0
mov esi, 0x572840
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x164], esi
call fcn.0054dfcb
push ebx
push edi
lea ecx, [ebp - 0x2c]
call fcn.00402c50
mov ecx, dword [ebp - 0x34]
cmp ecx, ebx
je 0x4491d7
push edi
call fcn.00428dd5
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0
call fcn.004028d0
mov dword [ebp - 0xe4], esi
lea ecx, [ebp - 0xe4]
jmp 0x4488c3
mov eax, dword [ebp - 0x34]
xor esi, esi
push esi
push eax
mov dword [ebp - 0x34], esi
call fcn.00405430
mov ecx, eax
call fcn.0042d528
push esi
push 1
lea ecx, [ebp - 0x2c]
call fcn.00402c50
jmp 0x44946d
cmp al, 0xb
ja 0x44923e
mov ecx, dword [ebp - 0x30]
push 0
push 0x32
push dword [ebp - 0x34]
call fcn.00429ae8
push eax
call fcn.0042d74d
add esp, 0x10
jmp 0x44946d
push 1
push 2
lea ecx, [ebp - 0x24c]
call fcn.00404a20
mov eax, dword [ebp - 0x30]
mov al, byte [eax + 0xac]
mov byte [ebp - 0x38], al
lea eax, [ebp - 0x24c]
push 0x57519c
push eax
mov byte [ebp - 4], 0x22
call fcn.00403980
push dword [ebp - 0x38]
push eax
call fcn.0042a385
add esp, 0x10
cmp dword [0x5b21c0], 0x211
jne 0x449449
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 1
push 2
lea ecx, [ebp - 0x1b0]
call fcn.00404a20
push edi
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], 0x23
call fcn.00407320
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x24
jb 0x4492c9
mov eax, dword [eax + 4]
jmp 0x4492cc
add eax, 4
push eax
push 0x572a4c
push edi
push 0x572a48
push 0x211
push 0x572a40
push dword [ebp - 0x50]
mov eax, 0x572a38
push esi
push dword [ebp - 0x52]
push esi
push dword [ebp - 0x54]
push eax
push dword [ebp - 0x56]
push ebx
push dword [ebp - 0x5a]
push ebx
push dword [ebp - 0x5c]
push eax
push 0x6ed
push esi
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x38], esp
push str..FunctionEx.cpp
call fcn.00405500
lea eax, [ebp - 0x1cc]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x25
jb 0x449337
mov eax, dword [eax + 4]
jmp 0x44933a
add eax, 4
push eax
lea eax, [ebp - 0x1b0]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x1cc]
call fcn.00402c50
push 0
push 1
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x23
call fcn.00402c50
lea eax, [ebp - 0x1b0]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x22
call fcn.004028d0
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x164], 0x572840
call fcn.0054dfcb
lea ecx, [ebp - 0x200]
mov byte [ebp - 4], 0x17
call fcn.004028d0
lea ecx, [ebp - 0x200]
mov dword [ebp - 0x200], 0x572840
call fcn.0054dfcb
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0xc]
mov dword [eax + 0xbc], ecx
mov ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x449487
push 1
call fcn.00428dd5
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0
call fcn.004028d0
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xe4], 0x572840
call fcn.0054dfcb
mov ecx, dword [ebp - 0x30]
call fcn.0042eca9
xor esi, esi
inc esi
jmp 0x449663
cmp dword [0x5b21c0], 0x211
jne 0x44965b
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 1
push 2
lea ecx, [ebp - 0x24c]
call fcn.00404a20
push edi
push 0x575188
push 0x572a4c
push edi
push 0x572a48
push 0x211
push 0x572a40
push dword [ebp - 0x50]
mov eax, 0x572a38
push esi
push dword [ebp - 0x52]
mov byte [ebp - 4], 0x26
push esi
push dword [ebp - 0x54]
push eax
push dword [ebp - 0x56]
push ebx
push dword [ebp - 0x5a]
push ebx
push dword [ebp - 0x5c]
push eax
push 0x6f6
push esi
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x38], esp
push str..FunctionEx.cpp
call fcn.00405500
lea eax, [ebp - 0x1cc]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x27
jb 0x449558
mov eax, dword [eax + 4]
jmp 0x44955b
add eax, 4
push eax
lea eax, [ebp - 0x24c]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov byte [ebp - 4], 0x26
push 0
push 1
lea ecx, [ebp - 0x1cc]
call fcn.00402c50
lea eax, [ebp - 0x24c]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0x200]
mov byte [ebp - 4], 0
call fcn.004028d0
lea ecx, [ebp - 0x200]
mov dword [ebp - 0x200], 0x572840
call fcn.0054dfcb
mov eax, dword [ebp - 0x30]
xor esi, esi
mov dword [eax + 0x60], esi
mov ecx, dword [ebp - 0x90]
add ecx, 0xfffffff0
call fcn.00401250
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.0053aaae
leave
ret