Function at 0x438150
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5eea30
mov eax, dword fs:[0]
push eax
sub esp, 0x4b8
mov eax, dword [0x65b4e4]
xor eax, ebp
mov dword [ebp - 0x2c], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x484], ecx
mov ecx, dword [ebp - 0x484]
call fcn.004a3ab0
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
call fcn.00422690
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x439913
mov ecx, dword [ebp - 0x14]
call fcn.00508940
cmp eax, 1
jne 0x4396ca
mov ecx, dword [ebp - 0x10]
call fcn.00426240
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x439629
mov eax, dword [ebp - 0x18]
push eax
lea ecx, [ebp - 0x48]
call fcn.0040bf50
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419130
mov byte [ebp - 4], 1
push 0x623c00
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x28]
call fcn.004fcbe0
lea edx, [ebp - 0x48]
push edx
call fcn.00439930
mov ecx, eax
call fcn.00402220
push str.msgbase64
lea ecx, [ebp - 0x64]
call fcn.0040bf50
mov byte [ebp - 4], 2
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x28]
call fcn.004fb4b0
test eax, eax
je 0x4382b2
lea ecx, [ebp - 0x64]
call fcn.004068e0
test eax, eax
jbe 0x4382b2
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0xa0]
push edx
lea ecx, [ebp - 0x81]
call fcn.0052ac00
mov byte [ebp - 4], 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x328], esp
push 0x60a0bb
call fcn.0040bf50
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x48c], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa0]
call fcn.0040bf30
push eax
push 0
push 0x623c10
call fcn.00402e50
mov byte [ebp - 4], 3
mov ecx, eax
call fcn.00428da0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xa0]
call fcn.0040c050
push 0x623c18
lea ecx, [ebp - 0x80]
call fcn.0040bf50
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x80]
push ecx
lea ecx, [ebp - 0x28]
call fcn.004fb4b0
test eax, eax
je 0x43955b
push str.debug
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x43834d
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xa1]
call fcn.0043dd00
mov dword [ebp - 0x32c], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x32c]
jmp 0x439916
push str.allversion
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x4383c3
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xa2]
call fcn.00451450
mov dword [ebp - 0x330], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x330]
jmp 0x439916
push str.cpuuse
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x438439
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xa3]
call fcn.0043d430
mov dword [ebp - 0x334], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x334]
jmp 0x439916
push str.getfile
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x4384af
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xa4]
call fcn.004438a0
mov dword [ebp - 0x338], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x338]
jmp 0x439916
push str.getdir
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x438525
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xa5]
call fcn.0043fb00
mov dword [ebp - 0x33c], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x33c]
jmp 0x439916
push str.execcmd
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x43859b
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xa6]
call fcn.00442990
mov dword [ebp - 0x340], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x340]
jmp 0x439916
push str.rename
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x438611
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xa7]
call fcn.0044cc30
mov dword [ebp - 0x344], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x344]
jmp 0x439916
push str.update
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x438687
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xa8]
call fcn.00442db0
mov dword [ebp - 0x348], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x348]
jmp 0x439916
push str.onlyid
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x4386fd
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xa9]
call fcn.0043f680
mov dword [ebp - 0x34c], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x34c]
jmp 0x439916
push str.prclist
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x438773
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xaa]
call fcn.0044b870
mov dword [ebp - 0x350], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x350]
jmp 0x439916
push str.svclist
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x4387e9
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xab]
call fcn.00449650
mov dword [ebp - 0x354], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x354]
jmp 0x439916
push str.ntuser
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x43885f
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xac]
call fcn.00449ef0
mov dword [ebp - 0x358], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x358]
jmp 0x439916
push str.ntlogon
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x4388d5
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xad]
call fcn.00449070
mov dword [ebp - 0x35c], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x35c]
jmp 0x439916
push str.dlllist
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x43894b
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xae]
call fcn.00440f10
mov dword [ebp - 0x360], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x360]
jmp 0x439916
push str.dllexclude
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x4389c1
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xaf]
call fcn.00440150
mov dword [ebp - 0x364], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x364]
jmp 0x439916
push str.ntevent
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x438a37
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xb0]
call fcn.00448930
mov dword [ebp - 0x368], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x368]
jmp 0x439916
push str.netborder
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x438a66
push 0
push 0
call fcn.00439ab0
mov ecx, eax
call fcn.00437ed0
jmp 0x439556
push str.uninspatch
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x438adc
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xb1]
call fcn.004505c0
mov dword [ebp - 0x36c], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x36c]
jmp 0x439916
push str.netstat
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x438b52
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xb2]
call fcn.004483b0
mov dword [ebp - 0x370], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x370]
jmp 0x439916
push str.hardware
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x438bc8
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xb3]
call fcn.00444cc0
mov dword [ebp - 0x374], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x374]
jmp 0x439916
push str.software
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x438c3e
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xb4]
call fcn.0044efe0
mov dword [ebp - 0x378], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x378]
jmp 0x439916
push str.policy
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x438cb4
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xb5]
call fcn.0044b2f0
mov dword [ebp - 0x37c], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x37c]
jmp 0x439916
push str.module
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x438d2a
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xb6]
call fcn.00447260
mov dword [ebp - 0x380], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x380]
jmp 0x439916
push str.message
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x438da0
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xb7]
call fcn.004477f0
mov dword [ebp - 0x384], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x384]
jmp 0x439916
push str.msgex
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x438e16
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xb8]
call fcn.00447c70
mov dword [ebp - 0x388], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x388]
jmp 0x439916
push str.ipmacbind
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x438e8c
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xb9]
call fcn.00445220
mov dword [ebp - 0x38c], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x38c]
jmp 0x439916
push str.changeip
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x438f02
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xba]
call fcn.0043a140
mov dword [ebp - 0x390], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x390]
jmp 0x439916
push str.reginfotovrv
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x438f78
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xbb]
call fcn.0044c020
mov dword [ebp - 0x394], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
mov eax, dword [ebp - 0x394]
jmp 0x439916
push str.outnetwork
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x438faa
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0044ac10
jmp 0x439556
push str.unkillnetexit
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x438fe9
push 0
call fcn.00419750
mov ecx, eax
call fcn.004ac390
push 0x64
call fcn.00506ab0
add esp, 4
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x623d40
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x439010
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push str.screen
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x439042
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xbd]
call fcn.0044d400
jmp 0x439556
push str.driver
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x439074
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xbe]
call fcn.00442000
jmp 0x439556
push str.dump
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x4390a6
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xbf]
call fcn.00446e30
jmp 0x439556
push str.down
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x4390d8
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xc0]
call fcn.00441840
jmp 0x439556
push str.delfile
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x43910a
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xc1]
call fcn.0043e170
jmp 0x439556
push str.scr_view
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x43913c
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xc2]
call fcn.004516d0
jmp 0x439556
push str.scr_ctrl
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x43916e
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xc3]
call fcn.004516d0
jmp 0x439556
push str.destroyfile
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x4391a0
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xc4]
call fcn.0043e740
jmp 0x439556
push str.setdenyall
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x4391d2
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xc5]
call fcn.0044e4d0
jmp 0x439556
push str.stopprotect
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x439204
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xc6]
call fcn.0044f7a0
jmp 0x439556
push str.killnet
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x439236
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xc7]
call fcn.00445c00
jmp 0x439556
push str.unkillnet
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x439268
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xc8]
call fcn.004460d0
jmp 0x439556
push str.memmonitor
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x43929a
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xc9]
call fcn.00446b30
jmp 0x439556
push str.security_config
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x4392cc
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xca]
call fcn.0044df70
jmp 0x439556
push str.shutdown
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x4392fe
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xcb]
call fcn.0044e760
jmp 0x439556
push str.unlockaction
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x439330
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xcc]
call fcn.00446810
jmp 0x439556
push str.uninstall
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x439362
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xcd]
call fcn.0044f9c0
jmp 0x439556
push str.updatepolicy
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x439394
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xce]
call fcn.00450b50
jmp 0x439556
push 0x623e14
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x4393c6
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xcf]
call fcn.004430d0
jmp 0x439556
push str.killnetstatus
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x4393f8
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xd0]
call fcn.004465a0
jmp 0x439556
push str.setvpn
lea ecx, [ebp - 0x80]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x43942a
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xd1]
call fcn.00450d70
jmp 0x439556
push 1
push 2
lea ecx, [ebp - 0x154]
call fcn.0040b160
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3c0]
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.00426260
mov dword [ebp - 0x490], eax
mov edx, dword [ebp - 0x490]
mov dword [ebp - 0x494], edx
mov byte [ebp - 4], 7
lea eax, [ebp - 0x3dc]
push eax
mov ecx, dword [ebp - 0x494]
call fcn.00509a60
mov dword [ebp - 0x498], eax
mov ecx, dword [ebp - 0x498]
mov dword [ebp - 0x49c], ecx
mov byte [ebp - 4], 8
lea edx, [ebp - 0x80]
push edx
push 0x623e30
mov eax, dword [ebp - 0x49c]
push eax
push 0x623e44
lea ecx, [ebp - 0x154]
push ecx
call fcn.00409c80
add esp, 8
push eax
call fcn.00409360
add esp, 8
push eax
call fcn.00409c80
add esp, 8
push eax
call fcn.00409360
add esp, 8
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x3dc]
call fcn.0040c050
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3c0]
call fcn.00508420
lea edx, [ebp - 0x3f8]
push edx
lea ecx, [ebp - 0x154]
call fcn.00409610
mov dword [ebp - 0x4a0], eax
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x4a4], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x4a4]
call fcn.0040bf30
push eax
push 0x623e4c
push 0x188
push 0x623e6c
push 0x15
call fcn.00409980
mov ecx, eax
call fcn.004fa910
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3f8]
call fcn.0040c050
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x154]
call fcn.00409ef0
jmp 0x4395f1
push 1
push 2
lea ecx, [ebp - 0x1d4]
call fcn.0040b160
mov byte [ebp - 4], 0xa
push 0x623e80
lea ecx, [ebp - 0x1d4]
push ecx
call fcn.00409c80
add esp, 8
lea edx, [ebp - 0x414]
push edx
lea ecx, [ebp - 0x1d4]
call fcn.00409610
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x4ac], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x4ac]
call fcn.0040bf30
push eax
push 0x623e94
push 0x18d
push 0x623eb4
push 0x15
call fcn.00409980
mov ecx, eax
call fcn.004fa910
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x414]
call fcn.0040c050
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1d4]
call fcn.00409ef0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040c050
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040c050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040c050
jmp 0x4396c5
push 1
push 2
lea ecx, [ebp - 0x254]
call fcn.0040b160
mov dword [ebp - 4], 0xc
push 0x623ec8
lea ecx, [ebp - 0x254]
push ecx
call fcn.00409c80
add esp, 8
lea edx, [ebp - 0x430]
push edx
lea ecx, [ebp - 0x254]
call fcn.00409610
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x4b4], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x4b4]
call fcn.0040bf30
push eax
push 0x623ed8
push 0x192
push 0x623ef8
push 0x15
call fcn.00409980
mov ecx, eax
call fcn.004fa910
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x430]
call fcn.0040c050
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x254]
call fcn.00409ef0
jmp 0x439913
mov ecx, dword [ebp - 0x10]
call fcn.00426240
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
je 0x439874
mov ecx, dword [ebp - 0x258]
push ecx
lea ecx, [ebp - 0x284]
call fcn.0040bf50
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x268]
call fcn.00419130
mov byte [ebp - 4], 0xf
push 0x623f0c
lea edx, [ebp - 0x284]
push edx
lea ecx, [ebp - 0x268]
call fcn.004fcbe0
push 0x623f10
lea ecx, [ebp - 0x2a0]
call fcn.0040bf50
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x2a0]
push eax
lea ecx, [ebp - 0x268]
call fcn.004fb4b0
test eax, eax
je 0x439844
push 0x623f14
lea ecx, [ebp - 0x2a0]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x4397c8
lea ecx, [ebp - 0x268]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0x2a1]
call fcn.004430d0
mov dword [ebp - 0x434], eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2a0]
call fcn.0040c050
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x268]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x284]
call fcn.0040c050
mov eax, dword [ebp - 0x434]
jmp 0x439916
push str.exit
lea ecx, [ebp - 0x2a0]
call fcn.0040bf30
push eax
call fcn.005b14c5
add esp, 8
test eax, eax
jne 0x439844
lea eax, [ebp - 0x464]
push eax
mov ecx, dword [ebp - 0x10]
call fcn.00426260
mov dword [ebp - 0x4b8], eax
mov ecx, dword [ebp - 0x4b8]
mov dword [ebp - 0x4bc], ecx
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x4bc]
call fcn.00508440
push eax
call fcn.00436720
add esp, 4
mov dword [ebp - 0x438], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x464]
call fcn.00508420
cmp dword [ebp - 0x438], 0
je 0x439844
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2a0]
call fcn.0040c050
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x268]
call fcn.00419190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x284]
call fcn.0040c050
push 1
push 2
lea ecx, [ebp - 0x324]
call fcn.0040b160
mov dword [ebp - 4], 0x12
push 0x623f20
lea edx, [ebp - 0x324]
push edx
call fcn.00409c80
add esp, 8
lea eax, [ebp - 0x480]
push eax
lea ecx, [ebp - 0x324]
call fcn.00409610
mov dword [ebp - 0x4c0], eax
mov ecx, dword [ebp - 0x4c0]
mov dword [ebp - 0x4c4], ecx
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x4c4]
call fcn.0040bf30
push eax
push str.CCmdP2PCommand::HandleInpute
push 0x1b4
push str..CmdP2PCommand.cpp
push 0xf0000000
call fcn.00409980
mov ecx, eax
call fcn.004fa910
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x480]
call fcn.0040c050
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x324]
call fcn.00409ef0
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x2c]
xor ecx, ebp
call fcn.005b0968
mov esp, ebp
pop ebp
ret