Function at 0x41b060
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x80
mov eax, dword [0x449158]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x44d77c]
test eax, eax
jne 0x41eb65
mov ecx, 1
mov edx, 0x44d780
lock cmpxchg dword [edx], ecx
test eax, eax
jne 0x41eb60
push str.DEFAULT
push dword [0x4493e8]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b0cb
push str.DEFAULT
push dword [0x4493e8]
push str.LOG_GROUP_DEFAULT
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.AUDIO_MIXER
push dword [0x4493ec]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b100
push str.AUDIO_MIXER
push dword [0x4493ec]
push str.LOG_GROUP_AUDIO_MIXER
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.AUDIO_MIXER_BUFFER
push dword [0x4493f0]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b135
push str.AUDIO_MIXER_BUFFER
push dword [0x4493f0]
push str.LOG_GROUP_AUDIO_MIXER_BUFFER
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.AUTOLOGON
push dword [0x4493f8]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b16a
push str.AUTOLOGON
push dword [0x4493f8]
push str.LOG_GROUP_AUTOLOGON
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.CFGM
push dword [0x4493fc]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b19f
push str.CFGM
push dword [0x4493fc]
push str.LOG_GROUP_CFGM
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push 0x42513c
push dword [0x449400]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b1d4
push 0x42513c
push dword [0x449400]
push str.LOG_GROUP_CPUM
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.CSAM
push dword [0x449404]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b209
push str.CSAM
push dword [0x449404]
push str.LOG_GROUP_CSAM
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push 0x42514c
push dword [0x449408]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b23e
push 0x42514c
push dword [0x449408]
push str.LOG_GROUP_DBGC
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DBGF
push dword [0x44940c]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b273
push str.DBGF
push dword [0x44940c]
push str.LOG_GROUP_DBGF
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DBGF_INFO
push dword [0x449410]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b2a8
push str.DBGF_INFO
push dword [0x449410]
push str.LOG_GROUP_DBGF_INFO
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DBGG
push dword [0x449414]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b2dd
push str.DBGG
push dword [0x449414]
push str.LOG_GROUP_DBGG
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push 0x425170
push dword [0x449418]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b312
push 0x425170
push dword [0x449418]
push str.LOG_GROUP_DEV
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_AC97
push dword [0x44941c]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b347
push str.DEV_AC97
push dword [0x44941c]
push str.LOG_GROUP_DEV_AC97
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_ACPI
push dword [0x449420]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b37c
push str.DEV_ACPI
push dword [0x449420]
push str.LOG_GROUP_DEV_ACPI
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_APIC
push dword [0x449428]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b3b1
push str.DEV_APIC
push dword [0x449428]
push str.LOG_GROUP_DEV_APIC
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_BUSLOGIC
push dword [0x44942c]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b3e6
push str.DEV_BUSLOGIC
push dword [0x44942c]
push str.LOG_GROUP_DEV_BUSLOGIC
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_DMA
push dword [0x449430]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b41b
push str.DEV_DMA
push dword [0x449430]
push str.LOG_GROUP_DEV_DMA
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_E1000
push dword [0x449438]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b450
push str.DEV_E1000
push dword [0x449438]
push str.LOG_GROUP_DEV_E1000
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_EFI
push dword [0x44943c]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b485
push str.DEV_EFI
push dword [0x44943c]
push str.LOG_GROUP_DEV_EFI
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_EHCI
push dword [0x449440]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b4ba
push str.DEV_EHCI
push dword [0x449440]
push str.LOG_GROUP_DEV_EHCI
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_FDC
push dword [0x449448]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b4ef
push str.DEV_FDC
push dword [0x449448]
push str.LOG_GROUP_DEV_FDC
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_GIM
push dword [0x449450]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b524
push str.DEV_GIM
push dword [0x449450]
push str.LOG_GROUP_DEV_GIM
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_HDA
push dword [0x449458]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b559
push str.DEV_HDA
push dword [0x449458]
push str.LOG_GROUP_DEV_HDA
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_HDA_CODEC
push dword [0x44945c]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b58e
push str.DEV_HDA_CODEC
push dword [0x44945c]
push str.LOG_GROUP_DEV_HDA_CODEC
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_HPET
push dword [0x449460]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b5c3
push str.DEV_HPET
push dword [0x449460]
push str.LOG_GROUP_DEV_HPET
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_IDE
push dword [0x449464]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b5f8
push str.DEV_IDE
push dword [0x449464]
push str.LOG_GROUP_DEV_IDE
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_INIP
push dword [0x449468]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b62d
push str.DEV_INIP
push dword [0x449468]
push str.LOG_GROUP_DEV_INIP
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_KBD
push dword [0x449474]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b662
push str.DEV_KBD
push dword [0x449474]
push str.LOG_GROUP_DEV_KBD
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_LPC
push dword [0x449478]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b697
push str.DEV_LPC
push dword [0x449478]
push str.LOG_GROUP_DEV_LPC
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_LSILOGICSCSI
push dword [0x44947c]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b6cc
push str.DEV_LSILOGICSCSI
push dword [0x44947c]
push str.LOG_GROUP_DEV_LSILOGICSCSI
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_NVME
push dword [0x449480]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b701
push str.DEV_NVME
push dword [0x449480]
push str.LOG_GROUP_DEV_NVME
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_OHCI
push dword [0x449484]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b736
push str.DEV_OHCI
push dword [0x449484]
push str.LOG_GROUP_DEV_OHCI
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_PARALLEL
push dword [0x449488]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b76b
push str.DEV_PARALLEL
push dword [0x449488]
push str.LOG_GROUP_DEV_PARALLEL
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_PC
push dword [0x44948c]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b7a0
push str.DEV_PC
push dword [0x44948c]
push str.LOG_GROUP_DEV_PC
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_PC_ARCH
push dword [0x449490]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b7d5
push str.DEV_PC_ARCH
push dword [0x449490]
push str.LOG_GROUP_DEV_PC_ARCH
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_PC_BIOS
push dword [0x449494]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b80a
push str.DEV_PC_BIOS
push dword [0x449494]
push str.LOG_GROUP_DEV_PC_BIOS
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_PCI
push dword [0x449498]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b83f
push str.DEV_PCI
push dword [0x449498]
push str.LOG_GROUP_DEV_PCI
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_PCI_RAW
push dword [0x44949c]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b874
push str.DEV_PCI_RAW
push dword [0x44949c]
push str.LOG_GROUP_DEV_PCI_RAW
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_PCNET
push dword [0x4494a0]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b8a9
push str.DEV_PCNET
push dword [0x4494a0]
push str.LOG_GROUP_DEV_PCNET
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_PIC
push dword [0x4494a4]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b8de
push str.DEV_PIC
push dword [0x4494a4]
push str.LOG_GROUP_DEV_PIC
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_PIT
push dword [0x4494a8]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b913
push str.DEV_PIT
push dword [0x4494a8]
push str.LOG_GROUP_DEV_PIT
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_RTC
push dword [0x4494b4]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b948
push str.DEV_RTC
push dword [0x4494b4]
push str.LOG_GROUP_DEV_RTC
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_SB16
push dword [0x4494b8]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b97d
push str.DEV_SB16
push dword [0x4494b8]
push str.LOG_GROUP_DEV_SB16
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_SERIAL
push dword [0x4494bc]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b9b2
push str.DEV_SERIAL
push dword [0x4494bc]
push str.LOG_GROUP_DEV_SERIAL
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_SMC
push dword [0x4494c0]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41b9e7
push str.DEV_SMC
push dword [0x4494c0]
push str.LOG_GROUP_DEV_SMC
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_VGA
push dword [0x4494c8]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41ba1c
push str.DEV_VGA
push dword [0x4494c8]
push str.LOG_GROUP_DEV_VGA
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_VIRTIO
push dword [0x4494cc]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41ba51
push str.DEV_VIRTIO
push dword [0x4494cc]
push str.LOG_GROUP_DEV_VIRTIO
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_VIRTIO_NET
push dword [0x4494d0]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41ba86
push str.DEV_VIRTIO_NET
push dword [0x4494d0]
push str.LOG_GROUP_DEV_VIRTIO_NET
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_VMM
push dword [0x4494d4]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41babb
push str.DEV_VMM
push dword [0x4494d4]
push str.LOG_GROUP_DEV_VMM
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_VMM_BACKDOOR
push dword [0x4494d8]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41baf0
push str.DEV_VMM_BACKDOOR
push dword [0x4494d8]
push str.LOG_GROUP_DEV_VMM_BACKDOOR
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_VMM_STDERR
push dword [0x4494dc]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41bb25
push str.DEV_VMM_STDERR
push dword [0x4494dc]
push str.LOG_GROUP_DEV_VMM_STDERR
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_VMSVGA
push dword [0x4494e0]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41bb5a
push str.DEV_VMSVGA
push dword [0x4494e0]
push str.LOG_GROUP_DEV_VMSVGA
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DEV_XHCI
push dword [0x4494e4]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41bb8f
push str.DEV_XHCI
push dword [0x4494e4]
push str.LOG_GROUP_DEV_XHCI
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push 0x4253c0
push dword [0x4494e8]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41bbc4
push 0x4253c0
push dword [0x4494e8]
push str.LOG_GROUP_DIS
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push 0x4253c4
push dword [0x4494ec]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41bbf9
push 0x4253c4
push dword [0x4494ec]
push str.LOG_GROUP_DRV
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_ACPI
push dword [0x4494f0]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41bc2e
push str.DRV_ACPI
push dword [0x4494f0]
push str.LOG_GROUP_DRV_ACPI
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_AUDIO
push dword [0x4494f4]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41bc63
push str.DRV_AUDIO
push dword [0x4494f4]
push str.LOG_GROUP_DRV_AUDIO
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_BLOCK
push dword [0x4494f8]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41bc98
push str.DRV_BLOCK
push dword [0x4494f8]
push str.LOG_GROUP_DRV_BLOCK
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_CHAR
push dword [0x4494fc]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41bccd
push str.DRV_CHAR
push dword [0x4494fc]
push str.LOG_GROUP_DRV_CHAR
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_DISK_INTEGRITY
push dword [0x449504]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41bd02
push str.DRV_DISK_INTEGRITY
push dword [0x449504]
push str.LOG_GROUP_DRV_DISK_INTEGRITY
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_DISPLAY
push dword [0x449508]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41bd37
push str.DRV_DISPLAY
push dword [0x449508]
push str.LOG_GROUP_DRV_DISPLAY
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_FLOPPY
push dword [0x44950c]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41bd6c
push str.DRV_FLOPPY
push dword [0x44950c]
push str.LOG_GROUP_DRV_FLOPPY
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_HOST_AUDIO
push dword [0x449514]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41bda1
push str.DRV_HOST_AUDIO
push dword [0x449514]
push str.LOG_GROUP_DRV_HOST_AUDIO
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_HOST_BASE
push dword [0x449518]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41bdd6
push str.DRV_HOST_BASE
push dword [0x449518]
push str.LOG_GROUP_DRV_HOST_BASE
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_HOST_DVD
push dword [0x44951c]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41be0b
push str.DRV_HOST_DVD
push dword [0x44951c]
push str.LOG_GROUP_DRV_HOST_DVD
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_HOST_FLOPPY
push dword [0x449520]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41be40
push str.DRV_HOST_FLOPPY
push dword [0x449520]
push str.LOG_GROUP_DRV_HOST_FLOPPY
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_HOST_PARALLEL
push dword [0x449524]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41be75
push str.DRV_HOST_PARALLEL
push dword [0x449524]
push str.LOG_GROUP_DRV_HOST_PARALLEL
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_HOST_SERIAL
push dword [0x449528]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41beaa
push str.DRV_HOST_SERIAL
push dword [0x449528]
push str.LOG_GROUP_DRV_HOST_SERIAL
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_INTNET
push dword [0x44952c]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41bedf
push str.DRV_INTNET
push dword [0x44952c]
push str.LOG_GROUP_DRV_INTNET
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_ISO
push dword [0x449530]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41bf14
push str.DRV_ISO
push dword [0x449530]
push str.LOG_GROUP_DRV_ISO
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_KBD_QUEUE
push dword [0x449534]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41bf49
push str.DRV_KBD_QUEUE
push dword [0x449534]
push str.LOG_GROUP_DRV_KBD_QUEUE
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_LWIP
push dword [0x449538]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41bf7e
push str.DRV_LWIP
push dword [0x449538]
push str.LOG_GROUP_DRV_LWIP
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_MINIPORT
push dword [0x44953c]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41bfb3
push str.DRV_MINIPORT
push dword [0x44953c]
push str.LOG_GROUP_DRV_MINIPORT
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_MOUSE_QUEUE
push dword [0x449544]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41bfe8
push str.DRV_MOUSE_QUEUE
push dword [0x449544]
push str.LOG_GROUP_DRV_MOUSE_QUEUE
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_NAMEDPIPE
push dword [0x449548]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c01d
push str.DRV_NAMEDPIPE
push dword [0x449548]
push str.LOG_GROUP_DRV_NAMEDPIPE
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_NAT
push dword [0x44954c]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c052
push str.DRV_NAT
push dword [0x44954c]
push str.LOG_GROUP_DRV_NAT
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_RAW_IMAGE
push dword [0x449550]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c087
push str.DRV_RAW_IMAGE
push dword [0x449550]
push str.LOG_GROUP_DRV_RAW_IMAGE
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_SCSI
push dword [0x449554]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c0bc
push str.DRV_SCSI
push dword [0x449554]
push str.LOG_GROUP_DRV_SCSI
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_SCSIHOST
push dword [0x449558]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c0f1
push str.DRV_SCSIHOST
push dword [0x449558]
push str.LOG_GROUP_DRV_SCSIHOST
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_TCP
push dword [0x44955c]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c126
push str.DRV_TCP
push dword [0x44955c]
push str.LOG_GROUP_DRV_TCP
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_TRANSPORT_ASYNC
push dword [0x449568]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c15b
push str.DRV_TRANSPORT_ASYNC
push dword [0x449568]
push str.LOG_GROUP_DRV_TRANSPORT_ASYNC
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_TUN
push dword [0x44956c]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c190
push str.DRV_TUN
push dword [0x44956c]
push str.LOG_GROUP_DRV_TUN
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_UDPTUNNEL
push dword [0x449574]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c1c5
push str.DRV_UDPTUNNEL
push dword [0x449574]
push str.LOG_GROUP_DRV_UDPTUNNEL
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_USBPROXY
push dword [0x449578]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c1fa
push str.DRV_USBPROXY
push dword [0x449578]
push str.LOG_GROUP_DRV_USBPROXY
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_VBOXHDD
push dword [0x44957c]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c22f
push str.DRV_VBOXHDD
push dword [0x44957c]
push str.LOG_GROUP_DRV_VBOXHDD
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_VD
push dword [0x449580]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c264
push str.DRV_VD
push dword [0x449580]
push str.LOG_GROUP_DRV_VD
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_VRDE_AUDIO
push dword [0x449588]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c299
push str.DRV_VRDE_AUDIO
push dword [0x449588]
push str.LOG_GROUP_DRV_VRDE_AUDIO
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_VSWITCH
push dword [0x44958c]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c2ce
push str.DRV_VSWITCH
push dword [0x44958c]
push str.LOG_GROUP_DRV_VSWITCH
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.DRV_VUSB
push dword [0x449590]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c303
push str.DRV_VUSB
push dword [0x449590]
push str.LOG_GROUP_DRV_VUSB
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push 0x4255f0
push dword [0x449594]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c338
push 0x4255f0
push dword [0x449594]
push str.LOG_GROUP_EM
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push 0x4255f4
push dword [0x449598]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c36d
push 0x4255f4
push dword [0x449598]
push str.LOG_GROUP_FTM
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push 0x4255f8
push dword [0x44959c]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c3a2
push 0x4255f8
push dword [0x44959c]
push str.LOG_GROUP_GIM
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push 0x4255fc
push dword [0x4495a0]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c3d7
push 0x4255fc
push dword [0x4495a0]
push str.LOG_GROUP_GMM
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.GUEST_CONTROL
push dword [0x4495a4]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c40c
push str.GUEST_CONTROL
push dword [0x4495a4]
push str.LOG_GROUP_GUEST_CONTROL
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.GUEST_DND
push dword [0x4495a8]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c441
push str.GUEST_DND
push dword [0x4495a8]
push str.LOG_GROUP_GUEST_DND
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push 0x42561c
push dword [0x4495ac]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c476
push 0x42561c
push dword [0x4495ac]
push str.LOG_GROUP_GUI
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push 0x425620
push dword [0x4495b0]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c4ab
push 0x425620
push dword [0x4495b0]
push str.LOG_GROUP_GVMM
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.HGCM
push dword [0x4495b4]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c4e0
push str.HGCM
push dword [0x4495b4]
push str.LOG_GROUP_HGCM
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.HGSMI
push dword [0x4495b8]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c515
push str.HGSMI
push dword [0x4495b8]
push str.LOG_GROUP_HGSMI
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push 0x425638
push dword [0x4495bc]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c54a
push 0x425638
push dword [0x4495bc]
push str.LOG_GROUP_HM
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push 0x42563c
push dword [0x4495c0]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c57f
push 0x42563c
push dword [0x4495c0]
push str.LOG_GROUP_IEM
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.IEM_RE_NATIVE
push dword [0x4495c8]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c5b4
push str.IEM_RE_NATIVE
push dword [0x4495c8]
push str.LOG_GROUP_IEM_RE_NATIVE
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.IEM_RE_THREADED
push dword [0x4495cc]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c5e9
push str.IEM_RE_THREADED
push dword [0x4495cc]
push str.LOG_GROUP_IEM_RE_THREADED
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.IEM_SVM
push dword [0x4495d0]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c61e
push str.IEM_SVM
push dword [0x4495d0]
push str.LOG_GROUP_IEM_SVM
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.IEM_VMX
push dword [0x4495d8]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c653
push str.IEM_VMX
push dword [0x4495d8]
push str.LOG_GROUP_IEM_VMX
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push 0x425690
push dword [0x4495e0]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c688
push 0x425690
push dword [0x4495e0]
push str.LOG_GROUP_IOM
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push 0x4256ac
push dword [0x4495ec]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c6bd
push 0x4256ac
push dword [0x4495ec]
push str.LOG_GROUP_IPC
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.LWIP
push dword [0x4495f0]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c6f2
push str.LWIP
push dword [0x4495f0]
push str.LOG_GROUP_LWIP
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.LWIP_API_LIB
push dword [0x4495f4]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c727
push str.LWIP_API_LIB
push dword [0x4495f4]
push str.LOG_GROUP_LWIP_API_LIB
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.LWIP_API_MSG
push dword [0x4495f8]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c75c
push str.LWIP_API_MSG
push dword [0x4495f8]
push str.LOG_GROUP_LWIP_API_MSG
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.LWIP_ETHARP
push dword [0x4495fc]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c791
push str.LWIP_ETHARP
push dword [0x4495fc]
push str.LOG_GROUP_LWIP_ETHARP
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.LWIP_ICMP
push dword [0x449600]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c7c6
push str.LWIP_ICMP
push dword [0x449600]
push str.LOG_GROUP_LWIP_ICMP
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.LWIP_IGMP
push dword [0x449604]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c7fb
push str.LWIP_IGMP
push dword [0x449604]
push str.LOG_GROUP_LWIP_IGMP
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.LWIP_INET
push dword [0x449608]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c830
push str.LWIP_INET
push dword [0x449608]
push str.LOG_GROUP_LWIP_INET
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.LWIP_IP4
push dword [0x44960c]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c865
push str.LWIP_IP4
push dword [0x44960c]
push str.LOG_GROUP_LWIP_IP4
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.LWIP_IP4_REASS
push dword [0x449610]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c89a
push str.LWIP_IP4_REASS
push dword [0x449610]
push str.LOG_GROUP_LWIP_IP4_REASS
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.LWIP_IP6
push dword [0x449614]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c8cf
push str.LWIP_IP6
push dword [0x449614]
push str.LOG_GROUP_LWIP_IP6
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.LWIP_MEM
push dword [0x449618]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c904
push str.LWIP_MEM
push dword [0x449618]
push str.LOG_GROUP_LWIP_MEM
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.LWIP_MEMP
push dword [0x44961c]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c939
push str.LWIP_MEMP
push dword [0x44961c]
push str.LOG_GROUP_LWIP_MEMP
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.LWIP_NETIF
push dword [0x449620]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c96e
push str.LWIP_NETIF
push dword [0x449620]
push str.LOG_GROUP_LWIP_NETIF
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.LWIP_PBUF
push dword [0x449624]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c9a3
push str.LWIP_PBUF
push dword [0x449624]
push str.LOG_GROUP_LWIP_PBUF
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.LWIP_RAW
push dword [0x449628]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41c9d8
push str.LWIP_RAW
push dword [0x449628]
push str.LOG_GROUP_LWIP_RAW
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.LWIP_SOCKETS
push dword [0x44962c]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41ca0d
push str.LWIP_SOCKETS
push dword [0x44962c]
push str.LOG_GROUP_LWIP_SOCKETS
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.LWIP_SYS
push dword [0x449630]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41ca42
push str.LWIP_SYS
push dword [0x449630]
push str.LOG_GROUP_LWIP_SYS
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.LWIP_TCP
push dword [0x449634]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41ca77
push str.LWIP_TCP
push dword [0x449634]
push str.LOG_GROUP_LWIP_TCP
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.LWIP_TCPIP
push dword [0x449658]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41caac
push str.LWIP_TCPIP
push dword [0x449658]
push str.LOG_GROUP_LWIP_TCPIP
push str._s_s_expects__s_n
call fcn.00408690
add esp, 0x10
int3
push str.LWIP_TCP_CWND
push dword [0x449638]
call sym.ntTimeSources.exe_nocrt_strcmp
add esp, 8
test eax, eax
je 0x41cae1
mov eax, dword [0x44d77c]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret