Function at 0x464a00
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x6707d0
push 0x5dfbd0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x6164
call fcn.005e00d0
mov eax, dword [0x6aae14]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
xor esi, esi
mov dword [ebp - 0x615c], esi
mov dword [ebp - 0x6164], esi
mov dword [ebp - 0x6140], esi
mov dword [ebp - 0x613c], esi
xor eax, eax
mov word [ebp - 0x18fc], ax
push 0x40e
push esi
lea ecx, [ebp - 0x18fa]
push ecx
call fcn.005dfd60
mov dword [ebp - 0x6158], esi
mov byte [ebp - 0x2a4], 0
push 0x103
push esi
lea edx, [ebp - 0x2a3]
push edx
call fcn.005dfd60
add esp, 0x18
mov dword [ebp - 4], esi
push esi
push 1
push str.MyChngHand
push 1
push esi
call fcn.00507920
mov dword [ebp - 0x613c], eax
cmp eax, esi
je 0x464ac1
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x464b33
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, eax
lea ecx, [ebp - 0x2a4]
push ecx
lea edx, [ebp - 0x6140]
push edx
mov byte [ebp - 0x2a4], 0
call fcn.00534c40
mov edi, eax
add esp, 8
cmp edi, esi
jne 0x464b4d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, ebx
cmp eax, 0x2710
jae 0x464b16
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0x6140]
push ecx
jmp 0x464ad7
cmp edi, esi
jne 0x464b4d
lea edx, [ebp - 0x2a4]
push edx
push str._DCH__NETWORK___s
push 0x6b1620
call fcn.004f0f30
add esp, 0xc
lea eax, [ebp - 0x613c]
push eax
call fcn.004dca10
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
jmp 0x465b37
mov byte [ebp - 0x2a4], 0
push esi
push 1
push esi
push esi
push 1
push esi
call fcn.00507af0
mov dword [0x72bb90], eax
cmp eax, esi
je 0x465ac3
cmp eax, 0xffffffff
je 0x465ac3
push str.ChngNotifInfoEvent
push esi
push 0x1f0003
call dword [sym.imp.KERNEL32.dll_OpenEventA]
mov dword [ebp - 0x6164], eax
cmp eax, esi
je 0x465a90
cmp eax, 0xffffffff
je 0x465a90
mov ecx, dword [0x72bb90]
mov dword [ebp - 0x6174], ecx
mov dword [ebp - 0x6170], eax
push str._DCH__NETWORK__Network_Change_Notification_Wait_Started...
push 0x6b1620
call fcn.004f0f30
add esp, 8
jmp 0x464bd0
xor edx, edx
mov word [ebp - 0x611c], dx
push 0x3ffe
push esi
lea eax, [ebp - 0x611a]
push eax
call fcn.005dfd60
add esp, 0xc
push 0xffffffffffffffff
push esi
lea ecx, [ebp - 0x6174]
push ecx
push 2
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
cmp eax, 0xffffffff
jne 0x464c28
cmp dword [0x72bcb8], esi
je 0x464c6d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._CHNG__NETWORK__Wait_failed_with_Error__u__Exiting...
push 0x6b1620
call fcn.004f0f30
add esp, 0xc
jmp 0x464c53
cmp eax, esi
jne 0x464c7c
mov edx, dword [ebp - 0x6174]
push edx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
cmp dword [0x72bcb8], esi
je 0x464c6d
push str._CHNG__NETWORK__Shutdown_event_signaled..._Exiting___
push 0x6b1620
call fcn.004f0f30
add esp, 8
cmp dword [0x72bcb8], esi
je 0x464c6d
push str._CHNG__NETWORK__Exiting_func.._GetChngInfo..
push 0x6b1620
call fcn.004f0f30
add esp, 8
mov dword [ebp - 0x615c], 1
jmp 0x465afc
cmp eax, 1
jne 0x464bd0
mov dword [ebp - 0x614c], esi
mov eax, dword [ebp - 0x6170]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push esi
lea ecx, [ebp - 0x614c]
push ecx
push 0x4000
lea edx, [ebp - 0x611c]
push edx
push esi
push esi
push 0x2224c4
mov eax, dword [ebp - 0x6140]
push eax
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
cmp eax, esi
jne 0x464cee
cmp dword [0x72bcb8], esi
je 0x464bd0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._CHNG__NETWORK__DeviceIoctl_Failed_for_IOCTL_GET_CHNG_NOTIF_INFO__Error:__u
push 0x6b1620
call fcn.004f0f30
add esp, 0xc
jmp 0x464bd0
mov dword [ebp - 0x6134], esi
cmp dword [0x72bcb8], esi
je 0x464d20
mov ecx, dword [ebp - 0x614c]
push ecx
push str._CHNG__NETWORK__Total_Event_Data_Recvd:__u_bytes
push 0x6b1620
call fcn.004f0f30
add esp, 0xc
jmp 0x464d20
mov edi, dword [ebp - 0x6134]
cmp edi, dword [ebp - 0x614c]
jae 0x464bd0
mov dword [ebp - 0x6124], esi
xor edx, edx
mov word [ebp - 0x211c], dx
push 0x40e
push esi
lea eax, [ebp - 0x211a]
push eax
call fcn.005dfd60
xor ecx, ecx
mov word [ebp - 0x1d0c], cx
push 0x40e
push esi
lea edx, [ebp - 0x1d0a]
push edx
call fcn.005dfd60
xor eax, eax
mov word [ebp - 0xdd0], ax
push 0x40e
push esi
lea ecx, [ebp - 0xdce]
push ecx
call fcn.005dfd60
xor edx, edx
mov word [ebp - 0x9c0], dx
push 0x40e
push esi
lea eax, [ebp - 0x9be]
push eax
call fcn.005dfd60
mov dword [ebp - 0x6130], esi
mov dword [ebp - 0x6160], esi
mov byte [ebp - 0x11e0], 0
push 0x207
push esi
lea ecx, [ebp - 0x11df]
push ecx
call fcn.005dfd60
xor edx, edx
mov word [ebp - 0x9c], dx
push 0x3e
push esi
lea eax, [ebp - 0x9a]
push eax
call fcn.005dfd60
add esp, 0x48
mov byte [ebp - 0x1a0], 0
push 0x103
push esi
lea ecx, [ebp - 0x19f]
push ecx
call fcn.005dfd60
add esp, 0xc
mov dword [ebp - 0x612c], esi
mov esi, edi
shr esi, 1
add esi, esi
movzx eax, byte [ebp + esi - 0x611c]
mov ecx, eax
and ecx, 0xf
mov dword [ebp - 0x6120], ecx
test al, 0x10
je 0x464e2d
mov dword [ebp - 0x6130], 1
lea edx, [ebp - 0x612c]
push edx
push 0x6af8c8
lea eax, [ebp - 0x1a0]
push eax
mov ecx, dword [ebp - 0x6120]
push ecx
call fcn.004647f0
mov dword [ebp - 0x612c], eax
movzx edi, byte [ebp + esi - 0x611a]
shl edi, 8
movzx edx, byte [ebp + esi - 0x6118]
add edi, edx
mov ebx, edi
shr ebx, 1
add ebx, ebx
push ebx
lea eax, [ebp + esi - 0x6116]
push eax
lea ecx, [ebp - 0xdd0]
push ecx
call fcn.005e13c0
add esp, 0x1c
xor edx, edx
mov word [ebp + ebx - 0xdce], dx
mov eax, dword [ebp - 0x6134]
lea ecx, [eax + edi + 6]
mov dword [ebp - 0x6134], ecx
lea ecx, [ebp - 0xdd0]
lea edx, [ebp - 0x211c]
jmp 0x464eb0
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x464eb0
lea edx, [ebp - 0xdd0]
push edx
call fcn.00502dd0
lea eax, [ebp - 0xdd0]
push eax
call fcn.004fb5e0
mov esi, dword [ebp - 0x6120]
cmp esi, 4
jne 0x4651a2
mov ebx, dword [ebp - 0x6134]
mov eax, ebx
shr eax, 1
add eax, eax
movzx edi, byte [ebp + eax - 0x611c]
shl edi, 8
movzx ecx, byte [ebp + eax - 0x611a]
add edi, ecx
mov esi, edi
shr esi, 1
add esi, esi
push esi
lea edx, [ebp + eax - 0x6118]
push edx
lea eax, [ebp - 0x9c0]
push eax
call fcn.005e13c0
add esp, 0xc
xor ecx, ecx
mov word [ebp + esi - 0x9be], cx
lea ecx, [ebp - 0x9c0]
lea edx, [ebp - 0x1d0c]
lea ecx, [ecx]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x464f40
lea edx, [ebp - 0x9c0]
push edx
call fcn.00502dd0
lea eax, [ebp - 0x9c0]
push eax
call fcn.004db490
add esp, 4
cmp word [ebp - 0x9c0], 0x55
jne 0x464fad
cmp word [ebp - 0x9be], 0x4e
jne 0x464fad
cmp word [ebp - 0x9bc], 0x43
jne 0x464fad
cmp word [ebp - 0x9ba], 0x5c
jne 0x464fad
push 0x61fb14
push 0x62d8b4
lea ecx, [ebp - 0x9c0]
push ecx
call fcn.004e1c90
add esp, 0xc
lea edx, [ebx + edi + 4]
mov dword [ebp - 0x6134], edx
push 0
lea eax, [ebp - 0x11e0]
push eax
push 0
call fcn.00504d70
test eax, eax
jne 0x465180
lea ecx, [ebp - 0x9c0]
push ecx
call fcn.004fb5e0
mov edi, dword [ebp - 0x6130]
push 0
test edi, edi
je 0x465012
lea edx, [ebp - 0xdd0]
push edx
call fcn.004e8650
mov esi, eax
neg esi
sbb esi, esi
inc esi
push 0
lea eax, [ebp - 0x9c0]
push eax
call fcn.004e8650
add esp, 0x10
neg eax
sbb eax, eax
inc eax
jmp 0x465042
push 0
push 0
push 0
lea ecx, [ebp - 0xdd0]
push ecx
call fcn.004e87b0
mov esi, eax
push 0
push 0
push 0
lea edx, [ebp - 0x6124]
push edx
lea eax, [ebp - 0x9c0]
push eax
call fcn.004e87b0
add esp, 0x28
cmp esi, 1
jne 0x465061
test eax, eax
jne 0x465061
mov dword [ebp - 0x6160], esi
call fcn.00504780
mov esi, dword [ebp - 0x6120]
jmp 0x4652ee
cmp dword [0x72bcb8], 0
je 0x465170
mov byte [ebp - 0x2c], 0
xor ecx, ecx
mov dword [ebp - 0x2b], ecx
mov dword [ebp - 0x27], ecx
mov dword [ebp - 0x23], ecx
mov word [ebp - 0x1f], cx
mov byte [ebp - 0x1d], cl
mov byte [ebp - 0x3c], cl
mov dword [ebp - 0x3b], ecx
mov dword [ebp - 0x37], ecx
mov dword [ebp - 0x33], ecx
mov word [ebp - 0x2f], cx
mov byte [ebp - 0x2d], cl
cmp esi, 1
jne 0x4650b9
mov ecx, dword [str.FILE_ABSENT]
mov dword [ebp - 0x2c], ecx
mov edx, dword [0x62d8ac]
mov dword [ebp - 0x28], edx
mov ecx, dword [0x62d8b0]
mov dword [ebp - 0x24], ecx
jmp 0x4650dd
mov edx, dword [str.FILE_PRESENT]
mov dword [ebp - 0x2c], edx
mov ecx, dword [0x62d89c]
mov dword [ebp - 0x28], ecx
mov edx, dword [0x62d8a0]
mov dword [ebp - 0x24], edx
mov cl, byte [0x62d8a4]
mov byte [ebp - 0x20], cl
cmp eax, 1
jne 0x4650f8
mov edx, dword [str.FILE_ABSENT]
mov dword [ebp - 0x3c], edx
mov eax, dword [0x62d8ac]
mov ecx, dword [0x62d8b0]
jmp 0x465115
mov edx, dword [str.FILE_PRESENT]
mov dword [ebp - 0x3c], edx
mov eax, dword [0x62d89c]
mov ecx, dword [0x62d8a0]
mov dl, byte [0x62d8a4]
mov byte [ebp - 0x30], dl
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x38], eax
test edi, edi
je 0x465148
push str.DIR_
push str.FILE_
lea eax, [ebp - 0x2c]
push eax
call fcn.004e9030
push str.DIR_
push str.FILE_
lea ecx, [ebp - 0x3c]
push ecx
call fcn.004e9030
add esp, 0x18
lea edx, [ebp - 0x3c]
push edx
lea eax, [ebp - 0x9c0]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0xdd0]
push edx
push str._CHNG__NETWORK__File_Rename_Opn_Fails__OrigFN:__S___s___NewFN:__S___s_
push 0x6b1620
call fcn.004f0f30
add esp, 0x18
call fcn.00504780
mov esi, dword [ebp - 0x6120]
jmp 0x4652ee
lea ecx, [ebp - 0x11e0]
push ecx
push eax
push str._CHNG__NETWORK__Impersonation_Failed_A___ret:__d__Emsg:__s
push 0x6b1620
call fcn.004f0f30
mov esi, dword [ebp - 0x6120]
jmp 0x4652eb
cmp esi, 1
je 0x465252
cmp esi, 8
je 0x465252
cmp esi, 2
jne 0x4652ee
cmp word [ebp - 0x18fc], 0
je 0x46521d
lea edx, [ebp - 0xdd0]
push edx
lea eax, [ebp - 0x18fc]
push eax
call fcn.0060678d
add esp, 8
test eax, eax
jne 0x46521d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x6158]
cmp eax, 0x3e8
ja 0x46521d
cmp dword [0x72bcb8], 0
je 0x465216
lea ecx, [ebp - 0x18fc]
push ecx
push str._CHNG__Delete_Operation_Repeated_for__S
push 0x6b1620
call fcn.004f0f30
add esp, 0xc
xor esi, esi
jmp 0x464d20
lea ecx, [ebp - 0xdd0]
lea edx, [ebp - 0x18fc]
lea esp, [esp]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x465230
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6158], eax
jmp 0x4652ee
push 0
lea edx, [ebp - 0x11e0]
push edx
push 0
call fcn.00504d70
test eax, eax
jne 0x4652d4
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0
lea eax, [ebp - 0x6124]
push eax
lea ecx, [ebp - 0xdd0]
push ecx
call fcn.004e87b0
add esp, 0x14
cmp dword [0x72bcb8], 0
je 0x4652cd
cmp esi, 8
jne 0x4652ad
mov edx, dword [ebp - 0x6124]
push edx
lea eax, [ebp - 0xdd0]
push eax
push str._CHNG__NETWORK__File_FILE_ACTION_ADDED__FN:__S___u_
jmp 0x4652c0
mov ecx, dword [ebp - 0x6124]
push ecx
lea edx, [ebp - 0xdd0]
push edx
push str._CHNG__NETWORK__File_FILE_ACTION_MODIFIED__FN:__S___u_
push 0x6b1620
call fcn.004f0f30
add esp, 0x10
call fcn.00504780
jmp 0x4652ee
lea ecx, [ebp - 0x11e0]
push ecx
push eax
push str._CHNG__NETWORK__Impersonation_Failed_B___ret:__d__Emsg:__s
push 0x6b1620
call fcn.004f0f30
add esp, 0x10
cmp esi, 4
jne 0x465304
cmp dword [ebp - 0x6160], 1
jne 0x465a89
cmp esi, esi
je 0x46531b
cmp esi, 8
je 0x46531b
dec esi
neg esi
sbb esi, esi
add esi, 3
mov edi, esi
mov dword [ebp - 0x6120], esi
jmp 0x465326
mov edi, 1
mov dword [ebp - 0x6120], edi
cmp dword [0x72bcb8], 0
je 0x4653d0
cmp dword [ebp - 0x6130], 0
je 0x46534f
mov edx, dword [str.NETWORK_DIR]
mov eax, dword [0x62d728]
mov ecx, dword [0x62d72c]
jmp 0x465360
mov edx, dword [str.NETWORK_FIL]
mov eax, dword [0x62d71c]
mov ecx, dword [0x62d720]
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x5c], edx
mov edx, dword [ebp - 0x6124]
push edx
lea eax, [ebp - 0xdd0]
push eax
lea ecx, [ebp - 0x211c]
push ecx
lea edx, [ebp - 0x1a0]
push edx
lea eax, [ebp - 0x5c]
push eax
push str._CHNG___s__Event_Type:__s__OrigFN:__S__ModFN:__S__fSize_u_
push 0x6b1620
call fcn.004f0f30
add esp, 0x1c
cmp word [ebp - 0x9c0], 0
je 0x4653e0
mov ecx, dword [ebp - 0x6124]
push ecx
lea edx, [ebp - 0x9c0]
push edx
lea eax, [ebp - 0x1d0c]
push eax
lea ecx, [ebp - 0x5c]
push ecx
push str._CHNG___s__Renamed_File::_OrigFN:__S__ModFN:__S__fSize_u_
push 0x6b1620
call fcn.004f0f30
add esp, 0x18
cmp word [ebp - 0x9c0], 0
lea ebx, [ebp - 0x9c0]
jne 0x4653e6
lea ebx, [ebp - 0xdd0]
push 0x5c
lea edx, [ebp - 0xdd0]
push edx
call fcn.005e34eb
add esp, 8
xor esi, esi
cmp eax, esi
je 0x465a89
push str._srvsvc
push eax
call fcn.0060678d
add esp, 8
test eax, eax
je 0x465a89
cmp dword [ebp - 0x6130], esi
jne 0x465a89
mov dword [ebp - 0x6154], esi
cmp edi, 2
jne 0x465439
mov dword [ebp - 0x6154], esi
jmp 0x46571f
mov eax, dword [0x72d014]
push eax
mov ecx, dword [0x6861e8]
push ecx
lea edx, [ebp - 0x9c]
push edx
push ebx
call fcn.005d8b80
add esp, 0x10
mov dword [ebp - 0x6138], eax
cmp word [ebp - 0x9c], si
je 0x465681
xor edi, edi
mov dword [ebp - 0x6168], edi
test eax, eax
jne 0x465587
push 0x6e8bc0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x72c234]
test eax, eax
je 0x465541
cmp byte [eax], 0
je 0x465541
mov byte [ebp - 0x5b0], 0
push 0x103
push edi
lea eax, [ebp - 0x5af]
push eax
call fcn.005dfd60
mov dword [ebp - 0x6148], edi
mov byte [ebp - 0x4ad], 0
lea ecx, [ebp - 0x9c]
push ecx
push 0x610bcc
push 0x103
lea edx, [ebp - 0x5b0]
push edx
call fcn.005e3b7a
push 1
push edi
push 0x2c
lea eax, [ebp - 0x6148]
push eax
lea ecx, [ebp - 0x3a8]
push ecx
mov edx, dword [0x72c234]
push edx
call fcn.004e1380
add esp, 0x34
or esi, 0xffffffff
cmp dword [ebp - 0x6148], esi
je 0x465541
lea eax, [ebp - 0x5b0]
push eax
lea ecx, [ebp - 0x3a8]
push ecx
call fcn.004dd620
add esp, 8
test eax, eax
jne 0x46555f
cmp dword [0x72bcb8], eax
je 0x465537
mov edi, 1
mov dword [ebp - 0x6168], edi
mov dword [ebp - 0x6138], 2
push 0x6e8bc0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test edi, edi
je 0x465681
push ebx
push str._CHNG__Force_Excluding__S
jmp 0x465674
push 1
push 0
push 0x2c
lea edx, [ebp - 0x6148]
push edx
lea eax, [ebp - 0x3a8]
push eax
mov ecx, dword [0x72c234]
push ecx
call fcn.004e1380
add esp, 0x18
jmp 0x465502
jbe 0x465681
push 0x6e8bc0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x72c230]
test eax, eax
je 0x46565f
cmp byte [eax], 0
je 0x46565f
mov byte [ebp - 0x4ac], 0
push 0x103
push 0
lea edx, [ebp - 0x4ab]
push edx
call fcn.005dfd60
mov dword [ebp - 0x6144], 0
mov byte [ebp - 0x3a9], 0
lea eax, [ebp - 0x9c]
push eax
push 0x610bcc
push 0x103
lea ecx, [ebp - 0x4ac]
push ecx
call fcn.005e3b7a
push 1
push 0
push 0x2c
lea edx, [ebp - 0x6144]
push edx
lea eax, [ebp - 0x3a8]
push eax
mov ecx, dword [0x72c230]
push ecx
call fcn.004e1380
add esp, 0x34
or esi, 0xffffffff
lea esp, [esp]
cmp dword [ebp - 0x6144], esi
je 0x46565f
lea edx, [ebp - 0x4ac]
push edx
lea eax, [ebp - 0x3a8]
push eax
call fcn.004dd620
add esp, 8
test eax, eax
jne 0x4656ba
cmp dword [0x72bcb8], eax
je 0x465655
mov edi, 1
mov dword [ebp - 0x6168], edi
mov dword [ebp - 0x6138], 0
push 0x6e8bc0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test edi, edi
je 0x465681
push ebx
push str._CHNG__Force_Including__S
push 0x6b1620
call fcn.004f0f30
add esp, 0xc
mov eax, dword [ebp - 0x6138]
test eax, eax
jne 0x465693
cmp dword [ebp - 0x6124], eax
jne 0x46570c
mov ecx, 1
mov dword [ebp - 0x6154], ecx
cmp eax, 2
jb 0x4656e1
cmp dword [0x72bcb8], ecx
jb 0x46570c
push ebx
lea ecx, [ebp - 0x1a0]
push ecx
push str._CHNG__NETWORK_ReadCh:__s___S____IGNORED_EXTN
jmp 0x4656ff
push 1
push 0
push 0x2c
lea ecx, [ebp - 0x6144]
push ecx
lea edx, [ebp - 0x3a8]
push edx
mov eax, dword [0x72c230]
push eax
call fcn.004e1380
add esp, 0x18
jmp 0x465620
cmp dword [ebp - 0x6124], 0
jne 0x46570c
cmp dword [0x72bcb8], ecx
jb 0x46570c
push ebx
lea edx, [ebp - 0x1a0]
push edx
push str._CHNG__NETWORK_ReadCh:__s___S____IGNORED_ZERO_BYTES
push 0x6b1620
call fcn.004f0f30
add esp, 0x10
cmp dword [ebp - 0x6154], 0
jne 0x465a89
mov edi, dword [ebp - 0x6120]
xor esi, esi
mov dword [ebp - 0x6128], esi
mov dword [ebp - 0x6150], esi
mov dword [ebp - 0x616c], 1
lea eax, [ebp - 0x6128]
push eax
push ebx
call fcn.004da960
add esp, 8
mov eax, dword [ebp - 0x6128]
test eax, eax
je 0x46577c
cmp byte [eax], 0
je 0x46577c
push 0x5c
push eax
call fcn.005e0a00
add esp, 8
mov esi, eax
mov dword [ebp - 0x6150], esi
test esi, esi
je 0x465770
inc esi
jmp 0x465776
mov esi, dword [ebp - 0x6128]
mov dword [ebp - 0x6150], esi
mov ecx, dword [ebp - 0x6128]
test ecx, ecx
je 0x465a49
cmp byte [ecx], 0
je 0x465a49
cmp dword [ebp - 0x6130], 0
jne 0x465a49
cmp byte [esi], 0x7e
je 0x465a49
mov eax, dword [0x72c23c]
test eax, eax
je 0x4657e3
cmp byte [eax], 0
je 0x4657e3
push ecx
call fcn.005d2100
add esp, 4
test eax, eax
je 0x4657e3
cmp dword [0x72bcb8], 1
jb 0x465a6c
push ebx
lea ecx, [ebp - 0x1a0]
push ecx
push str._CHNG__NETWORK_ReadCh:__s___S____IGNORED_PATHFN_A
jmp 0x465a5f
push str.DRIVE_NETWORK
lea edx, [ebp - 0x5c]
push edx
call fcn.005dfb23
add esp, 8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x73320c], eax
cmp edi, 1
je 0x465812
cmp edi, 3
je 0x465812
cmp edi, 2
jne 0x465992
mov byte [ebp - 0x3a8], 0
push 0x103
push 0
lea eax, [ebp - 0x3a7]
push eax
call fcn.005dfd60
add esp, 0xc
cmp edi, 2
jne 0x465892
push 0
push 0
push 0
lea ecx, [ebp - 0x1a0]
push ecx
mov edx, dword [ebp - 0x612c]
push edx
push edi
lea eax, [ebp - 0x3a8]
push eax
push 1
push ebx
call fcn.00542c20
add esp, 0x24
mov esi, eax
cmp dword [0x72bcb8], 1
jne 0x46587a
push esi
push ebx
push str._CHNG__NETWORK__DEL_UPD__FN:_S__rvx_u_
push 0x6b1620
call fcn.004f0f30
add esp, 0x10
cmp esi, 1
jne 0x465992
mov dword [ebp - 0x616c], 0
jmp 0x465a6c
mov byte [ebp - 0x12e4], 0
push 0x103
push 0
lea ecx, [ebp - 0x12e3]
push ecx
call fcn.005dfd60
mov byte [ebp - 0x13e8], 0
push 0x103
push 0
lea edx, [ebp - 0x13e7]
push edx
call fcn.005dfd60
push 0
push 0
push 0
lea eax, [ebp - 0x1a0]
push eax
mov edi, dword [ebp - 0x612c]
push edi
mov ecx, dword [ebp - 0x6120]
push ecx
lea edx, [ebp - 0x3a8]
push edx
push 0
push ebx
call fcn.00542c20
add esp, 0x3c
mov esi, eax
cmp dword [0x72bcb8], 1
jne 0x465912
push esi
push ebx
push str._CHNG__NETWORK__MOD_UPD__FN:_S__rvx_u_
push 0x6b1620
call fcn.004f0f30
add esp, 0x10
test esi, esi
jne 0x465983
mov dword [ebp - 0x617c], 1
cmp dword [ebp - 0x6120], 3
jne 0x46594e
lea eax, [ebp - 0x9c]
push eax
push ebx
call fcn.00464980
add esp, 8
test eax, eax
je 0x46594e
mov dword [ebp - 0x617c], esi
mov dword [ebp - 0x616c], esi
jmp 0x465a6c
push 0
push 0
lea ecx, [ebp - 0x3a8]
push ecx
push edi
lea edx, [ebp - 0x1a0]
push edx
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x13e8]
push ecx
lea edx, [ebp - 0x12e4]
push edx
mov eax, dword [ebp - 0x6120]
push eax
push ebx
call fcn.00545a10
add esp, 0x28
mov dword [ebp - 0x616c], 0
jmp 0x465a6c
mov byte [ebp - 0xfd8], 0
push 0x103
push 0
lea ecx, [ebp - 0xfd7]
push ecx
call fcn.005dfd60
mov byte [ebp - 0x14ec], 0
push 0x103
push 0
lea edx, [ebp - 0x14eb]
push edx
call fcn.005dfd60
mov byte [ebp - 0xed4], 0
push 0x103
push 0
lea eax, [ebp - 0xed3]
push eax
call fcn.005dfd60
add esp, 0x24
mov dword [ebp - 0x6178], 1
cmp edi, 3
jne 0x465a12
lea ecx, [ebp - 0x9c]
push ecx
push ebx
call fcn.00464980
add esp, 8
test eax, eax
je 0x465a12
mov dword [ebp - 0x6178], 0
jmp 0x465a6c
push 0
push 0
lea edx, [ebp - 0xed4]
push edx
mov eax, dword [ebp - 0x612c]
push eax
lea ecx, [ebp - 0x1a0]
push ecx
lea edx, [ebp - 0x5c]
push edx
lea eax, [ebp - 0x14ec]
push eax
lea ecx, [ebp - 0xfd8]
push ecx
push edi
push ebx
call fcn.00545a10
add esp, 0x28
jmp 0x465a6c
cmp dword [0x72bcb8], 1
jb 0x465a6c
push ebx
lea edx, [ebp - 0x1a0]
push edx
push str._CHNG__NETWORK_ReadCh:__s___S____IGNORED_PATHFN
push 0x6b1620
call fcn.004f0f30
add esp, 0x10
mov eax, dword [ebp - 0x6128]
test eax, eax
je 0x465a89
push eax
call fcn.005e0865
add esp, 4
mov dword [ebp - 0x6128], 0
xor esi, esi
jmp 0x464d20
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.OpenEvent___failed__Error:__u
lea eax, [ebp - 0x2a4]
push eax
call fcn.005dfb23
lea ecx, [ebp - 0x2a4]
push ecx
push str._DCH__NETWORK___s
push 0x6b1620
call fcn.004f0f30
add esp, 0x18
jmp 0x465afc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.MyCreateEvent___failed__Error:__u
lea edx, [ebp - 0x2a4]
push edx
call fcn.005dfb23
lea eax, [ebp - 0x2a4]
push eax
jmp 0x465aaf
mov dword [ebp - 4], 0xfffffffe
lea ecx, [ebp - 0x6164]
push ecx
call fcn.004dca10
push 0x72bb90
call fcn.004dca10
lea edx, [ebp - 0x6140]
push edx
call fcn.004dca10
lea eax, [ebp - 0x613c]
push eax
call fcn.004dca10
mov eax, dword [ebp - 0x615c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.005dfbbe
mov esp, ebp
pop ebp
ret