Function at 0x447500
Capabilities:
Acquire debug privileges
Check if file exists
Create thread
Create udp socket
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cb47d
mov eax, dword fs:[0]
push eax
sub esp, 0x1b4
mov eax, dword [0x4fa078]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov ecx, str.SeDebugPrivilege
mov dword [0x4facd0], eax
mov dword [0x4facd4], edx
call fcn.00408880
mov ecx, str.SeCreateGlobalPrivilege
call fcn.00408880
call fcn.00408a90
call fcn.00442a90
test al, al
jne 0x44838f
call fcn.0044e3e0
call fcn.00446e00
call fcn.00446410
mov eax, 4
push 0x4e322c
mov dword [ebp - 0x18c], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
jne 0x44759d
mov eax, 4
mov dword [ebp - 0x18c], eax
jmp 0x44765a
push str.RtlGetNtVersionNumbers
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x14], 0
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x4475d0
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x18]
push ecx
call eax
mov ecx, dword [ebp - 0x18]
cmp ecx, 5
jne 0x4475f0
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x447655
xor eax, eax
cmp ecx, 1
setne al
inc eax
mov dword [ebp - 0x18c], eax
jmp 0x44765a
cmp ecx, 6
jne 0x44762b
mov eax, dword [ebp - 0x1c]
sub eax, 0
je 0x44761e
sub eax, 1
je 0x44758d
sub eax, 1
je 0x447611
xor eax, eax
mov dword [ebp - 0x18c], eax
jmp 0x44765a
mov eax, 5
mov dword [ebp - 0x18c], eax
jmp 0x44765a
mov eax, 3
mov dword [ebp - 0x18c], eax
jmp 0x44765a
cmp ecx, 0xa
jne 0x44763d
mov eax, 6
mov dword [ebp - 0x18c], eax
jmp 0x44765a
cmp ecx, 6
mov eax, 4
mov edx, 7
cmova eax, edx
mov dword [ebp - 0x18c], eax
jmp 0x44765a
mov eax, 4
cmp eax, 6
jae 0x4476e9
push 0x28
call fcn.0044bc97
mov esi, eax
xorps xmm0, xmm0
mov dword [ebp - 0x14], esi
add esp, 4
mov ecx, esi
movups xmmword [esi], xmm0
push 2
movups xmmword [esi + 0x10], xmm0
push str.ecode
movq qword [esi + 0x20], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
call fcn.00406080
push 0
push str.result
mov ecx, esi
call fcn.00406080
mov eax, dword [ebp - 0x18c]
mov ecx, esi
push eax
push 0x4e3be8
call fcn.00406080
mov ecx, esi
call fcn.00442950
jmp 0x44838f
mov ecx, 1
call fcn.00446e90
test al, al
jne 0x44838f
lea ecx, [ebp - 0x124]
call fcn.004434e0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x124]
cmp dword [ebp - 0x110], 0x10
mov edx, 0x4facd8
cmovae ecx, dword [ebp - 0x124]
call fcn.00443230
test al, al
jne 0x447756
push 0x28
call fcn.0044bc97
mov dword [ebp - 0x14], eax
xorps xmm0, xmm0
add esp, 4
mov ecx, eax
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movq qword [eax + 0x20], xmm0
call fcn.004055f0
push 4
jmp 0x447787
cmp dword [0x4fad3c], 0x2714
jne 0x4477af
push 0x28
call fcn.0044bc97
mov dword [ebp - 0x14], eax
xorps xmm0, xmm0
add esp, 4
mov ecx, eax
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movq qword [eax + 0x20], xmm0
call fcn.004055f0
push 0xd
mov esi, eax
push str.ecode
mov ecx, esi
call fcn.00406080
push 0
push str.result
mov ecx, esi
call fcn.00406080
mov ecx, esi
call fcn.00442950
jmp 0x448384
xor eax, eax
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 7
mov word [ebp - 0xc4], ax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], 7
mov word [ebp - 0xdc], ax
mov edx, 0x4fad40
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1a8]
call fcn.00407fb0
push eax
lea ecx, [ebp - 0xc4]
call fcn.004090e0
mov edx, dword [ebp - 0x194]
cmp edx, 8
jb 0x447843
mov ecx, dword [ebp - 0x1a8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447839
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4483ac
push edx
push ecx
call fcn.0044bf44
add esp, 8
lea edx, [ebp - 0xdc]
lea ecx, [ebp - 0xc4]
call fcn.00446b40
test al, al
jne 0x4478a5
push 0x28
call fcn.0044bc97
mov dword [ebp - 0x14], eax
xorps xmm0, xmm0
add esp, 4
mov ecx, eax
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movq qword [eax + 0x20], xmm0
call fcn.004055f0
mov esi, eax
push 3
push str.ecode
mov ecx, esi
call fcn.00406080
push 0
push str.result
mov ecx, esi
call fcn.00406080
mov ecx, esi
call fcn.00442950
jmp 0x44836e
push 0x4fad20
mov ecx, 0x4fac90
call fcn.00406ce0
push 0x60
lea eax, [ebp - 0xac]
push 0
push eax
call fcn.004a4b20
add esp, 0xc
mov dword [ebp - 0xac], 0xffffffff
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
lea eax, [ebp - 0x84]
mov dword [ebp - 0x8c], 0
push eax
mov dword [ebp - 0x88], 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov byte [ebp - 4], 5
lea eax, [ebp - 0x6c]
push 0
push 0
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
call fcn.00441b50
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x60]
push 0x10
mov dword [ebp - 0x6c], 0x3f800000
call fcn.0042a830
mov eax, dword [ebp - 0x68]
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
push 0x10
call fcn.00440d90
mov dword [ebp - 0x54], 7
mov dword [ebp - 0x50], 8
lea eax, [ebp - 0xa4]
mov byte [ebp - 4], 8
push eax
push ecx
mov ecx, eax
call fcn.004415a0
mov eax, dword [ebp - 0xa0]
xor ecx, ecx
mov edx, dword [ebp - 0xa4]
sub eax, edx
sar eax, 2
test eax, eax
je 0x447a09
nop dword [eax]
cmp ecx, 3
jae 0x447a09
mov eax, dword [ecx*4 + 0x4e36f8]
test eax, eax
je 0x447a09
mov dword [edx + ecx*4], eax
inc ecx
mov eax, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xa4]
sub eax, edx
sar eax, 2
cmp ecx, eax
jb 0x4479e0
call fcn.0043ee40
push 0x11
push 2
push 2
mov dword [ebp - 0x8c], 0x443890
mov dword [ebp - 0x88], 0x443c90
call dword [sym.imp.WS2_32.dll_socket]
mov dword [ebp - 0xac], eax
cmp eax, 0xffffffff
je 0x447ae6
push 0
push 0
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x18], 0
push ecx
push 0
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x14], 0
push ecx
push 0x9800000c
push eax
call dword [sym.imp.WS2_32.dll_WSAIoctl]
mov eax, dword [ebp - 0xa0]
xor esi, esi
mov ecx, dword [ebp - 0xa4]
sub eax, ecx
sar eax, 2
test eax, eax
je 0x447ae6
mov edi, dword [sym.imp.WS2_32.dll_WSAGetLastError]
movzx eax, word [ecx + esi*4]
xorps xmm0, xmm0
mov edx, 2
movups xmmword [ebp - 0x44], xmm0
push eax
mov word [ebp - 0x44], dx
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebp - 0x42], ax
lea eax, [ebp - 0x44]
push 0x10
push eax
push dword [ebp - 0xac]
mov dword [ebp - 0x40], 0
call dword [sym.imp.WS2_32.dll_bind]
test eax, eax
je 0x447bac
call edi
test eax, eax
je 0x447bd3
mov eax, dword [ebp - 0xa0]
inc esi
mov ecx, dword [ebp - 0xa4]
sub eax, ecx
sar eax, 2
cmp esi, eax
jb 0x447a86
push 0x28
call fcn.0044bc97
mov dword [ebp - 0x14], eax
xorps xmm0, xmm0
add esp, 4
mov ecx, eax
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movq qword [eax + 0x20], xmm0
call fcn.004055f0
mov esi, eax
push 5
push str.ecode
mov ecx, esi
call fcn.00406080
push 0
push str.result
mov ecx, esi
call fcn.00406080
mov ecx, esi
call fcn.00442950
lea ecx, [ebp - 0x6c]
call fcn.0043f440
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov ecx, dword [ebp - 0x98]
test ecx, ecx
je 0x448313
mov edx, dword [ebp - 0x94]
push ecx
call fcn.004416e0
mov ecx, dword [ebp - 0x90]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x98]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 4
cmp ecx, 0x1000
jb 0x4482eb
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4483b1
jmp 0x4482eb
push 0
push 0
lea eax, [ebp - 0xac]
push eax
push 0x43f5d0
push 0
push 0
call fcn.004af6b6
add esp, 0x18
test eax, eax
je 0x447bd3
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x10c]
cmp dword [0x4fadec], 8
mov edx, 0x4fadd8
cmovae edx, dword [0x4fadd8]
mov eax, dword [eax + esi*4]
mov dword [ebp - 0xa8], eax
call fcn.00423d70
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x10c]
cmp dword [ebp - 0xf8], 8
cmovae ecx, dword [ebp - 0x10c]
cmp dword [ebp - 0xfc], 3
jne 0x447c45
mov esi, 3
mov edx, 0x4e4014
nop dword [eax + eax]
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x447c45
add ecx, 2
add edx, 2
sub esi, 1
jne 0x447c30
jmp 0x447c6e
sub esp, 0x18
lea eax, [ebp - 0xdc]
mov ecx, esp
lea esi, [ebp - 0xac]
push eax
call fcn.00403630
mov ecx, esi
call fcn.004470c0
add esp, 0x18
test al, al
jne 0x4482db
mov edx, 0x4fad20
lea ecx, [ebp - 0x1a8]
call fcn.00407fb0
push eax
lea edx, [ebp - 0xdc]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1c0]
call fcn.004483f0
push 0x4e401c
mov edx, eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xf4]
call fcn.0040ca60
add esp, 8
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x1ac]
cmp edx, 8
jb 0x447cf1
mov ecx, dword [ebp - 0x1c0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447ce7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4483b6
push edx
push ecx
call fcn.0044bf44
add esp, 8
xor eax, eax
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1ac], 7
mov word [ebp - 0x1c0], ax
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x194]
cmp edx, 8
jb 0x447d52
mov ecx, dword [ebp - 0x1a8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447d48
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4483bb
push edx
push ecx
call fcn.0044bf44
add esp, 8
xor eax, eax
mov dword [ebp - 0x198], 0
sub esp, 0x18
mov word [ebp - 0x1a8], ax
lea eax, [ebp - 0xf4]
mov dword [ebp - 0x194], 7
mov ecx, esp
lea esi, [ebp - 0xac]
push eax
call fcn.00403630
mov edx, esi
call fcn.00444560
mov edi, eax
add esp, 0x18
cmp edi, 1
jne 0x447e11
sub esp, 0x18
lea eax, [ebp - 0xf4]
mov ecx, esp
push eax
call fcn.00403630
mov edx, 0x443720
mov ecx, 0x4facd8
call fcn.00444b30
push 0x28
mov byte [ebp - 0x185], al
call fcn.0044bc97
mov dword [ebp - 0x14], eax
xorps xmm0, xmm0
add esp, 0x1c
mov ecx, eax
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movq qword [eax + 0x20], xmm0
call fcn.004055f0
mov esi, eax
push 6
push str.ecode
mov ecx, esi
call fcn.00406080
xor ecx, ecx
cmp byte [ebp - 0x185], cl
setne cl
push ecx
push str.result
mov ecx, esi
call fcn.00406080
mov ecx, esi
call fcn.00442950
jmp 0x447e73
cmp edi, 5
push 0x28
sete byte [ebp - 0x185]
call fcn.0044bc97
mov dword [ebp - 0x14], eax
xorps xmm0, xmm0
add esp, 4
mov ecx, eax
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movq qword [eax + 0x20], xmm0
call fcn.004055f0
mov esi, eax
push 7
push str.ecode
mov ecx, esi
call fcn.00406080
xor ecx, ecx
cmp edi, 5
sete cl
push ecx
push str.result
mov ecx, esi
call fcn.00406080
mov ecx, esi
call fcn.00442950
cmp edi, 3
je 0x4482d0
cmp byte [ebp - 0x185], 0
je 0x4482d0
cmp dword [ebp - 0xb0], 8
lea edi, [ebp - 0xc4]
push 0x60
cmovae edi, dword [ebp - 0xc4]
lea eax, [ebp - 0x184]
cmp dword [ebp - 0xe0], 8
lea esi, [ebp - 0xf4]
push 0
cmovae esi, dword [ebp - 0xf4]
push eax
call fcn.004a4b20
add esp, 0xc
lea ecx, [ebp - 0x184]
call fcn.00453017
mov ecx, esi
mov byte [ebp - 4], 0xf
xor eax, eax
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 7
mov word [ebp - 0x4c], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x447ee3
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x4c]
call fcn.004037e0
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x184]
call fcn.00453954
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x38]
cmp edx, 8
jb 0x447f4d
mov ecx, dword [ebp - 0x4c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447f43
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4483c0
push edx
push ecx
call fcn.0044bf44
add esp, 8
xor eax, eax
mov dword [ebp - 0x3c], 0
mov word [ebp - 0x4c], ax
lea ecx, [ebp - 0x184]
lea eax, [ebp - 0x14]
mov dword [ebp - 0x38], 7
push eax
mov dword [ebp - 0x14], 1
call fcn.00453968
mov ecx, edi
mov dword [ebp - 0x24], 0
xor eax, eax
mov dword [ebp - 0x20], 7
mov word [ebp - 0x34], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x447f90
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x34]
call fcn.004037e0
push 0
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x184]
call fcn.004534b0
mov byte [ebp - 4], 0xf
mov esi, eax
mov edx, dword [ebp - 0x20]
cmp edx, 8
jb 0x447ffe
mov ecx, dword [ebp - 0x34]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447ff4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4483c5
push edx
push ecx
call fcn.0044bf44
add esp, 8
xor eax, eax
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x184]
mov dword [ebp - 0x20], 7
mov word [ebp - 0x34], ax
mov byte [ebp - 4], 0xe
call fcn.004530d2
test esi, esi
jns 0x44809d
push 0x28
call fcn.0044bc97
mov dword [ebp - 0x14], eax
xorps xmm0, xmm0
add esp, 4
mov ecx, eax
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movq qword [eax + 0x20], xmm0
call fcn.004055f0
mov esi, eax
push 0xb
push str.ecode
mov ecx, esi
call fcn.00406080
push 0
push str.result
mov ecx, esi
call fcn.00406080
lea edx, [ebp - 0xf4]
lea ecx, [ebp - 0x34]
call fcn.004080f0
push eax
push str.file
mov ecx, esi
mov byte [ebp - 4], 0x15
call fcn.00406450
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xe
call fcn.00406d10
mov ecx, esi
call fcn.00442950
jmp 0x4482d0
sub esp, 0x18
lea eax, [ebp - 0xdc]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00403630
sub esp, 0x18
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0xc4]
mov ecx, esp
push eax
call fcn.00403630
mov byte [ebp - 4], 0xe
call fcn.00445ac0
push str.xbboot.exe
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0040cad0
add esp, 0x3c
mov byte [ebp - 4], 0x13
lea esi, [ebp - 0x34]
cmp dword [ebp - 0x20], 8
cmovae esi, dword [ebp - 0x34]
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x44814f
sub esp, 0xc
mov ecx, esi
call fcn.00408920
add esp, 0xc
test eax, eax
setne al
test al, al
je 0x44814f
push 0x28
call fcn.0044bc97
mov dword [ebp - 0x14], eax
xorps xmm0, xmm0
add esp, 4
mov ecx, eax
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movq qword [eax + 0x20], xmm0
call fcn.004055f0
mov esi, eax
push 9
push str.ecode
mov ecx, esi
call fcn.00406080
push 1
jmp 0x448184
push 0x28
call fcn.0044bc97
mov dword [ebp - 0x14], eax
xorps xmm0, xmm0
add esp, 4
mov ecx, eax
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movq qword [eax + 0x20], xmm0
call fcn.004055f0
mov esi, eax
push 8
push str.ecode
mov ecx, esi
call fcn.00406080
push 0
push str.result
mov ecx, esi
call fcn.00406080
mov ecx, esi
call fcn.00442950
mov ecx, 5
call fcn.00446e90
mov byte [ebp - 0x18d], al
test al, al
jne 0x448248
call fcn.00408ef0
mov esi, eax
mov dword [0x4facc4], 0x64
lea edx, [ebp - 0xdc]
mov dword [0x4facc0], esi
lea ecx, [ebp - 0x1a8]
call fcn.004080f0
mov byte [ebp - 4], 0x14
cmp dword [eax + 0x14], 0x10
jb 0x4481e3
mov eax, dword [eax]
push eax
mov edx, esi
call fcn.00424710
add esp, 4
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x194]
test al, al
sete al
mov byte [ebp - 0x185], al
cmp edx, 0x10
jb 0x44823d
mov ecx, dword [ebp - 0x1a8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44822d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4483ca
push edx
push ecx
call fcn.0044bf44
mov al, byte [ebp - 0x185]
add esp, 8
mov byte [ebp - 0x185], 0
test al, al
je 0x44824f
mov byte [ebp - 0x185], 1
push 0x28
mov dword [0x4facc0], 0
call fcn.0044bc97
mov dword [ebp - 0x14], eax
xorps xmm0, xmm0
add esp, 4
mov ecx, eax
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movq qword [eax + 0x20], xmm0
call fcn.004055f0
mov esi, eax
push 0xa
push str.ecode
mov ecx, esi
call fcn.00406080
movzx ecx, byte [ebp - 0x185]
push ecx
push str.result
mov ecx, esi
call fcn.00406080
cmp byte [ebp - 0x18d], 0
mov ecx, str.failed
mov eax, str.succeeded
cmove eax, ecx
mov ecx, esi
push eax
push str.service
call fcn.004067f0
mov ecx, esi
call fcn.00442950
lea ecx, [ebp - 0x34]
call fcn.00403580
lea ecx, [ebp - 0xf4]
call fcn.00403580
lea ecx, [ebp - 0x10c]
call fcn.00403580
jmp 0x447b2e
push ecx
push esi
call fcn.0044bf44
add esp, 8
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
mov edx, dword [ebp - 0xa4]
test edx, edx
je 0x44836e
mov ecx, dword [ebp - 0x9c]
mov eax, edx
sub ecx, edx
and ecx, 0xfffffffc
cmp ecx, 0x1000
jb 0x448346
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4483cf
push ecx
push edx
call fcn.0044bf44
add esp, 8
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0
lea ecx, [ebp - 0xdc]
call fcn.00403580
lea ecx, [ebp - 0xc4]
call fcn.00403580
lea ecx, [ebp - 0x124]
call fcn.00406d10
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0044b7d5
mov esp, ebp
pop ebp
ret
call fcn.004aba6c
call fcn.004aba6c
call fcn.004aba6c
call fcn.004aba6c
call fcn.004aba6c
call fcn.004aba6c
call fcn.004aba6c
call fcn.004aba6c
int3