Function at 0x439220
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5efc40
mov eax, dword fs:[0]
push eax
sub esp, 0x4b8
mov eax, dword [0x65d4e4]
xor eax, ebp
mov dword [ebp - 0x2c], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x484], ecx
mov ecx, dword [ebp - 0x484]
call fcn.0045dcf0
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
call fcn.004231a0
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x43a9e3
mov ecx, dword [ebp - 0x14]
call fcn.00509990
cmp eax, 1
jne 0x43a79a
mov ecx, dword [ebp - 0x10]
call fcn.00427000
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x43a6f9
mov eax, dword [ebp - 0x18]
push eax
lea ecx, [ebp - 0x48]
call fcn.0040be30
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.004199a0
mov byte [ebp - 4], 1
push 0x624d60
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x28]
call fcn.004fdc00
lea edx, [ebp - 0x48]
push edx
call fcn.0043aa00
mov ecx, eax
call fcn.00402220
push str.msgbase64
lea ecx, [ebp - 0x64]
call fcn.0040be30
mov byte [ebp - 4], 2
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x28]
call fcn.004fc4d0
test eax, eax
je 0x439382
lea ecx, [ebp - 0x64]
call fcn.0041ec70
test eax, eax
jbe 0x439382
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0xa0]
push edx
lea ecx, [ebp - 0x81]
call fcn.0052bb80
mov byte [ebp - 4], 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x328], esp
push 0x60b0c7
call fcn.0040be30
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x48c], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa0]
call fcn.0040be10
push eax
push 0
push 0x624d70
call fcn.00402d10
mov byte [ebp - 4], 3
mov ecx, eax
call fcn.00429b60
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xa0]
call fcn.0040bf30
push 0x624d78
lea ecx, [ebp - 0x80]
call fcn.0040be30
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x80]
push ecx
lea ecx, [ebp - 0x28]
call fcn.004fc4d0
test eax, eax
je 0x43a62b
push str.debug
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43941d
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xa1]
call fcn.0043ed70
mov dword [ebp - 0x32c], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x32c]
jmp 0x43a9e6
push str.allversion
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x439493
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xa2]
call fcn.00452390
mov dword [ebp - 0x330], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x330]
jmp 0x43a9e6
push str.cpuuse
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x439509
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xa3]
call fcn.0043e490
mov dword [ebp - 0x334], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x334]
jmp 0x43a9e6
push str.getfile
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43957f
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xa4]
call fcn.004447e0
mov dword [ebp - 0x338], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x338]
jmp 0x43a9e6
push str.getdir
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x4395f5
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xa5]
call fcn.00440b60
mov dword [ebp - 0x33c], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x33c]
jmp 0x43a9e6
push str.execcmd
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43966b
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xa6]
call fcn.004438d0
mov dword [ebp - 0x340], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x340]
jmp 0x43a9e6
push str.rename
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x4396e1
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xa7]
call fcn.0044db70
mov dword [ebp - 0x344], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x344]
jmp 0x43a9e6
push str.update
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x439757
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xa8]
call fcn.00443cf0
mov dword [ebp - 0x348], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x348]
jmp 0x43a9e6
push str.onlyid
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x4397cd
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xa9]
call fcn.004406e0
mov dword [ebp - 0x34c], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x34c]
jmp 0x43a9e6
push str.prclist
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x439843
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xaa]
call fcn.0044c7b0
mov dword [ebp - 0x350], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x350]
jmp 0x43a9e6
push str.svclist
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x4398b9
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xab]
call fcn.0044a590
mov dword [ebp - 0x354], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x354]
jmp 0x43a9e6
push str.ntuser
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43992f
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xac]
call fcn.0044ae30
mov dword [ebp - 0x358], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x358]
jmp 0x43a9e6
push str.ntlogon
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x4399a5
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xad]
call fcn.00449fb0
mov dword [ebp - 0x35c], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x35c]
jmp 0x43a9e6
push str.dlllist
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x439a1b
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xae]
call fcn.00441e50
mov dword [ebp - 0x360], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x360]
jmp 0x43a9e6
push str.dllexclude
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x439a91
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xaf]
call fcn.004411b0
mov dword [ebp - 0x364], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x364]
jmp 0x43a9e6
push str.ntevent
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x439b07
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xb0]
call fcn.00449870
mov dword [ebp - 0x368], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x368]
jmp 0x43a9e6
push str.netborder
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x439b36
push 0
push 0
call fcn.0043ab80
mov ecx, eax
call fcn.00438fa0
jmp 0x43a626
push str.uninspatch
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x439bac
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xb1]
call fcn.00451500
mov dword [ebp - 0x36c], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x36c]
jmp 0x43a9e6
push str.netstat
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x439c22
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xb2]
call fcn.004492f0
mov dword [ebp - 0x370], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x370]
jmp 0x43a9e6
push str.hardware
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x439c98
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xb3]
call fcn.00445c00
mov dword [ebp - 0x374], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x374]
jmp 0x43a9e6
push str.software
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x439d0e
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xb4]
call fcn.0044ff20
mov dword [ebp - 0x378], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x378]
jmp 0x43a9e6
push str.policy
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x439d84
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xb5]
call fcn.0044c230
mov dword [ebp - 0x37c], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x37c]
jmp 0x43a9e6
push str.module
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x439dfa
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xb6]
call fcn.004481a0
mov dword [ebp - 0x380], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x380]
jmp 0x43a9e6
push str.message
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x439e70
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xb7]
call fcn.00448730
mov dword [ebp - 0x384], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x384]
jmp 0x43a9e6
push str.msgex
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x439ee6
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xb8]
call fcn.00448bb0
mov dword [ebp - 0x388], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x388]
jmp 0x43a9e6
push str.ipmacbind
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x439f5c
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xb9]
call fcn.00446160
mov dword [ebp - 0x38c], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x38c]
jmp 0x43a9e6
push str.changeip
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x439fd2
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xba]
call fcn.0043b1f0
mov dword [ebp - 0x390], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x390]
jmp 0x43a9e6
push str.reginfotovrv
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a048
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xbb]
call fcn.0044cf60
mov dword [ebp - 0x394], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
mov eax, dword [ebp - 0x394]
jmp 0x43a9e6
push str.outnetwork
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a07a
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0044bb50
jmp 0x43a626
push str.unkillnetexit
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a0b9
push 0
call fcn.0041a090
mov ecx, eax
call fcn.004ac180
push 0x64
call fcn.00507ad0
add esp, 4
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x624ea0
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a0e0
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push str.screen
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a112
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xbd]
call fcn.0044e340
jmp 0x43a626
push str.driver
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a144
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xbe]
call fcn.00442f40
jmp 0x43a626
push str.dump
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a176
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xbf]
call fcn.00447d70
jmp 0x43a626
push str.down
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a1a8
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xc0]
call fcn.00442780
jmp 0x43a626
push str.delfile
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a1da
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xc1]
call fcn.0043f1d0
jmp 0x43a626
push str.scr_view
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a20c
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xc2]
call fcn.00452610
jmp 0x43a626
push str.scr_ctrl
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a23e
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xc3]
call fcn.00452610
jmp 0x43a626
push str.destroyfile
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a270
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xc4]
call fcn.0043f7a0
jmp 0x43a626
push str.setdenyall
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a2a2
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xc5]
call fcn.0044f410
jmp 0x43a626
push str.stopprotect
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a2d4
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xc6]
call fcn.004506e0
jmp 0x43a626
push str.killnet
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a306
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xc7]
call fcn.00446b40
jmp 0x43a626
push str.unkillnet
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a338
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xc8]
call fcn.00447010
jmp 0x43a626
push str.memmonitor
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a36a
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xc9]
call fcn.00447a70
jmp 0x43a626
push str.security_config
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a39c
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xca]
call fcn.0044eeb0
jmp 0x43a626
push str.shutdown
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a3ce
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xcb]
call fcn.0044f6a0
jmp 0x43a626
push str.unlockaction
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a400
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xcc]
call fcn.00447750
jmp 0x43a626
push str.uninstall
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a432
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xcd]
call fcn.00450900
jmp 0x43a626
push str.updatepolicy
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a464
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xce]
call fcn.00451a90
jmp 0x43a626
push 0x624f74
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a496
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xcf]
call fcn.00444010
jmp 0x43a626
push str.killnetstatus
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a4c8
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xd0]
call fcn.004474e0
jmp 0x43a626
push str.setvpn
lea ecx, [ebp - 0x80]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a4fa
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xd1]
call fcn.00451cb0
jmp 0x43a626
push 1
push 2
lea ecx, [ebp - 0x154]
call fcn.0040b040
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3c0]
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.00427020
mov dword [ebp - 0x490], eax
mov edx, dword [ebp - 0x490]
mov dword [ebp - 0x494], edx
mov byte [ebp - 4], 7
lea eax, [ebp - 0x3dc]
push eax
mov ecx, dword [ebp - 0x494]
call fcn.0050aa90
mov dword [ebp - 0x498], eax
mov ecx, dword [ebp - 0x498]
mov dword [ebp - 0x49c], ecx
mov byte [ebp - 4], 8
lea edx, [ebp - 0x80]
push edx
push 0x624f90
mov eax, dword [ebp - 0x49c]
push eax
push 0x624fa4
lea ecx, [ebp - 0x154]
push ecx
call fcn.00409b60
add esp, 8
push eax
call fcn.00409240
add esp, 8
push eax
call fcn.00409b60
add esp, 8
push eax
call fcn.00409240
add esp, 8
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x3dc]
call fcn.0040bf30
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3c0]
call fcn.00509440
lea edx, [ebp - 0x3f8]
push edx
lea ecx, [ebp - 0x154]
call fcn.004094f0
mov dword [ebp - 0x4a0], eax
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x4a4], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x4a4]
call fcn.0040be10
push eax
push 0x624fac
push 0x188
push 0x624fcc
push 0x15
call fcn.00409860
mov ecx, eax
call fcn.004fb930
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3f8]
call fcn.0040bf30
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x154]
call fcn.00409dd0
jmp 0x43a6c1
push 1
push 2
lea ecx, [ebp - 0x1d4]
call fcn.0040b040
mov byte [ebp - 4], 0xa
push 0x624fe0
lea ecx, [ebp - 0x1d4]
push ecx
call fcn.00409b60
add esp, 8
lea edx, [ebp - 0x414]
push edx
lea ecx, [ebp - 0x1d4]
call fcn.004094f0
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x4ac], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x4ac]
call fcn.0040be10
push eax
push 0x624ff4
push 0x18d
push 0x625014
push 0x15
call fcn.00409860
mov ecx, eax
call fcn.004fb930
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x414]
call fcn.0040bf30
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1d4]
call fcn.00409dd0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.0040bf30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040bf30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040bf30
jmp 0x43a795
push 1
push 2
lea ecx, [ebp - 0x254]
call fcn.0040b040
mov dword [ebp - 4], 0xc
push 0x625028
lea ecx, [ebp - 0x254]
push ecx
call fcn.00409b60
add esp, 8
lea edx, [ebp - 0x430]
push edx
lea ecx, [ebp - 0x254]
call fcn.004094f0
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x4b4], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x4b4]
call fcn.0040be10
push eax
push 0x625038
push 0x192
push 0x625058
push 0x15
call fcn.00409860
mov ecx, eax
call fcn.004fb930
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x430]
call fcn.0040bf30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x254]
call fcn.00409dd0
jmp 0x43a9e3
mov ecx, dword [ebp - 0x10]
call fcn.00427000
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
je 0x43a944
mov ecx, dword [ebp - 0x258]
push ecx
lea ecx, [ebp - 0x284]
call fcn.0040be30
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x268]
call fcn.004199a0
mov byte [ebp - 4], 0xf
push 0x62506c
lea edx, [ebp - 0x284]
push edx
lea ecx, [ebp - 0x268]
call fcn.004fdc00
push 0x625070
lea ecx, [ebp - 0x2a0]
call fcn.0040be30
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x2a0]
push eax
lea ecx, [ebp - 0x268]
call fcn.004fc4d0
test eax, eax
je 0x43a914
push 0x625074
lea ecx, [ebp - 0x2a0]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a898
lea ecx, [ebp - 0x268]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0x2a1]
call fcn.00444010
mov dword [ebp - 0x434], eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2a0]
call fcn.0040bf30
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x268]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x284]
call fcn.0040bf30
mov eax, dword [ebp - 0x434]
jmp 0x43a9e6
push str.exit
lea ecx, [ebp - 0x2a0]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
jne 0x43a914
lea eax, [ebp - 0x464]
push eax
mov ecx, dword [ebp - 0x10]
call fcn.00427020
mov dword [ebp - 0x4b8], eax
mov ecx, dword [ebp - 0x4b8]
mov dword [ebp - 0x4bc], ecx
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x4bc]
call fcn.00509460
push eax
call fcn.00437820
add esp, 4
mov dword [ebp - 0x438], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x464]
call fcn.00509440
cmp dword [ebp - 0x438], 0
je 0x43a914
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2a0]
call fcn.0040bf30
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x268]
call fcn.00419a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x284]
call fcn.0040bf30
push 1
push 2
lea ecx, [ebp - 0x324]
call fcn.0040b040
mov dword [ebp - 4], 0x12
push 0x625080
lea edx, [ebp - 0x324]
push edx
call fcn.00409b60
add esp, 8
lea eax, [ebp - 0x480]
push eax
lea ecx, [ebp - 0x324]
call fcn.004094f0
mov dword [ebp - 0x4c0], eax
mov ecx, dword [ebp - 0x4c0]
mov dword [ebp - 0x4c4], ecx
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x4c4]
call fcn.0040be10
push eax
push str.CCmdP2PCommand::HandleInpute
push 0x1b4
push str..CmdP2PCommand.cpp
push 0xf0000000
call fcn.00409860
mov ecx, eax
call fcn.004fb930
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x480]
call fcn.0040bf30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x324]
call fcn.00409dd0
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x2c]
xor ecx, ebp
call fcn.005b1988
mov esp, ebp
pop ebp
ret