Function at 0x44ae20
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4beb08
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x4ea688]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
call fcn.004555d0
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [esi + 0x2c], vtable.IQ360TrayService.0
lea eax, [esi + 0x40]
push eax
mov dword [esi], vtable.CSampleService.0
mov dword [esi + 0x2c], vtable.CSampleService.1.0
mov dword [esi + 0x30], ebx
call fcn.00428d80
lea eax, [esi + 0x110]
push eax
mov byte [ebp - 4], 1
call fcn.0042fba0
lea eax, [esi + 0x4d4]
push eax
mov byte [ebp - 4], 2
call fcn.004165f0
mov dword [esi + 0x4ac], ebx
mov dword [esi + 0x4b0], ebx
mov dword [esi + 0x4b4], ebx
mov dword [esi + 0x4b8], ebx
mov dword [esi + 0x4bc], ebx
mov dword [esi + 0x4c0], ebx
mov dword [esi + 0x4c4], ebx
mov dword [esi + 0x4c8], ebx
mov dword [esi + 0x4cc], ebx
mov dword [esi + 0x4d0], ebx
lea ecx, [esi + 0x4f8]
xor eax, eax
mov byte [ebp - 4], 3
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
call fcn.00424770
cmp eax, ebx
jge 0x44aefb
push eax
call fcn.00425ad0
lea ecx, [esi + 0x510]
xor eax, eax
mov byte [ebp - 4], 4
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
call fcn.00424770
cmp eax, ebx
jge 0x44af27
push eax
call fcn.00425ad0
lea eax, [esi + 0x528]
push eax
mov byte [ebp - 4], 5
call fcn.00442f80
mov dword [esi + 0x548], 0x4d182c
mov dword [esi + 0x54c], 0x4d1824
mov dword [esi + 0x550], ebx
mov dword [esi + 0x554], ebx
mov dword [esi + 0x558], ebx
mov dword [esi + 0x55c], ebx
mov dword [esi + 0x560], ebx
mov dword [esi + 0x564], ebx
mov dword [esi + 0x568], ebx
mov dword [esi + 0x56c], ebx
mov dword [esi + 0x570], ebx
mov dword [esi + 0x574], ebx
mov dword [esi + 0x578], ebx
mov dword [esi + 0x57c], ebx
mov dword [esi + 0x580], ebx
mov dword [esi + 0x584], ebx
mov dword [esi + 0x588], ebx
mov dword [esi + 0x58c], ebx
mov dword [esi + 0x590], ebx
lea eax, [esi + 0x594]
push eax
mov byte [ebp - 4], 7
call fcn.00464ff0
mov dword [esi + 0xedc], 0x4d1698
mov dword [esi + 0xeec], ebx
mov dword [esi + 0xef0], ebx
mov dword [esi + 0xef4], ebx
mov dword [esi + 0xee0], ebx
mov dword [esi + 0xee4], ebx
mov dword [esi + 0xee8], ebx
mov dword [esi + 0xef8], ebx
mov dword [esi + 0xefc], 0x4cf904
mov dword [esi + 0xf00], ebx
mov dword [esi + 0xf04], ebx
mov edi, dword [sym.imp.KERNEL32.dll_CreateEventW]
push ebx
push ebx
mov dword [esi + 0xf10], ebx
push ebx
push ebx
mov dword [esi + 0xf14], ebx
mov byte [esi + 0xf18], bl
mov dword [esi + 0xf1c], ebx
mov dword [esi + 0xf20], ebx
call edi
push ebx
push ebx
push ebx
push ebx
mov dword [esi + 0xf24], eax
call edi
mov dword [esi + 0xf28], eax
push ebx
push ebx
push ebx
push ebx
mov dword [esi + 0xf2c], ebx
mov byte [esi + 0xf30], bl
mov dword [esi + 0xf34], ebx
mov dword [esi + 0xf38], ebx
call edi
push ebx
push ebx
push ebx
push ebx
mov dword [esi + 0xf3c], eax
call edi
mov dword [esi + 0xf40], eax
push ebx
push ebx
push 1
mov byte [ebp - 4], 0xd
push ebx
mov dword [esi + 0x34], ebx
call edi
push ebx
push ebx
push 1
push ebx
mov dword [esi + 0x38], eax
call edi
cmp dword [esi + 0x38], 0xffffffff
mov dword [esi + 0x3c], eax
je 0x44b0d0
cmp eax, 0xffffffff
je 0x44b0d0
lea eax, [esi + 0x110]
mov dword [0x4f26b0], eax
mov dword [esi + 0x4f4], ebx
mov dword [0x4f26ac], esi
mov dword [esi + 0xf0c], ebx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x4dbde4
lea ecx, [ebp - 0x10]
push ecx
mov dword [ebp - 0x10], eax
call fcn.004985bb
int3