Function at 0x44a170
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bdf08
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x4e9688]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
call fcn.00454720
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [esi + 0x2c], vtable.IQ360TrayService.0
lea eax, [esi + 0x40]
push eax
mov dword [esi], vtable.CSampleService.0
mov dword [esi + 0x2c], vtable.CSampleService.1.0
mov dword [esi + 0x30], ebx
call fcn.00428280
lea eax, [esi + 0x110]
push eax
mov byte [ebp - 4], 1
call fcn.0042f100
lea eax, [esi + 0x4d4]
push eax
mov byte [ebp - 4], 2
call fcn.00415d90
mov dword [esi + 0x4ac], ebx
mov dword [esi + 0x4b0], ebx
mov dword [esi + 0x4b4], ebx
mov dword [esi + 0x4b8], ebx
mov dword [esi + 0x4bc], ebx
mov dword [esi + 0x4c0], ebx
mov dword [esi + 0x4c4], ebx
mov dword [esi + 0x4c8], ebx
mov dword [esi + 0x4cc], ebx
mov dword [esi + 0x4d0], ebx
lea ecx, [esi + 0x4f8]
xor eax, eax
mov byte [ebp - 4], 3
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
call fcn.00423e60
cmp eax, ebx
jge 0x44a24b
push eax
call fcn.004251c0
lea ecx, [esi + 0x510]
xor eax, eax
mov byte [ebp - 4], 4
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
call fcn.00423e60
cmp eax, ebx
jge 0x44a277
push eax
call fcn.004251c0
lea eax, [esi + 0x528]
push eax
mov byte [ebp - 4], 5
call fcn.0042fc80
mov dword [esi + 0x548], 0x4d03dc
mov dword [esi + 0x54c], 0x4d03d4
mov dword [esi + 0x550], ebx
mov dword [esi + 0x554], ebx
mov dword [esi + 0x558], ebx
mov dword [esi + 0x55c], ebx
mov dword [esi + 0x560], ebx
mov dword [esi + 0x564], ebx
mov dword [esi + 0x568], ebx
mov dword [esi + 0x56c], ebx
mov dword [esi + 0x570], ebx
mov dword [esi + 0x574], ebx
mov dword [esi + 0x578], ebx
mov dword [esi + 0x57c], ebx
mov dword [esi + 0x580], ebx
mov dword [esi + 0x584], ebx
mov dword [esi + 0x588], ebx
mov dword [esi + 0x58c], ebx
mov dword [esi + 0x590], ebx
lea eax, [esi + 0x594]
push eax
mov byte [ebp - 4], 7
call fcn.00464300
mov dword [esi + 0xedc], 0x4d0248
mov dword [esi + 0xeec], ebx
mov dword [esi + 0xef0], ebx
mov dword [esi + 0xef4], ebx
mov dword [esi + 0xee0], ebx
mov dword [esi + 0xee4], ebx
mov dword [esi + 0xee8], ebx
mov dword [esi + 0xef8], ebx
mov dword [esi + 0xefc], 0x4ce4b4
mov dword [esi + 0xf00], ebx
mov dword [esi + 0xf04], ebx
mov edi, dword [sym.imp.KERNEL32.dll_CreateEventW]
push ebx
push ebx
mov dword [esi + 0xf10], ebx
push ebx
push ebx
mov dword [esi + 0xf14], ebx
mov byte [esi + 0xf18], bl
mov dword [esi + 0xf1c], ebx
mov dword [esi + 0xf20], ebx
call edi
push ebx
push ebx
push ebx
push ebx
mov dword [esi + 0xf24], eax
call edi
mov dword [esi + 0xf28], eax
push ebx
push ebx
push ebx
push ebx
mov dword [esi + 0xf2c], ebx
mov byte [esi + 0xf30], bl
mov dword [esi + 0xf34], ebx
mov dword [esi + 0xf38], ebx
call edi
push ebx
push ebx
push ebx
push ebx
mov dword [esi + 0xf3c], eax
call edi
mov dword [esi + 0xf40], eax
push ebx
push ebx
push 1
mov byte [ebp - 4], 0xd
push ebx
mov dword [esi + 0x34], ebx
call edi
push ebx
push ebx
push 1
push ebx
mov dword [esi + 0x38], eax
call edi
cmp dword [esi + 0x38], 0xffffffff
mov dword [esi + 0x3c], eax
je 0x44a420
cmp eax, 0xffffffff
je 0x44a420
lea eax, [esi + 0x110]
mov dword [0x4f1650], eax
mov dword [esi + 0x4f4], ebx
mov dword [0x4f164c], esi
mov dword [esi + 0xf0c], ebx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x4da924
lea ecx, [ebp - 0x10]
push ecx
mov dword [ebp - 0x10], eax
call fcn.00497a7b
int3