Function at 0x41ee00
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x49d9ae
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4c13e0]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [esp + 0x38], ebx
mov edi, dword [esp + 0x40]
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov eax, dword [esp + 0x44]
mov dword [edi], vtable.qtray::QTrayServiceProcessor.0
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x48]
mov dword [edi + 0x10], eax
cmp eax, ebx
je 0x41ee5b
add eax, 4
mov ecx, 1
lock xadd dword [eax], ecx
add edi, 0x14
push edi
mov byte [esp + 0x3c], 2
call fcn.00422a30
mov byte [esp + 0x38], 3
push 0xe
mov ebp, 0xf
push str.RegisterClient
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea edx, [esp + 0x14]
push edx
mov byte [esp + 0x3c], 4
call fcn.00421d60
mov esi, 0x10
mov dword [eax], 0x465ad0
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41eec1
mov eax, dword [esp + 0x18]
push eax
call fcn.00476df2
add esp, 4
push 0xa
push str.SetAuthKey
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea ecx, [esp + 0x14]
push ecx
mov byte [esp + 0x3c], 5
call fcn.00421d60
mov dword [eax], 0x465f30
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41ef0a
mov edx, dword [esp + 0x18]
push edx
call fcn.00476df2
add esp, 4
push 0xd
push str.AttachMessage
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x3c], 6
call fcn.00421d60
mov dword [eax], 0x466320
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41ef53
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00476df2
add esp, 4
push 0xb
push str.AddEventLog
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea edx, [esp + 0x14]
push edx
mov byte [esp + 0x3c], 7
call fcn.00421d60
mov dword [eax], 0x466720
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41ef9c
mov eax, dword [esp + 0x18]
push eax
call fcn.00476df2
add esp, 4
push esi
push str.GetAutoliveState
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea ecx, [esp + 0x14]
push ecx
mov byte [esp + 0x3c], 8
call fcn.00421d60
mov dword [eax], 0x466b00
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41efe4
mov edx, dword [esp + 0x18]
push edx
call fcn.00476df2
add esp, 4
push 0xb
push str.GetUserInfo
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x3c], 9
call fcn.00421d60
mov dword [eax], 0x466ec0
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f02d
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00476df2
add esp, 4
push 0x11
push str.QueryClientObject
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea edx, [esp + 0x14]
push edx
mov byte [esp + 0x3c], 0xa
call fcn.00421d60
mov dword [eax], 0x4672f0
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f076
mov eax, dword [esp + 0x18]
push eax
call fcn.00476df2
add esp, 4
push 9
push str.OnMessage
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea ecx, [esp + 0x14]
push ecx
mov byte [esp + 0x3c], 0xb
call fcn.00421d60
mov dword [eax], 0x467700
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f0bf
mov edx, dword [esp + 0x18]
push edx
call fcn.00476df2
add esp, 4
push 0xe
push str.AVMessageToSrv
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x3c], 0xc
call fcn.00421d60
mov dword [eax], 0x467b30
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f108
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00476df2
add esp, 4
push 9
push str.TestValue
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea edx, [esp + 0x14]
push edx
mov byte [esp + 0x3c], 0xd
call fcn.00421d60
mov dword [eax], 0x467f40
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f151
mov eax, dword [esp + 0x18]
push eax
call fcn.00476df2
add esp, 4
push 4
push str.ping
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea ecx, [esp + 0x14]
push ecx
mov byte [esp + 0x3c], 0xe
call fcn.00421d60
mov dword [eax], 0x468330
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f19a
mov edx, dword [esp + 0x18]
push edx
call fcn.00476df2
add esp, 4
push 0xe
push str.HipsFnCallBack
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x3c], 0xf
call fcn.00421d60
mov dword [eax], 0x468710
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f1e3
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00476df2
add esp, 4
push 0x12
push str.setAppMonState2Srv
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea edx, [esp + 0x14]
push edx
mov byte [esp + 0x3c], 0x10
call fcn.00421d60
mov dword [eax], 0x468b50
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f22c
mov eax, dword [esp + 0x18]
push eax
call fcn.00476df2
add esp, 4
push 0x12
push str.setDrvMonState2Srv
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea ecx, [esp + 0x14]
push ecx
mov byte [esp + 0x3c], 0x11
call fcn.00421d60
mov dword [eax], 0x468f30
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f275
mov edx, dword [esp + 0x18]
push edx
call fcn.00476df2
add esp, 4
push 0x15
push str.setSBNetworkState2Srv
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x3c], 0x12
call fcn.00421d60
mov dword [eax], 0x469310
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f2be
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00476df2
add esp, 4
push 0x12
push str.setCommonState2Srv
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea edx, [esp + 0x14]
push edx
mov byte [esp + 0x3c], 0x13
call fcn.00421d60
mov dword [eax], 0x4696f0
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f307
mov eax, dword [esp + 0x18]
push eax
call fcn.00476df2
add esp, 4
push 0xb
push str.stopService
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea ecx, [esp + 0x14]
push ecx
mov byte [esp + 0x3c], 0x14
call fcn.00421d60
mov dword [eax], 0x469ae0
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f350
mov edx, dword [esp + 0x18]
push edx
call fcn.00476df2
add esp, 4
push 0xb
push str.sendMsg2Srv
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x3c], 0x15
call fcn.00421d60
mov dword [eax], 0x469eb0
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f399
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00476df2
add esp, 4
push 0xd
push str.sendMsg2SrvEx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea edx, [esp + 0x14]
push edx
mov byte [esp + 0x3c], 0x16
call fcn.00421d60
mov dword [eax], 0x46a290
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f3e2
mov eax, dword [esp + 0x18]
push eax
call fcn.00476df2
add esp, 4
push esi
push str.sendTrayData2Srv
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea ecx, [esp + 0x14]
push ecx
mov byte [esp + 0x3c], 0x17
call fcn.00421d60
mov dword [eax], 0x46a680
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f42a
mov edx, dword [esp + 0x18]
push edx
call fcn.00476df2
add esp, 4
push 0x14
push str.sendSBLaunchData2Srv
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x3c], 0x18
call fcn.00421d60
mov dword [eax], 0x46aa80
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f473
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00476df2
add esp, 4
push 0xb
push str.sendCMD2Srv
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea edx, [esp + 0x14]
push edx
mov byte [esp + 0x3c], 0x19
call fcn.00421d60
mov dword [eax], 0x46ae80
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f4bc
mov eax, dword [esp + 0x18]
push eax
call fcn.00476df2
add esp, 4
push 0x11
push str.UDiskMessageToSrv
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea ecx, [esp + 0x14]
push ecx
mov byte [esp + 0x3c], 0x1a
call fcn.00421d60
mov dword [eax], 0x46b2b0
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f505
mov edx, dword [esp + 0x18]
push edx
call fcn.00476df2
add esp, 4
push esi
push str.ReplyMessage2Srv
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00407760
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x3c], 0x1b
call fcn.00421d60
mov dword [eax], 0x46b6c0
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f54d
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00476df2
add esp, 4
push str.sendWndCopyDataMsg2Srv
lea ecx, [esp + 0x18]
call fcn.00407870
lea edx, [esp + 0x14]
push edx
mov byte [esp + 0x3c], 0x1c
call fcn.00421d60
mov dword [eax], 0x46bac0
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f588
mov eax, dword [esp + 0x18]
push eax
call fcn.00476df2
add esp, 4
push str.sendWmCopyData2Srv
lea ecx, [esp + 0x18]
call fcn.00407870
lea ecx, [esp + 0x14]
push ecx
mov byte [esp + 0x3c], 0x1d
call fcn.00421d60
mov dword [eax], 0x46bef0
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f5c3
mov edx, dword [esp + 0x18]
push edx
call fcn.00476df2
add esp, 4
push str.sendLaunchProcData2Srv
lea ecx, [esp + 0x18]
call fcn.00407870
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x3c], 0x1e
call fcn.00421d60
mov dword [eax], 0x46c320
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f5fe
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00476df2
add esp, 4
push str.ScanMessageToSrv
lea ecx, [esp + 0x18]
call fcn.00407870
lea edx, [esp + 0x14]
push edx
mov byte [esp + 0x3c], 0x1f
call fcn.00421d60
mov dword [eax], 0x46c770
mov byte [esp + 0x38], 3
cmp dword [esp + 0x2c], esi
jb 0x41f639
mov eax, dword [esp + 0x18]
push eax
call fcn.00476df2
add esp, 4
push str.SendMsg2Users
lea ecx, [esp + 0x18]
call fcn.00407870
lea ecx, [esp + 0x14]
push ecx
mov byte [esp + 0x3c], 0x20
call fcn.00421d60
mov dword [eax], 0x46cbb0
cmp dword [esp + 0x2c], esi
jb 0x41f66f
mov edx, dword [esp + 0x18]
push edx
call fcn.00476df2
add esp, 4
lea eax, [esp + 0x44]
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x28], ebx
mov byte [esp + 0x18], bl
mov dword [esp + 0x38], 0xffffffff
call fcn.0041e510
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x28
ret 0xc