Function at 0x4475f0
Capabilities:
Set file attributes
Start service

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x48d4e5
push eax
mov eax, 0xa3ec
mov dword fs:[0], esp
call fcn.0042b9c0
push ebx
push esi
push edi
push eax
xor eax, eax
pop eax
je 0x44761d
invalid
xor esi, esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x18], esp
mov ebx, 0x104d5000
mov eax, dword [ebp - 0x18]
cmp eax, esi
jne 0x447637
mov dword [0x104d5000], ebx
mov al, byte [ebp - 0x59]
push esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 0x38], al
call fcn.004017b0
mov edi, 0x4b8e88
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b8e88
lea ecx, [ebp - 0x38]
call fcn.00412ff0
mov edi, 0x4b3da0
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp - 4], esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b3da0
lea ecx, [ebp - 0x38]
call fcn.0041d2b0
mov edi, 0x4b3da0
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b3da0
lea ecx, [ebp - 0x38]
call fcn.0041d2b0
mov edi, 0x4b3da0
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b3da0
lea ecx, [ebp - 0x38]
call fcn.0041d2b0
mov edi, 0x4a0190
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4a0190
lea ecx, [ebp - 0x38]
call fcn.0041d2b0
mov ecx, dword [0x492cd4]
push ecx
push esi
push 0x4cbcb0
lea ecx, [ebp - 0x38]
call fcn.00412f10
mov edi, 0x4a0190
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4a0190
lea ecx, [ebp - 0x38]
call fcn.0041d2b0
mov edi, 0x4b8e84
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b8e84
lea ecx, [ebp - 0x38]
call fcn.0041d2b0
mov edi, 0x4b8e80
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b8e80
lea ecx, [ebp - 0x38]
call fcn.0041d2b0
mov edi, 0x4b8e7c
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b8e7c
lea ecx, [ebp - 0x38]
call fcn.0041d2b0
mov al, byte [0x4cb9ad]
test al, al
je 0x447783
mov edi, str._netbar_
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str._netbar_
jmp 0x447798
mov edi, str._std_
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str._std_
lea ecx, [ebp - 0x38]
call fcn.0041d2b0
mov edx, dword [0x492cd4]
lea ecx, [ebp - 0x38]
push edx
push esi
push 0x4cbd90
call fcn.00412f10
mov al, byte [0x4cb878]
push esi
lea ecx, [ebp - 0x48]
mov byte [ebp - 0x48], al
call fcn.004017b0
mov ecx, dword [0x492cd4]
push ecx
push esi
push 0x4cb878
lea ecx, [ebp - 0x48]
call fcn.004094e0
mov edi, 0x4b3b88
or ecx, 0xffffffff
xor eax, eax
mov byte [ebp - 4], 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b3b88
lea ecx, [ebp - 0x48]
call fcn.0041d2b0
mov edx, dword [0x492cd4]
lea ecx, [ebp - 0x48]
push edx
push esi
push 0x4cbcb0
call fcn.00412f10
mov edi, 0x4b3b88
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b3b88
lea ecx, [ebp - 0x48]
call fcn.0041d2b0
mov eax, dword [0x492cd4]
lea ecx, [ebp - 0x48]
push eax
push esi
push 0x4cbd90
call fcn.00412f10
push eax
xor eax, eax
pop eax
je 0x44784a
invalid
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x18], esp
mov eax, dword [ebp - 0x18]
cmp eax, esi
jne 0x44785d
mov dword [0x104d5000], ebx
lea ecx, [ebp - 0x180]
call fcn.00447360
mov ecx, dword [0x492cd4]
lea edx, [ebp - 0x38]
push ecx
push esi
push edx
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 2
call fcn.004094e0
mov eax, dword [0x492cd4]
lea ecx, [ebp - 0x48]
push eax
push esi
push ecx
lea ecx, [ebp - 0x170]
call fcn.004094e0
mov edx, dword [0x492cd4]
lea ecx, [ebp - 0x150]
push edx
push esi
push 0x4cbc60
call fcn.004094e0
mov eax, dword [0x492cd4]
lea ecx, [ebp - 0x140]
push eax
push esi
push 0x4cbd20
call fcn.004094e0
push 0x4cbcb0
lea ecx, [ebp - 0x7c]
push 0x4b8e58
push ecx
call fcn.0040a260
add esp, 0xc
mov edx, dword [ebp - 0x158]
push eax
push edx
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 3
call fcn.0044a750
push 1
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 2
call fcn.004017b0
mov eax, dword [ebp - 0x44]
cmp eax, esi
jne 0x44790f
mov eax, 0x48e810
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 1
push esi
lea ecx, [ebp - 0x130]
call fcn.004520d0
lea eax, [ebp - 0x180]
mov bl, 7
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], bl
call fcn.00452370
test al, al
jne 0x447967
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 2
call fcn.004522b0
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 1
call fcn.004473c0
jmp 0x448b46
mov esi, dword [sym.imp.WINMM.dll_timeGetTime]
mov byte [ebp - 0x59], 0
lea ecx, [ebp - 0x1e0]
push ecx
lea ecx, [ebp - 0x130]
call fcn.00452dd0
mov eax, dword [ebp - 0x1e0]
mov byte [ebp - 4], 8
test al, al
jne 0x4479ef
test ah, ah
jne 0x4479de
mov al, byte [0x4cbdf0]
test al, al
jne 0x4479e4
push eax
xor eax, eax
pop eax
je 0x4479a6
invalid
call esi
mov edi, eax
xor eax, eax
mov edx, 0x64
sub edx, eax
push edx
call dword [sym.imp.KERNEL32.dll_Sleep]
call esi
cmp eax, edi
jb 0x4479c4
sub eax, edi
jmp 0x4479c7
sub eax, edi
dec eax
cmp eax, 0x64
jb 0x4479ac
push 1
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], bl
call fcn.004017b0
jmp 0x447971
mov byte [ebp - 0x59], 1
jmp 0x4479ef
lea ecx, [ebp - 0x130]
call fcn.00452d20
push 1
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], bl
call fcn.004017b0
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 2
call fcn.004522b0
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 1
call fcn.004473c0
mov al, byte [ebp - 0x59]
test al, al
je 0x448b46
lea eax, [ebp - 0x1e3]
lea ecx, [ebp - 0xe0]
push eax
call fcn.004122c0
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], 9
push ecx
lea ecx, [ebp - 0xd0]
call fcn.004122c0
lea edx, [ebp - 0x1e1]
lea ecx, [ebp - 0xc0]
push edx
mov byte [ebp - 4], 0xa
call fcn.004122c0
lea eax, [ebp - 0x1e2]
lea ecx, [ebp - 0xb0]
push eax
mov byte [ebp - 4], 0xb
call fcn.004122c0
mov byte [ebp - 4], 0xc
push eax
xor eax, eax
pop eax
je 0x447a88
invalid
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x18], esp
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x447aa3
mov dword [0x104d5000], 0x104d5000
lea ecx, [ebp - 0x59]
push ecx
lea ecx, [ebp - 0x7c]
call fcn.004122c0
lea edx, [ebp - 0x7c]
lea eax, [ebp - 0x48]
push edx
push eax
mov byte [ebp - 4], 0xd
call fcn.0044be40
add esp, 8
test al, al
je 0x447df7
lea ecx, [ebp - 0xd]
lea edx, [ebp - 0x7d]
push ecx
push edx
lea ecx, [ebp - 0x6c]
call fcn.004128a0
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xe
xor esi, esi
call fcn.00412880
test eax, eax
jbe 0x447c35
xor edi, edi
mov eax, dword [ebp - 0x78]
mov eax, dword [edi + eax + 4]
test eax, eax
jne 0x447b03
mov eax, 0x48e810
mov ecx, dword [0x4cbc84]
test ecx, ecx
jne 0x447b12
mov ecx, 0x48e810
push eax
push ecx
call fcn.0042c2e0
add esp, 8
test eax, eax
jne 0x447b43
mov ebx, dword [ebp - 0x78]
push 0x4cbc80
lea ecx, [ebp - 0x6c]
call fcn.00412950
mov ecx, dword [0x492cd4]
lea edx, [edi + ebx + 0x10]
push ecx
push 0
push edx
jmp 0x447c1a
mov eax, dword [ebp - 0x78]
mov eax, dword [edi + eax + 4]
test eax, eax
jne 0x447b53
mov eax, 0x48e810
mov ecx, dword [0x4cbdb4]
test ecx, ecx
jne 0x447b62
mov ecx, 0x48e810
push eax
push ecx
call fcn.0042c2e0
add esp, 8
test eax, eax
jne 0x447b7a
mov ebx, dword [ebp - 0x78]
push 0x4cbdb0
jmp 0x447b28
mov eax, dword [ebp - 0x78]
mov eax, dword [edi + eax + 4]
test eax, eax
jne 0x447b8a
mov eax, 0x48e810
mov ecx, dword [0x4cbc74]
test ecx, ecx
jne 0x447b99
mov ecx, 0x48e810
push eax
push ecx
call fcn.0042c2e0
add esp, 8
test eax, eax
jne 0x447bb1
mov ebx, dword [ebp - 0x78]
push 0x4cbc70
jmp 0x447be6
mov eax, dword [ebp - 0x78]
mov eax, dword [edi + eax + 4]
test eax, eax
jne 0x447bc1
mov eax, 0x48e810
mov ecx, dword [0x4cbda4]
test ecx, ecx
jne 0x447bd0
mov ecx, 0x48e810
push eax
push ecx
call fcn.0042c2e0
add esp, 8
test eax, eax
jne 0x447bfe
mov ebx, dword [ebp - 0x78]
push 0x4cbda0
lea ecx, [ebp - 0x6c]
call fcn.00412950
mov ecx, dword [0x492cd4]
lea edx, [ebx + edi + 0x10]
push ecx
push 0
push edx
jmp 0x447c1a
mov eax, dword [ebp - 0x78]
lea ecx, [ebp - 0x6c]
lea ebx, [edi + eax]
push ebx
call fcn.00412950
mov ecx, dword [0x492cd4]
add ebx, 0x10
push ecx
push 0
push ebx
mov ecx, eax
call fcn.004094e0
lea ecx, [ebp - 0x7c]
inc esi
add edi, 0x20
call fcn.00412880
cmp esi, eax
jb 0x447af3
mov edi, dword [ebp - 0x68]
lea edx, [ebp - 0xe4]
push 0x4cbc80
push edx
lea ecx, [ebp - 0x6c]
call fcn.00412a90
cmp dword [eax], edi
sete al
test al, al
jne 0x447deb
mov edi, dword [ebp - 0x68]
lea eax, [ebp - 0x18]
push 0x4cbdb0
push eax
lea ecx, [ebp - 0x6c]
call fcn.00412a90
cmp dword [eax], edi
sete al
test al, al
jne 0x447deb
mov edi, dword [ebp - 0x68]
lea ecx, [ebp - 0x94]
push 0x4cbc70
push ecx
lea ecx, [ebp - 0x6c]
call fcn.00412a90
cmp dword [eax], edi
sete al
test al, al
jne 0x447deb
mov edi, dword [ebp - 0x68]
lea edx, [ebp - 0x84]
push 0x4cbda0
push edx
lea ecx, [ebp - 0x6c]
call fcn.00412a90
cmp dword [eax], edi
sete al
test al, al
jne 0x447deb
push 0x4cbc80
lea ecx, [ebp - 0x6c]
call fcn.00412950
mov ecx, dword [0x492cd4]
push ecx
push 0
push eax
lea ecx, [ebp - 0xe0]
call fcn.004094e0
push 0x4cbdb0
lea ecx, [ebp - 0x6c]
call fcn.00412950
mov edx, dword [0x492cd4]
lea ecx, [ebp - 0xd0]
push edx
push 0
push eax
call fcn.004094e0
push 0x4cbc70
lea ecx, [ebp - 0x6c]
call fcn.00412950
mov ecx, dword [0x492cd4]
push ecx
push 0
push eax
lea ecx, [ebp - 0xc0]
call fcn.004094e0
push 0x4cbda0
lea ecx, [ebp - 0x6c]
call fcn.00412950
mov edx, dword [0x492cd4]
lea ecx, [ebp - 0xb0]
push edx
push 0
push eax
call fcn.004094e0
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0xd
call fcn.00412b40
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xc
call fcn.00412840
mov edi, 0x4b8e88
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b8e88
lea ecx, [ebp - 0x38]
call fcn.00412ff0
mov eax, dword [0x492cd4]
lea ecx, [ebp - 0xc0]
push eax
push 0
push ecx
lea ecx, [ebp - 0x38]
call fcn.00412f10
mov edi, 0x4b8e54
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b8e54
lea ecx, [ebp - 0x38]
call fcn.0041d2b0
mov edx, dword [0x492cd4]
lea eax, [ebp - 0xb0]
push edx
push 0
push eax
lea ecx, [ebp - 0x38]
call fcn.00412f10
mov al, byte [0x4cb9ad]
test al, al
je 0x447e08
mov edi, str._netbar_
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str._netbar_
jmp 0x447e1d
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0xd
call fcn.00412b40
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xc
call fcn.00412840
jmp 0x448b0e
mov edi, str._std_
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str._std_
lea ecx, [ebp - 0x38]
call fcn.0041d2b0
mov ecx, dword [0x492cd4]
push ecx
push 0
push 0x4cbd30
lea ecx, [ebp - 0x38]
call fcn.00412f10
mov edx, dword [0x492cd4]
lea ecx, [ebp - 0x48]
push edx
push 0
push 0x4cb878
call fcn.004094e0
mov edi, 0x4b3b88
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b3b88
lea ecx, [ebp - 0x48]
call fcn.0041d2b0
mov eax, dword [0x492cd4]
lea ecx, [ebp - 0x48]
push eax
push 0
push 0x4cbcb0
call fcn.00412f10
mov edi, 0x4b3b88
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b3b88
lea ecx, [ebp - 0x48]
call fcn.0041d2b0
mov ecx, dword [0x492cd4]
push ecx
push 0
push 0x4cbd30
lea ecx, [ebp - 0x48]
call fcn.00412f10
push eax
xor eax, eax
pop eax
je 0x447ebe
invalid
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x18], esp
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x447ed9
mov dword [0x104d5000], 0x104d5000
lea ecx, [ebp - 0x180]
call fcn.00447360
mov edx, dword [0x492cd4]
lea eax, [ebp - 0x38]
push edx
push 0
push eax
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0xf
call fcn.004094e0
mov ecx, dword [0x492cd4]
lea edx, [ebp - 0x48]
push ecx
push 0
push edx
lea ecx, [ebp - 0x170]
call fcn.004094e0
mov eax, dword [0x492cd4]
lea ecx, [ebp - 0x150]
push eax
push 0
push 0x4cbc60
call fcn.004094e0
mov ecx, dword [0x492cd4]
push ecx
push 0
push 0x4cbd20
lea ecx, [ebp - 0x140]
call fcn.004094e0
push 0x4cbcb0
lea edx, [ebp - 0x7c]
push 0x4b8e58
push edx
call fcn.0040a260
add esp, 0xc
push eax
mov eax, dword [ebp - 0x158]
push eax
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0x10
call fcn.0044a750
push 1
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xf
call fcn.004017b0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x447f90
mov eax, 0x48e810
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 1
push 0
lea ecx, [ebp - 0x130]
call fcn.004520d0
lea ecx, [ebp - 0x180]
mov bl, 0x14
push ecx
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], bl
call fcn.00452370
test al, al
jne 0x447fe9
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xf
call fcn.004522b0
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0xc
call fcn.004473c0
jmp 0x448b0e
mov esi, dword [sym.imp.WINMM.dll_timeGetTime]
mov byte [ebp - 0x59], 0
lea edx, [ebp - 0x1e0]
lea ecx, [ebp - 0x130]
push edx
call fcn.00452dd0
mov eax, dword [ebp - 0x1e0]
mov byte [ebp - 4], 0x15
test al, al
jne 0x448071
test ah, ah
jne 0x448060
mov al, byte [0x4cbdf0]
test al, al
jne 0x448066
push eax
xor eax, eax
pop eax
je 0x448028
invalid
call esi
mov edi, eax
xor eax, eax
mov ecx, 0x64
sub ecx, eax
push ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
call esi
cmp eax, edi
jb 0x448046
sub eax, edi
jmp 0x448049
sub eax, edi
dec eax
cmp eax, 0x64
jb 0x44802e
push 1
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], bl
call fcn.004017b0
jmp 0x447ff3
mov byte [ebp - 0x59], 1
jmp 0x448071
lea ecx, [ebp - 0x130]
call fcn.00452d20
push 1
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], bl
call fcn.004017b0
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xf
call fcn.004522b0
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0xc
call fcn.004473c0
mov al, byte [ebp - 0x59]
test al, al
je 0x448b0e
mov dl, byte [ebp - 0x7d]
xor ebx, ebx
mov byte [ebp - 0x28], dl
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
push ecx
mov byte [ebp - 4], 0x16
call fcn.0044c8b0
add esp, 8
test al, al
jne 0x448101
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
push edx
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xc
call fcn.0044a930
mov ecx, dword [ebp - 0x24]
push ecx
call fcn.00486808
add esp, 4
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x448b0e
lea edx, [ebp - 0x7d]
lea eax, [ebp - 0x59]
push edx
push ebx
push eax
lea ecx, [ebp - 0x58]
call fcn.0044aa60
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x18], ebx
mov edi, dword [ebp - 0x24]
test edi, edi
je 0x4483ea
mov ecx, dword [ebp - 0x20]
mov eax, 0x66666667
sub ecx, edi
imul ecx
mov eax, dword [ebp - 0x18]
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
cmp eax, edx
jae 0x4483ea
mov edi, dword [ebx + edi + 4]
test edi, edi
jne 0x448152
mov edi, 0x48e810
mov eax, dword [0x4cbce4]
test eax, eax
jne 0x448160
mov eax, 0x48e810
push edi
push eax
call fcn.0042c2e0
add esp, 8
test eax, eax
jne 0x448204
mov esi, dword [ebp - 0x24]
lea ecx, [ebp - 0x1a8]
call fcn.0044a680
push eax
push 0x4cbce0
lea ecx, [ebp - 0x3c0]
mov byte [ebp - 4], 0x18
call fcn.0044ac90
lea edx, [ebp - 0x88]
push eax
push edx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x19
call fcn.0044a960
mov edi, dword [eax]
lea ecx, [ebp - 0x3c0]
mov byte [ebp - 4], 0x18
call fcn.0044a6b0
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x17
call fcn.004148f0
mov eax, dword [0x492cd4]
add esi, ebx
add edi, 0x20
push eax
push 0
push esi
mov ecx, edi
call fcn.004094e0
mov ecx, dword [0x492cd4]
lea edx, [esi + 0x10]
push ecx
push 0
push edx
lea ecx, [edi + 0x10]
call fcn.004094e0
mov eax, dword [esi + 0x20]
mov dword [edi + 0x20], eax
mov ecx, dword [esi + 0x24]
mov dword [edi + 0x24], ecx
jmp 0x4483d5
mov edx, dword [ebp - 0x24]
mov eax, dword [ebx + edx + 4]
test eax, eax
jne 0x448214
mov eax, 0x48e810
mov ecx, dword [0x4cbc34]
test ecx, ecx
jne 0x448223
mov ecx, 0x48e810
push eax
push ecx
call fcn.0042c2e0
add esp, 8
test eax, eax
jne 0x4482c8
mov esi, dword [ebp - 0x24]
lea ecx, [ebp - 0x388]
call fcn.0044a680
push eax
push 0x4cbc30
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 4], 0x1a
call fcn.0044ac90
push eax
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x1b
call fcn.0044a960
mov edi, dword [eax]
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 4], 0x1a
call fcn.0044a6b0
lea ecx, [ebp - 0x388]
mov byte [ebp - 4], 0x17
call fcn.004148f0
mov ecx, dword [0x492cd4]
add esi, ebx
add edi, 0x20
push ecx
push 0
push esi
mov ecx, edi
call fcn.004094e0
mov edx, dword [0x492cd4]
lea eax, [esi + 0x10]
push edx
push 0
push eax
lea ecx, [edi + 0x10]
call fcn.004094e0
mov ecx, dword [esi + 0x20]
mov dword [edi + 0x20], ecx
mov edx, dword [esi + 0x24]
mov dword [edi + 0x24], edx
jmp 0x4483d5
mov eax, dword [ebp - 0x24]
mov eax, dword [ebx + eax + 4]
test eax, eax
jne 0x4482d8
mov eax, 0x48e810
mov ecx, dword [0x4cbd44]
test ecx, ecx
jne 0x4482e7
mov ecx, 0x48e810
push eax
push ecx
call fcn.0042c2e0
add esp, 8
test eax, eax
jne 0x448349
mov esi, dword [ebp - 0x24]
lea ecx, [ebp - 0x360]
call fcn.0044a680
push eax
push 0x4cbd40
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x1c
call fcn.0044ac90
lea ecx, [ebp - 0xe8]
push eax
push ecx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x1d
call fcn.0044a960
mov edi, dword [eax]
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x1c
call fcn.0044a6b0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x360]
jmp 0x44839a
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x1d0]
mov esi, eax
mov edi, eax
call fcn.0044a680
add edi, ebx
push eax
push edi
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x1e
call fcn.0044ac90
lea ecx, [ebp - 0x64]
push eax
push ecx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x1f
call fcn.0044a960
mov edi, dword [eax]
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x1e
call fcn.0044a6b0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1d0]
call fcn.004148f0
mov edx, dword [0x492cd4]
add esi, ebx
add edi, 0x20
push edx
push 0
push esi
mov ecx, edi
call fcn.004094e0
mov eax, dword [0x492cd4]
lea ecx, [esi + 0x10]
push eax
push 0
push ecx
lea ecx, [edi + 0x10]
call fcn.004094e0
mov edx, dword [esi + 0x20]
mov dword [edi + 0x20], edx
mov eax, dword [esi + 0x24]
mov dword [edi + 0x24], eax
mov ecx, dword [ebp - 0x18]
mov esi, dword [sym.imp.WINMM.dll_timeGetTime]
inc ecx
add ebx, 0x28
mov dword [ebp - 0x18], ecx
jmp 0x448119
mov edi, dword [ebp - 0x54]
lea ecx, [ebp - 0xe4]
push 0x4cbce0
push ecx
lea ecx, [ebp - 0x58]
call fcn.0044abe0
cmp dword [ebp - 0xe4], edi
je 0x448ad7
mov edi, dword [ebp - 0x54]
lea edx, [ebp - 0xe4]
push 0x4cbc30
push edx
lea ecx, [ebp - 0x58]
call fcn.0044abe0
cmp dword [ebp - 0xe4], edi
je 0x448ad7
mov edi, dword [ebp - 0x54]
lea eax, [ebp - 0xe4]
push 0x4cbd40
push eax
lea ecx, [ebp - 0x58]
call fcn.0044abe0
cmp dword [ebp - 0xe4], edi
je 0x448ad7
lea ecx, [ebp - 0x1d0]
call fcn.0044a680
push eax
push 0x4cbce0
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x20
call fcn.0044ac90
lea ecx, [ebp - 0x64]
push eax
push ecx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x21
call fcn.0044a960
mov edi, dword [eax]
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x20
call fcn.0044a6b0
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 4], 0x17
call fcn.004148f0
mov edx, dword [edi + 0x40]
mov eax, dword [ebp - 0x4c]
add edx, 2
cmp edx, eax
jne 0x448ad7
lea ecx, [ebp - 0x1d0]
call fcn.0044a680
mov bl, 0x22
push eax
push 0x4cbc30
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], bl
call fcn.0044ac90
push eax
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x23
call fcn.0044a960
mov edi, dword [eax]
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], bl
call fcn.0044a6b0
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 4], 0x17
call fcn.004148f0
cmp dword [edi + 0x40], 0x3000101
ja 0x448538
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x16
call fcn.0044a590
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
push ecx
push edx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xc
call fcn.0044a930
mov eax, dword [ebp - 0x24]
push eax
jmp 0x448afb
push 0x4cbce0
lea ecx, [ebp - 0x58]
call fcn.0044aaa0
push 0x4cbc30
lea ecx, [ebp - 0x58]
call fcn.0044aaa0
lea ecx, [ebp - 0xe4]
push ecx
lea ecx, [ebp - 0x58]
call fcn.0044aa90
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x54]
cmp eax, ecx
mov dword [ebp - 0x14], eax
je 0x448a57
mov cl, byte [0x4cbdf0]
test cl, cl
jne 0x448a0e
lea edi, [eax + 0x20]
lea ecx, [ebp - 0x1a8]
push edi
call fcn.004122e0
lea edx, [edi + 0x10]
lea ecx, [ebp - 0x198]
push edx
mov byte [ebp - 4], 0x24
call fcn.004122e0
mov eax, dword [edi + 0x20]
mov dword [ebp - 0x188], eax
mov ecx, dword [edi + 0x24]
mov dword [ebp - 0x184], ecx
mov edi, 0x4b8e88
or ecx, 0xffffffff
xor eax, eax
mov byte [ebp - 4], 0x25
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b8e88
lea ecx, [ebp - 0x38]
call fcn.00412ff0
mov edx, dword [0x492cd4]
lea eax, [ebp - 0xc0]
push edx
push 0
push eax
lea ecx, [ebp - 0x38]
call fcn.00412f10
mov edi, 0x4b8e54
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b8e54
lea ecx, [ebp - 0x38]
call fcn.0041d2b0
mov ecx, dword [0x492cd4]
lea edx, [ebp - 0xb0]
push ecx
push 0
push edx
lea ecx, [ebp - 0x38]
call fcn.00412f10
mov al, byte [0x4cb9ad]
test al, al
je 0x448645
mov edi, str._netbar_
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str._netbar_
jmp 0x44865a
mov edi, str._std_
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str._std_
lea ecx, [ebp - 0x38]
call fcn.0041d2b0
mov eax, dword [0x492cd4]
lea ecx, [ebp - 0x1a8]
push eax
push 0
push ecx
lea ecx, [ebp - 0x38]
call fcn.00412f10
mov edx, dword [0x492cd4]
lea ecx, [ebp - 0x48]
push edx
push 0
push 0x4cb878
call fcn.004094e0
mov edi, 0x4b3b88
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b3b88
lea ecx, [ebp - 0x48]
call fcn.0041d2b0
mov eax, dword [0x492cd4]
lea ecx, [ebp - 0x48]
push eax
push 0
push 0x4cbcb0
call fcn.00412f10
mov edi, 0x4b3b88
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b3b88
lea ecx, [ebp - 0x48]
call fcn.0041d2b0
mov ecx, dword [0x492cd4]
lea edx, [ebp - 0x1a8]
push ecx
push 0
push edx
lea ecx, [ebp - 0x48]
call fcn.00412f10
mov al, byte [ebp - 0x7d]
push 0
lea ecx, [ebp - 0x6c]
mov byte [ebp - 0x6c], al
call fcn.004017b0
mov edi, 0x4c05e4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4c05e4
lea ecx, [ebp - 0x6c]
call fcn.00412ff0
lea ecx, [ebp - 0x6c]
lea edx, [ebp - 0x48]
push ecx
push edx
mov byte [ebp - 4], 0x26
call fcn.0044d270
add esp, 8
test al, al
je 0x448765
lea eax, [ebp - 0x198]
lea ecx, [ebp - 0x6c]
push eax
call fcn.00414960
test eax, eax
jne 0x448765
push 1
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x25
call fcn.004017b0
mov byte [ebp - 4], 0x27
jmp 0x448973
push eax
xor eax, eax
pop eax
je 0x44876d
invalid
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe4], esp
mov eax, dword [ebp - 0xe4]
test eax, eax
jne 0x448791
mov dword [0x104d5000], 0x104d5000
lea ecx, [ebp - 0x180]
call fcn.00447360
mov ecx, dword [0x492cd4]
lea edx, [ebp - 0x38]
push ecx
push 0
push edx
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x28
call fcn.004094e0
mov eax, dword [0x492cd4]
lea ecx, [ebp - 0x48]
push eax
push 0
push ecx
lea ecx, [ebp - 0x170]
call fcn.004094e0
mov edx, dword [0x492cd4]
lea ecx, [ebp - 0x150]
push edx
push 0
push 0x4cbc60
call fcn.004094e0
mov eax, dword [0x492cd4]
lea ecx, [ebp - 0x140]
push eax
push 0
push 0x4cbd20
call fcn.004094e0
push 0x4cbcb0
lea ecx, [ebp - 0x7c]
push 0x4b8e58
push ecx
call fcn.0040a260
add esp, 0xc
mov edx, dword [ebp - 0x158]
push eax
push edx
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0x29
call fcn.0044a750
push 1
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x28
call fcn.004017b0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x448847
mov eax, 0x48e810
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 1
push 0
lea ecx, [ebp - 0x130]
call fcn.004520d0
lea eax, [ebp - 0x180]
lea ecx, [ebp - 0x130]
push eax
mov byte [ebp - 4], 0x2d
call fcn.00452370
test al, al
je 0x4489ac
xor bl, bl
lea ecx, [ebp - 0x1e0]
push ecx
lea ecx, [ebp - 0x130]
call fcn.00452dd0
mov eax, dword [ebp - 0x1e0]
mov byte [ebp - 4], 0x2e
test al, al
jne 0x4488ff
test ah, ah
jne 0x4488f0
mov al, byte [0x4cbdf0]
test al, al
jne 0x4488f4
push eax
xor eax, eax
pop eax
je 0x4488b7
invalid
call esi
mov edi, eax
xor eax, eax
mov edx, 0x64
sub edx, eax
push edx
call dword [sym.imp.KERNEL32.dll_Sleep]
call esi
cmp eax, edi
jb 0x4488d5
sub eax, edi
jmp 0x4488d8
sub eax, edi
dec eax
cmp eax, 0x64
jb 0x4488bd
push 1
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x2d
call fcn.004017b0
jmp 0x448882
mov bl, 1
jmp 0x4488ff
lea ecx, [ebp - 0x130]
call fcn.00452d20
push 1
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x2d
call fcn.004017b0
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x28
call fcn.004522b0
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x26
call fcn.004473c0
test bl, bl
je 0x4489ca
lea eax, [ebp - 0x6c]
lea ecx, [ebp - 0x48]
push eax
push ecx
call fcn.0044d270
add esp, 8
test al, al
je 0x4489de
lea edx, [ebp - 0x198]
lea ecx, [ebp - 0x6c]
push edx
call fcn.00414960
test eax, eax
jne 0x4489de
push 1
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x25
call fcn.004017b0
mov byte [ebp - 4], 0x31
push 1
lea ecx, [ebp - 0x198]
call fcn.004017b0
push 1
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x17
call fcn.004017b0
lea ecx, [ebp - 0x14]
call fcn.0044adf0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x54]
cmp eax, ecx
je 0x448a57
jmp 0x448575
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x28
call fcn.004522b0
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x26
call fcn.004473c0
push 1
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x25
call fcn.004017b0
mov byte [ebp - 4], 0x2f
jmp 0x4489f0
push 1
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x25
call fcn.004017b0
mov byte [ebp - 4], 0x30
push 1
lea ecx, [ebp - 0x198]
call fcn.004017b0
push 1
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x17
call fcn.004017b0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x16
call fcn.0044a590
mov ebx, dword [ebp - 0x20]
mov edi, dword [ebp - 0x24]
cmp edi, ebx
mov byte [ebp - 4], 0xc
je 0x448a3e
xor esi, esi
push esi
mov ecx, edi
call fcn.004148d0
add edi, 0x28
cmp edi, ebx
jne 0x448a2a
mov edi, dword [ebp - 0x24]
jmp 0x448a40
xor esi, esi
push edi
call fcn.00486808
add esp, 4
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
jmp 0x448b0e
xor esi, esi
push 0xf003f
push esi
push esi
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov ebx, eax
cmp ebx, esi
je 0x448aa6
mov eax, dword [0x4cbdd4]
cmp eax, esi
jne 0x448a7a
mov eax, 0x48e810
push 0xf01ff
push eax
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenServiceA]
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov edi, eax
test edi, edi
je 0x448aa1
push 0
push 0
push edi
call dword [sym.imp.ADVAPI32.dll_StartServiceA]
push edi
call esi
push ebx
call esi
xor esi, esi
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x16
call fcn.0044a590
mov ebx, dword [ebp - 0x20]
mov edi, dword [ebp - 0x24]
cmp edi, ebx
mov byte [ebp - 4], 0xc
je 0x448a40
push esi
mov ecx, edi
call fcn.004148d0
add edi, 0x28
cmp edi, ebx
jne 0x448ac0
mov edi, dword [ebp - 0x24]
jmp 0x448a40
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x16
call fcn.0044a590
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
push eax
push ecx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xc
call fcn.0044a930
mov edx, dword [ebp - 0x24]
push edx
call fcn.00486808
add esp, 4
xor eax, eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
push 1
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 1
call fcn.004017b0
push 1
lea ecx, [ebp - 0xc0]
call fcn.004017b0
push 1
lea ecx, [ebp - 0xd0]
call fcn.004017b0
push 1
lea ecx, [ebp - 0xe0]
call fcn.004017b0
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0
call fcn.004017b0
push 1
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.004017b0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret