Function at 0x445e60
Capabilities:
Set file attributes
Start service

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x48bd55
push eax
mov eax, 0xa3ec
mov dword fs:[0], esp
call fcn.0042b9a0
push ebx
push esi
push edi
push eax
xor eax, eax
pop eax
je 0x445e8d
invalid
xor esi, esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x18], esp
mov ebx, 0x104d5000
mov eax, dword [ebp - 0x18]
cmp eax, esi
jne 0x445ea7
mov dword [0x104d5000], ebx
mov al, byte [ebp - 0x59]
push esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 0x38], al
call fcn.004017b0
mov edi, 0x4b5e48
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b5e48
lea ecx, [ebp - 0x38]
call fcn.00413060
mov edi, 0x4b0d60
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp - 4], esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b0d60
lea ecx, [ebp - 0x38]
call fcn.0041d290
mov edi, 0x4b0d60
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b0d60
lea ecx, [ebp - 0x38]
call fcn.0041d290
mov edi, 0x4b0d60
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b0d60
lea ecx, [ebp - 0x38]
call fcn.0041d290
mov edi, 0x49f190
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x49f190
lea ecx, [ebp - 0x38]
call fcn.0041d290
mov ecx, dword [0x491cd4]
push ecx
push esi
push 0x4c8b60
lea ecx, [ebp - 0x38]
call fcn.00412f80
mov edi, 0x49f190
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x49f190
lea ecx, [ebp - 0x38]
call fcn.0041d290
mov edi, 0x4b5e44
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b5e44
lea ecx, [ebp - 0x38]
call fcn.0041d290
mov edi, 0x4b5e40
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b5e40
lea ecx, [ebp - 0x38]
call fcn.0041d290
mov edi, 0x4b5e3c
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b5e3c
lea ecx, [ebp - 0x38]
call fcn.0041d290
mov al, byte [0x4c885d]
test al, al
je 0x445ff3
mov edi, str._netbar_
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str._netbar_
jmp 0x446008
mov edi, str._std_
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str._std_
lea ecx, [ebp - 0x38]
call fcn.0041d290
mov edx, dword [0x491cd4]
lea ecx, [ebp - 0x38]
push edx
push esi
push 0x4c8c40
call fcn.00412f80
mov al, byte [0x4c8728]
push esi
lea ecx, [ebp - 0x48]
mov byte [ebp - 0x48], al
call fcn.004017b0
mov ecx, dword [0x491cd4]
push ecx
push esi
push 0x4c8728
lea ecx, [ebp - 0x48]
call fcn.004094e0
mov edi, 0x4b0b48
or ecx, 0xffffffff
xor eax, eax
mov byte [ebp - 4], 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b0b48
lea ecx, [ebp - 0x48]
call fcn.0041d290
mov edx, dword [0x491cd4]
lea ecx, [ebp - 0x48]
push edx
push esi
push 0x4c8b60
call fcn.00412f80
mov edi, 0x4b0b48
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b0b48
lea ecx, [ebp - 0x48]
call fcn.0041d290
mov eax, dword [0x491cd4]
lea ecx, [ebp - 0x48]
push eax
push esi
push 0x4c8c40
call fcn.00412f80
push eax
xor eax, eax
pop eax
je 0x4460ba
invalid
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x18], esp
mov eax, dword [ebp - 0x18]
cmp eax, esi
jne 0x4460cd
mov dword [0x104d5000], ebx
lea ecx, [ebp - 0x180]
call fcn.00445bd0
mov ecx, dword [0x491cd4]
lea edx, [ebp - 0x38]
push ecx
push esi
push edx
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 2
call fcn.004094e0
mov eax, dword [0x491cd4]
lea ecx, [ebp - 0x48]
push eax
push esi
push ecx
lea ecx, [ebp - 0x170]
call fcn.004094e0
mov edx, dword [0x491cd4]
lea ecx, [ebp - 0x150]
push edx
push esi
push 0x4c8b10
call fcn.004094e0
mov eax, dword [0x491cd4]
lea ecx, [ebp - 0x140]
push eax
push esi
push 0x4c8bd0
call fcn.004094e0
push 0x4c8b60
lea ecx, [ebp - 0x7c]
push 0x4b5e18
push ecx
call fcn.0040a260
add esp, 0xc
mov edx, dword [ebp - 0x158]
push eax
push edx
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 3
call fcn.00448fc0
push 1
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 2
call fcn.004017b0
mov eax, dword [ebp - 0x44]
cmp eax, esi
jne 0x44617f
mov eax, 0x48d810
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 1
push esi
lea ecx, [ebp - 0x130]
call fcn.00450940
lea eax, [ebp - 0x180]
mov bl, 7
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], bl
call fcn.00450be0
test al, al
jne 0x4461d7
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 2
call fcn.00450b20
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 1
call fcn.00445c30
jmp 0x4473b6
mov esi, dword [sym.imp.WINMM.dll_timeGetTime]
mov byte [ebp - 0x59], 0
lea ecx, [ebp - 0x1e0]
push ecx
lea ecx, [ebp - 0x130]
call fcn.00451640
mov eax, dword [ebp - 0x1e0]
mov byte [ebp - 4], 8
test al, al
jne 0x44625f
test ah, ah
jne 0x44624e
mov al, byte [0x4c8ca0]
test al, al
jne 0x446254
push eax
xor eax, eax
pop eax
je 0x446216
invalid
call esi
mov edi, eax
xor eax, eax
mov edx, 0x64
sub edx, eax
push edx
call dword [sym.imp.KERNEL32.dll_Sleep]
call esi
cmp eax, edi
jb 0x446234
sub eax, edi
jmp 0x446237
sub eax, edi
dec eax
cmp eax, 0x64
jb 0x44621c
push 1
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], bl
call fcn.004017b0
jmp 0x4461e1
mov byte [ebp - 0x59], 1
jmp 0x44625f
lea ecx, [ebp - 0x130]
call fcn.00451590
push 1
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], bl
call fcn.004017b0
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 2
call fcn.00450b20
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 1
call fcn.00445c30
mov al, byte [ebp - 0x59]
test al, al
je 0x4473b6
lea eax, [ebp - 0x1e3]
lea ecx, [ebp - 0xe0]
push eax
call fcn.004122c0
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], 9
push ecx
lea ecx, [ebp - 0xd0]
call fcn.004122c0
lea edx, [ebp - 0x1e1]
lea ecx, [ebp - 0xc0]
push edx
mov byte [ebp - 4], 0xa
call fcn.004122c0
lea eax, [ebp - 0x1e2]
lea ecx, [ebp - 0xb0]
push eax
mov byte [ebp - 4], 0xb
call fcn.004122c0
mov byte [ebp - 4], 0xc
push eax
xor eax, eax
pop eax
je 0x4462f8
invalid
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x18], esp
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x446313
mov dword [0x104d5000], 0x104d5000
lea ecx, [ebp - 0x59]
push ecx
lea ecx, [ebp - 0x7c]
call fcn.004122c0
lea edx, [ebp - 0x7c]
lea eax, [ebp - 0x48]
push edx
push eax
mov byte [ebp - 4], 0xd
call fcn.0044a6b0
add esp, 8
test al, al
je 0x446667
lea ecx, [ebp - 0xd]
lea edx, [ebp - 0x7d]
push ecx
push edx
lea ecx, [ebp - 0x6c]
call fcn.004128a0
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xe
xor esi, esi
call fcn.00412880
test eax, eax
jbe 0x4464a5
xor edi, edi
mov eax, dword [ebp - 0x78]
mov eax, dword [edi + eax + 4]
test eax, eax
jne 0x446373
mov eax, 0x48d810
mov ecx, dword [0x4c8b34]
test ecx, ecx
jne 0x446382
mov ecx, 0x48d810
push eax
push ecx
call fcn.0042c2c0
add esp, 8
test eax, eax
jne 0x4463b3
mov ebx, dword [ebp - 0x78]
push 0x4c8b30
lea ecx, [ebp - 0x6c]
call fcn.00412950
mov ecx, dword [0x491cd4]
lea edx, [edi + ebx + 0x10]
push ecx
push 0
push edx
jmp 0x44648a
mov eax, dword [ebp - 0x78]
mov eax, dword [edi + eax + 4]
test eax, eax
jne 0x4463c3
mov eax, 0x48d810
mov ecx, dword [0x4c8c64]
test ecx, ecx
jne 0x4463d2
mov ecx, 0x48d810
push eax
push ecx
call fcn.0042c2c0
add esp, 8
test eax, eax
jne 0x4463ea
mov ebx, dword [ebp - 0x78]
push 0x4c8c60
jmp 0x446398
mov eax, dword [ebp - 0x78]
mov eax, dword [edi + eax + 4]
test eax, eax
jne 0x4463fa
mov eax, 0x48d810
mov ecx, dword [0x4c8b24]
test ecx, ecx
jne 0x446409
mov ecx, 0x48d810
push eax
push ecx
call fcn.0042c2c0
add esp, 8
test eax, eax
jne 0x446421
mov ebx, dword [ebp - 0x78]
push 0x4c8b20
jmp 0x446456
mov eax, dword [ebp - 0x78]
mov eax, dword [edi + eax + 4]
test eax, eax
jne 0x446431
mov eax, 0x48d810
mov ecx, dword [0x4c8c54]
test ecx, ecx
jne 0x446440
mov ecx, 0x48d810
push eax
push ecx
call fcn.0042c2c0
add esp, 8
test eax, eax
jne 0x44646e
mov ebx, dword [ebp - 0x78]
push 0x4c8c50
lea ecx, [ebp - 0x6c]
call fcn.00412950
mov ecx, dword [0x491cd4]
lea edx, [ebx + edi + 0x10]
push ecx
push 0
push edx
jmp 0x44648a
mov eax, dword [ebp - 0x78]
lea ecx, [ebp - 0x6c]
lea ebx, [edi + eax]
push ebx
call fcn.00412950
mov ecx, dword [0x491cd4]
add ebx, 0x10
push ecx
push 0
push ebx
mov ecx, eax
call fcn.004094e0
lea ecx, [ebp - 0x7c]
inc esi
add edi, 0x20
call fcn.00412880
cmp esi, eax
jb 0x446363
mov edi, dword [ebp - 0x68]
lea edx, [ebp - 0xe4]
push 0x4c8b30
push edx
lea ecx, [ebp - 0x6c]
call fcn.00412a90
cmp dword [eax], edi
sete al
test al, al
jne 0x44665b
mov edi, dword [ebp - 0x68]
lea eax, [ebp - 0x18]
push 0x4c8c60
push eax
lea ecx, [ebp - 0x6c]
call fcn.00412a90
cmp dword [eax], edi
sete al
test al, al
jne 0x44665b
mov edi, dword [ebp - 0x68]
lea ecx, [ebp - 0x94]
push 0x4c8b20
push ecx
lea ecx, [ebp - 0x6c]
call fcn.00412a90
cmp dword [eax], edi
sete al
test al, al
jne 0x44665b
mov edi, dword [ebp - 0x68]
lea edx, [ebp - 0x84]
push 0x4c8c50
push edx
lea ecx, [ebp - 0x6c]
call fcn.00412a90
cmp dword [eax], edi
sete al
test al, al
jne 0x44665b
push 0x4c8b30
lea ecx, [ebp - 0x6c]
call fcn.00412950
mov ecx, dword [0x491cd4]
push ecx
push 0
push eax
lea ecx, [ebp - 0xe0]
call fcn.004094e0
push 0x4c8c60
lea ecx, [ebp - 0x6c]
call fcn.00412950
mov edx, dword [0x491cd4]
lea ecx, [ebp - 0xd0]
push edx
push 0
push eax
call fcn.004094e0
push 0x4c8b20
lea ecx, [ebp - 0x6c]
call fcn.00412950
mov ecx, dword [0x491cd4]
push ecx
push 0
push eax
lea ecx, [ebp - 0xc0]
call fcn.004094e0
push 0x4c8c50
lea ecx, [ebp - 0x6c]
call fcn.00412950
mov edx, dword [0x491cd4]
lea ecx, [ebp - 0xb0]
push edx
push 0
push eax
call fcn.004094e0
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0xd
call fcn.00412b40
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xc
call fcn.00412840
mov edi, 0x4b5e48
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b5e48
lea ecx, [ebp - 0x38]
call fcn.00413060
mov eax, dword [0x491cd4]
lea ecx, [ebp - 0xc0]
push eax
push 0
push ecx
lea ecx, [ebp - 0x38]
call fcn.00412f80
mov edi, 0x4b5e14
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b5e14
lea ecx, [ebp - 0x38]
call fcn.0041d290
mov edx, dword [0x491cd4]
lea eax, [ebp - 0xb0]
push edx
push 0
push eax
lea ecx, [ebp - 0x38]
call fcn.00412f80
mov al, byte [0x4c885d]
test al, al
je 0x446678
mov edi, str._netbar_
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str._netbar_
jmp 0x44668d
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0xd
call fcn.00412b40
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xc
call fcn.00412840
jmp 0x44737e
mov edi, str._std_
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str._std_
lea ecx, [ebp - 0x38]
call fcn.0041d290
mov ecx, dword [0x491cd4]
push ecx
push 0
push 0x4c8be0
lea ecx, [ebp - 0x38]
call fcn.00412f80
mov edx, dword [0x491cd4]
lea ecx, [ebp - 0x48]
push edx
push 0
push 0x4c8728
call fcn.004094e0
mov edi, 0x4b0b48
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b0b48
lea ecx, [ebp - 0x48]
call fcn.0041d290
mov eax, dword [0x491cd4]
lea ecx, [ebp - 0x48]
push eax
push 0
push 0x4c8b60
call fcn.00412f80
mov edi, 0x4b0b48
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b0b48
lea ecx, [ebp - 0x48]
call fcn.0041d290
mov ecx, dword [0x491cd4]
push ecx
push 0
push 0x4c8be0
lea ecx, [ebp - 0x48]
call fcn.00412f80
push eax
xor eax, eax
pop eax
je 0x44672e
invalid
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x18], esp
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x446749
mov dword [0x104d5000], 0x104d5000
lea ecx, [ebp - 0x180]
call fcn.00445bd0
mov edx, dword [0x491cd4]
lea eax, [ebp - 0x38]
push edx
push 0
push eax
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0xf
call fcn.004094e0
mov ecx, dword [0x491cd4]
lea edx, [ebp - 0x48]
push ecx
push 0
push edx
lea ecx, [ebp - 0x170]
call fcn.004094e0
mov eax, dword [0x491cd4]
lea ecx, [ebp - 0x150]
push eax
push 0
push 0x4c8b10
call fcn.004094e0
mov ecx, dword [0x491cd4]
push ecx
push 0
push 0x4c8bd0
lea ecx, [ebp - 0x140]
call fcn.004094e0
push 0x4c8b60
lea edx, [ebp - 0x7c]
push 0x4b5e18
push edx
call fcn.0040a260
add esp, 0xc
push eax
mov eax, dword [ebp - 0x158]
push eax
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0x10
call fcn.00448fc0
push 1
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xf
call fcn.004017b0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x446800
mov eax, 0x48d810
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 1
push 0
lea ecx, [ebp - 0x130]
call fcn.00450940
lea ecx, [ebp - 0x180]
mov bl, 0x14
push ecx
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], bl
call fcn.00450be0
test al, al
jne 0x446859
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xf
call fcn.00450b20
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0xc
call fcn.00445c30
jmp 0x44737e
mov esi, dword [sym.imp.WINMM.dll_timeGetTime]
mov byte [ebp - 0x59], 0
lea edx, [ebp - 0x1e0]
lea ecx, [ebp - 0x130]
push edx
call fcn.00451640
mov eax, dword [ebp - 0x1e0]
mov byte [ebp - 4], 0x15
test al, al
jne 0x4468e1
test ah, ah
jne 0x4468d0
mov al, byte [0x4c8ca0]
test al, al
jne 0x4468d6
push eax
xor eax, eax
pop eax
je 0x446898
invalid
call esi
mov edi, eax
xor eax, eax
mov ecx, 0x64
sub ecx, eax
push ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
call esi
cmp eax, edi
jb 0x4468b6
sub eax, edi
jmp 0x4468b9
sub eax, edi
dec eax
cmp eax, 0x64
jb 0x44689e
push 1
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], bl
call fcn.004017b0
jmp 0x446863
mov byte [ebp - 0x59], 1
jmp 0x4468e1
lea ecx, [ebp - 0x130]
call fcn.00451590
push 1
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], bl
call fcn.004017b0
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xf
call fcn.00450b20
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0xc
call fcn.00445c30
mov al, byte [ebp - 0x59]
test al, al
je 0x44737e
mov dl, byte [ebp - 0x7d]
xor ebx, ebx
mov byte [ebp - 0x28], dl
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
push ecx
mov byte [ebp - 4], 0x16
call fcn.0044b120
add esp, 8
test al, al
jne 0x446971
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
push edx
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xc
call fcn.004491a0
mov ecx, dword [ebp - 0x24]
push ecx
call fcn.00485078
add esp, 4
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x44737e
lea edx, [ebp - 0x7d]
lea eax, [ebp - 0x59]
push edx
push ebx
push eax
lea ecx, [ebp - 0x58]
call fcn.004492d0
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x18], ebx
mov edi, dword [ebp - 0x24]
test edi, edi
je 0x446c5a
mov ecx, dword [ebp - 0x20]
mov eax, 0x66666667
sub ecx, edi
imul ecx
mov eax, dword [ebp - 0x18]
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
cmp eax, edx
jae 0x446c5a
mov edi, dword [ebx + edi + 4]
test edi, edi
jne 0x4469c2
mov edi, 0x48d810
mov eax, dword [0x4c8b94]
test eax, eax
jne 0x4469d0
mov eax, 0x48d810
push edi
push eax
call fcn.0042c2c0
add esp, 8
test eax, eax
jne 0x446a74
mov esi, dword [ebp - 0x24]
lea ecx, [ebp - 0x1a8]
call fcn.00448ef0
push eax
push 0x4c8b90
lea ecx, [ebp - 0x3c0]
mov byte [ebp - 4], 0x18
call fcn.00449500
lea edx, [ebp - 0x88]
push eax
push edx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x19
call fcn.004491d0
mov edi, dword [eax]
lea ecx, [ebp - 0x3c0]
mov byte [ebp - 4], 0x18
call fcn.00448f20
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x17
call fcn.00412c70
mov eax, dword [0x491cd4]
add esi, ebx
add edi, 0x20
push eax
push 0
push esi
mov ecx, edi
call fcn.004094e0
mov ecx, dword [0x491cd4]
lea edx, [esi + 0x10]
push ecx
push 0
push edx
lea ecx, [edi + 0x10]
call fcn.004094e0
mov eax, dword [esi + 0x20]
mov dword [edi + 0x20], eax
mov ecx, dword [esi + 0x24]
mov dword [edi + 0x24], ecx
jmp 0x446c45
mov edx, dword [ebp - 0x24]
mov eax, dword [ebx + edx + 4]
test eax, eax
jne 0x446a84
mov eax, 0x48d810
mov ecx, dword [0x4c8ae4]
test ecx, ecx
jne 0x446a93
mov ecx, 0x48d810
push eax
push ecx
call fcn.0042c2c0
add esp, 8
test eax, eax
jne 0x446b38
mov esi, dword [ebp - 0x24]
lea ecx, [ebp - 0x388]
call fcn.00448ef0
push eax
push 0x4c8ae0
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 4], 0x1a
call fcn.00449500
push eax
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x1b
call fcn.004491d0
mov edi, dword [eax]
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 4], 0x1a
call fcn.00448f20
lea ecx, [ebp - 0x388]
mov byte [ebp - 4], 0x17
call fcn.00412c70
mov ecx, dword [0x491cd4]
add esi, ebx
add edi, 0x20
push ecx
push 0
push esi
mov ecx, edi
call fcn.004094e0
mov edx, dword [0x491cd4]
lea eax, [esi + 0x10]
push edx
push 0
push eax
lea ecx, [edi + 0x10]
call fcn.004094e0
mov ecx, dword [esi + 0x20]
mov dword [edi + 0x20], ecx
mov edx, dword [esi + 0x24]
mov dword [edi + 0x24], edx
jmp 0x446c45
mov eax, dword [ebp - 0x24]
mov eax, dword [ebx + eax + 4]
test eax, eax
jne 0x446b48
mov eax, 0x48d810
mov ecx, dword [0x4c8bf4]
test ecx, ecx
jne 0x446b57
mov ecx, 0x48d810
push eax
push ecx
call fcn.0042c2c0
add esp, 8
test eax, eax
jne 0x446bb9
mov esi, dword [ebp - 0x24]
lea ecx, [ebp - 0x360]
call fcn.00448ef0
push eax
push 0x4c8bf0
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x1c
call fcn.00449500
lea ecx, [ebp - 0xe8]
push eax
push ecx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x1d
call fcn.004491d0
mov edi, dword [eax]
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x1c
call fcn.00448f20
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x360]
jmp 0x446c0a
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x1d0]
mov esi, eax
mov edi, eax
call fcn.00448ef0
add edi, ebx
push eax
push edi
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x1e
call fcn.00449500
lea ecx, [ebp - 0x64]
push eax
push ecx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x1f
call fcn.004491d0
mov edi, dword [eax]
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x1e
call fcn.00448f20
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1d0]
call fcn.00412c70
mov edx, dword [0x491cd4]
add esi, ebx
add edi, 0x20
push edx
push 0
push esi
mov ecx, edi
call fcn.004094e0
mov eax, dword [0x491cd4]
lea ecx, [esi + 0x10]
push eax
push 0
push ecx
lea ecx, [edi + 0x10]
call fcn.004094e0
mov edx, dword [esi + 0x20]
mov dword [edi + 0x20], edx
mov eax, dword [esi + 0x24]
mov dword [edi + 0x24], eax
mov ecx, dword [ebp - 0x18]
mov esi, dword [sym.imp.WINMM.dll_timeGetTime]
inc ecx
add ebx, 0x28
mov dword [ebp - 0x18], ecx
jmp 0x446989
mov edi, dword [ebp - 0x54]
lea ecx, [ebp - 0xe4]
push 0x4c8b90
push ecx
lea ecx, [ebp - 0x58]
call fcn.00449450
cmp dword [ebp - 0xe4], edi
je 0x447347
mov edi, dword [ebp - 0x54]
lea edx, [ebp - 0xe4]
push 0x4c8ae0
push edx
lea ecx, [ebp - 0x58]
call fcn.00449450
cmp dword [ebp - 0xe4], edi
je 0x447347
mov edi, dword [ebp - 0x54]
lea eax, [ebp - 0xe4]
push 0x4c8bf0
push eax
lea ecx, [ebp - 0x58]
call fcn.00449450
cmp dword [ebp - 0xe4], edi
je 0x447347
lea ecx, [ebp - 0x1d0]
call fcn.00448ef0
push eax
push 0x4c8b90
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x20
call fcn.00449500
lea ecx, [ebp - 0x64]
push eax
push ecx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x21
call fcn.004491d0
mov edi, dword [eax]
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x20
call fcn.00448f20
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 4], 0x17
call fcn.00412c70
mov edx, dword [edi + 0x40]
mov eax, dword [ebp - 0x4c]
add edx, 2
cmp edx, eax
jne 0x447347
lea ecx, [ebp - 0x1d0]
call fcn.00448ef0
mov bl, 0x22
push eax
push 0x4c8ae0
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], bl
call fcn.00449500
push eax
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x23
call fcn.004491d0
mov edi, dword [eax]
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], bl
call fcn.00448f20
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 4], 0x17
call fcn.00412c70
cmp dword [edi + 0x40], 0x3000100
ja 0x446da8
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x16
call fcn.00448e00
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
push ecx
push edx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xc
call fcn.004491a0
mov eax, dword [ebp - 0x24]
push eax
jmp 0x44736b
push 0x4c8b90
lea ecx, [ebp - 0x58]
call fcn.00449310
push 0x4c8ae0
lea ecx, [ebp - 0x58]
call fcn.00449310
lea ecx, [ebp - 0xe4]
push ecx
lea ecx, [ebp - 0x58]
call fcn.00449300
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x54]
cmp eax, ecx
mov dword [ebp - 0x14], eax
je 0x4472c7
mov cl, byte [0x4c8ca0]
test cl, cl
jne 0x44727e
lea edi, [eax + 0x20]
lea ecx, [ebp - 0x1a8]
push edi
call fcn.004122e0
lea edx, [edi + 0x10]
lea ecx, [ebp - 0x198]
push edx
mov byte [ebp - 4], 0x24
call fcn.004122e0
mov eax, dword [edi + 0x20]
mov dword [ebp - 0x188], eax
mov ecx, dword [edi + 0x24]
mov dword [ebp - 0x184], ecx
mov edi, 0x4b5e48
or ecx, 0xffffffff
xor eax, eax
mov byte [ebp - 4], 0x25
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b5e48
lea ecx, [ebp - 0x38]
call fcn.00413060
mov edx, dword [0x491cd4]
lea eax, [ebp - 0xc0]
push edx
push 0
push eax
lea ecx, [ebp - 0x38]
call fcn.00412f80
mov edi, 0x4b5e14
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b5e14
lea ecx, [ebp - 0x38]
call fcn.0041d290
mov ecx, dword [0x491cd4]
lea edx, [ebp - 0xb0]
push ecx
push 0
push edx
lea ecx, [ebp - 0x38]
call fcn.00412f80
mov al, byte [0x4c885d]
test al, al
je 0x446eb5
mov edi, str._netbar_
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str._netbar_
jmp 0x446eca
mov edi, str._std_
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str._std_
lea ecx, [ebp - 0x38]
call fcn.0041d290
mov eax, dword [0x491cd4]
lea ecx, [ebp - 0x1a8]
push eax
push 0
push ecx
lea ecx, [ebp - 0x38]
call fcn.00412f80
mov edx, dword [0x491cd4]
lea ecx, [ebp - 0x48]
push edx
push 0
push 0x4c8728
call fcn.004094e0
mov edi, 0x4b0b48
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b0b48
lea ecx, [ebp - 0x48]
call fcn.0041d290
mov eax, dword [0x491cd4]
lea ecx, [ebp - 0x48]
push eax
push 0
push 0x4c8b60
call fcn.00412f80
mov edi, 0x4b0b48
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4b0b48
lea ecx, [ebp - 0x48]
call fcn.0041d290
mov ecx, dword [0x491cd4]
lea edx, [ebp - 0x1a8]
push ecx
push 0
push edx
lea ecx, [ebp - 0x48]
call fcn.00412f80
mov al, byte [ebp - 0x7d]
push 0
lea ecx, [ebp - 0x6c]
mov byte [ebp - 0x6c], al
call fcn.004017b0
mov edi, 0x4bd5a4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4bd5a4
lea ecx, [ebp - 0x6c]
call fcn.00413060
lea ecx, [ebp - 0x6c]
lea edx, [ebp - 0x48]
push ecx
push edx
mov byte [ebp - 4], 0x26
call fcn.0044bae0
add esp, 8
test al, al
je 0x446fd5
lea eax, [ebp - 0x198]
lea ecx, [ebp - 0x6c]
push eax
call fcn.00414960
test eax, eax
jne 0x446fd5
push 1
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x25
call fcn.004017b0
mov byte [ebp - 4], 0x27
jmp 0x4471e3
push eax
xor eax, eax
pop eax
je 0x446fdd
invalid
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe4], esp
mov eax, dword [ebp - 0xe4]
test eax, eax
jne 0x447001
mov dword [0x104d5000], 0x104d5000
lea ecx, [ebp - 0x180]
call fcn.00445bd0
mov ecx, dword [0x491cd4]
lea edx, [ebp - 0x38]
push ecx
push 0
push edx
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x28
call fcn.004094e0
mov eax, dword [0x491cd4]
lea ecx, [ebp - 0x48]
push eax
push 0
push ecx
lea ecx, [ebp - 0x170]
call fcn.004094e0
mov edx, dword [0x491cd4]
lea ecx, [ebp - 0x150]
push edx
push 0
push 0x4c8b10
call fcn.004094e0
mov eax, dword [0x491cd4]
lea ecx, [ebp - 0x140]
push eax
push 0
push 0x4c8bd0
call fcn.004094e0
push 0x4c8b60
lea ecx, [ebp - 0x7c]
push 0x4b5e18
push ecx
call fcn.0040a260
add esp, 0xc
mov edx, dword [ebp - 0x158]
push eax
push edx
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0x29
call fcn.00448fc0
push 1
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x28
call fcn.004017b0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x4470b7
mov eax, 0x48d810
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 1
push 0
lea ecx, [ebp - 0x130]
call fcn.00450940
lea eax, [ebp - 0x180]
lea ecx, [ebp - 0x130]
push eax
mov byte [ebp - 4], 0x2d
call fcn.00450be0
test al, al
je 0x44721c
xor bl, bl
lea ecx, [ebp - 0x1e0]
push ecx
lea ecx, [ebp - 0x130]
call fcn.00451640
mov eax, dword [ebp - 0x1e0]
mov byte [ebp - 4], 0x2e
test al, al
jne 0x44716f
test ah, ah
jne 0x447160
mov al, byte [0x4c8ca0]
test al, al
jne 0x447164
push eax
xor eax, eax
pop eax
je 0x447127
invalid
call esi
mov edi, eax
xor eax, eax
mov edx, 0x64
sub edx, eax
push edx
call dword [sym.imp.KERNEL32.dll_Sleep]
call esi
cmp eax, edi
jb 0x447145
sub eax, edi
jmp 0x447148
sub eax, edi
dec eax
cmp eax, 0x64
jb 0x44712d
push 1
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x2d
call fcn.004017b0
jmp 0x4470f2
mov bl, 1
jmp 0x44716f
lea ecx, [ebp - 0x130]
call fcn.00451590
push 1
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x2d
call fcn.004017b0
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x28
call fcn.00450b20
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x26
call fcn.00445c30
test bl, bl
je 0x44723a
lea eax, [ebp - 0x6c]
lea ecx, [ebp - 0x48]
push eax
push ecx
call fcn.0044bae0
add esp, 8
test al, al
je 0x44724e
lea edx, [ebp - 0x198]
lea ecx, [ebp - 0x6c]
push edx
call fcn.00414960
test eax, eax
jne 0x44724e
push 1
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x25
call fcn.004017b0
mov byte [ebp - 4], 0x31
push 1
lea ecx, [ebp - 0x198]
call fcn.004017b0
push 1
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x17
call fcn.004017b0
lea ecx, [ebp - 0x14]
call fcn.00449660
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x54]
cmp eax, ecx
je 0x4472c7
jmp 0x446de5
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x28
call fcn.00450b20
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x26
call fcn.00445c30
push 1
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x25
call fcn.004017b0
mov byte [ebp - 4], 0x2f
jmp 0x447260
push 1
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x25
call fcn.004017b0
mov byte [ebp - 4], 0x30
push 1
lea ecx, [ebp - 0x198]
call fcn.004017b0
push 1
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x17
call fcn.004017b0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x16
call fcn.00448e00
mov ebx, dword [ebp - 0x20]
mov edi, dword [ebp - 0x24]
cmp edi, ebx
mov byte [ebp - 4], 0xc
je 0x4472ae
xor esi, esi
push esi
mov ecx, edi
call fcn.00414940
add edi, 0x28
cmp edi, ebx
jne 0x44729a
mov edi, dword [ebp - 0x24]
jmp 0x4472b0
xor esi, esi
push edi
call fcn.00485078
add esp, 4
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
jmp 0x44737e
xor esi, esi
push 0xf003f
push esi
push esi
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov ebx, eax
cmp ebx, esi
je 0x447316
mov eax, dword [0x4c8c84]
cmp eax, esi
jne 0x4472ea
mov eax, 0x48d810
push 0xf01ff
push eax
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenServiceA]
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov edi, eax
test edi, edi
je 0x447311
push 0
push 0
push edi
call dword [sym.imp.ADVAPI32.dll_StartServiceA]
push edi
call esi
push ebx
call esi
xor esi, esi
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x16
call fcn.00448e00
mov ebx, dword [ebp - 0x20]
mov edi, dword [ebp - 0x24]
cmp edi, ebx
mov byte [ebp - 4], 0xc
je 0x4472b0
push esi
mov ecx, edi
call fcn.00414940
add edi, 0x28
cmp edi, ebx
jne 0x447330
mov edi, dword [ebp - 0x24]
jmp 0x4472b0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x16
call fcn.00448e00
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
push eax
push ecx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xc
call fcn.004491a0
mov edx, dword [ebp - 0x24]
push edx
call fcn.00485078
add esp, 4
xor eax, eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
push 1
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 1
call fcn.004017b0
push 1
lea ecx, [ebp - 0xc0]
call fcn.004017b0
push 1
lea ecx, [ebp - 0xd0]
call fcn.004017b0
push 1
lea ecx, [ebp - 0xe0]
call fcn.004017b0
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0
call fcn.004017b0
push 1
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.004017b0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret