Function at 0x46d7c0
Capabilities:
Execute command

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cefd5
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x24
push esi
mov eax, dword [0x4ef400]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0xa
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
push str.FairplayKD
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 0
movups xmmword [ebp - 0x30], xmm0
call fcn.0045b260
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0
call fcn.0046d460
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov byte [ebp - 0x15], al
cmp ecx, 0xf
jbe 0x46d86b
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46d861
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46de01
push ecx
push edx
call fcn.004ca5d3
add esp, 8
push 0xb
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
push str.FairplayKD1
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 0
movups xmmword [ebp - 0x30], xmm0
call fcn.0045b260
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 1
call fcn.0046d460
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov byte [ebp - 0x16], al
cmp ecx, 0xf
jbe 0x46d8dc
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46d8d2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46de01
push ecx
push edx
call fcn.004ca5d3
add esp, 8
push 0xb
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
push str.FairplayKD2
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 0
movups xmmword [ebp - 0x30], xmm0
call fcn.0045b260
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 2
call fcn.0046d460
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov byte [ebp - 0x17], al
cmp ecx, 0xf
jbe 0x46d94d
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46d943
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46de01
push ecx
push edx
call fcn.004ca5d3
add esp, 8
push 0xb
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
push str.FairplayKD3
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 0
movups xmmword [ebp - 0x30], xmm0
call fcn.0045b260
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 3
call fcn.0046d460
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov byte [ebp - 0x18], al
cmp ecx, 0xf
jbe 0x46d9be
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46d9b4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46de01
push ecx
push edx
call fcn.004ca5d3
add esp, 8
push 0xa
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
push str.FairplayKD
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 0
movups xmmword [ebp - 0x30], xmm0
call fcn.0045b260
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 4
call fcn.0046d610
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov byte [ebp - 0x12], al
cmp ecx, 0xf
jbe 0x46da2f
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46da25
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46de01
push ecx
push edx
call fcn.004ca5d3
add esp, 8
push 0xb
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
push str.FairplayKD1
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 0
movups xmmword [ebp - 0x30], xmm0
call fcn.0045b260
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 5
call fcn.0046d610
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov byte [ebp - 0x13], al
cmp ecx, 0xf
jbe 0x46daa0
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46da96
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46de01
push ecx
push edx
call fcn.004ca5d3
add esp, 8
push 0xb
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
push str.FairplayKD2
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 0
movups xmmword [ebp - 0x30], xmm0
call fcn.0045b260
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 6
call fcn.0046d610
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov byte [ebp - 0x14], al
cmp ecx, 0xf
jbe 0x46db11
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46db07
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46de01
push ecx
push edx
call fcn.004ca5d3
add esp, 8
push 0xb
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
push str.FairplayKD3
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 0
movups xmmword [ebp - 0x30], xmm0
call fcn.0045b260
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 7
call fcn.0046d610
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov byte [ebp - 0x11], al
cmp ecx, 0xf
jbe 0x46db85
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46db78
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46de01
push ecx
push edx
call fcn.004ca5d3
mov al, byte [ebp - 0x11]
add esp, 8
cmp byte [ebp - 0x12], 0
jne 0x46de58
cmp byte [ebp - 0x13], 0
jne 0x46de58
cmp byte [ebp - 0x14], 0
jne 0x46de58
test al, al
jne 0x46de58
cmp byte [ebp - 0x15], al
jne 0x46dc91
cmp byte [ebp - 0x16], al
jne 0x46dc91
cmp byte [ebp - 0x17], al
jne 0x46dc91
cmp byte [ebp - 0x18], al
jne 0x46dc91
mov esi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push str.sc_stop_Fairplaykd___nul
call esi
add esp, 4
push str.sc_stop_Fairplaykd1___nul
call esi
add esp, 4
push str.sc_stop_Fairplaykd2___nul
call esi
add esp, 4
push str.sc_stop_Fairplaykd3___nul
call esi
add esp, 4
push 0x4e5cdc
call esi
add esp, 4
mov dword [ebp - 0x20], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x30]
movups xmmword [ebp - 0x30], xmm0
push 0xb
push str.FairplayKD2
call fcn.0045b260
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 8
call fcn.0046d060
mov ecx, dword [ebp - 0x1c]
mov byte [ebp - 0x18], al
cmp ecx, 0xf
jbe 0x46dc74
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46dc67
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46de01
push ecx
push edx
call fcn.004ca5d3
mov al, byte [ebp - 0x18]
add esp, 8
test al, al
jne 0x46de1c
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov esi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push str.sc_stop_Fairplaykd___nul
call esi
add esp, 4
push str.sc_delete_Fairplaykd___nul
call esi
add esp, 4
push str.sc_stop_Fairplaykd1___nul
call esi
add esp, 4
push str.sc_delete_Fairplaykd1___nul
call esi
add esp, 4
push str.sc_stop_Fairplaykd2___nul
call esi
add esp, 4
push str.sc_delete_Fairplaykd2___nul
call esi
add esp, 4
push str.sc_stop_Fairplaykd3___nul
call esi
add esp, 4
push str.sc_delete_Fairplaykd3___nul
call esi
add esp, 4
push str.sc_stop_FairplayKD___nul
call esi
add esp, 4
push str.sc_delete_FairplayKD___nul
call esi
add esp, 4
push str.sc_stop_FairplayK1D___nul
call esi
add esp, 4
push str.sc_delete_FairplayKD1___nul
call esi
add esp, 4
push str.sc_stop_FairplayKD2___nul
call esi
add esp, 4
push str.sc_delete_FairplayKD2___nul
call esi
add esp, 4
push str.sc_stop_FairplayKD3___nul
call esi
add esp, 4
push str.sc_delete_FairplayKD3___nul
call esi
add esp, 4
push 0x4e5cdc
call esi
add esp, 4
push str.reg_delete__HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesFairplaykd___f___nul
call esi
add esp, 4
push str.reg_delete__HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesFairplaykd1___f___nul
call esi
add esp, 4
push str.reg_delete__HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesFairplaykd2___f___nul
call esi
add esp, 4
push str.reg_delete__HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesFairplaykd3___f___nul
call esi
add esp, 4
push str.reg_delete__HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesFairplayKD___f___nul
call esi
add esp, 4
push str.reg_delete__HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesFairplayKD1___f___nul
call esi
add esp, 4
push str.reg_delete__HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesFairplayKD2___f___nul
call esi
add esp, 4
push str.reg_delete__HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesFairplayKD3___f___nul
call esi
add esp, 4
push 0x4e5cdc
call esi
add esp, 4
push 0x4e5cdc
call esi
add esp, 4
mov dword [ebp - 0x20], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x30]
movups xmmword [ebp - 0x30], xmm0
push 0xb
push str.FairplayKD2
call fcn.0045b260
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 9
call fcn.0046d060
mov ecx, dword [ebp - 0x1c]
mov byte [ebp - 0x18], al
cmp ecx, 0xf
jbe 0x46de14
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46de07
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x46de07
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004ca5d3
mov al, byte [ebp - 0x18]
add esp, 8
test al, al
je 0x46dc7c
push str.sc_start_Fairplaykd2___nul
call esi
add esp, 4
push str.reg_delete__HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesFairplaykd2___f___nul
call esi
add esp, 4
push 0x4e5cdc
call esi
add esp, 4
push str.sc_stop_Fairplaykd2___nul
call esi
add esp, 4
push str.sc_delete_Fairplaykd2___nul
call esi
add esp, 4
push 0x4e5cdc
call esi
add esp, 4
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret