Function at 0x447460
Capabilities:
Acquire debug privileges
Check if file exists
Create thread
Create udp socket
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cb3ed
mov eax, dword fs:[0]
push eax
sub esp, 0x1b4
mov eax, dword [0x4fa078]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov ecx, str.SeDebugPrivilege
mov dword [0x4facd0], eax
mov dword [0x4facd4], edx
call fcn.00408880
mov ecx, str.SeCreateGlobalPrivilege
call fcn.00408880
call fcn.00408a90
call fcn.00442a90
test al, al
jne 0x4482ef
call fcn.0044e360
call fcn.00446d60
call fcn.00446370
mov eax, 4
push 0x4e322c
mov dword [ebp - 0x18c], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
jne 0x4474fd
mov eax, 4
mov dword [ebp - 0x18c], eax
jmp 0x4475ba
push str.RtlGetNtVersionNumbers
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x14], 0
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x447530
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x18]
push ecx
call eax
mov ecx, dword [ebp - 0x18]
cmp ecx, 5
jne 0x447550
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x4475b5
xor eax, eax
cmp ecx, 1
setne al
inc eax
mov dword [ebp - 0x18c], eax
jmp 0x4475ba
cmp ecx, 6
jne 0x44758b
mov eax, dword [ebp - 0x1c]
sub eax, 0
je 0x44757e
sub eax, 1
je 0x4474ed
sub eax, 1
je 0x447571
xor eax, eax
mov dword [ebp - 0x18c], eax
jmp 0x4475ba
mov eax, 5
mov dword [ebp - 0x18c], eax
jmp 0x4475ba
mov eax, 3
mov dword [ebp - 0x18c], eax
jmp 0x4475ba
cmp ecx, 0xa
jne 0x44759d
mov eax, 6
mov dword [ebp - 0x18c], eax
jmp 0x4475ba
cmp ecx, 6
mov eax, 4
mov edx, 7
cmova eax, edx
mov dword [ebp - 0x18c], eax
jmp 0x4475ba
mov eax, 4
cmp eax, 6
jae 0x447649
push 0x28
call fcn.0044bbf7
mov esi, eax
xorps xmm0, xmm0
mov dword [ebp - 0x14], esi
add esp, 4
mov ecx, esi
movups xmmword [esi], xmm0
push 2
movups xmmword [esi + 0x10], xmm0
push str.ecode
movq qword [esi + 0x20], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
call fcn.00406080
push 0
push str.result
mov ecx, esi
call fcn.00406080
mov eax, dword [ebp - 0x18c]
mov ecx, esi
push eax
push 0x4e3be8
call fcn.00406080
mov ecx, esi
call fcn.00442950
jmp 0x4482ef
mov ecx, 1
call fcn.00446df0
test al, al
jne 0x4482ef
lea ecx, [ebp - 0x124]
call fcn.004434e0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x124]
cmp dword [ebp - 0x110], 0x10
mov edx, 0x4facd8
cmovae ecx, dword [ebp - 0x124]
call fcn.00443230
test al, al
jne 0x4476b6
push 0x28
call fcn.0044bbf7
mov dword [ebp - 0x14], eax
xorps xmm0, xmm0
add esp, 4
mov ecx, eax
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movq qword [eax + 0x20], xmm0
call fcn.004055f0
push 4
jmp 0x4476e7
cmp dword [0x4fad3c], 0x2714
jne 0x44770f
push 0x28
call fcn.0044bbf7
mov dword [ebp - 0x14], eax
xorps xmm0, xmm0
add esp, 4
mov ecx, eax
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movq qword [eax + 0x20], xmm0
call fcn.004055f0
push 0xd
mov esi, eax
push str.ecode
mov ecx, esi
call fcn.00406080
push 0
push str.result
mov ecx, esi
call fcn.00406080
mov ecx, esi
call fcn.00442950
jmp 0x4482e4
xor eax, eax
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 7
mov word [ebp - 0xc4], ax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], 7
mov word [ebp - 0xdc], ax
mov edx, 0x4fad40
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1a8]
call fcn.00407fb0
push eax
lea ecx, [ebp - 0xc4]
call fcn.004090e0
mov edx, dword [ebp - 0x194]
cmp edx, 8
jb 0x4477a3
mov ecx, dword [ebp - 0x1a8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447799
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44830c
push edx
push ecx
call fcn.0044bea4
add esp, 8
lea edx, [ebp - 0xdc]
lea ecx, [ebp - 0xc4]
call fcn.00446aa0
test al, al
jne 0x447805
push 0x28
call fcn.0044bbf7
mov dword [ebp - 0x14], eax
xorps xmm0, xmm0
add esp, 4
mov ecx, eax
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movq qword [eax + 0x20], xmm0
call fcn.004055f0
mov esi, eax
push 3
push str.ecode
mov ecx, esi
call fcn.00406080
push 0
push str.result
mov ecx, esi
call fcn.00406080
mov ecx, esi
call fcn.00442950
jmp 0x4482ce
push 0x4fad20
mov ecx, 0x4fac90
call fcn.00406ce0
push 0x60
lea eax, [ebp - 0xac]
push 0
push eax
call fcn.004a4a80
add esp, 0xc
mov dword [ebp - 0xac], 0xffffffff
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
lea eax, [ebp - 0x84]
mov dword [ebp - 0x8c], 0
push eax
mov dword [ebp - 0x88], 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov byte [ebp - 4], 5
lea eax, [ebp - 0x6c]
push 0
push 0
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
call fcn.00441b50
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x60]
push 0x10
mov dword [ebp - 0x6c], 0x3f800000
call fcn.0042a830
mov eax, dword [ebp - 0x68]
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
push 0x10
call fcn.00440d90
mov dword [ebp - 0x54], 7
mov dword [ebp - 0x50], 8
lea eax, [ebp - 0xa4]
mov byte [ebp - 4], 8
push eax
push ecx
mov ecx, eax
call fcn.004415a0
mov eax, dword [ebp - 0xa0]
xor ecx, ecx
mov edx, dword [ebp - 0xa4]
sub eax, edx
sar eax, 2
test eax, eax
je 0x447969
nop dword [eax]
cmp ecx, 3
jae 0x447969
mov eax, dword [ecx*4 + 0x4e36f8]
test eax, eax
je 0x447969
mov dword [edx + ecx*4], eax
inc ecx
mov eax, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xa4]
sub eax, edx
sar eax, 2
cmp ecx, eax
jb 0x447940
call fcn.0043ee40
push 0x11
push 2
push 2
mov dword [ebp - 0x8c], 0x443890
mov dword [ebp - 0x88], 0x443c90
call dword [sym.imp.WS2_32.dll_socket]
mov dword [ebp - 0xac], eax
cmp eax, 0xffffffff
je 0x447a46
push 0
push 0
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x18], 0
push ecx
push 0
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x14], 0
push ecx
push 0x9800000c
push eax
call dword [sym.imp.WS2_32.dll_WSAIoctl]
mov eax, dword [ebp - 0xa0]
xor esi, esi
mov ecx, dword [ebp - 0xa4]
sub eax, ecx
sar eax, 2
test eax, eax
je 0x447a46
mov edi, dword [sym.imp.WS2_32.dll_WSAGetLastError]
movzx eax, word [ecx + esi*4]
xorps xmm0, xmm0
mov edx, 2
movups xmmword [ebp - 0x44], xmm0
push eax
mov word [ebp - 0x44], dx
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebp - 0x42], ax
lea eax, [ebp - 0x44]
push 0x10
push eax
push dword [ebp - 0xac]
mov dword [ebp - 0x40], 0
call dword [sym.imp.WS2_32.dll_bind]
test eax, eax
je 0x447b0c
call edi
test eax, eax
je 0x447b33
mov eax, dword [ebp - 0xa0]
inc esi
mov ecx, dword [ebp - 0xa4]
sub eax, ecx
sar eax, 2
cmp esi, eax
jb 0x4479e6
push 0x28
call fcn.0044bbf7
mov dword [ebp - 0x14], eax
xorps xmm0, xmm0
add esp, 4
mov ecx, eax
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movq qword [eax + 0x20], xmm0
call fcn.004055f0
mov esi, eax
push 5
push str.ecode
mov ecx, esi
call fcn.00406080
push 0
push str.result
mov ecx, esi
call fcn.00406080
mov ecx, esi
call fcn.00442950
lea ecx, [ebp - 0x6c]
call fcn.0043f440
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov ecx, dword [ebp - 0x98]
test ecx, ecx
je 0x448273
mov edx, dword [ebp - 0x94]
push ecx
call fcn.004416e0
mov ecx, dword [ebp - 0x90]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x98]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 4
cmp ecx, 0x1000
jb 0x44824b
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448311
jmp 0x44824b
push 0
push 0
lea eax, [ebp - 0xac]
push eax
push 0x43f5d0
push 0
push 0
call fcn.004af616
add esp, 0x18
test eax, eax
je 0x447b33
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x10c]
cmp dword [0x4fadec], 8
mov edx, 0x4fadd8
cmovae edx, dword [0x4fadd8]
mov eax, dword [eax + esi*4]
mov dword [ebp - 0xa8], eax
call fcn.00423d70
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x10c]
cmp dword [ebp - 0xf8], 8
cmovae ecx, dword [ebp - 0x10c]
cmp dword [ebp - 0xfc], 3
jne 0x447ba5
mov esi, 3
mov edx, 0x4e3fbc
nop dword [eax + eax]
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x447ba5
add ecx, 2
add edx, 2
sub esi, 1
jne 0x447b90
jmp 0x447bce
sub esp, 0x18
lea eax, [ebp - 0xdc]
mov ecx, esp
lea esi, [ebp - 0xac]
push eax
call fcn.00403630
mov ecx, esi
call fcn.00447020
add esp, 0x18
test al, al
jne 0x44823b
mov edx, 0x4fad20
lea ecx, [ebp - 0x1a8]
call fcn.00407fb0
push eax
lea edx, [ebp - 0xdc]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1c0]
call fcn.00448350
push 0x4e3fc4
mov edx, eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xf4]
call fcn.0040ca60
add esp, 8
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x1ac]
cmp edx, 8
jb 0x447c51
mov ecx, dword [ebp - 0x1c0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447c47
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448316
push edx
push ecx
call fcn.0044bea4
add esp, 8
xor eax, eax
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1ac], 7
mov word [ebp - 0x1c0], ax
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x194]
cmp edx, 8
jb 0x447cb2
mov ecx, dword [ebp - 0x1a8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447ca8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44831b
push edx
push ecx
call fcn.0044bea4
add esp, 8
xor eax, eax
mov dword [ebp - 0x198], 0
sub esp, 0x18
mov word [ebp - 0x1a8], ax
lea eax, [ebp - 0xf4]
mov dword [ebp - 0x194], 7
mov ecx, esp
lea esi, [ebp - 0xac]
push eax
call fcn.00403630
mov edx, esi
call fcn.00444560
mov edi, eax
add esp, 0x18
cmp edi, 1
jne 0x447d71
sub esp, 0x18
lea eax, [ebp - 0xf4]
mov ecx, esp
push eax
call fcn.00403630
mov edx, 0x443720
mov ecx, 0x4facd8
call fcn.00444b30
push 0x28
mov byte [ebp - 0x185], al
call fcn.0044bbf7
mov dword [ebp - 0x14], eax
xorps xmm0, xmm0
add esp, 0x1c
mov ecx, eax
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movq qword [eax + 0x20], xmm0
call fcn.004055f0
mov esi, eax
push 6
push str.ecode
mov ecx, esi
call fcn.00406080
xor ecx, ecx
cmp byte [ebp - 0x185], cl
setne cl
push ecx
push str.result
mov ecx, esi
call fcn.00406080
mov ecx, esi
call fcn.00442950
jmp 0x447dd3
cmp edi, 5
push 0x28
sete byte [ebp - 0x185]
call fcn.0044bbf7
mov dword [ebp - 0x14], eax
xorps xmm0, xmm0
add esp, 4
mov ecx, eax
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movq qword [eax + 0x20], xmm0
call fcn.004055f0
mov esi, eax
push 7
push str.ecode
mov ecx, esi
call fcn.00406080
xor ecx, ecx
cmp edi, 5
sete cl
push ecx
push str.result
mov ecx, esi
call fcn.00406080
mov ecx, esi
call fcn.00442950
cmp edi, 3
je 0x448230
cmp byte [ebp - 0x185], 0
je 0x448230
cmp dword [ebp - 0xb0], 8
lea edi, [ebp - 0xc4]
push 0x60
cmovae edi, dword [ebp - 0xc4]
lea eax, [ebp - 0x184]
cmp dword [ebp - 0xe0], 8
lea esi, [ebp - 0xf4]
push 0
cmovae esi, dword [ebp - 0xf4]
push eax
call fcn.004a4a80
add esp, 0xc
lea ecx, [ebp - 0x184]
call fcn.00452f87
mov ecx, esi
mov byte [ebp - 4], 0xf
xor eax, eax
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 7
mov word [ebp - 0x4c], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x447e43
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x4c]
call fcn.004037e0
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x184]
call fcn.004538c4
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x38]
cmp edx, 8
jb 0x447ead
mov ecx, dword [ebp - 0x4c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447ea3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448320
push edx
push ecx
call fcn.0044bea4
add esp, 8
xor eax, eax
mov dword [ebp - 0x3c], 0
mov word [ebp - 0x4c], ax
lea ecx, [ebp - 0x184]
lea eax, [ebp - 0x14]
mov dword [ebp - 0x38], 7
push eax
mov dword [ebp - 0x14], 1
call fcn.004538d8
mov ecx, edi
mov dword [ebp - 0x24], 0
xor eax, eax
mov dword [ebp - 0x20], 7
mov word [ebp - 0x34], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x447ef0
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x34]
call fcn.004037e0
push 0
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x184]
call fcn.00453420
mov byte [ebp - 4], 0xf
mov esi, eax
mov edx, dword [ebp - 0x20]
cmp edx, 8
jb 0x447f5e
mov ecx, dword [ebp - 0x34]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447f54
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448325
push edx
push ecx
call fcn.0044bea4
add esp, 8
xor eax, eax
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x184]
mov dword [ebp - 0x20], 7
mov word [ebp - 0x34], ax
mov byte [ebp - 4], 0xe
call fcn.00453042
test esi, esi
jns 0x447ffd
push 0x28
call fcn.0044bbf7
mov dword [ebp - 0x14], eax
xorps xmm0, xmm0
add esp, 4
mov ecx, eax
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movq qword [eax + 0x20], xmm0
call fcn.004055f0
mov esi, eax
push 0xb
push str.ecode
mov ecx, esi
call fcn.00406080
push 0
push str.result
mov ecx, esi
call fcn.00406080
lea edx, [ebp - 0xf4]
lea ecx, [ebp - 0x34]
call fcn.004080f0
push eax
push str.file
mov ecx, esi
mov byte [ebp - 4], 0x15
call fcn.00406450
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xe
call fcn.00406d10
mov ecx, esi
call fcn.00442950
jmp 0x448230
sub esp, 0x18
lea eax, [ebp - 0xdc]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00403630
sub esp, 0x18
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0xc4]
mov ecx, esp
push eax
call fcn.00403630
mov byte [ebp - 4], 0xe
call fcn.00445a20
push str.xbboot.exe
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0040cad0
add esp, 0x3c
mov byte [ebp - 4], 0x13
lea esi, [ebp - 0x34]
cmp dword [ebp - 0x20], 8
cmovae esi, dword [ebp - 0x34]
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x4480af
sub esp, 0xc
mov ecx, esi
call fcn.00408920
add esp, 0xc
test eax, eax
setne al
test al, al
je 0x4480af
push 0x28
call fcn.0044bbf7
mov dword [ebp - 0x14], eax
xorps xmm0, xmm0
add esp, 4
mov ecx, eax
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movq qword [eax + 0x20], xmm0
call fcn.004055f0
mov esi, eax
push 9
push str.ecode
mov ecx, esi
call fcn.00406080
push 1
jmp 0x4480e4
push 0x28
call fcn.0044bbf7
mov dword [ebp - 0x14], eax
xorps xmm0, xmm0
add esp, 4
mov ecx, eax
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movq qword [eax + 0x20], xmm0
call fcn.004055f0
mov esi, eax
push 8
push str.ecode
mov ecx, esi
call fcn.00406080
push 0
push str.result
mov ecx, esi
call fcn.00406080
mov ecx, esi
call fcn.00442950
mov ecx, 5
call fcn.00446df0
mov byte [ebp - 0x18d], al
test al, al
jne 0x4481a8
call fcn.00408ef0
mov esi, eax
mov dword [0x4facc4], 0x64
lea edx, [ebp - 0xdc]
mov dword [0x4facc0], esi
lea ecx, [ebp - 0x1a8]
call fcn.004080f0
mov byte [ebp - 4], 0x14
cmp dword [eax + 0x14], 0x10
jb 0x448143
mov eax, dword [eax]
push eax
mov edx, esi
call fcn.00424710
add esp, 4
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x194]
test al, al
sete al
mov byte [ebp - 0x185], al
cmp edx, 0x10
jb 0x44819d
mov ecx, dword [ebp - 0x1a8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44818d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44832a
push edx
push ecx
call fcn.0044bea4
mov al, byte [ebp - 0x185]
add esp, 8
mov byte [ebp - 0x185], 0
test al, al
je 0x4481af
mov byte [ebp - 0x185], 1
push 0x28
mov dword [0x4facc0], 0
call fcn.0044bbf7
mov dword [ebp - 0x14], eax
xorps xmm0, xmm0
add esp, 4
mov ecx, eax
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movq qword [eax + 0x20], xmm0
call fcn.004055f0
mov esi, eax
push 0xa
push str.ecode
mov ecx, esi
call fcn.00406080
movzx ecx, byte [ebp - 0x185]
push ecx
push str.result
mov ecx, esi
call fcn.00406080
cmp byte [ebp - 0x18d], 0
mov ecx, str.failed
mov eax, str.succeeded
cmove eax, ecx
mov ecx, esi
push eax
push str.service
call fcn.004067f0
mov ecx, esi
call fcn.00442950
lea ecx, [ebp - 0x34]
call fcn.00403580
lea ecx, [ebp - 0xf4]
call fcn.00403580
lea ecx, [ebp - 0x10c]
call fcn.00403580
jmp 0x447a8e
push ecx
push esi
call fcn.0044bea4
add esp, 8
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
mov edx, dword [ebp - 0xa4]
test edx, edx
je 0x4482ce
mov ecx, dword [ebp - 0x9c]
mov eax, edx
sub ecx, edx
and ecx, 0xfffffffc
cmp ecx, 0x1000
jb 0x4482a6
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44832f
push ecx
push edx
call fcn.0044bea4
add esp, 8
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0
lea ecx, [ebp - 0xdc]
call fcn.00403580
lea ecx, [ebp - 0xc4]
call fcn.00403580
lea ecx, [ebp - 0x124]
call fcn.00406d10
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0044b735
mov esp, ebp
pop ebp
ret
call fcn.004ab9cc
call fcn.004ab9cc
call fcn.004ab9cc
call fcn.004ab9cc
call fcn.004ab9cc
call fcn.004ab9cc
call fcn.004ab9cc
call fcn.004ab9cc
int3