Function at 0x42afe0
Capabilities:
Get file attributes
Modify service

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2e8
push esi
movzx eax, byte [ebp + 0x28]
test eax, eax
je 0x42b08e
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x230], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x1a8]
movzx eax, byte [eax]
test eax, eax
je 0x42b04d
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
movzx eax, byte [eax]
test eax, eax
je 0x42b04b
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
jmp 0x42b089
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x204], eax
push 0
mov ecx, dword [ebp - 0x204]
call fcn.0041261e
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xf8]
mov dword [ecx], eax
jmp 0x42c2a3
lea eax, [ebp + 8]
mov dword [ebp - 0x228], eax
lea eax, [ebp + 0x2c]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x1bc]
movzx eax, byte [eax]
test eax, eax
je 0x42c240
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x64], eax
mov dword [ebp - 8], 0x6de713a
mov dword [ebp - 0x218], 0xffffffff
mov dword [ebp - 0x60], 0
jmp 0x42b117
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x42b12d
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x19c], 0xffffffff
jmp 0x42b110
mov dword [ebp - 8], 0
jmp 0x42b13d
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jg 0x42b198
mov dword [ebp - 0x68], 0x83111738
mov dword [ebp - 0x68], 1
jmp 0x42b15a
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x42b196
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x19c]
mov dword [ebp + ecx*4 - 0x19c], eax
mov byte [ebp - 0x1e], 0
movzx eax, byte [ebp - 0x1e]
test eax, eax
je 0x42b194
push 0x2abc
push 0
push 0x761f
call fcn.00424446
add esp, 0xc
jmp 0x42b153
jmp 0x42b136
xor eax, eax
inc eax
je 0x42b218
cmp dword [ebp - 8], 0
jne 0x42b1b5
mov eax, 0xc28cae2f
test eax, eax
jne 0x42b1b5
and dword [ebp - 0x1a4], 0
jmp 0x42b1bf
mov dword [ebp - 0x1a4], 1
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x1a4], eax
je 0x42b1dc
cmp dword [ebp - 8], 0
je 0x42b1dc
mov dword [ebp - 0x88], 1
jmp 0x42b1e3
and dword [ebp - 0x88], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x19c]
cmp eax, dword [ebp - 0x88]
jg 0x42b206
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x19c], 0
cmp dword [ebp - 8], 0
je 0x42b218
mov dword [ebp - 0x188], 1
jmp 0x42b21f
and dword [ebp - 0x188], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x19c]
sub eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x218]
imul ecx, dword [ebp - 0x188]
add eax, ecx
cmp eax, 0x4f78
jl 0x42b251
mov dword [ebp - 0x190], 1
jmp 0x42b258
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x190], eax
je 0x42b26f
mov dword [ebp - 0x94], 1
jmp 0x42b276
and dword [ebp - 0x94], 0
cmp dword [ebp - 0x94], 0xfffffff7
je 0x42b28b
mov dword [ebp - 0x1a0], 1
jmp 0x42b292
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1d0]
add ecx, dword [eax]
mov dword [ebp - 0x1cc], ecx
mov dword [ebp - 0x30], 0x102071b1
mov dword [ebp - 0xc], 0xffffffff
cmp dword [ebp - 0x30], 0
je 0x42b2ce
mov dword [ebp - 0xc], 0
jmp 0x42b3f8
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x254], 0x3b2b74c3
mov dword [ebp - 0x250], 0x3b2b74c3
mov dword [ebp - 0x24c], 0x3b2b74c3
mov dword [ebp - 0x248], 0x3b2b74c3
mov dword [ebp - 0x30], 0x1c
jmp 0x42b30d
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x39
jl 0x42b39d
mov dword [ebp - 0xc], 0
jmp 0x42b327
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xfffffff8
jg 0x42b372
mov dword [ebp - 0x58], 0x61bab593
mov dword [ebp - 0x58], 0
jmp 0x42b344
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xffffffe8
jg 0x42b370
mov byte [ebp - 0x20], 0
movzx eax, byte [ebp - 0x20]
test eax, eax
je 0x42b367
push 1
push 0x3788
push 1
call fcn.00420e76
add esp, 0xc
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
jmp 0x42b33d
jmp 0x42b320
mov dword [ebp - 0xc], 0
jmp 0x42b382
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 4
jge 0x42b398
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x254], 0x552bf338
jmp 0x42b37b
jmp 0x42b306
mov dword [ebp - 0x28], 0xffffffe2
jmp 0x42b3ad
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x14
jg 0x42b3f8
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x254], 0
je 0x42b3c5
jmp 0x42b3f8
mov byte [ebp - 0x1f], 0
movzx eax, byte [ebp - 0x1f]
test eax, eax
je 0x42b3f6
push 0x4b8f
push 1
push 0x1bbd
push 1
push 0x53a6
push 0x3eab
push 0x7409
call fcn.00420f02
add esp, 0x1c
jmp 0x42b3a6
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
add eax, 8
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x74], 0xffffffff
and dword [ebp - 0x268], 0
and dword [ebp - 0x264], 0
and dword [ebp - 0x260], 0
and dword [ebp - 0x25c], 0
lea ecx, [ebp - 0x79]
call fcn.00401745
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x2d0]
call fcn.0041262d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x274]
call fcn.004125f3
mov dword [ebp - 0x70], 0x7f28
mov dword [ebp - 0xbc], 1
mov dword [ebp - 0x134], 0x1f997ec5
mov dword [ebp - 0xd4], 0x81b27067
mov dword [ebp - 0x210], 0x50eb6ba8
mov dword [ebp - 4], 0
jmp 0x42b497
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jge 0x42b4aa
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x48], 0xd41e5596
jmp 0x42b490
mov dword [ebp - 4], 0
jmp 0x42b4ba
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jge 0x42b4d0
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x290], 0xffffffff
jmp 0x42b4b3
mov dword [ebp - 4], 0
jmp 0x42b4e0
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jge 0x42b4f6
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x280], 1
jmp 0x42b4d9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
mov dword [ebp - 0x74], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x48], 0
je 0x42b66d
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x48]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x48]
cmp eax, 0xfffffffb
jne 0x42b537
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x48], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
mov dword [ebp - 0x9c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9c]
mov dword [ebp + eax - 0x290], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
cmp dword [ebp - 0x9c], eax
jle 0x42b578
mov dword [ebp - 0x124], 1
jmp 0x42b57f
and dword [ebp - 0x124], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x48]
cmp dword [ebp - 0x124], eax
jge 0x42b59d
mov dword [ebp - 0x20c], 1
jmp 0x42b5a4
and dword [ebp - 0x20c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x48]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1d8], eax
push 3
lea ecx, [ebp - 0x274]
call fcn.0041261e
mov ecx, dword [ebp - 0x1d8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x70], eax
jge 0x42b5e3
mov dword [ebp - 0xa4], 1
jmp 0x42b5ea
and dword [ebp - 0xa4], 0
cmp dword [ebp - 0xa4], 0xf57b17b4
jb 0x42b602
mov dword [ebp - 0x164], 1
jmp 0x42b609
and dword [ebp - 0x164], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x48]
cmp dword [ebp - 0x164], eax
jge 0x42b627
mov dword [ebp - 0xac], 1
jmp 0x42b62e
and dword [ebp - 0xac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x280]
cmp dword [ebp - 0xac], eax
jle 0x42b64f
mov dword [ebp - 0x12c], 1
jmp 0x42b656
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x12c], eax
jl 0x42b66d
mov dword [ebp - 0xb4], 1
jmp 0x42b674
and dword [ebp - 0xb4], 0
cmp dword [ebp - 0xb4], 1
jne 0x42b689
mov dword [ebp - 0x184], 1
jmp 0x42b690
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x288], eax
push 3
lea ecx, [ebp - 0x274]
call fcn.0041261e
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x280]
cmp dword [eax], ecx
jl 0x42b6f0
mov eax, 0xda3bb1d4
test eax, eax
je 0x42b6f0
mov dword [ebp - 0xc4], 1
jmp 0x42b6f7
and dword [ebp - 0xc4], 0
cmp dword [ebp - 0xc4], 0xfffffff9
jl 0x42b712
mov eax, 0xd01cd43a
test eax, eax
jne 0x42b712
and dword [ebp - 0x16c], 0
jmp 0x42b71c
mov dword [ebp - 0x16c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
cmp dword [ebp - 0x16c], eax
je 0x42b73a
mov dword [ebp - 0xcc], 1
jmp 0x42b741
and dword [ebp - 0xcc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcc]
sub ecx, dword [ebp + eax - 0x48]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x48]
jge 0x42b769
mov dword [ebp - 0x13c], 1
jmp 0x42b770
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0xd4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x48]
cmp eax, dword [ebp - 0xd4]
jl 0x42b799
mov dword [ebp - 0x194], 1
jmp 0x42b7a0
and dword [ebp - 0x194], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x48]
cmp dword [ebp - 0x194], eax
jle 0x42b7bd
mov dword [ebp - 0xdc], 1
jmp 0x42b7c4
and dword [ebp - 0xdc], 0
cmp dword [ebp - 0xdc], 0
jae 0x42b7d9
mov dword [ebp - 0x144], 1
jmp 0x42b7e0
and dword [ebp - 0x144], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x48]
imul eax, dword [ebp - 0x144]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x280]
cmp eax, 8
jl 0x42b80f
mov dword [ebp - 0xe4], 1
jmp 0x42b816
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x210], eax
lea ecx, [ebp - 0x274]
call fcn.00412619
and dword [ebp - 0x78], 0
jmp 0x42b842
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x5c]
inc eax
inc eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov eax, dword [eax + 4]
sub eax, 8
shr eax, 1
cmp dword [ebp - 0x78], eax
jae 0x42c163
mov dword [ebp - 0x6c], 0x67e307b5
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x4c], 0xffffffff
push 3
lea ecx, [ebp - 0x11c]
call fcn.0041257d
mov dword [ebp - 0xc8], 0xfe831e34
mov dword [ebp - 0x54], 0xeeff
mov dword [ebp - 0x80], 0x73439d6f
mov dword [ebp - 0x10], 0
jmp 0x42b8a5
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x42b8b8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x14], 1
jmp 0x42b89e
mov dword [ebp - 0x10], 0
jmp 0x42b8c8
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x42b8db
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x34], 0x4dde9ab
jmp 0x42b8c1
push 1
push 0x41a
lea eax, [ebp - 0x11c]
push eax
push 0x684e
push 0
push 0x4a7c
lea eax, [ebp - 0x10]
push eax
call fcn.0042f340
add esp, 0x1c
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1e0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
mov dword [ebp - 0x234], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x34], eax
mov eax, dword [ebp - 0x1e0]
cmp eax, dword [ebp - 0x234]
jl 0x42b949
mov dword [ebp - 0x174], 1
jmp 0x42b950
and dword [ebp - 0x174], 0
imul eax, dword [ebp - 0x174], 0xfbe5
cmp eax, 0x9968
jge 0x42b96d
mov dword [ebp - 0x14c], 1
jmp 0x42b974
and dword [ebp - 0x14c], 0
cmp dword [ebp - 0x6c], 0
je 0x42b993
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
je 0x42b993
mov dword [ebp - 0xec], 1
jmp 0x42b99a
and dword [ebp - 0xec], 0
cmp dword [ebp - 0xec], 0xcd9796a
jne 0x42b9b2
mov dword [ebp - 0xf4], 1
jmp 0x42b9b9
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x14c]
sub eax, dword [ebp - 0xf4]
cmp eax, 0xfffb
ja 0x42b9d8
mov dword [ebp - 0x18c], 1
jmp 0x42b9df
and dword [ebp - 0x18c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x18c], eax
jg 0x42b9fd
mov dword [ebp - 0xfc], 1
jmp 0x42ba04
and dword [ebp - 0xfc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xfc]
mov dword [ebp + eax - 0x14], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x4c], eax
jg 0x42ba2f
mov dword [ebp - 0x154], 1
jmp 0x42ba36
and dword [ebp - 0x154], 0
push 0
lea ecx, [ebp - 0x11c]
call fcn.0041261e
mov eax, dword [eax]
add eax, dword [ebp - 0x154]
cmp eax, 0x4356e3f0
jle 0x42ba5e
mov dword [ebp - 0x104], 1
jmp 0x42ba65
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x104]
jle 0x42ba7c
mov dword [ebp - 0x1e8], 1
jmp 0x42ba83
and dword [ebp - 0x1e8], 0
cmp dword [ebp - 0x4c], 1
jl 0x42ba95
mov dword [ebp - 0x17c], 1
jmp 0x42ba9c
and dword [ebp - 0x17c], 0
cmp dword [ebp - 0x17c], 0xbfb41ce0
jbe 0x42bab4
mov dword [ebp - 0x10c], 1
jmp 0x42babb
and dword [ebp - 0x10c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp eax, dword [ebp - 0x10c]
jle 0x42bad9
mov dword [ebp - 0x15c], 1
jmp 0x42bae0
and dword [ebp - 0x15c], 0
cmp dword [ebp - 0x15c], 0xf7d6
je 0x42baf8
mov dword [ebp - 0x8c], 1
jmp 0x42baff
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x8c], eax
jne 0x42bb16
mov dword [ebp - 0x90], 1
jmp 0x42bb1d
and dword [ebp - 0x90], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp dword [ebp - 0x90], eax
jne 0x42bb4a
push 0
lea ecx, [ebp - 0x11c]
call fcn.0041261e
cmp dword [eax], 0
jne 0x42bb4a
and dword [ebp - 0x98], 0
jmp 0x42bb54
mov dword [ebp - 0x98], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x98], eax
jle 0x42bb72
mov dword [ebp - 0x21c], 1
jmp 0x42bb79
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2a0], eax
push 0
lea ecx, [ebp - 0x11c]
call fcn.0041261e
cmp dword [ebp - 0xc8], 0
je 0x42bd56
mov dword [ebp - 0xb0], 0x33e235bd
mov dword [ebp - 0xe0], 0xf9d9
mov dword [ebp - 0xf0], 0x714a8a5a
mov dword [ebp - 0x1f8], 0
mov dword [ebp - 0x2a8], 4
mov esi, dword [ebp - 0xb0]
push 0
lea ecx, [ebp - 0x11c]
call fcn.0041261e
cmp esi, dword [eax]
jge 0x42bbf1
mov dword [ebp - 0xa0], 1
jmp 0x42bbf8
and dword [ebp - 0xa0], 0
cmp dword [ebp - 0xa0], 0x211a
je 0x42bc10
mov dword [ebp - 0xa8], 1
jmp 0x42bc17
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0xa8]
jne 0x42bc2e
mov dword [ebp - 0xb8], 1
jmp 0x42bc35
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0xb8], eax
jne 0x42bc4f
mov dword [ebp - 0xc0], 1
jmp 0x42bc56
and dword [ebp - 0xc0], 0
cmp dword [ebp - 0xc0], 0
jae 0x42bc6b
mov dword [ebp - 0x1f0], 1
jmp 0x42bc72
and dword [ebp - 0x1f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov dword [ebp - 0x2b0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0xc8], eax
jg 0x42bca0
mov dword [ebp - 0x22c], 1
jmp 0x42bca7
and dword [ebp - 0x22c], 0
push 0
lea ecx, [ebp - 0x11c]
call fcn.0041261e
imul esi, dword [ebp - 0xe0], 0
push 0
lea ecx, [ebp - 0x11c]
call fcn.0041261e
cmp esi, dword [eax]
jg 0x42bce1
mov eax, 0xf0cd
test eax, eax
je 0x42bce1
mov dword [ebp - 0xd0], 1
jmp 0x42bce8
and dword [ebp - 0xd0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp eax, dword [ebp - 0xd0]
jge 0x42bd06
mov dword [ebp - 0xd8], 1
jmp 0x42bd0d
and dword [ebp - 0xd8], 0
cmp dword [ebp - 0xd8], 0
je 0x42bd2b
cmp dword [ebp - 0xe0], 0
je 0x42bd2b
mov dword [ebp - 0xe8], 1
jmp 0x42bd32
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
jmp 0x42bec7
mov dword [ebp - 0x50], 0x7bd5
mov dword [ebp - 0x2c], 0
push 2
lea ecx, [ebp - 0x244]
call fcn.0041257d
push 0x3a49
push 0
push 0x6814
lea eax, [ebp - 0x244]
push eax
push 0x325
push 0x23f6
lea eax, [ebp - 0x2b8]
push eax
call fcn.00429e1e
add esp, 0x1c
cmp dword [ebp - 0x50], 0
je 0x42bdb5
cmp dword [ebp - 0x50], 0
je 0x42bdb5
mov dword [ebp - 0x110], 1
jmp 0x42bdbc
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x224], eax
jne 0x42bdd3
mov dword [ebp - 0x100], 1
jmp 0x42bdda
and dword [ebp - 0x100], 0
cmp dword [ebp - 0x100], 0xfffffff9
jl 0x42bdef
mov dword [ebp - 0x108], 1
jmp 0x42bdf6
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x108], eax
je 0x42be0d
mov dword [ebp - 0x128], 1
jmp 0x42be14
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x120], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x120]
mov dword [ebp + eax - 0x14], ecx
mov eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x128]
jge 0x42be50
mov dword [ebp - 0x130], 1
jmp 0x42be57
and dword [ebp - 0x130], 0
push 1
lea ecx, [ebp - 0x244]
call fcn.0041261e
mov ecx, dword [ebp - 0x130]
mov dword [eax], ecx
mov dword [ebp - 0x54], 0
jmp 0x42be7c
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 5
jle 0x42bebc
mov dword [ebp - 0x2c], 0
jmp 0x42be92
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x42beba
push 0
push 0x2493
push 0x5162
push 0x5ba4
lea eax, [ebp - 0x244]
push eax
call fcn.00423fb0
add esp, 0x14
jmp 0x42be8b
jmp 0x42be75
lea ecx, [ebp - 0x244]
call fcn.00412619
lea ecx, [ebp - 0x11c]
call fcn.00412619
mov dword [ebp - 0x38], 0x39b6
mov dword [ebp - 0x138], 0x39e3cf95
mov dword [ebp - 0x200], 0x277ebd00
mov byte [ebp - 0x1d], 0
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x42bf04
push 1
push 1
call fcn.00420fd6
pop ecx
pop ecx
cmp dword [ebp - 0x38], 0
je 0x42c02b
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x160], 0xc01e6e2b
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x170]
cmp dword [ebp - 0x138], eax
jle 0x42bf56
cmp dword [ebp - 0x160], 0
jne 0x42bf56
and dword [ebp - 0x140], 0
jmp 0x42bf60
mov dword [ebp - 0x140], 1
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x38], eax
jne 0x42bf86
mov dword [ebp - 0x148], 1
jmp 0x42bf8d
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x140]
imul eax, dword [ebp - 0x148]
test eax, eax
je 0x42bfb3
cmp dword [ebp - 0x200], 0
je 0x42bfb3
mov dword [ebp - 0x150], 1
jmp 0x42bfba
and dword [ebp - 0x150], 0
cmp dword [ebp - 0x150], 0xde9a
jg 0x42bfd2
mov dword [ebp - 0x158], 1
jmp 0x42bfd9
and dword [ebp - 0x158], 0
cmp dword [ebp - 0x158], 0xfffffff7
jg 0x42bfee
mov dword [ebp - 0x168], 1
jmp 0x42bff5
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x160]
imul eax, dword [ebp - 0x168]
cmp eax, dword [ebp - 0x170]
jle 0x42c016
mov dword [ebp - 0x178], 1
jmp 0x42c01d
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x208], eax
jmp 0x42c041
push 1
push 0x3bf1
push 0
push 0x1c87
call fcn.004249aa
add esp, 0x10
lea eax, [ebp - 0x1c0]
push eax
push 1
lea eax, [ebp - 0x5c]
push eax
push 1
call fcn.00421054
add esp, 0x10
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0
push 0x2600
push 0x413c
push 1
push 1
push 0x3c72
call fcn.00424b78
add esp, 0x20
mov dword [ebp - 0x2ac], 0x13638ecf
mov dword [ebp - 0x298], 0x9aed23b6
mov dword [ebp - 0x180], 0xffff
mov dword [ebp - 0x1c], 0
jmp 0x42c0ae
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x42c0c4
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2e8], 0
jmp 0x42c0a7
mov dword [ebp - 0x1c], 0
jmp 0x42c0d4
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x42c0ea
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2e0], 0x53072226
jmp 0x42c0cd
push 0x3f16
push 0x292b
push 1
push 0x13a0
push 0
call fcn.0042c50d
add esp, 0x14
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 3
je 0x42c12b
jmp 0x42c15e
mov eax, dword [ebp - 0x1cc]
add eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x1dc], eax
lea eax, [ebp - 0x1dc]
push eax
push 0x7dab
push dword [ebp - 0x1e4]
push 0x1fa
push 0
call fcn.0042829c
add esp, 0x14
jmp 0x42b833
mov dword [ebp - 0x294], 9
mov dword [ebp - 0x2bc], 0x2971c1e
mov dword [ebp - 0x29c], 0xffffffff
mov dword [ebp - 0x2b4], 0xffffffff
mov dword [ebp - 0x2a4], 0xffffffff
mov dword [ebp - 0x84], 0xf75d
mov dword [ebp - 0x18], 0
jmp 0x42c1af
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x42c1c5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2c4], 0
jmp 0x42c1a8
mov dword [ebp - 0x18], 0
jmp 0x42c1d5
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x42c1eb
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2d8], 0xac54c975
jmp 0x42c1ce
mov byte [ebp - 0x21], 0
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x42c21c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x1cc8
push 0x7d9
push 0x6fc
push 0
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfigW]
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
push 0
lea eax, [ebp - 0x64]
push eax
push 0x7273
push 0x25
call fcn.0042a988
add esp, 0x10
jmp 0x42c2a3
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x3c]
mov dword [eax], 0
jmp 0x42c283
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x3c]
cmp dword [eax], 4
jge 0x42c2a3
mov eax, dword [ebp - 0x3c]
push dword [eax]
mov ecx, dword [ebp - 0x1b8]
call fcn.0041261e
mov dword [eax], 0xc25bfc88
jmp 0x42c278
pop esi
mov esp, ebp
pop ebp
ret