Function at 0x416e40
Capabilities:
Check if file exists
Connect network resource
Copy file
Create service
Encode data using base64
Get file attributes
Get hostname
Start service

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44c5a8
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x3e0
mov eax, dword [0x45f200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebx + 8]
lea ecx, [ebp - 0x2c4]
mov edx, dword [ebx + 0x10]
xorps xmm0, xmm0
mov edi, dword [ebx + 0x14]
mov dword [ebp - 0x3c8], eax
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x3cc], eax
xor eax, eax
mov dword [ebp - 0x33c], eax
push 0x25
push str.Starting_deployment_via_network_share
mov dword [ebp - 0x3a8], edx
mov dword [ebp - 0x340], eax
movups xmmword [ebp - 0x2c4], xmm0
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2b0], eax
call fcn.00409b20
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 4], 0
call fcn.0040fd00
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2b0]
cmp ecx, 0xf
jbe 0x416f28
mov edx, dword [ebp - 0x2c4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x416f1e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov ecx, dword [edi + 4]
lea esi, [ebp - 0x2f]
sub ecx, dword [edi]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [ebp - 0x33c], ecx
mov eax, 0xcccccccd
dec esi
mul ecx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub byte [ebp - 0x33c], cl
mov ecx, dword [ebp - 0x33c]
add cl, 0x30
mov byte [esi], cl
mov ecx, edx
mov dword [ebp - 0x33c], ecx
test ecx, ecx
jne 0x416f47
push ecx
lea eax, [ebp - 0x2f]
push eax
push esi
lea ecx, [ebp - 0x3a4]
call fcn.0041b830
lea eax, [ebp - 0x3a4]
mov dword [ebp - 4], 1
push eax
mov edx, str.Number_of_target_computers:
lea ecx, [ebp - 0x2c4]
call fcn.004142c0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.0040fd00
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x2b0]
cmp ecx, 0xf
jbe 0x416ff4
mov edx, dword [ebp - 0x2c4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x416fea
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419896
push ecx
push edx
call fcn.0042980f
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x390]
mov dword [ebp - 0x2b4], 0
mov dword [ebp - 0x2b0], 0xf
mov byte [ebp - 0x2c4], 0
cmp ecx, 0xf
jbe 0x417050
mov edx, dword [ebp - 0x3a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x417046
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419896
push ecx
push edx
call fcn.0042980f
add esp, 8
push 0x200
lea eax, [ebp - 0x248]
push 0
push eax
call fcn.0042b650
add esp, 0xc
mov dword [ebp - 0x27c], 0x100
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x248]
push eax
push 2
call dword [sym.imp.KERNEL32.dll_GetComputerNameExW]
mov dword [ebp - 0x2fc], 0
xorps xmm0, xmm0
mov dword [ebp - 0x2f8], 0
movups xmmword [ebp - 0x30c], xmm0
test eax, eax
je 0x4170ca
lea ecx, [ebp - 0x248]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4170b1
sub ecx, edx
lea eax, [ebp - 0x248]
sar ecx, 1
push ecx
push eax
jmp 0x4170d1
push 0
push 0x457008
lea ecx, [ebp - 0x30c]
call fcn.004028e0
mov dword [ebp - 4], 3
mov eax, dword [edi]
mov dword [ebp - 0x3ac], eax
mov eax, dword [edi + 4]
mov edi, dword [ebp - 0x3ac]
mov dword [ebp - 0x374], eax
cmp edi, eax
je 0x4197be
cmp dword [edi + 0x14], 7
mov eax, edi
jbe 0x41710c
mov eax, dword [edi]
push 0
push 0
push 0
push 0
push dword [edi + 0x10]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov esi, eax
lea ecx, [ebp - 0x358]
push 0
push esi
call fcn.00413880
cmp dword [ebp - 0x344], 0xf
lea ecx, [ebp - 0x358]
mov eax, edi
cmova ecx, dword [ebp - 0x358]
cmp dword [edi + 0x14], 7
jbe 0x417153
mov eax, dword [edi]
push 0
push 0
push esi
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push ecx
push dword [edi + 0x10]
push eax
push 0
push 0xfde9
call esi
lea eax, [ebp - 0x358]
mov byte [ebp - 4], 4
push eax
mov edx, str.Processing_computer:
lea ecx, [ebp - 0x370]
call fcn.004142c0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.0040fd00
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x35c]
cmp ecx, 0xf
jbe 0x4171d3
mov edx, dword [ebp - 0x370]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4171c9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x344]
mov dword [ebp - 0x360], 0
mov dword [ebp - 0x35c], 0xf
mov byte [ebp - 0x370], 0
cmp ecx, 0xf
jbe 0x41722c
mov edx, dword [ebp - 0x358]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x417222
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov ecx, dword [edi + 0x10]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 1
jb 0x4198a0
cmp dword [edi + 0x14], 7
mov eax, edi
jbe 0x417249
mov eax, dword [edi]
push 1
push 0x457890
push ecx
push eax
push ecx
push dword [ebp - 0x374]
lea ecx, [ebp - 0x358]
call fcn.00402990
mov byte [ebp - 4], 6
lea eax, [ebp - 0x30c]
cmp dword [ebp - 0x2f8], 7
lea ecx, [ebp - 0x358]
push dword [ebp - 0x2fc]
cmova eax, dword [ebp - 0x30c]
push eax
call fcn.0041a720
mov dword [ebp - 0x284], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x294], xmm0
mov dword [ebp - 0x280], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x294], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x284], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x344]
cmp ecx, 7
jbe 0x41731a
mov edx, dword [ebp - 0x358]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x417310
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov ecx, dword [ebp - 0x284]
xor eax, eax
mov word [ebp - 0x358], ax
mov eax, 0x7ffffffe
sub eax, ecx
mov dword [ebp - 0x348], 0
mov dword [ebp - 0x344], 7
cmp eax, 2
jb 0x4198a0
cmp dword [ebp - 0x280], 7
lea eax, [ebp - 0x294]
push ecx
cmova eax, dword [ebp - 0x294]
push eax
push 2
push 0x4575f4
push ecx
push dword [ebp - 0x374]
lea ecx, [ebp - 0x260]
call fcn.00402990
push 0
push 0
push 0
mov byte [ebp - 4], 9
lea eax, [ebp - 0x260]
cmp dword [ebp - 0x24c], 7
push 0
push dword [ebp - 0x250]
cmova eax, dword [ebp - 0x260]
push eax
push 0
push 0xfde9
call esi
mov esi, eax
lea ecx, [ebp - 0x358]
push 0
push esi
call fcn.00413880
cmp dword [ebp - 0x344], 0xf
lea ecx, [ebp - 0x358]
push 0
cmova ecx, dword [ebp - 0x358]
lea eax, [ebp - 0x260]
cmp dword [ebp - 0x24c], 7
push 0
cmova eax, dword [ebp - 0x260]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push ecx
push dword [ebp - 0x250]
push eax
push 0
push 0xfde9
call esi
lea eax, [ebp - 0x358]
mov byte [ebp - 4], 0xa
push eax
mov edx, str.Attempting_to_connect_to:
lea ecx, [ebp - 0x370]
call fcn.004142c0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0xb
call fcn.0040fd00
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x35c]
cmp ecx, 0xf
jbe 0x417467
mov edx, dword [ebp - 0x370]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41745d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x344]
mov dword [ebp - 0x360], 0
mov dword [ebp - 0x35c], 0xf
mov byte [ebp - 0x370], 0
cmp ecx, 0xf
jbe 0x4174c0
mov edx, dword [ebp - 0x358]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4174b6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
cmp dword [ebp - 0x24c], 7
lea eax, [ebp - 0x260]
xorps xmm0, xmm0
cmova eax, dword [ebp - 0x260]
movups xmmword [ebp - 0x328], xmm0
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x3c8]
mov ecx, eax
movups xmmword [ebp - 0x338], xmm0
cmp dword [eax + 0x14], 7
jbe 0x4174fb
mov ecx, dword [eax]
mov edx, dword [ebp - 0x3cc]
mov eax, edx
cmp dword [edx + 0x14], 7
jbe 0x41750b
mov eax, dword [edx]
push 0
push ecx
push eax
lea eax, [ebp - 0x338]
push eax
call dword [sym.imp.MPR.dll_WNetAddConnection2W]
mov ecx, eax
mov dword [ebp - 0x33c], ecx
test ecx, ecx
je 0x4178fd
lea esi, [ebp - 0x17]
nop
mov eax, 0xcccccccd
dec esi
mul ecx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
mov eax, dword [ebp - 0x33c]
add cl, cl
sub al, cl
mov ecx, edx
add al, 0x30
mov byte [esi], al
mov eax, edx
mov dword [ebp - 0x33c], eax
test eax, eax
jne 0x417530
push ecx
lea eax, [ebp - 0x17]
push eax
push esi
lea ecx, [ebp - 0x3a4]
call fcn.0041b830
push 0
push 0
push 0
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x260]
cmp dword [ebp - 0x24c], 7
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
cmova eax, dword [ebp - 0x260]
push 0
push dword [ebp - 0x250]
push eax
push 0
push 0xfde9
call edi
mov esi, eax
lea ecx, [ebp - 0x2ac]
push 0
push esi
call fcn.00413880
cmp dword [ebp - 0x298], 0xf
lea ecx, [ebp - 0x2ac]
push 0
cmova ecx, dword [ebp - 0x2ac]
lea eax, [ebp - 0x260]
cmp dword [ebp - 0x24c], 7
push 0
cmova eax, dword [ebp - 0x260]
push esi
push ecx
push dword [ebp - 0x250]
push eax
push 0
push 0xfde9
call edi
lea eax, [ebp - 0x2ac]
mov byte [ebp - 4], 0xd
push eax
mov edx, str.Failed_to_connect_to
lea ecx, [ebp - 0x370]
call fcn.004142c0
add esp, 4
mov edi, eax
mov byte [ebp - 4], 0xe
mov edx, dword [edi + 0x14]
mov eax, edx
mov ecx, dword [edi + 0x10]
sub eax, ecx
cmp eax, 0xb
jb 0x41764f
lea eax, [ecx + 0xb]
mov dword [edi + 0x10], eax
mov eax, edi
cmp edx, 0xf
jbe 0x417636
mov eax, dword [edi]
push 0xb
lea esi, [eax + ecx]
push str.._Error:_0x
push esi
call fcn.0042b0c0
add esp, 0xc
mov byte [esi + 0xb], 0
jmp 0x41766e
push 0xb
push str.._Error:_0x
mov byte [ebp - 0x3d0], 0
mov ecx, edi
push dword [ebp - 0x3d0]
push 0xb
call fcn.00409ce0
mov edi, eax
movups xmm0, xmmword [edi]
movups xmmword [ebp - 0x38c], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x37c], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
lea eax, [ebp - 0x3a4]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x38c]
push eax
push dword [ebp - 0x374]
lea ecx, [ebp - 0x358]
call fcn.0041b4f0
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0x10
call fcn.0040fd00
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x344]
cmp ecx, 0xf
jbe 0x417706
mov edx, dword [ebp - 0x358]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4176fc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x378]
mov dword [ebp - 0x348], 0
mov dword [ebp - 0x344], 0xf
mov byte [ebp - 0x358], 0
cmp ecx, 0xf
jbe 0x41775f
mov edx, dword [ebp - 0x38c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x417755
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x35c]
cmp ecx, 0xf
jbe 0x41779d
mov edx, dword [ebp - 0x370]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x417793
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x298]
mov dword [ebp - 0x360], 0
mov dword [ebp - 0x35c], 0xf
mov byte [ebp - 0x370], 0
cmp ecx, 0xf
jbe 0x4177f6
mov edx, dword [ebp - 0x2ac]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4177ec
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x390]
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x298], 0xf
mov byte [ebp - 0x2ac], 0
cmp ecx, 0xf
jbe 0x41784f
mov edx, dword [ebp - 0x3a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x417845
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x24c]
cmp ecx, 7
jbe 0x417893
mov edx, dword [ebp - 0x260]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x417889
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
xor eax, eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x280]
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
cmp ecx, 7
jbe 0x4197a3
mov edx, dword [ebp - 0x294]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4178ee
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
jmp 0x4197a3
cmp dword [ebp - 0x24c], 7
lea eax, [ebp - 0x260]
push 0
cmova eax, dword [ebp - 0x260]
push 0
push 0
push 0
push dword [ebp - 0x250]
push eax
push 0
push 0xfde9
call esi
mov esi, eax
lea ecx, [ebp - 0x358]
push 0
push esi
call fcn.00413880
cmp dword [ebp - 0x344], 0xf
lea ecx, [ebp - 0x358]
push 0
cmova ecx, dword [ebp - 0x358]
lea eax, [ebp - 0x260]
cmp dword [ebp - 0x24c], 7
push 0
cmova eax, dword [ebp - 0x260]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push ecx
push dword [ebp - 0x250]
push eax
push 0
push 0xfde9
call esi
lea eax, [ebp - 0x358]
mov byte [ebp - 4], 0x11
push eax
mov edx, str.Successfully_connected_to
lea ecx, [ebp - 0x370]
call fcn.004142c0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x12
call fcn.0040fd00
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x35c]
cmp ecx, 0xf
jbe 0x4179e4
mov edx, dword [ebp - 0x370]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4179da
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x344]
mov dword [ebp - 0x360], 0
mov dword [ebp - 0x35c], 0xf
mov byte [ebp - 0x370], 0
cmp ecx, 0xf
jbe 0x417a3d
mov edx, dword [ebp - 0x358]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x417a33
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov ecx, dword [ebp - 0x250]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x11
jb 0x4198a0
cmp dword [ebp - 0x24c], 7
lea eax, [ebp - 0x260]
push 0x11
cmova eax, dword [ebp - 0x260]
push str.C_WindowsTemp_
push ecx
push eax
push ecx
push dword [ebp - 0x374]
lea ecx, [ebp - 0x2ac]
call fcn.00402990
mov byte [ebp - 4], 0x13
mov eax, 0x7ffffffe
mov ecx, dword [ebp - 0x29c]
sub eax, ecx
cmp eax, 0xf
jb 0x4198a0
cmp dword [ebp - 0x298], 7
lea eax, [ebp - 0x2ac]
push 0xf
cmova eax, dword [ebp - 0x2ac]
push str.remote_exec.exe
push ecx
push eax
push ecx
push dword [ebp - 0x374]
lea ecx, [ebp - 0x278]
call fcn.00402990
push 0
push 0
push 0
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x278]
cmp dword [ebp - 0x264], 7
push 0
push dword [ebp - 0x268]
cmova eax, dword [ebp - 0x278]
push eax
push 0
push 0xfde9
call esi
mov esi, eax
lea ecx, [ebp - 0x370]
push 0
push esi
call fcn.00413880
cmp dword [ebp - 0x35c], 0xf
lea ecx, [ebp - 0x370]
push 0
cmova ecx, dword [ebp - 0x370]
lea eax, [ebp - 0x278]
cmp dword [ebp - 0x264], 7
push 0
cmova eax, dword [ebp - 0x278]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push ecx
push dword [ebp - 0x268]
push eax
push 0
push 0xfde9
call esi
mov ecx, dword [ebp - 0x3a8]
mov eax, ecx
mov byte [ebp - 4], 0x15
cmp dword [ecx + 0x14], 7
jbe 0x417b63
mov eax, dword [ecx]
push 0
push 0
push 0
push 0
push dword [ecx + 0x10]
push eax
push 0
push 0xfde9
call esi
mov esi, eax
lea ecx, [ebp - 0x2c]
push 0
push esi
call fcn.00413880
mov edx, dword [ebp - 0x3a8]
lea ecx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0xf
mov eax, edx
cmova ecx, dword [ebp - 0x2c]
cmp dword [edx + 0x14], 7
jbe 0x417ba0
mov eax, dword [edx]
push 0
push 0
push esi
push ecx
push dword [edx + 0x10]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x16
push eax
mov edx, str.Attempting_to_copy_file_from
lea ecx, [ebp - 0x38c]
call fcn.004142c0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x17
mov esi, dword [ecx + 0x14]
mov eax, esi
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 4
jb 0x417c04
lea eax, [edx + 4]
mov dword [ecx + 0x10], eax
mov eax, ecx
cmp esi, 0xf
jbe 0x417bf6
mov eax, dword [ecx]
mov dword [eax + edx], 0x206f7420
mov byte [eax + edx + 4], 0
jmp 0x417c21
push 4
push str._to
mov byte [ebp - 0x3d4], 0
push dword [ebp - 0x3d4]
push 4
call fcn.00409ce0
mov ecx, eax
movups xmm0, xmmword [ecx]
movups xmmword [ebp - 0x3a4], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [ebp - 0x394], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
lea eax, [ebp - 0x370]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x3a4]
push eax
push dword [ebp - 0x374]
lea ecx, [ebp - 0x358]
call fcn.0041b4f0
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0x19
call fcn.0040fd00
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x344]
cmp ecx, 0xf
jbe 0x417cb9
mov edx, dword [ebp - 0x358]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x417caf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x390]
mov dword [ebp - 0x348], 0
mov dword [ebp - 0x344], 0xf
mov byte [ebp - 0x358], 0
cmp ecx, 0xf
jbe 0x417d12
mov edx, dword [ebp - 0x3a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x417d08
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x378]
cmp ecx, 0xf
jbe 0x417d50
mov edx, dword [ebp - 0x38c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x417d46
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x37c], 0
mov dword [ebp - 0x378], 0xf
mov byte [ebp - 0x38c], 0
cmp ecx, 0xf
jbe 0x417da3
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x417d99
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x35c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
cmp ecx, 0xf
jbe 0x417df3
mov edx, dword [ebp - 0x370]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x417de9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov edx, dword [ebp - 0x3a8]
lea eax, [ebp - 0x278]
cmp dword [ebp - 0x264], 7
mov ecx, edx
cmova eax, dword [ebp - 0x278]
cmp dword [edx + 0x14], 7
jbe 0x417e17
mov ecx, dword [edx]
push 0
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x41829a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
lea esi, [ebp - 0x17]
mov dword [ebp - 0x33c], ecx
nop word [eax + eax]
mov eax, 0xcccccccd
dec esi
mul ecx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
mov eax, dword [ebp - 0x33c]
add cl, cl
sub al, cl
mov ecx, edx
add al, 0x30
mov byte [esi], al
mov eax, edx
mov dword [ebp - 0x33c], eax
test eax, eax
jne 0x417e40
push ecx
lea eax, [ebp - 0x17]
push eax
push esi
lea ecx, [ebp - 0x3c4]
call fcn.0041b830
mov byte [ebp - 4], 0x1a
mov eax, edi
cmp dword [edi + 0x14], 7
jbe 0x417e8e
mov eax, dword [edi]
push 0
push 0
push 0
push 0
push dword [edi + 0x10]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov esi, eax
lea ecx, [ebp - 0x358]
push 0
push esi
call fcn.00413880
cmp dword [ebp - 0x344], 0xf
lea ecx, [ebp - 0x358]
mov eax, edi
cmova ecx, dword [ebp - 0x358]
cmp dword [edi + 0x14], 7
jbe 0x417ed5
mov eax, dword [edi]
push 0
push 0
push esi
push ecx
push dword [edi + 0x10]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x358]
mov byte [ebp - 4], 0x1b
push eax
mov edx, str.Failed_to_copy_file_to
lea ecx, [ebp - 0x38c]
call fcn.004142c0
add esp, 4
mov edi, eax
mov byte [ebp - 4], 0x1c
mov edx, dword [edi + 0x14]
mov eax, edx
mov ecx, dword [edi + 0x10]
sub eax, ecx
cmp eax, 0xb
jb 0x417f47
lea eax, [ecx + 0xb]
mov dword [edi + 0x10], eax
mov eax, edi
cmp edx, 0xf
jbe 0x417f2e
mov eax, dword [edi]
push 0xb
lea esi, [eax + ecx]
push str.._Error:_0x
push esi
call fcn.0042b0c0
add esp, 0xc
mov byte [esi + 0xb], 0
jmp 0x417f66
push 0xb
push str.._Error:_0x
mov byte [ebp - 0x3d8], 0
mov ecx, edi
push dword [ebp - 0x3d8]
push 0xb
call fcn.00409ce0
mov edi, eax
movups xmm0, xmmword [edi]
movups xmmword [ebp - 0x3a4], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x394], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
lea eax, [ebp - 0x3c4]
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0x3a4]
push eax
push dword [ebp - 0x374]
lea ecx, [ebp - 0x370]
call fcn.0041b4f0
lea ecx, [ebp - 0x370]
mov byte [ebp - 4], 0x1e
call fcn.0040fd00
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x35c]
cmp ecx, 0xf
jbe 0x417ffe
mov edx, dword [ebp - 0x370]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x417ff4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x390]
mov dword [ebp - 0x360], 0
mov dword [ebp - 0x35c], 0xf
mov byte [ebp - 0x370], 0
cmp ecx, 0xf
jbe 0x418057
mov edx, dword [ebp - 0x3a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41804d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x378]
cmp ecx, 0xf
jbe 0x418095
mov edx, dword [ebp - 0x38c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41808b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x344]
mov dword [ebp - 0x37c], 0
mov dword [ebp - 0x378], 0xf
mov byte [ebp - 0x38c], 0
cmp ecx, 0xf
jbe 0x4180ee
mov edx, dword [ebp - 0x358]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4180e4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x3b0]
mov dword [ebp - 0x348], 0
mov dword [ebp - 0x344], 0xf
mov byte [ebp - 0x358], 0
cmp ecx, 0xf
jbe 0x418147
mov edx, dword [ebp - 0x3c4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41813d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x264]
cmp ecx, 7
jbe 0x41818b
mov edx, dword [ebp - 0x278]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x418181
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
xor eax, eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x298]
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
cmp ecx, 7
jbe 0x4181ec
mov edx, dword [ebp - 0x2ac]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4181e2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x24c]
cmp ecx, 7
jbe 0x418230
mov edx, dword [ebp - 0x260]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x418226
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
xor eax, eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x280]
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
cmp ecx, 7
jbe 0x4197a3
mov edx, dword [ebp - 0x294]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41828b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
jmp 0x4197a3
cmp dword [edi + 0x14], 7
mov eax, edi
jbe 0x4182a4
mov eax, dword [edi]
push 0
push 0
push 0
push 0
push dword [edi + 0x10]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov esi, eax
lea ecx, [ebp - 0x370]
push 0
push esi
call fcn.00413880
cmp dword [ebp - 0x35c], 0xf
lea ecx, [ebp - 0x370]
mov eax, edi
cmova ecx, dword [ebp - 0x370]
cmp dword [edi + 0x14], 7
jbe 0x4182eb
mov eax, dword [edi]
push 0
push 0
push esi
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push ecx
push dword [edi + 0x10]
push eax
push 0
push 0xfde9
call esi
lea eax, [ebp - 0x370]
mov byte [ebp - 4], 0x1f
push eax
mov edx, str.File_successfully_copied_to
lea ecx, [ebp - 0x38c]
call fcn.004142c0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x20
call fcn.0040fd00
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x378]
cmp ecx, 0xf
jbe 0x41836b
mov edx, dword [ebp - 0x38c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x418361
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x35c]
mov dword [ebp - 0x37c], 0
mov dword [ebp - 0x378], 0xf
mov byte [ebp - 0x38c], 0
cmp ecx, 0xf
jbe 0x4183c4
mov edx, dword [ebp - 0x370]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4183ba
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
cmp dword [ebp - 0x264], 7
lea eax, [ebp - 0x278]
cmova eax, dword [ebp - 0x278]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x41885a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
lea esi, [ebp - 0x17]
mov dword [ebp - 0x33c], ecx
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ecx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
mov eax, dword [ebp - 0x33c]
add cl, cl
sub al, cl
mov ecx, edx
add al, 0x30
mov byte [esi], al
mov eax, edx
mov dword [ebp - 0x33c], eax
test eax, eax
jne 0x418400
push ecx
lea eax, [ebp - 0x17]
push eax
push esi
lea ecx, [ebp - 0x3c4]
call fcn.0041b830
mov byte [ebp - 4], 0x21
mov eax, edi
cmp dword [edi + 0x14], 7
jbe 0x41844e
mov eax, dword [edi]
push 0
push 0
push 0
push 0
push dword [edi + 0x10]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov esi, eax
lea ecx, [ebp - 0x358]
push 0
push esi
call fcn.00413880
cmp dword [ebp - 0x344], 0xf
lea ecx, [ebp - 0x358]
mov eax, edi
cmova ecx, dword [ebp - 0x358]
cmp dword [edi + 0x14], 7
jbe 0x418495
mov eax, dword [edi]
push 0
push 0
push esi
push ecx
push dword [edi + 0x10]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x358]
mov byte [ebp - 4], 0x22
push eax
mov edx, str.Failed_to_verify_file_existence_on
lea ecx, [ebp - 0x38c]
call fcn.004142c0
add esp, 4
mov edi, eax
mov byte [ebp - 4], 0x23
mov edx, dword [edi + 0x14]
mov eax, edx
mov ecx, dword [edi + 0x10]
sub eax, ecx
cmp eax, 0xb
jb 0x418507
lea eax, [ecx + 0xb]
mov dword [edi + 0x10], eax
mov eax, edi
cmp edx, 0xf
jbe 0x4184ee
mov eax, dword [edi]
push 0xb
lea esi, [eax + ecx]
push str.._Error:_0x
push esi
call fcn.0042b0c0
add esp, 0xc
mov byte [esi + 0xb], 0
jmp 0x418526
push 0xb
push str.._Error:_0x
mov byte [ebp - 0x3dc], 0
mov ecx, edi
push dword [ebp - 0x3dc]
push 0xb
call fcn.00409ce0
mov edi, eax
movups xmm0, xmmword [edi]
movups xmmword [ebp - 0x3a4], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x394], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
lea eax, [ebp - 0x3c4]
mov byte [ebp - 4], 0x24
push eax
lea eax, [ebp - 0x3a4]
push eax
push dword [ebp - 0x374]
lea ecx, [ebp - 0x370]
call fcn.0041b4f0
lea ecx, [ebp - 0x370]
mov byte [ebp - 4], 0x25
call fcn.0040fd00
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x35c]
cmp ecx, 0xf
jbe 0x4185be
mov edx, dword [ebp - 0x370]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4185b4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x390]
mov dword [ebp - 0x360], 0
mov dword [ebp - 0x35c], 0xf
mov byte [ebp - 0x370], 0
cmp ecx, 0xf
jbe 0x418617
mov edx, dword [ebp - 0x3a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41860d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x378]
cmp ecx, 0xf
jbe 0x418655
mov edx, dword [ebp - 0x38c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41864b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x344]
mov dword [ebp - 0x37c], 0
mov dword [ebp - 0x378], 0xf
mov byte [ebp - 0x38c], 0
cmp ecx, 0xf
jbe 0x4186ae
mov edx, dword [ebp - 0x358]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4186a4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x3b0]
mov dword [ebp - 0x348], 0
mov dword [ebp - 0x344], 0xf
mov byte [ebp - 0x358], 0
cmp ecx, 0xf
jbe 0x418707
mov edx, dword [ebp - 0x3c4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4186fd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x264]
cmp ecx, 7
jbe 0x41874b
mov edx, dword [ebp - 0x278]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x418741
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
xor eax, eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x298]
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
cmp ecx, 7
jbe 0x4187ac
mov edx, dword [ebp - 0x2ac]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4187a2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x24c]
cmp ecx, 7
jbe 0x4187f0
mov edx, dword [ebp - 0x260]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4187e6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
xor eax, eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x280]
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
cmp ecx, 7
jbe 0x4197a3
mov edx, dword [ebp - 0x294]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41884b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
jmp 0x4197a3
cmp dword [edi + 0x14], 7
mov eax, edi
jbe 0x418864
mov eax, dword [edi]
push 0
push 0
push 0
push 0
push dword [edi + 0x10]
push eax
push 0
push 0xfde9
call esi
mov esi, eax
lea ecx, [ebp - 0x370]
push 0
push esi
call fcn.00413880
cmp dword [ebp - 0x35c], 0xf
lea ecx, [ebp - 0x370]
mov eax, edi
cmova ecx, dword [ebp - 0x370]
cmp dword [edi + 0x14], 7
jbe 0x4188a7
mov eax, dword [edi]
push 0
push 0
push esi
push ecx
push dword [edi + 0x10]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x370]
mov byte [ebp - 4], 0x26
push eax
mov edx, str.File_existence_verified_on
lea ecx, [ebp - 0x38c]
call fcn.004142c0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x27
call fcn.0040fd00
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x378]
cmp ecx, 0xf
jbe 0x418925
mov edx, dword [ebp - 0x38c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41891b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x35c]
mov dword [ebp - 0x37c], 0
mov dword [ebp - 0x378], 0xf
mov byte [ebp - 0x38c], 0
cmp ecx, 0xf
jbe 0x41897e
mov edx, dword [ebp - 0x370]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x418974
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
cmp dword [ebp - 0x280], 7
lea eax, [ebp - 0x294]
push 0xf003f
cmova eax, dword [ebp - 0x294]
push 0
push eax
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov edi, eax
mov dword [ebp - 0x27c], edi
test edi, edi
jne 0x418de2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
lea esi, [ebp - 0x17]
mov dword [ebp - 0x33c], ecx
mov eax, 0xcccccccd
dec esi
mul ecx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
mov eax, dword [ebp - 0x33c]
add cl, cl
sub al, cl
mov ecx, edx
add al, 0x30
mov byte [esi], al
mov eax, edx
mov dword [ebp - 0x33c], eax
test eax, eax
jne 0x4189c1
push ecx
lea eax, [ebp - 0x17]
push eax
push esi
lea ecx, [ebp - 0x3c4]
call fcn.0041b830
mov esi, dword [ebp - 0x340]
or esi, 0x3000
mov dword [ebp - 0x340], esi
lea edx, [ebp - 0x294]
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x358]
call fcn.00415730
push eax
mov edx, str.Failed_to_connect_to_SCM_on
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x38c]
call fcn.004142c0
add esp, 4
mov edi, eax
mov byte [ebp - 4], 0x2a
mov edx, dword [edi + 0x14]
mov eax, edx
mov ecx, dword [edi + 0x10]
sub eax, ecx
cmp eax, 0xb
jb 0x418a83
lea eax, [ecx + 0xb]
mov dword [edi + 0x10], eax
mov eax, edi
cmp edx, 0xf
jbe 0x418a64
mov eax, dword [edi]
push 0xb
lea esi, [eax + ecx]
push str.._Error:_0x
push esi
call fcn.0042b0c0
mov byte [esi + 0xb], 0
add esp, 0xc
mov esi, dword [ebp - 0x340]
jmp 0x418aa2
push 0xb
push str.._Error:_0x
mov byte [ebp - 0x3e0], 0
mov ecx, edi
push dword [ebp - 0x3e0]
push 0xb
call fcn.00409ce0
mov edi, eax
movups xmm0, xmmword [edi]
or esi, 1
movups xmmword [ebp - 0x3a4], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x394], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
lea eax, [ebp - 0x3c4]
mov byte [ebp - 4], 0x2b
push eax
lea eax, [ebp - 0x3a4]
push eax
push dword [ebp - 0x374]
lea ecx, [ebp - 0x370]
call fcn.0041b4f0
or esi, 2
mov dword [ebp - 0x340], esi
lea ecx, [ebp - 0x370]
mov byte [ebp - 4], 0x2c
call fcn.0040fd00
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x35c]
cmp ecx, 0xf
jbe 0x418b46
mov edx, dword [ebp - 0x370]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x418b3c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x390]
mov dword [ebp - 0x360], 0
mov dword [ebp - 0x35c], 0xf
mov byte [ebp - 0x370], 0
cmp ecx, 0xf
jbe 0x418b9f
mov edx, dword [ebp - 0x3a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x418b95
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x378]
cmp ecx, 0xf
jbe 0x418bdd
mov edx, dword [ebp - 0x38c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x418bd3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x344]
mov dword [ebp - 0x37c], 0
mov dword [ebp - 0x378], 0xf
mov byte [ebp - 0x38c], 0
cmp ecx, 0xf
jbe 0x418c36
mov edx, dword [ebp - 0x358]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x418c2c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x3b0]
mov dword [ebp - 0x348], 0
mov dword [ebp - 0x344], 0xf
mov byte [ebp - 0x358], 0
cmp ecx, 0xf
jbe 0x418c8f
mov edx, dword [ebp - 0x3c4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x418c85
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x264]
cmp ecx, 7
jbe 0x418cd3
mov edx, dword [ebp - 0x278]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x418cc9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
xor eax, eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x298]
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
cmp ecx, 7
jbe 0x418d34
mov edx, dword [ebp - 0x2ac]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x418d2a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x24c]
cmp ecx, 7
jbe 0x418d78
mov edx, dword [ebp - 0x260]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x418d6e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
xor eax, eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x280]
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
cmp ecx, 7
jbe 0x4197a3
mov edx, dword [ebp - 0x294]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x418dd3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
jmp 0x4197a3
call fcn.00427d5d
push 0
push 0x989680
push edx
push eax
call fcn.0044aa50
push 0xb0
mov dword [ebp - 0x318], eax
lea eax, [ebp - 0xf8]
push 0
push eax
mov dword [ebp - 0x314], edx
call fcn.0042b650
add esp, 0xc
mov dword [ebp - 0xf8], 0x4575b4
lea ecx, [ebp - 0x90]
mov dword [ebp - 0xe8], 0x457b9c
call fcn.0041a5e0
mov byte [ebp - 4], 0x2d
xorps xmm0, xmm0
mov eax, dword [ebp - 0xf8]
mov esi, dword [ebp - 0x340]
or esi, 4
mov dword [ebp - 0x33c], esi
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xf8], vtable.std::basic_istream_wchar_t__struct_std::char_traits_wchar_t__.0
mov eax, dword [ebp - 0xf8]
mov ecx, dword [eax + 4]
push ecx
lea eax, [ecx - 0x18]
mov dword [ebp + ecx - 0xfc], eax
lea eax, [ebp - 0xe0]
push eax
mov eax, dword [ebp - 0xf8]
lea ecx, [ebp - 0xf8]
movlpd qword [ebp - 0xf0], xmm0
add ecx, dword [eax + 4]
call fcn.0041a8b0
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xe8], vtable.std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__.0
mov eax, dword [ebp - 0xe8]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0xec], eax
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xf8], vtable.std::basic_iostream_wchar_t__struct_std::char_traits_wchar_t__.0
mov eax, dword [ebp - 0xf8]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x20]
mov dword [ebp + ecx - 0xfc], eax
mov dword [ebp - 4], 0x32
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xf8], vtable.std::basic_stringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov eax, dword [ebp - 0xf8]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0xfc], eax
lea ecx, [ebp - 0xe0]
call fcn.0041a650
mov dword [ebp - 0xe0], vtable.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
lea eax, [ebp - 0x318]
mov byte [ebp - 4], 0x33
push eax
call fcn.00430004
mov dword [ebp - 0x3ec], eax
add esp, 4
mov dword [ebp - 0x3e8], str._Y_m_d_H_M_S
mov eax, str._Y_m_d_H_M_S
mov dword [ebp - 0x3e4], str._Y_m_d_H_M_S
nop
add eax, 2
cmp word [eax], 0
jne 0x418f70
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0x3e4], eax
call fcn.0041a990
lea edx, [ebp - 0x3ec]
mov ecx, eax
call fcn.0041ac20
mov byte [ebp - 4], 0x34
xor eax, eax
xorps xmm0, xmm0
mov dword [ebp - 0x2e4], 0
movups xmmword [ebp - 0x2f4], xmm0
mov word [ebp - 0x2f4], ax
or esi, 0x80
mov eax, dword [ebp - 0xa4]
and al, 0x22
mov dword [ebp - 0x2e0], 7
mov dword [ebp - 0x340], esi
mov dword [ebp - 0x33c], esi
movq qword [ebp - 0x3c], xmm0
cmp al, 2
je 0x41900c
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax]
test ecx, ecx
je 0x41900c
cmp ecx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xd0]
cmovb ecx, dword [ebp - 0xa8]
mov edx, dword [eax]
sub ecx, edx
sar ecx, 1
jmp 0x419041
test byte [ebp - 0xa4], 4
jne 0x41903b
mov eax, dword [ebp - 0xc4]
mov esi, dword [eax]
test esi, esi
je 0x41903b
mov eax, dword [ebp - 0xd4]
mov edx, dword [eax]
mov eax, dword [ebp - 0xb4]
mov ecx, dword [eax]
add ecx, ecx
sub ecx, edx
add ecx, esi
sar ecx, 1
jmp 0x419041
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x419052
push ecx
push edx
lea ecx, [ebp - 0x2f4]
call fcn.00413e70
mov esi, dword [ebp - 0x340]
and esi, 0xffffff7f
mov dword [ebp - 4], 0x33
or esi, 0x40
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x2c4]
push 0x18
xorps xmm0, xmm0
mov dword [ebp - 0x2b4], 0
push str.Remote_Execution_Service
movups xmmword [ebp - 0x2c4], xmm0
mov dword [ebp - 0x2b0], 0
call fcn.004028e0
mov byte [ebp - 4], 0x36
mov eax, 0x7ffffffe
mov ecx, dword [ebp - 0x268]
sub eax, ecx
cmp eax, 1
jb 0x4198a0
cmp dword [ebp - 0x264], 7
lea eax, [ebp - 0x278]
push ecx
cmova eax, dword [ebp - 0x278]
push eax
push 1
push 0x457a6c
push ecx
push dword [ebp - 0x374]
lea ecx, [ebp - 0x370]
call fcn.00402990
or esi, 0x100
push 1
push 0x457a6c
lea ecx, [ebp - 0x370]
mov byte [ebp - 4], 0x37
call fcn.0041a720
mov dword [ebp - 0x2cc], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x2dc], xmm0
mov dword [ebp - 0x2c8], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
or esi, 0x200
mov dword [ebp - 0x340], esi
movups xmmword [ebp - 0x2dc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x2cc], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x35c]
cmp ecx, 7
jbe 0x419199
mov edx, dword [ebp - 0x370]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41918f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
push 0
push 0
push 0
xor eax, eax
mov dword [ebp - 0x360], 0
cmp dword [ebp - 0x2e0], 7
push 0
push dword [ebp - 0x2e4]
mov word [ebp - 0x370], ax
lea eax, [ebp - 0x2f4]
cmova eax, dword [ebp - 0x2f4]
push eax
push 0
push 0xfde9
mov dword [ebp - 0x35c], 7
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov esi, eax
lea ecx, [ebp - 0x358]
push 0
push esi
call fcn.00413880
or dword [ebp - 0x340], 0x400
lea ecx, [ebp - 0x358]
cmp dword [ebp - 0x344], 0xf
lea eax, [ebp - 0x2f4]
push 0
cmova ecx, dword [ebp - 0x358]
cmp dword [ebp - 0x2e0], 7
push 0
cmova eax, dword [ebp - 0x2f4]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push ecx
push dword [ebp - 0x2e4]
push eax
push 0
push 0xfde9
call esi
lea eax, [ebp - 0x358]
mov byte [ebp - 4], 0x3a
push eax
mov edx, str.Attempting_to_create_service_with_name:
lea ecx, [ebp - 0x38c]
call fcn.004142c0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x3b
call fcn.0040fd00
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x378]
cmp ecx, 0xf
jbe 0x4192ab
mov edx, dword [ebp - 0x38c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4192a1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x344]
mov dword [ebp - 0x37c], 0
mov dword [ebp - 0x378], 0xf
mov byte [ebp - 0x38c], 0
cmp ecx, 0xf
jbe 0x419304
mov edx, dword [ebp - 0x358]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4192fa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
cmp dword [ebp - 0x2c8], 7
lea eax, [ebp - 0x2dc]
push 0
cmova eax, dword [ebp - 0x2dc]
push 0
push 0
push 0
push dword [ebp - 0x2cc]
push eax
push 0
push 0xfde9
call esi
mov esi, eax
lea ecx, [ebp - 0x358]
push 0
push esi
call fcn.00413880
or dword [ebp - 0x340], 0x800
lea ecx, [ebp - 0x358]
cmp dword [ebp - 0x344], 0xf
lea eax, [ebp - 0x2dc]
push 0
cmova ecx, dword [ebp - 0x358]
cmp dword [ebp - 0x2c8], 7
push 0
cmova eax, dword [ebp - 0x2dc]
push esi
push ecx
push dword [ebp - 0x2cc]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x358]
mov byte [ebp - 4], 0x3c
push eax
mov edx, str.Service_binary_path:
lea ecx, [ebp - 0x38c]
call fcn.004142c0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x3d
call fcn.0040fd00
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x378]
cmp ecx, 0xf
jbe 0x4193f3
mov edx, dword [ebp - 0x38c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4193e9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x344]
mov dword [ebp - 0x37c], 0
mov dword [ebp - 0x378], 0xf
mov byte [ebp - 0x38c], 0
cmp ecx, 0xf
jbe 0x41944c
mov edx, dword [ebp - 0x358]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419442
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419891
push ecx
push edx
call fcn.0042980f
add esp, 8
cmp dword [ebp - 0x2c8], 7
lea edx, [ebp - 0x2dc]
push 0
cmova edx, dword [ebp - 0x2dc]
lea ecx, [ebp - 0x2c4]
cmp dword [ebp - 0x2b0], 7
lea eax, [ebp - 0x2f4]
push 0
cmova ecx, dword [ebp - 0x2c4]
cmp dword [ebp - 0x2e0], 7
push 0
cmova eax, dword [ebp - 0x2f4]
push 0
push 0
push edx
push 1
push 3
push 0x10
push 0xf01ff
push ecx
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_CreateServiceW]
mov edi, eax
test edi, edi
jne 0x41956e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x2c]
call fcn.004156c0
mov esi, eax
lea edx, [ebp - 0x294]
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x358]
call fcn.00415730
push eax
mov edx, str.Failed_to_create_service_on
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x38c]
call fcn.004142c0
add esp, 4
push str.._Error:_0x
mov edx, eax
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x3a4]
call fcn.0040c870
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x3c4]
call fcn.0041a970
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x42
call fcn.0040fd00
lea ecx, [ebp - 0x3c4]
call fcn.00408f00
lea ecx, [ebp - 0x3a4]
call fcn.00408f00
lea ecx, [ebp - 0x38c]
call fcn.00408f00
lea ecx, [ebp - 0x358]
call fcn.00408f00
lea ecx, [ebp - 0x2c]
call fcn.00408f00
push dword [ebp - 0x27c]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x419747
push 0
push 0
push edi
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
test eax, eax
je 0x4195c7
lea edx, [ebp - 0x294]
lea ecx, [ebp - 0x3a4]
call fcn.00415730
push eax
mov edx, str.Service_start_initiated_on
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x3c4]
call fcn.004142c0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x44
call fcn.0040fd00
lea ecx, [ebp - 0x3c4]
call fcn.00408f00
lea ecx, [ebp - 0x3a4]
jmp 0x4196e3
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x41d
jne 0x419642
lea edx, [ebp - 0x294]
lea ecx, [ebp - 0x38c]
call fcn.00415730
push eax
mov edx, str.Service_start_initiated_on
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x3a4]
call fcn.004142c0
add esp, 4
push str.__with_timeout__continuing_
mov edx, eax
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x3c4]
call fcn.0040c870
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x47
call fcn.0040fd00
lea ecx, [ebp - 0x3c4]
call fcn.00408f00
lea ecx, [ebp - 0x3a4]
call fcn.00408f00
lea ecx, [ebp - 0x38c]
jmp 0x4196e3
mov edx, eax
lea ecx, [ebp - 0x2c]
call fcn.004156c0
mov esi, eax
lea edx, [ebp - 0x294]
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x358]
call fcn.00415730
push eax
mov edx, str.Note:_Service_start_on
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x38c]
call fcn.004142c0
add esp, 4
push str._returned_error:_0x
mov edx, eax
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x3a4]
call fcn.0040c870
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x3c4]
call fcn.0041a970
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x4c
call fcn.0040fd00
lea ecx, [ebp - 0x3c4]
call fcn.00408f00
lea ecx, [ebp - 0x3a4]
call fcn.00408f00
lea ecx, [ebp - 0x38c]
call fcn.00408f00
lea ecx, [ebp - 0x358]
call fcn.00408f00
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x39
call fcn.00408f00
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push edi
call esi
push dword [ebp - 0x27c]
call esi
lea edx, [ebp - 0x294]
lea ecx, [ebp - 0x3a4]
call fcn.00415730
push eax
mov edx, str.Finished_processing
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x3c4]
call fcn.004142c0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x4e
call fcn.0040fd00
lea ecx, [ebp - 0x3c4]
call fcn.00408f00
lea ecx, [ebp - 0x3a4]
call fcn.00408f00
lea ecx, [ebp - 0x2dc]
call fcn.004026d0
lea ecx, [ebp - 0x2c4]
call fcn.004026d0
lea ecx, [ebp - 0x2f4]
call fcn.004026d0
lea ecx, [ebp - 0xf8]
call fcn.004198b0
lea ecx, [ebp - 0x278]
call fcn.004026d0
lea ecx, [ebp - 0x2ac]
call fcn.004026d0
lea ecx, [ebp - 0x260]
call fcn.004026d0
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 3
call fcn.004026d0
mov edi, dword [ebp - 0x3ac]
add edi, 0x18
mov dword [ebp - 0x3ac], edi
cmp edi, dword [ebp - 0x374]
jne 0x417102
push 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x360], 0
push str.Deployment_process_completed
lea ecx, [ebp - 0x370]
mov dword [ebp - 0x35c], 0
movups xmmword [ebp - 0x370], xmm0
call fcn.00409b20
lea ecx, [ebp - 0x370]
mov byte [ebp - 4], 0x4f
call fcn.0040fd00
mov ecx, dword [ebp - 0x35c]
cmp ecx, 0xf
jbe 0x419833
mov edx, dword [ebp - 0x370]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419829
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41989b
push ecx
push edx
call fcn.0042980f
add esp, 8
mov ecx, dword [ebp - 0x2f8]
cmp ecx, 7
jbe 0x41986f
mov edx, dword [ebp - 0x30c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x419865
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4198a5
push ecx
push edx
call fcn.0042980f
add esp, 8
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004297d1
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10
call fcn.0042e68f
call fcn.0042e68f
call fcn.0042e68f
call fcn.00402150
call fcn.0042e68f
int3